ofs | hex dump | ascii |
---|
0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 30 39 | !<arch>./...............15161609 |
0020 | 38 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 32 39 34 20 20 20 20 20 | 87..0.....0.....0.......294..... |
0040 | 20 20 60 0a 00 00 00 04 00 00 01 6a 00 00 04 54 00 00 07 ba 00 00 07 ba 5f 5f 43 5f 5f 55 73 65 | ..`........j...T........__C__Use |
0060 | 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 | rs_Peter_Code_winapi_rs_i686_lib |
0080 | 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e | _libwinapi_onecoreuap_api_ms_win |
00a0 | 5f 73 68 63 6f 72 65 5f 72 65 67 69 73 74 72 79 5f 6c 31 5f 31 5f 31 5f 61 5f 69 6e 61 6d 65 00 | _shcore_registry_l1_1_1_a_iname. |
00c0 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
00e0 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 | i_rs_i686_lib_libwinapi_onecoreu |
0100 | 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 68 63 6f 72 65 5f 72 65 67 69 73 74 72 79 5f 6c 31 | ap_api_ms_win_shcore_registry_l1 |
0120 | 5f 31 5f 31 5f 61 00 5f 53 48 52 65 67 47 65 74 56 61 6c 75 65 46 72 6f 6d 48 4b 43 55 48 4b 4c | _1_1_a._SHRegGetValueFromHKCUHKL |
0140 | 4d 40 32 34 00 5f 5f 69 6d 70 5f 5f 53 48 52 65 67 47 65 74 56 61 6c 75 65 46 72 6f 6d 48 4b 43 | M@24.__imp__SHRegGetValueFromHKC |
0160 | 55 48 4b 4c 4d 40 32 34 00 00 64 63 7a 63 62 74 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 | UHKLM@24..dczcbt.o/.......151616 |
0180 | 30 39 38 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 36 20 20 20 | 0987..0.....0.....100666..686... |
01a0 | 20 20 20 20 60 0a 4c 01 06 00 00 00 00 00 34 01 00 00 0f 00 00 00 00 00 05 01 2e 74 65 78 74 00 | ....`.L.......4............text. |
01c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 | ................................ |
01e0 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
0200 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
0220 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ................0..idata$4...... |
0240 | 00 00 04 00 00 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 | ......................@.0..idata |
0260 | 24 35 00 00 00 00 00 00 00 00 04 00 00 00 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | $5............................@. |
0280 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 28 00 00 00 0c 01 00 00 00 00 00 00 00 00 | 0..idata$7........(............. |
02a0 | 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 61 70 69 2d 6d 73 2d 77 69 6e 2d 73 68 63 | ......@.0.........api-ms-win-shc |
02c0 | 6f 72 65 2d 72 65 67 69 73 74 72 79 2d 6c 31 2d 31 2d 31 2e 64 6c 6c 00 00 00 2e 66 69 6c 65 00 | ore-registry-l1-1-1.dll....file. |
02e0 | 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 | ..........g.fake...............t |
0300 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ext............................. |
0320 | 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 | ...data......................... |
0340 | 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 | .......bss...................... |
0360 | 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 04 00 00 00 03 01 04 00 00 00 | ...........idata$4.............. |
0380 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 01 | ...............idata$5.......... |
03a0 | 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 37 00 00 00 00 06 00 | ...................idata$7...... |
03c0 | 00 00 03 01 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 | ....&........................... |
03e0 | 00 00 06 00 00 00 02 00 6c 00 00 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 | ........l...__C__Users_Peter_Cod |
0400 | 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f | e_winapi_rs_i686_lib_libwinapi_o |
0420 | 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 68 63 6f 72 65 5f 72 65 67 69 | necoreuap_api_ms_win_shcore_regi |
0440 | 73 74 72 79 5f 6c 31 5f 31 5f 31 5f 61 5f 69 6e 61 6d 65 00 64 63 7a 63 62 68 2e 6f 2f 20 20 20 | stry_l1_1_1_a_iname.dczcbh.o/... |
0460 | 20 20 20 20 31 35 31 36 31 36 30 39 38 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | ....1516160987..0.....0.....1006 |
0480 | 36 36 20 20 38 30 39 20 20 20 20 20 20 20 60 0a 4c 01 06 00 00 00 00 00 36 01 00 00 10 00 00 00 | 66..809.......`.L.......6....... |
04a0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .....text....................... |
04c0 | 00 00 00 00 00 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
04e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
0500 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
0520 | 74 61 24 32 00 00 00 00 00 00 00 00 14 00 00 00 04 01 00 00 18 01 00 00 00 00 00 00 03 00 00 00 | ta$2............................ |
0540 | 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..idata$5.................... |
0560 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..idata$4............ |
0580 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 | ................@.0............. |
05a0 | 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 07 00 0c 00 00 00 0f 00 00 00 07 00 10 00 00 00 | ................................ |
05c0 | 0d 00 00 00 07 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 | .......file...........g.fake.... |
05e0 | 00 00 00 00 00 00 00 00 00 00 68 6e 61 6d 65 00 00 00 00 00 00 00 06 00 00 00 03 00 66 74 68 75 | ..........hname.............fthu |
0600 | 6e 6b 00 00 00 00 00 00 05 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 | nk.............text............. |
0620 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | ...................data......... |
0640 | 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 | .......................bss...... |
0660 | 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 | ...........................idata |
0680 | 24 32 00 00 00 00 04 00 00 00 03 01 14 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 | $2.............................i |
06a0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$4...........idata$5........ |
06c0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 02 00 00 00 00 00 6b 00 00 00 00 00 00 00 | ........................k....... |
06e0 | 00 00 00 00 02 00 d3 00 00 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | ..........__head_C__Users_Peter_ |
0700 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
0720 | 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 68 63 6f 72 65 5f 72 | i_onecoreuap_api_ms_win_shcore_r |
0740 | 65 67 69 73 74 72 79 5f 6c 31 5f 31 5f 31 5f 61 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | egistry_l1_1_1_a.__C__Users_Pete |
0760 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
0780 | 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 68 63 6f 72 65 | api_onecoreuap_api_ms_win_shcore |
07a0 | 5f 72 65 67 69 73 74 72 79 5f 6c 31 5f 31 5f 31 5f 61 5f 69 6e 61 6d 65 00 0a 64 63 7a 63 62 73 | _registry_l1_1_1_a_iname..dczcbs |
07c0 | 30 30 30 30 30 2e 6f 2f 20 20 31 35 31 36 31 36 30 39 38 37 20 20 30 20 20 20 20 20 30 20 20 20 | 00000.o/..1516160987..0.....0... |
07e0 | 20 20 31 30 30 36 36 36 20 20 37 34 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 | ..100666..741.......`.L......... |
0800 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
0820 | 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..\.............0`.data......... |
0840 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
0860 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
0880 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 | 0..idata$7............4...f..... |
08a0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
08c0 | 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..p.............0..idata$4...... |
08e0 | 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...z.............0..idata |
0900 | 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
0920 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 48 52 65 67 47 65 74 | ...%....................SHRegGet |
0940 | 56 61 6c 75 65 46 72 6f 6d 48 4b 43 55 48 4b 4c 4d 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | ValueFromHKCUHKLM............... |
0960 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
0980 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
09a0 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
09c0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
09e0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
0a00 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | .............."................. |
0a20 | 46 00 00 00 00 00 00 00 00 00 00 00 02 00 ad 00 00 00 5f 53 48 52 65 67 47 65 74 56 61 6c 75 65 | F................._SHRegGetValue |
0a40 | 46 72 6f 6d 48 4b 43 55 48 4b 4c 4d 40 32 34 00 5f 5f 69 6d 70 5f 5f 53 48 52 65 67 47 65 74 56 | FromHKCUHKLM@24.__imp__SHRegGetV |
0a60 | 61 6c 75 65 46 72 6f 6d 48 4b 43 55 48 4b 4c 4d 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 | alueFromHKCUHKLM@24.__head_C__Us |
0a80 | 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 | ers_Peter_Code_winapi_rs_i686_li |
0aa0 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 | b_libwinapi_onecoreuap_api_ms_wi |
0ac0 | 6e 5f 73 68 63 6f 72 65 5f 72 65 67 69 73 74 72 79 5f 6c 31 5f 31 5f 31 5f 61 00 0a | n_shcore_registry_l1_1_1_a.. |