============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000020 00 00 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ....♀...........D............... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 6E 61 61 ............................rnaa 000000A0 70 70 2E 65 78 65 20 2D 6C 00 00 00 00 00 00 00 00 00 00 00 44 69 72 65 63 74 20 43 61 62 6C 65 pp.exe -l...........Direct Cable 000000C0 20 43 6F 6E 6E 65 63 74 69 6F 6E 20 48 6F 73 74 20 4C 6F 67 6F 6E 00 00 44 69 72 65 63 74 20 43 Connection Host Logon..Direct C 000000E0 61 62 6C 65 20 43 6F 6E 6E 65 63 74 69 6F 6E 20 48 6F 73 74 20 4C 6F 67 6F 6E 00 00 5C 00 00 00 able Connection Host Logon..\... 00000100 5C 00 00 00 00 00 00 00 5C 5C 2E 5C 00 00 00 00 25 64 00 00 00 00 00 00 49 53 44 4E 00 00 00 00 \.......\\.\....%d......ISDN.... 00000120 49 53 44 4E 00 00 00 00 25 64 2E 25 64 2E 25 64 2E 25 64 00 07 08 00 08 06 04 0E 04 05 0C 01 07 ISDN....%d.%d.%d.%d.•◘.◘♠♦♫♦♣♀☺• 00000140 0B 0F 0A 08 0F 08 0C 0C 09 04 01 0E 04 06 02 04 00 0A 0B 09 02 0F 0B 01 0D 02 01 09 05 0E 07 00 ♂☼◙◘☼◘♀♀○♦☺♫♦♠☻♦.◙♂○☻☼♂☺♪☻☺○♣♫•. 00000160 00 02 06 06 00 07 03 08 02 09 03 0F 07 0F 0C 0F 06 04 0A 00 02 03 0A 0B 0D 08 03 0A 01 07 0C 0F .☻♠♠.•♥◘☻○♥☼•☼♀☼♠♦◙.☻♥◙♂♪◘♥◙☺•♀☼ 00000180 01 08 09 0D 09 01 09 04 0E 04 0C 05 05 0C 08 0B 02 03 09 0E 07 07 06 09 0E 0F 0C 08 0D 01 0A 06 ☺◘○♪○☺○♦♫♦♀♣♣♀◘♂☻♥○♫••♠○♫☼♀◘♪☺◙♠ 000001A0 0E 0D 00 07 07 0A 00 01 0F 05 04 0B 07 0B 0E 0C 09 05 0D 01 0B 0D 01 03 05 0D 0E 06 03 00 0B 0B ♫♪.••◙.☺☼♣♦♂•♂♫♀○♣♪☺♂♪☺♥♣♪♫♠♥.♂♂ 000001C0 0F 03 06 04 09 0D 0A 03 01 04 09 04 08 03 0B 0E 05 00 05 02 0C 0B 0D 05 0D 05 0D 02 0D 09 0A 0C ☼♥♠♦○♪◙♥☺♦○♦◘♥♂♫♣.♣☻♀♂♪♣♪♣♪☻♪○◙♀ 000001E0 0A 00 0B 03 05 03 06 09 05 01 0E 0E 00 0E 08 02 0D 02 02 00 04 0F 08 05 09 06 08 06 0B 0A 0B 0F ◙.♂♥♣♥♠○♣☺♫♫.♫◘☻♪☻☻.♦☼◘♣○♠◘♠♂◙♂☼ 00000200 00 07 02 08 0C 07 03 0A 01 04 02 05 0F 07 0A 0C 0E 05 09 03 0E 07 01 02 0E 01 0F 04 0A 06 0C 06 .•☻◘♀•♥◙☺♦☻♣☼•◙♀♫♣○♥♫•☺☻♫☺☼♦◙♠♀♠ 00000220 0F 04 03 00 0C 00 03 06 0F 08 07 0B 02 0D 0C 06 0A 0A 08 0D 48 93 46 67 98 3D E6 8D B7 10 7A 26 ☼♦♥.♀.♥♠☼◘•♂☻♪♀♠◙◙◘♪HôFgÿ=µì╖►z& 00000240 5A B9 B1 35 6B 0F D5 70 AE FB AD 11 F4 47 DC A7 EC CF 50 C0 FF FF 00 00 00 00 00 00 CD CC 00 00 Z╣▒5k☼╒p«√¡◄⌠G▄º∞╧P└ ......═╠.. 00000260 52 6E 61 53 65 73 73 47 65 74 45 72 72 6F 72 53 74 72 69 6E 67 00 00 00 53 79 73 74 65 6D 5C 43 RnaSessGetErrorString...System\C 00000280 75 72 72 65 6E 74 43 6F 6E 74 72 6F 6C 53 65 74 5C 53 65 72 76 69 63 65 73 5C 52 65 6D 6F 74 65 urrentControlSet\Services\Remote 000002A0 41 63 63 65 73 73 00 00 53 79 73 74 65 6D 5C 43 75 72 72 65 6E 74 43 6F 6E 74 72 6F 6C 53 65 74 Access..System\CurrentControlSet 000002C0 5C 53 65 72 76 69 63 65 73 5C 52 65 6D 6F 74 65 41 63 63 65 73 73 00 00 00 00 00 00 00 00 00 00 \Services\RemoteAccess.......... 000002E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 52 61 73 44 69 61 6C 45 ........................RasDialE 00000300 76 65 6E 74 00 00 00 00 41 75 74 68 65 6E 74 69 63 61 74 69 6E 67 41 67 65 6E 74 00 00 00 00 00 vent....AuthenticatingAgent..... 00000320 2B 25 64 20 28 25 73 29 20 25 73 00 2B 25 64 20 25 73 00 00 44 69 72 65 63 74 20 43 61 62 6C 65 +%d (%s) %s.+%d %s..Direct Cable 00000340 20 43 6F 6E 6E 65 63 74 69 6F 6E 20 48 6F 73 74 20 4C 6F 67 6F 6E 00 00 20 25 64 00 25 64 00 00 Connection Host Logon.. %d.%d.. 00000360 25 73 3B 00 25 73 3B 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 %s;.%s;.Ç....................... 00000380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003A0 00 00 00 00 00 00 00 00 52 4E 41 5F 49 50 41 64 64 72 65 73 73 00 00 00 52 4E 41 5F 49 50 41 64 ........RNA_IPAddress...RNA_IPAd 000003C0 64 72 65 73 73 00 00 00 45 64 69 74 00 00 00 00 2E 00 00 00 00 00 00 00 25 64 00 00 FF FF FF FF dress...Edit............%d.. 000003E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 6F 66 74 77 61 72 65 ........................Software 00000440 5C 4D 69 63 72 6F 73 6F 66 74 5C 57 69 6E 64 6F 77 73 5C 43 75 72 72 65 6E 74 56 65 72 73 69 6F \Microsoft\Windows\CurrentVersio 00000460 6E 5C 52 75 6E 00 00 00 5C 00 00 00 00 00 00 00 4E 54 4C 4D 00 00 00 00 4E 54 4C 4D 00 00 00 00 n\Run...\.......NTLM....NTLM.... 00000480 44 49 41 4C 49 4E 5F 43 4C 49 45 4E 54 20 20 20 00 00 00 00 44 49 41 4C 49 4E 5F 47 41 54 45 57 DIALIN_CLIENT ....DIALIN_GATEW 000004A0 41 59 20 20 00 00 00 00 44 49 41 4C 49 4E 5F 47 41 54 45 57 41 59 20 20 00 00 00 00 44 49 41 4C AY ....DIALIN_GATEWAY ....DIAL 000004C0 49 4E 5F 43 4C 49 45 4E 54 20 20 20 00 00 00 00 2A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 IN_CLIENT ....* 000004E0 00 00 00 00 44 49 41 4C 49 4E 5F 47 41 54 45 57 41 59 20 20 00 00 00 00 44 49 41 4C 49 4E 5F 43 ....DIALIN_GATEWAY ....DIALIN_C 00000500 4C 49 45 4E 54 20 20 20 00 00 00 00 44 49 41 4C 49 4E 5F 47 41 54 45 57 41 59 20 20 00 00 00 00 LIENT ....DIALIN_GATEWAY .... 00000520 00 00 00 00 49 53 44 4E 00 00 00 00 2A 00 00 00 44 49 41 4C 49 4E 5F 47 41 54 45 57 41 59 20 20 ....ISDN....*...DIALIN_GATEWAY 00000540 00 00 00 00 44 49 41 4C 49 4E 5F 43 4C 49 45 4E 54 20 20 20 00 00 00 00 44 49 41 4C 49 4E 5F 43 ....DIALIN_CLIENT ....DIALIN_C 00000560 4C 49 45 4E 54 20 20 20 00 00 00 00 44 49 41 4C 49 4E 5F 47 41 54 45 57 41 59 20 20 00 00 00 00 LIENT ....DIALIN_GATEWAY .... 00000580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005A0 00 00 00 00 53 79 73 74 65 6D 5C 43 75 72 72 65 6E 74 43 6F 6E 74 72 6F 6C 53 65 74 5C 53 65 72 ....System\CurrentControlSet\Ser 000005C0 76 69 63 65 73 5C 43 6C 61 73 73 5C 4E 65 74 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 vices\Class\Net.☺............... 000005E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000006A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000006C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000006E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000007E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000820 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000860 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000008A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000008C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000008E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000920 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000009E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................