==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  00 00 00 00 50 72 69 6D  61 72 79 20 64 69 73 6B  00 00 00 00 50 72 69 6D  61 72 79 20 64 69 73 6B  ....Primary disk....Primary disk
00000020  00 00 00 00 46 4D 6F 64  65 6C 65 73 73 44 6C 67  50 72 6F 63 00 00 00 00  6D 73 63 75 69 73 74 66  ....FModelessDlgProc....mscuistf
00000040  2E 64 6C 6C 00 00 00 00  53 59 53 54 45 4D 5C 43  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  .dll....SYSTEM\CurrentControlSet
00000060  5C 53 65 72 76 69 63 65  73 5C 00 00 53 74 61 72  74 00 00 00 53 59 53 54  45 4D 5C 43 75 72 72 65  \Services\..Start...SYSTEM\Curre
00000080  6E 74 43 6F 6E 74 72 6F  6C 53 65 74 5C 53 65 72  76 69 63 65 73 5C 41 74  64 69 73 6B 00 00 00 00  ntControlSet\Services\Atdisk....
000000A0  53 59 53 54 45 4D 5C 43  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  5C 53 65 72 76 69 63 65  SYSTEM\CurrentControlSet\Service
000000C0  73 5C 41 74 64 69 73 6B  00 00 00 00 45 72 72 6F  72 43 6F 6E 74 72 6F 6C  00 00 00 00 53 59 53 54  s\Atdisk....ErrorControl....SYST
000000E0  45 4D 5C 43 75 72 72 65  6E 74 43 6F 6E 74 72 6F  6C 53 65 74 5C 53 65 72  76 69 63 65 73 5C 41 74  EM\CurrentControlSet\Services\At
00000100  64 69 73 6B 00 00 00 00  47 72 6F 75 70 00 00 00  53 59 53 54 45 4D 5C 43  75 72 72 65 6E 74 43 6F  disk....Group...SYSTEM\CurrentCo
00000120  6E 74 72 6F 6C 53 65 74  5C 53 65 72 76 69 63 65  73 5C 41 74 64 69 73 6B  00 00 00 00 53 74 61 72  ntrolSet\Services\Atdisk....Star
00000140  74 00 00 00 53 59 53 54  45 4D 5C 43 75 72 72 65  6E 74 43 6F 6E 74 72 6F  6C 53 65 74 5C 53 65 72  t...SYSTEM\CurrentControlSet\Ser
00000160  76 69 63 65 73 5C 41 74  64 69 73 6B 00 00 00 00  54 61 67 00 53 59 53 54  45 4D 5C 43 75 72 72 65  vices\Atdisk....Tag.SYSTEM\Curre
00000180  6E 74 43 6F 6E 74 72 6F  6C 53 65 74 5C 53 65 72  76 69 63 65 73 5C 41 74  64 69 73 6B 00 00 00 00  ntControlSet\Services\Atdisk....
000001A0  54 79 70 65 00 00 00 00  53 59 53 54 45 4D 5C 43  75 72 72 65 6E 74 43 6F  6E 74 72 6F 6C 53 65 74  Type....SYSTEM\CurrentControlSet
000001C0  5C 53 65 72 76 69 63 65  73 5C 41 74 64 69 73 6B  00 00 00 00 46 48 65 6C  70 44 6C 67 50 72 6F 63  \Services\Atdisk....FHelpDlgProc
000001E0  00 00 00 00 46 51 75 69  74 44 6C 67 50 72 6F 63  00 00 00 00 6D 73 63 75  69 73 74 66 2E 64 6C 6C  ....FQuitDlgProc....mscuistf.dll
00000200  00 00 00 00 46 48 65 6C  70 44 6C 67 50 72 6F 63  00 00 00 00 46 49 6E 66  6F 30 44 6C 67 50 72 6F  ....FHelpDlgProc....FInfo0DlgPro
00000220  63 00 00 00 6D 73 63 75  69 73 74 66 2E 64 6C 6C  00 00 00 00 46 48 65 6C  70 44 6C 67 50 72 6F 63  c...mscuistf.dll....FHelpDlgProc
00000240  00 00 00 00 46 49 6E 66  6F 44 6C 67 50 72 6F 63  00 00 00 00 6D 73 63 75  69 73 74 66 2E 64 6C 6C  ....FInfoDlgProc....mscuistf.dll
00000260  00 00 00 00 46 49 6E 66  6F 30 44 6C 67 50 72 6F  63 00 00 00 6D 73 63 75  69 73 74 66 2E 64 6C 6C  ....FInfo0DlgProc...mscuistf.dll
00000280  00 00 00 00 41 74 64 69  73 6B 33 35 00 00 00 00  41 74 64 69 73 6B 33 31  00 00 00 00 6D 73 63 75  ....Atdisk35....Atdisk31....mscu
000002A0  69 73 74 66 2E 64 6C 6C  00 00 00 00 49 44 45 20  43 61 63 68 65 20 43 6F  6E 74 72 6F 6C 6C 65 72  istf.dll....IDE Cache Controller
000002C0  20 44 65 76 69 63 65 20  44 72 69 76 65 72 20 53  65 74 75 70 00 00 00 00  00 00 00 00 00 00 00 00   Device Driver Setup............
000002E0  00 00 00 00 44 4C 47 45  56 45 4E 54 00 00 00 00  44 4C 47 45 56 45 4E 54  00 00 00 00 4D 53 2D 53  ....DLGEVENT....DLGEVENT....MS-S
00000300  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
00000320  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
00000340  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
00000360  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
00000380  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 4D 53 2D 53  etup Error..Buffer Overflow.MS-S
000003A0  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  6C 6F 77 00 2C 00 00 00  etup Error..Buffer Overflow.,...
000003C0  2C 00 00 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  ,...MS-Setup Error..Buffer Overf
000003E0  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000400  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000420  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000440  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000460  6C 6F 77 00 4D 53 2D 53  65 74 75 70 20 45 72 72  6F 72 00 00 42 75 66 66  65 72 20 4F 76 65 72 66  low.MS-Setup Error..Buffer Overf
00000480  6C 6F 77 00 5C 00 00 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  low.\...MS-Setup Error..Buffer O
000004A0  76 65 72 66 6C 6F 77 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  verflow.MS-Setup Error..Buffer O
000004C0  76 65 72 66 6C 6F 77 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  verflow.MS-Setup Error..Buffer O
000004E0  76 65 72 66 6C 6F 77 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  verflow.MS-Setup Error..Buffer O
00000500  76 65 72 66 6C 6F 77 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  verflow.MS-Setup Error..Buffer O
00000520  76 65 72 66 6C 6F 77 00  5C 00 00 00 00 00 00 00  00 00 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  verflow.\...........CreateRegKey
00000540  00 00 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  00 00 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  ....CreateRegKey....CreateRegKey
00000560  56 61 6C 75 65 00 00 00  53 65 74 52 65 67 4B 65  79 56 61 6C 75 65 00 00  53 65 74 52 65 67 4B 65  Value...SetRegKeyValue..SetRegKe
00000580  79 56 61 6C 75 65 00 00  4D 53 2D 53 65 74 75 70  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  yValue..MS-Setup Error..Buffer O
000005A0  76 65 72 66 6C 6F 77 00  44 65 6C 65 74 65 41 6C  6C 53 75 62 4B 65 79 73  00 00 00 00 44 65 6C 65  verflow.DeleteAllSubKeys....Dele
000005C0  74 65 41 6C 6C 53 75 62  4B 65 79 73 3A 6F 70 65  6E 00 00 00 25 73 5C 25  73 00 00 00 44 65 6C 65  teAllSubKeys:open...%s\%s...Dele
000005E0  74 65 41 6C 6C 53 75 62  4B 65 79 73 3A 65 6E 75  6D 00 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  teAllSubKeys:enum...CreateRegKey
00000600  45 78 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  45 78 00 00 43 72 65 61  74 65 52 65 67 4B 65 79  Ex..CreateRegKeyEx..CreateRegKey
00000620  56 61 6C 75 65 45 78 3A  6F 70 65 6E 00 00 00 00  43 72 65 61 74 65 52 65  67 4B 65 79 56 61 6C 75  ValueEx:open....CreateRegKeyValu
00000640  65 45 78 00 53 65 74 52  65 67 4B 65 79 56 61 6C  75 65 45 78 3A 6F 70 65  6E 00 00 00 53 65 74 52  eEx.SetRegKeyValueEx:open...SetR
00000660  65 67 4B 65 79 56 61 6C  75 65 45 78 00 00 00 00  47 65 74 52 65 67 4B 65  79 56 61 6C 75 65 45 78  egKeyValueEx....GetRegKeyValueEx
00000680  00 00 00 00 53 65 74 52  65 67 4B 65 79 56 61 6C  75 65 45 78 00 00 00 00  4D 53 2D 53 65 74 75 70  ....SetRegKeyValueEx....MS-Setup
000006A0  20 45 72 72 6F 72 00 00  42 75 66 66 65 72 20 4F  76 65 72 66 6C 6F 77 00  44 65 6C 65 74 65 41 6C   Error..Buffer Overflow.DeleteAl
000006C0  6C 53 75 62 4B 65 79 73  00 00 00 00 41 44 56 41  50 49 33 32 2E 44 4C 4C  00 00 00 00 52 65 67 43  lSubKeys....ADVAPI32.DLL....RegC
000006E0  6C 6F 73 65 4B 65 79 00  52 65 67 43 72 65 61 74  65 4B 65 79 41 00 00 00  52 65 67 44 65 6C 65 74  loseKey.RegCreateKeyA...RegDelet
00000700  65 4B 65 79 41 00 00 00  52 65 67 4F 70 65 6E 4B  65 79 41 00 52 65 67 51  75 65 72 79 56 61 6C 75  eKeyA...RegOpenKeyA.RegQueryValu
00000720  65 41 00 00 52 65 67 53  65 74 56 61 6C 75 65 41  00 00 00 00 52 65 67 43  72 65 61 74 65 4B 65 79  eA..RegSetValueA....RegCreateKey
00000740  45 78 41 00 52 65 67 4F  70 65 6E 4B 65 79 45 78  41 00 00 00 52 65 67 51  75 65 72 79 56 61 6C 75  ExA.RegOpenKeyExA...RegQueryValu
00000760  65 45 78 41 00 00 00 00  52 65 67 53 65 74 56 61  6C 75 65 45 78 41 00 00  52 65 67 45 6E 75 6D 4B  eExA....RegSetValueExA..RegEnumK
00000780  65 79 41 00 52 65 67 51  75 65 72 79 49 6E 66 6F  4B 65 79 41 00 00 00 00  00 00 00 00 00 00 00 00  eyA.RegQueryInfoKeyA............
000007A0  00 00 00 00 43 34 30 30  00 00 00 00 41 58 50 32  31 30 36 34 00 00 00 00  52 34 30 30 30 00 00 00  ....C400....AXP21064....R4000...
000007C0  52 33 30 30 30 00 00 00  52 32 30 30 30 00 00 00  38 30 34 38 36 00 00 00  38 30 33 38 36 00 00 00  R3000...R2000...80486...80386...
000007E0  38 30 32 38 36 00 00 00  38 30 31 38 36 00 00 00  38 30 38 36 00 00 00 00  00 00 00 00 00 00 00 00  80286...80186...8086............
00000800  00 00 00 00 00 00 00 00  57 49 4E 2E 49 4E 49 00  4D 53 41 50 50 53 00 00  01 00 00 00 5C 00 00 00  ........WIN.INI.MSAPPS..☺...\...
00000820  5C 00 00 00 43 4C 49 50  41 52 54 00 45 51 55 41  54 49 4F 4E 00 00 00 00  47 52 50 48 46 4C 54 00  \...CLIPART.EQUATION....GRPHFLT.
00000840  4D 53 44 52 41 57 00 00  4D 53 47 52 41 50 48 00  50 52 4F 4F 46 00 00 00  54 45 58 54 43 4F 4E 56  MSDRAW..MSGRAPH.PROOF...TEXTCONV
00000860  00 00 00 00 57 4F 52 44  41 52 54 00 50 41 54 48  00 00 00 00 57 49 4E 2E  49 4E 49 00 5C 00 00 00  ....WORDART.PATH....WIN.INI.\...
00000880  5C 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  \...............................
000008A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000008C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000008E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000900  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000920  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000940  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000960  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
00000980  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009A0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009C0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................
000009E0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................................