DOS 16 FOR PE 文件列表 放入 %Systemroot% 文件夹中
│ system.ini
│ win.ini
│
├─fonts
│ app936.fon
│ cga40woa.fon
│ cga80woa.fon
│ ega40woa.fon
│ ega80woa.fon
│
├─system
│ AVICAP.DLL
│ AVIFILE.DLL
│ COMMDLG.DLL
│ KEYBOARD.DRV
│ LZEXPAND.DLL
│ MCIAVI.DRV
│ MCISEQ.DRV
│ MCIWAVE.DRV
│ MMSYSTEM.DLL
│ MMTASK.TSK
│ MOUSE.DRV
│ MSVIDEO.DLL
│ OLECLI.DLL
│ OLESVR.DLL
│ SHELL.DLL
│ SOUND.DRV
│ stdole.tlb
│ SYSTEM.DRV
│ TAPI.DLL
│ TIMER.DRV
│ VER.DLL
│ VGA.DRV
│ WFWNET.DRV
│
└─system32
ansi.sys
AUTOEXEC.NT
avicap.dll
avifile.dll
comm.drv
command.com
commdlg.dll
compobj.dll
CONFIG.NT
country.sys
crtdll.dll
ctl3dv2.dll
ddeml.dll
dosx.exe
ega.cpi
gdi.exe
himem.sys
keyboard.drv
keyboard.sys
krnl386.exe
lanman.drv
lzexpand.dll
mciavi.drv
mciseq.drv
mciwave.drv
mmsystem.dll
mouse.drv
msacm.dll
mscdexnt.exe
msvideo.dll
netapi.dll
ntdos.sys
ntdos404.sys
ntdos411.sys
ntdos412.sys
ntdos804.sys
ntio.sys
ntio404.sys
ntio411.sys
ntio412.sys
ntio804.sys
ntvdm.exe
ntvdmd.dll
ole2.dll
ole2disp.dll
ole2nls.dll
olecli.dll
olesvr.dll
pmspl.dll
progman.exe
redir.exe
shell.dll
sound.drv
storage.dll
system.drv
timer.drv
toolhelp.dll
typelib.dll
user.exe
vcdex.dll
ver.dll
vga.drv
wfwnet.drv
win87em.dll
winoldap.mod
winsock.dll
winspool.exe
wow32.dll
wowdeb.exe
wowexec.exe
WOWFAX.DLL
WOWFAXUI.DLL
---------------------------
注册表内容
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment]
"PathExt"=".COM;.EXE;.BAT;.CMD"
"Path"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
00,25,00,3b,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,3b,00,25,\
00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,74,00,25,00,5c,00,\
73,00,79,00,73,00,74,00,65,00,6d,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\VirtualDeviceDrivers]
"VDD"=hex(7):00,00
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WOW]
"cmdline"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6e,\
00,74,00,76,00,64,00,6d,00,2e,00,65,00,78,00,65,00,20,00,2d,00,6f,00,00,00
"DefaultSeparateVDM"="no"
"KnownDLLs"="comm.drv commdlg.dll ctl3dv2.dll ddeml.dll keyboard.drv lanman.drv mmsystem.dll mouse.drv netapi.dll olecli.dll olesvr.dll pmspl.dll shell.dll sound.drv system.drv toolhelp.dll vga.drv wfwnet.drv win87em.dll winoldap.mod winsock.dll winspool.exe wowdeb.exe timer.drv rasapi16.dll compobj.dll storage.dll ole2.dll ole2disp.dll ole2nls.dll typelib.dll msvideo.dll avifile.dll msacm.dll mciavi.drv mciseq.drv mciwave.drv progman.exe avicap.dll mapi.dll"
"LPT_timeout"="15"
"SharedWowTimeout"=dword:00000e10
"size"="0"
"wowcmdline"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
6e,00,74,00,76,00,64,00,6d,00,2e,00,65,00,78,00,65,00,20,00,2d,00,61,00,20,\
00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,00,\
5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6b,00,72,00,6e,\
00,6c,00,33,00,38,00,36,00,00,00
"wowsize"="16" |