



thanks to @simconti for the photos
opening the file .reg in Osx looks like this:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96C-E325-11CE-BFC1-08002BE10318}\0000\PinConfigOverrideVerbs]
"0000"=hex:20,1c,a7,00
"0001"=hex:10,1d,a7,00
"0002"=hex:a1,1e,a7,00
"0003"=hex:04,1f,a7,00
"0004"=hex:1f,1c,b7,00
"0005"=hex:10,1d,b7,00
"0006"=hex:21,1e,b7,00
"0007"=hex:04,1f,b7,00
"0008"=hex:f0,1c,c7,00
"0009"=hex:00,1d,c7,00
"0010"=hex:f0,1e,c7,00
"0011"=hex:40,1f,c7,00
"0012"=hex:10,1c,d7,00
"0013"=hex:01,1d,d7,00
"0014"=hex:17,1e,d7,00
"0015"=hex:92,1f,d7,00
"0016"=hex:f0,1c,e7,00
"0017"=hex:00,1d,e7,00
"0018"=hex:f0,1e,e7,00
"0019"=hex:40,1f,e7,00
"0020"=hex:f0,1c,f7,00
"0021"=hex:00,1d,f7,00
"0022"=hex:f0,1e,f7,00
"0023"=hex:40,1f,f7,00
"0024"=hex:f0,1c,07,01
"0025"=hex:00,1d,07,01
"0026"=hex:f0,1e,07,01
"0027"=hex:40,1f,07,01
"0028"=hex:30,1c,17,01
"0029"=hex:01,1d,17,01
"0030"=hex:a3,1e,17,01
"0031"=hex:d5,1f,17,01
"0032"=hex:f0,1c,f7,01
"0033"=hex:00,1d,f7,01
"0034"=hex:f0,1e,f7,01
"0035"=hex:40,1f,f7,01
"0036"=hex:f0,1c,07,02
"0037"=hex:00,1d,07,02
"0038"=hex:f0,1e,07,02
"0039"=hex:40,1f,07,02
"NumVerbs"=hex:28,00,00,00
in practice Windows uses the value inverted, so now they have to be converted in this way:
20,1c,a7,00 must be 00a71c20
so for all verbs. To save time, select all the verbs from the log file in Windows, and copy/paste here:
http://www.ipwn.me/HDA/
the result now looks like:
00A71C20 00A71D10 00A71EA1 00A71F04 00B71C1F 00B71D10 00B71E21 00B71F04 00C71CF0 00C71D00 00C71EF0 00C71F40 00D71C10 00D71D01 00D71E17 00D71F92 00E71CF0 00E71D00 00E71EF0 00E71F40 00F71CF0 00F71D00 00F71EF0 00F71F40 01071CF0 01071D00 01071EF0 01071F40 01171C30 01171D01 01171EA3 01171FD5 01F71CF0 01F71D00 01F71EF0 01F71F40 02071CF0 02071D00 02071EF0 02071F40