This repository has been archived by the owner on Aug 30, 2021. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 4
/
PXEBCD.disection
928 lines (903 loc) · 97.7 KB
/
PXEBCD.disection
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\BCDSTORE]
[HKEY_LOCAL_MACHINE\BCDSTORE\Description]
"KeyName"="BCD00000001"
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects]
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{489fb83c-b74c-11e5-8269-ae6f2b48e753}]
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{489fb83c-b74c-11e5-8269-ae6f2b48e753}\Description]
"Type"=dword:10200003
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{489fb83c-b74c-11e5-8269-ae6f2b48e753}\Elements]
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{489fb83c-b74c-11e5-8269-ae6f2b48e753}\Elements\11000001]
"Element"=hex:e0,34,55,ae,24,a9,6c,46,b8,36,75,85,39,a3,ee,3a,00,00,00,00,01,\
00,00,00,9a,00,00,00,00,00,00,00,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,01,00,00,00,72,00,00,00,05,00,00,00,05,00,00,\
00,00,00,00,00,48,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,5c,00,42,00,6f,00,\
6f,00,74,00,5c,00,62,00,6f,00,6f,00,74,00,2e,00,77,00,69,00,6d,00,00,00
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{489fb83c-b74c-11e5-8269-ae6f2b48e753}\Elements\12000004]
"Element"="iPXE"
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{489fb83c-b74c-11e5-8269-ae6f2b48e753}\Elements\21000001]
"Element"=hex:e0,34,55,ae,24,a9,6c,46,b8,36,75,85,39,a3,ee,3a,00,00,00,00,01,\
00,00,00,9a,00,00,00,00,00,00,00,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,01,00,00,00,72,00,00,00,05,00,00,00,05,00,00,\
00,00,00,00,00,48,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,5c,00,42,00,6f,00,\
6f,00,74,00,5c,00,62,00,6f,00,6f,00,74,00,2e,00,77,00,69,00,6d,00,00,00
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{489fb83c-b74c-11e5-8269-ae6f2b48e753}\Elements\22000002]
"Element"="\\Windows"
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{489fb83c-b74c-11e5-8269-ae6f2b48e753}\Elements\26000010]
"Element"=hex:01
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{489fb83c-b74c-11e5-8269-ae6f2b48e753}\Elements\26000022]
"Element"=hex:01
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}]
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Description]
"Type"=dword:10100002
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements]
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{9dea862c-5cdd-4e70-acc1-f32b344d4795}\Elements\23000003]
"Element"="{489fb83c-b74c-11e5-8269-ae6f2b48e753}"
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{ae5534e0-a924-466c-b836-758539a3ee3a}]
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{ae5534e0-a924-466c-b836-758539a3ee3a}\Description]
"Type"=dword:30000000
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{ae5534e0-a924-466c-b836-758539a3ee3a}\Elements]
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{ae5534e0-a924-466c-b836-758539a3ee3a}\Elements\31000003]
"Element"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,05,00,00,00,00,\
00,00,00,48,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\BCDSTORE\Objects\{ae5534e0-a924-466c-b836-758539a3ee3a}\Elements\32000004]
"Element"="\\Boot\\boot.sdi"
Windows Boot Manager
--------------------
identifier {9dea862c-5cdd-4e70-acc1-f32b344d4795}
default {489fb83c-b74c-11e5-8269-ae6f2b48e753}
Windows Boot Loader
-------------------
identifier {489fb83c-b74c-11e5-8269-ae6f2b48e753}
device ramdisk=[boot]\Boot\boot.wim,{ae5534e0-a924-466c-b836-758539a3ee3a}
description iPXE
osdevice ramdisk=[boot]\Boot\boot.wim,{ae5534e0-a924-466c-b836-758539a3ee3a}
systemroot \Windows
detecthal Yes
winpe Yes
Setup Ramdisk Options
---------------------
identifier {ae5534e0-a924-466c-b836-758539a3ee3a}
ramdisksdidevice boot
ramdisksdipath \Boot\boot.sdi
00000000 72 65 67 66 |regf| 0x66676572 regf file magic identifier
00000004 00 00 00 00 |....| Sequence 1 : 0
00000008 00 00 00 00 |....| Sequence 2 : 0
0000000c 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00000014 01 00 00 00 |....| Major (1): 1
00000018 03 00 00 00 |....| Minor (3): 3
0000001c 00 00 00 00 |....| Type? (0): 0
00000020 01 00 00 00 |....| Format? (1): 1
00000024 20 00 00 00 | ...| 0x00000020 Pointer to first key record
00000028 00 10 00 00 |....| 0x00001000 Pointer to start of last hbin in file 4096
0000002c 01 00 00 00 |....| Unknown ? Always 1: 1
00000030 42 00 43 00 44 00 00 00 00 00 00 00 00 00 00 00 |B.C.D...........| Hivename BCD
00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| Log of last update or just stack?, ex: GUID seen : 396
*
000001f0 00 00 00 00 00 00 00 00 00 00 00 00 |............|
000001fc 56 75 24 66 |Vu$f| 0x66247556 CRC XOR of above including this expected result 0x0
00000200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00001000 68 62 69 6e |hbin| 0x6e696268 hbin block magic identifier @4096
00001004 00 00 00 00 |....| 0x00000000 bins distance from first bin 0
00001008 00 10 00 00 |....| 0x00001000 this bins size 4096 (a multip of 4k)
0000100c 00 00 00 00 00 00 00 00 |........| 0x00000000 Unknown 0
00001014 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
0000101c 00 00 00 00 |....| 0x00000000 Offset to next bin 0 (same as @x8?)
00001020 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001078
00001024 6e 6b |nk| cell/record type [110, 107] magic number
00001026 2c 00 |,.| 0x002c Flags 44
00001028 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001030 02 00 00 00 |....| 0x00000002 Unknown 2
00001034 10 0a 00 00 |....| 0x00000a10 Parent NK Offset 2576 ???? @ 0x00000624
00001038 02 00 00 00 |....| 0x00000002 Number of subkeys (stable) 2
0000103c 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001040 50 02 00 00 |P...| 0x00000250 Offset to subkey-list (stable) 592
00001044 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001048 00 00 00 00 |....| 0x00000000 Number of values 0
0000104c ff ff ff ff |....| 0xffffffff Offset to value-list 4294967295
00001050 78 00 00 00 |x...| 0x00000078 Offset to SK record 120
00001054 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001058 16 00 00 00 |....| 0x00000016 Max no bytes in subkey name (unconfirmed) 22
0000105c 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001060 00 00 00 00 |....| 0x00000000 Max no bytes in value name (unconfirmed) 0
00001064 00 00 00 00 |....| 0x00000000 Max value data size (unconfirmed) 0
00001068 20 60 81 00 | `..| 0x00816020 Unknown or run-time index 8478752
0000106c 04 00 |..| 0x0004 Key Name Length 4
0000106e 00 00 |..| 0x0000 Class Name Length 0
00001070 5f 42 43 44 44 65 73 63 |_BCDDesc| The Name ['_', 'B', 'C', 'D'] +4
00001078 38 ff ff ff |8...| 0x-00000c8 HBIN Cell size 200 next @ 0x00001140
0000107c 73 6b |sk| cell/record type [115, 107] magic number
0000107e 00 00 |..| 0x0000 Unknown 0
00001080 c0 0e 00 00 |....| 0x00000ec0 Offset to previous SK record 3776
00001084 30 0e 00 00 |0...| 0x00000e30 Offset to next SK record 3632
00001088 01 00 00 00 |....| 0x00000001 Reference count 1
0000108c ac 00 00 00 |....| 0x00ac Size of security descriptor 172
00001090 01 00 04 88 80 00 00 00 90 00 00 00 00 00 00 00 |................| Security descriptor of size 172 +4
000010a0 14 00 00 00 02 00 6c 00 04 00 00 00 00 03 24 00 |......l.......$.|
000010b0 3f 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 |?...............|
000010c0 7d 4b 88 ba a1 bd 68 67 50 31 ca f0 ec 03 00 00 |}K....hgP1......|
000010d0 00 03 14 00 3f 00 0f 00 01 01 00 00 00 00 00 05 |....?...........|
000010e0 12 00 00 00 00 03 18 00 3f 00 0f 00 01 02 00 00 |........?.......|
000010f0 00 00 00 05 20 00 00 00 20 02 00 00 00 03 14 00 |.... ... .......|
00001100 19 00 02 00 01 01 00 00 00 00 00 05 0c 00 00 00 |................|
00001110 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 |........ ... ...|
00001120 01 05 00 00 00 00 00 05 15 00 00 00 7d 4b 88 ba |............}K..|
00001130 a1 bd 68 67 50 31 ca f0 01 02 00 00 00 00 00 00 |..hgP1..........|
00001140 a0 ff ff ff |....| 0x-0000060 HBIN Cell size 96 next @ 0x000011a0
00001144 6e 6b |nk| cell/record type [110, 107] magic number
00001146 20 00 | .| 0x0020 Flags 32
00001148 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001150 02 00 00 00 |....| 0x00000002 Unknown 2
00001154 20 00 00 00 | ...| 0x00000020 Parent NK Offset 32 ???? @ 0x00001134
00001158 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
0000115c 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001160 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
00001164 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001168 01 00 00 00 |....| 0x00000001 Number of values 1
0000116c e0 01 00 00 |....| 0x000001e0 Offset to value-list 480
00001170 30 0e 00 00 |0...| 0x00000e30 Offset to SK record 3632
00001174 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001178 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
0000117c 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001180 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
00001184 18 00 00 00 |....| 0x00000018 Max value data size (unconfirmed) 24
00001188 00 00 00 00 |....| 0x00000000 Unknown or run-time index 0
0000118c 0b 00 |..| 0x000b Key Name Length 11
0000118e 00 00 |..| 0x0000 Class Name Length 0
00001190 44 65 73 63 72 69 70 74 69 6f 6e 00 6e 6b 20 00 |Description.nk .| The Name ['D', 'e', 's', 'c', 'r', 'i', 'p', 't', 'i', 'o', 'n'] +5
000011a0 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x000011c0
000011a4 76 6b |vk| cell/record type [118, 107] magic number
000011a6 07 00 |..| 0x0007 Value name length 7
000011a8 18 00 00 00 |....| 0x00000018 Data length 24
000011ac c0 01 00 00 |....| 0x000001c0 Data Offset 448 @ 0x000011c4 ?
000011b0 01 00 00 00 |....| 0x00000001 Type Enum 1
000011b4 01 00 |..| 0x0001 Flags 1
000011b6 00 00 |..| 0x00000000 Unknown 0
000011b8 4b 65 79 4e 61 6d 65 30 |KeyName0| The Name [75, 101, 121, 78, 97, 109, 101] +1
000011c0 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x000011e0
000011c4 42 00 |B.| cell/record type [66, 0] magic number
000011c6 43 00 |C.|
000011c8 44 00 30 00 |D.0.|
000011cc 30 00 30 00 |0.0.|
000011d0 30 00 30 00 30 00 30 00 31 00 00 00 00 00 00 00 |0.0.0.0.1.......|
000011e0 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x000011e8
000011e4 a0 01 |..| cell/record type [160, 1] magic number
000011e6 00 00 |..|
000011e8 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x000011f0
000011ec 90 09 |..| cell/record type [144, 9] magic number
000011ee 00 00 |..|
000011f0 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x000011f8
000011f4 88 0a |..| cell/record type [136, 10] magic number
000011f6 00 00 |..|
000011f8 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001250
000011fc 6e 6b |nk| cell/record type [110, 107] magic number
000011fe 20 00 | .| 0x0020 Flags 32
00001200 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001208 02 00 00 00 |....| 0x00000002 Unknown 2
0000120c 20 00 00 00 | ...| 0x00000020 Parent NK Offset 32 ???? @ 0x000011ec
00001210 03 00 00 00 |....| 0x00000003 Number of subkeys (stable) 3
00001214 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001218 78 0b 00 00 |x...| 0x00000b78 Offset to subkey-list (stable) 2936
0000121c ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001220 00 00 00 00 |....| 0x00000000 Number of values 0
00001224 ff ff ff ff |....| 0xffffffff Offset to value-list 4294967295
00001228 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
0000122c ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001230 4c 00 00 00 |L...| 0x0000004c Max no bytes in subkey name (unconfirmed) 76
00001234 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001238 00 00 00 00 |....| 0x00000000 Max no bytes in value name (unconfirmed) 0
0000123c 00 00 00 00 |....| 0x00000000 Max value data size (unconfirmed) 0
00001240 7b 39 64 65 |{9de| 0x6564397b Unknown or run-time index 1701067131
00001244 07 00 |..| 0x0007 Key Name Length 7
00001246 00 00 |..| 0x0000 Class Name Length 0
00001248 4f 62 6a 65 63 74 73 34 |Objects4| The Name ['O', 'b', 'j', 'e', 'c', 't', 's'] +1
00001250 e8 ff ff ff |....| 0x-0000018 HBIN Cell size 24 next @ 0x00001268
00001254 6c 66 |lf| cell/record type [108, 102] magic number
00001256 02 00 |..| 0x0002 Number of elements 2
00001258 40 01 00 00 |@...| 0x00000140 Offset to NK record 320
0000125c 44 65 73 63 |Desc| 0x63736544 Hash value 1668506948
00001260 f8 01 00 00 |....| 0x000001f8 Offset to NK record 504
00001264 4f 62 6a 65 |Obje| 0x656a624f Hash value 1701470799
00001268 88 ff ff ff |....| 0x-0000078 HBIN Cell size 120 next @ 0x000012e0
0000126c 6e 6b |nk| cell/record type [110, 107] magic number
0000126e 20 00 | .| 0x0020 Flags 32
00001270 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001278 02 00 00 00 |....| 0x00000002 Unknown 2
0000127c f8 01 00 00 |....| 0x000001f8 Parent NK Offset 504 ???? @ 0x00001084
00001280 02 00 00 00 |....| 0x00000002 Number of subkeys (stable) 2
00001284 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001288 d0 03 00 00 |....| 0x000003d0 Offset to subkey-list (stable) 976
0000128c ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001290 00 00 00 00 |....| 0x00000000 Number of values 0
00001294 ff ff ff ff |....| 0xffffffff Offset to value-list 4294967295
00001298 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
0000129c ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
000012a0 16 00 00 00 |....| 0x00000016 Max no bytes in subkey name (unconfirmed) 22
000012a4 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
000012a8 00 00 00 00 |....| 0x00000000 Max no bytes in value name (unconfirmed) 0
000012ac 00 00 00 00 |....| 0x00000000 Max value data size (unconfirmed) 0
000012b0 00 00 00 00 |....| 0x00000000 Unknown or run-time index 0
000012b4 26 00 |&.| 0x0026 Key Name Length 38
000012b6 00 00 |..| 0x0000 Class Name Length 0
000012b8 7b 34 38 39 66 62 38 33 63 2d 62 37 34 63 2d 31 |{489fb83c-b74c-1| The Name ['{', '4', '8', '9', 'f', 'b', '8', '3', 'c', '-', 'b', '7', '4', 'c', '-', '1', '1', 'e', '5', '-', '8', '2', '6', '9', '-', 'a', 'e', '6', 'f', '2', 'b', '4', '8', 'e', '7', '5', '3', '}'] +2
000012c8 31 65 35 2d 38 32 36 39 2d 61 65 36 66 32 62 34 |1e5-8269-ae6f2b4|
000012d8 38 65 37 35 33 7d 00 00 |8e753}..|
000012e0 a0 ff ff ff |....| 0x-0000060 HBIN Cell size 96 next @ 0x00001340
000012e4 6e 6b |nk| cell/record type [110, 107] magic number
000012e6 20 00 | .| 0x0020 Flags 32
000012e8 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
000012f0 02 00 00 00 |....| 0x00000002 Unknown 2
000012f4 68 02 00 00 |h...| 0x00000268 Parent NK Offset 616 ???? @ 0x0000108c
000012f8 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
000012fc 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001300 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
00001304 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001308 01 00 00 00 |....| 0x00000001 Number of values 1
0000130c 60 03 00 00 |`...| 0x00000360 Offset to value-list 864
00001310 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001314 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001318 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
0000131c 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001320 08 00 00 00 |....| 0x00000008 Max no bytes in value name (unconfirmed) 8
00001324 04 00 00 00 |....| 0x00000004 Max value data size (unconfirmed) 4
00001328 4e 00 00 00 |N...| 0x0000004e Unknown or run-time index 78
0000132c 0b 00 |..| 0x000b Key Name Length 11
0000132e 00 00 |..| 0x0000 Class Name Length 0
00001330 44 65 73 63 72 69 70 74 69 6f 6e 00 76 6b 07 00 |Description.vk..| The Name ['D', 'e', 's', 'c', 'r', 'i', 'p', 't', 'i', 'o', 'n'] +5
00001340 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001360
00001344 76 6b |vk| cell/record type [118, 107] magic number
00001346 04 00 |..| 0x0004 Value name length 4
00001348 04 00 00 80 |....| 0x80000004 Data length 4
0000134c 03 00 20 10 |.. .| 0x10200003 Data Offset 270532611 @ 0x10201007 ?
00001350 04 00 00 00 |....| 0x00000004 Type Enum 4
00001354 01 00 |..| 0x0001 Flags 1
00001356 74 00 |t.| 0x00000074 Unknown 116
00001358 54 79 70 65 69 00 50 00 |Typei.P.| The Name [84, 121, 112, 101] +4
00001360 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001368
00001364 40 03 |@.| cell/record type [64, 3] magic number
00001366 00 00 |..|
00001368 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001370
0000136c 40 04 |@.| cell/record type [64, 4] magic number
0000136e 00 00 |..|
00001370 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001378
00001374 78 05 |x.| cell/record type [120, 5] magic number
00001376 00 00 |..|
00001378 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x000013d0
0000137c 6e 6b |nk| cell/record type [110, 107] magic number
0000137e 20 00 | .| 0x0020 Flags 32
00001380 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001388 02 00 00 00 |....| 0x00000002 Unknown 2
0000138c 68 02 00 00 |h...| 0x00000268 Parent NK Offset 616 ???? @ 0x00001124
00001390 06 00 00 00 |....| 0x00000006 Number of subkeys (stable) 6
00001394 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001398 08 08 00 00 |....| 0x00000808 Offset to subkey-list (stable) 2056
0000139c ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
000013a0 00 00 00 00 |....| 0x00000000 Number of values 0
000013a4 ff ff ff ff |....| 0xffffffff Offset to value-list 4294967295
000013a8 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
000013ac ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
000013b0 10 00 00 00 |....| 0x00000010 Max no bytes in subkey name (unconfirmed) 16
000013b4 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
000013b8 00 00 00 00 |....| 0x00000000 Max no bytes in value name (unconfirmed) 0
000013bc 00 00 00 00 |....| 0x00000000 Max value data size (unconfirmed) 0
000013c0 00 00 00 00 |....| 0x00000000 Unknown or run-time index 0
000013c4 08 00 |..| 0x0008 Key Name Length 8
000013c6 00 00 |..| 0x0000 Class Name Length 0
000013c8 45 6c 65 6d 65 6e 74 73 |Elements| The Name ['E', 'l', 'e', 'm', 'e', 'n', 't', 's'] +0
000013d0 e8 ff ff ff |....| 0x-0000018 HBIN Cell size 24 next @ 0x000013e8
000013d4 6c 66 |lf| cell/record type [108, 102] magic number
000013d6 02 00 |..| 0x0002 Number of elements 2
000013d8 e0 02 00 00 |....| 0x000002e0 Offset to NK record 736
000013dc 44 65 73 63 |Desc| 0x63736544 Hash value 1668506948
000013e0 78 03 00 00 |x...| 0x00000378 Offset to NK record 888
000013e4 45 6c 65 6d |Elem| 0x6d656c45 Hash value 1835363397
000013e8 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001440
000013ec 6e 6b |nk| cell/record type [110, 107] magic number
000013ee 20 00 | .| 0x0020 Flags 32
000013f0 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
000013f8 02 00 00 00 |....| 0x00000002 Unknown 2
000013fc 78 03 00 00 |x...| 0x00000378 Parent NK Offset 888 ???? @ 0x00001084
00001400 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
00001404 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001408 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
0000140c ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001410 01 00 00 00 |....| 0x00000001 Number of values 1
00001414 68 03 00 00 |h...| 0x00000368 Offset to value-list 872
00001418 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
0000141c ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001420 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
00001424 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001428 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
0000142c aa 00 00 00 |....| 0x000000aa Max value data size (unconfirmed) 170
00001430 00 00 00 00 |....| 0x00000000 Unknown or run-time index 0
00001434 08 00 |..| 0x0008 Key Name Length 8
00001436 00 00 |..| 0x0000 Class Name Length 0
00001438 31 31 30 30 30 30 30 31 |11000001| The Name ['1', '1', '0', '0', '0', '0', '0', '1'] +0
00001440 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001460
00001444 76 6b |vk| cell/record type [118, 107] magic number
00001446 07 00 |..| 0x0007 Value name length 7
00001448 aa 00 00 00 |....| 0x000000aa Data length 170
0000144c 60 04 00 00 |`...| 0x00000460 Data Offset 1120 @ 0x00001464 ?
00001450 03 00 00 00 |....| 0x00000003 Type Enum 3
00001454 01 00 |..| 0x0001 Flags 1
00001456 30 30 |00| 0x00003030 Unknown 12336
00001458 45 6c 65 6d 65 6e 74 30 |Element0| The Name [69, 108, 101, 109, 101, 110, 116] +1
00001460 50 ff ff ff |P...| 0x-00000b0 HBIN Cell size 176 next @ 0x00001510
00001464 e0 34 |.4| cell/record type [224, 52] magic number
00001466 55 ae |U.|
00001468 24 a9 6c 46 |$.lF|
0000146c b8 36 75 85 |.6u.|
00001470 39 a3 ee 3a 00 00 00 00 01 00 00 00 9a 00 00 00 |9..:............|
00001480 00 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 |................|
00001490 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 |................|
000014a0 72 00 00 00 05 00 00 00 05 00 00 00 00 00 00 00 |r...............|
000014b0 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |H...............|
000014c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
000014f0 5c 00 42 00 6f 00 6f 00 74 00 5c 00 62 00 6f 00 |\.B.o.o.t.\.b.o.|
00001500 6f 00 74 00 2e 00 77 00 69 00 6d 00 00 00 00 00 |o.t...w.i.m.....|
00001510 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001518
00001514 18 06 |..| cell/record type [24, 6] magic number
00001516 00 00 |..|
00001518 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001520
0000151c 68 07 |h.| cell/record type [104, 7] magic number
0000151e 00 00 |..|
00001520 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001578
00001524 6e 6b |nk| cell/record type [110, 107] magic number
00001526 20 00 | .| 0x0020 Flags 32
00001528 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001530 02 00 00 00 |....| 0x00000002 Unknown 2
00001534 78 03 00 00 |x...| 0x00000378 Parent NK Offset 888 ???? @ 0x000011bc
00001538 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
0000153c 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001540 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
00001544 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001548 01 00 00 00 |....| 0x00000001 Number of values 1
0000154c 70 03 00 00 |p...| 0x00000370 Offset to value-list 880
00001550 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001554 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001558 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
0000155c 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001560 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
00001564 0a 00 00 00 |....| 0x0000000a Max value data size (unconfirmed) 10
00001568 01 00 00 00 |....| 0x00000001 Unknown or run-time index 1
0000156c 08 00 |..| 0x0008 Key Name Length 8
0000156e 00 00 |..| 0x0000 Class Name Length 0
00001570 31 32 30 30 30 30 30 34 |12000004| The Name ['1', '2', '0', '0', '0', '0', '0', '4'] +0
00001578 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001598
0000157c 76 6b |vk| cell/record type [118, 107] magic number
0000157e 07 00 |..| 0x0007 Value name length 7
00001580 0a 00 00 00 |....| 0x0000000a Data length 10
00001584 98 05 00 00 |....| 0x00000598 Data Offset 1432 @ 0x0000159c ?
00001588 01 00 00 00 |....| 0x00000001 Type Enum 1
0000158c 01 00 |..| 0x0001 Flags 1
0000158e 00 00 |..| 0x00000000 Unknown 0
00001590 45 6c 65 6d 65 6e 74 33 |Element3| The Name [69, 108, 101, 109, 101, 110, 116] +1
00001598 f0 ff ff ff |....| 0x-0000010 HBIN Cell size 16 next @ 0x000015a8
0000159c 69 00 |i.| cell/record type [105, 0] magic number
0000159e 50 00 |P.|
000015a0 58 00 45 00 00 00 81 00 |X.E.....|
000015a8 e8 ff ff ff |....| 0x-0000018 HBIN Cell size 24 next @ 0x000015c0
000015ac 5c 00 |\.| cell/record type [92, 0] magic number
000015ae 57 00 |W.|
000015b0 69 00 6e 00 64 00 6f 00 77 00 73 00 00 00 55 00 |i.n.d.o.w.s...U.|
000015c0 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001618
000015c4 6e 6b |nk| cell/record type [110, 107] magic number
000015c6 20 00 | .| 0x0020 Flags 32
000015c8 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
000015d0 02 00 00 00 |....| 0x00000002 Unknown 2
000015d4 78 03 00 00 |x...| 0x00000378 Parent NK Offset 888 ???? @ 0x0000125c
000015d8 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
000015dc 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
000015e0 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
000015e4 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
000015e8 01 00 00 00 |....| 0x00000001 Number of values 1
000015ec 10 05 00 00 |....| 0x00000510 Offset to value-list 1296
000015f0 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
000015f4 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
000015f8 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
000015fc 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001600 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
00001604 aa 00 00 00 |....| 0x000000aa Max value data size (unconfirmed) 170
00001608 6f 00 74 00 |o.t.| 0x0074006f Unknown or run-time index 7602287
0000160c 08 00 |..| 0x0008 Key Name Length 8
0000160e 00 00 |..| 0x0000 Class Name Length 0
00001610 32 31 30 30 30 30 30 31 |21000001| The Name ['2', '1', '0', '0', '0', '0', '0', '1'] +0
00001618 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001638
0000161c 76 6b |vk| cell/record type [118, 107] magic number
0000161e 07 00 |..| 0x0007 Value name length 7
00001620 aa 00 00 00 |....| 0x000000aa Data length 170
00001624 38 06 00 00 |8...| 0x00000638 Data Offset 1592 @ 0x0000163c ?
00001628 03 00 00 00 |....| 0x00000003 Type Enum 3
0000162c 01 00 |..| 0x0001 Flags 1
0000162e 6f 00 |o.| 0x0000006f Unknown 111
00001630 45 6c 65 6d 65 6e 74 00 |Element.| The Name [69, 108, 101, 109, 101, 110, 116] +1
00001638 50 ff ff ff |P...| 0x-00000b0 HBIN Cell size 176 next @ 0x000016e8
0000163c e0 34 |.4| cell/record type [224, 52] magic number
0000163e 55 ae |U.|
00001640 24 a9 6c 46 b8 36 75 85 39 a3 ee 3a 00 00 00 00 |$.lF.6u.9..:....|
00001650 01 00 00 00 9a 00 00 00 00 00 00 00 03 00 00 00 |................|
00001660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00001670 00 00 00 00 01 00 00 00 72 00 00 00 05 00 00 00 |........r.......|
00001680 05 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 |........H.......|
00001690 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
000016c0 00 00 00 00 00 00 00 00 5c 00 42 00 6f 00 6f 00 |........\.B.o.o.|
000016d0 74 00 5c 00 62 00 6f 00 6f 00 74 00 2e 00 77 00 |t.\.b.o.o.t...w.|
000016e0 69 00 6d 00 00 00 0e 00 |i.m.....|
000016e8 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001708
000016ec 76 6b |vk| cell/record type [118, 107] magic number
000016ee 07 00 |..| 0x0007 Value name length 7
000016f0 01 00 00 80 |....| 0x80000001 Data length 1
000016f4 01 00 00 00 |....| 0x00000001 Data Offset 1 @ 0x00001005 ?
000016f8 03 00 00 00 |....| 0x00000003 Type Enum 3
000016fc 01 00 |..| 0x0001 Flags 1
000016fe 00 00 |..| 0x00000000 Unknown 0
00001700 45 6c 65 6d 65 6e 74 00 |Element.| The Name [69, 108, 101, 109, 101, 110, 116] +1
00001708 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001710
0000170c e8 06 |..| cell/record type [232, 6] magic number
0000170e 00 00 |..|
00001710 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001768
00001714 6e 6b |nk| cell/record type [110, 107] magic number
00001716 20 00 | .| 0x0020 Flags 32
00001718 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001720 02 00 00 00 |....| 0x00000002 Unknown 2
00001724 78 03 00 00 |x...| 0x00000378 Parent NK Offset 888 ???? @ 0x000013ac
00001728 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
0000172c 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001730 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
00001734 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001738 01 00 00 00 |....| 0x00000001 Number of values 1
0000173c 18 05 00 00 |....| 0x00000518 Offset to value-list 1304
00001740 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001744 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001748 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
0000174c 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001750 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
00001754 12 00 00 00 |....| 0x00000012 Max value data size (unconfirmed) 18
00001758 18 00 00 00 |....| 0x00000018 Unknown or run-time index 24
0000175c 08 00 |..| 0x0008 Key Name Length 8
0000175e 00 00 |..| 0x0000 Class Name Length 0
00001760 32 32 30 30 30 30 30 32 |22000002| The Name ['2', '2', '0', '0', '0', '0', '0', '2'] +0
00001768 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001788
0000176c 76 6b |vk| cell/record type [118, 107] magic number
0000176e 07 00 |..| 0x0007 Value name length 7
00001770 12 00 00 00 |....| 0x00000012 Data length 18
00001774 a8 05 00 00 |....| 0x000005a8 Data Offset 1448 @ 0x000015ac ?
00001778 01 00 00 00 |....| 0x00000001 Type Enum 1
0000177c 01 00 |..| 0x0001 Flags 1
0000177e d1 01 |..| 0x000001d1 Unknown 465
00001780 45 6c 65 6d 65 6e 74 00 |Element.| The Name [69, 108, 101, 109, 101, 110, 116] +1
00001788 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x000017e0
0000178c 6e 6b |nk| cell/record type [110, 107] magic number
0000178e 20 00 | .| 0x0020 Flags 32
00001790 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001798 02 00 00 00 |....| 0x00000002 Unknown 2
0000179c 78 03 00 00 |x...| 0x00000378 Parent NK Offset 888 ???? @ 0x00001424
000017a0 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
000017a4 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
000017a8 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
000017ac ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
000017b0 01 00 00 00 |....| 0x00000001 Number of values 1
000017b4 00 08 00 00 |....| 0x00000800 Offset to value-list 2048
000017b8 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
000017bc ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
000017c0 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
000017c4 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
000017c8 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
000017cc 01 00 00 00 |....| 0x00000001 Max value data size (unconfirmed) 1
000017d0 48 0f 00 00 |H...| 0x00000f48 Unknown or run-time index 3912
000017d4 08 00 |..| 0x0008 Key Name Length 8
000017d6 00 00 |..| 0x0000 Class Name Length 0
000017d8 32 36 30 30 30 30 31 30 |26000010| The Name ['2', '6', '0', '0', '0', '0', '1', '0'] +0
000017e0 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001800
000017e4 76 6b |vk| cell/record type [118, 107] magic number
000017e6 07 00 |..| 0x0007 Value name length 7
000017e8 01 00 00 80 |....| 0x80000001 Data length 1
000017ec 01 00 00 00 |....| 0x00000001 Data Offset 1 @ 0x00001005 ?
000017f0 03 00 00 00 |....| 0x00000003 Type Enum 3
000017f4 01 00 |..| 0x0001 Flags 1
000017f6 00 00 |..| 0x00000000 Unknown 0
000017f8 45 6c 65 6d 65 6e 74 31 |Element1| The Name [69, 108, 101, 109, 101, 110, 116] +1
00001800 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001808
00001804 e0 07 |..| cell/record type [224, 7] magic number
00001806 00 00 |..|
00001808 c0 ff ff ff |....| 0x-0000040 HBIN Cell size 64 next @ 0x00001848
0000180c 6c 66 |lf| cell/record type [108, 102] magic number
0000180e 06 00 |..| 0x0006 Number of elements 6
00001810 e8 03 00 00 |....| 0x000003e8 Offset to NK record 1000
00001814 31 31 30 30 |1100| 0x30303131 Hash value 808464689
00001818 20 05 00 00 | ...| 0x00000520 Offset to NK record 1312
0000181c 31 32 30 30 |1200| 0x30303231 Hash value 808464945
00001820 c0 05 00 00 |....| 0x000005c0 Offset to NK record 1472
00001824 32 31 30 30 |2100| 0x30303132 Hash value 808464690
00001828 10 07 00 00 |....| 0x00000710 Offset to NK record 1808
0000182c 32 32 30 30 |2200| 0x30303232 Hash value 808464946
00001830 88 07 00 00 |....| 0x00000788 Offset to NK record 1928
00001834 32 36 30 30 |2600| 0x30303632 Hash value 808465970
00001838 48 08 00 00 |H...| 0x00000848 Offset to NK record 2120
0000183c 32 36 30 30 |2600| 0x30303632 Hash value 808465970
00001840 00 00 00 00 |....| 0x00000000 Offset to NK record 0
00001844 00 00 00 00 |....| 0x00000000 Hash value 0
00001848 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x000018a0
0000184c 6e 6b |nk| cell/record type [110, 107] magic number
0000184e 20 00 | .| 0x0020 Flags 32
00001850 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001858 02 00 00 00 |....| 0x00000002 Unknown 2
0000185c 78 03 00 00 |x...| 0x00000378 Parent NK Offset 888 ???? @ 0x000014e4
00001860 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
00001864 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001868 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
0000186c ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001870 01 00 00 00 |....| 0x00000001 Number of values 1
00001874 08 07 00 00 |....| 0x00000708 Offset to value-list 1800
00001878 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
0000187c ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001880 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
00001884 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001888 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
0000188c 01 00 00 00 |....| 0x00000001 Max value data size (unconfirmed) 1
00001890 24 a9 6c 46 |$.lF| 0x466ca924 Unknown or run-time index 1181526308
00001894 08 00 |..| 0x0008 Key Name Length 8
00001896 00 00 |..| 0x0000 Class Name Length 0
00001898 32 36 30 30 30 30 32 32 |26000022| The Name ['2', '6', '0', '0', '0', '0', '2', '2'] +0
000018a0 88 ff ff ff |....| 0x-0000078 HBIN Cell size 120 next @ 0x00001918
000018a4 6e 6b |nk| cell/record type [110, 107] magic number
000018a6 20 00 | .| 0x0020 Flags 32
000018a8 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
000018b0 02 00 00 00 |....| 0x00000002 Unknown 2
000018b4 f8 01 00 00 |....| 0x000001f8 Parent NK Offset 504 ???? @ 0x000016bc
000018b8 02 00 00 00 |....| 0x00000002 Number of subkeys (stable) 2
000018bc 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
000018c0 18 0a 00 00 |....| 0x00000a18 Offset to subkey-list (stable) 2584
000018c4 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
000018c8 00 00 00 00 |....| 0x00000000 Number of values 0
000018cc ff ff ff ff |....| 0xffffffff Offset to value-list 4294967295
000018d0 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
000018d4 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
000018d8 16 00 00 00 |....| 0x00000016 Max no bytes in subkey name (unconfirmed) 22
000018dc 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
000018e0 00 00 00 00 |....| 0x00000000 Max no bytes in value name (unconfirmed) 0
000018e4 00 00 00 00 |....| 0x00000000 Max value data size (unconfirmed) 0
000018e8 ff ff ff ff |....| 0xffffffff Unknown or run-time index 4294967295
000018ec 26 00 |&.| 0x0026 Key Name Length 38
000018ee 00 00 |..| 0x0000 Class Name Length 0
000018f0 7b 39 64 65 61 38 36 32 63 2d 35 63 64 64 2d 34 |{9dea862c-5cdd-4| The Name ['{', '9', 'd', 'e', 'a', '8', '6', '2', 'c', '-', '5', 'c', 'd', 'd', '-', '4', 'e', '7', '0', '-', 'a', 'c', 'c', '1', '-', 'f', '3', '2', 'b', '3', '4', '4', 'd', '4', '7', '9', '5', '}'] +2
00001900 65 37 30 2d 61 63 63 31 2d 66 33 32 62 33 34 34 |e70-acc1-f32b344|
00001910 64 34 37 39 35 7d 00 00 |d4795}..|
00001918 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001920
0000191c 00 0c |..| cell/record type [0, 12] magic number
0000191e 00 00 |..|
00001920 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001928
00001924 e8 0c |..| cell/record type [232, 12] magic number
00001926 00 00 |..|
00001928 f8 ff ff ff |....| 0x-0000008 HBIN Cell size 8 next @ 0x00001930
0000192c d0 0d |..| cell/record type [208, 13] magic number
0000192e 00 00 |..|
00001930 a0 ff ff ff |....| 0x-0000060 HBIN Cell size 96 next @ 0x00001990
00001934 6e 6b |nk| cell/record type [110, 107] magic number
00001936 20 00 | .| 0x0020 Flags 32
00001938 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001940 02 00 00 00 |....| 0x00000002 Unknown 2
00001944 a0 08 00 00 |....| 0x000008a0 Parent NK Offset 2208 ???? @ 0x000010a4
00001948 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
0000194c 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001950 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
00001954 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001958 01 00 00 00 |....| 0x00000001 Number of values 1
0000195c e8 01 00 00 |....| 0x000001e8 Offset to value-list 488
00001960 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001964 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001968 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
0000196c 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001970 08 00 00 00 |....| 0x00000008 Max no bytes in value name (unconfirmed) 8
00001974 04 00 00 00 |....| 0x00000004 Max value data size (unconfirmed) 4
00001978 00 00 00 00 |....| 0x00000000 Unknown or run-time index 0
0000197c 0b 00 |..| 0x000b Key Name Length 11
0000197e 00 00 |..| 0x0000 Class Name Length 0
00001980 44 65 73 63 72 69 70 74 69 6f 6e 39 32 34 2d 34 |Description924-4| The Name ['D', 'e', 's', 'c', 'r', 'i', 'p', 't', 'i', 'o', 'n'] +5
00001990 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x000019b0
00001994 76 6b |vk| cell/record type [118, 107] magic number
00001996 04 00 |..| 0x0004 Value name length 4
00001998 04 00 00 80 |....| 0x80000004 Data length 4
0000199c 02 00 10 10 |....| 0x10100002 Data Offset 269484034 @ 0x10101006 ?
000019a0 04 00 00 00 |....| 0x00000004 Type Enum 4
000019a4 01 00 |..| 0x0001 Flags 1
000019a6 d1 01 |..| 0x000001d1 Unknown 465
000019a8 54 79 70 65 c0 58 81 00 |Type.X..| The Name [84, 121, 112, 101] +4
000019b0 f0 ff ff ff |....| 0x-0000010 HBIN Cell size 16 next @ 0x000019c0
000019b4 6c 66 |lf| cell/record type [108, 102] magic number
000019b6 01 00 |..| 0x0001 Number of elements 1
000019b8 30 0a 00 00 |0...| 0x00000a30 Offset to NK record 2608
000019bc 32 33 30 30 |2300| 0x30303332 Hash value 808465202
000019c0 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001a18
000019c4 6e 6b |nk| cell/record type [110, 107] magic number
000019c6 20 00 | .| 0x0020 Flags 32
000019c8 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
000019d0 02 00 00 00 |....| 0x00000002 Unknown 2
000019d4 a0 08 00 00 |....| 0x000008a0 Parent NK Offset 2208 ???? @ 0x00001134
000019d8 01 00 00 00 |....| 0x00000001 Number of subkeys (stable) 1
000019dc 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
000019e0 b0 09 00 00 |....| 0x000009b0 Offset to subkey-list (stable) 2480
000019e4 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
000019e8 00 00 00 00 |....| 0x00000000 Number of values 0
000019ec ff ff ff ff |....| 0xffffffff Offset to value-list 4294967295
000019f0 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
000019f4 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
000019f8 10 00 00 00 |....| 0x00000010 Max no bytes in subkey name (unconfirmed) 16
000019fc 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001a00 00 00 00 00 |....| 0x00000000 Max no bytes in value name (unconfirmed) 0
00001a04 00 00 00 00 |....| 0x00000000 Max value data size (unconfirmed) 0
00001a08 65 00 36 00 |e.6.| 0x00360065 Unknown or run-time index 3539045
00001a0c 08 00 |..| 0x0008 Key Name Length 8
00001a0e 00 00 |..| 0x0000 Class Name Length 0
00001a10 45 6c 65 6d 65 6e 74 73 |Elements| The Name ['E', 'l', 'e', 'm', 'e', 'n', 't', 's'] +0
00001a18 e8 ff ff ff |....| 0x-0000018 HBIN Cell size 24 next @ 0x00001a30
00001a1c 6c 66 |lf| cell/record type [108, 102] magic number
00001a1e 02 00 |..| 0x0002 Number of elements 2
00001a20 30 09 00 00 |0...| 0x00000930 Offset to NK record 2352
00001a24 44 65 73 63 |Desc| 0x63736544 Hash value 1668506948
00001a28 c0 09 00 00 |....| 0x000009c0 Offset to NK record 2496
00001a2c 45 6c 65 6d |Elem| 0x6d656c45 Hash value 1835363397
00001a30 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001a88
00001a34 6e 6b |nk| cell/record type [110, 107] magic number
00001a36 20 00 | .| 0x0020 Flags 32
00001a38 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001a40 02 00 00 00 |....| 0x00000002 Unknown 2
00001a44 c0 09 00 00 |....| 0x000009c0 Parent NK Offset 2496 ???? @ 0x00001084
00001a48 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
00001a4c 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001a50 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
00001a54 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001a58 01 00 00 00 |....| 0x00000001 Number of values 1
00001a5c f0 01 00 00 |....| 0x000001f0 Offset to value-list 496
00001a60 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001a64 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001a68 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
00001a6c 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001a70 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
00001a74 4e 00 00 00 |N...| 0x0000004e Max value data size (unconfirmed) 78
00001a78 32 32 30 30 |2200| 0x30303232 Unknown or run-time index 808464946
00001a7c 08 00 |..| 0x0008 Key Name Length 8
00001a7e 00 00 |..| 0x0000 Class Name Length 0
00001a80 32 33 30 30 30 30 30 33 |23000003| The Name ['2', '3', '0', '0', '0', '0', '0', '3'] +0
00001a88 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001aa8
00001a8c 76 6b |vk| cell/record type [118, 107] magic number
00001a8e 07 00 |..| 0x0007 Value name length 7
00001a90 4e 00 00 00 |N...| 0x0000004e Data length 78
00001a94 a8 0a 00 00 |....| 0x00000aa8 Data Offset 2728 @ 0x00001aac ?
00001a98 01 00 00 00 |....| 0x00000001 Type Enum 1
00001a9c 01 00 |..| 0x0001 Flags 1
00001a9e 07 00 |..| 0x00000007 Unknown 7
00001aa0 45 6c 65 6d 65 6e 74 00 |Element.| The Name [69, 108, 101, 109, 101, 110, 116] +1
00001aa8 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001b00
00001aac 7b 00 |{.| cell/record type [123, 0] magic number
00001aae 34 00 |4.|
00001ab0 38 00 39 00 66 00 62 00 38 00 33 00 63 00 2d 00 |8.9.f.b.8.3.c.-.|
00001ac0 62 00 37 00 34 00 63 00 2d 00 31 00 31 00 65 00 |b.7.4.c.-.1.1.e.|
00001ad0 35 00 2d 00 38 00 32 00 36 00 39 00 2d 00 61 00 |5.-.8.2.6.9.-.a.|
00001ae0 65 00 36 00 66 00 32 00 62 00 34 00 38 00 65 00 |e.6.f.2.b.4.8.e.|
00001af0 37 00 35 00 33 00 7d 00 00 00 00 00 38 48 55 00 |7.5.3.}.....8HU.|
00001b00 88 ff ff ff |....| 0x-0000078 HBIN Cell size 120 next @ 0x00001b78
00001b04 6e 6b |nk| cell/record type [110, 107] magic number
00001b06 20 00 | .| 0x0020 Flags 32
00001b08 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001b10 02 00 00 00 |....| 0x00000002 Unknown 2
00001b14 f8 01 00 00 |....| 0x000001f8 Parent NK Offset 504 ???? @ 0x0000191c
00001b18 02 00 00 00 |....| 0x00000002 Number of subkeys (stable) 2
00001b1c 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001b20 78 0c 00 00 |x...| 0x00000c78 Offset to subkey-list (stable) 3192
00001b24 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001b28 00 00 00 00 |....| 0x00000000 Number of values 0
00001b2c ff ff ff ff |....| 0xffffffff Offset to value-list 4294967295
00001b30 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001b34 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001b38 16 00 00 00 |....| 0x00000016 Max no bytes in subkey name (unconfirmed) 22
00001b3c 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001b40 00 00 00 00 |....| 0x00000000 Max no bytes in value name (unconfirmed) 0
00001b44 00 00 00 00 |....| 0x00000000 Max value data size (unconfirmed) 0
00001b48 20 00 00 00 | ...| 0x00000020 Unknown or run-time index 32
00001b4c 26 00 |&.| 0x0026 Key Name Length 38
00001b4e 00 00 |..| 0x0000 Class Name Length 0
00001b50 7b 61 65 35 35 33 34 65 30 2d 61 39 32 34 2d 34 |{ae5534e0-a924-4| The Name ['{', 'a', 'e', '5', '5', '3', '4', 'e', '0', '-', 'a', '9', '2', '4', '-', '4', '6', '6', 'c', '-', 'b', '8', '3', '6', '-', '7', '5', '8', '5', '3', '9', 'a', '3', 'e', 'e', '3', 'a', '}'] +2
00001b60 36 36 63 2d 62 38 33 36 2d 37 35 38 35 33 39 61 |66c-b836-758539a|
00001b70 33 65 65 33 61 7d 20 00 |3ee3a} .|
00001b78 d8 ff ff ff |....| 0x-0000028 HBIN Cell size 40 next @ 0x00001ba0
00001b7c 6c 66 |lf| cell/record type [108, 102] magic number
00001b7e 03 00 |..| 0x0003 Number of elements 3
00001b80 68 02 00 00 |h...| 0x00000268 Offset to NK record 616
00001b84 7b 34 38 39 |{489| 0x3938347b Hash value 959984763
00001b88 a0 08 00 00 |....| 0x000008a0 Offset to NK record 2208
00001b8c 7b 39 64 65 |{9de| 0x6564397b Hash value 1701067131
00001b90 00 0b 00 00 |....| 0x00000b00 Offset to NK record 2816
00001b94 7b 61 65 35 |{ae5| 0x3565617b Hash value 895836539
00001b98 00 00 00 00 |....| 0x00000000 Offset to NK record 0
00001b9c 00 00 00 00 |....| 0x00000000 Hash value 0
00001ba0 a0 ff ff ff |....| 0x-0000060 HBIN Cell size 96 next @ 0x00001c00
00001ba4 6e 6b |nk| cell/record type [110, 107] magic number
00001ba6 20 00 | .| 0x0020 Flags 32
00001ba8 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001bb0 02 00 00 00 |....| 0x00000002 Unknown 2
00001bb4 00 0b 00 00 |....| 0x00000b00 Parent NK Offset 2816 ???? @ 0x000010b4
00001bb8 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
00001bbc 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001bc0 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
00001bc4 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001bc8 01 00 00 00 |....| 0x00000001 Number of values 1
00001bcc 18 09 00 00 |....| 0x00000918 Offset to value-list 2328
00001bd0 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001bd4 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001bd8 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
00001bdc 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001be0 08 00 00 00 |....| 0x00000008 Max no bytes in value name (unconfirmed) 8
00001be4 04 00 00 00 |....| 0x00000004 Max value data size (unconfirmed) 4
00001be8 03 00 00 00 |....| 0x00000003 Unknown or run-time index 3
00001bec 0b 00 |..| 0x000b Key Name Length 11
00001bee 00 00 |..| 0x0000 Class Name Length 0
00001bf0 44 65 73 63 72 69 70 74 69 6f 6e 00 00 00 00 00 |Description.....| The Name ['D', 'e', 's', 'c', 'r', 'i', 'p', 't', 'i', 'o', 'n'] +5
00001c00 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001c20
00001c04 76 6b |vk| cell/record type [118, 107] magic number
00001c06 04 00 |..| 0x0004 Value name length 4
00001c08 04 00 00 80 |....| 0x80000004 Data length 4
00001c0c 00 00 00 30 |...0| 0x30000000 Data Offset 805306368 @ 0x30001004 ?
00001c10 04 00 00 00 |....| 0x00000004 Type Enum 4
00001c14 01 00 |..| 0x0001 Flags 1
00001c16 00 00 |..| 0x00000000 Unknown 0
00001c18 54 79 70 65 00 00 00 00 |Type....| The Name [84, 121, 112, 101] +4
00001c20 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001c78
00001c24 6e 6b |nk| cell/record type [110, 107] magic number
00001c26 20 00 | .| 0x0020 Flags 32
00001c28 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001c30 02 00 00 00 |....| 0x00000002 Unknown 2
00001c34 00 0b 00 00 |....| 0x00000b00 Parent NK Offset 2816 ???? @ 0x00001134
00001c38 02 00 00 00 |....| 0x00000002 Number of subkeys (stable) 2
00001c3c 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001c40 18 0e 00 00 |....| 0x00000e18 Offset to subkey-list (stable) 3608
00001c44 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001c48 00 00 00 00 |....| 0x00000000 Number of values 0
00001c4c ff ff ff ff |....| 0xffffffff Offset to value-list 4294967295
00001c50 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001c54 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001c58 10 00 00 00 |....| 0x00000010 Max no bytes in subkey name (unconfirmed) 16
00001c5c 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001c60 00 00 00 00 |....| 0x00000000 Max no bytes in value name (unconfirmed) 0
00001c64 00 00 00 00 |....| 0x00000000 Max value data size (unconfirmed) 0
00001c68 02 00 00 00 |....| 0x00000002 Unknown or run-time index 2
00001c6c 08 00 |..| 0x0008 Key Name Length 8
00001c6e 00 00 |..| 0x0000 Class Name Length 0
00001c70 45 6c 65 6d 65 6e 74 73 |Elements| The Name ['E', 'l', 'e', 'm', 'e', 'n', 't', 's'] +0
00001c78 e8 ff ff ff |....| 0x-0000018 HBIN Cell size 24 next @ 0x00001c90
00001c7c 6c 66 |lf| cell/record type [108, 102] magic number
00001c7e 02 00 |..| 0x0002 Number of elements 2
00001c80 a0 0b 00 00 |....| 0x00000ba0 Offset to NK record 2976
00001c84 44 65 73 63 |Desc| 0x63736544 Hash value 1668506948
00001c88 20 0c 00 00 | ...| 0x00000c20 Offset to NK record 3104
00001c8c 45 6c 65 6d |Elem| 0x6d656c45 Hash value 1835363397
00001c90 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001ce8
00001c94 6e 6b |nk| cell/record type [110, 107] magic number
00001c96 20 00 | .| 0x0020 Flags 32
00001c98 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001ca0 02 00 00 00 |....| 0x00000002 Unknown 2
00001ca4 20 0c 00 00 | ...| 0x00000c20 Parent NK Offset 3104 ???? @ 0x00001084
00001ca8 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
00001cac 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001cb0 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
00001cb4 ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001cb8 01 00 00 00 |....| 0x00000001 Number of values 1
00001cbc 20 09 00 00 | ...| 0x00000920 Offset to value-list 2336
00001cc0 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001cc4 ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001cc8 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
00001ccc 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001cd0 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
00001cd4 58 00 00 00 |X...| 0x00000058 Max value data size (unconfirmed) 88
00001cd8 00 00 00 00 |....| 0x00000000 Unknown or run-time index 0
00001cdc 08 00 |..| 0x0008 Key Name Length 8
00001cde 00 00 |..| 0x0000 Class Name Length 0
00001ce0 33 31 30 30 30 30 30 33 |31000003| The Name ['3', '1', '0', '0', '0', '0', '0', '3'] +0
00001ce8 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001d08
00001cec 76 6b |vk| cell/record type [118, 107] magic number
00001cee 07 00 |..| 0x0007 Value name length 7
00001cf0 58 00 00 00 |X...| 0x00000058 Data length 88
00001cf4 08 0d 00 00 |....| 0x00000d08 Data Offset 3336 @ 0x00001d0c ?
00001cf8 03 00 00 00 |....| 0x00000003 Type Enum 3
00001cfc 01 00 |..| 0x0001 Flags 1
00001cfe 00 00 |..| 0x00000000 Unknown 0
00001d00 45 6c 65 6d 65 6e 74 00 |Element.| The Name [69, 108, 101, 109, 101, 110, 116] +1
00001d08 a0 ff ff ff |....| 0x-0000060 HBIN Cell size 96 next @ 0x00001d68
00001d0c 00 00 |..| cell/record type [0, 0] magic number
00001d0e 00 00 |..|
00001d10 00 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 |................|
00001d20 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 |....H...........|
00001d30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00001d60 00 00 00 00 ff ff ff ff |........|
00001d68 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0x00000010 FREE HBIN Cell size 16 next @ 0x00001d78
00001d78 a8 ff ff ff |....| 0x-0000058 HBIN Cell size 88 next @ 0x00001dd0
00001d7c 6e 6b |nk| cell/record type [110, 107] magic number
00001d7e 20 00 | .| 0x0020 Flags 32
00001d80 00 00 00 00 00 00 00 00 |........| 0x0000000000000000 Timestamp None
00001d88 02 00 00 00 |....| 0x00000002 Unknown 2
00001d8c 20 0c 00 00 | ...| 0x00000c20 Parent NK Offset 3104 ???? @ 0x0000116c
00001d90 00 00 00 00 |....| 0x00000000 Number of subkeys (stable) 0
00001d94 00 00 00 00 |....| 0x00000000 Number of subkeys (volatile) 0
00001d98 ff ff ff ff |....| 0xffffffff Offset to subkey-list (stable) 4294967295
00001d9c ff ff ff ff |....| 0xffffffff Offset to subkey-list (volatile) 4294967295
00001da0 01 00 00 00 |....| 0x00000001 Number of values 1
00001da4 28 09 00 00 |(...| 0x00000928 Offset to value-list 2344
00001da8 c0 0e 00 00 |....| 0x00000ec0 Offset to SK record 3776
00001dac ff ff ff ff |....| 0xffffffff Offset to class name 4294967295
00001db0 00 00 00 00 |....| 0x00000000 Max no bytes in subkey name (unconfirmed) 0
00001db4 00 00 00 00 |....| 0x00000000 Max subkey class name length (unconfirmed) 0
00001db8 0e 00 00 00 |....| 0x0000000e Max no bytes in value name (unconfirmed) 14
00001dbc 1e 00 00 00 |....| 0x0000001e Max value data size (unconfirmed) 30
00001dc0 50 59 81 00 |PY..| 0x00815950 Unknown or run-time index 8477008
00001dc4 08 00 |..| 0x0008 Key Name Length 8
00001dc6 00 00 |..| 0x0000 Class Name Length 0
00001dc8 33 32 30 30 30 30 30 34 |32000004| The Name ['3', '2', '0', '0', '0', '0', '0', '4'] +0
00001dd0 e0 ff ff ff |....| 0x-0000020 HBIN Cell size 32 next @ 0x00001df0
00001dd4 76 6b |vk| cell/record type [118, 107] magic number
00001dd6 07 00 |..| 0x0007 Value name length 7
00001dd8 1e 00 00 00 |....| 0x0000001e Data length 30
00001ddc f0 0d 00 00 |....| 0x00000df0 Data Offset 3568 @ 0x00001df4 ?
00001de0 01 00 00 00 |....| 0x00000001 Type Enum 1
00001de4 01 00 |..| 0x0001 Flags 1
00001de6 00 00 |..| 0x00000000 Unknown 0
00001de8 45 6c 65 6d 65 6e 74 ff |Element.| The Name [69, 108, 101, 109, 101, 110, 116] +1
00001df0 d8 ff ff ff |....| 0x-0000028 HBIN Cell size 40 next @ 0x00001e18
00001df4 5c 00 |\.| cell/record type [92, 0] magic number
00001df6 42 00 |B.|
00001df8 6f 00 6f 00 |o.o.|
00001dfc 74 00 5c 00 |t.\.|
00001e00 62 00 6f 00 6f 00 74 00 2e 00 73 00 64 00 69 00 |b.o.o.t...s.d.i.|
00001e10 00 00 00 00 0b 00 00 00 |........|
00001e18 e8 ff ff ff |....| 0x-0000018 HBIN Cell size 24 next @ 0x00001e30
00001e1c 6c 66 |lf| cell/record type [108, 102] magic number
00001e1e 02 00 |..| 0x0002 Number of elements 2
00001e20 90 0c 00 00 |....| 0x00000c90 Offset to NK record 3216
00001e24 33 31 30 30 |3100| 0x30303133 Hash value 808464691
00001e28 78 0d 00 00 |x...| 0x00000d78 Offset to NK record 3448
00001e2c 33 32 30 30 |3200| 0x30303233 Hash value 808464947
00001e30 70 ff ff ff |p...| 0x-0000090 HBIN Cell size 144 next @ 0x00001ec0
00001e34 73 6b |sk| cell/record type [115, 107] magic number
00001e36 00 00 |..| 0x0000 Unknown 0
00001e38 78 00 00 00 |x...| 0x00000078 Offset to previous SK record 120
00001e3c c0 0e 00 00 |....| 0x00000ec0 Offset to next SK record 3776
00001e40 01 00 00 00 |....| 0x00000001 Reference count 1
00001e44 74 00 00 00 |t...| 0x0074 Size of security descriptor 116
00001e48 01 00 04 88 48 00 00 00 58 00 00 00 00 00 00 00 |....H...X.......| Security descriptor of size 116 +4
00001e58 14 00 00 00 02 00 34 00 02 00 00 00 00 00 18 00 |......4.........|
00001e68 3f 00 0f 00 01 02 00 00 00 00 00 05 20 00 00 00 |?........... ...|
00001e78 20 02 00 00 00 00 14 00 3f 00 0f 00 01 01 00 00 | .......?.......|
00001e88 00 00 00 05 12 00 00 00 01 02 00 00 00 00 00 05 |................|
00001e98 20 00 00 00 20 02 00 00 01 05 00 00 00 00 00 05 | ... ...........|
00001ea8 15 00 00 00 7d 4b 88 ba a1 bd 68 67 50 31 ca f0 |....}K....hgP1..|
00001eb8 01 02 00 00 00 00 00 00 |........|
00001ec0 70 ff ff ff |p...| 0x-0000090 HBIN Cell size 144 next @ 0x00001f50
00001ec4 73 6b |sk| cell/record type [115, 107] magic number
00001ec6 00 00 |..| 0x0000 Unknown 0
00001ec8 30 0e 00 00 |0...| 0x00000e30 Offset to previous SK record 3632
00001ecc 78 00 00 00 |x...| 0x00000078 Offset to next SK record 120
00001ed0 13 00 00 00 |....| 0x00000013 Reference count 19
00001ed4 74 00 00 00 |t...| 0x0074 Size of security descriptor 116
00001ed8 01 00 04 88 48 00 00 00 58 00 00 00 00 00 00 00 |....H...X.......| Security descriptor of size 116 +4
00001ee8 14 00 00 00 02 00 34 00 02 00 00 00 00 00 18 00 |......4.........|
00001ef8 19 00 06 00 01 02 00 00 00 00 00 05 20 00 00 00 |............ ...|
00001f08 20 02 00 00 00 00 14 00 3f 00 0f 00 01 01 00 00 | .......?.......|
00001f18 00 00 00 05 12 00 00 00 01 02 00 00 00 00 00 05 |................|
00001f28 20 00 00 00 20 02 00 00 01 05 00 00 00 00 00 05 | ... ...........|
00001f38 15 00 00 00 7d 4b 88 ba a1 bd 68 67 50 31 ca f0 |....}K....hgP1..|
00001f48 01 02 00 00 00 00 00 00 |........|
00001f50 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0x000000b0 FREE HBIN Cell size 176 next @ 0x00002000
00001f60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00002000