============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 5C E1 01 00 A4 F5 01 00 B8 F5 01 00 D0 F5 01 00 DC F5 01 00 E6 F5 01 00 02 F6 01 00 16 F6 01 00 \ß☺.ñ⌡☺.╕⌡☺.╨⌡☺.▄⌡☺.µ⌡☺.☻÷☺.▬÷☺. 00000020 FA E0 01 00 E2 E0 01 00 DC DF 01 00 94 F5 01 00 02 E2 01 00 E6 E1 01 00 CC E1 01 00 9C E1 01 00 ·α☺.Γα☺.▄▀☺.ö⌡☺.☻Γ☺.µß☺.╠ß☺.£ß☺. 00000040 7C E1 01 00 6A E1 01 00 BE DF 01 00 4A E1 01 00 34 E1 01 00 20 E1 01 00 0C E1 01 00 EC DF 01 00 |ß☺.jß☺.╛▀☺.Jß☺.4ß☺. ß☺.♀ß☺.∞▀☺. 00000060 CC DF 01 00 CA E0 01 00 B2 E0 01 00 A0 E0 01 00 92 E0 01 00 7E E0 01 00 6E E0 01 00 5E E0 01 00 ╠▀☺.╩α☺.▓α☺.áα☺.Æα☺.~α☺.nα☺.^α☺. 00000080 4C E0 01 00 3C E0 01 00 26 E0 01 00 10 E0 01 00 00 E0 01 00 00 00 00 00 66 E7 01 00 7C E7 01 00 Lα☺.<α☺.&α☺.►α☺..α☺.....fτ☺.|τ☺. 000000A0 00 00 00 00 AE E6 01 00 20 E4 01 00 36 E4 01 00 6E F7 01 00 5A F7 01 00 4A F7 01 00 36 F7 01 00 ....«µ☺. Σ☺.6Σ☺.n≈☺.Z≈☺.J≈☺.6≈☺. 000000C0 28 F7 01 00 18 F7 01 00 02 F7 01 00 EA F6 01 00 DA F6 01 00 C8 F6 01 00 B4 F6 01 00 A4 F6 01 00 (≈☺.↑≈☺.☻≈☺.Ω÷☺.┌÷☺.╚÷☺.┤÷☺.ñ÷☺. 000000E0 8E F6 01 00 7E F6 01 00 66 F6 01 00 4E F6 01 00 04 E4 01 00 32 F6 01 00 46 E7 01 00 34 E7 01 00 Ä÷☺.~÷☺.f÷☺.N÷☺.♦Σ☺.2÷☺.Fτ☺.4τ☺. 00000100 1A E7 01 00 0E E7 01 00 28 E7 01 00 EE E6 01 00 D2 E6 01 00 02 E7 01 00 F4 E3 01 00 A0 E6 01 00 →τ☺.♫τ☺.(τ☺.εµ☺.╥µ☺.☻τ☺.⌠π☺.áµ☺. 00000120 8E E6 01 00 78 E6 01 00 30 E2 01 00 3C E2 01 00 4A E2 01 00 56 E2 01 00 62 E2 01 00 6E E2 01 00 ĵ☺.xµ☺.0Γ☺.<Γ☺.JΓ☺.VΓ☺.bΓ☺.nΓ☺. 00000140 7A E2 01 00 8A E2 01 00 98 E2 01 00 A4 E2 01 00 B2 E2 01 00 C2 E2 01 00 D0 E2 01 00 DE E2 01 00 zΓ☺.èΓ☺.ÿΓ☺.ñΓ☺.▓Γ☺.┬Γ☺.╨Γ☺.▐Γ☺. 00000160 EE E2 01 00 00 E3 01 00 0E E3 01 00 22 E3 01 00 36 E3 01 00 46 E3 01 00 56 E3 01 00 68 E3 01 00 εΓ☺..π☺.♫π☺."π☺.6π☺.Fπ☺.Vπ☺.hπ☺. 00000180 78 E3 01 00 8C E3 01 00 A6 E3 01 00 BA E3 01 00 D8 E3 01 00 6A E6 01 00 44 E5 01 00 BE E6 01 00 xπ☺.îπ☺.ªπ☺.║π☺.╪π☺.jµ☺.Dσ☺.╛µ☺. 000001A0 52 E5 01 00 50 E4 01 00 5E E4 01 00 6E E4 01 00 88 E4 01 00 96 E4 01 00 B0 E4 01 00 C4 E4 01 00 Rσ☺.PΣ☺.^Σ☺.nΣ☺.êΣ☺.ûΣ☺.░Σ☺.─Σ☺. 000001C0 D8 E4 01 00 EE E4 01 00 0C E5 01 00 28 E5 01 00 36 E5 01 00 DE E5 01 00 C8 E5 01 00 62 E5 01 00 ╪Σ☺.εΣ☺.♀σ☺.(σ☺.6σ☺.▐σ☺.╚σ☺.bσ☺. 000001E0 72 E5 01 00 8A E5 01 00 A6 E5 01 00 B8 E5 01 00 42 E6 01 00 56 E6 01 00 F4 E5 01 00 02 E6 01 00 rσ☺.èσ☺.ªσ☺.╕σ☺.Bµ☺.Vµ☺.⌠σ☺.☻µ☺. 00000200 18 E6 01 00 26 E6 01 00 2E E6 01 00 00 00 00 00 C8 DE 01 00 2C DE 01 00 34 DE 01 00 42 DE 01 00 ↑µ☺.&µ☺..µ☺.....╚▐☺.,▐☺.4▐☺.B▐☺. 00000220 62 DE 01 00 50 DE 01 00 24 DE 01 00 58 DE 01 00 82 DE 01 00 6C DE 01 00 78 DE 01 00 A0 DE 01 00 b▐☺.P▐☺.$▐☺.X▐☺.é▐☺.l▐☺.x▐☺.á▐☺. 00000240 8C DE 01 00 96 DE 01 00 BE DE 01 00 AA DE 01 00 B4 DE 01 00 DC DE 01 00 1A DE 01 00 10 DE 01 00 î▐☺.û▐☺.╛▐☺.¬▐☺.┤▐☺.▄▐☺.→▐☺.►▐☺. 00000260 04 DE 01 00 EA DE 01 00 F4 DE 01 00 FE DE 01 00 08 DF 01 00 10 DF 01 00 1E DF 01 00 26 DF 01 00 ♦▐☺.Ω▐☺.⌠▐☺.■▐☺.◘▀☺.►▀☺.▲▀☺.&▀☺. 00000280 AC DD 01 00 34 DF 01 00 40 DF 01 00 50 DF 01 00 64 DF 01 00 74 DF 01 00 84 DF 01 00 B0 DF 01 00 ¼▌☺.4▀☺.@▀☺.P▀☺.d▀☺.t▀☺.ä▀☺.░▀☺. 000002A0 92 DF 01 00 CE DD 01 00 B8 DD 01 00 C2 DD 01 00 DC DD 01 00 E8 DD 01 00 F2 DD 01 00 FA DD 01 00 Æ▀☺.╬▌☺.╕▌☺.┬▌☺.▄▌☺.Φ▌☺.≥▌☺.·▌☺. 000002C0 00 00 00 00 9E F7 01 00 B2 F7 01 00 82 F7 01 00 DC F7 01 00 F4 F7 01 00 C4 F7 01 00 1C F8 01 00 ....₧≈☺.▓≈☺.é≈☺.▄≈☺.⌠≈☺.─≈☺.∟°☺. 000002E0 3A F8 01 00 02 F8 01 00 62 F8 01 00 7E F8 01 00 4C F8 01 00 B0 F8 01 00 CC F8 01 00 98 F8 01 00 :°☺.☻°☺.b°☺.~°☺.L°☺.░°☺.╠°☺.ÿ°☺. 00000300 10 F9 01 00 36 F9 01 00 EC F8 01 00 B8 EC 01 00 9E EC 01 00 88 EC 01 00 70 EC 01 00 5E EC 01 00 ►∙☺.6∙☺.∞°☺.╕∞☺.₧∞☺.ê∞☺.p∞☺.^∞☺. 00000320 48 EC 01 00 00 00 00 00 62 EB 01 00 92 EB 01 00 9E EB 01 00 B0 EB 01 00 C4 EB 01 00 6E EB 01 00 H∞☺.....bδ☺.Æδ☺.₧δ☺.░δ☺.─δ☺.nδ☺. 00000340 7C EB 01 00 FA EB 01 00 0A EC 01 00 C4 EA 01 00 E6 EA 01 00 52 EB 01 00 40 EB 01 00 2C EB 01 00 |δ☺.·δ☺.◙∞☺.─Ω☺.µΩ☺.Rδ☺.@δ☺.,δ☺. 00000360 66 E9 01 00 F4 EA 01 00 08 EB 01 00 D0 E8 01 00 D4 EB 01 00 E4 EB 01 00 D6 EA 01 00 D6 EC 01 00 fΘ☺.⌠Ω☺.◘δ☺.╨Φ☺.╘δ☺.Σδ☺.╓Ω☺.╓∞☺. 00000380 7A E9 01 00 0E ED 01 00 22 ED 01 00 38 ED 01 00 50 ED 01 00 68 ED 01 00 BE E8 01 00 94 EA 01 00 zΘ☺.♫φ☺."φ☺.8φ☺.Pφ☺.hφ☺.╛Φ☺.öΩ☺. 000003A0 B2 EA 01 00 A2 EA 01 00 56 EA 01 00 7E EA 01 00 68 EA 01 00 16 EA 01 00 48 EA 01 00 32 EA 01 00 ▓Ω☺.óΩ☺.VΩ☺.~Ω☺.hΩ☺.▬Ω☺.HΩ☺.2Ω☺. 000003C0 D8 E9 01 00 FA E9 01 00 E6 E9 01 00 8E E9 01 00 C0 E9 01 00 A8 E9 01 00 16 EC 01 00 2A EC 01 00 ╪Θ☺.·Θ☺.µΘ☺.ÄΘ☺.└Θ☺.¿Θ☺.▬∞☺.*∞☺. 000003E0 F6 EC 01 00 B0 E8 01 00 A4 E8 01 00 94 E8 01 00 88 E8 01 00 7A E8 01 00 6A E8 01 00 5C E8 01 00 ÷∞☺.░Φ☺.ñΦ☺.öΦ☺.êΦ☺.zΦ☺.jΦ☺.\Φ☺. 00000400 46 E8 01 00 3A E8 01 00 2A E8 01 00 00 E8 01 00 EE E7 01 00 DE E7 01 00 D2 E7 01 00 B8 E7 01 00 FΦ☺.:Φ☺.*Φ☺..Φ☺.ετ☺.▐τ☺.╥τ☺.╕τ☺. 00000420 A8 E7 01 00 9A E7 01 00 54 E9 01 00 44 E9 01 00 30 E9 01 00 1E E9 01 00 0C E9 01 00 FA E8 01 00 ¿τ☺.Üτ☺.TΘ☺.DΘ☺.0Θ☺.▲Θ☺.♀Θ☺.·Φ☺. 00000440 EE E8 01 00 E2 E8 01 00 12 E8 01 00 1A EB 01 00 00 00 00 00 74 F5 01 00 60 F5 01 00 44 F5 01 00 εΦ☺.ΓΦ☺.↕Φ☺.→δ☺.....t⌡☺.`⌡☺.D⌡☺. 00000460 00 00 00 00 94 F1 01 00 EE F1 01 00 FA F1 01 00 1A F2 01 00 28 F2 01 00 38 F2 01 00 52 F2 01 00 ....ö±☺.ε±☺.·±☺.→≥☺.(≥☺.8≥☺.R≥☺. 00000480 66 F2 01 00 7A F2 01 00 94 F2 01 00 AC F2 01 00 C6 F2 01 00 D6 F2 01 00 F0 F2 01 00 0C F3 01 00 f≥☺.z≥☺.ö≥☺.¼≥☺.╞≥☺.╓≥☺.≡≥☺.♀≤☺. 000004A0 28 F3 01 00 3E F3 01 00 5E F3 01 00 B0 F1 01 00 D0 F1 01 00 AC F3 01 00 C0 F3 01 00 D4 F3 01 00 (≤☺.>≤☺.^≤☺.░±☺.╨±☺.¼≤☺.└≤☺.╘≤☺. 000004C0 F0 F3 01 00 0C F4 01 00 2A F4 01 00 38 F4 01 00 44 F4 01 00 60 F4 01 00 78 F4 01 00 8A F4 01 00 ≡≤☺.♀⌠☺.*⌠☺.8⌠☺.D⌠☺.`⌠☺.x⌠☺.è⌠☺. 000004E0 9A F4 01 00 B2 F4 01 00 D4 F4 01 00 EE F4 01 00 08 F5 01 00 20 F5 01 00 7C F1 01 00 8E F3 01 00 Ü⌠☺.▓⌠☺.╘⌠☺.ε⌠☺.◘⌡☺. ⌡☺.|±☺.Ä≤☺. 00000500 72 F3 01 00 C2 EF 01 00 52 F1 01 00 44 F1 01 00 2C F1 01 00 12 F1 01 00 F2 F0 01 00 DC F0 01 00 r≤☺.┬∩☺.R±☺.D±☺.,±☺.↕±☺.≥≡☺.▄≡☺. 00000520 CE F0 01 00 B8 F0 01 00 A6 F0 01 00 8E F0 01 00 74 F0 01 00 60 F0 01 00 50 F0 01 00 3E F0 01 00 ╬≡☺.╕≡☺.ª≡☺.Ä≡☺.t≡☺.`≡☺.P≡☺.>≡☺. 00000540 1E F0 01 00 0A F0 01 00 EC EF 01 00 DC EF 01 00 68 F1 01 00 AC EF 01 00 94 EF 01 00 86 EF 01 00 ▲≡☺.◙≡☺.∞∩☺.▄∩☺.h±☺.¼∩☺.ö∩☺.å∩☺. 00000560 6A EF 01 00 58 EF 01 00 4A EF 01 00 3C EF 01 00 32 EF 01 00 1E EF 01 00 12 EF 01 00 02 EF 01 00 j∩☺.X∩☺.J∩☺.<∩☺.2∩☺.▲∩☺.↕∩☺.☻∩☺. 00000580 E2 EE 01 00 CA EE 01 00 AE EE 01 00 94 EE 01 00 7A EE 01 00 66 EE 01 00 56 EE 01 00 36 EE 01 00 Γε☺.╩ε☺.«ε☺.öε☺.zε☺.fε☺.Vε☺.6ε☺. 000005A0 1E EE 01 00 FE ED 01 00 DE ED 01 00 C6 ED 01 00 AA ED 01 00 92 ED 01 00 5C F9 01 00 7C F9 01 00 ▲ε☺.■φ☺.▐φ☺.╞φ☺.¬φ☺.Æφ☺.\∙☺.|∙☺. 000005C0 9C F9 01 00 BC F9 01 00 DC F9 01 00 EC F9 01 00 FA F9 01 00 10 FA 01 00 26 FA 01 00 36 FA 01 00 £∙☺.╝∙☺.▄∙☺.∞∙☺.·∙☺.►·☺.&·☺.6·☺. 000005E0 4A FA 01 00 58 FA 01 00 6C FA 01 00 7E FA 01 00 94 FA 01 00 A0 FA 01 00 AE FA 01 00 BE FA 01 00 J·☺.X·☺.l·☺.~·☺.ö·☺.á·☺.«·☺.╛·☺. 00000600 CC FA 01 00 E6 FA 01 00 F6 FA 01 00 02 FB 01 00 16 FB 01 00 32 FB 01 00 4E FB 01 00 66 FB 01 00 ╠·☺.µ·☺.÷·☺.☻√☺.▬√☺.2√☺.N√☺.f√☺. 00000620 76 FB 01 00 8C FB 01 00 9C FB 01 00 AA FB 01 00 C2 FB 01 00 D8 FB 01 00 E8 FB 01 00 FE FB 01 00 v√☺.î√☺.£√☺.¬√☺.┬√☺.╪√☺.Φ√☺.■√☺. 00000640 10 FC 01 00 28 FC 01 00 46 FC 01 00 7A ED 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ►ⁿ☺.(ⁿ☺.Fⁿ☺.zφ☺................. 00000660 00 00 00 00 3E 46 89 32 00 00 00 00 04 00 00 00 10 01 00 00 00 00 00 00 00 82 02 00 00 00 00 00 ....>Fë2....♦...►☺.......é☻..... 00000680 3E 46 89 32 00 00 00 00 04 00 00 00 10 01 00 00 00 00 00 00 FC 29 05 00 00 00 00 00 3E 46 89 32 >Fë2....♦...►☺......ⁿ)♣.....>Fë2 000006A0 00 00 00 00 03 00 00 00 50 1D 00 00 00 00 00 00 0C 2B 05 00 00 00 00 00 3E 46 89 32 00 00 00 00 ....♥...P↔......♀+♣.....>Fë2.... 000006C0 06 00 00 00 00 00 00 00 00 00 00 00 5C 48 05 00 00 00 00 00 3E 46 89 32 00 00 00 00 02 00 00 00 ♠...........\H♣.....>Fë2....☻... 000006E0 50 38 02 00 00 00 00 00 C0 F5 B6 FF 3B 00 00 00 48 00 4F 00 4D 00 45 00 50 00 41 00 54 00 48 00 P8☻.....└⌡╢ ;...H.O.M.E.P.A.T.H. 00000700 00 00 00 00 48 00 4F 00 4D 00 45 00 53 00 48 00 41 00 52 00 45 00 00 00 48 00 4F 00 4D 00 45 00 ....H.O.M.E.S.H.A.R.E...H.O.M.E. 00000720 44 00 52 00 49 00 56 00 45 00 00 00 5A 00 3A 00 00 00 00 00 00 00 00 00 5C 00 00 00 53 00 79 00 D.R.I.V.E...Z.:.........\...S.y. 00000740 73 00 74 00 65 00 6D 00 5C 00 43 00 75 00 72 00 72 00 65 00 6E 00 74 00 43 00 6F 00 6E 00 74 00 s.t.e.m.\.C.u.r.r.e.n.t.C.o.n.t. 00000760 72 00 6F 00 6C 00 53 00 65 00 74 00 5C 00 43 00 6F 00 6E 00 74 00 72 00 6F 00 6C 00 5C 00 53 00 r.o.l.S.e.t.\.C.o.n.t.r.o.l.\.S. 00000780 65 00 73 00 73 00 69 00 6F 00 6E 00 20 00 4D 00 61 00 6E 00 61 00 67 00 65 00 72 00 5C 00 45 00 e.s.s.i.o.n. .M.a.n.a.g.e.r.\.E. 000007A0 6E 00 76 00 69 00 72 00 6F 00 6E 00 6D 00 65 00 6E 00 74 00 00 00 00 00 57 6C 78 53 63 72 65 65 n.v.i.r.o.n.m.e.n.t.....WlxScree 000007C0 6E 53 61 76 65 72 4E 6F 74 69 66 79 00 00 00 00 57 6C 78 53 74 61 72 74 41 70 70 6C 69 63 61 74 nSaverNotify....WlxStartApplicat 000007E0 69 6F 6E 00 57 6C 78 53 68 75 74 64 6F 77 6E 00 57 6C 78 4C 6F 67 6F 66 66 00 00 00 57 6C 78 49 ion.WlxShutdown.WlxLogoff...WlxI 00000800 73 4C 6F 67 6F 66 66 4F 6B 00 00 00 57 6C 78 49 73 4C 6F 63 6B 4F 6B 00 57 6C 78 57 6B 73 74 61 sLogoffOk...WlxIsLockOk.WlxWksta 00000820 4C 6F 63 6B 65 64 53 41 53 00 00 00 57 6C 78 44 69 73 70 6C 61 79 4C 6F 63 6B 65 64 4E 6F 74 69 LockedSAS...WlxDisplayLockedNoti 00000840 63 65 00 00 57 6C 78 4C 6F 67 67 65 64 4F 6E 53 41 53 00 00 57 6C 78 41 63 74 69 76 61 74 65 55 ce..WlxLoggedOnSAS..WlxActivateU 00000860 73 65 72 53 68 65 6C 6C 00 00 00 00 57 6C 78 4C 6F 67 67 65 64 4F 75 74 53 41 53 00 57 6C 78 44 serShell....WlxLoggedOutSAS.WlxD 00000880 69 73 70 6C 61 79 53 41 53 4E 6F 74 69 63 65 00 57 6C 78 49 6E 69 74 69 61 6C 69 7A 65 00 00 00 isplaySASNotice.WlxInitialize... 000008A0 57 6C 78 4E 65 67 6F 74 69 61 74 65 00 00 00 00 57 00 49 00 4E 00 4C 00 4F 00 47 00 4F 00 4E 00 WlxNegotiate....W.I.N.L.O.G.O.N. 000008C0 00 00 00 00 47 00 69 00 6E 00 61 00 44 00 6C 00 6C 00 00 00 6D 00 73 00 67 00 69 00 6E 00 61 00 ....G.i.n.a.D.l.l...m.s.g.i.n.a. 000008E0 2E 00 64 00 6C 00 6C 00 00 00 00 00 57 4E 65 74 43 6C 6F 73 65 45 6E 75 6D 00 00 00 57 4E 65 74 ..d.l.l.....WNetCloseEnum...WNet 00000900 45 6E 75 6D 52 65 73 6F 75 72 63 65 57 00 00 00 57 4E 65 74 4F 70 65 6E 45 6E 75 6D 57 00 00 00 EnumResourceW...WNetOpenEnumW... 00000920 57 4E 65 74 43 6C 65 61 72 43 6F 6E 6E 65 63 74 69 6F 6E 73 00 00 00 00 6D 00 70 00 72 00 2E 00 WNetClearConnections....m.p.r... 00000940 64 00 6C 00 6C 00 00 00 52 61 73 48 61 6E 67 55 70 57 00 00 52 61 73 45 6E 75 6D 43 6F 6E 6E 65 d.l.l...RasHangUpW..RasEnumConne 00000960 63 74 69 6F 6E 73 57 00 72 00 61 00 73 00 61 00 70 00 69 00 33 00 32 00 2E 00 64 00 6C 00 6C 00 ctionsW.r.a.s.a.p.i.3.2...d.l.l. 00000980 00 00 00 00 52 00 41 00 53 00 4D 00 41 00 4E 00 00 00 00 00 57 00 49 00 4E 00 4C 00 4F 00 47 00 ....R.A.S.M.A.N.....W.I.N.L.O.G. 000009A0 4F 00 4E 00 00 00 00 00 4B 00 65 00 65 00 70 00 52 00 61 00 73 00 43 00 6F 00 6E 00 6E 00 65 00 O.N.....K.e.e.p.R.a.s.C.o.n.n.e. 000009C0 63 00 74 00 69 00 6F 00 6E 00 73 00 00 00 00 00 4E 65 74 4D 65 73 73 61 67 65 4E 61 6D 65 44 65 c.t.i.o.n.s.....NetMessageNameDe 000009E0 6C 00 00 00 4E 65 74 4D 65 73 73 61 67 65 4E 61 6D 65 45 6E 75 6D 00 00 6E 00 65 00 74 00 61 00 l...NetMessageNameEnum..n.e.t.a. 00000A00 70 00 69 00 33 00 32 00 2E 00 64 00 6C 00 6C 00 00 00 00 00 6E 00 65 00 74 00 61 00 70 00 69 00 p.i.3.2...d.l.l.....n.e.t.a.p.i. 00000A20 33 00 32 00 2E 00 64 00 6C 00 6C 00 00 00 00 00 57 00 6C 00 4D 00 70 00 72 00 4E 00 6F 00 74 00 3.2...d.l.l.....W.l.M.p.r.N.o.t. 00000A40 69 00 66 00 79 00 50 00 72 00 6F 00 76 00 69 00 64 00 65 00 72 00 00 00 57 00 6C 00 4D 00 70 00 i.f.y.P.r.o.v.i.d.e.r...W.l.M.p. 00000A60 72 00 4E 00 6F 00 74 00 69 00 66 00 79 00 50 00 61 00 73 00 73 00 54 00 68 00 72 00 6F 00 75 00 r.N.o.t.i.f.y.P.a.s.s.T.h.r.o.u. 00000A80 67 00 68 00 00 00 00 00 57 00 6C 00 4D 00 70 00 72 00 4E 00 6F 00 74 00 69 00 66 00 79 00 43 00 g.h.....W.l.M.p.r.N.o.t.i.f.y.C. 00000AA0 68 00 61 00 6E 00 67 00 65 00 49 00 6E 00 66 00 6F 00 00 00 57 00 6C 00 4D 00 70 00 72 00 4E 00 h.a.n.g.e.I.n.f.o...W.l.M.p.r.N. 00000AC0 6F 00 74 00 69 00 66 00 79 00 4C 00 6F 00 67 00 6F 00 6E 00 49 00 64 00 00 00 00 00 57 00 6C 00 o.t.i.f.y.L.o.g.o.n.I.d.....W.l. 00000AE0 4D 00 70 00 72 00 4E 00 6F 00 74 00 69 00 66 00 79 00 4F 00 6C 00 64 00 50 00 61 00 73 00 73 00 M.p.r.N.o.t.i.f.y.O.l.d.P.a.s.s. 00000B00 77 00 6F 00 72 00 64 00 00 00 00 00 57 00 6C 00 4D 00 70 00 72 00 4E 00 6F 00 74 00 69 00 66 00 w.o.r.d.....W.l.M.p.r.N.o.t.i.f. 00000B20 79 00 4F 00 6C 00 64 00 50 00 61 00 73 00 73 00 77 00 6F 00 72 00 64 00 56 00 61 00 6C 00 69 00 y.O.l.d.P.a.s.s.w.o.r.d.V.a.l.i. 00000B40 64 00 00 00 57 00 6C 00 4D 00 70 00 72 00 4E 00 6F 00 74 00 69 00 66 00 79 00 50 00 61 00 73 00 d...W.l.M.p.r.N.o.t.i.f.y.P.a.s. 00000B60 73 00 77 00 6F 00 72 00 64 00 00 00 57 00 6C 00 4D 00 70 00 72 00 4E 00 6F 00 74 00 69 00 66 00 s.w.o.r.d...W.l.M.p.r.N.o.t.i.f. 00000B80 79 00 44 00 6F 00 6D 00 61 00 69 00 6E 00 00 00 57 00 6C 00 4D 00 70 00 72 00 4E 00 6F 00 74 00 y.D.o.m.a.i.n...W.l.M.p.r.N.o.t. 00000BA0 69 00 66 00 79 00 55 00 73 00 65 00 72 00 4E 00 61 00 6D 00 65 00 00 00 57 00 6C 00 4D 00 70 00 i.f.y.U.s.e.r.N.a.m.e...W.l.M.p. 00000BC0 72 00 4E 00 6F 00 74 00 69 00 66 00 79 00 4C 00 6F 00 67 00 6F 00 6E 00 46 00 6C 00 61 00 67 00 r.N.o.t.i.f.y.L.o.g.o.n.F.l.a.g. 00000BE0 00 00 00 00 57 00 6C 00 4D 00 70 00 72 00 4E 00 6F 00 74 00 69 00 66 00 79 00 57 00 69 00 6E 00 ....W.l.M.p.r.N.o.t.i.f.y.W.i.n. 00000C00 6C 00 6F 00 67 00 6F 00 6E 00 57 00 69 00 6E 00 64 00 6F 00 77 00 00 00 57 00 6C 00 4D 00 70 00 l.o.g.o.n.W.i.n.d.o.w...W.l.M.p. 00000C20 72 00 4E 00 6F 00 74 00 69 00 66 00 79 00 53 00 74 00 61 00 74 00 69 00 6F 00 6E 00 48 00 61 00 r.N.o.t.i.f.y.S.t.a.t.i.o.n.H.a. 00000C40 6E 00 64 00 6C 00 65 00 00 00 00 00 57 00 6C 00 4D 00 70 00 72 00 4E 00 6F 00 74 00 69 00 66 00 n.d.l.e.....W.l.M.p.r.N.o.t.i.f. 00000C60 79 00 53 00 74 00 61 00 74 00 69 00 6F 00 6E 00 4E 00 61 00 6D 00 65 00 00 00 00 00 57 00 69 00 y.S.t.a.t.i.o.n.N.a.m.e.....W.i. 00000C80 6E 00 53 00 74 00 61 00 30 00 00 00 57 00 69 00 6E 00 53 00 74 00 61 00 30 00 5C 00 57 00 69 00 n.S.t.a.0...W.i.n.S.t.a.0.\.W.i. 00000CA0 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 00 00 6E 00 74 00 73 00 64 00 20 00 2D 00 64 00 20 00 n.l.o.g.o.n.....n.t.s.d. .-.d. . 00000CC0 25 00 73 00 25 00 73 00 00 00 00 00 2D 00 67 00 20 00 2D 00 47 00 20 00 00 00 00 00 57 00 49 00 %.s.%.s.....-.g. .-.G. .....W.I. 00000CE0 4E 00 4C 00 4F 00 47 00 4F 00 4E 00 00 00 00 00 6D 00 70 00 6E 00 6F 00 74 00 69 00 66 00 79 00 N.L.O.G.O.N.....m.p.n.o.t.i.f.y. 00000D00 00 00 00 00 6D 00 70 00 6E 00 6F 00 74 00 69 00 66 00 79 00 2E 00 65 00 78 00 65 00 00 00 00 00 ....m.p.n.o.t.i.f.y...e.x.e..... 00000D20 4C 00 61 00 6E 00 6D 00 61 00 6E 00 57 00 6F 00 72 00 6B 00 73 00 74 00 61 00 74 00 69 00 6F 00 L.a.n.m.a.n.W.o.r.k.s.t.a.t.i.o. 00000D40 6E 00 00 00 50 00 72 00 6F 00 76 00 69 00 64 00 65 00 72 00 4F 00 72 00 64 00 65 00 72 00 00 00 n...P.r.o.v.i.d.e.r.O.r.d.e.r... 00000D60 73 00 79 00 73 00 74 00 65 00 6D 00 5C 00 43 00 75 00 72 00 72 00 65 00 6E 00 74 00 43 00 6F 00 s.y.s.t.e.m.\.C.u.r.r.e.n.t.C.o. 00000D80 6E 00 74 00 72 00 6F 00 6C 00 53 00 65 00 74 00 5C 00 43 00 6F 00 6E 00 74 00 72 00 6F 00 6C 00 n.t.r.o.l.S.e.t.\.C.o.n.t.r.o.l. 00000DA0 5C 00 4E 00 65 00 74 00 77 00 6F 00 72 00 6B 00 50 00 72 00 6F 00 76 00 69 00 64 00 65 00 72 00 \.N.e.t.w.o.r.k.P.r.o.v.i.d.e.r. 00000DC0 5C 00 4F 00 72 00 64 00 65 00 72 00 00 00 00 00 44 65 66 61 75 6C 74 53 68 65 6C 6C 00 00 00 00 \.O.r.d.e.r.....DefaultShell.... 00000DE0 5C 52 65 67 69 73 74 72 79 5C 4D 61 63 68 69 6E 65 5C 53 6F 66 74 77 61 72 65 5C 4D 69 63 72 6F \Registry\Machine\Software\Micro 00000E00 73 6F 66 74 5C 57 69 6E 64 6F 77 73 20 4E 54 5C 43 75 72 72 65 6E 74 56 65 72 73 69 6F 6E 5C 57 soft\Windows NT\CurrentVersion\W 00000E20 69 6E 6C 6F 67 6F 6E 00 53 68 65 6C 6C 00 00 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 4C 61 6E inlogon.Shell...SYS:Services\Lan 00000E40 6D 61 6E 57 6F 72 6B 73 74 61 74 69 6F 6E 5C 4C 69 6E 6B 61 67 65 00 00 57 6F 72 6B 73 74 61 74 manWorkstation\Linkage..Workstat 00000E60 69 6F 6E 4C 69 6E 6B 61 67 65 00 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 4E 45 33 32 30 30 30 ionLinkage..SYS:Services\NE32000 00000E80 31 5C 50 61 72 61 6D 65 74 65 72 73 00 00 00 00 4E 45 33 32 30 30 30 31 00 00 00 00 53 59 53 3A 1\Parameters....NE320001....SYS: 00000EA0 53 65 72 76 69 63 65 73 5C 4C 61 6E 63 65 30 31 5C 50 61 72 61 6D 65 74 65 72 73 00 4C 61 6E 63 Services\Lance01\Parameters.Lanc 00000EC0 65 30 31 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 58 6E 73 5C 50 61 72 61 6D 65 74 65 72 73 00 e01.SYS:Services\Xns\Parameters. 00000EE0 55 42 41 64 61 70 74 65 72 00 00 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 45 6C 6E 6B 4D 63 30 UBAdapter...SYS:Services\ElnkMc0 00000F00 31 5C 50 61 72 61 6D 65 74 65 72 73 00 00 00 00 45 6C 6E 6B 4D 63 30 31 00 00 00 00 53 59 53 3A 1\Parameters....ElnkMc01....SYS: 00000F20 53 65 72 76 69 63 65 73 5C 45 6C 6E 6B 69 69 30 31 5C 50 61 72 61 6D 65 74 65 72 73 00 00 00 00 Services\Elnkii01\Parameters.... 00000F40 45 6C 6E 6B 69 69 30 31 00 00 00 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 4E 65 74 42 69 6F 73 Elnkii01....SYS:Services\NetBios 00000F60 5C 4C 69 6E 6B 61 67 65 00 00 00 00 4E 65 74 42 69 6F 73 4C 69 6E 6B 61 67 65 00 00 53 59 53 3A \Linkage....NetBiosLinkage..SYS: 00000F80 53 65 72 76 69 63 65 73 5C 4E 65 74 42 69 6F 73 49 6E 66 6F 72 6D 61 74 69 6F 6E 5C 50 61 72 61 Services\NetBiosInformation\Para 00000FA0 6D 65 74 65 72 73 00 00 4E 65 74 42 69 6F 73 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 4E 62 66 meters..NetBios.SYS:Services\Nbf 00000FC0 5C 4C 69 6E 6B 61 67 65 00 00 00 00 4E 62 66 4C 69 6E 6B 61 67 65 00 00 53 59 53 3A 53 65 72 76 \Linkage....NbfLinkage..SYS:Serv 00000FE0 69 63 65 73 5C 4E 62 66 5C 50 61 72 61 6D 65 74 65 72 73 00 4E 62 66 00 53 59 53 3A 53 65 72 76 ices\Nbf\Parameters.Nbf.SYS:Serv 00001000 69 63 65 73 5C 4C 61 6E 6D 61 6E 53 65 72 76 65 72 5C 4C 69 6E 6B 61 67 65 00 00 00 53 65 72 76 ices\LanmanServer\Linkage...Serv 00001020 65 72 4C 69 6E 6B 61 67 65 00 00 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 4C 61 6E 6D 61 6E 53 erLinkage...SYS:Services\LanmanS 00001040 65 72 76 65 72 5C 53 68 61 72 65 73 00 00 00 00 53 65 72 76 65 72 53 68 61 72 65 73 00 00 00 00 erver\Shares....ServerShares.... 00001060 53 59 53 3A 53 65 72 76 69 63 65 73 5C 4C 61 6E 6D 61 6E 53 65 72 76 65 72 5C 50 61 72 61 6D 65 SYS:Services\LanmanServer\Parame 00001080 74 65 72 73 00 00 00 00 53 65 72 76 65 72 00 00 55 53 52 3A 45 6E 76 69 72 6F 6E 6D 65 6E 74 00 ters....Server..USR:Environment. 000010A0 45 6E 76 69 72 6F 6E 6D 65 6E 74 00 55 53 52 3A 53 6F 66 74 77 61 72 65 5C 4D 69 63 72 6F 73 6F Environment.USR:Software\Microso 000010C0 66 74 5C 57 69 6E 64 6F 77 73 20 4E 54 5C 43 75 72 72 65 6E 74 56 65 72 73 69 6F 6E 5C 50 72 6F ft\Windows NT\CurrentVersion\Pro 000010E0 67 72 61 6D 20 4D 61 6E 61 67 65 72 5C 53 65 74 74 69 6E 67 73 00 00 00 50 72 6F 67 72 61 6D 4D gram Manager\Settings...ProgramM 00001100 61 6E 61 67 65 72 00 00 5C 52 65 67 69 73 74 72 79 5C 4D 61 63 68 69 6E 65 5C 53 6F 66 74 77 61 anager..\Registry\Machine\Softwa 00001120 72 65 5C 50 72 6F 67 72 61 6D 20 47 72 6F 75 70 73 00 00 00 43 6F 6D 6D 6F 6E 50 72 6F 67 72 61 re\Program Groups...CommonProgra 00001140 6D 47 72 6F 75 70 73 00 55 53 52 3A 55 4E 49 43 4F 44 45 20 50 72 6F 67 72 61 6D 20 47 72 6F 75 mGroups.USR:UNICODE Program Grou 00001160 70 73 00 00 50 72 6F 67 72 61 6D 47 72 6F 75 70 73 00 00 00 4F 70 74 69 6F 6E 61 6C 00 00 00 00 ps..ProgramGroups...Optional.... 00001180 53 59 53 3A 43 6F 6E 74 72 6F 6C 5C 53 65 73 73 69 6F 6E 20 4D 61 6E 61 67 65 72 5C 53 75 62 53 SYS:Control\Session Manager\SubS 000011A0 79 73 74 65 6D 73 00 00 53 75 62 53 79 73 74 65 6D 73 00 00 45 78 65 63 75 74 65 00 49 6E 69 74 ystems..SubSystems..Execute.Init 000011C0 69 61 6C 43 6F 6D 6D 61 6E 64 00 00 53 59 53 3A 43 6F 6E 74 72 6F 6C 5C 53 65 73 73 69 6F 6E 20 ialCommand..SYS:Control\Session 000011E0 4D 61 6E 61 67 65 72 5C 4D 65 6D 6F 72 79 20 4D 61 6E 61 67 65 6D 65 6E 74 00 00 00 50 61 67 69 Manager\Memory Management...Pagi 00001200 6E 67 46 69 6C 65 73 00 53 59 53 3A 43 6F 6E 74 72 6F 6C 5C 57 4F 57 00 57 4F 57 00 52 65 73 6F ngFiles.SYS:Control\WOW.WOW.Reso 00001220 75 72 63 65 54 69 6D 65 6F 75 74 00 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 54 69 6D 65 6F urceTimeout.CriticalSectionTimeo 00001240 75 74 00 00 50 72 6F 74 65 63 74 69 6F 6E 4D 6F 64 65 00 00 47 6C 6F 62 61 6C 46 6C 61 67 00 00 ut..ProtectionMode..GlobalFlag.. 00001260 53 59 53 3A 43 6F 6E 74 72 6F 6C 5C 53 65 73 73 69 6F 6E 20 4D 61 6E 61 67 65 72 00 47 6C 6F 62 SYS:Control\Session Manager.Glob 00001280 61 6C 46 6C 61 67 73 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 4E 65 74 4C 6F 67 6F 6E 5C 50 61 alFlags.SYS:Services\NetLogon\Pa 000012A0 72 61 6D 65 74 65 72 73 00 00 00 00 44 69 73 61 62 6C 65 50 61 73 73 77 6F 72 64 43 68 61 6E 67 rameters....DisablePasswordChang 000012C0 65 00 00 00 43 75 72 72 65 6E 74 55 73 65 72 00 53 59 53 3A 53 65 72 76 69 63 65 73 00 00 00 00 e...CurrentUser.SYS:Services.... 000012E0 55 73 65 72 4E 61 6D 65 00 00 00 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C UserName....SYS:Services\Serial\ 00001300 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 6C 39 00 00 53 65 72 69 61 6C 39 00 53 59 53 3A Parameters\Serial9..Serial9.SYS: 00001320 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 Services\Serial\Parameters\Seria 00001340 6C 38 00 00 53 65 72 69 61 6C 38 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C l8..Serial8.SYS:Services\Serial\ 00001360 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 6C 37 00 00 53 65 72 69 61 6C 37 00 53 59 53 3A Parameters\Serial7..Serial7.SYS: 00001380 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 Services\Serial\Parameters\Seria 000013A0 6C 36 00 00 53 65 72 69 61 6C 36 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C l6..Serial6.SYS:Services\Serial\ 000013C0 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 6C 35 00 00 53 65 72 69 61 6C 35 00 53 59 53 3A Parameters\Serial5..Serial5.SYS: 000013E0 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 Services\Serial\Parameters\Seria 00001400 6C 34 00 00 53 65 72 69 61 6C 34 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C l4..Serial4.SYS:Services\Serial\ 00001420 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 6C 33 00 00 53 65 72 69 61 6C 33 00 53 59 53 3A Parameters\Serial3..Serial3.SYS: 00001440 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 Services\Serial\Parameters\Seria 00001460 6C 32 00 00 53 65 72 69 61 6C 32 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C l2..Serial2.SYS:Services\Serial\ 00001480 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 6C 31 00 00 53 65 72 69 61 6C 31 00 53 59 53 3A Parameters\Serial1..Serial1.SYS: 000014A0 53 65 72 76 69 63 65 73 5C 53 65 72 69 61 6C 5C 50 61 72 61 6D 65 74 65 72 73 5C 53 65 72 69 61 Services\Serial\Parameters\Seria 000014C0 6C 30 00 00 53 65 72 69 61 6C 30 00 53 59 53 3A 43 6F 6E 74 72 6F 6C 5C 53 65 73 73 69 6F 6E 20 l0..Serial0.SYS:Control\Session 000014E0 4D 61 6E 61 67 65 72 5C 44 4F 53 20 44 65 76 69 63 65 73 00 44 6F 73 44 65 76 69 63 65 73 00 00 Manager\DOS Devices.DosDevices.. 00001500 49 6E 73 65 72 74 53 63 72 69 70 74 00 00 00 00 54 69 6D 65 5A 6F 6E 65 00 00 00 00 50 61 73 73 InsertScript....TimeZone....Pass 00001520 77 6F 72 64 00 00 00 00 43 6F 6D 70 75 74 65 72 4E 61 6D 65 00 00 00 00 53 59 53 3A 43 6F 6E 74 word....ComputerName....SYS:Cont 00001540 72 6F 6C 5C 43 6F 6D 70 75 74 65 72 4E 61 6D 65 5C 43 6F 6D 70 75 74 65 72 4E 61 6D 65 00 00 00 rol\ComputerName\ComputerName... 00001560 4D 61 63 68 69 6E 65 4E 61 6D 65 00 41 63 63 6F 75 6E 74 44 6F 6D 61 69 6E 49 64 00 44 6F 6D 61 MachineName.AccountDomainId.Doma 00001580 69 6E 49 64 00 00 00 00 53 59 53 3A 53 65 72 76 69 63 65 73 5C 4C 61 6E 6D 61 6E 57 6F 72 6B 73 inId....SYS:Services\LanmanWorks 000015A0 74 61 74 69 6F 6E 5C 50 61 72 61 6D 65 74 65 72 73 00 00 00 44 6F 6D 61 69 6E 00 00 53 59 53 3A tation\Parameters...Domain..SYS: 000015C0 43 6F 6E 74 72 6F 6C 5C 50 72 6F 64 75 63 74 4F 70 74 69 6F 6E 73 00 00 50 72 6F 64 75 63 74 54 Control\ProductOptions..ProductT 000015E0 79 70 65 00 45 6E 61 62 6C 65 64 44 72 69 76 65 72 73 00 00 44 69 73 61 62 6C 65 64 44 72 69 76 ype.EnabledDrivers..DisabledDriv 00001600 65 72 73 00 4D 61 63 68 69 6E 65 54 79 70 65 00 57 69 6E 6C 6F 67 6F 6E 3A 20 25 73 28 25 75 29 ers.MachineType.Winlogon: %s(%u) 00001620 00 00 00 00 2F 2F 00 00 57 72 69 74 65 50 72 69 76 61 74 65 50 72 6F 66 69 6C 65 53 74 72 69 6E ....//..WritePrivateProfileStrin 00001640 67 28 20 25 73 2C 20 25 73 2C 20 25 73 2C 20 25 73 20 29 20 2D 20 66 61 69 6C 65 64 20 28 72 63 g( %s, %s, %s, %s ) - failed (rc 00001660 20 3D 3D 20 25 75 29 0A 00 00 00 00 77 69 6E 2E 69 6E 69 00 52 45 47 5F 44 57 4F 52 44 20 00 00 == %u)◙....win.ini.REG_DWORD .. 00001680 4E 74 4F 70 65 6E 4B 65 79 28 20 25 73 20 29 20 66 61 69 6C 65 64 20 28 53 74 61 74 75 73 20 3D NtOpenKey( %s ) failed (Status = 000016A0 3D 20 25 6C 78 29 0A 00 5C 52 65 67 69 73 74 72 79 5C 4D 61 63 68 69 6E 65 5C 53 79 73 74 65 6D = %lx)◙.\Registry\Machine\System 000016C0 5C 43 75 72 72 65 6E 74 43 6F 6E 74 72 6F 6C 53 65 74 5C 00 53 59 53 3A 00 00 00 00 5C 52 65 67 \CurrentControlSet\.SYS:....\Reg 000016E0 69 73 74 72 79 5C 55 73 65 72 5C 2E 44 65 66 61 75 6C 74 5C 00 00 00 00 55 53 52 3A 00 00 00 00 istry\User\.Default\....USR:.... 00001700 4E 74 43 72 65 61 74 65 4B 65 79 28 20 25 73 20 29 20 66 61 69 6C 65 64 20 28 53 74 61 74 75 73 NtCreateKey( %s ) failed (Status 00001720 20 3D 3D 20 25 6C 78 29 0A 00 00 00 20 2D 20 45 78 70 65 63 74 69 6E 67 20 4E 41 4D 45 3D 56 41 == %lx)◙... - Expecting NAME=VA 00001740 4C 55 45 00 2D 66 20 00 31 00 00 00 4D 69 73 73 69 6E 67 20 27 22 27 20 61 74 20 65 6E 64 20 6F LUE.-f .1...Missing '"' at end o 00001760 66 20 4D 55 4C 54 49 5F 53 5A 20 73 74 72 69 6E 67 00 00 00 45 78 70 65 63 74 65 64 20 27 22 27 f MULTI_SZ string...Expected '"' 00001780 20 74 6F 20 73 74 61 72 74 20 4D 55 4C 54 49 5F 53 5A 20 73 74 72 69 6E 67 00 00 00 2B 3D 20 6E to start MULTI_SZ string...+= n 000017A0 6F 74 20 61 6C 6C 6F 77 65 64 20 66 6F 72 20 4D 55 4C 54 49 5F 53 5A 20 76 61 6C 75 65 73 00 00 ot allowed for MULTI_SZ values.. 000017C0 45 78 70 65 63 74 69 6E 67 20 4E 41 4D 45 3D 4D 55 4C 54 49 5F 53 5A 00 52 65 67 69 73 74 72 79 Expecting NAME=MULTI_SZ.Registry 000017E0 56 61 6C 75 65 4E 61 6D 65 20 6D 75 73 74 20 62 65 20 4E 55 4C 4C 20 66 6F 72 20 4E 41 4D 45 5F ValueName must be NULL for NAME_ 00001800 45 51 5F 4D 55 4C 54 49 00 00 00 00 52 65 67 69 73 74 72 79 50 61 74 68 20 6D 75 73 74 20 62 65 EQ_MULTI....RegistryPath must be 00001820 20 73 70 65 63 69 66 69 65 64 20 66 6F 72 20 4E 41 4D 45 5F 45 51 5F 4D 55 4C 54 49 00 00 00 00 specified for NAME_EQ_MULTI.... 00001840 53 74 61 72 74 75 70 00 55 4E 49 43 4F 44 45 20 4F 72 64 65 72 00 00 00 25 64 00 00 47 72 6F 75 Startup.UNICODE Order...%d..Grou 00001860 70 25 75 00 55 6E 61 62 6C 65 20 74 6F 20 6F 70 65 6E 20 6F 72 20 61 63 63 65 73 73 20 67 72 6F p%u.Unable to open or access gro 00001880 75 70 20 66 69 6C 65 20 2D 20 25 73 00 00 00 00 45 78 70 65 63 74 69 6E 67 20 4E 41 4D 45 3D 56 up file - %s....Expecting NAME=V 000018A0 41 4C 55 45 00 00 00 00 55 53 52 3A 53 6F 66 74 77 61 72 65 5C 4D 69 63 72 6F 73 6F 66 74 5C 57 ALUE....USR:Software\Microsoft\W 000018C0 69 6E 64 6F 77 73 20 4E 54 5C 43 75 72 72 65 6E 74 56 65 72 73 69 6F 6E 5C 50 72 6F 67 72 61 6D indows NT\CurrentVersion\Program 000018E0 20 4D 61 6E 61 67 65 72 5C 55 4E 49 43 4F 44 45 20 47 72 6F 75 70 73 00 20 00 00 00 45 72 72 6F Manager\UNICODE Groups. ...Erro 00001900 72 43 6F 6E 74 72 6F 6C 00 00 00 00 53 74 61 72 74 00 00 00 25 75 00 00 53 59 53 3A 53 65 72 76 rControl....Start...%u..SYS:Serv 00001920 69 63 65 73 5C 25 73 00 56 67 61 00 55 6E 61 62 6C 65 20 74 6F 20 6F 70 65 6E 20 69 6E 70 75 74 ices\%s.Vga.Unable to open input 00001940 20 66 69 6C 65 20 28 72 63 20 3D 3D 20 25 75 29 0A 00 00 00 72 62 00 00 53 65 72 76 65 72 4E 74 file (rc == %u)◙...rb..ServerNt 00001960 00 00 00 00 4C 61 6E 6D 61 6E 4E 74 00 00 00 00 25 73 25 73 0D 0A 00 00 00 00 00 00 52 75 6E 4E ....LanmanNt....%s%s♪◙......RunN 00001980 65 74 44 65 74 65 63 74 00 00 00 00 45 78 74 65 6E 64 65 64 4E 65 74 53 65 74 75 70 00 00 00 00 etDetect....ExtendedNetSetup.... 000019A0 4B 65 65 70 53 63 72 69 70 74 00 00 41 75 74 6F 41 64 6D 69 6E 4C 6F 67 6F 6E 00 00 73 68 75 74 KeepScript..AutoAdminLogon..shut 000019C0 64 6F 77 6E 20 2D 72 20 2D 66 20 2D 74 20 30 0D 0A 00 00 00 65 72 61 73 65 20 25 73 20 26 26 20 down -r -f -t 0♪◙...erase %s && 000019E0 00 00 00 00 40 70 61 75 73 65 0D 0A 00 00 00 00 40 65 63 68 6F 20 50 72 65 73 73 69 6E 67 20 61 ....@pause♪◙....@echo Pressing a 00001A00 6E 79 20 6B 65 79 20 65 78 63 65 70 74 20 43 74 72 6C 2D 43 20 77 69 6C 6C 20 72 65 62 6F 6F 74 ny key except Ctrl-C will reboot 00001A20 20 74 68 65 20 6D 61 63 68 69 6E 65 2E 0D 0A 00 40 65 63 68 6F 20 52 65 61 64 79 20 74 6F 20 72 the machine.♪◙.@echo Ready to r 00001A40 65 62 6F 6F 74 20 61 6E 64 20 6C 6F 67 6F 6E 20 61 73 20 25 73 0D 0A 00 40 65 63 68 6F 20 3B 0D eboot and logon as %s♪◙.@echo ;♪ 00001A60 0A 00 00 00 61 64 64 75 73 65 72 20 25 73 20 6C 6F 63 61 6C 75 73 65 72 0D 0A 00 00 61 64 64 75 ◙...adduser %s localuser♪◙..addu 00001A80 73 65 72 20 25 73 20 25 73 0D 0A 00 20 2F 74 20 53 54 46 5F 52 55 4E 4E 45 54 44 45 54 45 43 54 ser %s %s♪◙. /t STF_RUNNETDETECT 00001AA0 20 3D 20 25 75 00 00 00 20 2F 74 20 53 54 46 5F 43 4F 4D 50 55 54 45 52 4E 41 4D 45 20 3D 20 25 = %u... /t STF_COMPUTERNAME = % 00001AC0 73 00 00 00 6E 65 74 20 6C 6F 63 61 6C 67 72 6F 75 70 20 41 64 6D 69 6E 69 73 74 72 61 74 6F 72 s...net localgroup Administrator 00001AE0 73 20 25 73 5C 25 73 20 2F 61 64 64 0D 0A 00 00 65 72 61 73 65 20 25 25 53 79 73 74 65 6D 52 6F s %s\%s /add♪◙..erase %%SystemRo 00001B00 6F 74 25 25 5C 73 79 73 74 65 6D 33 32 5C 63 6F 6E 66 69 67 5C 75 73 65 72 64 65 66 2E 2A 0D 0A ot%%\system32\config\userdef.*♪◙ 00001B20 00 00 00 00 6E 65 74 6A 6F 69 6E 0D 0A 00 00 00 69 6E 69 20 77 69 6E 6C 6F 67 6F 6E 2E 44 65 66 ....netjoin♪◙...ini winlogon.Def 00001B40 61 75 6C 74 44 6F 6D 61 69 6E 4E 61 6D 65 20 3D 20 25 73 0D 0A 00 00 00 69 6E 69 20 77 69 6E 6C aultDomainName = %s♪◙...ini winl 00001B60 6F 67 6F 6E 2E 44 65 66 61 75 6C 74 50 61 73 73 77 6F 72 64 20 3D 20 25 73 0D 0A 00 69 6E 69 20 ogon.DefaultPassword = %s♪◙.ini 00001B80 77 69 6E 6C 6F 67 6F 6E 2E 41 75 74 6F 41 64 6D 69 6E 4C 6F 67 6F 6E 20 3D 20 31 0D 0A 00 00 00 winlogon.AutoAdminLogon = 1♪◙... 00001BA0 69 6E 69 20 77 69 6E 6C 6F 67 6F 6E 2E 44 65 66 61 75 6C 74 55 73 65 72 4E 61 6D 65 20 3D 20 25 ini winlogon.DefaultUserName = % 00001BC0 73 0D 0A 00 63 6F 6E 74 72 6F 6C 20 6D 61 69 6E 2E 63 70 6C 20 2F 49 4E 53 54 41 4C 4C 3D 50 61 s♪◙.control main.cpl /INSTALL=Pa 00001BE0 63 69 66 69 63 0D 0A 00 63 6F 6E 74 72 6F 6C 20 6D 61 69 6E 2E 63 70 6C 20 2F 49 4E 53 54 41 4C cific♪◙.control main.cpl /INSTAL 00001C00 4C 3D 25 73 0D 0A 00 00 25 73 00 00 40 65 63 68 20 61 6E 64 20 77 69 6C 6C 20 6E 6F 74 20 65 78 L=%s♪◙..%s..@ech and will not ex 00001C20 65 63 75 74 65 20 61 67 61 69 6E 20 74 68 65 20 6E 65 78 74 20 74 69 6D 65 20 79 6F 75 20 62 6F ecute again the next time you bo 00001C40 6F 74 2E 20 3B 0D 0A 00 40 65 63 68 20 54 68 69 73 20 63 6F 6D 6D 61 6E 64 20 77 69 6C 6C 20 66 ot. ;♪◙.@ech This command will f 00001C60 69 6E 69 73 68 20 74 68 65 20 69 6E 69 74 69 61 6C 69 7A 61 74 69 6F 6E 20 6F 66 20 79 6F 75 72 inish the initialization of your 00001C80 20 61 63 63 6F 75 6E 74 73 20 64 61 74 61 62 61 73 65 20 3B 0D 0A 00 00 40 65 63 68 20 3B 0D 0A accounts database ;♪◙..@ech ;♪◙ 00001CA0 00 00 00 00 69 6E 69 20 77 69 6E 6C 6F 67 6F 6E 2E 53 68 65 6C 6C 20 3D 20 22 70 72 6F 67 6D 61 ....ini winlogon.Shell = "progma 00001CC0 6E 2E 65 78 65 22 0D 0A 00 00 00 00 77 62 00 00 5C 77 69 6E 6C 6F 67 6F 6E 2E 63 6D 64 00 00 00 n.exe"♪◙....wb..\winlogon.cmd... 00001CE0 53 79 73 74 65 6D 52 6F 6F 74 00 00 53 00 74 00 61 00 72 00 74 00 00 00 5F 52 65 63 00 00 00 00 SystemRoot..S.t.a.r.t..._Rec.... 00001D00 5C 72 65 67 69 73 74 72 79 2E 69 6E 69 00 00 00 53 79 73 74 65 6D 00 00 6E 65 74 00 2E 65 78 65 \registry.ini...System..net..exe 00001D20 00 00 00 00 44 65 66 61 75 6C 74 44 6F 6D 61 69 6E 4E 61 6D 65 00 00 00 44 65 66 61 75 6C 74 50 ....DefaultDomainName...DefaultP 00001D40 61 73 73 77 6F 72 64 00 44 65 66 61 75 6C 74 55 73 65 72 4E 61 6D 65 00 41 64 6D 69 6E 69 73 74 assword.DefaultUserName.Administ 00001D60 72 61 74 6F 72 00 00 00 77 69 6E 6C 6F 67 6F 6E 2E 63 6D 64 00 00 00 00 6E 6F 00 00 44 65 62 75 rator...winlogon.cmd....no..Debu 00001D80 67 53 65 72 76 65 72 43 6F 6D 6D 61 6E 64 00 00 6E 74 73 64 20 2D 70 20 2D 31 20 2D 67 20 2D 47 gServerCommand..ntsd -p -1 -g -G 00001DA0 00 00 00 00 70 72 6F 67 6D 61 6E 2E 65 78 65 00 44 65 66 61 75 6C 74 53 79 73 74 65 6D 00 00 00 ....progman.exe.DefaultSystem... 00001DC0 62 00 6F 00 6F 00 74 00 20 00 6C 00 6F 00 61 00 64 00 65 00 72 00 00 00 64 00 65 00 66 00 61 00 b.o.o.t. .l.o.a.d.e.r...d.e.f.a. 00001DE0 75 00 6C 00 74 00 00 00 63 00 3A 00 5C 00 62 00 6F 00 6F 00 74 00 2E 00 69 00 6E 00 69 00 00 00 u.l.t...c.:.\.b.o.o.t...i.n.i... 00001E00 44 00 65 00 66 00 61 00 75 00 6C 00 74 00 41 00 6C 00 74 00 65 00 72 00 6E 00 61 00 74 00 65 00 D.e.f.a.u.l.t.A.l.t.e.r.n.a.t.e. 00001E20 4F 00 53 00 00 00 00 00 62 00 6F 00 6F 00 74 00 20 00 6C 00 6F 00 61 00 64 00 65 00 72 00 00 00 O.S.....b.o.o.t. .l.o.a.d.e.r... 00001E40 64 00 65 00 66 00 61 00 75 00 6C 00 74 00 00 00 63 00 3A 00 5C 00 62 00 6F 00 6F 00 74 00 2E 00 d.e.f.a.u.l.t...c.:.\.b.o.o.t... 00001E60 69 00 6E 00 69 00 00 00 4E 74 53 65 74 56 61 6C 75 65 4B 65 79 28 20 25 77 5A 20 29 20 66 61 69 i.n.i...NtSetValueKey( %wZ ) fai 00001E80 6C 65 64 20 28 53 74 61 74 75 73 20 3D 3D 20 25 6C 78 29 0A 00 00 00 00 49 6E 76 61 6C 69 64 20 led (Status == %lx)◙....Invalid 00001EA0 64 61 74 61 20 74 79 70 65 20 3D 3D 20 25 6C 78 20 66 6F 72 20 25 73 0A 00 00 00 00 28 6E 75 6C data type == %lx for %s◙....(nul 00001EC0 6C 29 00 00 49 6E 76 61 6C 69 64 20 62 69 6E 61 72 79 20 64 61 74 61 0A 00 00 00 00 49 6E 76 61 l)..Invalid binary data◙....Inva 00001EE0 6C 69 64 20 69 6E 74 65 67 65 72 0A 00 00 00 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 lid integer◙....W.i.n.l.o.g.o.n. 00001F00 00 00 00 00 41 00 6C 00 6C 00 6F 00 63 00 61 00 74 00 65 00 43 00 44 00 52 00 6F 00 6D 00 73 00 ....A.l.l.o.c.a.t.e.C.D.R.o.m.s. 00001F20 00 00 00 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 00 00 41 00 6C 00 6C 00 6F 00 ....W.i.n.l.o.g.o.n.....A.l.l.o. 00001F40 63 00 61 00 74 00 65 00 46 00 6C 00 6F 00 70 00 70 00 69 00 65 00 73 00 00 00 00 00 5C 00 44 00 c.a.t.e.F.l.o.p.p.i.e.s.....\.D. 00001F60 65 00 76 00 69 00 63 00 65 00 00 00 5C 00 66 00 61 00 74 00 00 00 00 00 5C 00 63 00 64 00 66 00 e.v.i.c.e...\.f.a.t.....\.c.d.f. 00001F80 73 00 00 00 66 00 6C 00 6F 00 70 00 70 00 79 00 00 00 00 00 63 00 64 00 72 00 6F 00 6D 00 00 00 s...f.l.o.p.p.y.....c.d.r.o.m... 00001FA0 44 00 65 00 76 00 69 00 63 00 65 00 00 00 00 00 53 00 41 00 53 00 20 00 77 00 69 00 6E 00 64 00 D.e.v.i.c.e.....S.A.S. .w.i.n.d. 00001FC0 6F 00 77 00 20 00 63 00 6C 00 61 00 73 00 73 00 00 00 00 00 53 00 41 00 53 00 20 00 77 00 69 00 o.w. .c.l.a.s.s.....S.A.S. .w.i. 00001FE0 6E 00 64 00 6F 00 77 00 00 00 00 00 2C 00 00 00 57 00 49 00 4E 00 4C 00 4F 00 47 00 4F 00 4E 00 n.d.o.w.....,...W.I.N.L.O.G.O.N. 00002000 00 00 00 00 53 00 68 00 65 00 6C 00 6C 00 00 00 65 00 78 00 70 00 6C 00 6F 00 72 00 65 00 72 00 ....S.h.e.l.l...e.x.p.l.o.r.e.r. 00002020 2E 00 65 00 78 00 65 00 00 00 00 00 41 00 75 00 74 00 6F 00 52 00 65 00 73 00 74 00 61 00 72 00 ..e.x.e.....A.u.t.o.R.e.s.t.a.r. 00002040 74 00 53 00 68 00 65 00 6C 00 6C 00 00 00 00 00 53 00 4F 00 46 00 54 00 57 00 41 00 52 00 45 00 t.S.h.e.l.l.....S.O.F.T.W.A.R.E. 00002060 5C 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 \.M.i.c.r.o.s.o.f.t.\.W.i.n.d.o. 00002080 77 00 73 00 20 00 4E 00 54 00 5C 00 43 00 75 00 72 00 72 00 65 00 6E 00 74 00 56 00 65 00 72 00 w.s. .N.T.\.C.u.r.r.e.n.t.V.e.r. 000020A0 73 00 69 00 6F 00 6E 00 5C 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 57 00 69 00 s.i.o.n.\.W.i.n.l.o.g.o.n...W.i. 000020C0 6E 00 53 00 74 00 61 00 30 00 5C 00 44 00 65 00 66 00 61 00 75 00 6C 00 74 00 00 00 74 00 61 00 n.S.t.a.0.\.D.e.f.a.u.l.t...t.a. 000020E0 73 00 6B 00 6D 00 67 00 72 00 2E 00 65 00 78 00 65 00 00 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 s.k.m.g.r...e.x.e...W.i.n.l.o.g. 00002100 6F 00 6E 00 00 00 00 00 45 00 6E 00 61 00 62 00 6C 00 65 00 51 00 75 00 69 00 63 00 6B 00 52 00 o.n.....E.n.a.b.l.e.Q.u.i.c.k.R. 00002120 65 00 62 00 6F 00 6F 00 74 00 00 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 00 00 e.b.o.o.t...W.i.n.l.o.g.o.n..... 00002140 41 00 75 00 74 00 6F 00 41 00 64 00 6D 00 69 00 6E 00 4C 00 6F 00 67 00 6F 00 6E 00 00 00 00 00 A.u.t.o.A.d.m.i.n.L.o.g.o.n..... 00002160 57 00 49 00 4E 00 4C 00 4F 00 47 00 4F 00 4E 00 00 00 00 00 53 00 63 00 72 00 65 00 65 00 6E 00 W.I.N.L.O.G.O.N.....S.c.r.e.e.n. 00002180 53 00 61 00 76 00 65 00 72 00 47 00 72 00 61 00 63 00 65 00 50 00 65 00 72 00 69 00 6F 00 64 00 S.a.v.e.r.G.r.a.c.e.P.e.r.i.o.d. 000021A0 00 00 00 00 53 00 63 00 72 00 65 00 65 00 6E 00 2D 00 73 00 61 00 76 00 65 00 72 00 00 00 00 00 ....S.c.r.e.e.n.-.s.a.v.e.r..... 000021C0 57 00 69 00 6E 00 53 00 74 00 61 00 30 00 5C 00 53 00 63 00 72 00 65 00 65 00 6E 00 2D 00 73 00 W.i.n.S.t.a.0.\.S.c.r.e.e.n.-.s. 000021E0 61 00 76 00 65 00 72 00 00 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 00 00 53 00 63 00 a.v.e.r.....W.i.n.d.o.w.s...S.c. 00002200 72 00 65 00 65 00 6E 00 53 00 61 00 76 00 65 00 41 00 63 00 74 00 69 00 76 00 65 00 00 00 00 00 r.e.e.n.S.a.v.e.A.c.t.i.v.e..... 00002220 53 00 63 00 72 00 65 00 65 00 6E 00 53 00 61 00 76 00 65 00 72 00 49 00 73 00 53 00 65 00 63 00 S.c.r.e.e.n.S.a.v.e.r.I.s.S.e.c. 00002240 75 00 72 00 65 00 00 00 73 00 79 00 73 00 74 00 65 00 6D 00 2E 00 69 00 6E 00 69 00 00 00 00 00 u.r.e...s.y.s.t.e.m...i.n.i..... 00002260 62 00 6F 00 6F 00 74 00 00 00 00 00 53 00 43 00 52 00 4E 00 53 00 41 00 56 00 45 00 2E 00 45 00 b.o.o.t.....S.C.R.N.S.A.V.E...E. 00002280 58 00 45 00 00 00 00 00 73 00 79 00 73 00 74 00 65 00 6D 00 2E 00 69 00 6E 00 69 00 00 00 00 00 X.E.....s.y.s.t.e.m...i.n.i..... 000022A0 44 00 65 00 66 00 61 00 75 00 6C 00 74 00 00 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 D.e.f.a.u.l.t...W.i.n.l.o.g.o.n. 000022C0 00 00 00 00 57 00 69 00 6E 00 53 00 74 00 61 00 30 00 00 00 57 00 69 00 6E 00 53 00 74 00 61 00 ....W.i.n.S.t.a.0...W.i.n.S.t.a. 000022E0 30 00 00 00 57 00 49 00 4E 00 4C 00 4F 00 47 00 4F 00 4E 00 00 00 00 00 52 00 65 00 73 00 74 00 0...W.I.N.L.O.G.O.N.....R.e.s.t. 00002300 72 00 69 00 63 00 74 00 4E 00 6F 00 6E 00 49 00 6E 00 74 00 65 00 72 00 61 00 63 00 74 00 69 00 r.i.c.t.N.o.n.I.n.t.e.r.a.c.t.i. 00002320 76 00 65 00 41 00 63 00 63 00 65 00 73 00 73 00 00 00 00 00 57 00 49 00 4E 00 4C 00 4F 00 47 00 v.e.A.c.c.e.s.s.....W.I.N.L.O.G. 00002340 4F 00 4E 00 00 00 00 00 5C 00 49 00 4E 00 53 00 54 00 41 00 4C 00 4C 00 41 00 54 00 49 00 4F 00 O.N.....\.I.N.S.T.A.L.L.A.T.I.O. 00002360 4E 00 5F 00 53 00 45 00 43 00 55 00 52 00 49 00 54 00 59 00 5F 00 48 00 4F 00 4C 00 44 00 00 00 N._.S.E.C.U.R.I.T.Y._.H.O.L.D... 00002380 53 00 65 00 74 00 75 00 70 00 54 00 79 00 70 00 65 00 00 00 5C 00 52 00 65 00 67 00 69 00 73 00 S.e.t.u.p.T.y.p.e...\.R.e.g.i.s. 000023A0 74 00 72 00 79 00 5C 00 4D 00 61 00 63 00 68 00 69 00 6E 00 65 00 5C 00 53 00 79 00 73 00 74 00 t.r.y.\.M.a.c.h.i.n.e.\.S.y.s.t. 000023C0 65 00 6D 00 5C 00 53 00 65 00 74 00 75 00 70 00 00 00 00 00 53 65 74 75 70 54 79 70 65 00 00 00 e.m.\.S.e.t.u.p.....SetupType... 000023E0 25 6C 64 00 43 6D 64 6C 69 6E 65 00 43 00 6D 00 64 00 6C 00 69 00 6E 00 65 00 00 00 77 00 69 00 %ld.Cmdline.C.m.d.l.i.n.e...w.i. 00002400 6E 00 73 00 74 00 61 00 30 00 5C 00 44 00 65 00 66 00 61 00 75 00 6C 00 74 00 00 00 6E 00 74 00 n.s.t.a.0.\.D.e.f.a.u.l.t...n.t. 00002420 73 00 64 00 20 00 2D 00 64 00 20 00 25 00 73 00 25 00 73 00 00 00 00 00 2D 00 67 00 20 00 2D 00 s.d. .-.d. .%.s.%.s.....-.g. .-. 00002440 47 00 20 00 00 00 00 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 00 00 57 00 69 00 G. .....W.i.n.l.o.g.o.n.....W.i. 00002460 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 00 00 31 00 00 00 43 00 6D 00 64 00 6C 00 69 00 6E 00 n.l.o.g.o.n.....1...C.m.d.l.i.n. 00002480 65 00 00 00 53 00 59 00 53 00 54 00 45 00 4D 00 5C 00 73 00 65 00 74 00 75 00 70 00 00 00 00 00 e...S.Y.S.T.E.M.\.s.e.t.u.p..... 000024A0 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 00 00 53 00 68 00 65 00 6C 00 6C 00 00 00 W.i.n.l.o.g.o.n.....S.h.e.l.l... 000024C0 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 00 00 44 00 65 00 66 00 61 00 75 00 6C 00 W.i.n.l.o.g.o.n.....D.e.f.a.u.l. 000024E0 74 00 53 00 68 00 65 00 6C 00 6C 00 00 00 00 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 t.S.h.e.l.l.....W.i.n.l.o.g.o.n. 00002500 00 00 00 00 44 00 65 00 66 00 61 00 75 00 6C 00 74 00 53 00 68 00 65 00 6C 00 6C 00 00 00 00 00 ....D.e.f.a.u.l.t.S.h.e.l.l..... 00002520 70 00 72 00 6F 00 67 00 6D 00 61 00 6E 00 2E 00 65 00 78 00 65 00 00 00 53 00 79 00 73 00 74 00 p.r.o.g.m.a.n...e.x.e...S.y.s.t. 00002540 65 00 6D 00 53 00 65 00 74 00 75 00 70 00 49 00 6E 00 50 00 72 00 6F 00 67 00 72 00 65 00 73 00 e.m.S.e.t.u.p.I.n.P.r.o.g.r.e.s. 00002560 73 00 00 00 52 65 70 61 69 72 53 74 61 72 74 4D 65 6E 75 49 74 65 6D 73 00 00 00 00 73 00 79 00 s...RepairStartMenuItems....s.y. 00002580 73 00 73 00 65 00 74 00 75 00 70 00 2E 00 64 00 6C 00 6C 00 00 00 00 00 52 00 65 00 70 00 61 00 s.s.e.t.u.p...d.l.l.....R.e.p.a. 000025A0 69 00 72 00 00 00 00 00 52 00 65 00 70 00 61 00 69 00 72 00 00 00 00 00 41 00 75 00 74 00 6F 00 i.r.....R.e.p.a.i.r.....A.u.t.o. 000025C0 63 00 68 00 6B 00 00 00 5C 00 62 00 6F 00 6F 00 74 00 65 00 78 00 2E 00 6C 00 6F 00 67 00 00 00 c.h.k...\.b.o.o.t.e.x...l.o.g... 000025E0 5C 00 44 00 6F 00 73 00 44 00 65 00 76 00 69 00 63 00 65 00 73 00 00 00 5C 00 44 00 65 00 76 00 \.D.o.s.D.e.v.i.c.e.s...\.D.e.v. 00002600 69 00 63 00 65 00 5C 00 48 00 61 00 72 00 64 00 64 00 69 00 73 00 6B 00 00 00 00 00 53 00 79 00 i.c.e.\.H.a.r.d.d.i.s.k.....S.y. 00002620 6D 00 62 00 6F 00 6C 00 69 00 63 00 4C 00 69 00 6E 00 6B 00 00 00 00 00 46 00 6F 00 6E 00 74 00 m.b.o.l.i.c.L.i.n.k.....F.o.n.t. 00002640 73 00 00 00 46 00 6F 00 6E 00 74 00 73 00 00 00 5C 00 74 00 65 00 6D 00 70 00 70 00 66 00 2E 00 s...F.o.n.t.s...\.t.e.m.p.p.f... 00002660 73 00 79 00 73 00 00 00 5C 00 74 00 65 00 6D 00 70 00 70 00 66 00 2E 00 73 00 79 00 73 00 00 00 s.y.s...\.t.e.m.p.p.f...s.y.s... 00002680 44 00 65 00 66 00 61 00 75 00 6C 00 74 00 00 00 57 00 49 00 4E 00 4C 00 4F 00 47 00 4F 00 4E 00 D.e.f.a.u.l.t...W.I.N.L.O.G.O.N. 000026A0 00 00 00 00 53 00 79 00 73 00 74 00 65 00 6D 00 00 00 00 00 44 00 65 00 66 00 61 00 75 00 6C 00 ....S.y.s.t.e.m.....D.e.f.a.u.l. 000026C0 74 00 00 00 57 00 49 00 4E 00 4C 00 4F 00 47 00 4F 00 4E 00 00 00 00 00 53 00 61 00 76 00 65 00 t...W.I.N.L.O.G.O.N.....S.a.v.e. 000026E0 44 00 75 00 6D 00 70 00 53 00 74 00 61 00 72 00 74 00 00 00 73 00 61 00 76 00 65 00 64 00 75 00 D.u.m.p.S.t.a.r.t...s.a.v.e.d.u. 00002700 6D 00 70 00 2E 00 65 00 78 00 65 00 00 00 00 00 4D 69 63 72 6F 73 6F 66 74 2E 52 50 43 5F 52 65 m.p...e.x.e.....Microsoft.RPC_Re 00002720 67 69 73 74 72 79 5F 53 65 72 76 65 72 00 00 00 44 00 65 00 66 00 61 00 75 00 6C 00 74 00 00 00 gistry_Server...D.e.f.a.u.l.t... 00002740 73 00 65 00 72 00 76 00 69 00 63 00 65 00 73 00 2E 00 65 00 78 00 65 00 00 00 00 00 57 00 49 00 s.e.r.v.i.c.e.s...e.x.e.....W.I. 00002760 4E 00 4C 00 4F 00 47 00 4F 00 4E 00 00 00 00 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 43 00 N.L.O.G.O.N.....S.e.r.v.i.c.e.C. 00002780 6F 00 6E 00 74 00 72 00 6F 00 6C 00 6C 00 65 00 72 00 53 00 74 00 61 00 72 00 74 00 00 00 00 00 o.n.t.r.o.l.l.e.r.S.t.a.r.t..... 000027A0 73 00 65 00 72 00 76 00 69 00 63 00 65 00 73 00 2E 00 65 00 78 00 65 00 00 00 00 00 25 00 30 00 s.e.r.v.i.c.e.s...e.x.e.....%.0. 000027C0 32 00 64 00 3A 00 25 00 30 00 32 00 64 00 3A 00 25 00 30 00 32 00 64 00 00 00 00 00 25 00 64 00 2.d.:.%.0.2.d.:.%.0.2.d.....%.d. 000027E0 20 00 64 00 61 00 79 00 73 00 00 00 57 00 69 00 6E 00 33 00 32 00 20 00 52 00 65 00 67 00 69 00 .d.a.y.s...W.i.n.3.2. .R.e.g.i. 00002800 73 00 74 00 72 00 79 00 2F 00 53 00 79 00 73 00 74 00 65 00 6D 00 53 00 68 00 75 00 74 00 64 00 s.t.r.y./.S.y.s.t.e.m.S.h.u.t.d. 00002820 6F 00 77 00 6E 00 20 00 6D 00 6F 00 64 00 75 00 6C 00 65 00 00 00 00 00 43 00 4F 00 4D 00 50 00 o.w.n. .m.o.d.u.l.e.....C.O.M.P. 00002840 55 00 54 00 45 00 52 00 4E 00 41 00 4D 00 45 00 00 00 00 00 55 00 53 00 45 00 52 00 50 00 52 00 U.T.E.R.N.A.M.E.....U.S.E.R.P.R. 00002860 4F 00 46 00 49 00 4C 00 45 00 00 00 57 00 69 00 6E 00 6C 00 6F 00 67 00 6F 00 6E 00 00 00 00 00 O.F.I.L.E...W.i.n.l.o.g.o.n..... 00002880 FF FF FF FF 6D 87 88 02 73 87 88 02 25 00 78 00 00 00 00 00 25 00 78 00 3A 00 25 00 78 00 00 00 mçê☻sçê☻%.x.....%.x.:.%.x... 000028A0 56 00 6F 00 6C 00 61 00 74 00 69 00 6C 00 65 00 20 00 45 00 6E 00 76 00 69 00 72 00 6F 00 6E 00 V.o.l.a.t.i.l.e. .E.n.v.i.r.o.n. 000028C0 6D 00 65 00 6E 00 74 00 00 00 00 00 4E 00 6F 00 50 00 6F 00 70 00 75 00 70 00 73 00 4F 00 6E 00 m.e.n.t.....N.o.P.o.p.u.p.s.O.n. 000028E0 42 00 6F 00 6F 00 74 00 00 00 00 00 53 00 79 00 73 00 74 00 65 00 6D 00 5C 00 43 00 75 00 72 00 B.o.o.t.....S.y.s.t.e.m.\.C.u.r. 00002900 72 00 65 00 6E 00 74 00 43 00 6F 00 6E 00 74 00 72 00 6F 00 6C 00 53 00 65 00 74 00 5C 00 43 00 r.e.n.t.C.o.n.t.r.o.l.S.e.t.\.C. 00002920 6F 00 6E 00 74 00 72 00 6F 00 6C 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 00 00 00 00 o.n.t.r.o.l.\.W.i.n.d.o.w.s..... 00002940 52 00 61 00 73 00 41 00 75 00 74 00 6F 00 64 00 69 00 61 00 6C 00 4C 00 6F 00 67 00 6F 00 66 00 R.a.s.A.u.t.o.d.i.a.l.L.o.g.o.f. 00002960 66 00 55 00 73 00 65 00 72 00 44 00 6F 00 6E 00 65 00 00 00 52 00 61 00 73 00 41 00 75 00 74 00 f.U.s.e.r.D.o.n.e...R.a.s.A.u.t. 00002980 6F 00 64 00 69 00 61 00 6C 00 4C 00 6F 00 67 00 6F 00 66 00 66 00 55 00 73 00 65 00 72 00 00 00 o.d.i.a.l.L.o.g.o.f.f.U.s.e.r... 000029A0 77 00 69 00 6E 00 39 00 78 00 75 00 70 00 67 00 00 00 00 00 52 00 75 00 6E 00 47 00 72 00 70 00 w.i.n.9.x.u.p.g.....R.u.n.G.r.p. 000029C0 43 00 6F 00 6E 00 76 00 00 00 00 00 55 00 53 00 45 00 52 00 50 00 52 00 4F 00 46 00 49 00 4C 00 C.o.n.v.....U.S.E.R.P.R.O.F.I.L. 000029E0 45 00 00 00 25 00 53 00 79 00 73 00 74 00 65 00 6D 00 52 00 6F 00 6F 00 74 00 25 00 5C 00 50 00 E...%.S.y.s.t.e.m.R.o.o.t.%.\.P. 00002A00 72 00 6F 00 66 00 69 00 6C 00 65 00 73 00 5C 00 44 00 65 00 66 00 61 00 75 00 6C 00 74 00 20 00 r.o.f.i.l.e.s.\.D.e.f.a.u.l.t. . 00002A20 55 00 73 00 65 00 72 00 00 00 00 00 43 00 4F 00 4D 00 50 00 55 00 54 00 45 00 52 00 4E 00 41 00 U.s.e.r.....C.O.M.P.U.T.E.R.N.A. 00002A40 4D 00 45 00 00 00 00 00 74 00 61 00 73 00 6B 00 6D 00 67 00 72 00 2E 00 65 00 78 00 65 00 00 00 M.E.....t.a.s.k.m.g.r...e.x.e... 00002A60 20 00 09 00 00 00 00 00 53 00 45 00 54 00 00 00 4C 00 49 00 42 00 50 00 41 00 54 00 48 00 00 00 .○.....S.E.T...L.I.B.P.A.T.H... 00002A80 44 00 45 00 56 00 49 00 4E 00 46 00 4F 00 00 00 43 00 4F 00 44 00 45 00 50 00 41 00 47 00 45 00 D.E.V.I.N.F.O...C.O.D.E.P.A.G.E. 00002AA0 00 00 00 00 3D 00 00 00 43 00 4F 00 55 00 4E 00 54 00 52 00 59 00 00 00 50 00 52 00 4F 00 54 00 ....=...C.O.U.N.T.R.Y...P.R.O.T. 00002AC0 45 00 43 00 54 00 4F 00 4E 00 4C 00 59 00 00 00 50 00 52 00 4F 00 54 00 53 00 48 00 45 00 4C 00 E.C.T.O.N.L.Y...P.R.O.T.S.H.E.L. 00002AE0 4C 00 00 00 4C 00 49 00 42 00 50 00 41 00 54 00 48 00 00 00 50 00 41 00 54 00 48 00 3D 00 00 00 L...L.I.B.P.A.T.H...P.A.T.H.=... 00002B00 50 00 52 00 4F 00 4D 00 50 00 54 00 3D 00 00 00 56 00 49 00 4F 00 5F 00 56 00 47 00 41 00 3D 00 P.R.O.M.P.T.=...V.I.O._.V.G.A.=. 00002B20 00 00 00 00 56 00 49 00 4F 00 5F 00 49 00 42 00 4D 00 56 00 47 00 41 00 3D 00 00 00 56 00 49 00 ....V.I.O._.I.B.M.V.G.A.=...V.I. 00002B40 44 00 45 00 4F 00 5F 00 44 00 45 00 56 00 49 00 43 00 45 00 53 00 3D 00 00 00 00 00 43 00 4F 00 D.E.O._.D.E.V.I.C.E.S.=.....C.O. 00002B60 4D 00 53 00 50 00 45 00 43 00 3D 00 00 00 00 00 50 00 61 00 74 00 68 00 00 00 00 00 5C 00 6F 00 M.S.P.E.C.=.....P.a.t.h.....\.o. 00002B80 73 00 32 00 5C 00 64 00 6C 00 6C 00 3B 00 00 00 0D 00 0A 00 1A 00 00 00 FF FF FF FF 50 CA 88 02 s.2.\.d.l.l.;...♪.◙.→... P╩ê☻ 00002BA0 6B CA 88 02 65 00 76 00 65 00 6E 00 74 00 6C 00 6F 00 67 00 00 00 00 00 5C 00 52 00 65 00 67 00 k╩ê☻e.v.e.n.t.l.o.g.....\.R.e.g. 00002BC0 69 00 73 00 74 00 72 00 79 00 5C 00 4D 00 61 00 63 00 68 00 69 00 6E 00 65 00 5C 00 53 00 79 00 i.s.t.r.y.\.M.a.c.h.i.n.e.\.S.y. 00002BE0 73 00 74 00 65 00 6D 00 5C 00 43 00 75 00 72 00 72 00 65 00 6E 00 74 00 43 00 6F 00 6E 00 74 00 s.t.e.m.\.C.u.r.r.e.n.t.C.o.n.t. 00002C00 72 00 6F 00 6C 00 53 00 65 00 74 00 5C 00 43 00 6F 00 6E 00 74 00 72 00 6F 00 6C 00 5C 00 53 00 r.o.l.S.e.t.\.C.o.n.t.r.o.l.\.S. 00002C20 65 00 63 00 75 00 72 00 65 00 50 00 69 00 70 00 65 00 53 00 65 00 72 00 76 00 65 00 72 00 73 00 e.c.u.r.e.P.i.p.e.S.e.r.v.e.r.s. 00002C40 5C 00 00 00 6E 00 63 00 61 00 63 00 6E 00 5F 00 6E 00 70 00 00 00 00 00 5C 00 50 00 49 00 50 00 \...n.c.a.c.n._.n.p.....\.P.I.P. 00002C60 45 00 5C 00 00 00 00 00 77 00 69 00 6E 00 72 00 65 00 67 00 00 00 00 00 44 00 00 00 01 D0 8C 33 E.\.....w.i.n.r.e.g.....D...☺╨î3 00002C80 44 22 F1 31 AA AA 90 00 38 00 10 03 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 D"±1¬¬É.8.►♥☺...♦]êèδ∟╔◄ƒΦ◘.+►H` 00002CA0 02 00 00 00 A8 11 8A 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ☻...¿◄è☻........................ 00002CC0 78 CC 89 02 6A 91 89 02 79 91 89 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 x╠ë☻jæë☻yæë☻.................... 00002CE0 92 CE 89 02 00 00 00 00 01 00 01 00 00 00 00 00 2C 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 Æ╬ë☻....☺.☺.....,..♥............ 00002D00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4D 01 00 00 4E 08 51 01 04 00 53 10 50 01 ..................M☺..N◘Q☺♦.S►P☺ 00002D20 0C 00 53 10 4D 01 14 00 4D 01 18 00 4D 01 18 00 4E 08 4E 08 4D 01 40 00 51 01 78 00 50 01 80 00 ♀.S►M☺¶.M☺↑.M☺↑.N◘N◘M☺@.Q☺x.P☺Ç. 00002D40 53 10 4D 01 14 00 4D 01 18 00 53 10 4D 01 14 00 4E 08 50 01 18 00 50 01 84 00 50 01 88 00 53 10 S►M☺¶.M☺↑.S►M☺¶.N◘P☺↑.P☺ä.P☺ê.S► 00002D60 4D 01 14 00 4E 08 50 01 18 00 50 01 80 00 50 01 94 00 50 01 80 00 50 01 80 00 53 10 4D 01 14 00 M☺¶.N◘P☺↑.P☺Ç.P☺ö.P☺Ç.P☺Ç.S►M☺¶. 00002D80 53 10 4D 01 14 00 4E 08 50 01 A6 00 53 10 4D 01 14 00 4D 01 18 00 4D 01 18 00 53 10 4D 01 14 00 S►M☺¶.N◘P☺ª.S►M☺¶.M☺↑.M☺↑.S►M☺¶. 00002DA0 4E 02 4E 08 4E 08 4D 01 18 00 4D 01 18 00 4D 01 40 00 53 10 4D 01 14 00 4D 01 18 00 4E 08 4E 08 N☻N◘N◘M☺↑.M☺↑.M☺@.S►M☺¶.M☺↑.N◘N◘ 00002DC0 51 01 AA 00 53 10 4D 01 14 00 50 01 18 00 51 01 B2 00 51 01 B2 00 51 01 B2 00 51 01 B2 00 51 01 Q☺¬.S►M☺¶.P☺↑.Q☺▓.Q☺▓.Q☺▓.Q☺▓.Q☺ 00002DE0 B2 00 51 01 B2 00 51 01 B2 00 51 01 B6 00 53 10 4D 01 14 00 4D 01 18 00 50 01 80 00 50 01 94 00 ▓.Q☺▓.Q☺▓.Q☺╢.S►M☺¶.M☺↑.P☺Ç.P☺ö. 00002E00 50 01 80 00 50 01 80 00 53 10 4D 01 14 00 4D 01 18 00 4D 01 18 00 4D 01 18 00 53 10 4D 01 14 00 P☺Ç.P☺Ç.S►M☺¶.M☺↑.M☺↑.M☺↑.S►M☺¶. 00002E20 4D 01 18 00 4E 08 53 10 4D 01 14 00 4D 01 18 00 4D 01 40 00 53 10 4D 01 14 00 4E 08 4D 01 A6 00 M☺↑.N◘S►M☺¶.M☺↑.M☺@.S►M☺¶.N◘M☺ª. 00002E40 53 10 4D 01 14 00 4D 01 18 00 4E 08 4D 01 BA 00 4E 08 53 10 4D 01 00 00 4D 01 84 00 4E 08 4E 02 S►M☺¶.M☺↑.N◘M☺║.N◘S►M☺..M☺ä.N◘N☻ 00002E60 4E 02 53 08 4D 01 00 00 53 08 4D 01 14 00 51 01 B2 00 53 10 4D 01 14 00 50 01 C8 00 4E 08 50 01 N☻S◘M☺..S◘M☺¶.Q☺▓.S►M☺¶.P☺╚.N◘P☺ 00002E80 06 01 50 01 18 01 53 10 00 00 00 00 00 00 00 00 00 00 12 08 05 5C 11 00 02 00 30 A0 00 02 11 00 ♠☺P☺↑☺S►..........↕◘♣\◄.☻.0á.☻◄. 00002EA0 02 00 30 E0 00 00 30 40 00 00 11 00 10 00 1C 01 02 00 16 55 02 00 16 55 00 00 06 5B 16 03 08 00 ☻.0α..0@..◄.►.∟☺☻.▬U☻.▬U..♠[▬♥◘. 00002EC0 4B 5C 46 5C 04 00 04 00 12 00 E4 FF 5B 06 06 38 08 5B 12 00 26 00 1C 00 01 00 18 00 04 00 18 00 K\F\♦.♦.↕.Σ [♠♠8◘[↕.&.∟.☺.↑.♦.↑. 00002EE0 08 00 02 5B 16 03 0C 00 4B 5C 46 5C 00 00 00 00 12 00 E4 FF 5B 08 08 08 5C 5B 1A 03 14 00 00 00 ◘.☻[▬♥♀.K\F\....↕.Σ [◘◘◘\[→♥¶... 00002F00 00 00 08 4C 00 DF FF 02 3F 5B 11 00 02 00 30 A0 00 06 12 08 08 5C 12 00 A4 FF 12 00 02 00 15 03 ..◘L.▀ ☻?[◄.☻.0á.♠↕◘◘\↕.ñ ↕.☻.§♥ 00002F20 08 00 08 08 5C 5B 12 00 02 00 1C 00 01 00 20 00 00 00 20 00 00 00 02 5B 11 00 AA FF 11 00 02 00 ◘.◘◘\[↕.☻.∟.☺. ... ...☻[◄.¬ ◄.☻. 00002F40 30 A0 00 04 11 0C 08 5C 11 04 D4 FF 11 00 02 00 1B 00 01 00 28 00 10 00 02 5B 11 00 18 00 16 03 0á.♦◄♀◘\◄♦╘ ◄.☻.←.☺.(.►.☻[◄.↑.▬♥ 00002F60 10 00 4B 5C 46 5C 00 00 00 00 12 00 50 FF 5B 08 08 08 08 5B 1C 03 10 00 28 00 08 00 28 00 08 00 ►.K\F\....↕.P [◘◘◘◘[∟♥►.(.◘.(.◘. 00002F80 4B 5C 48 4A 10 00 00 00 01 00 00 00 00 00 12 00 2C FF 5B 4C 00 C9 FF 5B 12 00 02 00 1C 00 01 00 K\HJ►...☺.....↕., [L.╔ [↕.☻.∟.☺. 00002FA0 28 54 10 00 28 54 10 00 02 5B 11 08 08 5C 00 00 FF FF FF FF 00 00 00 00 9D D1 88 02 00 00 00 00 (T►.(T►.☻[◄◘◘\.. ....¥╤ê☻.... 00002FC0 FF FF FF FF 00 00 00 00 D4 D2 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 0B D4 88 02 00 00 00 00 ....╘╥ê☻.... ....♂╘ê☻.... 00002FE0 FF FF FF FF 00 00 00 00 42 D5 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 79 D6 88 02 00 00 00 00 ....B╒ê☻.... ....y╓ê☻.... 00003000 FF FF FF FF 00 00 00 00 79 D7 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 47 D9 88 02 00 00 00 00 ....y╫ê☻.... ....G┘ê☻.... 00003020 FF FF FF FF 00 00 00 00 7E DA 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 90 DB 88 02 00 00 00 00 ....~┌ê☻.... ....É█ê☻.... 00003040 FF FF FF FF 00 00 00 00 82 DD 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 4A E0 88 02 00 00 00 00 ....é▌ê☻.... ....Jαê☻.... 00003060 FF FF FF FF 00 00 00 00 94 E1 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 DF E2 88 02 00 00 00 00 ....ößê☻.... ....▀Γê☻.... 00003080 FF FF FF FF 00 00 00 00 0B E4 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 AC E5 88 02 00 00 00 00 ....♂Σê☻.... ....¼σê☻.... 000030A0 FF FF FF FF 00 00 00 00 41 E7 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 99 E9 88 02 00 00 00 00 ....Aτê☻.... ....ÖΘê☻.... 000030C0 FF FF FF FF 00 00 00 00 0F EC 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 A8 ED 88 02 00 00 00 00 ....☼∞ê☻.... ....¿φê☻.... 000030E0 FF FF FF FF 00 00 00 00 F6 EE 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 25 F0 88 02 00 00 00 00 ....÷εê☻.... ....%≡ê☻.... 00003100 FF FF FF FF 00 00 00 00 5B F1 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 C7 F2 88 02 00 00 00 00 ....[±ê☻.... ....╟≥ê☻.... 00003120 FF FF FF FF 00 00 00 00 D9 F3 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 30 F5 88 02 00 00 00 00 ....┘≤ê☻.... ....0⌡ê☻.... 00003140 FF FF FF FF 00 00 00 00 31 F6 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 2B F7 88 02 00 00 00 00 ....1÷ê☻.... ....+≈ê☻.... 00003160 FF FF FF FF 00 00 00 00 62 F8 88 02 00 00 00 00 FF FF FF FF 00 00 00 00 99 F9 88 02 00 00 00 00 ....b°ê☻.... ....Ö∙ê☻.... 00003180 FF FF FF FF 00 00 00 00 1E FC 88 02 5C 00 52 00 45 00 47 00 49 00 53 00 54 00 52 00 59 00 5C 00 ....▲ⁿê☻\.R.E.G.I.S.T.R.Y.\. 000031A0 4D 00 41 00 43 00 48 00 49 00 4E 00 45 00 5C 00 53 00 59 00 53 00 54 00 45 00 4D 00 5C 00 43 00 M.A.C.H.I.N.E.\.S.Y.S.T.E.M.\.C. 000031C0 55 00 52 00 52 00 45 00 4E 00 54 00 43 00 4F 00 4E 00 54 00 52 00 4F 00 4C 00 53 00 45 00 54 00 U.R.R.E.N.T.C.O.N.T.R.O.L.S.E.T. 000031E0 5C 00 48 00 41 00 52 00 44 00 57 00 41 00 52 00 45 00 20 00 50 00 52 00 4F 00 46 00 49 00 4C 00 \.H.A.R.D.W.A.R.E. .P.R.O.F.I.L. 00003200 45 00 53 00 5C 00 43 00 55 00 52 00 52 00 45 00 4E 00 54 00 00 00 00 00 5C 00 52 00 45 00 47 00 E.S.\.C.U.R.R.E.N.T.....\.R.E.G. 00003220 49 00 53 00 54 00 52 00 59 00 5C 00 4D 00 41 00 43 00 48 00 49 00 4E 00 45 00 5C 00 53 00 4F 00 I.S.T.R.Y.\.M.A.C.H.I.N.E.\.S.O. 00003240 46 00 54 00 57 00 41 00 52 00 45 00 5C 00 43 00 4C 00 41 00 53 00 53 00 45 00 53 00 00 00 00 00 F.T.W.A.R.E.\.C.L.A.S.S.E.S..... 00003260 5C 00 52 00 45 00 47 00 49 00 53 00 54 00 52 00 59 00 5C 00 55 00 53 00 45 00 52 00 00 00 00 00 \.R.E.G.I.S.T.R.Y.\.U.S.E.R..... 00003280 5C 00 52 00 45 00 47 00 49 00 53 00 54 00 52 00 59 00 5C 00 4D 00 41 00 43 00 48 00 49 00 4E 00 \.R.E.G.I.S.T.R.Y.\.M.A.C.H.I.N. 000032A0 45 00 00 00 5C 44 65 76 69 63 65 5C 4C 61 6E 6D 61 6E 53 65 72 76 65 72 00 00 00 00 5C 00 44 00 E...\Device\LanmanServer....\.D. 000032C0 65 00 76 00 69 00 63 00 65 00 5C 00 4C 00 61 00 6E 00 6D 00 61 00 6E 00 52 00 65 00 64 00 69 00 e.v.i.c.e.\.L.a.n.m.a.n.R.e.d.i. 000032E0 72 00 65 00 63 00 74 00 6F 00 72 00 00 00 00 00 50 65 72 66 6C 69 62 20 42 75 73 79 00 00 00 00 r.e.c.t.o.r.....Perflib Busy.... 00003300 5C 00 52 00 65 00 67 00 69 00 73 00 74 00 72 00 79 00 5C 00 4D 00 61 00 63 00 68 00 69 00 6E 00 \.R.e.g.i.s.t.r.y.\.M.a.c.h.i.n. 00003320 65 00 5C 00 53 00 4F 00 46 00 54 00 57 00 41 00 52 00 45 00 5C 00 4D 00 69 00 63 00 72 00 6F 00 e.\.S.O.F.T.W.A.R.E.\.M.i.c.r.o. 00003340 73 00 6F 00 66 00 74 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 5C 00 s.o.f.t.\.W.i.n.d.o.w.s. .N.T.\. 00003360 43 00 75 00 72 00 72 00 65 00 6E 00 74 00 56 00 65 00 72 00 73 00 69 00 6F 00 6E 00 5C 00 50 00 C.u.r.r.e.n.t.V.e.r.s.i.o.n.\.P. 00003380 65 00 72 00 66 00 6C 00 69 00 62 00 00 00 00 00 5F 00 54 00 6F 00 74 00 61 00 6C 00 00 00 00 00 e.r.f.l.i.b....._.T.o.t.a.l..... 000033A0 2E 00 45 00 58 00 45 00 00 00 00 00 42 00 6C 00 6F 00 63 00 6B 00 69 00 6E 00 67 00 20 00 51 00 ..E.X.E.....B.l.o.c.k.i.n.g. .Q. 000033C0 75 00 65 00 75 00 65 00 00 00 00 00 00 00 00 00 FF FF FF FF C7 56 89 02 DA 56 89 02 00 00 00 00 u.e.u.e......... ╟Vë☻┌Vë☻.... 000033E0 FF FF FF FF A2 5A 89 02 A8 5A 89 02 48 00 65 00 6C 00 70 00 00 00 00 00 43 00 6F 00 75 00 6E 00 óZë☻¿Zë☻H.e.l.p.....C.o.u.n. 00003400 74 00 65 00 72 00 00 00 FF FF FF FF 00 00 00 00 85 76 89 02 00 00 00 00 E1 73 89 02 04 74 89 02 t.e.r... ....àvë☻....ßsë☻♦të☻ 00003420 2E 00 2E 00 2E 00 00 00 50 00 65 00 72 00 66 00 6C 00 69 00 62 00 00 00 54 00 6F 00 74 00 61 00 ........P.e.r.f.l.i.b...T.o.t.a. 00003440 6C 00 49 00 6E 00 73 00 74 00 61 00 6E 00 63 00 65 00 4E 00 61 00 6D 00 65 00 00 00 4F 00 70 00 l.I.n.s.t.a.n.c.e.N.a.m.e...O.p. 00003460 65 00 6E 00 50 00 72 00 6F 00 63 00 65 00 64 00 75 00 72 00 65 00 57 00 61 00 69 00 74 00 54 00 e.n.P.r.o.c.e.d.u.r.e.W.a.i.t.T. 00003480 69 00 6D 00 65 00 00 00 45 00 78 00 74 00 43 00 6F 00 75 00 6E 00 74 00 65 00 72 00 54 00 65 00 i.m.e...E.x.t.C.o.u.n.t.e.r.T.e. 000034A0 73 00 74 00 4C 00 65 00 76 00 65 00 6C 00 00 00 45 00 76 00 65 00 6E 00 74 00 4C 00 6F 00 67 00 s.t.L.e.v.e.l...E.v.e.n.t.L.o.g. 000034C0 4C 00 65 00 76 00 65 00 6C 00 00 00 5C 00 52 00 45 00 47 00 49 00 53 00 54 00 52 00 59 00 5C 00 L.e.v.e.l...\.R.E.G.I.S.T.R.Y.\. 000034E0 4D 00 41 00 43 00 48 00 49 00 4E 00 45 00 5C 00 53 00 59 00 53 00 54 00 45 00 4D 00 5C 00 43 00 M.A.C.H.I.N.E.\.S.Y.S.T.E.M.\.C. 00003500 75 00 72 00 72 00 65 00 6E 00 74 00 43 00 6F 00 6E 00 74 00 72 00 6F 00 6C 00 53 00 65 00 74 00 u.r.r.e.n.t.C.o.n.t.r.o.l.S.e.t. 00003520 5C 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 73 00 00 00 5C 00 50 00 65 00 72 00 66 00 6F 00 \.S.e.r.v.i.c.e.s...\.P.e.r.f.o. 00003540 72 00 6D 00 61 00 6E 00 63 00 65 00 00 00 00 00 5C 00 4C 00 69 00 6E 00 6B 00 61 00 67 00 65 00 r.m.a.n.c.e.....\.L.i.n.k.a.g.e. 00003560 00 00 00 00 45 00 78 00 70 00 6F 00 72 00 74 00 00 00 00 00 43 00 6F 00 6C 00 6C 00 65 00 63 00 ....E.x.p.o.r.t.....C.o.l.l.e.c. 00003580 74 00 00 00 43 00 6C 00 6F 00 73 00 65 00 00 00 4F 00 70 00 65 00 6E 00 00 00 00 00 4C 00 69 00 t...C.l.o.s.e...O.p.e.n.....L.i. 000035A0 62 00 72 00 61 00 72 00 79 00 00 00 49 5F 42 72 6F 77 73 65 72 51 75 65 72 79 53 74 61 74 69 73 b.r.a.r.y...I_BrowserQueryStatis 000035C0 74 69 63 73 00 00 00 00 4E 00 65 00 74 00 41 00 70 00 69 00 33 00 32 00 2E 00 44 00 6C 00 6C 00 tics....N.e.t.A.p.i.3.2...D.l.l. 000035E0 00 00 00 00 43 00 6F 00 6C 00 6C 00 65 00 63 00 74 00 55 00 6E 00 69 00 63 00 6F 00 64 00 65 00 ....C.o.l.l.e.c.t.U.n.i.c.o.d.e. 00003600 50 00 72 00 6F 00 63 00 65 00 73 00 73 00 4E 00 61 00 6D 00 65 00 73 00 00 00 00 00 00 00 00 00 P.r.o.c.e.s.s.N.a.m.e.s......... 00003620 FF FF FF FF 81 8A 89 02 87 8A 89 02 FF FF FF FF BE 8A 89 02 C4 8A 89 02 53 00 4F 00 46 00 54 00 üèë☻çèë☻ ╛èë☻─èë☻S.O.F.T. 00003640 57 00 41 00 52 00 45 00 5C 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 57 00 W.A.R.E.\.M.i.c.r.o.s.o.f.t.\.W. 00003660 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 4E 00 54 00 5C 00 43 00 75 00 72 00 72 00 65 00 6E 00 i.n.d.o.w.s. .N.T.\.C.u.r.r.e.n. 00003680 74 00 56 00 65 00 72 00 73 00 69 00 6F 00 6E 00 5C 00 50 00 65 00 72 00 66 00 6C 00 69 00 62 00 t.V.e.r.s.i.o.n.\.P.e.r.f.l.i.b. 000036A0 00 00 68 D9 01 00 00 00 00 00 00 00 00 00 A4 DF 01 00 10 A2 01 00 58 D7 01 00 00 00 00 00 00 00 ..h┘☺.........ñ▀☺.►ó☺.X╫☺....... 000036C0 00 00 22 E2 01 00 00 A0 01 00 FC D7 01 00 00 00 00 00 00 00 00 00 58 E7 01 00 A4 A0 01 00 F0 D7 .."Γ☺..á☺.ⁿ╫☺.........Xτ☺.ñá☺.≡╫ 000036E0 01 00 00 00 00 00 00 00 00 00 90 E7 01 00 98 A0 01 00 80 DA 01 00 00 00 00 00 00 00 00 00 3C EC ☺.........Éτ☺.ÿá☺.Ç┌☺.........<∞ 00003700 01 00 28 A3 01 00 1C DA 01 00 00 00 00 00 00 00 00 00 CA EC 01 00 C4 A2 01 00 BC DB 01 00 00 00 ☺.(ú☺.∟┌☺.........╩∞☺.─ó☺.╝█☺... 00003720 00 00 00 00 00 00 3A F5 01 00 64 A4 01 00 AC DB 01 00 00 00 00 00 00 00 00 00 88 F5 01 00 54 A4 ......:⌡☺.dñ☺.¼█☺.........ê⌡☺.Tñ 00003740 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5C E1 01 00 A4 F5 01 00 ☺.......................\ß☺.ñ⌡☺. 00003760 B8 F5 01 00 D0 F5 01 00 DC F5 01 00 E6 F5 01 00 02 F6 01 00 16 F6 01 00 FA E0 01 00 E2 E0 01 00 ╕⌡☺.╨⌡☺.▄⌡☺.µ⌡☺.☻÷☺.▬÷☺.·α☺.Γα☺. 00003780 DC DF 01 00 94 F5 01 00 02 E2 01 00 E6 E1 01 00 CC E1 01 00 9C E1 01 00 7C E1 01 00 6A E1 01 00 ▄▀☺.ö⌡☺.☻Γ☺.µß☺.╠ß☺.£ß☺.|ß☺.jß☺. 000037A0 BE DF 01 00 4A E1 01 00 34 E1 01 00 20 E1 01 00 0C E1 01 00 EC DF 01 00 CC DF 01 00 CA E0 01 00 ╛▀☺.Jß☺.4ß☺. ß☺.♀ß☺.∞▀☺.╠▀☺.╩α☺. 000037C0 B2 E0 01 00 A0 E0 01 00 92 E0 01 00 7E E0 01 00 6E E0 01 00 5E E0 01 00 4C E0 01 00 3C E0 01 00 ▓α☺.áα☺.Æα☺.~α☺.nα☺.^α☺.Lα☺.<α☺. 000037E0 26 E0 01 00 10 E0 01 00 00 E0 01 00 00 00 00 00 66 E7 01 00 7C E7 01 00 00 00 00 00 AE E6 01 00 &α☺.►α☺..α☺.....fτ☺.|τ☺.....«µ☺. 00003800 20 E4 01 00 36 E4 01 00 6E F7 01 00 5A F7 01 00 4A F7 01 00 36 F7 01 00 28 F7 01 00 18 F7 01 00 Σ☺.6Σ☺.n≈☺.Z≈☺.J≈☺.6≈☺.(≈☺.↑≈☺. 00003820 02 F7 01 00 EA F6 01 00 DA F6 01 00 C8 F6 01 00 B4 F6 01 00 A4 F6 01 00 8E F6 01 00 7E F6 01 00 ☻≈☺.Ω÷☺.┌÷☺.╚÷☺.┤÷☺.ñ÷☺.Ä÷☺.~÷☺. 00003840 66 F6 01 00 4E F6 01 00 04 E4 01 00 32 F6 01 00 46 E7 01 00 34 E7 01 00 1A E7 01 00 0E E7 01 00 f÷☺.N÷☺.♦Σ☺.2÷☺.Fτ☺.4τ☺.→τ☺.♫τ☺. 00003860 28 E7 01 00 EE E6 01 00 D2 E6 01 00 02 E7 01 00 F4 E3 01 00 A0 E6 01 00 8E E6 01 00 78 E6 01 00 (τ☺.εµ☺.╥µ☺.☻τ☺.⌠π☺.áµ☺.ĵ☺.xµ☺. 00003880 30 E2 01 00 3C E2 01 00 4A E2 01 00 56 E2 01 00 62 E2 01 00 6E E2 01 00 7A E2 01 00 8A E2 01 00 0Γ☺.<Γ☺.JΓ☺.VΓ☺.bΓ☺.nΓ☺.zΓ☺.èΓ☺. 000038A0 98 E2 01 00 A4 E2 01 00 B2 E2 01 00 C2 E2 01 00 D0 E2 01 00 DE E2 01 00 EE E2 01 00 00 E3 01 00 ÿΓ☺.ñΓ☺.▓Γ☺.┬Γ☺.╨Γ☺.▐Γ☺.εΓ☺..π☺. 000038C0 0E E3 01 00 22 E3 01 00 36 E3 01 00 46 E3 01 00 56 E3 01 00 68 E3 01 00 78 E3 01 00 8C E3 01 00 ♫π☺."π☺.6π☺.Fπ☺.Vπ☺.hπ☺.xπ☺.îπ☺. 000038E0 A6 E3 01 00 BA E3 01 00 D8 E3 01 00 6A E6 01 00 44 E5 01 00 BE E6 01 00 52 E5 01 00 50 E4 01 00 ªπ☺.║π☺.╪π☺.jµ☺.Dσ☺.╛µ☺.Rσ☺.PΣ☺. 00003900 5E E4 01 00 6E E4 01 00 88 E4 01 00 96 E4 01 00 B0 E4 01 00 C4 E4 01 00 D8 E4 01 00 EE E4 01 00 ^Σ☺.nΣ☺.êΣ☺.ûΣ☺.░Σ☺.─Σ☺.╪Σ☺.εΣ☺. 00003920 0C E5 01 00 28 E5 01 00 36 E5 01 00 DE E5 01 00 C8 E5 01 00 62 E5 01 00 72 E5 01 00 8A E5 01 00 ♀σ☺.(σ☺.6σ☺.▐σ☺.╚σ☺.bσ☺.rσ☺.èσ☺. 00003940 A6 E5 01 00 B8 E5 01 00 42 E6 01 00 56 E6 01 00 F4 E5 01 00 02 E6 01 00 18 E6 01 00 26 E6 01 00 ªσ☺.╕σ☺.Bµ☺.Vµ☺.⌠σ☺.☻µ☺.↑µ☺.&µ☺. 00003960 2E E6 01 00 00 00 00 00 C8 DE 01 00 2C DE 01 00 34 DE 01 00 42 DE 01 00 62 DE 01 00 50 DE 01 00 .µ☺.....╚▐☺.,▐☺.4▐☺.B▐☺.b▐☺.P▐☺. 00003980 24 DE 01 00 58 DE 01 00 82 DE 01 00 6C DE 01 00 78 DE 01 00 A0 DE 01 00 8C DE 01 00 96 DE 01 00 $▐☺.X▐☺.é▐☺.l▐☺.x▐☺.á▐☺.î▐☺.û▐☺. 000039A0 BE DE 01 00 AA DE 01 00 B4 DE 01 00 DC DE 01 00 1A DE 01 00 10 DE 01 00 04 DE 01 00 EA DE 01 00 ╛▐☺.¬▐☺.┤▐☺.▄▐☺.→▐☺.►▐☺.♦▐☺.Ω▐☺. 000039C0 F4 DE 01 00 FE DE 01 00 08 DF 01 00 10 DF 01 00 1E DF 01 00 26 DF 01 00 AC DD 01 00 34 DF 01 00 ⌠▐☺.■▐☺.◘▀☺.►▀☺.▲▀☺.&▀☺.¼▌☺.4▀☺. 000039E0 40 DF 01 00 50 DF 01 00 64 DF 01 00 74 DF 01 00 84 DF 01 00 B0 DF 01 00 92 DF 01 00 CE DD 01 00 @▀☺.P▀☺.d▀☺.t▀☺.ä▀☺.░▀☺.Æ▀☺.╬▌☺. 00003A00 B8 DD 01 00 C2 DD 01 00 DC DD 01 00 E8 DD 01 00 F2 DD 01 00 FA DD 01 00 00 00 00 00 9E F7 01 00 ╕▌☺.┬▌☺.▄▌☺.Φ▌☺.≥▌☺.·▌☺.....₧≈☺. 00003A20 B2 F7 01 00 82 F7 01 00 DC F7 01 00 F4 F7 01 00 C4 F7 01 00 1C F8 01 00 3A F8 01 00 02 F8 01 00 ▓≈☺.é≈☺.▄≈☺.⌠≈☺.─≈☺.∟°☺.:°☺.☻°☺. 00003A40 62 F8 01 00 7E F8 01 00 4C F8 01 00 B0 F8 01 00 CC F8 01 00 98 F8 01 00 10 F9 01 00 36 F9 01 00 b°☺.~°☺.L°☺.░°☺.╠°☺.ÿ°☺.►∙☺.6∙☺. 00003A60 EC F8 01 00 B8 EC 01 00 9E EC 01 00 88 EC 01 00 70 EC 01 00 5E EC 01 00 48 EC 01 00 00 00 00 00 ∞°☺.╕∞☺.₧∞☺.ê∞☺.p∞☺.^∞☺.H∞☺..... 00003A80 62 EB 01 00 92 EB 01 00 9E EB 01 00 B0 EB 01 00 C4 EB 01 00 6E EB 01 00 7C EB 01 00 FA EB 01 00 bδ☺.Æδ☺.₧δ☺.░δ☺.─δ☺.nδ☺.|δ☺.·δ☺. 00003AA0 0A EC 01 00 C4 EA 01 00 E6 EA 01 00 52 EB 01 00 40 EB 01 00 2C EB 01 00 66 E9 01 00 F4 EA 01 00 ◙∞☺.─Ω☺.µΩ☺.Rδ☺.@δ☺.,δ☺.fΘ☺.⌠Ω☺. 00003AC0 08 EB 01 00 D0 E8 01 00 D4 EB 01 00 E4 EB 01 00 D6 EA 01 00 D6 EC 01 00 7A E9 01 00 0E ED 01 00 ◘δ☺.╨Φ☺.╘δ☺.Σδ☺.╓Ω☺.╓∞☺.zΘ☺.♫φ☺. 00003AE0 22 ED 01 00 38 ED 01 00 50 ED 01 00 68 ED 01 00 BE E8 01 00 94 EA 01 00 B2 EA 01 00 A2 EA 01 00 "φ☺.8φ☺.Pφ☺.hφ☺.╛Φ☺.öΩ☺.▓Ω☺.óΩ☺. 00003B00 56 EA 01 00 7E EA 01 00 68 EA 01 00 16 EA 01 00 48 EA 01 00 32 EA 01 00 D8 E9 01 00 FA E9 01 00 VΩ☺.~Ω☺.hΩ☺.▬Ω☺.HΩ☺.2Ω☺.╪Θ☺.·Θ☺. 00003B20 E6 E9 01 00 8E E9 01 00 C0 E9 01 00 A8 E9 01 00 16 EC 01 00 2A EC 01 00 F6 EC 01 00 B0 E8 01 00 µΘ☺.ÄΘ☺.└Θ☺.¿Θ☺.▬∞☺.*∞☺.÷∞☺.░Φ☺. 00003B40 A4 E8 01 00 94 E8 01 00 88 E8 01 00 7A E8 01 00 6A E8 01 00 5C E8 01 00 46 E8 01 00 3A E8 01 00 ñΦ☺.öΦ☺.êΦ☺.zΦ☺.jΦ☺.\Φ☺.FΦ☺.:Φ☺. 00003B60 2A E8 01 00 00 E8 01 00 EE E7 01 00 DE E7 01 00 D2 E7 01 00 B8 E7 01 00 A8 E7 01 00 9A E7 01 00 *Φ☺..Φ☺.ετ☺.▐τ☺.╥τ☺.╕τ☺.¿τ☺.Üτ☺. 00003B80 54 E9 01 00 44 E9 01 00 30 E9 01 00 1E E9 01 00 0C E9 01 00 FA E8 01 00 EE E8 01 00 E2 E8 01 00 TΘ☺.DΘ☺.0Θ☺.▲Θ☺.♀Θ☺.·Φ☺.εΦ☺.ΓΦ☺. 00003BA0 12 E8 01 00 1A EB 01 00 00 00 00 00 74 F5 01 00 60 F5 01 00 44 F5 01 00 00 00 00 00 94 F1 01 00 ↕Φ☺.→δ☺.....t⌡☺.`⌡☺.D⌡☺.....ö±☺. 00003BC0 EE F1 01 00 FA F1 01 00 1A F2 01 00 28 F2 01 00 38 F2 01 00 52 F2 01 00 66 F2 01 00 7A F2 01 00 ε±☺.·±☺.→≥☺.(≥☺.8≥☺.R≥☺.f≥☺.z≥☺. 00003BE0 94 F2 01 00 AC F2 01 00 C6 F2 01 00 D6 F2 01 00 F0 F2 01 00 0C F3 01 00 28 F3 01 00 3E F3 01 00 ö≥☺.¼≥☺.╞≥☺.╓≥☺.≡≥☺.♀≤☺.(≤☺.>≤☺. 00003C00 5E F3 01 00 B0 F1 01 00 D0 F1 01 00 AC F3 01 00 C0 F3 01 00 D4 F3 01 00 F0 F3 01 00 0C F4 01 00 ^≤☺.░±☺.╨±☺.¼≤☺.└≤☺.╘≤☺.≡≤☺.♀⌠☺. 00003C20 2A F4 01 00 38 F4 01 00 44 F4 01 00 60 F4 01 00 78 F4 01 00 8A F4 01 00 9A F4 01 00 B2 F4 01 00 *⌠☺.8⌠☺.D⌠☺.`⌠☺.x⌠☺.è⌠☺.Ü⌠☺.▓⌠☺. 00003C40 D4 F4 01 00 EE F4 01 00 08 F5 01 00 20 F5 01 00 7C F1 01 00 8E F3 01 00 72 F3 01 00 C2 EF 01 00 ╘⌠☺.ε⌠☺.◘⌡☺. ⌡☺.|±☺.Ä≤☺.r≤☺.┬∩☺. 00003C60 52 F1 01 00 44 F1 01 00 2C F1 01 00 12 F1 01 00 F2 F0 01 00 DC F0 01 00 CE F0 01 00 B8 F0 01 00 R±☺.D±☺.,±☺.↕±☺.≥≡☺.▄≡☺.╬≡☺.╕≡☺. 00003C80 A6 F0 01 00 8E F0 01 00 74 F0 01 00 60 F0 01 00 50 F0 01 00 3E F0 01 00 1E F0 01 00 0A F0 01 00 ª≡☺.Ä≡☺.t≡☺.`≡☺.P≡☺.>≡☺.▲≡☺.◙≡☺. 00003CA0 EC EF 01 00 DC EF 01 00 68 F1 01 00 AC EF 01 00 94 EF 01 00 86 EF 01 00 6A EF 01 00 58 EF 01 00 ∞∩☺.▄∩☺.h±☺.¼∩☺.ö∩☺.å∩☺.j∩☺.X∩☺. 00003CC0 4A EF 01 00 3C EF 01 00 32 EF 01 00 1E EF 01 00 12 EF 01 00 02 EF 01 00 E2 EE 01 00 CA EE 01 00 J∩☺.<∩☺.2∩☺.▲∩☺.↕∩☺.☻∩☺.Γε☺.╩ε☺. 00003CE0 AE EE 01 00 94 EE 01 00 7A EE 01 00 66 EE 01 00 56 EE 01 00 36 EE 01 00 1E EE 01 00 FE ED 01 00 «ε☺.öε☺.zε☺.fε☺.Vε☺.6ε☺.▲ε☺.■φ☺. 00003D00 DE ED 01 00 C6 ED 01 00 AA ED 01 00 92 ED 01 00 5C F9 01 00 7C F9 01 00 9C F9 01 00 BC F9 01 00 ▐φ☺.╞φ☺.¬φ☺.Æφ☺.\∙☺.|∙☺.£∙☺.╝∙☺. 00003D20 DC F9 01 00 EC F9 01 00 FA F9 01 00 10 FA 01 00 26 FA 01 00 36 FA 01 00 4A FA 01 00 58 FA 01 00 ▄∙☺.∞∙☺.·∙☺.►·☺.&·☺.6·☺.J·☺.X·☺. 00003D40 6C FA 01 00 7E FA 01 00 94 FA 01 00 A0 FA 01 00 AE FA 01 00 BE FA 01 00 CC FA 01 00 E6 FA 01 00 l·☺.~·☺.ö·☺.á·☺.«·☺.╛·☺.╠·☺.µ·☺. 00003D60 F6 FA 01 00 02 FB 01 00 16 FB 01 00 32 FB 01 00 4E FB 01 00 66 FB 01 00 76 FB 01 00 8C FB 01 00 ÷·☺.☻√☺.▬√☺.2√☺.N√☺.f√☺.v√☺.î√☺. 00003D80 9C FB 01 00 AA FB 01 00 C2 FB 01 00 D8 FB 01 00 E8 FB 01 00 FE FB 01 00 10 FC 01 00 28 FC 01 00 £√☺.¬√☺.┬√☺.╪√☺.Φ√☺.■√☺.►ⁿ☺.(ⁿ☺. 00003DA0 46 FC 01 00 7A ED 01 00 00 00 00 00 C0 01 5F 73 74 72 6E 69 63 6D 70 00 E8 02 77 63 73 73 74 72 Fⁿ☺.zφ☺.....└☺_strnicmp.Φ☻wcsstr 00003DC0 00 00 E5 01 5F 77 63 73 69 63 6D 70 00 00 DC 01 5F 76 73 6E 70 72 69 6E 74 66 00 00 A9 01 5F 73 ..σ☺_wcsicmp..▄☺_vsnprintf..⌐☺_s 00003DE0 6E 70 72 69 6E 74 66 00 BB 02 73 74 72 6E 63 6D 70 00 4D 02 66 67 65 74 73 00 B2 02 73 74 72 63 nprintf.╗☻strncmp.M☻fgets.▓☻strc 00003E00 68 72 00 00 BC 01 5F 73 74 72 69 63 6D 70 00 00 AD 02 73 70 72 69 6E 74 66 00 AF 00 5F 63 6C 6F hr..╝☺_stricmp..¡☻sprintf.»._clo 00003E20 73 65 00 00 93 01 5F 72 65 61 64 00 82 01 5F 6F 70 65 6E 00 DB 00 5F 66 69 6E 64 63 6C 6F 73 65 se..ô☺_read.é☺_open.█._findclose 00003E40 00 00 DC 00 5F 66 69 6E 64 66 69 72 73 74 00 00 52 02 66 6F 70 65 6E 00 BE 01 5F 73 74 72 6C 77 ..▄._findfirst..R☻fopen.╛☺_strlw 00003E60 72 00 C6 01 5F 73 74 72 75 70 72 00 B8 01 5F 73 74 72 63 6D 70 69 00 00 47 02 66 63 6C 6F 73 65 r.╞☺_strupr.╕☺_strcmpi..G☻fclose 00003E80 00 00 53 02 66 70 72 69 6E 74 66 00 D8 01 5F 75 6E 6C 69 6E 6B 00 C0 02 73 74 72 73 74 72 00 00 ..S☻fprintf.╪☺_unlink.└☻strstr.. 00003EA0 93 02 6D 65 6D 6D 6F 76 65 00 EA 02 77 63 73 74 6F 6B 00 00 DE 02 77 63 73 63 70 79 00 00 DA 02 ô☻memmove.Ω☻wcstok..▐☻wcscpy..┌☻ 00003EC0 77 63 73 63 61 74 00 00 C6 00 5F 65 78 63 65 70 74 5F 68 61 6E 64 6C 65 72 33 00 00 AA 01 5F 73 wcscat..╞._except_handler3..¬☺_s 00003EE0 6E 77 70 72 69 6E 74 66 00 00 E1 02 77 63 73 6C 65 6E 00 00 DB 02 77 63 73 63 68 72 00 00 E5 02 nwprintf..ß☻wcslen..█☻wcschr..σ☻ 00003F00 77 63 73 70 62 72 6B 00 CF 00 5F 65 78 69 74 00 48 00 5F 58 63 70 74 46 69 6C 74 65 72 00 44 02 wcspbrk.╧._exit.H._XcptFilter.D☻ 00003F20 65 78 69 74 00 00 67 00 5F 5F 70 5F 5F 61 63 6D 64 6C 6E 00 0B 01 5F 69 6E 69 74 74 65 72 6D 00 exit..g.__p__acmdln.♂☺_initterm. 00003F40 58 00 5F 5F 67 65 74 6D 61 69 6E 61 72 67 73 00 81 00 5F 5F 73 65 74 75 73 65 72 6D 61 74 68 65 X.__getmainargs.ü.__setusermathe 00003F60 72 72 00 00 9A 00 5F 61 64 6A 75 73 74 5F 66 64 69 76 00 00 69 00 5F 5F 70 5F 5F 63 6F 6D 6D 6F rr..Ü._adjust_fdiv..i.__p__commo 00003F80 64 65 00 00 6E 00 5F 5F 70 5F 5F 66 6D 6F 64 65 00 00 7F 00 5F 5F 73 65 74 5F 61 70 70 5F 74 79 de..n.__p__fmode..⌂.__set_app_ty 00003FA0 70 65 00 00 4D 53 56 43 52 54 2E 64 6C 6C 00 00 B3 00 5F 63 6F 6E 74 72 6F 6C 66 70 00 00 17 01 pe..MSVCRT.dll..│._controlfp..↨☺ 00003FC0 52 65 67 43 6C 6F 73 65 4B 65 79 00 27 01 52 65 67 45 6E 75 6D 56 61 6C 75 65 57 00 2F 01 52 65 RegCloseKey.'☺RegEnumValueW./☺Re 00003FE0 67 4F 70 65 6E 4B 65 79 45 78 57 00 32 01 52 65 67 51 75 65 72 79 49 6E 66 6F 4B 65 79 57 00 00 gOpenKeyExW.2☺RegQueryInfoKeyW.. 00004000 4E 01 52 65 76 65 72 74 54 6F 53 65 6C 66 00 00 24 00 43 6C 6F 73 65 53 65 72 76 69 63 65 48 61 N☺RevertToSelf..$.CloseServiceHa 00004020 6E 64 6C 65 00 00 13 01 51 75 65 72 79 53 65 72 76 69 63 65 53 74 61 74 75 73 00 00 08 01 4F 70 ndle..‼☺QueryServiceStatus..◘☺Op 00004040 65 6E 53 65 72 76 69 63 65 57 00 00 06 01 4F 70 65 6E 53 43 4D 61 6E 61 67 65 72 57 00 00 4D 01 enServiceW..♠☺OpenSCManagerW..M☺ 00004060 52 65 70 6F 72 74 45 76 65 6E 74 57 00 00 23 01 52 65 67 45 6E 75 6D 4B 65 79 45 78 41 00 37 01 ReportEventW..#☺RegEnumKeyExA.7☺ 00004080 52 65 67 51 75 65 72 79 56 61 6C 75 65 45 78 57 00 00 30 01 52 65 67 4F 70 65 6E 4B 65 79 57 00 RegQueryValueExW..0☺RegOpenKeyW. 000040A0 21 01 52 65 67 44 65 6C 65 74 65 56 61 6C 75 65 57 00 29 00 43 72 65 61 74 65 50 72 6F 63 65 73 !☺RegDeleteValueW.).CreateProces 000040C0 73 41 73 55 73 65 72 57 00 00 4C 00 44 65 72 65 67 69 73 74 65 72 45 76 65 6E 74 53 6F 75 72 63 sAsUserW..L.DeregisterEventSourc 000040E0 65 00 47 01 52 65 67 69 73 74 65 72 45 76 65 6E 74 53 6F 75 72 63 65 57 00 00 42 01 52 65 67 53 e.G☺RegisterEventSourceW..B☺RegS 00004100 65 74 56 61 6C 75 65 45 78 57 00 00 87 01 53 79 73 74 65 6D 46 75 6E 63 74 69 6F 6E 30 32 39 00 etValueExW..ç☺SystemFunction029. 00004120 BA 00 4C 6F 6F 6B 75 70 41 63 63 6F 75 6E 74 53 69 64 57 00 9A 00 47 65 74 54 6F 6B 65 6E 49 6E ║.LookupAccountSidW.Ü.GetTokenIn 00004140 66 6F 72 6D 61 74 69 6F 6E 00 09 01 4F 70 65 6E 54 68 72 65 61 64 54 6F 6B 65 6E 00 25 01 52 65 formation.○☺OpenThreadToken.%☺Re 00004160 67 45 6E 75 6D 4B 65 79 57 00 1C 01 52 65 67 43 72 65 61 74 65 4B 65 79 45 78 57 00 14 01 51 75 gEnumKeyW.∟☺RegCreateKeyExW.¶☺Qu 00004180 65 72 79 57 69 6E 64 6F 77 73 33 31 46 69 6C 65 73 4D 69 67 72 61 74 69 6F 6E 00 00 6A 01 53 79 eryWindows31FilesMigration..j☺Sy 000041A0 6E 63 68 72 6F 6E 69 7A 65 57 69 6E 64 6F 77 73 33 31 46 69 6C 65 73 41 6E 64 57 69 6E 64 6F 77 nchronizeWindows31FilesAndWindow 000041C0 73 4E 54 52 65 67 69 73 74 72 79 00 58 01 53 65 74 4B 65 72 6E 65 6C 4F 62 6A 65 63 74 53 65 63 sNTRegistry.X☺SetKernelObjectSec 000041E0 75 72 69 74 79 00 5C 01 53 65 74 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 44 61 63 urity.\☺SetSecurityDescriptorDac 00004200 6C 00 AA 00 49 6E 69 74 69 61 6C 69 7A 65 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 l.¬.InitializeSecurityDescriptor 00004220 00 00 41 44 56 41 50 49 33 32 2E 64 6C 6C 00 00 9A 01 4C 6F 63 61 6C 46 72 65 65 00 96 01 4C 6F ..ADVAPI32.dll..Ü☺LocalFree.û☺Lo 00004240 63 61 6C 41 6C 6C 6F 63 00 00 95 02 6C 73 74 72 63 61 74 57 00 00 A4 02 6C 73 74 72 6C 65 6E 57 calAlloc..ò☻lstrcatW..ñ☻lstrlenW 00004260 00 00 9E 02 6C 73 74 72 63 70 79 57 00 00 9B 02 6C 73 74 72 63 6D 70 69 57 00 F4 00 47 65 74 4C ..₧☻lstrcpyW..¢☻lstrcmpiW.⌠.GetL 00004280 61 73 74 45 72 72 6F 72 00 00 18 00 43 6C 6F 73 65 48 61 6E 64 6C 65 00 D6 01 52 65 61 64 46 69 astError..↑.CloseHandle.╓☺ReadFi 000042A0 6C 65 00 00 ED 00 47 65 74 46 69 6C 65 53 69 7A 65 00 14 02 53 65 74 45 72 72 6F 72 4D 6F 64 65 le..φ.GetFileSize.¶☻SetErrorMode 000042C0 00 00 34 00 43 72 65 61 74 65 46 69 6C 65 57 00 98 00 46 72 65 65 4C 69 62 72 61 72 79 00 93 01 ..4.CreateFileW.ÿ.FreeLibrary.ô☺ 000042E0 4C 6F 61 64 4C 69 62 72 61 72 79 57 00 00 16 01 47 65 74 50 72 6F 63 41 64 64 72 65 73 73 00 00 LoadLibraryW..▬☺GetProcAddress.. 00004300 6B 00 45 78 69 74 50 72 6F 63 65 73 73 00 24 01 47 65 74 50 72 6F 66 69 6C 65 53 74 72 69 6E 67 k.ExitProcess.$☺GetProfileString 00004320 57 00 D5 00 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 61 64 00 00 95 01 4C 6F 61 64 52 65 73 6F W.╒.GetCurrentThread..ò☺LoadReso 00004340 75 72 63 65 00 00 8C 00 46 69 6E 64 52 65 73 6F 75 72 63 65 57 00 20 01 47 65 74 50 72 6F 66 69 urce..î.FindResourceW. ☺GetProfi 00004360 6C 65 49 6E 74 57 00 00 43 00 43 72 65 61 74 65 54 68 72 65 61 64 00 00 AF 00 47 65 74 43 6F 6D leIntW..C.CreateThread..».GetCom 00004380 70 75 74 65 72 4E 61 6D 65 57 00 00 13 02 53 65 74 45 6E 76 69 72 6F 6E 6D 65 6E 74 56 61 72 69 puterNameW..‼☻SetEnvironmentVari 000043A0 61 62 6C 65 57 00 47 02 54 65 72 6D 69 6E 61 74 65 50 72 6F 63 65 73 73 00 00 81 02 57 72 69 74 ableW.G☻TerminateProcess..ü☻Writ 000043C0 65 50 72 69 76 61 74 65 50 72 6F 66 69 6C 65 53 74 72 69 6E 67 41 00 00 12 01 47 65 74 50 72 69 ePrivateProfileStringA..↕☺GetPri 000043E0 76 61 74 65 50 72 6F 66 69 6C 65 53 74 72 69 6E 67 41 00 00 9D 01 4C 6F 63 61 6C 52 65 41 6C 6C vateProfileStringA..¥☺LocalReAll 00004400 6F 63 00 00 6E 00 45 78 70 61 6E 64 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73 41 00 oc..n.ExpandEnvironmentStringsA. 00004420 88 02 57 72 69 74 65 50 72 6F 66 69 6C 65 53 74 72 69 6E 67 41 00 E4 00 47 65 74 45 6E 76 69 72 ê☻WriteProfileStringA.Σ.GetEnvir 00004440 6F 6E 6D 65 6E 74 56 61 72 69 61 62 6C 65 41 00 5F 02 56 69 72 74 75 61 6C 46 72 65 65 00 5C 02 onmentVariableA._☻VirtualFree.\☻ 00004460 56 69 72 74 75 61 6C 41 6C 6C 6F 63 00 00 19 00 43 6C 6F 73 65 50 72 6F 66 69 6C 65 55 73 65 72 VirtualAlloc..↓.CloseProfileUser 00004480 4D 61 70 70 69 6E 67 00 EA 01 53 65 61 72 63 68 50 61 74 68 41 00 B5 01 4F 70 65 6E 50 72 6F 66 Mapping.Ω☺SearchPathA.╡☺OpenProf 000044A0 69 6C 65 55 73 65 72 4D 61 70 70 69 6E 67 00 00 AE 00 47 65 74 43 6F 6D 70 75 74 65 72 4E 61 6D ileUserMapping..«.GetComputerNam 000044C0 65 41 00 00 23 01 47 65 74 50 72 6F 66 69 6C 65 53 74 72 69 6E 67 41 00 89 02 57 72 69 74 65 50 eA..#☺GetProfileStringA.ë☻WriteP 000044E0 72 6F 66 69 6C 65 53 74 72 69 6E 67 57 00 82 02 57 72 69 74 65 50 72 69 76 61 74 65 50 72 6F 66 rofileStringW.é☻WritePrivateProf 00004500 69 6C 65 53 74 72 69 6E 67 57 00 00 13 01 47 65 74 50 72 69 76 61 74 65 50 72 6F 66 69 6C 65 53 ileStringW..‼☺GetPrivateProfileS 00004520 74 72 69 6E 67 57 00 00 5C 01 47 6C 6F 62 61 6C 46 72 65 65 00 00 EB 01 53 65 61 72 63 68 50 61 tringW..\☺GlobalFree..δ☺SearchPa 00004540 74 68 57 00 55 01 47 6C 6F 62 61 6C 41 6C 6C 6F 63 00 45 01 47 65 74 54 69 63 6B 43 6F 75 6E 74 thW.U☺GlobalAlloc.E☺GetTickCount 00004560 00 00 E3 01 52 65 73 75 6D 65 54 68 72 65 61 64 00 00 0D 01 47 65 74 50 72 69 76 61 74 65 50 72 ..π☺ResumeThread..♪☺GetPrivatePr 00004580 6F 66 69 6C 65 49 6E 74 57 00 6F 00 45 78 70 61 6E 64 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 ofileIntW.o.ExpandEnvironmentStr 000045A0 69 6E 67 73 57 00 48 02 54 65 72 6D 69 6E 61 74 65 54 68 72 65 61 64 00 1F 02 53 65 74 4C 61 73 ingsW.H☻TerminateThread.▼☻SetLas 000045C0 74 45 72 72 6F 72 00 00 E6 00 47 65 74 45 78 69 74 43 6F 64 65 50 72 6F 63 65 73 73 00 00 D6 00 tError..µ.GetExitCodeProcess..╓. 000045E0 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 61 64 49 64 00 00 6C 00 45 78 69 74 54 68 72 65 61 64 GetCurrentThreadId..l.ExitThread 00004600 00 00 6B 02 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A 65 63 74 00 4F 00 44 65 6C 65 74 65 ..k☻WaitForSingleObject.O.Delete 00004620 46 69 6C 65 57 00 40 02 53 6C 65 65 70 00 34 02 53 65 74 54 68 72 65 61 64 50 72 69 6F 72 69 74 FileW.@☻Sleep.4☻SetThreadPriorit 00004640 79 00 25 02 53 65 74 50 72 69 6F 72 69 74 79 43 6C 61 73 73 00 00 D3 00 47 65 74 43 75 72 72 65 y.%☻SetPriorityClass..╙.GetCurre 00004660 6E 74 50 72 6F 63 65 73 73 00 A8 01 4D 6F 76 65 46 69 6C 65 45 78 57 00 32 01 47 65 74 53 79 73 ntProcess.¿☺MoveFileExW.2☺GetSys 00004680 74 65 6D 44 69 72 65 63 74 6F 72 79 57 00 3E 00 43 72 65 61 74 65 50 72 6F 63 65 73 73 57 00 00 temDirectoryW.>.CreateProcessW.. 000046A0 AD 01 4F 70 65 6E 45 76 65 6E 74 41 00 00 90 01 4C 6F 61 64 4C 69 62 72 61 72 79 41 00 00 FE 00 ¡☺OpenEventA..É☺LoadLibraryA..■. 000046C0 47 65 74 4D 6F 64 75 6C 65 48 61 6E 64 6C 65 41 00 00 6A 02 57 61 69 74 46 6F 72 4D 75 6C 74 69 GetModuleHandleA..j☻WaitForMulti 000046E0 70 6C 65 4F 62 6A 65 63 74 73 45 78 00 00 FF 00 47 65 74 4D 6F 64 75 6C 65 48 61 6E 64 6C 65 57 pleObjectsEx.. .GetModuleHandleW 00004700 00 00 98 02 6C 73 74 72 63 6D 70 57 00 00 15 02 53 65 74 45 76 65 6E 74 00 00 AE 01 4F 70 65 6E ..ÿ☻lstrcmpW..§☻SetEvent..«☺Open 00004720 45 76 65 6E 74 57 00 00 9F 01 4C 6F 63 61 6C 53 69 7A 65 00 65 02 56 69 72 74 75 61 6C 51 75 65 EventW..ƒ☺LocalSize.e☻VirtualQue 00004740 72 79 45 78 00 00 28 01 47 65 74 53 74 61 72 74 75 70 49 6E 66 6F 41 00 4B 45 52 4E 45 4C 33 32 ryEx..(☺GetStartupInfoA.KERNEL32 00004760 2E 64 6C 6C 00 00 3D 01 52 65 6D 6F 76 65 46 6F 6E 74 52 65 73 6F 75 72 63 65 57 00 04 00 41 64 .dll..=☺RemoveFontResourceW.♦.Ad 00004780 64 46 6F 6E 74 52 65 73 6F 75 72 63 65 57 00 00 47 44 49 33 32 2E 64 6C 6C 00 9A 01 4D 65 73 73 dFontResourceW..GDI32.dll.Ü☺Mess 000047A0 61 67 65 42 6F 78 57 00 CB 00 45 78 69 74 57 69 6E 64 6F 77 73 45 78 00 8D 00 44 69 61 6C 6F 67 ageBoxW.╦.ExitWindowsEx.ì.Dialog 000047C0 42 6F 78 49 6E 64 69 72 65 63 74 50 61 72 61 6D 57 00 B4 00 45 6E 64 44 69 61 6C 6F 67 00 51 02 BoxIndirectParamW.┤.EndDialog.Q☻ 000047E0 55 70 64 61 74 65 57 69 6E 64 6F 77 00 00 1C 02 53 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 57 00 00 UpdateWindow..∟☻SetWindowLongW.. 00004800 3B 01 47 65 74 57 69 6E 64 6F 77 4C 6F 6E 67 57 00 00 35 02 53 79 73 74 65 6D 50 61 72 61 6D 65 ;☺GetWindowLongW..5☻SystemParame 00004820 74 65 72 73 49 6E 66 6F 57 00 8A 00 44 65 73 74 72 6F 79 57 69 6E 64 6F 77 00 67 01 49 73 57 69 tersInfoW.è.DestroyWindow.g☺IsWi 00004840 6E 64 6F 77 00 00 4C 00 43 72 65 61 74 65 44 69 61 6C 6F 67 50 61 72 61 6D 57 00 00 84 01 4C 6F ndow..L.CreateDialogParamW..ä☺Lo 00004860 61 64 53 74 72 69 6E 67 57 00 B2 01 50 6F 73 74 4D 65 73 73 61 67 65 57 00 00 2D 02 53 68 6F 77 adStringW.▓☺PostMessageW..-☻Show 00004880 57 69 6E 64 6F 77 00 00 65 02 77 73 70 72 69 6E 74 66 57 00 1E 02 53 65 74 57 69 6E 64 6F 77 50 Window..e☻wsprintfW.▲☻SetWindowP 000048A0 6F 73 00 00 23 00 43 68 61 72 4E 65 78 74 57 00 95 01 4D 65 73 73 61 67 65 42 6F 78 41 00 56 00 os..#.CharNextW.ò☺MessageBoxA.V. 000048C0 43 72 65 61 74 65 57 69 6E 64 6F 77 45 78 57 00 C1 01 52 65 67 69 73 74 65 72 43 6C 61 73 73 57 CreateWindowExW.┴☺RegisterClassW 000048E0 00 00 6D 01 4B 69 6C 6C 54 69 6D 65 72 00 16 02 53 65 74 54 69 6D 65 72 00 00 18 01 47 65 74 4D ..m☺KillTimer.▬☻SetTimer..↑☺GetM 00004900 65 73 73 61 67 65 54 69 6D 65 00 00 81 00 44 65 66 57 69 6E 64 6F 77 50 72 6F 63 57 00 00 C4 01 essageTime..ü.DefWindowProcW..─☺ 00004920 52 65 67 69 73 74 65 72 48 6F 74 4B 65 79 00 00 4F 02 55 6E 72 65 67 69 73 74 65 72 48 6F 74 4B RegisterHotKey..O☻UnregisterHotK 00004940 65 79 00 00 39 00 43 6C 6F 73 65 44 65 73 6B 74 6F 70 00 00 47 00 43 72 65 61 74 65 44 65 73 6B ey..9.CloseDesktop..G.CreateDesk 00004960 74 6F 70 57 00 00 F0 00 47 65 74 44 65 73 6B 74 6F 70 57 69 6E 64 6F 77 00 00 15 02 53 65 74 54 topW..≡.GetDesktopWindow..§☻SetT 00004980 68 72 65 61 64 44 65 73 6B 74 6F 70 00 00 04 02 53 65 74 50 72 6F 63 65 73 73 57 69 6E 64 6F 77 hreadDesktop..♦☻SetProcessWindow 000049A0 53 74 61 74 69 6F 6E 00 58 00 43 72 65 61 74 65 57 69 6E 64 6F 77 53 74 61 74 69 6F 6E 57 00 00 Station.X.CreateWindowStationW.. 000049C0 19 02 53 65 74 55 73 65 72 4F 62 6A 65 63 74 53 65 63 75 72 69 74 79 00 19 01 47 65 74 4D 65 73 ↓☻SetUserObjectSecurity.↓☺GetMes 000049E0 73 61 67 65 57 00 91 00 44 69 73 70 61 74 63 68 4D 65 73 73 61 67 65 57 00 00 18 02 53 65 74 55 sageW.æ.DispatchMessageW..↑☻SetU 00004A00 73 65 72 4F 62 6A 65 63 74 49 6E 66 6F 72 6D 61 74 69 6F 6E 57 00 35 01 47 65 74 55 73 65 72 4F serObjectInformationW.5☺GetUserO 00004A20 62 6A 65 63 74 49 6E 66 6F 72 6D 61 74 69 6F 6E 57 00 B5 01 50 6F 73 74 54 68 72 65 61 64 4D 65 bjectInformationW.╡☺PostThreadMe 00004A40 73 73 61 67 65 57 00 00 83 01 4C 6F 61 64 53 74 72 69 6E 67 41 00 8F 00 44 69 61 6C 6F 67 42 6F ssageW..â☺LoadStringA.Å.DialogBo 00004A60 78 50 61 72 61 6D 57 00 3C 01 47 65 74 57 69 6E 64 6F 77 50 6C 61 63 65 6D 65 6E 74 00 00 1D 02 xParamW.<☺GetWindowPlacement..↔☻ 00004A80 53 65 74 57 69 6E 64 6F 77 50 6C 61 63 65 6D 65 6E 74 00 00 83 00 44 65 6C 65 74 65 4D 65 6E 75 SetWindowPlacement..â.DeleteMenu 00004AA0 00 00 2B 01 47 65 74 53 79 73 74 65 6D 4D 65 6E 75 00 F3 01 53 65 74 44 6C 67 49 74 65 6D 54 65 ..+☺GetSystemMenu.≤☺SetDlgItemTe 00004AC0 78 74 57 00 F6 00 47 65 74 44 6C 67 49 74 65 6D 54 65 78 74 57 00 DF 01 53 65 6E 64 4D 65 73 73 xtW.÷.GetDlgItemTextW.▀☺SendMess 00004AE0 61 67 65 57 00 00 F3 00 47 65 74 44 6C 67 49 74 65 6D 00 00 C5 00 45 6E 75 6D 54 68 72 65 61 64 ageW..≤.GetDlgItem..┼.EnumThread 00004B00 57 69 6E 64 6F 77 73 00 42 01 47 65 74 57 69 6E 64 6F 77 54 65 78 74 57 00 00 27 02 53 65 74 57 Windows.B☺GetWindowTextW..'☻SetW 00004B20 69 6E 64 6F 77 73 48 6F 6F 6B 57 00 47 02 55 6E 68 6F 6F 6B 57 69 6E 64 6F 77 73 48 6F 6F 6B 00 indowsHookW.G☻UnhookWindowsHook. 00004B40 11 00 43 61 6C 6C 4E 65 78 74 48 6F 6F 6B 45 78 00 00 B0 01 50 65 65 6B 4D 65 73 73 61 67 65 57 ◄.CallNextHookEx..░☺PeekMessageW 00004B60 00 00 EC 01 53 65 74 43 75 72 73 6F 72 00 75 01 4C 6F 61 64 43 75 72 73 6F 72 57 00 62 01 49 73 ..∞☺SetCursor.u☺LoadCursorW.b☺Is 00004B80 44 6C 67 42 75 74 74 6F 6E 43 68 65 63 6B 65 64 00 00 F5 01 53 65 74 46 6F 63 75 73 00 00 2F 00 DlgButtonChecked..⌡☺SetFocus../. 00004BA0 43 68 65 63 6B 44 6C 67 42 75 74 74 6F 6E 00 00 AA 01 4F 70 65 6E 49 6E 70 75 74 44 65 73 6B 74 CheckDlgButton..¬☺OpenInputDeskt 00004BC0 6F 70 00 00 A8 01 4F 70 65 6E 44 65 73 6B 74 6F 70 57 00 00 32 02 53 77 69 74 63 68 44 65 73 6B op..¿☺OpenDesktopW..2☻SwitchDesk 00004BE0 74 6F 70 00 F6 01 53 65 74 46 6F 72 65 67 72 6F 75 6E 64 57 69 6E 64 6F 77 00 3D 01 47 65 74 57 top.÷☺SetForegroundWindow.=☺GetW 00004C00 69 6E 64 6F 77 52 65 63 74 00 1D 01 47 65 74 50 61 72 65 6E 74 00 2C 01 47 65 74 53 79 73 74 65 indowRect.↔☺GetParent.,☺GetSyste 00004C20 6D 4D 65 74 72 69 63 73 00 00 F9 01 53 65 74 4C 61 73 74 45 72 72 6F 72 45 78 00 00 55 53 45 52 mMetrics..∙☺SetLastErrorEx..USER 00004C40 33 32 2E 64 6C 6C 00 00 2A 00 49 5F 52 70 63 4D 61 70 57 69 6E 33 32 53 74 61 74 75 73 00 4F 01 32.dll..*.I_RpcMapWin32Status.O☺ 00004C60 52 70 63 52 65 76 65 72 74 54 6F 53 65 6C 66 00 2A 01 52 70 63 49 6D 70 65 72 73 6F 6E 61 74 65 RpcRevertToSelf.*☺RpcImpersonate 00004C80 43 6C 69 65 6E 74 00 00 58 01 52 70 63 53 65 72 76 65 72 52 65 67 69 73 74 65 72 49 66 00 63 01 Client..X☺RpcServerRegisterIf.c☺ 00004CA0 52 70 63 53 65 72 76 65 72 55 73 65 50 72 6F 74 73 65 71 45 70 57 00 00 55 01 52 70 63 53 65 72 RpcServerUseProtseqEpW..U☺RpcSer 00004CC0 76 65 72 4C 69 73 74 65 6E 00 52 50 43 52 54 34 2E 64 6C 6C 00 00 50 02 55 70 64 61 74 65 50 65 verListen.RPCRT4.dll..P☻UpdatePe 00004CE0 72 55 73 65 72 53 79 73 74 65 6D 50 61 72 61 6D 65 74 65 72 73 00 20 02 53 65 74 57 69 6E 64 6F rUserSystemParameters. ☻SetWindo 00004D00 77 53 74 61 74 69 6F 6E 55 73 65 72 00 00 85 01 4C 6F 63 6B 57 69 6E 64 6F 77 53 74 61 74 69 6F wStationUser..à☺LockWindowStatio 00004D20 6E 00 4B 02 55 6E 6C 6F 63 6B 57 69 6E 64 6F 77 53 74 61 74 69 6F 6E 00 FA 01 53 65 74 4C 6F 67 n.K☻UnlockWindowStation.·☺SetLog 00004D40 6F 6E 4E 6F 74 69 66 79 57 69 6E 64 6F 77 00 00 C5 01 52 65 67 69 73 74 65 72 4C 6F 67 6F 6E 50 onNotifyWindow..┼☺RegisterLogonP 00004D60 72 6F 63 65 73 73 00 00 7D 01 4C 6F 61 64 4C 6F 63 61 6C 46 6F 6E 74 73 00 00 67 01 52 74 6C 44 rocess..}☺LoadLocalFonts..g☺RtlD 00004D80 65 73 74 72 6F 79 45 6E 76 69 72 6F 6E 6D 65 6E 74 00 4B 01 52 74 6C 43 72 65 61 74 65 45 6E 76 estroyEnvironment.K☺RtlCreateEnv 00004DA0 69 72 6F 6E 6D 65 6E 74 00 00 15 02 52 74 6C 53 65 74 45 6E 76 69 72 6F 6E 6D 65 6E 74 56 61 72 ironment..§☻RtlSetEnvironmentVar 00004DC0 69 61 62 6C 65 00 B8 01 52 74 6C 49 6E 69 74 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 F3 01 iable.╕☺RtlInitUnicodeString..≤☺ 00004DE0 52 74 6C 51 75 65 72 79 45 6E 76 69 72 6F 6E 6D 65 6E 74 56 61 72 69 61 62 6C 65 5F 55 00 83 01 RtlQueryEnvironmentVariable_U.â☺ 00004E00 52 74 6C 45 78 70 61 6E 64 45 6E 76 69 72 6F 6E 6D 65 6E 74 53 74 72 69 6E 67 73 5F 55 00 9A 01 RtlExpandEnvironmentStrings_U.Ü☺ 00004E20 52 74 6C 46 72 65 65 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 1F 01 52 74 6C 41 6E 73 69 53 RtlFreeUnicodeString..▼☺RtlAnsiS 00004E40 74 72 69 6E 67 54 6F 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 B7 01 52 74 6C 49 6E 69 74 53 tringToUnicodeString..╖☺RtlInitS 00004E60 74 72 69 6E 67 00 ED 00 4E 74 53 68 75 74 64 6F 77 6E 53 79 73 74 65 6D 00 00 D3 01 52 74 6C 4C tring.φ.NtShutdownSystem..╙☺RtlL 00004E80 65 61 76 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 76 01 52 74 6C 45 6E 74 65 72 43 72 eaveCriticalSection.v☺RtlEnterCr 00004EA0 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 60 01 52 74 6C 44 65 6C 65 74 65 43 72 69 74 69 63 61 iticalSection.`☺RtlDeleteCritica 00004EC0 6C 53 65 63 74 69 6F 6E 00 00 FE 00 4E 74 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A 65 63 lSection..■.NtWaitForSingleObjec 00004EE0 74 00 BC 01 52 74 6C 49 6E 69 74 69 61 6C 69 7A 65 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E t.╝☺RtlInitializeCriticalSection 00004F00 00 00 38 00 4E 74 41 6C 65 72 74 54 68 72 65 61 64 00 86 00 4E 74 4F 70 65 6E 4B 65 79 00 B4 01 ..8.NtAlertThread.å.NtOpenKey.┤☺ 00004F20 52 74 6C 49 6E 69 74 41 6E 73 69 53 74 72 69 6E 67 00 40 00 4E 74 43 6C 6F 73 65 00 4B 00 4E 74 RtlInitAnsiString.@.NtClose.K.Nt 00004F40 43 72 65 61 74 65 4B 65 79 00 97 01 52 74 6C 46 72 65 65 48 65 61 70 00 1C 01 52 74 6C 41 6C 6C CreateKey.ù☺RtlFreeHeap.∟☺RtlAll 00004F60 6F 63 61 74 65 48 65 61 70 00 B1 00 4E 74 51 75 65 72 79 53 79 73 74 65 6D 49 6E 66 6F 72 6D 61 ocateHeap.▒.NtQuerySystemInforma 00004F80 74 69 6F 6E 00 00 99 01 52 74 6C 46 72 65 65 53 69 64 00 00 DD 00 4E 74 53 65 74 49 6E 66 6F 72 tion..Ö☺RtlFreeSid..▌.NtSetInfor 00004FA0 6D 61 74 69 6F 6E 54 6F 6B 65 6E 00 8A 00 4E 74 4F 70 65 6E 50 72 6F 63 65 73 73 54 6F 6B 65 6E mationToken.è.NtOpenProcessToken 00004FC0 00 00 11 01 52 74 6C 41 64 64 41 63 63 65 73 73 41 6C 6C 6F 77 65 64 41 63 65 00 00 48 01 52 74 ..◄☺RtlAddAccessAllowedAce..H☺Rt 00004FE0 6C 43 72 65 61 74 65 41 63 6C 00 00 1A 01 52 74 6C 41 6C 6C 6F 63 61 74 65 41 6E 64 49 6E 69 74 lCreateAcl..→☺RtlAllocateAndInit 00005000 69 61 6C 69 7A 65 53 69 64 00 95 01 52 74 6C 46 72 65 65 41 6E 73 69 53 74 72 69 6E 67 00 31 02 ializeSid.ò☺RtlFreeAnsiString.1☻ 00005020 52 74 6C 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 54 6F 41 6E 73 69 53 74 72 69 6E 67 00 00 B5 00 RtlUnicodeStringToAnsiString..╡. 00005040 4E 74 51 75 65 72 79 56 61 6C 75 65 4B 65 79 00 EB 00 4E 74 53 65 74 56 61 6C 75 65 4B 65 79 00 NtQueryValueKey.δ.NtSetValueKey. 00005060 2C 01 52 74 6C 43 68 61 72 54 6F 49 6E 74 65 67 65 72 00 00 9A 00 4E 74 51 75 65 72 79 44 69 72 ,☺RtlCharToInteger..Ü.NtQueryDir 00005080 65 63 74 6F 72 79 4F 62 6A 65 63 74 00 00 81 00 4E 74 4F 70 65 6E 44 69 72 65 63 74 6F 72 79 4F ectoryObject..ü.NtOpenDirectoryO 000050A0 62 6A 65 63 74 00 6E 00 4E 74 46 73 43 6F 6E 74 72 6F 6C 46 69 6C 65 00 19 01 52 74 6C 41 64 6A bject.n.NtFsControlFile.↓☺RtlAdj 000050C0 75 73 74 50 72 69 76 69 6C 65 67 65 00 00 84 00 4E 74 4F 70 65 6E 46 69 6C 65 00 00 E4 00 4E 74 ustPrivilege..ä.NtOpenFile..Σ.Nt 000050E0 53 65 74 53 65 63 75 72 69 74 79 4F 62 6A 65 63 74 00 B7 00 4E 74 51 75 65 72 79 56 6F 6C 75 6D SetSecurityObject.╖.NtQueryVolum 00005100 65 49 6E 66 6F 72 6D 61 74 69 6F 6E 46 69 6C 65 00 00 EF 01 52 74 6C 50 72 65 66 69 78 55 6E 69 eInformationFile..∩☺RtlPrefixUni 00005120 63 6F 64 65 53 74 72 69 6E 67 00 00 81 01 52 74 6C 45 71 75 61 6C 55 6E 69 63 6F 64 65 53 74 72 codeString..ü☺RtlEqualUnicodeStr 00005140 69 6E 67 00 7F 01 52 74 6C 45 71 75 61 6C 53 69 64 00 26 02 52 74 6C 53 75 62 41 75 74 68 6F 72 ing.⌂☺RtlEqualSid.&☻RtlSubAuthor 00005160 69 74 79 53 69 64 00 00 C1 01 52 74 6C 49 6E 69 74 69 61 6C 69 7A 65 53 69 64 00 00 D4 01 52 74 itySid..┴☺RtlInitializeSid..╘☺Rt 00005180 6C 4C 65 6E 67 74 68 52 65 71 75 69 72 65 64 53 69 64 00 00 39 00 4E 74 41 6C 6C 6F 63 61 74 65 lLengthRequiredSid..9.NtAllocate 000051A0 4C 6F 63 61 6C 6C 79 55 6E 69 71 75 65 49 64 00 14 02 52 74 6C 53 65 74 44 61 63 6C 53 65 63 75 LocallyUniqueId.¶☻RtlSetDaclSecu 000051C0 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 00 00 51 01 52 74 6C 43 72 65 61 74 65 53 65 63 75 72 rityDescriptor..Q☺RtlCreateSecur 000051E0 69 74 79 44 65 73 63 72 69 70 74 6F 72 00 13 01 52 74 6C 41 64 64 41 63 65 00 A2 01 52 74 6C 47 ityDescriptor.‼☺RtlAddAce.ó☺RtlG 00005200 65 74 44 61 63 6C 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 00 00 44 01 52 74 6C 43 etDaclSecurityDescriptor..D☺RtlC 00005220 6F 70 79 53 69 64 00 00 D6 01 52 74 6C 4C 65 6E 67 74 68 53 69 64 00 00 DC 00 4E 74 53 65 74 49 opySid..╓☺RtlLengthSid..▄.NtSetI 00005240 6E 66 6F 72 6D 61 74 69 6F 6E 54 68 72 65 61 64 00 00 63 00 4E 74 44 75 70 6C 69 63 61 74 65 54 nformationThread..c.NtDuplicateT 00005260 6F 6B 65 6E 00 00 62 00 4E 74 44 75 70 6C 69 63 61 74 65 4F 62 6A 65 63 74 00 A3 00 4E 74 51 75 oken..b.NtDuplicateObject.ú.NtQu 00005280 65 72 79 49 6E 66 6F 72 6D 61 74 69 6F 6E 54 6F 6B 65 6E 00 E4 01 52 74 6C 4E 74 53 74 61 74 75 eryInformationToken.Σ☺RtlNtStatu 000052A0 73 54 6F 44 6F 73 45 72 72 6F 72 00 DB 00 4E 74 53 65 74 49 6E 66 6F 72 6D 61 74 69 6F 6E 50 72 sToDosError.█.NtSetInformationPr 000052C0 6F 63 65 73 73 00 47 00 4E 74 43 72 65 61 74 65 45 76 65 6E 74 00 20 01 52 74 6C 41 70 70 65 6E ocess.G.NtCreateEvent. ☺RtlAppen 000052E0 64 41 73 63 69 69 7A 54 6F 53 74 72 69 6E 67 00 AF 00 4E 74 51 75 65 72 79 53 79 6D 62 6F 6C 69 dAsciizToString.».NtQuerySymboli 00005300 63 4C 69 6E 6B 4F 62 6A 65 63 74 00 8D 00 4E 74 4F 70 65 6E 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B cLinkObject.ì.NtOpenSymbolicLink 00005320 4F 62 6A 65 63 74 00 00 4F 00 4E 74 43 72 65 61 74 65 50 61 67 69 6E 67 46 69 6C 65 00 00 6E 01 Object..O.NtCreatePagingFile..n☺ 00005340 52 74 6C 44 6F 73 50 61 74 68 4E 61 6D 65 54 6F 4E 74 50 61 74 68 4E 61 6D 65 5F 55 00 00 B2 00 RtlDosPathNameToNtPathName_U..▓. 00005360 4E 74 51 75 65 72 79 53 79 73 74 65 6D 54 69 6D 65 00 2D 02 52 74 6C 54 69 6D 65 54 6F 53 65 63 NtQuerySystemTime.-☻RtlTimeToSec 00005380 6F 6E 64 73 53 69 6E 63 65 31 39 38 30 00 93 00 4E 74 50 72 69 76 69 6C 65 67 65 4F 62 6A 65 63 ondsSince1980.ô.NtPrivilegeObjec 000053A0 74 41 75 64 69 74 41 6C 61 72 6D 00 92 00 4E 74 50 72 69 76 69 6C 65 67 65 43 68 65 63 6B 00 00 tAuditAlarm.Æ.NtPrivilegeCheck.. 000053C0 8F 00 4E 74 4F 70 65 6E 54 68 72 65 61 64 54 6F 6B 65 6E 00 C4 01 52 74 6C 49 6E 74 65 67 65 72 Å.NtOpenThreadToken.─☺RtlInteger 000053E0 54 6F 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 A1 00 4E 74 51 75 65 72 79 49 6E 66 6F 72 6D 61 ToUnicodeString.í.NtQueryInforma 00005400 74 69 6F 6E 50 72 6F 63 65 73 73 00 E9 01 52 74 6C 4F 65 6D 53 74 72 69 6E 67 54 6F 55 6E 69 63 tionProcess.Θ☺RtlOemStringToUnic 00005420 6F 64 65 53 74 72 69 6E 67 00 BB 00 4E 74 52 65 61 64 46 69 6C 65 00 00 9D 01 52 74 6C 47 65 74 odeString.╗.NtReadFile..¥☺RtlGet 00005440 41 63 65 00 23 01 52 74 6C 41 70 70 65 6E 64 55 6E 69 63 6F 64 65 54 6F 53 74 72 69 6E 67 00 00 Ace.#☺RtlAppendUnicodeToString.. 00005460 47 01 52 74 6C 43 6F 70 79 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 69 01 52 74 6C 44 65 73 G☺RtlCopyUnicodeString..i☺RtlDes 00005480 74 72 6F 79 48 65 61 70 00 00 4C 01 52 74 6C 43 72 65 61 74 65 48 65 61 70 00 3D 02 52 74 6C 55 troyHeap..L☺RtlCreateHeap.=☻RtlU 000054A0 70 63 61 73 65 55 6E 69 63 6F 64 65 43 68 61 72 00 00 22 01 52 74 6C 41 70 70 65 6E 64 55 6E 69 pcaseUnicodeChar.."☺RtlAppendUni 000054C0 63 6F 64 65 53 74 72 69 6E 67 54 6F 53 74 72 69 6E 67 00 00 9F 00 4E 74 51 75 65 72 79 49 6E 66 codeStringToString..ƒ.NtQueryInf 000054E0 6F 72 6D 61 74 69 6F 6E 46 69 6C 65 00 00 F4 01 52 74 6C 51 75 65 72 79 49 6E 66 6F 72 6D 61 74 ormationFile..⌠☺RtlQueryInformat 00005500 69 6F 6E 41 63 6C 00 00 AD 00 4E 74 51 75 65 72 79 53 65 63 75 72 69 74 79 4F 62 6A 65 63 74 00 ionAcl..¡.NtQuerySecurityObject. 00005520 35 01 52 74 6C 43 6F 6D 70 61 72 65 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 6E 74 64 6C 6C 2E 5☺RtlCompareUnicodeString.ntdll. 00005540 64 6C 6C 00 05 00 47 65 74 55 73 65 72 50 72 6F 66 69 6C 65 44 69 72 65 63 74 6F 72 79 57 00 00 dll.♣.GetUserProfileDirectoryW.. 00005560 07 00 4C 6F 61 64 55 73 65 72 50 72 6F 66 69 6C 65 57 00 00 08 00 55 6E 6C 6F 61 64 55 73 65 72 •.LoadUserProfileW..◘.UnloadUser 00005580 50 72 6F 66 69 6C 65 00 55 53 45 52 45 4E 56 2E 64 6C 6C 00 A0 00 47 65 74 55 73 65 72 4E 61 6D Profile.USERENV.dll.á.GetUserNam 000055A0 65 57 00 00 04 01 4F 70 65 6E 50 72 6F 63 65 73 73 54 6F 6B 65 6E 00 00 0D 00 41 72 65 41 6C 6C eW..♦☺OpenProcessToken..♪.AreAll 000055C0 41 63 63 65 73 73 65 73 47 72 61 6E 74 65 64 00 69 00 45 71 75 61 6C 53 69 64 00 00 6C 00 47 65 AccessesGranted.i.EqualSid..l.Ge 000055E0 74 41 63 65 00 00 8C 00 47 65 74 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 44 61 63 tAce..î.GetSecurityDescriptorDac 00005600 6C 00 29 01 52 65 67 47 65 74 4B 65 79 53 65 63 75 72 69 74 79 00 0B 00 41 6C 6C 6F 63 61 74 65 l.)☺RegGetKeySecurity.♂.Allocate 00005620 41 6E 64 49 6E 69 74 69 61 6C 69 7A 65 53 69 64 00 00 79 01 49 6E 69 74 69 61 6C 69 7A 65 43 72 AndInitializeSid..y☺InitializeCr 00005640 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 8F 01 4C 65 61 76 65 43 72 69 74 69 63 61 6C 53 65 63 iticalSection.Å☺LeaveCriticalSec 00005660 74 69 6F 6E 00 00 58 00 45 6E 74 65 72 43 72 69 74 69 63 61 6C 53 65 63 74 69 6F 6E 00 00 2E 00 tion..X.EnterCriticalSection.... 00005680 43 72 65 61 74 65 45 76 65 6E 74 41 00 00 32 00 43 72 65 61 74 65 46 69 6C 65 4D 61 70 70 69 6E CreateEventA..2.CreateFileMappin 000056A0 67 41 00 00 38 00 43 72 65 61 74 65 4D 75 74 65 78 41 00 00 40 00 43 72 65 61 74 65 53 65 6D 61 gA..8.CreateMutexA..@.CreateSema 000056C0 70 68 6F 72 65 41 00 00 54 02 55 6E 6D 61 70 56 69 65 77 4F 66 46 69 6C 65 00 A4 01 4D 61 70 56 phoreA..T☻UnmapViewOfFile.ñ☺MapV 000056E0 69 65 77 4F 66 46 69 6C 65 00 4A 01 47 65 74 55 73 65 72 44 65 66 61 75 6C 74 4C 61 6E 67 49 44 iewOfFile.J☺GetUserDefaultLangID 00005700 00 00 FD 00 47 65 74 4D 6F 64 75 6C 65 46 69 6C 65 4E 61 6D 65 57 00 00 35 01 47 65 74 53 79 73 ..².GetModuleFileNameW..5☺GetSys 00005720 74 65 6D 54 69 6D 65 00 E2 01 52 65 73 65 74 45 76 65 6E 74 00 00 41 00 43 72 65 61 74 65 53 65 temTime.Γ☺ResetEvent..A.CreateSe 00005740 6D 61 70 68 6F 72 65 57 00 00 2F 00 43 72 65 61 74 65 45 76 65 6E 74 57 00 00 DF 01 52 65 6C 65 maphoreW../.CreateEventW..▀☺Rele 00005760 61 73 65 53 65 6D 61 70 68 6F 72 65 00 00 D9 01 52 65 61 64 50 72 6F 63 65 73 73 4D 65 6D 6F 72 aseSemaphore..┘☺ReadProcessMemor 00005780 79 00 E4 00 4E 64 72 53 65 72 76 65 72 43 6F 6E 74 65 78 74 4D 61 72 73 68 61 6C 6C 00 00 4E 01 y.Σ.NdrServerContextMarshall..N☺ 000057A0 52 70 63 52 61 69 73 65 45 78 63 65 70 74 69 6F 6E 00 23 00 49 5F 52 70 63 47 65 74 42 75 66 66 RpcRaiseException.#.I_RpcGetBuff 000057C0 65 72 00 00 5D 00 4E 44 52 53 43 6F 6E 74 65 78 74 55 6E 6D 61 72 73 68 61 6C 6C 00 D4 00 4E 64 er..].NDRSContextUnmarshall.╘.Nd 000057E0 72 50 6F 69 6E 74 65 72 55 6E 6D 61 72 73 68 61 6C 6C 00 00 90 00 4E 64 72 43 6F 6E 76 65 72 74 rPointerUnmarshall..É.NdrConvert 00005800 00 00 E8 00 4E 64 72 53 65 72 76 65 72 49 6E 69 74 69 61 6C 69 7A 65 4E 65 77 00 00 E5 00 4E 64 ..Φ.NdrServerInitializeNew..σ.Nd 00005820 72 53 65 72 76 65 72 43 6F 6E 74 65 78 74 55 6E 6D 61 72 73 68 61 6C 6C 00 00 D1 00 4E 64 72 50 rServerContextUnmarshall..╤.NdrP 00005840 6F 69 6E 74 65 72 46 72 65 65 00 00 D2 00 4E 64 72 50 6F 69 6E 74 65 72 4D 61 72 73 68 61 6C 6C ointerFree..╥.NdrPointerMarshall 00005860 00 00 F1 00 4E 64 72 53 69 6D 70 6C 65 53 74 72 75 63 74 55 6E 6D 61 72 73 68 61 6C 6C 00 EF 00 ..±.NdrSimpleStructUnmarshall.∩. 00005880 4E 64 72 53 69 6D 70 6C 65 53 74 72 75 63 74 4D 61 72 73 68 61 6C 6C 00 D0 00 4E 64 72 50 6F 69 NdrSimpleStructMarshall.╨.NdrPoi 000058A0 6E 74 65 72 42 75 66 66 65 72 53 69 7A 65 00 00 ED 00 4E 64 72 53 69 6D 70 6C 65 53 74 72 75 63 nterBufferSize..φ.NdrSimpleStruc 000058C0 74 42 75 66 66 65 72 53 69 7A 65 00 7B 00 4E 64 72 43 6F 6E 66 6F 72 6D 61 6E 74 41 72 72 61 79 tBufferSize.{.NdrConformantArray 000058E0 55 6E 6D 61 72 73 68 61 6C 6C 00 00 87 00 4E 64 72 43 6F 6E 66 6F 72 6D 61 6E 74 56 61 72 79 69 Unmarshall..ç.NdrConformantVaryi 00005900 6E 67 41 72 72 61 79 4D 61 72 73 68 61 6C 6C 00 85 00 4E 64 72 43 6F 6E 66 6F 72 6D 61 6E 74 56 ngArrayMarshall.à.NdrConformantV 00005920 61 72 79 69 6E 67 41 72 72 61 79 42 75 66 66 65 72 53 69 7A 65 00 89 00 4E 64 72 43 6F 6E 66 6F aryingArrayBufferSize.ë.NdrConfo 00005940 72 6D 61 6E 74 56 61 72 79 69 6E 67 41 72 72 61 79 55 6E 6D 61 72 73 68 61 6C 6C 00 16 02 52 74 rmantVaryingArrayUnmarshall.▬☻Rt 00005960 6C 53 65 74 47 72 6F 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 00 A5 01 52 74 lSetGroupSecurityDescriptor.Ñ☺Rt 00005980 6C 47 65 74 47 72 6F 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 00 18 02 52 74 lGetGroupSecurityDescriptor.↑☻Rt 000059A0 6C 53 65 74 4F 77 6E 65 72 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 00 A9 01 52 74 lSetOwnerSecurityDescriptor.⌐☺Rt 000059C0 6C 47 65 74 4F 77 6E 65 72 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 00 32 00 4E 74 lGetOwnerSecurityDescriptor.2.Nt 000059E0 41 63 63 65 73 73 43 68 65 63 6B 00 6A 00 4E 74 46 6C 75 73 68 4B 65 79 00 00 EB 01 52 74 6C 4F AccessCheck.j.NtFlushKey..δ☺RtlO 00005A00 70 65 6E 43 75 72 72 65 6E 74 55 73 65 72 00 00 C1 00 4E 74 52 65 6C 65 61 73 65 53 65 6D 61 70 penCurrentUser..┴.NtReleaseSemap 00005A20 68 6F 72 65 00 00 49 00 4E 74 43 72 65 61 74 65 46 69 6C 65 00 00 54 00 4E 74 43 72 65 61 74 65 hore..I.NtCreateFile..T.NtCreate 00005A40 53 65 6D 61 70 68 6F 72 65 00 5D 00 4E 74 44 65 6C 65 74 65 4B 65 79 00 5F 00 4E 74 44 65 6C 65 Semaphore.].NtDeleteKey._.NtDele 00005A60 74 65 56 61 6C 75 65 4B 65 79 00 00 64 00 4E 74 45 6E 75 6D 65 72 61 74 65 4B 65 79 00 00 65 00 teValueKey..d.NtEnumerateKey..e. 00005A80 4E 74 45 6E 75 6D 65 72 61 74 65 56 61 6C 75 65 4B 65 79 00 78 00 4E 74 4C 6F 61 64 4B 65 79 00 NtEnumerateValueKey.x.NtLoadKey. 00005AA0 F7 00 4E 74 55 6E 6C 6F 61 64 4B 65 79 00 C3 00 4E 74 52 65 70 6C 61 63 65 4B 65 79 00 00 A6 00 ≈.NtUnloadKey.├.NtReplaceKey..ª. 00005AC0 4E 74 51 75 65 72 79 4B 65 79 00 00 A7 00 4E 74 51 75 65 72 79 4D 75 6C 74 69 70 6C 65 56 61 6C NtQueryKey..º.NtQueryMultipleVal 00005AE0 75 65 4B 65 79 00 CB 00 4E 74 52 65 73 74 6F 72 65 4B 65 79 00 00 CD 00 4E 74 53 61 76 65 4B 65 ueKey.╦.NtRestoreKey..═.NtSaveKe 00005B00 79 00 03 02 52 74 6C 52 65 41 6C 6C 6F 63 61 74 65 48 65 61 70 00 A2 00 4E 74 51 75 65 72 79 49 y.♥☻RtlReAllocateHeap.ó.NtQueryI 00005B20 6E 66 6F 72 6D 61 74 69 6F 6E 54 68 72 65 61 64 00 00 AB 00 4E 74 51 75 65 72 79 50 65 72 66 6F nformationThread..½.NtQueryPerfo 00005B40 72 6D 61 6E 63 65 43 6F 75 6E 74 65 72 00 60 00 4E 74 44 65 76 69 63 65 49 6F 43 6F 6E 74 72 6F rmanceCounter.`.NtDeviceIoContro 00005B60 6C 46 69 6C 65 00 A9 00 4E 74 51 75 65 72 79 4F 62 6A 65 63 74 00 6F 00 4E 74 47 65 74 43 6F 6E lFile.⌐.NtQueryObject.o.NtGetCon 00005B80 74 65 78 74 54 68 72 65 61 64 00 00 8E 00 4E 74 4F 70 65 6E 54 68 72 65 61 64 00 00 01 01 4E 74 textThread..Ä.NtOpenThread..☺☺Nt 00005BA0 57 72 69 74 65 46 69 6C 65 00 B6 00 4E 74 51 75 65 72 79 56 69 72 74 75 61 6C 4D 65 6D 6F 72 79 WriteFile.╢.NtQueryVirtualMemory 00005BC0 00 00 BE 00 4E 74 52 65 61 64 56 69 72 74 75 61 6C 4D 65 6D 6F 72 79 00 89 00 4E 74 4F 70 65 6E ..╛.NtReadVirtualMemory.ë.NtOpen 00005BE0 50 72 6F 63 65 73 73 00 7D 00 4E 74 4D 61 70 56 69 65 77 4F 66 53 65 63 74 69 6F 6E 00 00 53 00 Process.}.NtMapViewOfSection..S. 00005C00 4E 74 43 72 65 61 74 65 53 65 63 74 69 6F 6E 00 DB 01 52 74 6C 4D 61 6B 65 53 65 6C 66 52 65 6C NtCreateSection.█☺RtlMakeSelfRel 00005C20 61 74 69 76 65 53 44 00 D5 01 52 74 6C 4C 65 6E 67 74 68 53 65 63 75 72 69 74 79 44 65 73 63 72 ativeSD.╒☺RtlLengthSecurityDescr 00005C40 69 70 74 6F 72 00 49 02 52 74 6C 56 61 6C 69 64 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 iptor.I☻RtlValidSecurityDescript 00005C60 6F 72 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 or.............................. 00005C80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005CA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005CC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005CE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005D00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005D20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005D40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005D60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005D80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005DA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005DC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00005DE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................