==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  44 81 00 00 00 00 00 00  00 00 00 00 4E 82 00 00  20 82 00 00 1C 81 00 00  00 00 00 00 00 00 00 00  Dü..........Né.. é..∟ü..........
00000020  64 82 00 00 F8 81 00 00  BC 80 00 00 00 00 00 00  00 00 00 00 C8 83 00 00  98 81 00 00 78 80 00 00  dé..°ü..╝Ç..........╚â..ÿü..xÇ..
00000040  00 00 00 00 00 00 00 00  F4 84 00 00 54 81 00 00  24 81 00 00 00 00 00 00  00 00 00 00 5E 85 00 00  ........⌠ä..Tü..$ü..........^à..
00000060  00 82 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  92 84 00 00 E2 84 00 00  .é......................Æä..Γä..
00000080  D2 84 00 00 C2 84 00 00  B0 84 00 00 74 84 00 00  62 84 00 00 4C 84 00 00  3A 84 00 00 22 84 00 00  ╥ä..┬ä..░ä..tä..bä..Lä..:ä.."ä..
000000A0  0C 84 00 00 F6 83 00 00  E6 83 00 00 84 84 00 00  D6 83 00 00 A0 84 00 00  00 00 00 00 0A 83 00 00  ♀ä..÷â..µâ..ää..╓â..áä......◙â..
000000C0  FC 82 00 00 EA 82 00 00  1A 83 00 00 DC 82 00 00  5E 83 00 00 6A 83 00 00  76 83 00 00 86 83 00 00  ⁿé..Ωé..→â..▄é..^â..jâ..vâ..åâ..
000000E0  CE 82 00 00 A4 83 00 00  C0 83 00 00 C0 82 00 00  B6 82 00 00 AC 82 00 00  A2 82 00 00 98 82 00 00  ╬é..ñâ..└â..└é..╢é..¼é..óé..ÿé..
00000100  86 82 00 00 70 82 00 00  3E 83 00 00 4C 83 00 00  32 83 00 00 94 83 00 00  00 00 00 00 58 82 00 00  åé..pé..>â..Lâ..2â..öâ......Xé..
00000120  00 00 00 00 02 85 00 00  12 85 00 00 1E 85 00 00  36 85 00 00 2A 85 00 00  52 85 00 00 44 85 00 00  ....☻à..↕à..▲à..6à..*à..Rà..Dà..
00000140  00 00 00 00 30 82 00 00  3A 82 00 00 44 82 00 00  00 00 00 00 92 84 00 00  E2 84 00 00 D2 84 00 00  ....0é..:é..Dé......Æä..Γä..╥ä..
00000160  C2 84 00 00 B0 84 00 00  74 84 00 00 62 84 00 00  4C 84 00 00 3A 84 00 00  22 84 00 00 0C 84 00 00  ┬ä..░ä..tä..bä..Lä..:ä.."ä..♀ä..
00000180  F6 83 00 00 E6 83 00 00  84 84 00 00 D6 83 00 00  A0 84 00 00 00 00 00 00  0A 83 00 00 FC 82 00 00  ÷â..µâ..ää..╓â..áä......◙â..ⁿé..
000001A0  EA 82 00 00 1A 83 00 00  DC 82 00 00 5E 83 00 00  6A 83 00 00 76 83 00 00  86 83 00 00 CE 82 00 00  Ωé..→â..▄é..^â..jâ..vâ..åâ..╬é..
000001C0  A4 83 00 00 C0 83 00 00  C0 82 00 00 B6 82 00 00  AC 82 00 00 A2 82 00 00  98 82 00 00 86 82 00 00  ñâ..└â..└é..╢é..¼é..óé..ÿé..åé..
000001E0  70 82 00 00 3E 83 00 00  4C 83 00 00 32 83 00 00  94 83 00 00 00 00 00 00  58 82 00 00 00 00 00 00  pé..>â..Lâ..2â..öâ......Xé......
00000200  02 85 00 00 12 85 00 00  1E 85 00 00 36 85 00 00  2A 85 00 00 52 85 00 00  44 85 00 00 00 00 00 00  ☻à..↕à..▲à..6à..*à..Rà..Dà......
00000220  30 82 00 00 3A 82 00 00  44 82 00 00 00 00 00 00  5D 03 5F 63 68 6B 73 74  6B 00 A5 03 77 63 73 63  0é..:é..Dé......]♥_chkstk.Ñ♥wcsc
00000240  61 74 00 00 A8 03 77 63  73 63 70 79 00 00 6E 74  64 6C 6C 2E 64 6C 6C 00  49 02 77 73 70 72 69 6E  at..¿♥wcscpy..ntdll.dll.I☻wsprin
00000260  74 66 41 00 55 53 45 52  33 32 2E 64 6C 6C 00 00  1D 01 47 65 74 53 79 73  74 65 6D 44 69 72 65 63  tfA.USER32.dll..↔☺GetSystemDirec
00000280  74 6F 72 79 41 00 0B 01  47 65 74 50 72 6F 66 69  6C 65 49 6E 74 41 00 00  5F 02 5F 6C 63 6C 6F 73  toryA.♂☺GetProfileIntA.._☻_lclos
000002A0  65 00 63 02 5F 6C 72 65  61 64 00 00 61 02 5F 6C  6C 73 65 65 6B 00 62 02  5F 6C 6F 70 65 6E 00 00  e.c☻_lread..a☻_llseek.b☻_lopen..
000002C0  47 01 47 6C 6F 62 61 6C  46 72 65 65 00 00 40 01  47 6C 6F 62 61 6C 41 6C  6C 6F 63 00 16 00 43 6C  G☺GlobalFree..@☺GlobalAlloc.▬.Cl
000002E0  6F 73 65 48 61 6E 64 6C  65 00 47 00 44 65 76 69  63 65 49 6F 43 6F 6E 74  72 6F 6C 00 2B 00 43 72  oseHandle.G.DeviceIoControl.+.Cr
00000300  65 61 74 65 46 69 6C 65  41 00 E1 00 47 65 74 4C  61 73 74 45 72 72 6F 72  00 00 F9 00 47 65 74 50  eateFileA.ß.GetLastError..∙.GetP
00000320  72 69 76 61 74 65 50 72  6F 66 69 6C 65 49 6E 74  41 00 66 02 6C 73 74 72  63 61 74 41 00 00 8D 00  rivateProfileIntA.f☻lstrcatA..ì.
00000340  46 72 65 65 4C 69 62 72  61 72 79 00 03 01 47 65  74 50 72 6F 63 41 64 64  72 65 73 73 00 00 97 01  FreeLibrary.♥☺GetProcAddress..ù☺
00000360  4F 70 65 6E 46 69 6C 65  00 00 75 02 6C 73 74 72  6C 65 6E 41 00 00 51 01  47 6C 6F 62 61 6C 55 6E  OpenFile..u☻lstrlenA..Q☺GlobalUn
00000380  6C 6F 63 6B 00 00 4B 01  47 6C 6F 62 61 6C 4C 6F  63 6B 00 00 78 01 4C 6F  61 64 4C 69 62 72 61 72  lock..K☺GlobalLock..x☺LoadLibrar
000003A0  79 41 00 00 FF 00 47 65  74 50 72 69 76 61 74 65  50 72 6F 66 69 6C 65 53  74 72 69 6E 67 41 00 00  yA.. .GetPrivateProfileStringA..
000003C0  18 02 53 6C 65 65 70 00  4B 45 52 4E 45 4C 33 32  2E 64 6C 6C 00 00 DA 00  52 65 67 4F 70 65 6E 4B  ↑☻Sleep.KERNEL32.dll..┌.RegOpenK
000003E0  65 79 45 78 57 00 B4 00  4F 70 65 6E 53 65 72 76  69 63 65 57 00 00 16 00  43 6C 6F 73 65 53 65 72  eyExW.┤.OpenServiceW..▬.CloseSer
00000400  76 69 63 65 48 61 6E 64  6C 65 00 00 BE 00 51 75  65 72 79 53 65 72 76 69  63 65 53 74 61 74 75 73  viceHandle..╛.QueryServiceStatus
00000420  00 00 2C 01 55 6E 6C 6F  63 6B 53 65 72 76 69 63  65 44 61 74 61 62 61 73  65 00 1D 00 43 72 65 61  ..,☺UnlockServiceDatabase.↔.Crea
00000440  74 65 53 65 72 76 69 63  65 57 00 00 66 00 4C 6F  63 6B 53 65 72 76 69 63  65 44 61 74 61 62 61 73  teServiceW..f.LockServiceDatabas
00000460  65 00 B2 00 4F 70 65 6E  53 43 4D 61 6E 61 67 65  72 57 00 00 1F 00 44 65  6C 65 74 65 53 65 72 76  e.▓.OpenSCManagerW..▼.DeleteServ
00000480  69 63 65 00 C2 00 52 65  67 43 6C 6F 73 65 4B 65  79 00 D3 00 52 65 67 46  6C 75 73 68 4B 65 79 00  ice.┬.RegCloseKey.╙.RegFlushKey.
000004A0  CA 00 52 65 67 44 65 6C  65 74 65 4B 65 79 57 00  ED 00 52 65 67 53 65 74  56 61 6C 75 65 45 78 57  ╩.RegDeleteKeyW.φ.RegSetValueExW
000004C0  00 00 C8 00 52 65 67 43  72 65 61 74 65 4B 65 79  57 00 09 01 53 74 61 72  74 53 65 72 76 69 63 65  ..╚.RegCreateKeyW.○☺StartService
000004E0  57 00 17 00 43 6F 6E 74  72 6F 6C 53 65 72 76 69  63 65 00 00 41 44 56 41  50 49 33 32 2E 64 6C 6C  W.↨.ControlService..ADVAPI32.dll
00000500  00 00 01 00 44 65 66 44  72 69 76 65 72 50 72 6F  63 00 77 00 6D 6D 69 6F  43 6C 6F 73 65 00 7E 00  ..☺.DefDriverProc.w.mmioClose.~.
00000520  6D 6D 69 6F 4F 70 65 6E  41 00 80 00 6D 6D 69 6F  52 65 61 64 00 00 79 00  6D 6D 69 6F 44 65 73 63  mmioOpenA.Ç.mmioRead..y.mmioDesc
00000540  65 6E 64 00 76 00 6D 6D  69 6F 41 73 63 65 6E 64  00 00 83 00 6D 6D 69 6F  53 65 65 6B 00 00 57 49  end.v.mmioAscend..â.mmioSeek..WI
00000560  4E 4D 4D 2E 64 6C 6C 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  NMM.dll.........................
00000580  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000005A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000005C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000005E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................