==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  50 60 00 00 00 00 00 00  00 00 00 00 AE 61 00 00  D4 60 00 00 68 60 00 00  00 00 00 00 00 00 00 00  P`..........«a..╘`..h`..........
00000020  48 63 00 00 EC 60 00 00  CC 60 00 00 00 00 00 00  00 00 00 00 64 63 00 00  50 61 00 00 00 00 00 00  Hc..∞`..╠`..........dc..Pa......
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  66 61 00 00 78 61 00 00  8A 61 00 00 9E 61 00 00  ................fa..xa..èa..₧a..
00000060  58 61 00 00 00 00 00 00  D2 61 00 00 BC 61 00 00  E0 61 00 00 F2 61 00 00  FE 61 00 00 10 62 00 00  Xa......╥a..╝a..αa..≥a..■a..►b..
00000080  20 62 00 00 36 62 00 00  46 62 00 00 5A 62 00 00  72 62 00 00 84 62 00 00  92 62 00 00 A0 62 00 00   b..6b..Fb..Zb..rb..äb..Æb..áb..
000000A0  AE 62 00 00 BE 62 00 00  C8 62 00 00 D4 62 00 00  E0 62 00 00 F0 62 00 00  FE 62 00 00 10 63 00 00  «b..╛b..╚b..╘b..αb..≡b..■b..►c..
000000C0  1C 63 00 00 32 63 00 00  00 00 00 00 56 63 00 00  00 00 00 00 66 61 00 00  78 61 00 00 8A 61 00 00  ∟c..2c......Vc......fa..xa..èa..
000000E0  9E 61 00 00 58 61 00 00  00 00 00 00 D2 61 00 00  BC 61 00 00 E0 61 00 00  F2 61 00 00 FE 61 00 00  ₧a..Xa......╥a..╝a..αa..≥a..■a..
00000100  10 62 00 00 20 62 00 00  36 62 00 00 46 62 00 00  5A 62 00 00 72 62 00 00  84 62 00 00 92 62 00 00  ►b.. b..6b..Fb..Zb..rb..äb..Æb..
00000120  A0 62 00 00 AE 62 00 00  BE 62 00 00 C8 62 00 00  D4 62 00 00 E0 62 00 00  F0 62 00 00 FE 62 00 00  áb..«b..╛b..╚b..╘b..αb..≡b..■b..
00000140  10 63 00 00 1C 63 00 00  32 63 00 00 00 00 00 00  56 63 00 00 00 00 00 00  B3 00 52 65 67 43 6C 6F  ►c..∟c..2c......Vc......│.RegClo
00000160  73 65 4B 65 79 00 DB 00  52 65 67 53 65 74 56 61  6C 75 65 45 78 41 00 00  B7 00 52 65 67 43 72 65  seKey.█.RegSetValueExA..╖.RegCre
00000180  61 74 65 4B 65 79 45 78  41 00 D0 00 52 65 67 51  75 65 72 79 56 61 6C 75  65 45 78 41 00 00 CA 00  ateKeyExA.╨.RegQueryValueExA..╩.
000001A0  52 65 67 4F 70 65 6E 4B  65 79 45 78 41 00 41 44  56 41 50 49 33 32 2E 64  6C 6C 00 00 EB 00 47 65  RegOpenKeyExA.ADVAPI32.dll..δ.Ge
000001C0  74 4D 6F 64 75 6C 65 46  69 6C 65 4E 61 6D 65 41  00 00 8F 00 46 72 65 65  4C 69 62 72 61 72 79 00  tModuleFileNameA..Å.FreeLibrary.
000001E0  01 01 47 65 74 50 72 6F  63 41 64 64 72 65 73 73  00 00 77 01 4C 6F 63 61  6C 46 72 65 65 00 8A 00  ☺☺GetProcAddress..w☺LocalFree.è.
00000200  46 6F 72 6D 61 74 4D 65  73 73 61 67 65 41 00 00  E3 00 47 65 74 4C 61 73  74 45 72 72 6F 72 00 00  FormatMessageA..π.GetLastError..
00000220  95 01 4F 75 74 70 75 74  44 65 62 75 67 53 74 72  69 6E 67 41 00 00 6D 01  4C 6F 61 64 4C 69 62 72  ò☺OutputDebugStringA..m☺LoadLibr
00000240  61 72 79 41 00 00 ED 00  47 65 74 4D 6F 64 75 6C  65 48 61 6E 64 6C 65 41  00 00 D2 00 47 65 74 45  aryA..φ.GetModuleHandleA..╥.GetE
00000260  6E 76 69 72 6F 6E 6D 65  6E 74 53 74 72 69 6E 67  73 00 A1 00 47 65 74 43  6F 6D 6D 61 6E 64 4C 69  nvironmentStrings.í.GetCommandLi
00000280  6E 65 41 00 32 01 47 65  74 56 65 72 73 69 6F 6E  00 00 64 00 45 78 69 74  50 72 6F 63 65 73 73 00  neA.2☺GetVersion..d.ExitProcess.
000002A0  26 02 56 69 72 74 75 61  6C 46 72 65 65 00 24 02  56 69 72 74 75 61 6C 41  6C 6C 6F 63 00 00 94 00  &☻VirtualFree.$☻VirtualAlloc..ö.
000002C0  47 65 74 41 43 50 00 00  F8 00 47 65 74 4F 45 4D  43 50 00 00 9A 00 47 65  74 43 50 49 6E 66 6F 00  GetACP..°.GetOEMCP..Ü.GetCPInfo.
000002E0  13 01 47 65 74 53 74 64  48 61 6E 64 6C 65 00 00  DE 00 47 65 74 46 69 6C  65 54 79 70 65 00 11 01  ‼☺GetStdHandle..▐.GetFileType.◄☺
00000300  47 65 74 53 74 61 72 74  75 70 49 6E 66 6F 41 00  42 02 57 72 69 74 65 46  69 6C 65 00 88 01 4D 75  GetStartupInfoA.B☻WriteFile.ê☺Mu
00000320  6C 74 69 42 79 74 65 54  6F 57 69 64 65 43 68 61  72 00 35 02 57 69 64 65  43 68 61 72 54 6F 4D 75  ltiByteToWideChar.5☻WideCharToMu
00000340  6C 74 69 42 79 74 65 00  4B 45 52 4E 45 4C 33 32  2E 64 6C 6C 00 00 86 01  4D 65 73 73 61 67 65 42  ltiByte.KERNEL32.dll..å☺MessageB
00000360  6F 78 41 00 55 53 45 52  33 32 2E 64 6C 6C 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  oxA.USER32.dll..................
00000380  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000003A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000003C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000003E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................