| / Chip 1997 November
/ CHIP_CD_1997_11_PL.iso / software / testsoft / pca32 / disk7 / data.7 / winnt / gernuwa.sys
| < prev |
| MS-DOS/Windows or OS/2 Executable | 1997-07-22 | 7.5 KB |
MacOS 8.1
|
Win98
|
DOS
browse contents |
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | MS-DOS Driver (executable/msDOSDriver) | ext | Unsupported |
| 1% | dexvert | OS/2 Device Driver (other/os2DeviceDriver) | ext | Unsupported |
| 1% | dexvert | SYSLINUX loader (other/syslinuxLoader) | ext | Unsupported |
| 1% | dexvert | FreeDOS KEYBoard layout collection (other/freeDOSKEYBoardLayoutCollection) | ext | Unsupported |
| 1% | dexvert | MS-DOS KEYBoard Layout file (other/msDOSKEYBoardLayoutFile) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (native), Intel i386, 4 sections | default | |
| 99% | file | data | default | |
| 35% | TrID | Win32 Executable (generic) | default | |
| 16% | TrID | Windows Icons Library (generic) | default (weak) | |
| 16% | TrID | OS/2 Executable (generic) | default | |
| 15% | TrID | Generic Win/DOS Executable | default | |
| 15% | TrID | DOS Executable Generic | default (weak) | |
| 1% | dearkID | deark: exe (PE32) | default (weak) | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 04 00 | 84 f7 d4 33 00 11 00 00 |PE..L...|...3....|
|00000090| 4d 00 00 00 e0 00 06 01 | 0b 01 04 14 40 0a 00 00 |M.......|....@...|
|000000a0| 80 04 00 00 00 00 00 00 | 54 04 00 00 20 02 00 00 |........|T... ...|
|000000b0| 20 0b 00 00 00 00 01 00 | 20 00 00 00 20 00 00 00 | .......| ... ...|
|000000c0| 04 00 00 00 04 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| e0 10 00 00 20 02 00 00 | 46 79 00 00 01 00 00 00 |.... ...|Fy......|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 20 0b 00 00 28 00 00 00 | 60 0c 00 00 b0 03 00 00 | ...(...|`.......|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 20 10 00 00 64 00 00 00 | 60 02 00 00 54 00 00 00 | ...d...|`...T...|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 20 02 00 00 38 00 00 00 |........| ...8...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| f0 08 00 00 20 02 00 00 | 00 09 00 00 20 02 00 00 |.... ...|.... ...|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 68 |........|.... ..h|
|000001a0| 49 4e 49 54 00 00 00 00 | 2a 01 00 00 20 0b 00 00 |INIT....|*... ...|
|000001b0| 40 01 00 00 20 0b 00 00 | 00 00 00 00 00 00 00 00 |@... ...|........|
|000001c0| 00 00 00 00 20 00 00 e2 | 2e 72 73 72 63 00 00 00 |.... ...|.rsrc...|
|000001d0| b0 03 00 00 60 0c 00 00 | c0 03 00 00 60 0c 00 00 |....`...|....`...|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|000001f0| 2e 72 65 6c 6f 63 00 00 | a4 00 00 00 20 10 00 00 |.reloc..|.... ...|
|00000200| c0 00 00 00 20 10 00 00 | 00 00 00 00 00 00 00 00 |.... ...|........|
|00000210| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|00000220| dc 0b 00 00 98 0b 00 00 | a2 0b 00 00 ac 0b 00 00 |........|........|
|00000230| ba 0b 00 00 c4 0b 00 00 | d2 0b 00 00 80 0b 00 00 |........|........|
|00000240| ea 0b 00 00 f6 0b 00 00 | 06 0c 00 00 18 0c 00 00 |........|........|
|00000250| 3e 0c 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |>.......|........|
|00000260| 00 00 00 00 84 f7 d4 33 | 00 00 00 00 01 00 00 00 |.......3|........|
|00000270| 5a 0b 00 00 00 00 00 00 | e0 10 00 00 00 00 00 00 |Z.......|........|
|00000280| 84 f7 d4 33 00 00 00 00 | 04 00 00 00 10 01 00 00 |...3....|........|
|00000290| 00 00 00 00 3c 1c 00 00 | 00 00 00 00 84 f7 d4 33 |....<...|.......3|
|000002a0| 00 00 00 00 03 00 00 00 | 80 00 00 00 00 00 00 00 |........|........|
|000002b0| 4c 1d 00 00 5c 00 44 00 | 65 00 76 00 69 00 63 00 |L...\.D.|e.v.i.c.|
|000002c0| 65 00 5c 00 56 00 69 00 | 64 00 65 00 6f 00 58 00 |e.\.V.i.|d.e.o.X.|
|000002d0| 00 00 00 00 00 00 00 00 | ff ff ff ff 00 00 00 00 |........|........|
|000002e0| 60 06 01 00 49 00 6e 00 | 73 00 74 00 61 00 6c 00 |`...I.n.|s.t.a.l.|
|000002f0| 6c 00 65 00 64 00 44 00 | 69 00 73 00 70 00 6c 00 |l.e.d.D.|i.s.p.l.|
|00000300| 61 00 79 00 44 00 72 00 | 69 00 76 00 65 00 72 00 |a.y.D.r.|i.v.e.r.|
|00000310| 73 00 00 00 52 00 65 00 | 67 00 6b 00 65 00 79 00 |s...R.e.|g.k.e.y.|
|00000320| 00 00 00 00 5c 00 52 00 | 65 00 67 00 69 00 73 00 |....\.R.|e.g.i.s.|
|00000330| 74 00 72 00 79 00 5c 00 | 4d 00 61 00 63 00 68 00 |t.r.y.\.|M.a.c.h.|
|00000340| 69 00 6e 00 65 00 5c 00 | 53 00 79 00 73 00 74 00 |i.n.e.\.|S.y.s.t.|
|00000350| 65 00 6d 00 5c 00 43 00 | 75 00 72 00 72 00 65 00 |e.m.\.C.|u.r.r.e.|
|00000360| 6e 00 74 00 43 00 6f 00 | 6e 00 74 00 72 00 6f 00 |n.t.C.o.|n.t.r.o.|
|00000370| 6c 00 53 00 65 00 74 00 | 5c 00 53 00 65 00 72 00 |l.S.e.t.|\.S.e.r.|
|00000380| 76 00 69 00 63 00 65 00 | 73 00 5c 00 61 00 77 00 |v.i.c.e.|s.\.a.w.|
|00000390| 5f 00 68 00 6f 00 73 00 | 74 00 00 00 00 00 00 00 |_.h.o.s.|t.......|
|000003a0| ff ff ff ff 00 00 00 00 | 02 07 01 00 5c 00 52 00 |........|....\.R.|
|000003b0| 65 00 67 00 69 00 73 00 | 74 00 72 00 79 00 5c 00 |e.g.i.s.|t.r.y.\.|
|000003c0| 4d 00 61 00 63 00 68 00 | 69 00 6e 00 65 00 5c 00 |M.a.c.h.|i.n.e.\.|
|000003d0| 53 00 79 00 73 00 74 00 | 65 00 6d 00 5c 00 43 00 |S.y.s.t.|e.m.\.C.|
|000003e0| 75 00 72 00 72 00 65 00 | 6e 00 74 00 43 00 6f 00 |u.r.r.e.|n.t.C.o.|
|000003f0| 6e 00 74 00 72 00 6f 00 | 6c 00 53 00 65 00 74 00 |n.t.r.o.|l.S.e.t.|
|00000400| 5c 00 48 00 61 00 72 00 | 64 00 77 00 61 00 72 00 |\.H.a.r.|d.w.a.r.|
|00000410| 65 00 20 00 50 00 72 00 | 6f 00 66 00 69 00 6c 00 |e. .P.r.|o.f.i.l.|
|00000420| 65 00 73 00 00 00 00 00 | ff ff ff ff 00 00 00 00 |e.s.....|........|
|00000430| f3 07 01 00 00 00 00 00 | ff ff ff ff 00 00 00 00 |........|........|
|00000440| 8d 08 01 00 00 00 00 00 | ff ff ff ff 00 00 00 00 |........|........|
|00000450| 5e 09 01 00 8b 44 24 04 | c7 40 34 69 04 01 00 e8 |^....D$.|.@4i....|
|00000460| 08 00 00 00 33 c0 c2 08 | 00 c2 04 00 55 8b ec 81 |....3...|....U...|
|00000470| ec 10 02 00 00 56 57 33 | f6 e8 28 02 00 00 84 c0 |.....VW3|..(.....|
|00000480| 74 65 8d bd f0 fd ff ff | 33 c0 b9 41 00 00 00 f3 |te......|3..A....|
|00000490| ab 68 b4 02 01 00 8d 85 | f0 fd ff ff 50 ff 15 28 |.h......|....P..(|
|000004a0| 02 01 00 83 c4 08 8d 85 | f0 fd ff ff 50 ff 15 24 |........|....P..$|
|000004b0| 02 01 00 83 c4 04 8d 4e | 30 66 89 8c 45 ee fd ff |.......N|0f..E...|
|000004c0| ff 8d 55 f8 8d 85 f0 fd | ff ff 50 52 ff 15 3c 02 |..U.....|..PR..<.|
|000004d0| 01 00 ff 75 fc ff 75 f8 | e8 10 00 00 00 84 c0 74 |...u..u.|.......t|
|000004e0| 06 46 83 fe 0a 75 aa 5f | 5e 8b e5 5d c3 64 a1 00 |.F...u._|^..].d..|
|000004f0| 00 00 00 55 8b ec 6a ff | 68 d8 02 01 00 68 40 0a |...U..j.|h....h@.|
|00000500| 01 00 50 33 c9 64 89 25 | 00 00 00 00 81 ec 30 02 |..P3.d.%|......0.|
|00000510| 00 00 8b 45 0c 88 4d e7 | 53 89 45 d0 56 89 4d dc |...E..M.|S.E.V.M.|
|00000520| 57 89 4d d4 89 65 e8 89 | 4d d8 89 4d fc 83 c0 02 |W.M..e..|M..M....|
|00000530| 89 45 d0 8b 45 d0 83 45 | d0 02 66 83 38 5c 75 f3 |.E..E..E|..f.8\u.|
|00000540| 83 6d d0 02 8d bd c0 fd | ff ff 33 c0 b9 41 00 00 |.m......|..3..A..|
|00000550| 00 f3 ab 68 24 03 01 00 | 8d 85 c0 fd ff ff 50 ff |...h$...|......P.|
|00000560| 15 28 02 01 00 83 c4 08 | ff 75 d0 8d 85 c0 fd ff |.(......|.u......|
|00000570| ff 50 ff 15 38 02 01 00 | 83 c4 08 8d 45 dc 50 6a |.P..8...|....E.Pj|
|00000580| 00 68 06 00 02 00 8d 85 | c0 fd ff ff 50 6a 00 e8 |.h......|....Pj..|
|00000590| 94 01 00 00 85 c0 0f 8c | b2 00 00 00 8d 45 cc 50 |........|.....E.P|
|000005a0| 8d 45 d4 50 68 14 03 01 | 00 33 db 53 ff 75 dc e8 |.E.Ph...|.3.S.u..|
|000005b0| f2 02 00 00 3b c3 0f 8c | 96 00 00 00 8d 45 cc 50 |....;...|.....E.P|
|000005c0| 8d 45 d8 50 68 e4 02 01 | 00 53 ff 75 dc e8 d4 02 |.E.Ph...|.S.u....|
|000005d0| 00 00 3b c3 7c 7c ff 75 | dc ff 15 34 02 01 00 89 |..;.||.u|...4....|
|000005e0| 5d dc 3b c3 7c 6c 8d bd | c0 fd ff ff 33 c0 b9 41 |].;.|l..|....3..A|
|000005f0| 00 00 00 f3 ab 8b 45 d4 | 8b 40 08 8b 75 d4 8d bd |......E.|.@..u...|
|00000600| c0 fd ff ff 83 c6 0c 8b | c8 c1 e9 02 f3 a5 8b c8 |........|........|
|00000610| 83 e1 03 f3 a4 8d 45 dc | 50 53 68 06 00 02 00 8d |......E.|PSh.....|
|00000620| 85 c0 fd ff ff 50 53 e8 | fc 00 00 00 3b c3 7c 22 |.....PS.|....;.|"|
|00000630| 6a 07 8b 45 d8 ff 70 08 | 83 c0 0c 50 68 e4 02 01 |j..E..p.|...Ph...|
|00000640| 00 53 ff 75 dc e8 c2 01 | 00 00 3b c3 7c 04 c6 45 |.S.u....|..;.|..E|
|00000650| e7 01 c7 45 fc ff ff ff | ff e8 02 00 00 00 eb 33 |...E....|.......3|
|00000660| 83 7d dc 00 74 09 ff 75 | dc ff 15 30 02 01 00 83 |.}..t..u|...0....|
|00000670| 7d d4 00 74 09 ff 75 d4 | ff 15 2c 02 01 00 83 7d |}..t..u.|..,....}|
|00000680| d8 00 74 09 ff 75 d8 ff | 15 2c 02 01 00 8b 65 e8 |..t..u..|.,....e.|
|00000690| 8a 45 e7 8b 4d f0 5f 64 | 89 0d 00 00 00 00 5e 5b |.E..M._d|......^[|
|000006a0| 8b e5 5d c2 08 00 64 a1 | 00 00 00 00 55 8b ec 6a |..]...d.|....U..j|
|000006b0| ff 68 a0 03 01 00 68 40 | 0a 01 00 50 64 89 25 00 |.h....h@|...Pd.%.|
|000006c0| 00 00 00 83 ec 14 53 56 | 57 33 db 89 65 e8 88 5d |......SV|W3..e..]|
|000006d0| e7 89 5d e0 89 5d fc 8d | 45 e0 50 53 68 3f 00 0f |..]..]..|E.PSh?..|
|000006e0| 00 68 ac 03 01 00 53 e8 | 3c 00 00 00 3b c3 7c 04 |.h....S.|<...;.|.|
|000006f0| c6 45 e7 01 c7 45 fc ff | ff ff ff e8 02 00 00 00 |.E...E..|........|
|00000700| eb 15 83 7d e0 00 74 09 | ff 75 e0 ff 15 30 02 01 |...}..t.|.u...0..|
|00000710| 00 8b 65 e8 8a 45 e7 8b | 4d f0 5f 64 89 0d 00 00 |..e..E..|M._d....|
|00000720| 00 00 5e 5b 8b e5 5d c3 | 64 a1 00 00 00 00 55 8b |..^[..].|d.....U.|
|00000730| ec 6a ff 68 28 04 01 00 | 68 40 0a 01 00 50 64 89 |.j.h(...|h@...Pd.|
|00000740| 25 00 00 00 00 83 ec 30 | 53 56 57 89 65 e8 33 c9 |%......0|SVW.e.3.|
|00000750| 89 4d fc 8b 45 08 3b c1 | 74 0d 8b 08 8b 40 04 89 |.M..E.;.|t....@..|
|00000760| 4d d8 89 45 dc eb 12 8b | 45 0c 85 c0 74 77 50 8d |M..E....|E...twP.|
|00000770| 45 d8 50 ff 15 3c 02 01 | 00 be 18 00 00 00 89 75 |E.P..<..|.......u|
|00000780| c0 33 db 89 5d c4 bf 40 | 00 00 00 89 7d cc 8d 45 |.3..]..@|....}..E|
|00000790| d8 89 45 c8 89 5d d0 89 | 5d d4 8d 45 c0 50 ff 75 |..E..]..|]..E.P.u|
|000007a0| 10 ff 75 18 ff 15 40 02 | 01 00 89 45 e4 3b c3 7d |..u...@.|...E.;.}|
|000007b0| 34 38 5d 14 74 2f 89 75 | c0 89 5d c4 89 7d cc 8d |48].t/.u|..]..}..|
|000007c0| 45 d8 89 45 c8 89 5d d0 | 89 5d d4 8d 45 e0 50 53 |E..E..].|.]..E.PS|
|000007d0| 53 53 8d 45 c0 50 ff 75 | 10 ff 75 18 ff 15 20 02 |SS.E.P.u|..u... .|
|000007e0| 01 00 89 45 e4 c7 45 fc | ff ff ff ff e8 02 00 00 |...E..E.|........|
|000007f0| 00 eb 06 8b 65 e8 8b 45 | e4 8b 4d f0 5f 64 89 0d |....e..E|..M._d..|
|00000800| 00 00 00 00 5e 5b 8b e5 | 5d c2 14 00 64 a1 00 00 |....^[..|]...d...|
|00000810| 00 00 55 8b ec 6a ff 68 | 38 04 01 00 68 40 0a 01 |..U..j.h|8...h@..|
|00000820| 00 50 64 89 25 00 00 00 | 00 83 ec 14 c7 45 e4 01 |.Pd.%...|.....E..|
|00000830| 00 00 c0 53 56 57 89 65 | e8 33 c9 89 4d fc 8b 45 |...SVW.e|.3..M..E|
|00000840| 0c 3b c1 74 0d 8b 08 8b | 40 04 89 4d dc 89 45 e0 |.;.t....|@..M..E.|
|00000850| eb 12 8b 45 10 85 c0 74 | 26 50 8d 45 dc 50 ff 15 |...E...t|&P.E.P..|
|00000860| 3c 02 01 00 ff 75 18 ff | 75 14 ff 75 1c 6a 00 8d |<....u..|u..u.j..|
|00000870| 45 dc 50 ff 75 08 ff 15 | 44 02 01 00 89 45 e4 c7 |E.P.u...|D....E..|
|00000880| 45 fc ff ff ff ff e8 02 | 00 00 00 eb 06 8b 65 e8 |E.......|......e.|
|00000890| 8b 45 e4 8b 4d f0 5f 64 | 89 0d 00 00 00 00 5e 5b |.E..M._d|......^[|
|000008a0| 8b e5 5d c2 18 00 64 a1 | 00 00 00 00 55 8b ec 6a |..]...d.|....U..j|
|000008b0| ff 68 48 04 01 00 68 40 | 0a 01 00 50 64 89 25 00 |.hH...h@|...Pd.%.|
|000008c0| 00 00 00 83 ec 18 c7 45 | e4 01 00 00 c0 53 56 57 |.......E|.....SVW|
|000008d0| 89 65 e8 33 c9 89 4d fc | 8b 45 0c 3b c1 74 0d 8b |.e.3..M.|.E.;.t..|
|000008e0| 08 8b 40 04 89 4d d8 89 | 45 dc eb 12 8b 45 10 85 |..@..M..|E....E..|
|000008f0| c0 74 5d 50 8d 45 d8 50 | ff 15 3c 02 01 00 8b 7d |.t]P.E.P|..<....}|
|00000900| 18 57 6a 00 6a 00 6a 02 | 8d 45 d8 50 ff 75 08 ff |.Wj.j.j.|.E.P.u..|
|00000910| 15 48 02 01 00 89 45 e4 | 3d 23 00 00 c0 75 31 8b |.H....E.|=#...u1.|
|00000920| 1f 83 c3 10 68 44 64 6b | 20 53 6a 01 ff 15 4c 02 |....hDdk| Sj...L.|
|00000930| 01 00 8b 4d 14 89 01 85 | c0 74 15 57 53 50 6a 02 |...M....|.t.WSPj.|
|00000940| 8d 45 d8 50 ff 75 08 ff | 15 48 02 01 00 89 45 e4 |.E.P.u..|.H....E.|
|00000950| c7 45 fc ff ff ff ff e8 | 02 00 00 00 eb 06 8b 65 |.E......|.......e|
|00000960| e8 8b 45 e4 8b 4d f0 5f | 64 89 0d 00 00 00 00 5e |..E..M._|d......^|
|00000970| 5b 8b e5 5d c2 14 00 cc | 55 8b ec 53 56 57 55 6a |[..]....|U..SVWUj|
|00000980| 00 6a 00 68 90 09 01 00 | ff 75 08 e8 7a 01 00 00 |.j.h....|.u..z...|
|00000990| 5d 5f 5e 5b 8b e5 5d c3 | 8b 4c 24 04 f7 41 04 06 |]_^[..].|.L$..A..|
|000009a0| 00 00 00 b8 01 00 00 00 | 74 0f 8b 44 24 08 8b 54 |........|t..D$..T|
|000009b0| 24 10 89 02 b8 03 00 00 | 00 c3 53 56 57 8b 44 24 |$.......|..SVW.D$|
|000009c0| 10 50 6a fe 68 98 09 01 | 00 64 ff 35 00 00 00 00 |.Pj.h...|.d.5....|
|000009d0| 64 89 25 00 00 00 00 8b | 44 24 20 8b 58 08 8b 70 |d.%.....|D$ .X..p|
|000009e0| 0c 83 fe ff 74 20 3b 74 | 24 24 74 1a 8d 34 76 8b |....t ;t|$$t..4v.|
|000009f0| 0c b3 89 4c 24 08 89 48 | 0c 83 7c b3 04 00 75 04 |...L$..H|..|...u.|
|00000a00| ff 54 b3 08 eb d1 64 8f | 05 00 00 00 00 83 c4 0c |.T....d.|........|
|00000a10| 5f 5e 5b c3 33 c0 64 8b | 0d 00 00 00 00 81 79 04 |_^[.3.d.|......y.|
|00000a20| 98 09 01 00 75 10 8b 51 | 0c 8b 52 0c 39 51 08 75 |....u..Q|..R.9Q.u|
|00000a30| 05 b8 01 00 00 00 c3 cc | 56 43 32 30 58 43 30 30 |........|VC20XC00|
|00000a40| 55 8b ec 83 ec 08 53 56 | 57 55 fc 8b 5d 0c 8b 45 |U.....SV|WU..]..E|
|00000a50| 08 f7 40 04 06 00 00 00 | 75 77 89 45 f8 8b 45 10 |..@.....|uw.E..E.|
|00000a60| 89 45 fc 8d 45 f8 89 43 | fc 8b 73 0c 8b 7b 08 83 |.E..E..C|..s..{..|
|00000a70| fe ff 74 56 8d 0c 76 83 | 7c 8f 04 00 74 3a 56 55 |..tV..v.||...t:VU|
|00000a80| 8d 6b 10 ff 54 8f 04 5d | 5e 8b 5d 0c 0b c0 74 28 |.k..T..]|^.]...t(|
|00000a90| 78 31 8b 7b 08 53 e8 dd | fe ff ff 83 c4 04 8d 6b |x1.{.S..|.......k|
|00000aa0| 10 56 53 e8 12 ff ff ff | 83 c4 08 8d 0c 76 8b 04 |.VS.....|.....v..|
|00000ab0| 8f 89 43 0c ff 54 8f 08 | 8b 7b 08 8d 0c 76 8b 34 |..C..T..|.{...v.4|
|00000ac0| 8f eb ac b8 00 00 00 00 | eb 1c b8 01 00 00 00 eb |........|........|
|00000ad0| 15 55 8d 6b 10 6a ff 53 | e8 dd fe ff ff 83 c4 08 |.U.k.j.S|........|
|00000ae0| 5d b8 01 00 00 00 5d 5f | 5e 5b 8b e5 5d c3 55 8b |].....]_|^[..].U.|
|00000af0| 4c 24 08 8b 29 8b 41 1c | 50 8b 41 18 50 e8 b8 fe |L$..).A.|P.A.P...|
|00000b00| ff ff 83 c4 08 5d c2 04 | 00 cc ff 25 50 02 01 00 |.....]..|...%P...|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 48 0b 00 00 00 00 00 00 | 00 00 00 00 30 0c 00 00 |H.......|....0...|
|00000b30| 20 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 | .......|........|
|00000b40| 00 00 00 00 00 00 00 00 | dc 0b 00 00 98 0b 00 00 |........|........|
|00000b50| a2 0b 00 00 ac 0b 00 00 | ba 0b 00 00 c4 0b 00 00 |........|........|
|00000b60| d2 0b 00 00 80 0b 00 00 | ea 0b 00 00 f6 0b 00 00 |........|........|
|00000b70| 06 0c 00 00 18 0c 00 00 | 3e 0c 00 00 00 00 00 00 |........|>.......|
|00000b80| bc 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00000b90| 53 74 72 69 6e 67 00 00 | d2 03 77 63 73 6c 65 6e |String..|..wcslen|
|00000ba0| 00 00 d0 03 77 63 73 63 | 70 79 00 00 3c 00 45 78 |....wcsc|py..<.Ex|
|00000bb0| 46 72 65 65 50 6f 6f 6c | 00 00 44 03 5a 77 43 6c |FreePool|..D.ZwCl|
|00000bc0| 6f 73 65 00 4e 03 5a 77 | 44 65 6c 65 74 65 4b 65 |ose.N.Zw|DeleteKe|
|00000bd0| 79 00 cd 03 77 63 73 63 | 61 74 00 00 4a 03 5a 77 |y...wcsc|at..J.Zw|
|00000be0| 43 72 65 61 74 65 4b 65 | 79 00 62 03 5a 77 4f 70 |CreateKe|y.b.ZwOp|
|00000bf0| 65 6e 4b 65 79 00 83 03 | 5a 77 53 65 74 56 61 6c |enKey...|ZwSetVal|
|00000c00| 75 65 4b 65 79 00 75 03 | 5a 77 51 75 65 72 79 56 |ueKey.u.|ZwQueryV|
|00000c10| 61 6c 75 65 4b 65 79 00 | 30 00 45 78 41 6c 6c 6f |alueKey.|0.ExAllo|
|00000c20| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00000c30| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 04 03 |ntoskrnl|.exe....|
|00000c40| 52 74 6c 55 6e 77 69 6e | 64 00 00 00 00 00 00 00 |RtlUnwin|d.......|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| 00 00 00 00 82 f7 d4 33 | 00 00 00 00 00 00 01 00 |.......3|........|
|00000c70| 10 00 00 00 18 00 00 80 | 00 00 00 00 82 f7 d4 33 |........|.......3|
|00000c80| 00 00 00 00 00 00 01 00 | 01 00 00 00 30 00 00 80 |........|....0...|
|00000c90| 00 00 00 00 82 f7 d4 33 | 00 00 00 00 00 00 01 00 |.......3|........|
|00000ca0| 09 04 00 00 48 00 00 00 | c0 0c 00 00 50 03 00 00 |....H...|....P...|
|00000cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cc0| 50 03 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 |P.4...V.|S._.V.E.|
|00000cd0| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|00000ce0| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|00000cf0| 00 00 04 00 01 00 22 05 | 00 00 04 00 01 00 22 05 |......".|......".|
|00000d00| 3f 00 00 00 00 00 00 00 | 04 00 04 00 03 00 00 00 |?.......|........|
|00000d10| 07 00 00 00 00 00 00 00 | 00 00 00 00 ae 02 00 00 |........|........|
|00000d20| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|00000d30| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|00000d40| 8a 02 00 00 01 00 30 00 | 34 00 30 00 39 00 30 00 |......0.|4.0.9.0.|
|00000d50| 34 00 42 00 30 00 00 00 | 4c 00 16 00 01 00 43 00 |4.B.0...|L.....C.|
|00000d60| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00000d70| 6d 00 65 00 00 00 00 00 | 4d 00 69 00 63 00 72 00 |m.e.....|M.i.c.r.|
|00000d80| 6f 00 73 00 6f 00 66 00 | 74 00 20 00 43 00 6f 00 |o.s.o.f.|t. .C.o.|
|00000d90| 72 00 70 00 6f 00 72 00 | 61 00 74 00 69 00 6f 00 |r.p.o.r.|a.t.i.o.|
|00000da0| 6e 00 00 00 62 00 1d 00 | 01 00 46 00 69 00 6c 00 |n...b...|..F.i.l.|
|00000db0| 65 00 44 00 65 00 73 00 | 63 00 72 00 69 00 70 00 |e.D.e.s.|c.r.i.p.|
|00000dc0| 74 00 69 00 6f 00 6e 00 | 00 00 00 00 70 00 63 00 |t.i.o.n.|....p.c.|
|00000dd0| 41 00 6e 00 79 00 77 00 | 68 00 65 00 72 00 65 00 |A.n.y.w.|h.e.r.e.|
|00000de0| 33 00 32 00 20 00 41 00 | 57 00 55 00 4e 00 52 00 |3.2. .A.|W.U.N.R.|
|00000df0| 45 00 47 00 20 00 64 00 | 72 00 69 00 76 00 65 00 |E.G. .d.|r.i.v.e.|
|00000e00| 72 00 20 00 00 00 00 00 | 2a 00 05 00 01 00 46 00 |r. .....|*.....F.|
|00000e10| 69 00 6c 00 65 00 56 00 | 65 00 72 00 73 00 69 00 |i.l.e.V.|e.r.s.i.|
|00000e20| 6f 00 6e 00 00 00 00 00 | 34 00 2e 00 30 00 30 00 |o.n.....|4...0.0.|
|00000e30| 00 00 00 00 38 00 0c 00 | 01 00 49 00 6e 00 74 00 |....8...|..I.n.t.|
|00000e40| 65 00 72 00 6e 00 61 00 | 6c 00 4e 00 61 00 6d 00 |e.r.n.a.|l.N.a.m.|
|00000e50| 65 00 00 00 67 00 65 00 | 72 00 6e 00 75 00 77 00 |e...g.e.|r.n.u.w.|
|00000e60| 61 00 2e 00 73 00 79 00 | 73 00 00 00 74 00 28 00 |a...s.y.|s...t.(.|
|00000e70| 01 00 4c 00 65 00 67 00 | 61 00 6c 00 43 00 6f 00 |..L.e.g.|a.l.C.o.|
|00000e80| 70 00 79 00 72 00 69 00 | 67 00 68 00 74 00 00 00 |p.y.r.i.|g.h.t...|
|00000e90| 43 00 6f 00 70 00 79 00 | 72 00 69 00 67 00 68 00 |C.o.p.y.|r.i.g.h.|
|00000ea0| 74 00 20 00 28 00 43 00 | 29 00 20 00 4d 00 69 00 |t. .(.C.|). .M.i.|
|00000eb0| 63 00 72 00 6f 00 73 00 | 6f 00 66 00 74 00 20 00 |c.r.o.s.|o.f.t. .|
|00000ec0| 43 00 6f 00 72 00 70 00 | 2e 00 20 00 31 00 39 00 |C.o.r.p.|.. .1.9.|
|00000ed0| 38 00 31 00 2d 00 31 00 | 39 00 39 00 36 00 00 00 |8.1.-.1.|9.9.6...|
|00000ee0| 40 00 0c 00 01 00 4f 00 | 72 00 69 00 67 00 69 00 |@.....O.|r.i.g.i.|
|00000ef0| 6e 00 61 00 6c 00 46 00 | 69 00 6c 00 65 00 6e 00 |n.a.l.F.|i.l.e.n.|
|00000f00| 61 00 6d 00 65 00 00 00 | 67 00 65 00 72 00 6e 00 |a.m.e...|g.e.r.n.|
|00000f10| 75 00 77 00 61 00 2e 00 | 73 00 79 00 73 00 00 00 |u.w.a...|s.y.s...|
|00000f20| 7a 00 2d 00 01 00 50 00 | 72 00 6f 00 64 00 75 00 |z.-...P.|r.o.d.u.|
|00000f30| 63 00 74 00 4e 00 61 00 | 6d 00 65 00 00 00 00 00 |c.t.N.a.|m.e.....|
|00000f40| 4d 00 69 00 63 00 72 00 | 6f 00 73 00 6f 00 66 00 |M.i.c.r.|o.s.o.f.|
|00000f50| 74 00 28 00 52 00 29 00 | 20 00 57 00 69 00 6e 00 |t.(.R.).| .W.i.n.|
|00000f60| 64 00 6f 00 77 00 73 00 | 20 00 4e 00 54 00 28 00 |d.o.w.s.| .N.T.(.|
|00000f70| 54 00 4d 00 29 00 20 00 | 4f 00 70 00 65 00 72 00 |T.M.). .|O.p.e.r.|
|00000f80| 61 00 74 00 69 00 6e 00 | 67 00 20 00 53 00 79 00 |a.t.i.n.|g. .S.y.|
|00000f90| 73 00 74 00 65 00 6d 00 | 00 00 00 00 2e 00 05 00 |s.t.e.m.|........|
|00000fa0| 01 00 50 00 72 00 6f 00 | 64 00 75 00 63 00 74 00 |..P.r.o.|d.u.c.t.|
|00000fb0| 56 00 65 00 72 00 73 00 | 69 00 6f 00 6e 00 00 00 |V.e.r.s.|i.o.n...|
|00000fc0| 34 00 2e 00 30 00 30 00 | 00 00 00 00 44 00 00 00 |4...0.0.|....D...|
|00000fd0| 01 00 56 00 61 00 72 00 | 46 00 69 00 6c 00 65 00 |..V.a.r.|F.i.l.e.|
|00000fe0| 49 00 6e 00 66 00 6f 00 | 00 00 00 00 24 00 04 00 |I.n.f.o.|....$...|
|00000ff0| 00 00 54 00 72 00 61 00 | 6e 00 73 00 6c 00 61 00 |..T.r.a.|n.s.l.a.|
|00001000| 74 00 69 00 6f 00 6e 00 | 00 00 00 00 09 04 b0 04 |t.i.o.n.|........|
|00001010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001020| 00 00 00 00 64 00 00 00 | e0 32 a8 33 30 34 40 34 |....d...|.2.304@4|
|00001030| 50 34 5b 34 92 34 9f 34 | af 34 ce 34 f9 34 fe 34 |P4[4.4.4|.4.4.4.4|
|00001040| 54 35 61 35 74 35 a5 35 | c5 35 db 35 3d 36 6b 36 |T5a5t5.5|.5.5=6k6|
|00001050| 7a 36 89 36 b2 36 b7 36 | e2 36 0d 37 34 37 39 37 |z6.6.6.6|.6.74797|
|00001060| 75 37 a6 37 de 37 18 38 | 1d 38 60 38 78 38 b2 38 |u7.7.7.8|.8`8x8.8|
|00001070| b7 38 fa 38 11 39 2e 39 | 49 39 84 39 c5 39 20 3a |.8.8.9.9|I9.9.9 :|
|00001080| 0c 3b 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.;......|........|
|00001090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010e0| 4d 00 00 00 20 00 00 00 | 00 00 00 00 20 00 00 00 |M... ...|.... ...|
|000010f0| 20 02 00 00 60 0c 00 00 | 20 0b 00 00 a0 06 00 00 | ...`...| .......|
|00001100| 24 54 33 30 37 37 00 00 | 28 04 00 00 01 00 00 00 |$T3077..|(.......|
|00001110| 03 00 24 54 33 30 38 37 | 00 00 38 04 00 00 01 00 |..$T3087|..8.....|
|00001120| 00 00 03 00 24 54 33 30 | 39 35 00 00 48 04 00 00 |....$T30|95..H...|
|00001130| 01 00 00 00 03 00 24 54 | 33 31 31 33 00 00 d8 02 |......$T|3113....|
|00001140| 00 00 01 00 00 00 03 00 | 24 54 33 31 32 34 00 00 |........|$T3124..|
|00001150| a0 03 00 00 01 00 00 00 | 03 00 2e 72 73 72 63 24 |........|...rsrc$|
|00001160| 30 32 c0 0c 00 00 03 00 | 00 00 03 00 2e 69 64 61 |02......|.....ida|
|00001170| 74 61 24 36 30 0c 00 00 | 02 00 00 00 03 00 2e 74 |ta$60...|.......t|
|00001180| 65 78 74 00 00 00 38 0a | 00 00 01 00 00 00 03 01 |ext...8.|........|
|00001190| d1 00 00 00 04 00 47 00 | 00 00 00 00 00 00 00 00 |......G.|........|
|000011a0| 00 00 24 24 24 30 30 30 | 30 31 40 0a 00 00 01 00 |..$$$000|01@.....|
|000011b0| 20 00 03 01 0e 00 00 00 | 00 00 00 00 ae 01 00 00 | .......|........|
|000011c0| 13 00 00 00 00 00 24 24 | 24 30 30 30 30 34 09 0b |......$$|$00004..|
|000011d0| 00 00 01 00 20 00 03 01 | 23 00 00 00 00 00 00 00 |.... ...|#.......|
|000011e0| 52 03 00 00 00 00 00 00 | 00 00 00 00 00 00 60 05 |R.......|......`.|
|000011f0| 00 00 b8 0a 00 00 01 00 | 00 00 03 00 00 00 00 00 |........|........|
|00001200| 6d 05 00 00 c3 0a 00 00 | 01 00 00 00 03 00 00 00 |m.......|........|
|00001210| 00 00 79 05 00 00 e6 0a | 00 00 01 00 00 00 03 00 |..y.....|........|
|00001220| 5f 6c 68 5f 74 6f 70 00 | 6f 0a 00 00 01 00 00 00 |_lh_top.|o.......|
|00001230| 03 00 00 00 00 00 84 05 | 00 00 ca 0a 00 00 01 00 |........|........|
|00001240| 00 00 03 00 00 00 00 00 | 8e 05 00 00 d1 0a 00 00 |........|........|
|00001250| 01 00 00 00 03 00 2e 74 | 65 78 74 00 00 00 78 09 |.......t|ext...x.|
|00001260| 00 00 01 00 00 00 03 01 | bf 00 00 00 04 00 3d 00 |........|......=.|
|00001270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 9c 05 |........|........|
|00001280| 00 00 90 09 00 00 01 00 | 00 00 03 00 24 24 24 30 |........|....$$$0|
|00001290| 30 30 30 31 78 09 00 00 | 01 00 20 00 03 01 0f 00 |0001x...|.. .....|
|000012a0| 00 00 00 00 00 00 9c 01 | 00 00 14 00 00 00 00 00 |........|........|
|000012b0| 24 24 24 30 30 30 30 33 | 98 09 00 00 01 00 20 00 |$$$00003|...... .|
|000012c0| 03 01 1d 00 00 00 00 00 | 00 00 cc 01 00 00 22 00 |........|......".|
|000012d0| 00 00 00 00 00 00 00 00 | a7 05 00 00 98 09 00 00 |........|........|
|000012e0| 01 00 20 00 03 01 24 00 | 00 00 22 00 00 00 d2 01 |.. ...$.|..".....|
|000012f0| 00 00 29 00 00 00 00 00 | 24 24 24 30 30 30 30 35 |..).....|$$$00005|
|00001300| ba 09 00 00 01 00 20 00 | 03 01 2b 00 00 00 00 00 |...... .|..+.....|
|00001310| 00 00 08 02 00 00 30 00 | 00 00 00 00 24 24 24 30 |......0.|....$$$0|
|00001320| 30 30 30 37 14 0a 00 00 | 01 00 20 00 03 01 39 00 |0007....|.. ...9.|
|00001330| 00 00 00 00 00 00 c2 02 | 00 00 3e 00 00 00 00 00 |........|..>.....|
|00001340| 24 24 24 30 30 30 30 39 | 37 0a 00 00 01 00 20 00 |$$$00009|7..... .|
|00001350| 03 01 47 00 00 00 00 00 | 00 00 04 03 00 00 00 00 |..G.....|........|
|00001360| 00 00 00 00 5f 6c 75 5f | 64 6f 6e 65 06 0a 00 00 |...._lu_|done....|
|00001370| 01 00 00 00 03 00 00 00 | 00 00 b8 05 00 00 b9 09 |........|........|
|00001380| 00 00 01 00 00 00 03 00 | 00 00 00 00 c3 05 00 00 |........|........|
|00001390| 04 0a 00 00 01 00 00 00 | 03 00 5f 6c 75 5f 74 6f |........|.._lu_to|
|000013a0| 70 00 d7 09 00 00 01 00 | 00 00 03 00 5f 61 74 5f |p.......|...._at_|
|000013b0| 64 6f 6e 65 36 0a 00 00 | 01 00 00 00 03 00 68 65 |done6...|......he|
|000013c0| 61 64 65 72 00 00 00 00 | 00 00 fe ff 00 00 02 00 |ader....|........|
|000013d0| 00 00 00 00 eb 02 00 00 | 00 00 00 00 ff ff 00 00 |........|........|
|000013e0| 02 00 00 00 00 00 85 03 | 00 00 20 02 00 00 01 00 |........|.. .....|
|000013f0| 00 00 02 00 00 00 00 00 | cf 02 00 00 24 02 00 00 |........|....$...|
|00001400| 01 00 00 00 02 00 00 00 | 00 00 dd 02 00 00 28 02 |........|......(.|
|00001410| 00 00 01 00 00 00 02 00 | 00 00 00 00 f9 02 00 00 |........|........|
|00001420| 2c 02 00 00 01 00 00 00 | 02 00 00 00 00 00 0d 03 |,.......|........|
|00001430| 00 00 30 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..0.....|........|
|00001440| 3f 03 00 00 34 02 00 00 | 01 00 00 00 02 00 00 00 |?...4...|........|
|00001450| 00 00 65 03 00 00 38 02 | 00 00 01 00 00 00 02 00 |..e...8.|........|
|00001460| 00 00 00 00 b1 02 00 00 | 3c 02 00 00 01 00 00 00 |........|<.......|
|00001470| 02 00 00 00 00 00 9b 03 | 00 00 40 02 00 00 01 00 |........|..@.....|
|00001480| 00 00 02 00 00 00 00 00 | af 03 00 00 44 02 00 00 |........|....D...|
|00001490| 01 00 00 00 02 00 00 00 | 00 00 c7 03 00 00 48 02 |........|......H.|
|000014a0| 00 00 01 00 00 00 02 00 | 00 00 00 00 e1 03 00 00 |........|........|
|000014b0| 4c 02 00 00 01 00 00 00 | 02 00 00 00 00 00 4c 05 |L.......|......L.|
|000014c0| 00 00 50 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..P.....|........|
|000014d0| 32 05 00 00 54 02 00 00 | 01 00 00 00 02 00 00 00 |2...T...|........|
|000014e0| 00 00 3f 00 00 00 b4 02 | 00 00 01 00 00 00 02 00 |..?.....|........|
|000014f0| 00 00 00 00 db 00 00 00 | e4 02 00 00 01 00 00 00 |........|........|
|00001500| 02 00 00 00 00 00 50 01 | 00 00 14 03 00 00 01 00 |......P.|........|
|00001510| 00 00 02 00 00 00 00 00 | b8 01 00 00 24 03 00 00 |........|....$...|
|00001520| 01 00 00 00 02 00 00 00 | 00 00 39 02 00 00 ac 03 |........|..9.....|
|00001530| 00 00 01 00 00 00 02 00 | 00 00 00 00 04 00 00 00 |........|........|
|00001540| 54 04 00 00 01 00 20 00 | 02 00 00 00 00 00 13 00 |T..... .|........|
|00001550| 00 00 69 04 00 00 01 00 | 20 00 02 00 00 00 00 00 |..i.....| .......|
|00001560| 24 00 00 00 6c 04 00 00 | 01 00 20 00 02 00 00 00 |$...l...|.. .....|
|00001570| 00 00 c8 00 00 00 ed 04 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00001580| 00 00 00 00 2f 02 00 00 | a6 06 00 00 01 00 20 00 |..../...|...... .|
|00001590| 02 00 00 00 00 00 30 03 | 00 00 28 07 00 00 01 00 |......0.|..(.....|
|000015a0| 20 00 02 00 00 00 00 00 | 1e 03 00 00 0c 08 00 00 | .......|........|
|000015b0| 01 00 20 00 02 00 00 00 | 00 00 54 03 00 00 a6 08 |.. .....|..T.....|
|000015c0| 00 00 01 00 20 00 02 00 | 00 00 00 00 44 04 00 00 |.... ...|....D...|
|000015d0| 78 09 00 00 01 00 20 00 | 02 00 00 00 00 00 55 04 |x..... .|......U.|
|000015e0| 00 00 ba 09 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|000015f0| 65 04 00 00 14 0a 00 00 | 01 00 20 00 02 00 00 00 |e.......|.. .....|
|00001600| 00 00 73 03 00 00 40 0a | 00 00 01 00 20 00 02 00 |..s...@.|.... ...|
|00001610| 00 00 00 00 a4 04 00 00 | ee 0a 00 00 01 00 20 00 |........|...... .|
|00001620| 02 00 00 00 00 00 36 04 | 00 00 0a 0b 00 00 01 00 |......6.|........|
|00001630| 20 00 02 00 00 00 00 00 | 19 04 00 00 20 0b 00 00 | .......|.... ...|
|00001640| 02 00 00 00 02 00 00 00 | 00 00 19 05 00 00 34 0b |........|......4.|
|00001650| 00 00 02 00 00 00 02 00 | 65 6e 64 00 00 00 00 00 |........|end.....|
|00001660| e0 10 00 00 fe ff 00 00 | 02 00 d0 05 00 00 5f 44 |........|......_D|
|00001670| 72 69 76 65 72 45 6e 74 | 72 79 40 38 00 5f 47 45 |riverEnt|ry@8._GE|
|00001680| 52 4e 55 57 41 55 6e 6c | 6f 61 64 40 34 00 5f 52 |RNUWAUnl|oad@4._R|
|00001690| 65 73 74 6f 72 65 50 72 | 65 76 69 6f 75 73 52 65 |estorePr|eviousRe|
|000016a0| 67 69 73 74 72 79 40 30 | 00 3f 3f 5f 43 40 5f 31 |gistry@0|.??_C@_1|
|000016b0| 42 4f 40 42 49 43 4a 40 | 3f 24 41 41 3f 32 3f 24 |BO@BICJ@|?$AA?2?$|
|000016c0| 41 41 44 3f 24 41 41 65 | 3f 24 41 41 76 3f 24 41 |AAD?$AAe|?$AAv?$A|
|000016d0| 41 69 3f 24 41 41 63 3f | 24 41 41 65 3f 24 41 41 |Ai?$AAc?|$AAe?$AA|
|000016e0| 3f 32 3f 24 41 41 56 3f | 24 41 41 69 3f 24 41 41 |?2?$AAV?|$AAi?$AA|
|000016f0| 64 3f 24 41 41 65 3f 24 | 41 41 6f 3f 24 41 41 58 |d?$AAe?$|AAo?$AAX|
|00001700| 3f 24 41 41 3f 24 41 41 | 3f 24 41 41 3f 24 41 41 |?$AA?$AA|?$AA?$AA|
|00001710| 3f 24 41 41 3f 24 41 48 | 3f 24 41 41 3f 24 41 41 |?$AA?$AH|?$AA?$AA|
|00001720| 3f 24 41 41 3f 24 41 41 | 3f 24 41 41 3f 24 41 41 |?$AA?$AA|?$AA?$AA|
|00001730| 40 00 5f 52 65 73 74 6f | 72 65 52 65 67 69 73 74 |@._Resto|reRegist|
|00001740| 72 79 40 38 00 3f 3f 5f | 43 40 5f 31 44 41 40 46 |ry@8.??_|C@_1DA@F|
|00001750| 4c 4f 45 40 3f 24 41 41 | 49 3f 24 41 41 6e 3f 24 |LOE@?$AA|I?$AAn?$|
|00001760| 41 41 73 3f 24 41 41 74 | 3f 24 41 41 61 3f 24 41 |AAs?$AAt|?$AAa?$A|
|00001770| 41 6c 3f 24 41 41 6c 3f | 24 41 41 65 3f 24 41 41 |Al?$AAl?|$AAe?$AA|
|00001780| 64 3f 24 41 41 44 3f 24 | 41 41 69 3f 24 41 41 73 |d?$AAD?$|AAi?$AAs|
|00001790| 3f 24 41 41 70 3f 24 41 | 41 6c 3f 24 41 41 61 3f |?$AAp?$A|Al?$AAa?|
|000017a0| 24 41 41 79 3f 24 41 41 | 44 3f 24 41 41 72 3f 24 |$AAy?$AA|D?$AAr?$|
|000017b0| 41 41 69 3f 24 41 41 76 | 40 00 3f 3f 5f 43 40 5f |AAi?$AAv|@.??_C@_|
|000017c0| 31 4f 40 4c 41 41 47 40 | 3f 24 41 41 52 3f 24 41 |1O@LAAG@|?$AAR?$A|
|000017d0| 41 65 3f 24 41 41 67 3f | 24 41 41 6b 3f 24 41 41 |Ae?$AAg?|$AAk?$AA|
|000017e0| 65 3f 24 41 41 79 3f 24 | 41 41 3f 24 41 41 3f 24 |e?$AAy?$|AA?$AA?$|
|000017f0| 41 41 3f 24 41 41 3f 24 | 41 41 3f 24 41 48 3f 24 |AA?$AA?$|AA?$AH?$|
|00001800| 41 41 3f 24 41 41 3f 24 | 41 41 3f 24 41 41 3f 24 |AA?$AA?$|AA?$AA?$|
|00001810| 41 41 3f 24 41 41 3f 24 | 42 46 68 3f 24 41 45 ee |AA?$AA?$|BFh?$AE.|
|00001820| 40 00 3f 3f 5f 43 40 5f | 31 48 49 40 49 47 43 40 |@.??_C@_|1HI@IGC@|
|00001830| 3f 24 41 41 3f 32 3f 24 | 41 41 52 3f 24 41 41 65 |?$AA?2?$|AAR?$AAe|
|00001840| 3f 24 41 41 67 3f 24 41 | 41 69 3f 24 41 41 73 3f |?$AAg?$A|Ai?$AAs?|
|00001850| 24 41 41 74 3f 24 41 41 | 72 3f 24 41 41 79 3f 24 |$AAt?$AA|r?$AAy?$|
|00001860| 41 41 3f 32 3f 24 41 41 | 4d 3f 24 41 41 61 3f 24 |AA?2?$AA|M?$AAa?$|
|00001870| 41 41 63 3f 24 41 41 68 | 3f 24 41 41 69 3f 24 41 |AAc?$AAh|?$AAi?$A|
|00001880| 41 6e 3f 24 41 41 65 3f | 24 41 41 3f 32 3f 24 41 |An?$AAe?|$AA?2?$A|
|00001890| 41 53 3f 24 41 41 79 40 | 00 5f 4f 6e 4e 54 34 30 |AS?$AAy@|._OnNT40|
|000018a0| 40 30 00 3f 3f 5f 43 40 | 5f 31 48 4b 40 4f 43 4f |@0.??_C@|_1HK@OCO|
|000018b0| 49 40 3f 24 41 41 3f 32 | 3f 24 41 41 52 3f 24 41 |I@?$AA?2|?$AAR?$A|
|000018c0| 41 65 3f 24 41 41 67 3f | 24 41 41 69 3f 24 41 41 |Ae?$AAg?|$AAi?$AA|
|000018d0| 73 3f 24 41 41 74 3f 24 | 41 41 72 3f 24 41 41 79 |s?$AAt?$|AAr?$AAy|
|000018e0| 3f 24 41 41 3f 32 3f 24 | 41 41 4d 3f 24 41 41 61 |?$AA?2?$|AAM?$AAa|
|000018f0| 3f 24 41 41 63 3f 24 41 | 41 68 3f 24 41 41 69 3f |?$AAc?$A|Ah?$AAi?|
|00001900| 24 41 41 6e 3f 24 41 41 | 65 3f 24 41 41 3f 32 3f |$AAn?$AA|e?$AA?2?|
|00001910| 24 41 41 53 3f 24 41 41 | 79 40 00 5f 5f 69 6d 70 |$AAS?$AA|y@.__imp|
|00001920| 5f 5f 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |__RtlIni|tUnicode|
|00001930| 53 74 72 69 6e 67 40 38 | 00 5f 5f 69 6d 70 5f 5f |String@8|.__imp__|
|00001940| 77 63 73 6c 65 6e 00 5f | 5f 69 6d 70 5f 5f 77 63 |wcslen._|_imp__wc|
|00001950| 73 63 70 79 00 5f 5f 65 | 78 63 65 70 74 5f 6c 69 |scpy.__e|xcept_li|
|00001960| 73 74 00 5f 5f 69 6d 70 | 5f 5f 45 78 46 72 65 65 |st.__imp|__ExFree|
|00001970| 50 6f 6f 6c 40 34 00 5f | 5f 69 6d 70 5f 5f 5a 77 |Pool@4._|_imp__Zw|
|00001980| 43 6c 6f 73 65 40 34 00 | 5f 52 65 67 57 72 69 74 |Close@4.|_RegWrit|
|00001990| 65 56 61 6c 75 65 40 32 | 34 00 5f 52 65 67 4f 70 |eValue@2|4._RegOp|
|000019a0| 65 6e 4b 65 79 40 32 30 | 00 5f 5f 69 6d 70 5f 5f |enKey@20|.__imp__|
|000019b0| 5a 77 44 65 6c 65 74 65 | 4b 65 79 40 34 00 5f 52 |ZwDelete|Key@4._R|
|000019c0| 65 67 52 65 61 64 56 61 | 6c 75 65 40 32 30 00 5f |egReadVa|lue@20._|
|000019d0| 5f 69 6d 70 5f 5f 77 63 | 73 63 61 74 00 5f 5f 65 |_imp__wc|scat.__e|
|000019e0| 78 63 65 70 74 5f 68 61 | 6e 64 6c 65 72 33 00 5f |xcept_ha|ndler3._|
|000019f0| 5f 69 6d 70 5f 5f 5a 77 | 43 72 65 61 74 65 4b 65 |_imp__Zw|CreateKe|
|00001a00| 79 40 32 38 00 5f 5f 69 | 6d 70 5f 5f 5a 77 4f 70 |y@28.__i|mp__ZwOp|
|00001a10| 65 6e 4b 65 79 40 31 32 | 00 5f 5f 69 6d 70 5f 5f |enKey@12|.__imp__|
|00001a20| 5a 77 53 65 74 56 61 6c | 75 65 4b 65 79 40 32 34 |ZwSetVal|ueKey@24|
|00001a30| 00 5f 5f 69 6d 70 5f 5f | 5a 77 51 75 65 72 79 56 |.__imp__|ZwQueryV|
|00001a40| 61 6c 75 65 4b 65 79 40 | 32 34 00 5f 5f 69 6d 70 |alueKey@|24.__imp|
|00001a50| 5f 5f 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |__ExAllo|catePool|
|00001a60| 57 69 74 68 54 61 67 40 | 31 32 00 5f 52 74 6c 49 |WithTag@|12._RtlI|
|00001a70| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|00001a80| 40 38 00 5f 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |@8.__IMP|ORT_DESC|
|00001a90| 52 49 50 54 4f 52 5f 6e | 74 6f 73 6b 72 6e 6c 00 |RIPTOR_n|toskrnl.|
|00001aa0| 5f 52 74 6c 55 6e 77 69 | 6e 64 40 31 36 00 5f 5f |_RtlUnwi|nd@16.__|
|00001ab0| 67 6c 6f 62 61 6c 5f 75 | 6e 77 69 6e 64 32 00 5f |global_u|nwind2._|
|00001ac0| 5f 6c 6f 63 61 6c 5f 75 | 6e 77 69 6e 64 32 00 5f |_local_u|nwind2._|
|00001ad0| 5f 61 62 6e 6f 72 6d 61 | 6c 5f 74 65 72 6d 69 6e |_abnorma|l_termin|
|00001ae0| 61 74 69 6f 6e 00 5f 45 | 78 46 72 65 65 50 6f 6f |ation._E|xFreePoo|
|00001af0| 6c 40 34 00 5f 5a 77 43 | 6c 6f 73 65 40 34 00 5f |l@4._ZwC|lose@4._|
|00001b00| 5a 77 44 65 6c 65 74 65 | 4b 65 79 40 34 00 5f 5f |ZwDelete|Key@4.__|
|00001b10| 73 65 68 5f 6c 6f 6e 67 | 6a 6d 70 5f 75 6e 77 69 |seh_long|jmp_unwi|
|00001b20| 6e 64 40 34 00 5f 5a 77 | 43 72 65 61 74 65 4b 65 |nd@4._Zw|CreateKe|
|00001b30| 79 40 32 38 00 5f 5a 77 | 4f 70 65 6e 4b 65 79 40 |y@28._Zw|OpenKey@|
|00001b40| 31 32 00 5f 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |12._ZwSe|tValueKe|
|00001b50| 79 40 32 34 00 5f 5a 77 | 51 75 65 72 79 56 61 6c |y@24._Zw|QueryVal|
|00001b60| 75 65 4b 65 79 40 32 34 | 00 5f 45 78 41 6c 6c 6f |ueKey@24|._ExAllo|
|00001b70| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 40 |catePool|WithTag@|
|00001b80| 31 32 00 5f 5f 4e 55 4c | 4c 5f 49 4d 50 4f 52 54 |12.__NUL|L_IMPORT|
|00001b90| 5f 44 45 53 43 52 49 50 | 54 4f 52 00 7f 6e 74 6f |_DESCRIP|TOR..nto|
|00001ba0| 73 6b 72 6e 6c 5f 4e 55 | 4c 4c 5f 54 48 55 4e 4b |skrnl_NU|LL_THUNK|
|00001bb0| 5f 44 41 54 41 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |_DATA.__|imp__Rtl|
|00001bc0| 55 6e 77 69 6e 64 40 31 | 36 00 5f 6c 68 5f 63 6f |Unwind@1|6._lh_co|
|00001bd0| 6e 74 69 6e 75 65 00 5f | 6c 68 5f 64 69 73 6d 69 |ntinue._|lh_dismi|
|00001be0| 73 73 00 5f 6c 68 5f 72 | 65 74 75 72 6e 00 5f 6c |ss._lh_r|eturn._l|
|00001bf0| 68 5f 62 61 67 69 74 00 | 5f 6c 68 5f 75 6e 77 69 |h_bagit.|_lh_unwi|
|00001c00| 6e 64 69 6e 67 00 5f 67 | 75 5f 72 65 74 75 72 6e |nding._g|u_return|
|00001c10| 00 5f 5f 75 6e 77 69 6e | 64 5f 68 61 6e 64 6c 65 |.__unwin|d_handle|
|00001c20| 72 00 5f 75 68 5f 72 65 | 74 75 72 6e 00 5f 6c 75 |r._uh_re|turn._lu|
|00001c30| 5f 63 6f 6e 74 69 6e 75 | 65 00 00 00 01 00 00 00 |_continu|e.......|
|00001c40| 10 01 00 00 00 00 00 00 | 43 3a 5c 44 44 4b 5c 4c |........|C:\DDK\L|
|00001c50| 49 42 5c 69 33 38 36 5c | 66 72 65 65 5c 47 45 52 |IB\i386\|free\GER|
|00001c60| 4e 55 57 41 2e 73 79 73 | 00 00 00 00 00 00 00 00 |NUWA.sys|........|
|00001c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001c80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001c90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ca0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001cc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 54 04 00 00 |........|....T...|
|00001d50| 15 00 00 00 00 00 00 00 | 02 00 00 00 69 04 00 00 |........|....i...|
|00001d60| 03 00 00 00 00 00 00 00 | 01 00 00 00 6c 04 00 00 |........|....l...|
|00001d70| 81 00 00 00 85 00 00 00 | 00 00 0b d2 ed 04 00 00 |........|........|
|00001d80| b9 01 00 00 91 00 00 00 | 02 00 3d d3 a6 06 00 00 |........|..=.....|
|00001d90| 82 00 00 00 0a 00 00 00 | 00 00 2b d3 28 07 00 00 |........|..+.(...|
|00001da0| e4 00 00 00 11 00 00 00 | 05 00 26 d3 0c 08 00 00 |........|..&.....|
|00001db0| 9a 00 00 00 0a 00 00 00 | 06 00 2d d3 a6 08 00 00 |........|..-.....|
|00001dc0| d1 00 00 00 0b 00 00 00 | 05 00 2d d3 00 00 00 00 |........|..-.....|
|00001dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+