==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  14 81 00 00 00 00 00 00  00 00 00 00 F4 81 00 00  E0 81 00 00 50 80 00 00  00 00 00 00 00 00 00 00  ¶ü..........⌠ü..αü..PÇ..........
00000020  40 82 00 00 1C 81 00 00  64 80 00 00 00 00 00 00  00 00 00 00 3E 85 00 00  30 81 00 00 00 00 00 00  @é..∟ü..dÇ..........>à..0ü......
00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 82 00 00 0E 82 00 00  20 82 00 00 30 82 00 00  .................é..♫é.. é..0é..
00000060  00 00 00 00 7C 83 00 00  B6 83 00 00 4E 82 00 00  60 82 00 00 72 82 00 00  86 82 00 00 94 82 00 00  ....|â..╢â..Né..`é..ré..åé..öé..
00000080  A2 82 00 00 B6 82 00 00  CA 82 00 00 E0 82 00 00  EE 82 00 00 FA 82 00 00  04 83 00 00 14 83 00 00  óé..╢é..╩é..αé..εé..·é..♦â..¶â..
000000A0  22 83 00 00 32 83 00 00  40 83 00 00 4E 83 00 00  5C 83 00 00 6E 83 00 00  76 84 00 00 8C 83 00 00  "â..2â..@â..Nâ..\â..nâ..vä..îâ..
000000C0  9E 83 00 00 92 84 00 00  CC 83 00 00 D8 83 00 00  E2 83 00 00 EE 83 00 00  08 84 00 00 20 84 00 00  ₧â..Æä..╠â..╪â..Γâ..εâ..◘ä.. ä..
000000E0  3A 84 00 00 54 84 00 00  6A 84 00 00 DA 84 00 00  CE 84 00 00 AA 84 00 00  C2 84 00 00 2C 85 00 00  :ä..Tä..jä..┌ä..╬ä..¬ä..┬ä..,à..
00000100  EA 84 00 00 FA 84 00 00  0E 85 00 00 1C 85 00 00  00 00 00 00 E8 81 00 00  00 00 00 00 00 82 00 00  Ωä..·ä..♫à..∟à......Φü.......é..
00000120  0E 82 00 00 20 82 00 00  30 82 00 00 00 00 00 00  7C 83 00 00 B6 83 00 00  4E 82 00 00 60 82 00 00  ♫é.. é..0é......|â..╢â..Né..`é..
00000140  72 82 00 00 86 82 00 00  94 82 00 00 A2 82 00 00  B6 82 00 00 CA 82 00 00  E0 82 00 00 EE 82 00 00  ré..åé..öé..óé..╢é..╩é..αé..εé..
00000160  FA 82 00 00 04 83 00 00  14 83 00 00 22 83 00 00  32 83 00 00 40 83 00 00  4E 83 00 00 5C 83 00 00  ·é..♦â..¶â.."â..2â..@â..Nâ..\â..
00000180  6E 83 00 00 76 84 00 00  8C 83 00 00 9E 83 00 00  92 84 00 00 CC 83 00 00  D8 83 00 00 E2 83 00 00  nâ..vä..îâ..₧â..Æä..╠â..╪â..Γâ..
000001A0  EE 83 00 00 08 84 00 00  20 84 00 00 3A 84 00 00  54 84 00 00 6A 84 00 00  DA 84 00 00 CE 84 00 00  εâ..◘ä.. ä..:ä..Tä..jä..┌ä..╬ä..
000001C0  AA 84 00 00 C2 84 00 00  2C 85 00 00 EA 84 00 00  FA 84 00 00 0E 85 00 00  1C 85 00 00 00 00 00 00  ¬ä..┬ä..,à..Ωä..·ä..♫à..∟à......
000001E0  E8 81 00 00 00 00 00 00  62 02 77 73 70 72 69 6E  74 66 41 00 55 53 45 52  33 32 2E 64 6C 6C 00 00  Φü......b☻wsprintfA.USER32.dll..
00000200  17 01 52 65 67 43 6C 6F  73 65 4B 65 79 00 41 01  52 65 67 53 65 74 56 61  6C 75 65 45 78 41 00 00  ↨☺RegCloseKey.A☺RegSetValueExA..
00000220  1A 01 52 65 67 43 72 65  61 74 65 4B 65 79 41 00  2E 01 52 65 67 4F 70 65  6E 4B 65 79 45 78 41 00  →☺RegCreateKeyA..☺RegOpenKeyExA.
00000240  41 44 56 41 50 49 33 32  2E 64 6C 6C 00 00 A9 00  47 65 74 43 6F 6D 6D 61  6E 64 4C 69 6E 65 41 00  ADVAPI32.dll..⌐.GetCommandLineA.
00000260  15 01 47 65 74 50 72 6F  63 41 64 64 72 65 73 73  00 00 FD 00 47 65 74 4D  6F 64 75 6C 65 48 61 6E  §☺GetProcAddress..².GetModuleHan
00000280  64 6C 65 41 00 00 4B 01  47 65 74 56 65 72 73 69  6F 6E 00 00 6A 00 45 78  69 74 50 72 6F 63 65 73  dleA..K☺GetVersion..j.ExitProces
000002A0  73 00 41 02 54 65 72 6D  69 6E 61 74 65 50 72 6F  63 65 73 73 00 00 D2 00  47 65 74 43 75 72 72 65  s.A☻TerminateProcess..╥.GetCurre
000002C0  6E 74 50 72 6F 63 65 73  73 00 D5 00 47 65 74 43  75 72 72 65 6E 74 54 68  72 65 61 64 49 64 00 00  ntProcess.╒.GetCurrentThreadId..
000002E0  46 02 54 6C 73 53 65 74  56 61 6C 75 65 00 43 02  54 6C 73 41 6C 6C 6F 63  00 00 44 02 54 6C 73 46  F☻TlsSetValue.C☻TlsAlloc..D☻TlsF
00000300  72 65 65 00 19 02 53 65  74 4C 61 73 74 45 72 72  6F 72 00 00 45 02 54 6C  73 47 65 74 56 61 6C 75  ree.↓☻SetLastError..E☻TlsGetValu
00000320  65 00 F3 00 47 65 74 4C  61 73 74 45 72 72 6F 72  00 00 6B 01 48 65 61 70  44 65 73 74 72 6F 79 00  e.≤.GetLastError..k☺HeapDestroy.
00000340  69 01 48 65 61 70 43 72  65 61 74 65 00 00 59 02  56 69 72 74 75 61 6C 46  72 65 65 00 16 02 53 65  i☺HeapCreate..Y☻VirtualFree.▬☻Se
00000360  74 48 61 6E 64 6C 65 43  6F 75 6E 74 00 00 EE 00  47 65 74 46 69 6C 65 54  79 70 65 00 29 01 47 65  tHandleCount..ε.GetFileType.)☺Ge
00000380  74 53 74 64 48 61 6E 64  6C 65 00 00 27 01 47 65  74 53 74 61 72 74 75 70  49 6E 66 6F 41 00 4B 00  tStdHandle..'☺GetStartupInfoA.K.
000003A0  44 65 6C 65 74 65 43 72  69 74 69 63 61 6C 53 65  63 74 69 6F 6E 00 FB 00  47 65 74 4D 6F 64 75 6C  DeleteCriticalSection.√.GetModul
000003C0  65 46 69 6C 65 4E 61 6D  65 41 00 00 A2 00 47 65  74 43 50 49 6E 66 6F 00  9C 00 47 65 74 41 43 50  eFileNameA..ó.GetCPInfo.£.GetACP
000003E0  00 00 08 01 47 65 74 4F  45 4D 43 50 00 00 95 00  46 72 65 65 45 6E 76 69  72 6F 6E 6D 65 6E 74 53  ..◘☺GetOEMCP..ò.FreeEnvironmentS
00000400  74 72 69 6E 67 73 41 00  E0 00 47 65 74 45 6E 76  69 72 6F 6E 6D 65 6E 74  53 74 72 69 6E 67 73 00  tringsA.α.GetEnvironmentStrings.
00000420  96 00 46 72 65 65 45 6E  76 69 72 6F 6E 6D 65 6E  74 53 74 72 69 6E 67 73  57 00 E2 00 47 65 74 45  û.FreeEnvironmentStringsW.Γ.GetE
00000440  6E 76 69 72 6F 6E 6D 65  6E 74 53 74 72 69 6E 67  73 57 00 00 69 02 57 69  64 65 43 68 61 72 54 6F  nvironmentStringsW..i☻WideCharTo
00000460  4D 75 6C 74 69 42 79 74  65 00 76 02 57 72 69 74  65 46 69 6C 65 00 78 01  49 6E 69 74 69 61 6C 69  MultiByte.v☻WriteFile.x☺Initiali
00000480  7A 65 43 72 69 74 69 63  61 6C 53 65 63 74 69 6F  6E 00 57 00 45 6E 74 65  72 43 72 69 74 69 63 61  zeCriticalSection.W.EnterCritica
000004A0  6C 53 65 63 74 69 6F 6E  00 00 8D 01 4C 65 61 76  65 43 72 69 74 69 63 61  6C 53 65 63 74 69 6F 6E  lSection..ì☺LeaveCriticalSection
000004C0  00 00 67 01 48 65 61 70  41 6C 6C 6F 63 00 6D 01  48 65 61 70 46 72 65 65  00 00 56 02 56 69 72 74  ..g☺HeapAlloc.m☺HeapFree..V☻Virt
000004E0  75 61 6C 41 6C 6C 6F 63  00 00 8E 01 4C 6F 61 64  4C 69 62 72 61 72 79 41  00 00 8D 00 46 6C 75 73  ualAlloc..Ä☺LoadLibraryA..ì.Flus
00000500  68 46 69 6C 65 42 75 66  66 65 72 73 00 00 17 00  43 6C 6F 73 65 48 61 6E  64 6C 65 00 24 02 53 65  hFileBuffers..↨.CloseHandle.$☻Se
00000520  74 53 74 64 48 61 6E 64  6C 65 00 00 14 02 53 65  74 46 69 6C 65 50 6F 69  6E 74 65 72 00 00 4B 45  tStdHandle..¶☻SetFilePointer..KE
00000540  52 4E 45 4C 33 32 2E 64  6C 6C 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  RNEL32.dll......................
00000560  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000580  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000005A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000005C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000005E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................