{"id":2200,"date":"2024-03-30T03:50:58","date_gmt":"2024-03-29T18:50:58","guid":{"rendered":"https:\/\/h4ck.kr\/?p=2200"},"modified":"2024-05-20T13:21:17","modified_gmt":"2024-05-20T04:21:17","slug":"windowskernel","status":"publish","type":"post","link":"https:\/\/h4ck.kr\/?p=2200","title":{"rendered":"WindowsKernel"},"content":{"rendered":"\n

ReadMe.txt<\/h2>\n\n\n\n

Reversing.Kr CrackMe – WindowsKernel<\/p>\n\n\n\n

Please authenticate to lowercase.<\/p>\n\n\n\n

Exeinfo PE<\/h2>\n\n\n\n

WindowKernel.exe<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

WinKer.sys<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Analysis<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n

WindowKernel.exe – sub_401110<\/strong><\/p>\n\n\n\n

\n
\n
HWND __thiscall sub_401110(HWND hDlg)\n{\n  HWND result; \/\/ eax\n  HWND v3; \/\/ eax\n  HWND v4; \/\/ eax\n  HWND DlgItem; \/\/ eax\n  WCHAR String[256]; \/\/ [esp+8h] [ebp-204h] BYREF\n\n  GetDlgItemTextW(hDlg, 1003, String, 512);\n  if ( lstrcmpW(String, L\"Enable\") )\n  {\n    result = (HWND)lstrcmpW(String, L\"Check\");\n    if ( !result )\n    {\n      if ( ((int (__cdecl *)(int))sub_401280)(0x2000) == 1 )\n        MessageBoxW(hDlg, L\"Correct!\", L\"Reversing.Kr\", 0x40u);\n      else\n        MessageBoxW(hDlg, L\"Wrong\", L\"Reversing.Kr\", 0x10u);\n      SetDlgItemTextW(hDlg, 1002, &word_4021F0);\n      DlgItem = GetDlgItem(hDlg, 1002);\n      EnableWindow(DlgItem, 0);\n      return (HWND)SetDlgItemTextW(hDlg, 1003, L\"Enable\");\n    }\n  }\n  else if ( ((int (__cdecl *)(int))sub_401280)(0x1000) )\n  {\n    v3 = GetDlgItem(hDlg, 1002);\n    EnableWindow(v3, 1);\n    SetDlgItemTextW(hDlg, 1003, L\"Check\");\n    SetDlgItemTextW(hDlg, 1002, &word_4021F0);\n    v4 = GetDlgItem(hDlg, 1002);\n    return SetFocus(v4);\n  }\n  else\n  {\n    return (HWND)MessageBoxW(hDlg, L\"Device Error\", L\"Reversing.Kr\", 0x10u);\n  }\n  return result;\n}<\/pre>\n<\/div>\n<\/div>\n\n\n\n
sub_401280\uc5d0\uc11c \ubc18\ud658\ub41c \ub9ac\ud134\uac12\uc774 1\uc774\uba74 Correct \ubb38\uad6c\ub97c \ub744\uc6b0\ub3c4\ub85d \ub418\uc5b4\uc788\ub2e4.<\/p>\n\n\n\n
WindowKernel.exe – sub_401280<\/strong><\/p>\n\n\n\n
\n
\n
int __usercall sub_401280@<eax>(HWND a1@<edi>, DWORD dwIoControlCode)\n{\n  HANDLE FileW; \/\/ esi\n  DWORD BytesReturned; \/\/ [esp+4h] [ebp-8h] BYREF\n  int OutBuffer; \/\/ [esp+8h] [ebp-4h] BYREF\n\n  FileW = CreateFileW(L\"\\\\\\\\.\\\\RevKr\", 0xC0000000, 0, 0, 3u, 0, 0);\n  if ( FileW == (HANDLE)-1 )\n  {\n    MessageBoxW(a1, L\"[Error] CreateFile\", L\"Reversing.Kr\", 0x10u);\n    return 0;\n  }\n  else if ( DeviceIoControl(FileW, dwIoControlCode, 0, 0, &OutBuffer, 4u, &BytesReturned, 0) )\n  {\n    CloseHandle(FileW);\n    return OutBuffer;\n  }\n  else\n  {\n    MessageBoxW(a1, L\"[Error] DeviceIoControl\", L\"Reversing.Kr\", 0x10u);\n    return 0;\n  }\n}<\/pre>\n<\/div>\n<\/div>\n\n\n\n
https:\/\/learn.microsoft.com\/ko-kr\/windows\/win32\/api\/ioapiset\/nf-ioapiset-deviceiocontrol<\/a><\/p>\n\n\n\n
“DeviceIoControl: \uc9c0\uc815\ub41c \ub514\ubc14\uc774\uc2a4 \ub4dc\ub77c\uc774\ubc84\uc5d0 \uc9c1\uc811 \uc81c\uc5b4 \ucf54\ub4dc\ub97c \ubcf4\ub0b4 \ud574\ub2f9 \ub514\ubc14\uc774\uc2a4\uac00 \ud574\ub2f9 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub3c4\ub85d \ud569\ub2c8\ub2e4.”<\/p>\n\n\n\n
\uc5ec\uae30\uae4c\uc9c0\ub9cc \ubd10\uc654\uc744\ub54c, WinKer.sys \ub4dc\ub77c\uc774\ubc84 \ud30c\uc77c\uc744 \ub85c\ub4dc\uc2dc\ucf1c\uc11c \uc81c\uc5b4 \ucf54\ub4dc\ub97c \ubcf4\ub0b4\ub294 \uac83\uc73c\ub85c \ud655\uc778\ub41c\ub2e4.<\/p>\n\n\n\n
OutBuffer\ub97c 1\ub85c \ub9cc\ub4e4\uc5b4\uc57c Correct \ubb38\uad6c\ub97c \ub744\uc6b8 \uc218 \uc788\uc744 \uac83\uc774\ub2e4.<\/p>\n\n\n\n
\uc708\ub3c4\uc6b0 \ucee4\ub110\ubaa8\ub4dc \ub514\ubc84\uae45<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Vmware Workstation 17.5.1 Pro, \uc708\ub3c4\uc6b07 32\ube44\ud2b8 \uae30\uc900\uc73c\ub85c 
\uc704\uc640 \uac19\uc774 \uc2dc\ub9ac\uc5bc \ud3ec\ud2b8\ub97c \uad6c\uc131\ud558\uace0, <\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
WinDbg\uc5d0\uc11c\ub3c4 \ud3ec\ud2b8\ub97c \uc124\uc815\ud574\uc900\ub2e4\uc74c,<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\uac00\uc0c1\uba38\uc2e0\uc5d0\uc11c \uc708\ub3c4\uc6b0\ub97c \ubd80\ud305\ud560\ub54c F8\ud0a4\ub97c \ubb34\ud55c\uc5f0\ud0c0\ud574\uc11c “\ub514\ubc84\uae45 \ubaa8\ub4dc”\ub85c \ubd80\ud305\ud55c\ub2e4.<\/p>\n\n\n\n
\uadf8\ub9ac\uace0 \ub2e4\uc2dc WinDbg\uc758 Start debugging \ucc3d\uc5d0\uc11c OK \ubc84\ud2bc\uc744 \ub20c\ub7ec\uc8fc\uba74, \uc704 \uc0ac\uc9c4\ucc98\ub7fc \ub514\ubc84\uae45 \ud658\uacbd \uad6c\uc131\uc774 \uc644\uc131\ub41c\ub2e4.<\/p>\n\n\n\n
\uc774 \uc911 \uba87\uac00\uc9c0 \uba85\ub839\uc5b4\uc5d0 \ub300\ud574 \uc0b4\ud3b4\ubcf4\uc790\uba74,<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
sxe ld WinKer.sys<\/strong>
WinKer.sys\uac00 \ub85c\ub4dc\ub420\ub54c \ub514\ubc84\uac70\uac00 \uba48\ucd98\ub2e4.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
u WinKer+0x1266<\/strong><\/p>\n\n\n\n
\ud574\ub2f9 \uba54\ubaa8\ub9ac \uc8fc\uc18c \uc9c0\uc810\uc758 \uc5b4\uc148\ube14\ub9ac \ucf54\ub4dc\ub97c \ubcf4\uc5ec\uc900\ub2e4.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
bp WinKer+0x12B8<\/strong><\/p>\n\n\n\n
\ud574\ub2f9 \uba54\ubaa8\ub9ac \uc8fc\uc18c\uc5d0 \ube0c\ub808\uc774\ud06c\ud3ec\uc778\ud2b8\ub97c \uc124\uce58\ud55c\ub2e4.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
r <\ub808\uc9c0\uc2a4\ud130><\/strong>, r <\ub808\uc9c0\uc2a4\ud130>=<\uac12><\/strong><\/p>\n\n\n\n
\ud2b9\uc815 \ub808\uc9c0\uc2a4\ud130\uac12\uc744 \uc77d\uac70\ub098 \uc4f8 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
WinKer.sys \ub4dc\ub77c\uc774\ubc84\ub97c \ub2e4\uc2dc \ubd84\uc11d\ud574\ubcf4\uba74,<\/p>\n\n\n\n
WinKer.sys – sub_11288<\/strong><\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
dwIoControlCode\uac00 0x2000\uc77c\ub54c \ucc98\ub9ac\ud558\ub294 \ucf54\ub4dc\ub294 sub_11288\uc758 16\uc904\uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
 
\"\"<\/figure> <\/p>\n\n\n\n
dword_13024\uc758 \uac12\uc744 edx\ub85c \uac00\uc838\uc624\uace0 \ub09c\ub4a4\uc758 \ube0c\ub808\uc774\ud06c\ud3ec\uc778\ud2b8\ub97c \uc124\uce58\ud574\uc11c
edx\uac12\uc744 1\ub85c \uc784\uc758\ub85c \ubc14\uafb8\uba74,<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Correct \ubb38\uad6c\uac00 \ub728\ub294 \uac83\uc744 \uc54c \uc218 \uc788\uc5c8\ub2e4.<\/p>\n\n\n\n
\ub530\ub77c\uc11c, dword_13024\uac00 1\ub85c \uc9c0\uc815\ub418\uac8c\ub054 \ub9cc\ub4e4\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c\ub418\ub294\uc9c0 \ud655\uc778\ud558\uae30 \uc704\ud574 \uc5ed\ucc38\uc870\ud574\ubcf4\uc558\ub2e4.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
sub_110D0+3A\uc5d0\uc11c 1\ub85c \uc9c0\uc815\ub418\ub294 \uac83\uc744 \ud655\uc778\ud588\ub2e4.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
sub_110D0 \ud568\uc218\ub294<\/p>\n\n\n\n
DriverEntry -> sub_11266 -> sub_111DC -> sub_11156\uc744 \uac70\uccd0
\ucd5c\uc885 \ud638\ucd9c\ub41c\ub2e4.<\/p>\n\n\n\n
WinKer.sys<\/strong><\/strong> – sub_11266 <\/strong><\/p>\n\n\n\n
\n
\n
void __stdcall sub_11266(struct _KDPC *Dpc, PVOID DeferredContext, PVOID SystemArgument1, PVOID SystemArgument2)\n{\n  char v4; \/\/ al\n\n  v4 = READ_PORT_UCHAR((PUCHAR)0x60);\n  sub_111DC(v4);\n}<\/pre>\n<\/div>\n<\/div>\n\n\n\n
“READ_PORT_UCHAR<\/strong>\u00a0\ub8e8\ud2f4\uc740 \uc9c0\uc815\ub41c \ud3ec\ud2b8 \uc8fc\uc18c\uc5d0\uc11c \ubc14\uc774\ud2b8\ub97c \uc77d\uc2b5\ub2c8\ub2e4.”<\/p>\n\n\n\n
https:\/\/learn.microsoft.com\/ko-kr\/windows-hardware\/drivers\/ddi\/wdm\/nf-wdm-read_port_uchar<\/a><\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
https:\/\/wiki.osdev.org\/%228042%22_PS\/2_Controller<\/a><\/p>\n\n\n\n
https:\/\/ggangjo.tistory.com\/32<\/a><\/p>\n\n\n\n
0x60 \ubc88\uc9c0\ub97c \uc77d\uc73c\uba74 \ud0a4\ubcf4\ub4dc\uc5d0 \uc804\uc1a1\ud55c \ub370\uc774\ud130\ub97c \uc77d\uc744 \uc218 \uc788\ub2e4\uace0 \ud55c\ub2e4.<\/p>\n\n\n\n
\ub530\ub77c\uc11c sub_11266 <\/strong>\ud568\uc218\ub294 \ud0a4\ubcf4\ub4dc\uc5d0 \ub300\ud55c \ub370\uc774\ud130\ub97c \uc77d\uc5b4\uc640\uc11c sub_111DC \ud568\uc218\uc5d0\uc11c \ucc98\ub9ac\ud55c\ub2e4\uace0 \ubcf4\uba74 \ub41c\ub2e4.<\/p>\n\n\n\n
WinKer.sys – sub_111DC, sub_11156, sub_110D0<\/strong><\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
https:\/\/download.microsoft.com\/download\/1\/6\/1\/161ba512-40e2-4cc9-843a-923143f3456c\/scancode.doc<\/a><\/p>\n\n\n\n
\uc2a4\uce94 \ucf54\ub4dc \ud14c\uc774\ube14\uc744 \ud655\uc778\ud558\uba74 \uc5b4\ub5a4 \ud0a4\ub97c \uc785\ub825\ud574\uc57c dword_13024\uac00 1\ub85c \uc9c0\uc815\ub418\uac8c\ub054 \ub9cc\ub4e4 \uc218 \uc788\ub294\uc9c0 \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
\uc5ec\uae30\uc11c \uc8fc\uc758\ud560 \uc810\uc740 
sub_11156\uc5d0\uc11c\ub294 0x12\uc744 \ud55c\ubc88 XOR,
sub_110D0\uc5d0\uc11c\ub294 0x12\uc744 \ud55c\ubc88 XOR, 0x5\ub97c \ud55c\ubc88 \ub354 XOR\uc744 \ud574\uc57c \uc2a4\uce94 \ucf54\ub4dc\ub97c \uad6c\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
Scan Code Table<\/h3>\n\n\n\n
The following table lists the full set of Scan Codes as presently recognized by the Microsoft operating systems. The US Key assignments are for reference to a type 101\/102 Enhanced keyboard as supported by the Type 4 Keyboard layout. If there is no entry in the 101\/102 Enhanced keyboard column, this scan code is currently not recognized by the operating system. The Key Location field has been added to aid in the placement of keys as illustrated in the<\/p>\n\n\n\n
Recommended Physical Locations of the Windows Keys on page <\/a>10.<\/p>\n\n\n\n
key location<\/strong><\/td>101\/102 Enhanced Keyboard<\/strong><\/td>scan 1 make<\/strong><\/td>scan 1 break<\/strong><\/td>scan 2 make<\/strong><\/td>scan 2 brake<\/strong><\/td><\/tr><\/thead>
 <\/td>DO NOT USE<\/td>00<\/td>80<\/td>00<\/td>F0 00<\/td><\/tr>
 <\/td>DO NOT USE<\/td>E0_00<\/td>E0_80<\/td>E0_00<\/td>E0_F0 00<\/td><\/tr>
1<\/td>~   `<\/td>29<\/td>A9<\/td>0E<\/td>F0 0E<\/td><\/tr>
 <\/td> <\/td>E0_29<\/td>E0_A9<\/td>E0_0E<\/td>E0_F0 0E<\/td><\/tr>
2<\/td>!  1<\/td>02<\/td>82<\/td>16<\/td>F0 16<\/td><\/tr>
 <\/td> <\/td>E0_02<\/td>E0_82<\/td>E0_16<\/td>E0_F0 16<\/td><\/tr>
3<\/td>@  2<\/td>03<\/td>83<\/td>1E<\/td>F0 1E<\/td><\/tr>
 <\/td> <\/td>E0_03<\/td>E0_83<\/td>E0_1E<\/td>E0_F0 1E<\/td><\/tr>
4<\/td>#  3<\/td>04<\/td>84<\/td>26<\/td>F0 26<\/td><\/tr>
 <\/td> <\/td>E0_04<\/td>E0_84<\/td>E0_26<\/td>E0_F0 26<\/td><\/tr>
5<\/td>$  4<\/td>05<\/td>85<\/td>25<\/td>F0 25<\/td><\/tr>
 <\/td> <\/td>E0_05<\/td>E0_85<\/td>E0_25<\/td>E0_F0 25<\/td><\/tr>
6<\/td>%  5<\/td>06<\/td>86<\/td>2E<\/td>F0 2E<\/td><\/tr>
 <\/td> <\/td>E0_06<\/td>E0_86<\/td>E0_2E<\/td>E0_F0 2E<\/td><\/tr>
7<\/td>^  6<\/td>07<\/td>87<\/td>36<\/td>F0 36<\/td><\/tr>
 <\/td> <\/td>E0_07<\/td>E0_87<\/td>E0_36<\/td>E0_F0 36<\/td><\/tr>
8<\/td>&  7<\/td>08<\/td>88<\/td>3D<\/td>F0 3D<\/td><\/tr>
 <\/td> <\/td>E0_08<\/td>E0_88<\/td>E0_3D<\/td>E0_F0 3D<\/td><\/tr>
9<\/td>*  8<\/td>09<\/td>89<\/td>3E<\/td>F0 3E<\/td><\/tr>
 <\/td> <\/td>E0_09<\/td>E0_89<\/td>E0_3E<\/td>E0_F0 3E<\/td><\/tr>
10<\/td>(  9<\/td>0A<\/td>8A<\/td>46<\/td>F0 46<\/td><\/tr>
 <\/td> <\/td>E0_0A<\/td>E0_8A<\/td>E0_46<\/td>E0_F0 46<\/td><\/tr>
11<\/td>)  0<\/td>0B<\/td>8B<\/td>45<\/td>F0 45<\/td><\/tr>
 <\/td> <\/td>E0_0B<\/td>E0_8B<\/td>E0_45<\/td>E0_F0 45<\/td><\/tr>
12<\/td>_   –<\/td>0C<\/td>8C<\/td>4E<\/td>F0 4E<\/td><\/tr>
 <\/td> <\/td>E0_0C<\/td>E0_8C<\/td>E0_4E<\/td>E0_F0 4E<\/td><\/tr>
13<\/td>+   =<\/td>0D<\/td>8D<\/td>55<\/td>F0 55<\/td><\/tr>
 <\/td> <\/td>E0_0D<\/td>E0_8D<\/td>E0_55<\/td>E0_F0 55<\/td><\/tr>
15<\/td>Backspace<\/td>0E<\/td>8E<\/td>66<\/td>F0 66<\/td><\/tr>
 <\/td> <\/td>E0_0E<\/td>E0_8E<\/td>E0_66<\/td>E0_F0 66<\/td><\/tr>
16<\/td>Tab<\/td>0F<\/td>8F<\/td>0D<\/td>F0 0D<\/td><\/tr>
 <\/td> <\/td>E0_0F<\/td>E0_8F<\/td>E0_0D<\/td>E0_F0 0D<\/td><\/tr>
17<\/td>Q<\/td>10<\/td>90<\/td>15<\/td>F0 15<\/td><\/tr>
 <\/td> <\/td>E0_10<\/td>E0_90<\/td>E0_15<\/td>E0_F0 15<\/td><\/tr>
18<\/td>W<\/td>11<\/td>91<\/td>1D<\/td>F0 1D<\/td><\/tr>
 <\/td> <\/td>E0_11<\/td>E0_91<\/td>E0_1D<\/td>E0_F0 1D<\/td><\/tr>
19<\/td>E<\/strong><\/td>12<\/td>92<\/strong><\/td>24<\/td>F0 24<\/td><\/tr>
 <\/td> <\/td>E0_12<\/td>E0_92<\/td>E0_24<\/td>E0_F0 24<\/td><\/tr>
20<\/td>R<\/td>13<\/td>93<\/td>2D<\/td>F0 2D<\/td><\/tr>
 <\/td> <\/td>E0_13<\/td>E0_93<\/td>E0_2D<\/td>E0_F0 2D<\/td><\/tr>
21<\/td>T<\/strong><\/td>14<\/td>94<\/strong><\/td>2C<\/td>F0 2C<\/td><\/tr>
 <\/td> <\/td>E0_14<\/td>E0_94<\/td>E0_2C<\/td>E0_F0 2C<\/td><\/tr>
22<\/td>Y<\/strong><\/td>15<\/td>95<\/strong><\/td>35<\/td>F0 35<\/td><\/tr>
 <\/td> <\/td>E0_15<\/td>E0_95<\/td>E0_35<\/td>E0_F0 35<\/td><\/tr>
23<\/td>U<\/td>16<\/td>96<\/td>3C<\/td>F0 3C<\/td><\/tr>
 <\/td> <\/td>E0_16<\/td>E0_96<\/td>E0_3C<\/td>E0_F0 3C<\/td><\/tr>
24<\/td>I<\/strong><\/td>17<\/td>97<\/strong><\/td>43<\/td>F0 43<\/td><\/tr>
 <\/td> <\/td>E0_17<\/td>E0_97<\/td>E0_43<\/td>E0_F0 43<\/td><\/tr>
25<\/td>O<\/strong><\/td>18<\/td>98<\/strong><\/td>44<\/td>F0 44<\/td><\/tr>
 <\/td> <\/td>E0_18<\/td>E0_98<\/td>E0_44<\/td>E0_F0 44<\/td><\/tr>
26<\/td>P<\/td>19<\/td>99<\/td>4D<\/td>F0 4D<\/td><\/tr>
 <\/td> <\/td>E0_19<\/td>E0_99<\/td>E0_4D<\/td>E0_F0 4D<\/td><\/tr>
27<\/td>{  [<\/td>1A<\/td>9A<\/td>54<\/td>F0 54<\/td><\/tr>
 <\/td> <\/td>E0_1A<\/td>E0_9A<\/td>E0_54<\/td>E0_F0 54<\/td><\/tr>
28<\/td>}  ]<\/td>1B<\/td>9B<\/td>5B<\/td>F0 5B<\/td><\/tr>
 <\/td> <\/td>E0_1B<\/td>E0_9B<\/td>E0_5B<\/td>E0_F0 5B<\/td><\/tr>
29*<\/td>|  \\<\/td>2B<\/td>AB<\/td>5D<\/td>F0 5D<\/td><\/tr>
 <\/td> <\/td>E0_2B<\/td>E0_AB<\/td>E0_5D<\/td>E0_F0 5D<\/td><\/tr>
30<\/td>Caps Lock<\/td>3A<\/td>BA<\/td>58<\/td>F0 58<\/td><\/tr>
 <\/td> <\/td>E0_3A<\/td>E0_BA<\/td>E0_58<\/td>E0_F0 58<\/td><\/tr>
31<\/td>A<\/td>1E<\/td>9E<\/td>1C<\/td>F0 1C<\/td><\/tr>
 <\/td> <\/td>E0_1E<\/td>E0_9E<\/td>E0_1C<\/td>E0_F0 1C<\/td><\/tr>
32<\/td>S<\/td>1F<\/td>9F<\/td>1B<\/td>F0 1B<\/td><\/tr>
 <\/td> <\/td>E0_1F<\/td>E0_9F<\/td>E0_1B<\/td>E0_F0 1B<\/td><\/tr>
33<\/td>D<\/strong><\/td>20<\/td>A0<\/strong><\/td>23<\/td>F0 23<\/td><\/tr>
 <\/td> <\/td>E0_20<\/td>E0_A0<\/td>E0_23<\/td>E0_F0 23<\/td><\/tr>
34<\/td>F<\/td>21<\/td>A1<\/td>2B<\/td>F0 2B<\/td><\/tr>
 <\/td> <\/td>E0_21<\/td>E0_A1<\/td>E0_2B<\/td>E0_F0 2B<\/td><\/tr>
35<\/td>G<\/td>22<\/td>A2<\/td>34<\/td>F0 34<\/td><\/tr>
 <\/td> <\/td>E0_22<\/td>E0_A2<\/td>E0_34<\/td>E0_F0 34<\/td><\/tr>
36<\/td>H<\/strong><\/td>23<\/td>A3<\/strong><\/td>33<\/td>F0 33<\/td><\/tr>
 <\/td> <\/td>E0_23<\/td>E0_A3<\/td>E0_33<\/td>E0_F0 33<\/td><\/tr>
37<\/td>J<\/td>24<\/td>A4<\/td>3B<\/td>F0 3B<\/td><\/tr>
 <\/td> <\/td>E0_24<\/td>E0_A4<\/td>E0_3B<\/td>E0_F0 3B<\/td><\/tr>
38<\/td>K<\/strong><\/td>25<\/td>A5<\/strong><\/td>42<\/td>F0 42<\/td><\/tr>
 <\/td> <\/td>E0_25<\/td>E0_A5<\/td>E0_42<\/td>E0_F0 42<\/td><\/tr>
39<\/td>L<\/td>26<\/td>A6<\/td>4B<\/td>F0 4B<\/td><\/tr>
 <\/td> <\/td>E0_26<\/td>E0_A6<\/td>E0_4B<\/td>E0_F0 4B<\/td><\/tr>
40<\/td>:   ;<\/td>27<\/td>A7<\/td>4C<\/td>F0 4C<\/td><\/tr>
 <\/td> <\/td>E0_27<\/td>E0_A7<\/td>E0_4C<\/td>E0_F0 4C<\/td><\/tr>
41<\/td>\u201c  \u2018<\/td>28<\/td>A8<\/td>52<\/td>F0 52<\/td><\/tr>
 <\/td> <\/td>E0_28<\/td>E0_A8<\/td>E0_52<\/td>E0_F0 52<\/td><\/tr>
42**<\/td> <\/td>2B<\/td>AB<\/td>5D<\/td>F0 5D<\/td><\/tr>
 <\/td> <\/td>E0_2B<\/td>E0_AB<\/td>E0_5D<\/td>E0_F0 5D<\/td><\/tr>
43<\/td>Enter<\/td>1C<\/td>9C<\/td>5A<\/td>F0 5A<\/td><\/tr>
44<\/td>L SHIFT<\/td>2A<\/td>AA<\/td>12<\/td>F0 12<\/td><\/tr>
 <\/td> <\/td>E0_2A<\/td>E0_AA<\/td>E0_12<\/td>E0_F0 12<\/td><\/tr>
45**<\/td> <\/td>56<\/td>D6<\/td>61<\/td>F0 61<\/td><\/tr>
 <\/td> <\/td>E0_56<\/td>E0_D6<\/td>E0_61<\/td>E0_F0 61<\/td><\/tr>
46<\/td>Z<\/td>2C<\/td>AC<\/td>1A<\/td>F0 1A<\/td><\/tr>
 <\/td> <\/td>E0_2C<\/td>E0_AC<\/td>E0_1A<\/td>E0_F0 1A<\/td><\/tr>
47<\/td>X<\/td>2D<\/td>AD<\/td>22<\/td>F0 22<\/td><\/tr>
 <\/td> <\/td>E0_2D<\/td>E0_AD<\/td>E0_22<\/td>E0_F0 22<\/td><\/tr>
48<\/td>C<\/td>2E<\/td>AE<\/td>21<\/td>F0 21<\/td><\/tr>
 <\/td> <\/td>E0_2E<\/td>E0_AE<\/td>E0_21<\/td>E0_F0 21<\/td><\/tr>
49<\/td>V<\/td>2F<\/td>AF<\/td>2A<\/td>F0 2A<\/td><\/tr>
 <\/td> <\/td>E0_2F<\/td>E0_AF<\/td>E0_2A<\/td>E0_F0 2A<\/td><\/tr>
50<\/td>B<\/strong><\/td>30<\/td>B0<\/strong><\/td>32<\/td>F0 32<\/td><\/tr>
 <\/td> <\/td>E0_30<\/td>E0_B0<\/td>E0_32<\/td>E0_F0 32<\/td><\/tr>
51<\/td>N<\/strong><\/td>31<\/td>B1<\/strong><\/td>31<\/td>F0 31<\/td><\/tr>
 <\/td> <\/td>E0_31<\/td>E0_B1<\/td>E0_31<\/td>E0_F0 31<\/td><\/tr>
52<\/td>M<\/td>32<\/td>B2<\/td>3A<\/td>F0 3A<\/td><\/tr>
 <\/td> <\/td>E0_32<\/td>E0_B2<\/td>E0_3A<\/td>E0_F0 3A<\/td><\/tr>
53<\/td><  ,<\/td>33<\/td>B3<\/td>41<\/td>F0 41<\/td><\/tr>
 <\/td> <\/td>E0_33<\/td>E0_B3<\/td>E0_41<\/td>E0_F0 41<\/td><\/tr>
54<\/td>>  .<\/td>34<\/td>B4<\/td>49<\/td>F0 49<\/td><\/tr>
 <\/td> <\/td>E0_34<\/td>E0_B4<\/td>E0_49<\/td>E0_F0 49<\/td><\/tr>
55<\/td>?  \/<\/td>35<\/td>B5<\/td>4A<\/td>F0 4A<\/td><\/tr>
 <\/td> <\/td>E0_35<\/td>E0_B5<\/td>E0_4A<\/td>E0_F0 4A<\/td><\/tr>
56***<\/td> <\/td>73<\/td>F3<\/td>51<\/td>F0 51<\/td><\/tr>
 <\/td> <\/td>E0_73<\/td>E0_F3<\/td>E0_51<\/td>E0_F0 51<\/td><\/tr>
57<\/td>R SHIFT<\/td>36<\/td>B6<\/td>59<\/td>F0 59<\/td><\/tr>
 <\/td> <\/td>E0_36<\/td>E0_B6<\/td>E0_59<\/td>E0_F0 59<\/td><\/tr>
58<\/td>L CTRL<\/td>1D<\/td>9D<\/td>14<\/td>F0 14<\/td><\/tr>
60<\/td>L ALT<\/td>38<\/td>B8<\/td>11<\/td>F0 11<\/td><\/tr>
 <\/td> <\/td>E0_38<\/td>E0_B8<\/td>E0_11<\/td>E0_F0 11<\/td><\/tr>
61<\/td>Space Bar<\/td>39<\/td>B9<\/td>29<\/td>F0 29<\/td><\/tr>
 <\/td> <\/td>E0_39<\/td>E0_B9<\/td>E0_29<\/td>E0_F0 29<\/td><\/tr>
62<\/td>R ALT<\/td>E0 38<\/td>E0 B8<\/td>E0 11<\/td>E0 F0 11<\/td><\/tr>
64<\/td>R CTRL<\/td>E0 1D<\/td>E0 9D<\/td>E0 14<\/td>E0 F0 14<\/td><\/tr>
75<\/td>Insert<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
76<\/td>Delete<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
79<\/td>L Arrow<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
80<\/td>Home<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
81<\/td>End<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
83<\/td>Up Arrow<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
84<\/td>Dn Arrow<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
85<\/td>Page Up<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
86<\/td>Page Down<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
89<\/td>R Arrow<\/td>Note 1<\/td>Note 1<\/td>Note 2<\/td>Note 2<\/td><\/tr>
90<\/td>Num Lock<\/td>45<\/td>C5<\/td>77<\/td>F0 77<\/td><\/tr>
 <\/td> <\/td>E0_45<\/td>E0_C5<\/td>E0_77<\/td>E0_F0 77<\/td><\/tr>
91<\/td>Numeric 7<\/td>47<\/td>C7<\/td>6C<\/td>F0 6C<\/td><\/tr>
92<\/td>Numeric 4<\/td>4B<\/td>CB<\/td>6B<\/td>F0 6B<\/td><\/tr>
93<\/td>Numeric 1<\/td>4F<\/td>CF<\/td>69<\/td>F0 69<\/td><\/tr>
95<\/td>Numeric \/<\/td>Note 3<\/td>Note 3<\/td>Note 3<\/td>Note 3<\/td><\/tr>
96<\/td>Numeric 8<\/td>48<\/td>C8<\/td>75<\/td>F0 75<\/td><\/tr>
97<\/td>Numeric 5<\/td>4C<\/td>CC<\/td>73<\/td>F0 73<\/td><\/tr>
98<\/td>Numeric 2<\/td>50<\/td>D0<\/td>72<\/td>F0 72<\/td><\/tr>
99<\/td>Numeric 0<\/td>52<\/td>D2<\/td>70<\/td>F0 70<\/td><\/tr>
100<\/td>Numeric *<\/td>37<\/td>B7<\/td>7C<\/td>F0 7C<\/td><\/tr>
 <\/td> <\/td>E0_37<\/td>E0_B7<\/td>E0_7C<\/td>E0_F0 7C<\/td><\/tr>
101<\/td>Numeric 9<\/td>49<\/td>C9<\/td>7D<\/td>F0 7D<\/td><\/tr>
102<\/td>Numeric 6<\/td>4D<\/td>CD<\/td>74<\/td>F0 74<\/td><\/tr>
103<\/td>Numeric 3<\/td>51<\/td>D1<\/td>7A<\/td>F0 7A<\/td><\/tr>
104<\/td>Numeric .<\/td>53<\/td>D3<\/td>71<\/td>F0 71<\/td><\/tr>
105<\/td>Numeric –<\/td>4A<\/td>CA<\/td>7B<\/td>F0 7B<\/td><\/tr>
106<\/td>Numeric +<\/td>4E<\/td>CE<\/td>79<\/td>F0 79<\/td><\/tr>
107***<\/td> <\/td>7E<\/td>FE<\/td>6D<\/td>F0 6D<\/td><\/tr>
 <\/td>DO NOT USE<\/td>E0_7E<\/td>E0_FE<\/td>E0_6D<\/td>E0_F0 6D<\/td><\/tr>
108<\/td>Numeric Enter<\/td>E0 1C<\/td>E0 9C<\/td>E0 5A<\/td>E0 F0 5A<\/td><\/tr>
110<\/td>Esc<\/td>01<\/td>81<\/td>76<\/td>F0 76<\/td><\/tr>
 <\/td> <\/td>E0_01<\/td>E0_81<\/td>E0_76<\/td>E0_F0 76<\/td><\/tr>
112<\/td>F1<\/td>3B<\/td>BB<\/td>05<\/td>F0 05<\/td><\/tr>
 <\/td> <\/td>E0_3B<\/td>E0_BB<\/td>E0_05<\/td>E0_F0 05<\/td><\/tr>
113<\/td>F2<\/td>3C<\/td>BC<\/td>06<\/td>F0 06<\/td><\/tr>
 <\/td> <\/td>E0_3C<\/td>E0_BC<\/td>E0_06<\/td>E0_F0 06<\/td><\/tr>
114<\/td>F3<\/td>3D<\/td>BD<\/td>04<\/td>F0 05<\/td><\/tr>
 <\/td> <\/td>E0_3D<\/td>E0_BD<\/td>E0_04<\/td>E0_F0 05<\/td><\/tr>
115<\/td>F4<\/td>3E<\/td>BE<\/td>0C<\/td>F0 0C<\/td><\/tr>
 <\/td> <\/td>E0_3E<\/td>E0_BE<\/td>E0_0C<\/td>E0_F0 0C<\/td><\/tr>
116<\/td>F5<\/td>3F<\/td>BF<\/td>03<\/td>F0 03<\/td><\/tr>
 <\/td> <\/td>E0_3F<\/td>E0_BF<\/td>E0_03<\/td>E0_F0 03<\/td><\/tr>
117<\/td>F6<\/td>40<\/td>C0<\/td>0B<\/td>F0 0B<\/td><\/tr>
 <\/td> <\/td>E0_40<\/td>E0_C0<\/td>E0_0B<\/td>E0_F0 0B<\/td><\/tr>
118<\/td>F7<\/td>41<\/td>C1<\/td>83<\/td>F0 83<\/td><\/tr>
 <\/td> <\/td>E0_41<\/td>E0_C1<\/td>E0_83<\/td>E0_F0 83<\/td><\/tr>
119<\/td>F8<\/td>42<\/td>C2<\/td>0A<\/td>F0 0A<\/td><\/tr>
 <\/td> <\/td>E0_42<\/td>E0_C2<\/td>E0_0A<\/td>E0_F0 0A<\/td><\/tr>
120<\/td>F9<\/td>43<\/td>C3<\/td>01<\/td>F0 01<\/td><\/tr>
 <\/td> <\/td>E0_43<\/td>E0_C3<\/td>E0_01<\/td>E0_F0 01<\/td><\/tr>
121<\/td>F10<\/td>44<\/td>C4<\/td>09<\/td>F0 09<\/td><\/tr>
 <\/td> <\/td>E0_44<\/td>E0_C4<\/td>E0_09<\/td>E0_F0 09<\/td><\/tr>
122<\/td>F11<\/td>57<\/td>D7<\/td>78<\/td>F0 78<\/td><\/tr>
123<\/td>F12<\/td>58<\/td>D8<\/td>07<\/td>F0 07<\/td><\/tr>
124<\/td>Print Screen<\/td>Note 4<\/td>Note 4<\/td>Note 4<\/td>Note 4<\/td><\/tr>
125<\/td>Scroll Lock<\/td>46<\/td>C6<\/td>7E<\/td>F0 7E<\/td><\/tr>
 <\/td> <\/td>E0_46<\/td>E0_C6<\/td>E0_7E<\/td>E0_F0 7E<\/td><\/tr>
126<\/td>Pause<\/td>Note 5<\/td>Note 5<\/td>Note 5<\/td>Note 5<\/td><\/tr>
 <\/td> <\/td>59<\/td>D9<\/td>0F<\/a><\/td>F0 0F<\/td><\/tr>
 <\/td> <\/td>E0_59<\/td>E0_D9<\/td>E0_0F<\/td>E0_F0 0F<\/td><\/tr>
 <\/td> <\/td>5B<\/td>DB<\/td>1F<\/td>F0 1F<\/td><\/tr>
 <\/td>Left Win<\/td>E0_5B<\/td>E0_DB<\/td>E0_1F<\/td>E0_F0 1F<\/td><\/tr>
 <\/td> <\/td>5C<\/td>DC<\/td>27<\/td>F0 27<\/td><\/tr>
 <\/td>Right Win<\/td>E0_5C<\/td>E0_DC<\/td>E0_27<\/td>E0_F0 27<\/td><\/tr>
 <\/td> <\/td>5D<\/td>DD<\/td>2F<\/td>F0 2F<\/td><\/tr>
 <\/td>Application<\/td>E0_5D<\/td>E0_DD<\/td>E0_2F<\/td>E0_F0 2F<\/td><\/tr>
 <\/td> <\/td>5E<\/td>DE<\/td>37<\/td>F0 37<\/td><\/tr>
 <\/td>ACPI Power<\/td>E0_5E<\/td>E0_DE<\/td>E0_37<\/td>E0_F0 37<\/td><\/tr>
 <\/td> <\/td>5F<\/td>DF<\/td>3F<\/td>F0 3F<\/td><\/tr>
 <\/td>ACPI Sleep<\/td>E0_5F<\/td>E0_DF<\/td>E0_3F<\/td>E0_F0 3F<\/td><\/tr>
 <\/td>DO NOT USE<\/td>60<\/td>E0<\/td>47<\/td>F0 47<\/td><\/tr>
 <\/td>DO NOT USE<\/td>E0_60<\/td>E0_E0<\/td>E0_47<\/td>E0_F0 47<\/td><\/tr>
 <\/td>DO NOT USE<\/td>61<\/td>E1<\/td>4F<\/td>F0 4F<\/td><\/tr>
 <\/td>DO NOT USE<\/td>E0_61<\/td>E0_E1<\/td>E0_4F<\/td>E0_F0 4F<\/td><\/tr>
 <\/td> <\/td>62<\/td>E2<\/td>56<\/td>F0 56<\/td><\/tr>
 <\/td> <\/td>E0_62<\/td>E0_E2<\/td>E0_56<\/td>E0_F0 56<\/td><\/tr>
 <\/td> <\/td>63<\/td>E3<\/td>5E<\/td>F0 5E<\/td><\/tr>
 <\/td>ACPI Wake<\/td>E0_63<\/td>E0_E3<\/td>E0_5E<\/td>E0_F0 5E<\/td><\/tr>
 <\/td> <\/td>64<\/td>E4<\/td>08<\/td>F0 08<\/td><\/tr>
 <\/td> <\/td>E0_64<\/td>E0_E4<\/td>E0_08<\/td>E0_F0 08<\/td><\/tr>
 <\/td> <\/td>65<\/td>E5<\/td>10<\/td>F0 10<\/td><\/tr>
 <\/td> <\/td>E0_65<\/td>E0_E5<\/td>E0_10<\/td>E0_F0 10<\/td><\/tr>
 <\/td> <\/td>66<\/td>E6<\/td>18<\/td>F0 18<\/td><\/tr>
 <\/td> <\/td>E0_66<\/td>E0_E6<\/td>E0_18<\/td>E0_F0 18<\/td><\/tr>
 <\/td> <\/td>67<\/td>E7<\/td>20<\/td>F0 20<\/td><\/tr>
 <\/td> <\/td>E0_67<\/td>E0_E7<\/td>E0_20<\/td>E0_F0 20<\/td><\/tr>
 <\/td> <\/td>68<\/td>E8<\/td>28<\/td>F0 28<\/td><\/tr>
 <\/td> <\/td>E0_68<\/td>E0_E8<\/td>E0_28<\/td>E0_F0 28<\/td><\/tr>
 <\/td> <\/td>69<\/td>E9<\/td>30<\/td>F0 30<\/td><\/tr>
 <\/td> <\/td>E0_69<\/td>E0_E9<\/td>E0_30<\/td>E0_F0 30<\/td><\/tr>
 <\/td> <\/td>6A<\/td>EA<\/td>38<\/td>F0 38<\/td><\/tr>
 <\/td> <\/td>E0_6A<\/td>E0_EA<\/td>E0_38<\/td>E0_F0 38<\/td><\/tr>
 <\/td> <\/td>6B<\/td>EB<\/td>40<\/td>F0 40<\/td><\/tr>
 <\/td> <\/td>E0_6B<\/td>E0_EB<\/td>E0_40<\/td>E0_F0 40<\/td><\/tr>
 <\/td> <\/td>6C<\/td>EC<\/td>48<\/td>F0 48<\/td><\/tr>
 <\/td> <\/td>E0_6C<\/td>E0_EC<\/td>E0_48<\/td>E0_F0 48<\/td><\/tr>
 <\/td> <\/td>6D<\/td>ED<\/td>50<\/td>F0 50<\/td><\/tr>
 <\/td> <\/td>E0_6D<\/td>E0_ED<\/td>E0_50<\/td>E0_F0 50<\/td><\/tr>
 <\/td> <\/td>6E<\/td>EE<\/td>57<\/td>F0 57<\/td><\/tr>
 <\/td> <\/td>E0_6E<\/td>E0_EE<\/td>E0_57<\/td>E0_F0 57<\/td><\/tr>
 <\/td> <\/td>6F<\/td>EF<\/td>6F<\/td>F0 6F<\/td><\/tr>
 <\/td> <\/td>E0_6F<\/td>E0_EF<\/td>E0_6F<\/td>E0_F0 6F<\/td><\/tr>
 <\/td>DBE_KATAKANA\u2021<\/td>70<\/td>F0<\/td>13<\/td>F0 13<\/td><\/tr>
 <\/td> <\/td>E0_70<\/td>E0_F0<\/td>E0_13<\/td>E0_F0 13<\/td><\/tr>
 <\/td> <\/td>71<\/td>F1<\/td>19<\/td>F0 19<\/td><\/tr>
 <\/td> <\/td>E0_71<\/td>E0_F1<\/td>E0_19<\/td>E0_F0 19<\/td><\/tr>
 <\/td> <\/td>72<\/td>F2<\/td>39<\/td>F0 39<\/td><\/tr>
 <\/td> <\/td>E0_72<\/td>E0_F2<\/td>E0_39<\/td>E0_F0 39<\/td><\/tr>
 <\/td> <\/td>74<\/td>F4<\/td>53<\/td>F0 53<\/td><\/tr>
 <\/td> <\/td>E0_74<\/td>E0_F4<\/td>E0_53<\/td>E0_F0 53<\/td><\/tr>
 <\/td> <\/td>75<\/td>F5<\/td>5C<\/td>F0 5C<\/td><\/tr>
 <\/td> <\/td>E0_75<\/td>E0_F5<\/td>E0_5C<\/td>E0_F0 5C<\/td><\/tr>
 <\/td> <\/td>76<\/td>F6<\/td>5F<\/td>F0 5F<\/td><\/tr>
 <\/td> <\/td>E0_76<\/td>E0_F6<\/td>E0_5F<\/td>E0_F0 5F<\/td><\/tr>
 <\/td>DBE_SBCSCHAR\u2021<\/td>77<\/td>F7<\/td>62<\/td>F0 62<\/td><\/tr>
 <\/td> <\/td>E0_77<\/td>E0_F7<\/td>E0_62<\/td>E0_F0 62<\/td><\/tr>
 <\/td> <\/td>78<\/td>F8<\/td>63<\/td>F0 63<\/td><\/tr>
 <\/td> <\/td>E0_78<\/td>E0_F8<\/td>E0_63<\/td>E0_F0 63<\/td><\/tr>
 <\/td>CONVERT\u2021<\/td>79<\/td>F9<\/td>64<\/td>F0 64<\/td><\/tr>
 <\/td> <\/td>E0_79<\/td>E0_F9<\/td>E0_64<\/td>E0_F0 64<\/td><\/tr>
 <\/td>DO NOT USE<\/td>7A<\/td>FA<\/td>65<\/td>F0 65<\/td><\/tr>
 <\/td>DO NOT USE<\/td>E0_7A<\/td>E0_FA<\/td>E0_65<\/td>E0_F0 65<\/td><\/tr>
 <\/td>NONCONVERT\u2021<\/td>7B<\/td>FB<\/td>67<\/td>F0 67<\/td><\/tr>
 <\/td>DO NOT USE<\/td>E0_7B<\/td>E0_FB<\/td>E0_67<\/td>E0_F0 67<\/td><\/tr>
 <\/td>DO NOT USE<\/td>7C<\/td>FC<\/td>68<\/td>F0 68<\/td><\/tr>
 <\/td>DO NOT USE<\/td>E0_7C<\/td>E0_FC<\/td>E0_68<\/td>E0_F0 68<\/td><\/tr>
 <\/td>DO NOT USE<\/td>7D<\/td>FD<\/td>6A<\/td>F0 6A<\/td><\/tr>
 <\/td>DO NOT USE<\/td>E0_7D<\/td>E0_FD<\/td>E0_6A<\/td>E0_F0 6A<\/td><\/tr>
 <\/td>DO NOT USE<\/td>7F<\/td>FF<\/td>6E<\/td>F0 6E<\/td><\/tr>
 <\/td>DO NOT USE<\/td>E0_7F<\/td>E0_FF<\/td>E0_6E<\/td>E0_F0 6E<\/td><\/tr><\/tbody><\/table>
scancode.doc<\/figcaption><\/figure>\n\n\n\n
FLAG<\/strong><\/h2>\n\n\n\n
keybdinthook<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"
ReadMe.txt Reversing.Kr CrackMe – WindowsKernel Please authenticate to lowercase. Exeinfo PE WindowKernel.exe WinKer.sys Analysis WindowKernel.exe – sub_401110 sub_401280\uc5d0\uc11c \ubc18\ud658\ub41c \ub9ac\ud134\uac12\uc774 1\uc774\uba74 Correct \ubb38\uad6c\ub97c \ub744\uc6b0\ub3c4\ub85d \ub418\uc5b4\uc788\ub2e4. WindowKernel.exe – sub_401280 https:\/\/learn.microsoft.com\/ko-kr\/windows\/win32\/api\/ioapiset\/nf-ioapiset-deviceiocontrol “DeviceIoControl: \uc9c0\uc815\ub41c \ub514\ubc14\uc774\uc2a4 \ub4dc\ub77c\uc774\ubc84\uc5d0 \uc9c1\uc811 \uc81c\uc5b4 \ucf54\ub4dc\ub97c \ubcf4\ub0b4 \ud574\ub2f9 \ub514\ubc14\uc774\uc2a4\uac00 \ud574\ub2f9 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub3c4\ub85d \ud569\ub2c8\ub2e4.” \uc5ec\uae30\uae4c\uc9c0\ub9cc \ubd10\uc654\uc744\ub54c, WinKer.sys \ub4dc\ub77c\uc774\ubc84 \ud30c\uc77c\uc744 \ub85c\ub4dc\uc2dc\ucf1c\uc11c \uc81c\uc5b4 \ucf54\ub4dc\ub97c \ubcf4\ub0b4\ub294 \uac83\uc73c\ub85c \ud655\uc778\ub41c\ub2e4. OutBuffer\ub97c… \ub354 \ubcf4\uae30 »WindowsKernel<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[16],"tags":[24],"class_list":["post-2200","post","type-post","status-publish","format-standard","hentry","category-reversing-kr","tag-reversing"],"_links":{"self":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/2200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2200"}],"version-history":[{"count":4,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/2200\/revisions"}],"predecessor-version":[{"id":2227,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/2200\/revisions\/2227"}],"wp:attachment":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}