==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  00 00 00 00 4E 54 20 33  2E 31 20 46 69 6C 65 73  00 00 00 00 4E 54 20 33  2E 35 20 46 69 6C 65 73  ....NT 3.1 Files....NT 3.5 Files
00000020  00 00 00 00 46 4D 6F 64  65 6C 65 73 73 44 6C 67  50 72 6F 63 00 00 00 00  6D 73 63 75 69 73 74 66  ....FModelessDlgProc....mscuistf
00000040  2E 64 6C 6C 00 00 00 00  46 4D 6F 64 65 6C 65 73  73 44 6C 67 50 72 6F 63  00 00 00 00 6D 73 63 75  .dll....FModelessDlgProc....mscu
00000060  69 73 74 66 2E 64 6C 6C  00 00 00 00 46 4D 6F 64  65 6C 65 73 73 44 6C 67  50 72 6F 63 00 00 00 00  istf.dll....FModelessDlgProc....
00000080  6D 73 63 75 69 73 74 66  2E 64 6C 6C 00 00 00 00  46 4D 6F 64 65 6C 65 73  73 44 6C 67 50 72 6F 63  mscuistf.dll....FModelessDlgProc
000000A0  00 00 00 00 6D 73 63 75  69 73 74 66 2E 64 6C 6C  00 00 00 00 50 72 69 6D  61 72 79 20 64 69 73 6B  ....mscuistf.dll....Primary disk
000000C0  00 00 00 00 50 72 69 6D  61 72 79 20 64 69 73 6B  00 00 00 00 46 4D 6F 64  65 6C 65 73 73 44 6C 67  ....Primary disk....FModelessDlg
000000E0  50 72 6F 63 00 00 00 00  6D 73 63 75 69 73 74 66  2E 64 6C 6C 00 00 00 00  53 59 53 54 45 4D 5C 43  Proc....mscuistf.dll....SYSTEM\C
00000100  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 53 65 72 76 69 63 65  73 5C 41 74 64 69 73 6B  urrentControlSet\Services\Atdisk
00000120  00 00 00 00 53 74 61 72  74 00 00 00 53 59 53 54  45 4D 5C 43 75 72 72 65  6E 74 43 6F 6E 74 72 6F  ....Start...SYSTEM\CurrentContro
00000140  6C 53 65 74 5C 53 65 72  76 69 63 65 73 5C 41 74  64 69 73 6B 00 00 00 00  53 59 53 54 45 4D 5C 43  lSet\Services\Atdisk....SYSTEM\C
00000160  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 53 65 72 76 69 63 65  73 5C 00 00 45 72 72 6F  urrentControlSet\Services\..Erro
00000180  72 43 6F 6E 74 72 6F 6C  00 00 00 00 47 72 6F 75  70 00 00 00 53 74 61 72  74 00 00 00 54 61 67 00  rControl....Group...Start...Tag.
000001A0  54 79 70 65 00 00 00 00  46 48 65 6C 70 44 6C 67  50 72 6F 63 00 00 00 00  46 51 75 69 74 44 6C 67  Type....FHelpDlgProc....FQuitDlg
000001C0  50 72 6F 63 00 00 00 00  6D 73 63 75 69 73 74 66  2E 64 6C 6C 00 00 00 00  46 48 65 6C 70 44 6C 67  Proc....mscuistf.dll....FHelpDlg
000001E0  50 72 6F 63 00 00 00 00  46 49 6E 66 6F 30 44 6C  67 50 72 6F 63 00 00 00  6D 73 63 75 69 73 74 66  Proc....FInfo0DlgProc...mscuistf
00000200  2E 64 6C 6C 00 00 00 00  46 48 65 6C 70 44 6C 67  50 72 6F 63 00 00 00 00  46 49 6E 66 6F 44 6C 67  .dll....FHelpDlgProc....FInfoDlg
00000220  50 72 6F 63 00 00 00 00  6D 73 63 75 69 73 74 66  2E 64 6C 6C 00 00 00 00  31 00 00 00 52 61 64 69  Proc....mscuistf.dll....1...Radi
00000240  6F 44 65 66 61 75 6C 74  00 00 00 00 46 48 65 6C  70 44 6C 67 50 72 6F 63  00 00 00 00 46 52 61 64  oDefault....FHelpDlgProc....FRad
00000260  69 6F 44 6C 67 50 72 6F  63 00 00 00 6D 73 63 75  69 73 74 66 2E 64 6C 6C  00 00 00 00 42 75 74 74  ioDlgProc...mscuistf.dll....Butt
00000280  6F 6E 43 68 65 63 6B 65  64 00 00 00 46 49 6E 66  6F 30 44 6C 67 50 72 6F  63 00 00 00 6D 73 63 75  onChecked...FInfo0DlgProc...mscu
000002A0  69 73 74 66 2E 64 6C 6C  00 00 00 00 46 49 6E 66  6F 30 44 6C 67 50 72 6F  63 00 00 00 6D 73 63 75  istf.dll....FInfo0DlgProc...mscu
000002C0  69 73 74 66 2E 64 6C 6C  00 00 00 00 46 49 6E 66  6F 30 44 6C 67 50 72 6F  63 00 00 00 6D 73 63 75  istf.dll....FInfo0DlgProc...mscu
000002E0  69 73 74 66 2E 64 6C 6C  00 00 00 00 45 64 69 74  54 65 78 74 49 6E 00 00  45 4E 44 00 45 64 69 74  istf.dll....EditTextIn..END.Edit
00000300  46 6F 63 75 73 00 00 00  46 48 65 6C 70 44 6C 67  50 72 6F 63 00 00 00 00  46 45 64 69 74 44 6C 67  Focus...FHelpDlgProc....FEditDlg
00000320  50 72 6F 63 00 00 00 00  6D 73 63 75 69 73 74 66  2E 64 6C 6C 00 00 00 00  45 64 69 74 54 65 78 74  Proc....mscuistf.dll....EditText
00000340  4F 75 74 00 46 49 6E 66  6F 30 44 6C 67 50 72 6F  63 00 00 00 6D 73 63 75  69 73 74 66 2E 64 6C 6C  Out.FInfo0DlgProc...mscuistf.dll
00000360  00 00 00 00 41 74 64 69  73 6B 33 35 00 00 00 00  41 74 64 69 73 6B 33 31  00 00 00 00 6D 73 63 75  ....Atdisk35....Atdisk31....mscu
00000380  69 73 74 66 2E 64 6C 6C  00 00 00 00 54 45 4B 52  41 4D 20 44 65 76 69 63  65 20 44 72 69 76 65 72  istf.dll....TEKRAM Device Driver
000003A0  20 53 65 74 75 70 00 00  73 65 74 75 70 2E 69 6E  66 00 00 00 5C 53 59 53  54 45 4D 33 32 5C 44 52   Setup..setup.inf...\SYSTEM32\DR
000003C0  49 56 45 52 53 5C 00 00  53 54 46 5F 53 52 43 44  49 52 00 00 00 00 00 00  00 00 00 00 00 00 00 00  IVERS\..STF_SRCDIR..............
000003E0  00 00 00 00 44 4C 47 45  56 45 4E 54 00 00 00 00  44 4C 47 45 56 45 4E 54  00 00 00 00 4D 53 2D 53  ....DLGEVENT....DLGEVENT....MS-S
00000400  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
00000420  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
00000440  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
00000460  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
00000480  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
000004A0  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 2C 00 00 00  etup Error..Buffer Overflow.,...
000004C0  2C 00 00 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  ,...MS-Setup Error..Buffer Overf
000004E0  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000500  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000520  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000540  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000560  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000580  6C 6F 77 00 5C 00 00 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  low.\...MS-Setup Error..Buffer O
000005A0  76 65 72 66 6C 6F 77 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  verflow.MS-Setup Error..Buffer O
000005C0  76 65 72 66 6C 6F 77 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  verflow.MS-Setup Error..Buffer O
000005E0  76 65 72 66 6C 6F 77 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  verflow.MS-Setup Error..Buffer O
00000600  76 65 72 66 6C 6F 77 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  verflow.MS-Setup Error..Buffer O
00000620  76 65 72 66 6C 6F 77 00  5C 00 00 00 00 00 00 00  00 00 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  verflow.\...........CreateRegKey
00000640  00 00 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  00 00 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  ....CreateRegKey....CreateRegKey
00000660  56 61 6C 75 65 00 00 00  53 65 74 52 65 67 4B 65  79 56 61 6C 75 65 00 00  53 65 74 52 65 67 4B 65  Value...SetRegKeyValue..SetRegKe
00000680  79 56 61 6C 75 65 00 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  yValue..MS-Setup Error..Buffer O
000006A0  76 65 72 66 6C 6F 77 00  44 65 6C 65 74 65 41 6C  6C 53 75 62 4B 65 79 73  00 00 00 00 44 65 6C 65  verflow.DeleteAllSubKeys....Dele
000006C0  74 65 41 6C 6C 53 75 62  4B 65 79 73 3A 6F 70 65  6E 00 00 00 25 73 5C 25  73 00 00 00 44 65 6C 65  teAllSubKeys:open...%s\%s...Dele
000006E0  74 65 41 6C 6C 53 75 62  4B 65 79 73 3A 65 6E 75  6D 00 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  teAllSubKeys:enum...CreateRegKey
00000700  45 78 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  45 78 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  Ex..CreateRegKeyEx..CreateRegKey
00000720  56 61 6C 75 65 45 78 3A  6F 70 65 6E 00 00 00 00  43 72 65 61 74 65 52 65  67 4B 65 79 56 61 6C 75  ValueEx:open....CreateRegKeyValu
00000740  65 45 78 00 53 65 74 52  65 67 4B 65 79 56 61 6C  75 65 45 78 3A 6F 70 65  6E 00 00 00 53 65 74 52  eEx.SetRegKeyValueEx:open...SetR
00000760  65 67 4B 65 79 56 61 6C  75 65 45 78 00 00 00 00  47 65 74 52 65 67 4B 65  79 56 61 6C 75 65 45 78  egKeyValueEx....GetRegKeyValueEx
00000780  00 00 00 00 53 65 74 52  65 67 4B 65 79 56 61 6C  75 65 45 78 00 00 00 00  4D 53 2D 53 65 74 75 70  ....SetRegKeyValueEx....MS-Setup
000007A0  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  76 65 72 66 6C 6F 77 00  44 65 6C 65 74 65 41 6C   Error..Buffer Overflow.DeleteAl
000007C0  6C 53 75 62 4B 65 79 73  00 00 00 00 41 44 56 41  50 49 33 32 2E 44 4C 4C  00 00 00 00 52 65 67 43  lSubKeys....ADVAPI32.DLL....RegC
000007E0  6C 6F 73 65 4B 65 79 00  52 65 67 43 72 65 61 74  65 4B 65 79 41 00 00 00  52 65 67 44 65 6C 65 74  loseKey.RegCreateKeyA...RegDelet
00000800  65 4B 65 79 41 00 00 00  52 65 67 4F 70 65 6E 4B  65 79 41 00 52 65 67 51  75 65 72 79 56 61 6C 75  eKeyA...RegOpenKeyA.RegQueryValu
00000820  65 41 00 00 52 65 67 53  65 74 56 61 6C 75 65 41  00 00 00 00 52 65 67 43  72 65 61 74 65 4B 65 79  eA..RegSetValueA....RegCreateKey
00000840  45 78 41 00 52 65 67 4F  70 65 6E 4B 65 79 45 78  41 00 00 00 52 65 67 51  75 65 72 79 56 61 6C 75  ExA.RegOpenKeyExA...RegQueryValu
00000860  65 45 78 41 00 00 00 00  52 65 67 53 65 74 56 61  6C 75 65 45 78 41 00 00  52 65 67 45 6E 75 6D 4B  eExA....RegSetValueExA..RegEnumK
00000880  65 79 41 00 52 65 67 51  75 65 72 79 49 6E 66 6F  4B 65 79 41 00 00 00 00  00 00 00 00 00 00 00 00  eyA.RegQueryInfoKeyA............
000008A0  00 00 00 00 43 34 30 30  00 00 00 00 41 58 50 32  31 30 36 34 00 00 00 00  52 34 30 30 30 00 00 00  ....C400....AXP21064....R4000...
000008C0  52 33 30 30 30 00 00 00  52 32 30 30 30 00 00 00  38 30 34 38 36 00 00 00  38 30 33 38 36 00 00 00  R3000...R2000...80486...80386...
000008E0  38 30 32 38 36 00 00 00  38 30 31 38 36 00 00 00  38 30 38 36 00 00 00 00  00 00 00 00 00 00 00 00  80286...80186...8086............
00000900  00 00 00 00 00 00 00 00  57 49 4E 2E 49 4E 49 00  4D 53 41 50 50 53 00 00  01 00 00 00 5C 00 00 00  ........WIN.INI.MSAPPS..☺...\...
00000920  5C 00 00 00 43 4C 49 50  41 52 54 00 45 51 55 41  54 49 4F 4E 00 00 00 00  47 52 50 48 46 4C 54 00  \...CLIPART.EQUATION....GRPHFLT.
00000940  4D 53 44 52 41 57 00 00  4D 53 47 52 41 50 48 00  50 52 4F 4F 46 00 00 00  54 45 58 54 43 4F 4E 56  MSDRAW..MSGRAPH.PROOF...TEXTCONV
00000960  00 00 00 00 57 4F 52 44  41 52 54 00 50 41 54 48  00 00 00 00 57 49 4E 2E  49 4E 49 00 5C 00 00 00  ....WORDART.PATH....WIN.INI.\...
00000980  5C 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  \...............................
000009A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................