==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  AC 80 00 00 00 00 00 00  00 00 00 00 36 86 00 00  D0 81 00 00 7C 81 00 00  00 00 00 00 00 00 00 00  ¼Ç..........6å..╨ü..|ü..........
00000020  A0 86 00 00 A0 82 00 00  8C 80 00 00 00 00 00 00  00 00 00 00 26 87 00 00  B0 81 00 00 A0 81 00 00  áå..áé..îÇ..........&ç..░ü..áü..
00000040  00 00 00 00 00 00 00 00  76 87 00 00 C4 82 00 00  98 81 00 00 00 00 00 00  00 00 00 00 94 87 00 00  ........vç..─é..ÿü..........öç..
00000060  BC 82 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ╝é..............................
00000080  00 00 00 00 00 00 00 00  00 00 00 00 BA 86 00 00  CC 86 00 00 AC 86 00 00  F0 86 00 00 02 87 00 00  ............║å..╠å..¼å..≡å..☻ç..
000000A0  DE 86 00 00 16 87 00 00  00 00 00 00 B4 83 00 00  70 83 00 00 82 83 00 00  8E 83 00 00 4E 83 00 00  ▐å..▬ç......┤â..pâ..éâ..Äâ..Nâ..
000000C0  60 83 00 00 C0 83 00 00  CC 83 00 00 DA 83 00 00  EC 83 00 00 9E 83 00 00  00 84 00 00 1C 84 00 00  `â..└â..╠â..┌â..∞â..₧â...ä..∟ä..
000000E0  32 84 00 00 40 84 00 00  4C 84 00 00 56 84 00 00  66 84 00 00 74 84 00 00  84 84 00 00 92 84 00 00  2ä..@ä..Lä..Vä..fä..tä..ää..Æä..
00000100  A0 84 00 00 0E 84 00 00  14 83 00 00 D0 84 00 00  E2 84 00 00 FA 84 00 00  06 85 00 00 10 85 00 00  áä..♫ä..¶â..╨ä..Γä..·ä..♠à..►à..
00000120  1C 85 00 00 D4 82 00 00  36 85 00 00 4E 85 00 00  68 85 00 00 82 85 00 00  8E 85 00 00 AA 85 00 00  ∟à..╘é..6à..Nà..hà..éà..Äà..¬à..
00000140  C2 85 00 00 DA 85 00 00  E6 85 00 00 F2 85 00 00  06 86 00 00 14 86 00 00  24 86 00 00 36 83 00 00  ┬à..┌à..µà..≥à..♠å..¶å..$å..6â..
00000160  2A 83 00 00 E6 82 00 00  04 83 00 00 F6 82 00 00  B2 84 00 00 C0 84 00 00  00 00 00 00 44 86 00 00  *â..µé..♦â..÷é..▓ä..└ä......Då..
00000180  8A 86 00 00 78 86 00 00  6A 86 00 00 5E 86 00 00  50 86 00 00 00 00 00 00  82 87 00 00 00 00 00 00  èå..xå..jå..^å..På......éç......
000001A0  5C 87 00 00 46 87 00 00  34 87 00 00 00 00 00 00  BA 86 00 00 CC 86 00 00  AC 86 00 00 F0 86 00 00  \ç..Fç..4ç......║å..╠å..¼å..≡å..
000001C0  02 87 00 00 DE 86 00 00  16 87 00 00 00 00 00 00  B4 83 00 00 70 83 00 00  82 83 00 00 8E 83 00 00  ☻ç..▐å..▬ç......┤â..pâ..éâ..Äâ..
000001E0  4E 83 00 00 60 83 00 00  C0 83 00 00 CC 83 00 00  DA 83 00 00 EC 83 00 00  9E 83 00 00 00 84 00 00  Nâ..`â..└â..╠â..┌â..∞â..₧â...ä..
00000200  1C 84 00 00 32 84 00 00  40 84 00 00 4C 84 00 00  56 84 00 00 66 84 00 00  74 84 00 00 84 84 00 00  ∟ä..2ä..@ä..Lä..Vä..fä..tä..ää..
00000220  92 84 00 00 A0 84 00 00  0E 84 00 00 14 83 00 00  D0 84 00 00 E2 84 00 00  FA 84 00 00 06 85 00 00  Æä..áä..♫ä..¶â..╨ä..Γä..·ä..♠à..
00000240  10 85 00 00 1C 85 00 00  D4 82 00 00 36 85 00 00  4E 85 00 00 68 85 00 00  82 85 00 00 8E 85 00 00  ►à..∟à..╘é..6à..Nà..hà..éà..Äà..
00000260  AA 85 00 00 C2 85 00 00  DA 85 00 00 E6 85 00 00  F2 85 00 00 06 86 00 00  14 86 00 00 24 86 00 00  ¬à..┬à..┌à..µà..≥à..♠å..¶å..$å..
00000280  36 83 00 00 2A 83 00 00  E6 82 00 00 04 83 00 00  F6 82 00 00 B2 84 00 00  C0 84 00 00 00 00 00 00  6â..*â..µé..♦â..÷é..▓ä..└ä......
000002A0  44 86 00 00 8A 86 00 00  78 86 00 00 6A 86 00 00  5E 86 00 00 50 86 00 00  00 00 00 00 82 87 00 00  Då..èå..xå..jå..^å..På......éç..
000002C0  00 00 00 00 5C 87 00 00  46 87 00 00 34 87 00 00  00 00 00 00 15 01 47 65  74 50 72 6F 63 41 64 64  ....\ç..Fç..4ç......§☺GetProcAdd
000002E0  72 65 73 73 00 00 92 01  4C 6F 61 64 4C 69 62 72  61 72 79 41 00 00 B0 00  46 72 65 65 4C 69 62 72  ress..Æ☺LoadLibraryA..░.FreeLibr
00000300  61 72 79 00 4D 01 47 65  74 56 65 72 73 69 6F 6E  45 78 41 00 80 02 57 69  64 65 43 68 61 72 54 6F  ary.M☺GetVersionExA.Ç☻WideCharTo
00000320  4D 75 6C 74 69 42 79 74  65 00 B5 02 6C 73 74 72  6C 65 6E 57 00 00 31 01  47 65 74 53 79 73 74 65  MultiByte.╡☻lstrlenW..1☺GetSyste
00000340  6D 44 65 66 61 75 6C 74  4C 43 49 44 00 00 84 01  49 73 42 61 64 53 74 72  69 6E 67 50 74 72 41 00  mDefaultLCID..ä☺IsBadStringPtrA.
00000360  83 01 49 73 42 61 64 52  65 61 64 50 74 72 00 00  85 01 49 73 42 61 64 53  74 72 69 6E 67 50 74 72  â☺IsBadReadPtr..à☺IsBadStringPtr
00000380  57 00 AE 02 6C 73 74 72  63 70 79 41 00 00 29 02  53 65 74 45 72 72 6F 72  4D 6F 64 65 00 00 FD 00  W.«☻lstrcpyA..)☻SetErrorMode..².
000003A0  47 65 74 4D 6F 64 75 6C  65 46 69 6C 65 4E 61 6D  65 41 00 00 B4 02 6C 73  74 72 6C 65 6E 41 00 00  GetModuleFileNameA..┤☻lstrlenA..
000003C0  9C 01 4C 6F 63 61 6C 46  72 65 65 00 98 01 4C 6F  63 61 6C 41 6C 6C 6F 63  00 00 C2 00 47 65 74 43  £☺LocalFree.ÿ☺LocalAlloc..┬.GetC
000003E0  6F 6D 6D 61 6E 64 4C 69  6E 65 41 00 FF 00 47 65  74 4D 6F 64 75 6C 65 48  61 6E 64 6C 65 41 00 00  ommandLineA. .GetModuleHandleA..
00000400  4C 01 47 65 74 56 65 72  73 69 6F 6E 00 00 77 00  45 78 69 74 50 72 6F 63  65 73 73 00 D6 00 47 65  L☺GetVersion..w.ExitProcess.╓.Ge
00000420  74 43 75 72 72 65 6E 74  54 68 72 65 61 64 49 64  00 00 5F 02 54 6C 73 53  65 74 56 61 6C 75 65 00  tCurrentThreadId.._☻TlsSetValue.
00000440  5A 02 54 6C 73 41 6C 6C  6F 63 00 00 5C 02 54 6C  73 46 72 65 65 00 34 02  53 65 74 4C 61 73 74 45  Z☻TlsAlloc..\☻TlsFree.4☻SetLastE
00000460  72 72 6F 72 00 00 5E 02  54 6C 73 47 65 74 56 61  6C 75 65 00 F5 00 47 65  74 4C 61 73 74 45 72 72  rror..^☻TlsGetValue.⌡.GetLastErr
00000480  6F 72 00 00 6E 01 48 65  61 70 43 72 65 61 74 65  00 00 6F 01 48 65 61 70  44 65 73 74 72 6F 79 00  or..n☺HeapCreate..o☺HeapDestroy.
000004A0  32 02 53 65 74 48 61 6E  64 6C 65 43 6F 75 6E 74  00 00 ED 00 47 65 74 46  69 6C 65 54 79 70 65 00  2☻SetHandleCount..φ.GetFileType.
000004C0  2C 01 47 65 74 53 74 64  48 61 6E 64 6C 65 00 00  2A 01 47 65 74 53 74 61  72 74 75 70 49 6E 66 6F  ,☺GetStdHandle..*☺GetStartupInfo
000004E0  41 00 59 00 44 65 6C 65  74 65 43 72 69 74 69 63  61 6C 53 65 63 74 69 6F  6E 00 BB 00 47 65 74 43  A.Y.DeleteCriticalSection.╗.GetC
00000500  50 49 6E 66 6F 00 B5 00  47 65 74 41 43 50 00 00  08 01 47 65 74 4F 45 4D  43 50 00 00 AD 00 46 72  PInfo.╡.GetACP..◘☺GetOEMCP..¡.Fr
00000520  65 65 45 6E 76 69 72 6F  6E 6D 65 6E 74 53 74 72  69 6E 67 73 41 00 E0 00  47 65 74 45 6E 76 69 72  eeEnvironmentStringsA.α.GetEnvir
00000540  6F 6E 6D 65 6E 74 53 74  72 69 6E 67 73 00 AE 00  46 72 65 65 45 6E 76 69  72 6F 6E 6D 65 6E 74 53  onmentStrings.«.FreeEnvironmentS
00000560  74 72 69 6E 67 73 57 00  E2 00 47 65 74 45 6E 76  69 72 6F 6E 6D 65 6E 74  53 74 72 69 6E 67 73 57  tringsW.Γ.GetEnvironmentStringsW
00000580  00 00 8B 02 57 72 69 74  65 46 69 6C 65 00 79 01  49 6E 69 74 69 61 6C 69  7A 65 43 72 69 74 69 63  ..ï☻WriteFile.y☺InitializeCritic
000005A0  61 6C 53 65 63 74 69 6F  6E 00 64 00 45 6E 74 65  72 43 72 69 74 69 63 61  6C 53 65 63 74 69 6F 6E  alSection.d.EnterCriticalSection
000005C0  00 00 91 01 4C 65 61 76  65 43 72 69 74 69 63 61  6C 53 65 63 74 69 6F 6E  00 00 6C 01 48 65 61 70  ..æ☺LeaveCriticalSection..l☺Heap
000005E0  41 6C 6C 6F 63 00 70 01  48 65 61 70 46 72 65 65  00 00 A5 00 46 6C 75 73  68 46 69 6C 65 42 75 66  Alloc.p☺HeapFree..Ñ.FlushFileBuf
00000600  66 65 72 73 00 00 25 00  43 6C 6F 73 65 48 61 6E  64 6C 65 00 3D 02 53 65  74 53 74 64 48 61 6E 64  fers..%.CloseHandle.=☻SetStdHand
00000620  6C 65 00 00 2F 02 53 65  74 46 69 6C 65 50 6F 69  6E 74 65 72 00 00 4B 45  52 4E 45 4C 33 32 2E 64  le../☻SetFilePointer..KERNEL32.d
00000640  6C 6C 00 00 53 02 77 73  70 72 69 6E 74 66 41 00  7F 01 4C 6F 61 64 53 74  72 69 6E 67 41 00 54 02  ll..S☻wsprintfA.⌂☺LoadStringA.T☻
00000660  77 73 70 72 69 6E 74 66  57 00 80 01 4C 6F 61 64  53 74 72 69 6E 67 57 00  00 01 47 65 74 4B 65 79  wsprintfW.Ç☺LoadStringW..☺GetKey
00000680  62 6F 61 72 64 54 79 70  65 00 90 01 4D 65 73 73  61 67 65 42 6F 78 49 6E  64 69 72 65 63 74 41 00  boardType.É☺MessageBoxIndirectA.
000006A0  55 53 45 52 33 32 2E 64  6C 6C 00 00 96 00 52 65  67 43 6C 6F 73 65 4B 65  79 00 C1 00 52 65 67 53  USER32.dll..û.RegCloseKey.┴.RegS
000006C0  65 74 56 61 6C 75 65 45  78 41 00 00 9A 00 52 65  67 43 72 65 61 74 65 4B  65 79 45 78 41 00 C2 00  etValueExA..Ü.RegCreateKeyExA.┬.
000006E0  52 65 67 53 65 74 56 61  6C 75 65 45 78 57 00 00  9B 00 52 65 67 43 72 65  61 74 65 4B 65 79 45 78  RegSetValueExW..¢.RegCreateKeyEx
00000700  57 00 B5 00 52 65 67 51  75 65 72 79 56 61 6C 75  65 45 78 41 00 00 AD 00  52 65 67 4F 70 65 6E 4B  W.╡.RegQueryValueExA..¡.RegOpenK
00000720  65 79 45 78 41 00 41 44  56 41 50 49 33 32 2E 64  6C 6C 00 00 0A 00 56 65  72 51 75 65 72 79 56 61  eyExA.ADVAPI32.dll..◙.VerQueryVa
00000740  6C 75 65 41 00 00 00 00  47 65 74 46 69 6C 65 56  65 72 73 69 6F 6E 49 6E  66 6F 41 00 01 00 47 65  lueA....GetFileVersionInfoA.☺.Ge
00000760  74 46 69 6C 65 56 65 72  73 69 6F 6E 49 6E 66 6F  53 69 7A 65 41 00 56 45  52 53 49 4F 4E 2E 64 6C  tFileVersionInfoSizeA.VERSION.dl
00000780  6C 00 97 00 53 74 72 69  6E 67 46 72 6F 6D 47 55  49 44 32 00 6F 6C 65 33  32 2E 64 6C 6C 00 00 00  l.ù.StringFromGUID2.ole32.dll...
000007A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000007C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000007E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................