============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 07 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 00 00 08 00 00 00 00 00 00 00 •☺..◘...........↑.......◘....... 00000020 FF 15 00 00 00 00 C3 90 02 00 00 00 04 00 00 04 04 00 00 00 05 00 00 00 00 00 00 00 14 00 00 00 §....├É☻...♦..♦♦...♣.......¶... 00000040 24 00 77 01 02 00 00 00 38 00 00 00 5F 47 65 74 50 72 6F 63 65 73 73 48 65 61 70 00 5F 5F 49 6D $.w☺☻...8..._GetProcessHeap.__Im 00000060 70 4E 54 5F 47 65 74 50 72 6F 63 65 73 73 48 65 61 70 3D 4B 45 52 4E 45 4C 33 32 2E 64 6C 6C 00 pNT_GetProcessHeap=KERNEL32.dll.