==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  A4 B0 00 00 00 00 00 00  00 00 00 00 B0 B3 00 00  04 B2 00 00 88 B1 00 00  00 00 00 00 00 00 00 00  ñ░..........░│..♦▓..ê▒..........
00000020  EA B4 00 00 E8 B2 00 00  9C B0 00 00 00 00 00 00  00 00 00 00 06 B5 00 00  FC B1 00 00 78 B0 00 00  Ω┤..Φ▓..£░..........♠╡..ⁿ▒..x░..
00000040  00 00 00 00 00 00 00 00  66 B5 00 00 D8 B1 00 00  90 B0 00 00 00 00 00 00  00 00 00 00 AC B5 00 00  ........f╡..╪▒..É░..........¼╡..
00000060  F0 B1 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  10 B5 00 00 1E B5 00 00  ≡▒......................►╡..▲╡..
00000080  30 B5 00 00 44 B5 00 00  54 B5 00 00 00 00 00 00  90 B5 00 00 74 B5 00 00  00 00 00 00 F6 B4 00 00  0╡..D╡..T╡......É╡..t╡......÷┤..
000000A0  00 00 00 00 A4 B3 00 00  82 B3 00 00 6A B3 00 00  4E B3 00 00 98 B3 00 00  32 B6 00 00 AC B6 00 00  ....ñ│..é│..j│..N│..ÿ│..2╢..¼╢..
000000C0  98 B6 00 00 12 B9 00 00  02 B9 00 00 F4 B8 00 00  E0 B8 00 00 D4 B8 00 00  C6 B8 00 00 B6 B8 00 00  ÿ╢..↕╣..☻╣..⌠╕..α╕..╘╕..╞╕..╢╕..
000000E0  9E B8 00 00 86 B8 00 00  6A B8 00 00 5A B8 00 00  4A B8 00 00 3A B8 00 00  1C B8 00 00 0A B8 00 00  ₧╕..å╕..j╕..Z╕..J╕..:╕..∟╕..◙╕..
00000100  BA B5 00 00 C6 B5 00 00  D8 B5 00 00 EA B5 00 00  FE B5 00 00 0C B6 00 00  18 B6 00 00 26 B6 00 00  ║╡..╞╡..╪╡..Ω╡..■╡..♀╢..↑╢..&╢..
00000120  38 B3 00 00 3C B6 00 00  4C B6 00 00 5A B6 00 00  6A B6 00 00 76 B6 00 00  84 B6 00 00 EC B7 00 00  8│..<╢..L╢..Z╢..j╢..v╢..ä╢..∞╖..
00000140  F8 B7 00 00 BA B6 00 00  C8 B6 00 00 DA B6 00 00  E8 B6 00 00 F8 B6 00 00  0A B7 00 00 22 B7 00 00  °╖..║╢..╚╢..┌╢..Φ╢..°╢..◙╖.."╖..
00000160  38 B7 00 00 44 B7 00 00  4E B7 00 00 5A B7 00 00  74 B7 00 00 8A B7 00 00  A2 B7 00 00 BC B7 00 00  8╖..D╖..N╖..Z╖..t╖..è╖..ó╖..╝╖..
00000180  D6 B7 00 00 00 00 00 00  BE B3 00 00 D0 B3 00 00  DC B3 00 00 E4 B3 00 00  F4 B3 00 00 06 B4 00 00  ╓╖......╛│..╨│..▄│..Σ│..⌠│..♠┤..
000001A0  14 B4 00 00 26 B4 00 00  34 B4 00 00 4A B4 00 00  5E B4 00 00 DE B4 00 00  D2 B4 00 00 C4 B4 00 00  ¶┤..&┤..4┤..J┤..^┤..▐┤..╥┤..─┤..
000001C0  B8 B4 00 00 A6 B4 00 00  8C B4 00 00 7A B4 00 00  6E B4 00 00 00 00 00 00  10 B5 00 00 1E B5 00 00  ╕┤..ª┤..î┤..z┤..n┤......►╡..▲╡..
000001E0  30 B5 00 00 44 B5 00 00  54 B5 00 00 00 00 00 00  90 B5 00 00 74 B5 00 00  00 00 00 00 F6 B4 00 00  0╡..D╡..T╡......É╡..t╡......÷┤..
00000200  00 00 00 00 A4 B3 00 00  82 B3 00 00 6A B3 00 00  4E B3 00 00 98 B3 00 00  32 B6 00 00 AC B6 00 00  ....ñ│..é│..j│..N│..ÿ│..2╢..¼╢..
00000220  98 B6 00 00 12 B9 00 00  02 B9 00 00 F4 B8 00 00  E0 B8 00 00 D4 B8 00 00  C6 B8 00 00 B6 B8 00 00  ÿ╢..↕╣..☻╣..⌠╕..α╕..╘╕..╞╕..╢╕..
00000240  9E B8 00 00 86 B8 00 00  6A B8 00 00 5A B8 00 00  4A B8 00 00 3A B8 00 00  1C B8 00 00 0A B8 00 00  ₧╕..å╕..j╕..Z╕..J╕..:╕..∟╕..◙╕..
00000260  BA B5 00 00 C6 B5 00 00  D8 B5 00 00 EA B5 00 00  FE B5 00 00 0C B6 00 00  18 B6 00 00 26 B6 00 00  ║╡..╞╡..╪╡..Ω╡..■╡..♀╢..↑╢..&╢..
00000280  38 B3 00 00 3C B6 00 00  4C B6 00 00 5A B6 00 00  6A B6 00 00 76 B6 00 00  84 B6 00 00 EC B7 00 00  8│..<╢..L╢..Z╢..j╢..v╢..ä╢..∞╖..
000002A0  F8 B7 00 00 BA B6 00 00  C8 B6 00 00 DA B6 00 00  E8 B6 00 00 F8 B6 00 00  0A B7 00 00 22 B7 00 00  °╖..║╢..╚╢..┌╢..Φ╢..°╢..◙╖.."╖..
000002C0  38 B7 00 00 44 B7 00 00  4E B7 00 00 5A B7 00 00  74 B7 00 00 8A B7 00 00  A2 B7 00 00 BC B7 00 00  8╖..D╖..N╖..Z╖..t╖..è╖..ó╖..╝╖..
000002E0  D6 B7 00 00 00 00 00 00  BE B3 00 00 D0 B3 00 00  DC B3 00 00 E4 B3 00 00  F4 B3 00 00 06 B4 00 00  ╓╖......╛│..╨│..▄│..Σ│..⌠│..♠┤..
00000300  14 B4 00 00 26 B4 00 00  34 B4 00 00 4A B4 00 00  5E B4 00 00 DE B4 00 00  D2 B4 00 00 C4 B4 00 00  ¶┤..&┤..4┤..J┤..^┤..▐┤..╥┤..─┤..
00000320  B8 B4 00 00 A6 B4 00 00  8C B4 00 00 7A B4 00 00  6E B4 00 00 00 00 00 00  A0 01 4F 75 74 70 75 74  ╕┤..ª┤..î┤..z┤..n┤......á☺Output
00000340  44 65 62 75 67 53 74 72  69 6E 67 41 00 00 FF 00  47 65 74 50 72 69 76 61  74 65 50 72 6F 66 69 6C  DebugStringA.. .GetPrivateProfil
00000360  65 53 74 72 69 6E 67 41  00 00 3C 01 47 65 74 57  69 6E 64 6F 77 73 44 69  72 65 63 74 6F 72 79 41  eStringA..<☺GetWindowsDirectoryA
00000380  00 00 C7 00 47 65 74 43  75 72 72 65 6E 74 54 68  72 65 61 64 49 64 00 00  66 02 6C 73 74 72 63 61  ..╟.GetCurrentThreadId..f☻lstrca
000003A0  74 41 00 00 75 02 6C 73  74 72 6C 65 6E 41 00 00  4B 45 52 4E 45 4C 33 32  2E 64 6C 6C 00 00 8A 00  tA..u☻lstrlenA..KERNEL32.dll..è.
000003C0  44 69 61 6C 6F 67 42 6F  78 50 61 72 61 6D 41 00  B9 01 52 65 6C 65 61 73  65 44 43 00 E6 00 47 65  DialogBoxParamA.╣☺ReleaseDC.µ.Ge
000003E0  74 44 43 00 AB 00 45 6E  61 62 6C 65 57 69 6E 64  6F 77 00 00 04 02 53 65  74 57 69 6E 64 6F 77 4C  tDC.½.EnableWindow..♦☻SetWindowL
00000400  6F 6E 67 41 00 00 EB 00  47 65 74 44 6C 67 49 74  65 6D 00 00 0A 02 53 65  74 57 69 6E 64 6F 77 54  ongA..δ.GetDlgItem..◙☻SetWindowT
00000420  65 78 74 41 00 00 BB 01  52 65 6D 6F 76 65 50 72  6F 70 41 00 2E 02 55 6E  68 6F 6F 6B 57 69 6E 64  extA..╗☺RemovePropA..☻UnhookWind
00000440  6F 77 73 48 6F 6F 6B 45  78 00 0E 02 53 65 74 57  69 6E 64 6F 77 73 48 6F  6F 6B 45 78 41 00 C6 01  owsHookEx.♫☻SetWindowsHookExA.╞☺
00000460  53 65 6E 64 4D 65 73 73  61 67 65 41 00 00 49 02  77 73 70 72 69 6E 74 66  41 00 10 00 43 61 6C 6C  SendMessageA..I☻wsprintfA.►.Call
00000480  4E 65 78 74 48 6F 6F 6B  45 78 00 00 16 00 43 68  61 6E 67 65 44 69 73 70  6C 61 79 53 65 74 74 69  NextHookEx..▬.ChangeDisplaySetti
000004A0  6E 67 73 41 00 00 CD 00  47 65 74 41 63 74 69 76  65 57 69 6E 64 6F 77 00  AD 00 45 6E 64 44 69 61  ngsA..═.GetActiveWindow.¡.EndDia
000004C0  6C 6F 67 00 88 01 4D 65  73 73 61 67 65 42 6F 78  41 00 62 01 4B 69 6C 6C  54 69 6D 65 72 00 FE 01  log.ê☺MessageBoxA.b☺KillTimer.■☺
000004E0  53 65 74 54 69 6D 65 72  00 00 55 53 45 52 33 32  2E 64 6C 6C 00 00 BC 00  47 65 74 44 65 76 69 63  SetTimer..USER32.dll..╝.GetDevic
00000500  65 43 61 70 73 00 47 44  49 33 32 2E 64 6C 6C 00  C2 00 52 65 67 43 6C 6F  73 65 4B 65 79 00 EC 00  eCaps.GDI32.dll.┬.RegCloseKey.∞.
00000520  52 65 67 53 65 74 56 61  6C 75 65 45 78 41 00 00  E1 00 52 65 67 51 75 65  72 79 56 61 6C 75 65 45  RegSetValueExA..ß.RegQueryValueE
00000540  78 41 00 00 D9 00 52 65  67 4F 70 65 6E 4B 65 79  45 78 41 00 C6 00 52 65  67 43 72 65 61 74 65 4B  xA..┘.RegOpenKeyExA.╞.RegCreateK
00000560  65 79 45 78 41 00 41 44  56 41 50 49 33 32 2E 64  6C 6C 00 00 0A 00 44 65  73 74 72 6F 79 50 72 6F  eyExA.ADVAPI32.dll..◙.DestroyPro
00000580  70 65 72 74 79 53 68 65  65 74 50 61 67 65 00 00  02 00 43 72 65 61 74 65  50 72 6F 70 65 72 74 79  pertySheetPage..☻.CreateProperty
000005A0  53 68 65 65 74 50 61 67  65 41 00 00 43 4F 4D 43  54 4C 33 32 2E 64 6C 6C  00 00 C7 01 52 74 6C 55  SheetPageA..COMCTL32.dll..╟☺RtlU
000005C0  6E 77 69 6E 64 00 9F 00  47 65 74 43 6F 6D 6D 61  6E 64 4C 69 6E 65 41 00  03 01 47 65 74 50 72 6F  nwind.ƒ.GetCommandLineA.♥☺GetPro
000005E0  63 41 64 64 72 65 73 73  00 00 EB 00 47 65 74 4D  6F 64 75 6C 65 48 61 6E  64 6C 65 41 00 00 37 01  cAddress..δ.GetModuleHandleA..7☺
00000600  47 65 74 56 65 72 73 69  6F 6E 00 00 59 01 48 65  61 70 46 72 65 65 00 00  22 02 54 6C 73 53 65 74  GetVersion..Y☺HeapFree.."☻TlsSet
00000620  56 61 6C 75 65 00 1F 02  54 6C 73 41 6C 6C 6F 63  00 00 20 02 54 6C 73 46  72 65 65 00 FD 01 53 65  Value.▼☻TlsAlloc.. ☻TlsFree.²☺Se
00000640  74 4C 61 73 74 45 72 72  6F 72 00 00 21 02 54 6C  73 47 65 74 56 61 6C 75  65 00 E1 00 47 65 74 4C  tLastError..!☻TlsGetValue.ß.GetL
00000660  61 73 74 45 72 72 6F 72  00 00 53 01 48 65 61 70  41 6C 6C 6F 63 00 62 00  45 78 69 74 50 72 6F 63  astError..S☺HeapAlloc.b.ExitProc
00000680  65 73 73 00 1D 02 54 65  72 6D 69 6E 61 74 65 50  72 6F 63 65 73 73 00 00  C4 00 47 65 74 43 75 72  ess.↔☻TerminateProcess..─.GetCur
000006A0  72 65 6E 74 50 72 6F 63  65 73 73 00 55 01 48 65  61 70 43 72 65 61 74 65  00 00 57 01 48 65 61 70  rentProcess.U☺HeapCreate..W☺Heap
000006C0  44 65 73 74 72 6F 79 00  FA 01 53 65 74 48 61 6E  64 6C 65 43 6F 75 6E 74  00 00 DC 00 47 65 74 46  Destroy.·☺SetHandleCount..▄.GetF
000006E0  69 6C 65 54 79 70 65 00  16 01 47 65 74 53 74 64  48 61 6E 64 6C 65 00 00  14 01 47 65 74 53 74 61  ileType.▬☺GetStdHandle..¶☺GetSta
00000700  72 74 75 70 49 6E 66 6F  41 00 44 00 44 65 6C 65  74 65 43 72 69 74 69 63  61 6C 53 65 63 74 69 6F  rtupInfoA.D.DeleteCriticalSectio
00000720  6E 00 E9 00 47 65 74 4D  6F 64 75 6C 65 46 69 6C  65 4E 61 6D 65 41 00 00  98 00 47 65 74 43 50 49  n.Θ.GetModuleFileNameA..ÿ.GetCPI
00000740  6E 66 6F 00 92 00 47 65  74 41 43 50 00 00 F6 00  47 65 74 4F 45 4D 43 50  00 00 8B 00 46 72 65 65  nfo.Æ.GetACP..÷.GetOEMCP..ï.Free
00000760  45 6E 76 69 72 6F 6E 6D  65 6E 74 53 74 72 69 6E  67 73 41 00 93 01 4D 75  6C 74 69 42 79 74 65 54  EnvironmentStringsA.ô☺MultiByteT
00000780  6F 57 69 64 65 43 68 61  72 00 D0 00 47 65 74 45  6E 76 69 72 6F 6E 6D 65  6E 74 53 74 72 69 6E 67  oWideChar.╨.GetEnvironmentString
000007A0  73 00 8C 00 46 72 65 65  45 6E 76 69 72 6F 6E 6D  65 6E 74 53 74 72 69 6E  67 73 57 00 D2 00 47 65  s.î.FreeEnvironmentStringsW.╥.Ge
000007C0  74 45 6E 76 69 72 6F 6E  6D 65 6E 74 53 74 72 69  6E 67 73 57 00 00 42 02  57 69 64 65 43 68 61 72  tEnvironmentStringsW..B☻WideChar
000007E0  54 6F 4D 75 6C 74 69 42  79 74 65 00 4F 02 57 72  69 74 65 46 69 6C 65 00  17 01 47 65 74 53 74 72  ToMultiByte.O☻WriteFile.↨☺GetStr
00000800  69 6E 67 54 79 70 65 41  00 00 1A 01 47 65 74 53  74 72 69 6E 67 54 79 70  65 57 00 00 11 02 53 65  ingTypeA..→☺GetStringTypeW..◄☻Se
00000820  74 55 6E 68 61 6E 64 6C  65 64 45 78 63 65 70 74  69 6F 6E 46 69 6C 74 65  72 00 6C 01 49 73 42 61  tUnhandledExceptionFilter.l☺IsBa
00000840  64 52 65 61 64 50 74 72  00 00 6F 01 49 73 42 61  64 57 72 69 74 65 50 74  72 00 69 01 49 73 42 61  dReadPtr..o☺IsBadWritePtr.i☺IsBa
00000860  64 43 6F 64 65 50 74 72  00 00 64 01 49 6E 69 74  69 61 6C 69 7A 65 43 72  69 74 69 63 61 6C 53 65  dCodePtr..d☺InitializeCriticalSe
00000880  63 74 69 6F 6E 00 4F 00  45 6E 74 65 72 43 72 69  74 69 63 61 6C 53 65 63  74 69 6F 6E 00 00 77 01  ction.O.EnterCriticalSection..w☺
000008A0  4C 65 61 76 65 43 72 69  74 69 63 61 6C 53 65 63  74 69 6F 6E 00 00 78 01  4C 6F 61 64 4C 69 62 72  LeaveCriticalSection..x☺LoadLibr
000008C0  61 72 79 41 00 00 5C 01  48 65 61 70 52 65 41 6C  6C 6F 63 00 5D 01 48 65  61 70 53 69 7A 65 00 00  aryA..\☺HeapReAlloc.]☺HeapSize..
000008E0  83 00 46 6C 75 73 68 46  69 6C 65 42 75 66 66 65  72 73 00 00 16 00 43 6C  6F 73 65 48 61 6E 64 6C  â.FlushFileBuffers..▬.CloseHandl
00000900  65 00 06 02 53 65 74 53  74 64 48 61 6E 64 6C 65  00 00 F8 01 53 65 74 46  69 6C 65 50 6F 69 6E 74  e.♠☻SetStdHandle..°☺SetFilePoint
00000920  65 72 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  er..............................
00000940  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000960  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000980  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................