============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 03 00 00 00 FF 1F 00 00 0E 20 00 00 28 00 00 00 00 21 00 00 0E 21 00 00 68 01 00 00 00 30 00 00 ♥... ▼..♫ ..(....!..♫!..h☺...0.. 00000020 01 30 00 00 18 04 00 00 1C 00 00 00 53 41 4D 50 5F 55 4E 55 53 45 44 5F 4D 45 53 53 41 47 45 0D ☺0..↑♦..∟...SAMP_UNUSED_MESSAGE♪ 00000040 0A 00 00 00 14 00 00 00 41 64 6D 69 6E 69 73 74 72 61 74 6F 72 0D 0A 00 0C 00 00 00 47 75 65 73 ◙...¶...Administrator♪◙.♀...Gues 00000060 74 0D 0A 00 14 00 00 00 44 6F 6D 61 69 6E 20 41 64 6D 69 6E 73 0D 0A 00 14 00 00 00 44 6F 6D 61 t♪◙.¶...Domain Admins♪◙.¶...Doma 00000080 69 6E 20 55 73 65 72 73 0D 0A 00 00 0C 00 00 00 4E 6F 6E 65 0D 0A 00 00 18 00 00 00 41 64 6D 69 in Users♪◙..♀...None♪◙..↑...Admi 000000A0 6E 69 73 74 72 61 74 6F 72 73 0D 0A 00 00 00 00 18 00 00 00 53 65 72 76 65 72 20 4F 70 65 72 61 nistrators♪◙....↑...Server Opera 000000C0 74 6F 72 73 0D 0A 00 00 14 00 00 00 50 6F 77 65 72 20 55 73 65 72 73 0D 0A 00 00 00 0C 00 00 00 tors♪◙..¶...Power Users♪◙...♀... 000000E0 55 73 65 72 73 0D 0A 00 10 00 00 00 47 75 65 73 74 73 0D 0A 00 00 00 00 18 00 00 00 41 63 63 6F Users♪◙.►...Guests♪◙....↑...Acco 00000100 75 6E 74 20 4F 70 65 72 61 74 6F 72 73 0D 0A 00 18 00 00 00 50 72 69 6E 74 20 4F 70 65 72 61 74 unt Operators♪◙.↑...Print Operat 00000120 6F 72 73 0D 0A 00 00 00 18 00 00 00 42 61 63 6B 75 70 20 4F 70 65 72 61 74 6F 72 73 0D 0A 00 00 ors♪◙...↑...Backup Operators♪◙.. 00000140 14 00 00 00 52 65 70 6C 69 63 61 74 6F 72 0D 0A 00 00 00 00 14 00 00 00 44 6F 6D 61 69 6E 20 47 ¶...Replicator♪◙....¶...Domain G 00000160 75 65 73 74 73 0D 0A 00 40 00 00 00 42 75 69 6C 74 2D 69 6E 20 61 63 63 6F 75 6E 74 20 66 6F 72 uests♪◙.@...Built-in account for 00000180 20 61 64 6D 69 6E 69 73 74 65 72 69 6E 67 20 74 68 65 20 63 6F 6D 70 75 74 65 72 2F 64 6F 6D 61 administering the computer/doma 000001A0 69 6E 0D 0A 00 00 00 00 40 00 00 00 42 75 69 6C 74 2D 69 6E 20 61 63 63 6F 75 6E 74 20 66 6F 72 in♪◙....@...Built-in account for 000001C0 20 67 75 65 73 74 20 61 63 63 65 73 73 20 74 6F 20 74 68 65 20 63 6F 6D 70 75 74 65 72 2F 64 6F guest access to the computer/do 000001E0 6D 61 69 6E 0D 0A 00 00 30 00 00 00 44 65 73 69 67 6E 61 74 65 64 20 61 64 6D 69 6E 69 73 74 72 main♪◙..0...Designated administr 00000200 61 74 6F 72 73 20 6F 66 20 74 68 65 20 64 6F 6D 61 69 6E 0D 0A 00 00 00 18 00 00 00 41 6C 6C 20 ators of the domain♪◙...↑...All 00000220 64 6F 6D 61 69 6E 20 75 73 65 72 73 0D 0A 00 00 18 00 00 00 4F 72 64 69 6E 61 72 79 20 75 73 65 domain users♪◙..↑...Ordinary use 00000240 72 73 0D 0A 00 00 00 00 38 00 00 00 4D 65 6D 62 65 72 73 20 63 61 6E 20 66 75 6C 6C 79 20 61 64 rs♪◙....8...Members can fully ad 00000260 6D 69 6E 69 73 74 65 72 20 74 68 65 20 63 6F 6D 70 75 74 65 72 2F 64 6F 6D 61 69 6E 0D 0A 00 00 minister the computer/domain♪◙.. 00000280 2C 00 00 00 4D 65 6D 62 65 72 73 20 63 61 6E 20 61 64 6D 69 6E 69 73 74 65 72 20 64 6F 6D 61 69 ,...Members can administer domai 000002A0 6E 20 73 65 72 76 65 72 73 0D 0A 00 34 00 00 00 4D 65 6D 62 65 72 73 20 63 61 6E 20 73 68 61 72 n servers♪◙.4...Members can shar 000002C0 65 20 64 69 72 65 63 74 6F 72 69 65 73 20 61 6E 64 20 70 72 69 6E 74 65 72 73 0D 0A 00 00 00 00 e directories and printers♪◙.... 000002E0 18 00 00 00 4F 72 64 69 6E 61 72 79 20 75 73 65 72 73 0D 0A 00 00 00 00 38 00 00 00 55 73 65 72 ↑...Ordinary users♪◙....8...User 00000300 73 20 67 72 61 6E 74 65 64 20 67 75 65 73 74 20 61 63 63 65 73 73 20 74 6F 20 74 68 65 20 63 6F s granted guest access to the co 00000320 6D 70 75 74 65 72 2F 64 6F 6D 61 69 6E 0D 0A 00 3C 00 00 00 4D 65 6D 62 65 72 73 20 63 61 6E 20 mputer/domain♪◙.<...Members can 00000340 61 64 6D 69 6E 69 73 74 65 72 20 64 6F 6D 61 69 6E 20 75 73 65 72 20 61 6E 64 20 67 72 6F 75 70 administer domain user and group 00000360 20 61 63 63 6F 75 6E 74 73 0D 0A 00 30 00 00 00 4D 65 6D 62 65 72 73 20 63 61 6E 20 61 64 6D 69 accounts♪◙.0...Members can admi 00000380 6E 69 73 74 65 72 20 64 6F 6D 61 69 6E 20 70 72 69 6E 74 65 72 73 0D 0A 00 00 00 00 38 00 00 00 nister domain printers♪◙....8... 000003A0 4D 65 6D 62 65 72 73 20 63 61 6E 20 62 79 70 61 73 73 20 66 69 6C 65 20 73 65 63 75 72 69 74 79 Members can bypass file security 000003C0 20 74 6F 20 62 61 63 6B 20 75 70 20 66 69 6C 65 73 0D 0A 00 2C 00 00 00 53 75 70 70 6F 72 74 73 to back up files♪◙.,...Supports 000003E0 20 66 69 6C 65 20 72 65 70 6C 69 63 61 74 69 6F 6E 20 69 6E 20 61 20 64 6F 6D 61 69 6E 0D 0A 00 file replication in a domain♪◙. 00000400 18 00 00 00 41 6C 6C 20 64 6F 6D 61 69 6E 20 67 75 65 73 74 73 0D 0A 00 08 01 00 00 53 41 4D 20 ↑...All domain guests♪◙.◘☺..SAM 00000420 66 61 69 6C 65 64 20 74 6F 20 77 72 69 74 65 20 63 68 61 6E 67 65 73 20 74 6F 20 74 68 65 20 64 failed to write changes to the d 00000440 61 74 61 62 61 73 65 2E 20 54 68 69 73 20 69 73 20 6D 6F 73 74 20 6C 69 6B 65 6C 79 20 64 75 65 atabase. This is most likely due 00000460 20 74 6F 0D 0A 61 20 6D 65 6D 6F 72 79 20 6F 72 20 64 69 73 6B 2D 73 70 61 63 65 20 73 68 6F 72 to♪◙a memory or disk-space shor 00000480 74 61 67 65 2E 20 54 68 65 20 53 41 4D 20 64 61 74 61 62 61 73 65 20 77 69 6C 6C 20 62 65 20 72 tage. The SAM database will be r 000004A0 65 73 74 6F 72 65 64 20 74 6F 0D 0A 61 6E 20 65 61 72 6C 69 65 72 20 73 74 61 74 65 2E 20 52 65 estored to♪◙an earlier state. Re 000004C0 63 65 6E 74 20 63 68 61 6E 67 65 73 20 77 69 6C 6C 20 62 65 20 6C 6F 73 74 2E 20 43 68 65 63 6B cent changes will be lost. Check 000004E0 20 74 68 65 20 64 69 73 6B 2D 73 70 61 63 65 0D 0A 61 76 61 69 6C 61 62 6C 65 20 61 6E 64 20 6D the disk-space♪◙available and m 00000500 61 78 69 6D 75 6D 20 70 61 67 65 66 69 6C 65 20 73 69 7A 65 20 73 65 74 74 69 6E 67 2E 0D 0A 00 aximum pagefile size setting.♪◙. 00000520 80 00 00 00 53 41 4D 20 66 61 69 6C 65 64 20 74 6F 20 72 65 73 74 6F 72 65 20 74 68 65 20 64 61 Ç...SAM failed to restore the da 00000540 74 61 62 61 73 65 20 74 6F 20 61 6E 20 65 61 72 6C 69 65 72 20 73 74 61 74 65 2E 20 53 41 4D 20 tabase to an earlier state. SAM 00000560 68 61 73 20 73 68 75 74 64 6F 77 6E 2E 0D 0A 59 6F 75 20 6D 75 73 74 20 72 65 62 6F 6F 74 20 74 has shutdown.♪◙You must reboot t 00000580 68 65 20 6D 61 63 68 69 6E 65 20 74 6F 20 72 65 2D 65 6E 61 62 6C 65 20 53 41 4D 2E 0D 0A 00 00 he machine to re-enable SAM.♪◙..