==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  A0 B0 00 00 00 00 00 00  00 00 00 00 4C B4 00 00  1C B2 00 00 D4 B1 00 00  00 00 00 00 00 00 00 00  á░..........L┤..∟▓..╘▒..........
00000020  74 B4 00 00 50 B3 00 00  64 B0 00 00 00 00 00 00  00 00 00 00 72 B5 00 00  E0 B1 00 00 78 B1 00 00  t┤..P│..d░..........r╡..α▒..x▒..
00000040  00 00 00 00 00 00 00 00  DA B7 00 00 F4 B2 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ........┌╖..⌠▓..................
00000060  00 00 00 00 64 B5 00 00  54 B5 00 00 42 B5 00 00  30 B5 00 00 20 B5 00 00  10 B5 00 00 FA B4 00 00  ....d╡..T╡..B╡..0╡.. ╡..►╡..·┤..
00000080  E6 B4 00 00 D2 B4 00 00  C2 B4 00 00 92 B4 00 00  80 B4 00 00 B4 B4 00 00  A4 B4 00 00 00 00 00 00  µ┤..╥┤..┬┤..Æ┤..Ç┤..┤┤..ñ┤......
000000A0  8C BA 00 00 9C BA 00 00  3E B4 00 00 26 B4 00 00  10 B4 00 00 F8 B3 00 00  E0 B3 00 00 CE B3 00 00  î║..£║..>┤..&┤..►┤..°│..α│..╬│..
000000C0  B8 B3 00 00 A6 B3 00 00  90 B3 00 00 88 B3 00 00  7A B3 00 00 6C B3 00 00  78 BA 00 00 68 B8 00 00  ╕│..ª│..É│..ê│..z│..l│..x║..h╕..
000000E0  56 B8 00 00 50 BA 00 00  38 BA 00 00 1C BA 00 00  10 BA 00 00 04 BA 00 00  F8 B9 00 00 DE B9 00 00  V╕..P║..8║..∟║..►║..♦║..°╣..▐╣..
00000100  C4 B9 00 00 AC B9 00 00  68 BA 00 00 7E B8 00 00  5C B3 00 00 8C B8 00 00  A2 B8 00 00 7C B9 00 00  ─╣..¼╣..h║..~╕..\│..î╕..ó╕..|╣..
00000120  70 B9 00 00 86 B9 00 00  42 B9 00 00 30 B9 00 00  5A B9 00 00 E8 B7 00 00  FA B7 00 00 0C B8 00 00  p╣..å╣..B╣..0╣..Z╣..Φ╖..·╖..♀╕..
00000140  20 B8 00 00 2E B8 00 00  40 B8 00 00 92 B9 00 00  D6 B8 00 00 C6 B8 00 00  20 B9 00 00 B0 B8 00 00   ╕...╕..@╕..Æ╣..╓╕..╞╕.. ╣..░╕..
00000160  BC B8 00 00 12 B9 00 00  F2 B8 00 00 E4 B8 00 00  00 B9 00 00 00 00 00 00  C0 B7 00 00 EE B6 00 00  ╝╕..↕╣..≥╕..Σ╕...╣......└╖..ε╢..
00000180  A6 B6 00 00 64 B7 00 00  A0 B7 00 00 7C B7 00 00  1A B7 00 00 4C B7 00 00  32 B7 00 00 88 B6 00 00  ª╢..d╖..á╖..|╖..→╖..L╖..2╖..ê╢..
000001A0  6C B6 00 00 4E B6 00 00  34 B6 00 00 12 B6 00 00  F0 B5 00 00 D4 B5 00 00  B8 B5 00 00 9C B5 00 00  l╢..N╢..4╢..↕╢..≡╡..╘╡..╕╡..£╡..
000001C0  80 B5 00 00 C4 B6 00 00  D8 B6 00 00 02 B7 00 00  00 00 00 00 66 B4 00 00  5A B4 00 00 00 00 00 00  Ç╡..─╢..╪╢..☻╖......f┤..Z┤......
000001E0  64 B5 00 00 54 B5 00 00  42 B5 00 00 30 B5 00 00  20 B5 00 00 10 B5 00 00  FA B4 00 00 E6 B4 00 00  d╡..T╡..B╡..0╡.. ╡..►╡..·┤..µ┤..
00000200  D2 B4 00 00 C2 B4 00 00  92 B4 00 00 80 B4 00 00  B4 B4 00 00 A4 B4 00 00  00 00 00 00 8C BA 00 00  ╥┤..┬┤..Æ┤..Ç┤..┤┤..ñ┤......î║..
00000220  9C BA 00 00 3E B4 00 00  26 B4 00 00 10 B4 00 00  F8 B3 00 00 E0 B3 00 00  CE B3 00 00 B8 B3 00 00  £║..>┤..&┤..►┤..°│..α│..╬│..╕│..
00000240  A6 B3 00 00 90 B3 00 00  88 B3 00 00 7A B3 00 00  6C B3 00 00 78 BA 00 00  68 B8 00 00 56 B8 00 00  ª│..É│..ê│..z│..l│..x║..h╕..V╕..
00000260  50 BA 00 00 38 BA 00 00  1C BA 00 00 10 BA 00 00  04 BA 00 00 F8 B9 00 00  DE B9 00 00 C4 B9 00 00  P║..8║..∟║..►║..♦║..°╣..▐╣..─╣..
00000280  AC B9 00 00 68 BA 00 00  7E B8 00 00 5C B3 00 00  8C B8 00 00 A2 B8 00 00  7C B9 00 00 70 B9 00 00  ¼╣..h║..~╕..\│..î╕..ó╕..|╣..p╣..
000002A0  86 B9 00 00 42 B9 00 00  30 B9 00 00 5A B9 00 00  E8 B7 00 00 FA B7 00 00  0C B8 00 00 20 B8 00 00  å╣..B╣..0╣..Z╣..Φ╖..·╖..♀╕.. ╕..
000002C0  2E B8 00 00 40 B8 00 00  92 B9 00 00 D6 B8 00 00  C6 B8 00 00 20 B9 00 00  B0 B8 00 00 BC B8 00 00  .╕..@╕..Æ╣..╓╕..╞╕.. ╣..░╕..╝╕..
000002E0  12 B9 00 00 F2 B8 00 00  E4 B8 00 00 00 B9 00 00  00 00 00 00 C0 B7 00 00  EE B6 00 00 A6 B6 00 00  ↕╣..≥╕..Σ╕...╣......└╖..ε╢..ª╢..
00000300  64 B7 00 00 A0 B7 00 00  7C B7 00 00 1A B7 00 00  4C B7 00 00 32 B7 00 00  88 B6 00 00 6C B6 00 00  d╖..á╖..|╖..→╖..L╖..2╖..ê╢..l╢..
00000320  4E B6 00 00 34 B6 00 00  12 B6 00 00 F0 B5 00 00  D4 B5 00 00 B8 B5 00 00  9C B5 00 00 80 B5 00 00  N╢..4╢..↕╢..≡╡..╘╡..╕╡..£╡..Ç╡..
00000340  C4 B6 00 00 D8 B6 00 00  02 B7 00 00 00 00 00 00  66 B4 00 00 5A B4 00 00  00 00 00 00 E1 00 47 65  ─╢..╪╢..☻╖......f┤..Z┤......ß.Ge
00000360  74 4C 61 73 74 45 72 72  6F 72 00 00 47 01 47 6C  6F 62 61 6C 46 72 65 65  00 00 40 01 47 6C 6F 62  tLastError..G☺GlobalFree..@☺Glob
00000380  61 6C 41 6C 6C 6F 63 00  18 02 53 6C 65 65 70 00  D5 00 47 65 74 45 78 69  74 43 6F 64 65 50 72 6F  alAlloc.↑☻Sleep.╒.GetExitCodePro
000003A0  63 65 73 73 00 00 38 00  43 72 65 61 74 65 50 72  6F 63 65 73 73 57 00 00  D8 00 47 65 74 46 69 6C  cess..8.CreateProcessW..╪.GetFil
000003C0  65 41 74 74 72 69 62 75  74 65 73 57 00 00 15 01  47 65 74 53 74 61 72 74  75 70 49 6E 66 6F 57 00  eAttributesW..§☺GetStartupInfoW.
000003E0  3D 01 47 65 74 57 69 6E  64 6F 77 73 44 69 72 65  63 74 6F 72 79 57 00 00  C3 00 47 65 74 43 75 72  =☺GetWindowsDirectoryW..├.GetCur
00000400  72 65 6E 74 44 69 72 65  63 74 6F 72 79 57 00 00  1E 01 47 65 74 53 79 73  74 65 6D 44 69 72 65 63  rentDirectoryW..▲☺GetSystemDirec
00000420  74 6F 72 79 57 00 EC 01  53 65 74 43 75 72 72 65  6E 74 44 69 72 65 63 74  6F 72 79 57 00 00 16 00  toryW.∞☺SetCurrentDirectoryW..▬.
00000440  43 6C 6F 73 65 48 61 6E  64 6C 65 00 4B 45 52 4E  45 4C 33 32 2E 64 6C 6C  00 00 4A 02 77 73 70 72  CloseHandle.KERNEL32.dll..J☻wspr
00000460  69 6E 74 66 57 00 8D 01  4D 65 73 73 61 67 65 42  6F 78 57 00 55 53 45 52  33 32 2E 64 6C 6C 00 00  intfW.ì☺MessageBoxW.USER32.dll..
00000480  42 01 52 65 67 53 65 74  56 61 6C 75 65 45 78 57  00 00 1C 01 52 65 67 43  72 65 61 74 65 4B 65 79  B☺RegSetValueExW..∟☺RegCreateKey
000004A0  45 78 57 00 2F 01 52 65  67 4F 70 65 6E 4B 65 79  45 78 57 00 17 01 52 65  67 43 6C 6F 73 65 4B 65  ExW./☺RegOpenKeyExW.↨☺RegCloseKe
000004C0  79 00 27 01 52 65 67 45  6E 75 6D 56 61 6C 75 65  57 00 32 01 52 65 67 51  75 65 72 79 49 6E 66 6F  y.'☺RegEnumValueW.2☺RegQueryInfo
000004E0  4B 65 79 57 00 00 37 01  52 65 67 51 75 65 72 79  56 61 6C 75 65 45 78 57  00 00 24 00 43 6C 6F 73  KeyW..7☺RegQueryValueExW..$.Clos
00000500  65 53 65 72 76 69 63 65  48 61 6E 64 6C 65 00 00  49 00 44 65 6C 65 74 65  53 65 72 76 69 63 65 00  eServiceHandle..I.DeleteService.
00000520  08 01 4F 70 65 6E 53 65  72 76 69 63 65 57 00 00  06 01 4F 70 65 6E 53 43  4D 61 6E 61 67 65 72 57  ◘☺OpenServiceW..♠☺OpenSCManagerW
00000540  00 00 21 01 52 65 67 44  65 6C 65 74 65 56 61 6C  75 65 57 00 1F 01 52 65  67 44 65 6C 65 74 65 4B  ..!☺RegDeleteValueW.▼☺RegDeleteK
00000560  65 79 57 00 25 01 52 65  67 45 6E 75 6D 4B 65 79  57 00 41 44 56 41 50 49  33 32 2E 64 6C 6C 00 00  eyW.%☺RegEnumKeyW.ADVAPI32.dll..
00000580  3B 00 53 65 74 75 70 44  69 43 61 6C 6C 43 6C 61  73 73 49 6E 73 74 61 6C  6C 65 72 00 7B 00 53 65  ;.SetupDiCallClassInstaller.{.Se
000005A0  74 75 70 44 69 52 65 67  69 73 74 65 72 44 65 76  69 63 65 49 6E 66 6F 00  89 00 53 65 74 75 70 44  tupDiRegisterDeviceInfo.ë.SetupD
000005C0  69 53 65 74 53 65 6C 65  63 74 65 64 44 72 69 76  65 72 57 00 87 00 53 65  74 75 70 44 69 53 65 74  iSetSelectedDriverW.ç.SetupDiSet
000005E0  53 65 6C 65 63 74 65 64  44 65 76 69 63 65 00 00  82 00 53 65 74 75 70 44  69 53 65 74 44 65 76 69  SelectedDevice..é.SetupDiSetDevi
00000600  63 65 49 6E 73 74 61 6C  6C 50 61 72 61 6D 73 57  00 00 5F 00 53 65 74 75  70 44 69 47 65 74 44 65  ceInstallParamsW.._.SetupDiGetDe
00000620  76 69 63 65 49 6E 73 74  61 6C 6C 50 61 72 61 6D  73 57 00 00 4F 00 53 65  74 75 70 44 69 45 6E 75  viceInstallParamsW..O.SetupDiEnu
00000640  6D 44 72 69 76 65 72 49  6E 66 6F 57 00 00 3A 00  53 65 74 75 70 44 69 42  75 69 6C 64 44 72 69 76  mDriverInfoW..:.SetupDiBuildDriv
00000660  65 72 49 6E 66 6F 4C 69  73 74 00 00 46 00 53 65  74 75 70 44 69 43 72 65  61 74 65 44 65 76 69 63  erInfoList..F.SetupDiCreateDevic
00000680  65 49 6E 66 6F 57 00 00  45 00 53 65 74 75 70 44  69 43 72 65 61 74 65 44  65 76 69 63 65 49 6E 66  eInfoW..E.SetupDiCreateDeviceInf
000006A0  6F 4C 69 73 74 00 3F 00  53 65 74 75 70 44 69 43  6C 61 73 73 47 75 69 64  73 46 72 6F 6D 4E 61 6D  oList.?.SetupDiClassGuidsFromNam
000006C0  65 57 00 00 2B 00 53 65  74 75 70 43 6C 6F 73 65  49 6E 66 46 69 6C 65 00  9D 00 53 65 74 75 70 47  eW..+.SetupCloseInfFile.¥.SetupG
000006E0  65 74 4C 69 6E 65 43 6F  75 6E 74 57 00 00 C2 00  53 65 74 75 70 4F 70 65  6E 49 6E 66 46 69 6C 65  etLineCountW..┬.SetupOpenInfFile
00000700  57 00 96 00 53 65 74 75  70 47 65 74 49 6E 66 46  69 6C 65 4C 69 73 74 57  00 00 4D 00 53 65 74 75  W.û.SetupGetInfFileListW..M.Setu
00000720  70 44 69 45 6E 75 6D 44  65 76 69 63 65 49 6E 66  6F 00 48 00 53 65 74 75  70 44 69 44 65 6C 65 74  pDiEnumDeviceInfo.H.SetupDiDelet
00000740  65 44 65 76 69 63 65 49  6E 66 6F 00 78 00 53 65  74 75 70 44 69 4F 70 65  6E 44 65 76 52 65 67 4B  eDeviceInfo.x.SetupDiOpenDevRegK
00000760  65 79 00 00 58 00 53 65  74 75 70 44 69 47 65 74  43 6C 61 73 73 44 65 76  73 57 00 00 63 00 53 65  ey..X.SetupDiGetClassDevsW..c.Se
00000780  74 75 70 44 69 47 65 74  44 65 76 69 63 65 52 65  67 69 73 74 72 79 50 72  6F 70 65 72 74 79 57 00  tupDiGetDeviceRegistryPropertyW.
000007A0  4A 00 53 65 74 75 70 44  69 44 65 73 74 72 6F 79  44 65 76 69 63 65 49 6E  66 6F 4C 69 73 74 00 00  J.SetupDiDestroyDeviceInfoList..
000007C0  7A 00 53 65 74 75 70 44  69 4F 70 65 6E 44 65 76  69 63 65 49 6E 66 6F 57  00 00 53 45 54 55 50 41  z.SetupDiOpenDeviceInfoW..SETUPA
000007E0  50 49 2E 64 6C 6C 00 00  9F 00 47 65 74 43 6F 6D  6D 61 6E 64 4C 69 6E 65  41 00 03 01 47 65 74 50  PI.dll..ƒ.GetCommandLineA.♥☺GetP
00000800  72 6F 63 41 64 64 72 65  73 73 00 00 EB 00 47 65  74 4D 6F 64 75 6C 65 48  61 6E 64 6C 65 41 00 00  rocAddress..δ.GetModuleHandleA..
00000820  37 01 47 65 74 56 65 72  73 69 6F 6E 00 00 17 01  47 65 74 53 74 72 69 6E  67 54 79 70 65 41 00 00  7☺GetVersion..↨☺GetStringTypeA..
00000840  42 02 57 69 64 65 43 68  61 72 54 6F 4D 75 6C 74  69 42 79 74 65 00 1A 01  47 65 74 53 74 72 69 6E  B☻WideCharToMultiByte.→☺GetStrin
00000860  67 54 79 70 65 57 00 00  93 01 4D 75 6C 74 69 42  79 74 65 54 6F 57 69 64  65 43 68 61 72 00 62 00  gTypeW..ô☺MultiByteToWideChar.b.
00000880  45 78 69 74 50 72 6F 63  65 73 73 00 C7 00 47 65  74 43 75 72 72 65 6E 74  54 68 72 65 61 64 49 64  ExitProcess.╟.GetCurrentThreadId
000008A0  00 00 22 02 54 6C 73 53  65 74 56 61 6C 75 65 00  1F 02 54 6C 73 41 6C 6C  6F 63 00 00 20 02 54 6C  .."☻TlsSetValue.▼☻TlsAlloc.. ☻Tl
000008C0  73 46 72 65 65 00 FD 01  53 65 74 4C 61 73 74 45  72 72 6F 72 00 00 21 02  54 6C 73 47 65 74 56 61  sFree.²☺SetLastError..!☻TlsGetVa
000008E0  6C 75 65 00 55 01 48 65  61 70 43 72 65 61 74 65  00 00 57 01 48 65 61 70  44 65 73 74 72 6F 79 00  lue.U☺HeapCreate..W☺HeapDestroy.
00000900  FA 01 53 65 74 48 61 6E  64 6C 65 43 6F 75 6E 74  00 00 DC 00 47 65 74 46  69 6C 65 54 79 70 65 00  ·☺SetHandleCount..▄.GetFileType.
00000920  16 01 47 65 74 53 74 64  48 61 6E 64 6C 65 00 00  14 01 47 65 74 53 74 61  72 74 75 70 49 6E 66 6F  ▬☺GetStdHandle..¶☺GetStartupInfo
00000940  41 00 44 00 44 65 6C 65  74 65 43 72 69 74 69 63  61 6C 53 65 63 74 69 6F  6E 00 E9 00 47 65 74 4D  A.D.DeleteCriticalSection.Θ.GetM
00000960  6F 64 75 6C 65 46 69 6C  65 4E 61 6D 65 41 00 00  98 00 47 65 74 43 50 49  6E 66 6F 00 92 00 47 65  oduleFileNameA..ÿ.GetCPInfo.Æ.Ge
00000980  74 41 43 50 00 00 F6 00  47 65 74 4F 45 4D 43 50  00 00 8B 00 46 72 65 65  45 6E 76 69 72 6F 6E 6D  tACP..÷.GetOEMCP..ï.FreeEnvironm
000009A0  65 6E 74 53 74 72 69 6E  67 73 41 00 D0 00 47 65  74 45 6E 76 69 72 6F 6E  6D 65 6E 74 53 74 72 69  entStringsA.╨.GetEnvironmentStri
000009C0  6E 67 73 00 8C 00 46 72  65 65 45 6E 76 69 72 6F  6E 6D 65 6E 74 53 74 72  69 6E 67 73 57 00 D2 00  ngs.î.FreeEnvironmentStringsW.╥.
000009E0  47 65 74 45 6E 76 69 72  6F 6E 6D 65 6E 74 53 74  72 69 6E 67 73 57 00 00  4F 02 57 72 69 74 65 46  GetEnvironmentStringsW..O☻WriteF
00000A00  69 6C 65 00 59 01 48 65  61 70 46 72 65 65 00 00  53 01 48 65 61 70 41 6C  6C 6F 63 00 64 01 49 6E  ile.Y☺HeapFree..S☺HeapAlloc.d☺In
00000A20  69 74 69 61 6C 69 7A 65  43 72 69 74 69 63 61 6C  53 65 63 74 69 6F 6E 00  4F 00 45 6E 74 65 72 43  itializeCriticalSection.O.EnterC
00000A40  72 69 74 69 63 61 6C 53  65 63 74 69 6F 6E 00 00  77 01 4C 65 61 76 65 43  72 69 74 69 63 61 6C 53  riticalSection..w☺LeaveCriticalS
00000A60  65 63 74 69 6F 6E 00 00  78 01 4C 6F 61 64 4C 69  62 72 61 72 79 41 00 00  83 00 46 6C 75 73 68 46  ection..x☺LoadLibraryA..â.FlushF
00000A80  69 6C 65 42 75 66 66 65  72 73 00 00 06 02 53 65  74 53 74 64 48 61 6E 64  6C 65 00 00 F8 01 53 65  ileBuffers..♠☻SetStdHandle..°☺Se
00000AA0  74 46 69 6C 65 50 6F 69  6E 74 65 72 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  tFilePointer....................
00000AC0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000AE0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000B00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000B20  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000B40  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000B60  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000B80  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000BA0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000BC0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000BE0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................