| win8下EWF注册表简化了,下面这些即可! 
 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ewf]
 "DisplayName"=""
 "ErrorControl"=dword:00000003
 "ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
 72,00,69,00,76,00,65,00,72,00,73,00,5c,00,65,00,77,00,66,00,2e,00,73,00,79,\
 00,73,00,00,00
 "Start"=dword:00000000
 "Type"=dword:00000001
 
 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{71a27cdd-812a-11d0-bec7-08002be2092f}]
 
 "LowerFilters"=hex(7):65,00,77,00,66,00,00,00,00,00
 |