==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  00 00 00 00 1E 28 00 00  02 28 00 00 00 00 00 00  CA 26 00 00 FC 26 00 00  14 27 00 00 20 27 00 00  ....▲(..☻(......╩&..ⁿ&..¶'.. '..
00000020  2E 27 00 00 3C 27 00 00  4E 27 00 00 5C 27 00 00  D6 26 00 00 E4 26 00 00  AE 26 00 00 8A 27 00 00  .'..<'..N'..\'..╓&..Σ&..«&..è'..
00000040  7A 27 00 00 68 27 00 00  00 00 00 00 B4 27 00 00  C6 27 00 00 00 00 00 00  60 26 00 00 96 26 00 00  z'..h'......┤'..╞'......`&..û&..
00000060  84 26 00 00 72 26 00 00  00 00 00 00 E4 27 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ä&..r&......Σ'..................
00000080  00 00 00 00 95 25 E4 32  00 00 00 00 04 00 00 00  10 01 00 00 00 00 00 00  00 48 00 00 00 00 00 00  ....ò%Σ2....♦...►☺.......H......
000000A0  95 25 E4 32 00 00 00 00  04 00 00 00 10 01 00 00  00 00 00 00 54 8A 00 00  00 00 00 00 95 25 E4 32  ò%Σ2....♦...►☺......Tè......ò%Σ2
000000C0  00 00 00 00 03 00 00 00  E0 01 00 00 00 00 00 00  64 8B 00 00 00 00 00 00  95 25 E4 32 00 00 00 00  ....♥...α☺......dï......ò%Σ2....
000000E0  06 00 00 00 00 00 00 00  00 00 00 00 44 8D 00 00  00 00 00 00 95 25 E4 32  00 00 00 00 02 00 00 00  ♠...........Dì......ò%Σ2....☻...
00000100  50 36 00 00 00 00 00 00  C0 F5 B6 FF 00 00 00 00  44 69 61 6C 2D 55 70 20  4E 65 74 77 6F 72 6B 69  P6......└⌡╢ ....Dial-Up Networki
00000120  6E 67 20 53 68 65 6C 6C  20 45 78 74 65 6E 73 69  6F 6E 00 00 00 00 00 00  00 14 02 00 00 00 00 00  ng Shell Extension.......¶☻.....
00000140  C0 00 00 00 00 00 00 46  01 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  A0 14 02 00 00 00 00 00  └......F☺¶☻.....└......Fá¶☻.....
00000160  C0 00 00 00 00 00 00 46  A1 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  D0 14 02 00 00 00 00 00  └......Fí¶☻.....└......F╨¶☻.....
00000180  C0 00 00 00 00 00 00 46  D1 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  E1 14 02 00 00 00 00 00  └......F╤¶☻.....└......F߶☻.....
000001A0  C0 00 00 00 00 00 00 46  E2 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  E3 14 02 00 00 00 00 00  └......FΓ¶☻.....└......Fπ¶☻.....
000001C0  C0 00 00 00 00 00 00 46  E4 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  E5 14 02 00 00 00 00 00  └......FΣ¶☻.....└......Fσ¶☻.....
000001E0  C0 00 00 00 00 00 00 46  E6 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  E8 14 02 00 00 00 00 00  └......Fµ¶☻.....└......FΦ¶☻.....
00000200  C0 00 00 00 00 00 00 46  E9 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  EA 14 02 00 00 00 00 00  └......FΘ¶☻.....└......FΩ¶☻.....
00000220  C0 00 00 00 00 00 00 46  EB 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  EE 14 02 00 00 00 00 00  └......Fδ¶☻.....└......Fε¶☻.....
00000240  C0 00 00 00 00 00 00 46  EF 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  F0 14 02 00 00 00 00 00  └......F∩¶☻.....└......F≡¶☻.....
00000260  C0 00 00 00 00 00 00 46  F1 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  F2 14 02 00 00 00 00 00  └......F±¶☻.....└......F≥¶☻.....
00000280  C0 00 00 00 00 00 00 46  F3 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  F4 14 02 00 00 00 00 00  └......F≤¶☻.....└......F⌠¶☻.....
000002A0  C0 00 00 00 00 00 00 46  F5 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  F6 14 02 00 00 00 00 00  └......F⌡¶☻.....└......F÷¶☻.....
000002C0  C0 00 00 00 00 00 00 46  F7 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  F8 14 02 00 00 00 00 00  └......F≈¶☻.....└......F°¶☻.....
000002E0  C0 00 00 00 00 00 00 46  F9 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  FA 14 02 00 00 00 00 00  └......F∙¶☻.....└......F·¶☻.....
00000300  C0 00 00 00 00 00 00 46  FB 14 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  FC 14 02 00 00 00 00 00  └......F√¶☻.....└......Fⁿ¶☻.....
00000320  C0 00 00 00 00 00 00 46  80 9E E3 88 78 35 CF 11  AE 69 08 00 2B 2E 12 62  40 3B F2 FB F0 E3 1B 10  └......FÇ₧πêx5╧◄«i◘.+.↕b@;≥√≡π←►
00000340  84 88 00 AA 00 3E 56 F8  80 3B F2 FB F0 E3 1B 10  84 88 00 AA 00 3E 56 F8  C0 2A B2 EA C1 30 CF 11  äê.¬.>V°Ç;≥√≡π←►äê.¬.>V°└*▓Ω┴0╧◄
00000360  A7 EB 00 00 C0 5B AE 0B  C1 2A B2 EA C1 30 CF 11  A7 EB 00 00 C0 5B AE 0B  C2 2A B2 EA C1 30 CF 11  ºδ..└[«♂┴*▓Ω┴0╧◄ºδ..└[«♂┬*▓Ω┴0╧◄
00000380  A7 EB 00 00 C0 5B AE 0B  C3 2A B2 EA C1 30 CF 11  A7 EB 00 00 C0 5B AE 0B  C4 2A B2 EA C1 30 CF 11  ºδ..└[«♂├*▓Ω┴0╧◄ºδ..└[«♂─*▓Ω┴0╧◄
000003A0  A7 EB 00 00 C0 5B AE 0B  C5 2A B2 EA C1 30 CF 11  A7 EB 00 00 C0 5B AE 0B  C6 2A B2 EA C1 30 CF 11  ºδ..└[«♂┼*▓Ω┴0╧◄ºδ..└[«♂╞*▓Ω┴0╧◄
000003C0  A7 EB 00 00 C0 5B AE 0B  07 DF 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  05 DF 02 00 00 00 00 00  ºδ..└[«♂•▀☻.....└......F♣▀☻.....
000003E0  C0 00 00 00 00 00 00 46  06 DF 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  01 DF 02 00 00 00 00 00  └......F♠▀☻.....└......F☺▀☻.....
00000400  C0 00 00 00 00 00 00 46  09 DF 02 00 00 00 00 00  C0 00 00 00 00 00 00 46  40 E5 91 B0 E3 83 CF 11  └......F○▀☻.....└......F@σæ░πâ╧◄
00000420  A7 13 00 20 AF D7 97 62  41 27 D9 A4 CD 67 CF 11  96 F2 00 AA 00 A1 1D D9  52 41 53 53 48 45 4C 4C  º‼. »╫ùbA'┘ñ═g╧◄û≥.¬.í↔┘RASSHELL
00000440  00 00 00 00 54 72 61 63  65 44 75 6D 70 45 78 41  00 00 00 00 54 72 61 63  65 50 72 69 6E 74 66 45  ....TraceDumpExA....TracePrintfE
00000460  78 41 00 00 54 72 61 63  65 50 72 69 6E 74 66 41  00 00 00 00 54 72 61 63  65 44 65 72 65 67 69 73  xA..TracePrintfA....TraceDeregis
00000480  74 65 72 45 78 41 00 00  54 72 61 63 65 44 65 72  65 67 69 73 74 65 72 41  00 00 00 00 54 72 61 63  terExA..TraceDeregisterA....Trac
000004A0  65 52 65 67 69 73 74 65  72 45 78 41 00 00 00 00  52 00 54 00 55 00 54 00  49 00 4C 00 53 00 2E 00  eRegisterExA....R.T.U.T.I.L.S...
000004C0  44 00 4C 00 4C 00 00 00  50 00 68 00 6F 00 6E 00  65 00 62 00 6F 00 6F 00  6B 00 00 00 44 00 69 00  D.L.L...P.h.o.n.e.b.o.o.k...D.i.
000004E0  61 00 6C 00 2D 00 55 00  70 00 20 00 53 00 68 00  6F 00 72 00 74 00 63 00  75 00 74 00 00 00 00 00  a.l.-.U.p. .S.h.o.r.t.c.u.t.....
00000500  45 00 6E 00 74 00 72 00  79 00 00 00 00 00 00 00  52 65 61 64 53 68 6F 72  74 63 75 74 46 69 6C 65  E.n.t.r.y.......ReadShortcutFile
00000520  00 00 00 00 00 00 00 00  01 00 00 00 00 00 00 00  C0 00 00 00 00 00 00 46  00 00 00 00 00 00 00 00  ........☺.......└......F........
00000540  C0 00 00 00 00 00 00 46  53 74 72 44 75 70 20 4D  61 6C 6C 6F 63 20 66 61  69 6C 65 64 00 44 26 00  └......FStrDup Malloc failed.D&.
00000560  00 00 00 00 00 00 00 00  00 A2 26 00 00 58 20 00  00 FC 25 00 00 00 00 00  00 00 00 00 00 A6 27 00  .........ó&..X ..ⁿ%..........ª'.
00000580  00 10 20 00 00 38 26 00  00 00 00 00 00 00 00 00  00 D8 27 00 00 4C 20 00  00 58 26 00 00 00 00 00  .► ..8&..........╪'..L ..X&.....
000005A0  00 00 00 00 00 F8 27 00  00 6C 20 00 00 F0 25 00  00 00 00 00 00 00 00 00  00 3A 28 00 00 04 20 00  .....°'..l ..≡%..........:(..♦ .
000005C0  00 EC 25 00 00 00 00 00  00 00 00 00 00 48 28 00  00 00 20 00 00 00 00 00  00 00 00 00 00 00 00 00  .∞%..........H(... .............
000005E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  1E 28 00 00 02 28 00 00  00 00 00 00 CA 26 00 00  ................▲(..☻(......╩&..
00000600  FC 26 00 00 14 27 00 00  20 27 00 00 2E 27 00 00  3C 27 00 00 4E 27 00 00  5C 27 00 00 D6 26 00 00  ⁿ&..¶'.. '...'..<'..N'..\'..╓&..
00000620  E4 26 00 00 AE 26 00 00  8A 27 00 00 7A 27 00 00  68 27 00 00 00 00 00 00  B4 27 00 00 C6 27 00 00  Σ&..«&..è'..z'..h'......┤'..╞'..
00000640  00 00 00 00 60 26 00 00  96 26 00 00 84 26 00 00  72 26 00 00 00 00 00 00  E4 27 00 00 00 00 00 00  ....`&..û&..ä&..r&......Σ'......
00000660  3B 01 47 65 74 57 69 6E  64 6F 77 4C 6F 6E 67 57  00 00 F3 01 53 65 74 44  6C 67 49 74 65 6D 54 65  ;☺GetWindowLongW..≤☺SetDlgItemTe
00000680  78 74 57 00 1C 02 53 65  74 57 69 6E 64 6F 77 4C  6F 6E 67 57 00 00 65 02  77 73 70 72 69 6E 74 66  xtW.∟☻SetWindowLongW..e☻wsprintf
000006A0  57 00 55 53 45 52 33 32  2E 64 6C 6C 00 00 51 00  44 69 73 61 62 6C 65 54  68 72 65 61 64 4C 69 62  W.USER32.dll..Q.DisableThreadLib
000006C0  72 61 72 79 43 61 6C 6C  73 00 9A 01 4C 6F 63 61  6C 46 72 65 65 00 96 01  4C 6F 63 61 6C 41 6C 6C  raryCalls.Ü☺LocalFree.û☺LocalAll
000006E0  6F 63 00 00 7E 01 49 6E  74 65 72 6C 6F 63 6B 65  64 49 6E 63 72 65 6D 65  6E 74 00 00 7B 01 49 6E  oc..~☺InterlockedIncrement..{☺In
00000700  74 65 72 6C 6F 63 6B 65  64 44 65 63 72 65 6D 65  6E 74 00 00 9E 02 6C 73  74 72 63 70 79 57 00 00  terlockedDecrement..₧☻lstrcpyW..
00000720  5C 01 47 6C 6F 62 61 6C  46 72 65 65 00 00 18 00  43 6C 6F 73 65 48 61 6E  64 6C 65 00 3E 00 43 72  \☺GlobalFree..↑.CloseHandle.>.Cr
00000740  65 61 74 65 50 72 6F 63  65 73 73 57 00 00 55 01  47 6C 6F 62 61 6C 41 6C  6C 6F 63 00 A4 02 6C 73  eateProcessW..U☺GlobalAlloc.ñ☻ls
00000760  74 72 6C 65 6E 57 00 00  16 01 47 65 74 50 72 6F  63 41 64 64 72 65 73 73  00 00 93 01 4C 6F 61 64  trlenW..▬☺GetProcAddress..ô☺Load
00000780  4C 69 62 72 61 72 79 57  00 00 13 01 47 65 74 50  72 69 76 61 74 65 50 72  6F 66 69 6C 65 53 74 72  LibraryW..‼☺GetPrivateProfileStr
000007A0  69 6E 67 57 00 00 4B 45  52 4E 45 4C 33 32 2E 64  6C 6C 00 00 11 00 44 72  61 67 51 75 65 72 79 46  ingW..KERNEL32.dll..◄.DragQueryF
000007C0  69 6C 65 57 00 00 41 00  53 48 47 65 74 46 69 6C  65 49 6E 66 6F 57 00 00  53 48 45 4C 4C 33 32 2E  ileW..A.SHGetFileInfoW..SHELL32.
000007E0  64 6C 6C 00 DC 00 52 65  6C 65 61 73 65 53 74 67  4D 65 64 69 75 6D 00 00  6F 6C 65 33 32 2E 64 6C  dll.▄.ReleaseStgMedium..ole32.dl
00000800  6C 00 0A 00 44 65 73 74  72 6F 79 50 72 6F 70 65  72 74 79 53 68 65 65 74  50 61 67 65 00 00 03 00  l.◙.DestroyPropertySheetPage..♥.
00000820  43 72 65 61 74 65 50 72  6F 70 65 72 74 79 53 68  65 65 74 50 61 67 65 57  00 00 43 4F 4D 43 54 4C  CreatePropertySheetPageW..COMCTL
00000840  33 32 2E 64 6C 6C 00 00  41 44 56 41 50 49 33 32  2E 64 6C 6C 00 00 00 00  00 00 00 00 00 00 00 00  32.dll..ADVAPI32.dll............
00000860  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000880  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000008A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000008C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000008E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000900  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000920  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000940  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000960  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000980  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................