home *** CD-ROM | disk | FTP | other *** search
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was processed as: Microsoft Windows Dynamic Link Library
(executable/dll).
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 00 00 02 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 04 00 | 42 64 41 2c 00 00 00 00 |PE..L...|BdA,....|
|00000090| 00 00 00 00 a8 00 02 20 | 00 00 02 02 00 00 00 00 |....... |........|
|000000a0| 00 00 00 00 00 00 00 00 | 18 12 00 00 00 00 00 00 |........|........|
|000000b0| 00 00 00 00 00 00 01 00 | 00 10 00 00 00 02 00 00 |........|........|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 60 00 00 30 02 00 00 | 00 00 00 00 03 00 00 00 |.`..0...|........|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 00 00 09 00 00 00 | 00 30 00 00 85 15 00 00 |........|.0......|
|00000100| 00 20 00 00 d6 00 00 00 | 00 00 00 00 00 00 00 00 |. ......|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 50 00 00 32 00 00 00 | 00 00 00 00 00 00 00 00 |.P..2...|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 10 00 00 |.text...|........|
|00000150| 00 04 00 00 00 04 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 20 00 00 60 | 2e 69 64 61 74 61 00 00 |.... ..`|.idata..|
|00000170| 00 00 00 00 00 20 00 00 | 00 02 00 00 00 08 00 00 |..... ..|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 e0 |........|.... ...|
|00000190| 2e 65 64 61 74 61 00 00 | 00 00 00 00 00 30 00 00 |.edata..|.....0..|
|000001a0| 00 16 00 00 00 0a 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 40 00 00 40 | 2e 72 65 6c 6f 63 00 00 |....@..@|.reloc..|
|000001c0| 00 00 00 00 00 50 00 00 | 00 02 00 00 00 20 00 00 |.....P..|..... ..|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 40 |........|....@..@|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| c8 00 00 00 8b 45 0c 8b | 4d 08 f7 41 04 06 00 00 |.....E..|M..A....|
|00000410| 00 74 10 55 8b 68 0c f8 | ff 50 08 5d b8 01 00 00 |.t.U.h..|.P.]....|
|00000420| 00 c9 c3 ff 75 10 51 89 | 60 10 55 8b 68 0c f9 ff |....u.Q.|`.U.h...|
|00000430| 50 08 5d 0b c0 b8 01 00 | 00 00 74 05 b8 00 00 00 |P.].....|..t.....|
|00000440| 00 c9 c3 55 6a 00 68 51 | 10 01 00 50 e8 63 10 00 |...Uj.hQ|...P.c..|
|00000450| 00 83 c4 0c 5d c3 59 64 | 8b 15 00 00 00 00 3b c2 |....].Yd|......;.|
|00000460| 74 18 83 fa ff 74 13 51 | 8b 0a 64 89 0d 00 00 00 |t....t.Q|..d.....|
|00000470| 00 50 f8 ff 52 08 58 59 | eb dd ff e1 8b 54 24 04 |.P..R.XY|.....T$.|
|00000480| 89 2a 89 5a 04 89 7a 08 | 89 72 0c 89 62 10 8b 0c |.*.Z..z.|.r..b...|
|00000490| 24 89 4a 14 64 a1 00 00 | 00 00 89 42 18 2b c0 c3 |$.J.d...|...B.+..|
|000004a0| 8b 44 24 08 0b c0 75 01 | 40 8b 54 24 04 52 50 8b |.D$...u.|@.T$.RP.|
|000004b0| 42 18 3b 2a 74 14 e8 88 | ff ff ff 58 5a 8b 5a 04 |B.;*t...|...XZ.Z.|
|000004c0| 8b 7a 08 8b 72 0c 8b 2a | eb 07 e8 87 ff ff ff 58 |.z..r..*|.......X|
|000004d0| 5a 8b 62 10 83 c4 04 ff | 62 14 00 00 c2 04 00 90 |Z.b.....|b.......|
|000004e0| c2 08 00 90 c2 0c 00 90 | c2 10 00 90 c2 14 00 b9 |........|........|
|000004f0| 00 00 00 00 68 ec 10 01 | 00 e8 62 00 00 00 b9 02 |....h...|..b.....|
|00000500| 00 00 00 68 e8 10 01 00 | e8 53 00 00 00 b9 04 00 |...h....|.S......|
|00000510| 00 00 68 e4 10 01 00 e8 | 44 00 00 00 b9 06 00 00 |..h.....|D.......|
|00000520| 00 68 dc 10 01 00 e8 35 | 00 00 00 b9 08 00 00 00 |.h.....5|........|
|00000530| 68 e4 10 01 00 e8 26 00 | 00 00 b9 0a 00 00 00 68 |h.....&.|.......h|
|00000540| e8 10 01 00 e8 17 00 00 | 00 b9 0c 00 00 00 68 e0 |........|......h.|
|00000550| 10 01 00 e8 08 00 00 00 | b9 00 00 00 00 2e 8b c0 |........|........|
|00000560| 0e 68 ae 20 01 00 55 53 | 56 57 83 ec 1c 8b ec 64 |.h. ..US|VW.....d|
|00000570| a1 00 00 00 00 89 44 24 | 04 c7 44 24 08 00 10 01 |......D$|..D$....|
|00000580| 00 c7 44 24 0c ad 11 01 | 00 89 6c 24 10 89 64 24 |..D$....|..l$..d$|
|00000590| 18 8d 44 24 04 64 a3 00 | 00 00 00 0f a0 8b c4 16 |..D$.d..|........|
|000005a0| 50 68 55 55 aa aa 51 66 | ea 55 55 aa aa 72 03 2b |PhUU..Qf|.UU..r.+|
|000005b0| c0 c3 8b 45 34 36 80 38 | b9 74 13 36 80 78 04 b9 |...E46.8|.t.6.x..|
|000005c0| 74 0c 36 80 78 08 f4 75 | 05 83 c0 09 ff d0 8b 45 |t.6.x..u|.......E|
|000005d0| 04 e8 6d fe ff ff 8b 65 | 18 83 c4 1c be 00 00 00 |..m....e|........|
|000005e0| 00 bf 57 00 00 00 8b 5c | 24 18 36 80 3b b9 74 0f |..W....\|$.6.;.t.|
|000005f0| 8b 74 24 18 36 80 7b 04 | b9 74 04 8b 7c 24 1c 57 |.t$.6.{.|.t..|$.W|
|00000600| e8 97 0e 00 00 8b c6 5f | 5e 5b 5d 66 8c d1 66 8e |......._|^[]f..f.|
|00000610| d9 66 8e c1 cb 00 00 00 | 55 8b ec 8b 45 0c 83 f8 |.f......|U...E...|
|00000620| 01 75 3d 56 57 83 ec 04 | 8b fc 57 6a 04 6a 10 be |.u=VW...|..Wj.j..|
|00000630| a1 11 01 00 56 e8 68 0e | 00 00 e8 69 0e 00 00 8b |....V.h.|...i....|
|00000640| 40 18 89 46 01 e8 5e 0e | 00 00 8b 40 30 89 46 08 |@..F..^.|...@0.F.|
|00000650| 57 ff 37 6a 10 56 e8 47 | 0e 00 00 83 c4 04 5f 5e |W.7j.V.G|......_^|
|00000660| 2b c0 40 c9 c2 0c 00 00 | 6a 78 e8 2d 0e 00 00 2b |+.@.....|jx.-...+|
|00000670| c0 c3 6a 78 e8 23 0e 00 | 00 2b c0 c2 04 00 6a 78 |..jx.#..|.+....jx|
|00000680| e8 17 0e 00 00 2b c0 c2 | 08 00 6a 78 e8 0b 0e 00 |.....+..|..jx....|
|00000690| 00 2b c0 c2 0c 00 6a 78 | e8 ff 0d 00 00 2b c0 c2 |.+....jx|.....+..|
|000006a0| 10 00 6a 78 e8 f3 0d 00 | 00 2b c0 c2 14 00 6a 78 |..jx....|.+....jx|
|000006b0| e8 e7 0d 00 00 2b c0 c2 | 18 00 6a 78 e8 db 0d 00 |.....+..|..jx....|
|000006c0| 00 2b c0 c2 1c 00 6a 78 | e8 cf 0d 00 00 2b c0 c2 |.+....jx|.....+..|
|000006d0| 20 00 6a 78 e8 c3 0d 00 | 00 2b c0 c2 24 00 6a 78 | .jx....|.+..$.jx|
|000006e0| e8 b7 0d 00 00 2b c0 c2 | 2c 00 6a 78 e8 ab 0d 00 |.....+..|,.jx....|
|000006f0| 00 2b c0 c2 30 00 6a 78 | e8 9f 0d 00 00 2b c0 c2 |.+..0.jx|.....+..|
|00000700| 34 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |4.......|........|
|00000710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| ba 20 00 00 42 64 41 2c | 00 00 00 00 3c 20 00 00 |. ..BdA,|....< ..|
|00000810| 80 20 00 00 c6 20 00 00 | 42 64 41 2c 00 00 00 00 |. ... ..|BdA,....|
|00000820| 4c 20 00 00 8c 20 00 00 | 00 00 00 00 00 00 00 00 |L ... ..|........|
|00000830| 00 00 00 00 00 00 00 00 | 00 00 00 00 4b 45 52 4e |........|....KERN|
|00000840| 45 4c 33 32 2e 64 6c 6c | 00 00 00 00 57 33 32 53 |EL32.dll|....W32S|
|00000850| 4b 52 4e 4c 2e 64 6c 6c | 00 00 00 00 00 00 53 65 |KRNL.dll|......Se|
|00000860| 74 4c 61 73 74 45 72 72 | 6f 72 00 00 00 00 56 69 |tLastErr|or....Vi|
|00000870| 72 74 75 61 6c 50 72 6f | 74 65 63 74 00 00 00 00 |rtualPro|tect....|
|00000880| 5c 20 00 00 6c 20 00 00 | 00 00 00 00 f8 01 00 80 |\ ..l ..|........|
|00000890| ff 01 00 80 69 01 00 80 | 00 00 00 00 ff 25 80 20 |....i...|.....%. |
|000008a0| 01 00 ff 25 84 20 01 00 | ff 25 8c 20 01 00 ff 25 |...%. ..|.%. ...%|
|000008b0| 90 20 01 00 ff 25 94 20 | 01 00 5c 20 00 00 6c 20 |. ...%. |..\ ..l |
|000008c0| 00 00 00 00 00 00 f8 01 | 00 80 ff 01 00 80 69 01 |........|......i.|
|000008d0| 00 80 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 00 00 00 00 42 64 41 2c | 00 00 00 00 8a 37 00 00 |....BdA,|.....7..|
|00000a10| 01 00 00 00 bd 00 00 00 | bd 00 00 00 28 30 00 00 |........|....(0..|
|00000a20| 1c 33 00 00 10 36 00 00 | a2 12 00 00 7e 12 00 00 |.3...6..|....~...|
|00000a30| 7e 12 00 00 7e 12 00 00 | 72 12 00 00 96 12 00 00 |~...~...|r.......|
|00000a40| ae 12 00 00 96 12 00 00 | ae 12 00 00 96 12 00 00 |........|........|
|00000a50| ef 10 00 00 7e 12 00 00 | 49 11 00 00 de 12 00 00 |....~...|I.......|
|00000a60| 8a 12 00 00 c6 12 00 00 | a2 12 00 00 a2 12 00 00 |........|........|
|00000a70| 72 12 00 00 8a 12 00 00 | 7e 12 00 00 8a 12 00 00 |r.......|~.......|
|00000a80| c6 12 00 00 96 12 00 00 | 8a 12 00 00 72 12 00 00 |........|....r...|
|00000a90| a2 12 00 00 72 12 00 00 | 7e 12 00 00 96 12 00 00 |....r...|~.......|
|00000aa0| a2 12 00 00 72 12 00 00 | 72 12 00 00 72 12 00 00 |....r...|r...r...|
|00000ab0| 8a 12 00 00 a2 12 00 00 | 0d 11 00 00 7e 12 00 00 |........|....~...|
|00000ac0| a2 12 00 00 8a 12 00 00 | ea 12 00 00 7e 12 00 00 |........|....~...|
|00000ad0| 8a 12 00 00 a2 12 00 00 | 7e 12 00 00 8a 12 00 00 |........|~.......|
|00000ae0| 7e 12 00 00 72 12 00 00 | 96 12 00 00 96 12 00 00 |~...r...|........|
|00000af0| 72 12 00 00 96 12 00 00 | d2 12 00 00 7e 12 00 00 |r.......|....~...|
|00000b00| fe 10 00 00 96 12 00 00 | a2 12 00 00 7e 12 00 00 |........|....~...|
|00000b10| f6 12 00 00 8a 12 00 00 | 8a 12 00 00 ba 12 00 00 |........|........|
|00000b20| 72 12 00 00 3a 11 00 00 | 8a 12 00 00 7e 12 00 00 |r...:...|....~...|
|00000b30| 96 12 00 00 d2 12 00 00 | 96 12 00 00 ea 12 00 00 |........|........|
|00000b40| 96 12 00 00 ba 12 00 00 | 7e 12 00 00 7e 12 00 00 |........|~...~...|
|00000b50| 7e 12 00 00 8a 12 00 00 | 7e 12 00 00 8a 12 00 00 |~.......|~.......|
|00000b60| ea 12 00 00 72 12 00 00 | 8a 12 00 00 8a 12 00 00 |....r...|........|
|00000b70| ae 12 00 00 72 12 00 00 | 7e 12 00 00 96 12 00 00 |....r...|~.......|
|00000b80| 96 12 00 00 8a 12 00 00 | ba 12 00 00 96 12 00 00 |........|........|
|00000b90| 49 11 00 00 72 12 00 00 | 7e 12 00 00 8a 12 00 00 |I...r...|~.......|
|00000ba0| 8a 12 00 00 ae 12 00 00 | ae 12 00 00 ea 12 00 00 |........|........|
|00000bb0| a2 12 00 00 ba 12 00 00 | d2 12 00 00 ae 12 00 00 |........|........|
|00000bc0| de 12 00 00 96 12 00 00 | 96 12 00 00 72 12 00 00 |........|....r...|
|00000bd0| 96 12 00 00 ba 12 00 00 | 7e 12 00 00 68 12 00 00 |........|~...h...|
|00000be0| de 12 00 00 96 12 00 00 | a2 12 00 00 8a 12 00 00 |........|........|
|00000bf0| de 12 00 00 7e 12 00 00 | f6 12 00 00 7e 12 00 00 |....~...|....~...|
|00000c00| 7e 12 00 00 a2 12 00 00 | 7e 12 00 00 ae 12 00 00 |~.......|~.......|
|00000c10| c6 12 00 00 c6 12 00 00 | 96 12 00 00 8a 12 00 00 |........|........|
|00000c20| a2 12 00 00 72 12 00 00 | 8a 12 00 00 8a 12 00 00 |....r...|........|
|00000c30| 7e 12 00 00 72 12 00 00 | 72 12 00 00 8a 12 00 00 |~...r...|r.......|
|00000c40| de 12 00 00 c6 12 00 00 | 8a 12 00 00 8a 12 00 00 |........|........|
|00000c50| 96 12 00 00 8a 12 00 00 | ae 12 00 00 72 12 00 00 |........|....r...|
|00000c60| 8a 12 00 00 ae 12 00 00 | ae 12 00 00 8a 12 00 00 |........|........|
|00000c70| a2 12 00 00 72 12 00 00 | 96 12 00 00 7e 12 00 00 |....r...|....~...|
|00000c80| 72 12 00 00 72 12 00 00 | 8a 12 00 00 7e 12 00 00 |r...r...|....~...|
|00000c90| a2 12 00 00 7e 12 00 00 | 8a 12 00 00 d2 12 00 00 |....~...|........|
|00000ca0| ae 12 00 00 1c 11 00 00 | c6 12 00 00 ae 12 00 00 |........|........|
|00000cb0| 7e 12 00 00 8a 12 00 00 | a2 12 00 00 a2 12 00 00 |~.......|........|
|00000cc0| 8a 12 00 00 72 12 00 00 | 72 12 00 00 8a 12 00 00 |....r...|r.......|
|00000cd0| 8a 12 00 00 96 12 00 00 | 2b 11 00 00 7e 12 00 00 |........|+...~...|
|00000ce0| 7e 12 00 00 72 12 00 00 | ba 12 00 00 c6 12 00 00 |~...r...|........|
|00000cf0| 8a 12 00 00 a2 12 00 00 | 8a 12 00 00 7e 12 00 00 |........|....~...|
|00000d00| de 12 00 00 96 12 00 00 | 96 12 00 00 8a 12 00 00 |........|........|
|00000d10| 8a 12 00 00 8a 12 00 00 | 72 12 00 00 5f 41 00 00 |........|r..._A..|
|00000d20| ba 42 00 00 ce 40 00 00 | 2a 3f 00 00 96 41 00 00 |.B...@..|*?...A..|
|00000d30| d9 41 00 00 5a 39 00 00 | 67 3a 00 00 4c 42 00 00 |.A..Z9..|g:..LB..|
|00000d40| 3a 42 00 00 f9 41 00 00 | 19 40 00 00 6b 3e 00 00 |:B...A..|.@..k>..|
|00000d50| da 37 00 00 e8 3a 00 00 | 57 3a 00 00 8a 43 00 00 |.7...:..|W:...C..|
|00000d60| fd 44 00 00 95 38 00 00 | 0b 3d 00 00 50 41 00 00 |.D...8..|.=..PA..|
|00000d70| 11 3a 00 00 fe 3a 00 00 | 27 44 00 00 2a 3a 00 00 |.:...:..|'D..*:..|
|00000d80| 1b 38 00 00 f3 3b 00 00 | 45 40 00 00 ec 42 00 00 |.8...;..|E@...B..|
|00000d90| cf 42 00 00 00 39 00 00 | e9 43 00 00 50 3d 00 00 |.B...9..|.C..P=..|
|00000da0| a9 40 00 00 43 38 00 00 | b6 38 00 00 b0 41 00 00 |.@..C8..|.8...A..|
|00000db0| 96 3a 00 00 5b 44 00 00 | c9 37 00 00 8a 42 00 00 |.:..[D..|.7...B..|
|00000dc0| c4 41 00 00 b4 3b 00 00 | 79 42 00 00 bd 43 00 00 |.A...;..|yB...C..|
|00000dd0| b4 3a 00 00 81 44 00 00 | 8a 3b 00 00 df 3d 00 00 |.:...D..|.;...=..|
|00000de0| e7 38 00 00 8a 3d 00 00 | 11 3b 00 00 ed 40 00 00 |.8...=..|.;...@..|
|00000df0| 6d 3f 00 00 ce 43 00 00 | f7 3d 00 00 36 44 00 00 |m?...C..|.=..6D..|
|00000e00| 2b 3b 00 00 da 40 00 00 | 5a 38 00 00 8a 39 00 00 |+;...@..|Z8...9..|
|00000e10| 0f 42 00 00 32 40 00 00 | 70 3d 00 00 a9 43 00 00 |.B..2@..|p=...C..|
|00000e20| f0 44 00 00 7a 38 00 00 | c4 3d 00 00 06 44 00 00 |.D..z8..|.=...D..|
|00000e30| da 3a 00 00 64 44 00 00 | cb 41 00 00 95 37 00 00 |.:..dD..|.A...7..|
|00000e40| 75 40 00 00 1f 3a 00 00 | 16 41 00 00 06 3a 00 00 |u@...:..|.A...:..|
|00000e50| 42 3b 00 00 a4 3f 00 00 | 8e 44 00 00 31 3c 00 00 |B;...?..|.D..1<..|
|00000e60| 35 3e 00 00 be 44 00 00 | f0 3f 00 00 11 3e 00 00 |5>...D..|.?...>..|
|00000e70| 58 3f 00 00 24 42 00 00 | da 44 00 00 d2 3f 00 00 |X?..$B..|.D...?..|
|00000e80| 3d 41 00 00 c8 39 00 00 | b1 39 00 00 62 45 00 00 |=A...9..|.9..bE..|
|00000e90| 1a 3c 00 00 80 3a 00 00 | c0 3c 00 00 c1 3e 00 00 |.<...:..|.<...>..|
|00000ea0| 64 43 00 00 1a 3d 00 00 | 24 39 00 00 67 40 00 00 |dC...=..|$9..g@..|
|00000eb0| 11 43 00 00 a1 3e 00 00 | 9a 43 00 00 a5 3a 00 00 |.C...>..|.C...:..|
|00000ec0| 0c 40 00 00 30 41 00 00 | 12 45 00 00 af 44 00 00 |.@..0A..|.E...D..|
|00000ed0| ca 38 00 00 e9 39 00 00 | 44 3f 00 00 56 3b 00 00 |.8...9..|D?..V;..|
|00000ee0| 92 42 00 00 47 3e 00 00 | f6 42 00 00 54 40 00 00 |.B..G>..|.B..T@..|
|00000ef0| e8 3c 00 00 fb 3e 00 00 | 4a 43 00 00 2e 3d 00 00 |.<...>..|JC...=..|
|00000f00| 38 39 00 00 4d 44 00 00 | 2b 43 00 00 09 3f 00 00 |89..MD..|+C...?..|
|00000f10| 16 39 00 00 87 38 00 00 | cc 3a 00 00 aa 42 00 00 |.9...8..|.:...B..|
|00000f20| 83 3e 00 00 5f 3c 00 00 | c0 40 00 00 56 43 00 00 |.>.._<..|.@..VC..|
|00000f30| 37 38 00 00 a1 44 00 00 | 4c 39 00 00 79 45 00 00 |78...D..|L9..yE..|
|00000f40| d7 39 00 00 ed 41 00 00 | a7 3d 00 00 c6 3b 00 00 |.9...A..|.=...;..|
|00000f50| 4b 3a 00 00 ed 3e 00 00 | 08 41 00 00 1f 43 00 00 |K:...>..|.A...C..|
|00000f60| 5f 3d 00 00 dc 3e 00 00 | a5 3b 00 00 b3 3d 00 00 |_=...>..|.;...=..|
|00000f70| 19 3f 00 00 e1 3f 00 00 | 0c 38 00 00 b1 3c 00 00 |.?...?..|.8...<..|
|00000f80| 26 3e 00 00 dd 42 00 00 | aa 38 00 00 8a 41 00 00 |&>...B..|.8...A..|
|00000f90| 6e 3a 00 00 6d 38 00 00 | b2 3e 00 00 3b 43 00 00 |n:..m8..|.>..;C..|
|00000fa0| a4 39 00 00 42 3d 00 00 | b7 3f 00 00 de 3b 00 00 |.9..B=..|.?...;..|
|00000fb0| f6 3c 00 00 ad 37 00 00 | 8d 40 00 00 6a 3b 00 00 |.<...7..|.@..j;..|
|00000fc0| a4 3c 00 00 c5 3f 00 00 | d6 3c 00 00 16 44 00 00 |.<...?..|.<...D..|
|00000fd0| 51 45 00 00 02 3c 00 00 | 32 3a 00 00 8a 3c 00 00 |QE...<..|2:...<..|
|00000fe0| 5e 42 00 00 36 45 00 00 | 8a 3f 00 00 6d 39 00 00 |^B..6E..|.?..m9..|
|00000ff0| 79 3c 00 00 22 45 00 00 | 6b 3c 00 00 43 3c 00 00 |y<.."E..|k<..C<..|
|00001000| f0 37 00 00 93 3e 00 00 | 74 41 00 00 5f 3e 00 00 |.7...>..|tA.._>..|
|00001010| 83 00 96 00 7b 00 66 00 | 86 00 8a 00 17 00 26 00 |....{.f.|......&.|
|00001020| 90 00 8f 00 8c 00 72 00 | 5b 00 03 00 2e 00 25 00 |......r.|[.....%.|
|00001030| a2 00 b6 00 0d 00 49 00 | 82 00 20 00 2f 00 aa 00 |......I.|.. ./...|
|00001040| 22 00 06 00 3a 00 74 00 | 99 00 97 00 12 00 a7 00 |"...:.t.|........|
|00001050| 4d 00 79 00 08 00 0f 00 | 87 00 29 00 ad 00 02 00 |M.y.....|..).....|
|00001060| 93 00 88 00 37 00 92 00 | a5 00 2b 00 af 00 35 00 |....7...|..+...5.|
|00001070| 54 00 11 00 50 00 30 00 | 7d 00 69 00 a6 00 55 00 |T...P.0.|}.i...U.|
|00001080| ab 00 31 00 7c 00 09 00 | 19 00 8d 00 73 00 4f 00 |..1.|...|....s.O.|
|00001090| a4 00 b5 00 0b 00 53 00 | a8 00 2d 00 ae 00 89 00 |......S.|..-.....|
|000010a0| 00 00 77 00 21 00 7f 00 | 1f 00 32 00 6b 00 b0 00 |..w.!...|..2.k...|
|000010b0| 3d 00 58 00 b3 00 70 00 | 56 00 68 00 8e 00 b4 00 |=.X...p.|V.h.....|
|000010c0| 6e 00 81 00 1c 00 1b 00 | bb 00 3c 00 28 00 45 00 |n.......|..<.(.E.|
|000010d0| 60 00 a1 00 4a 00 14 00 | 76 00 9b 00 5e 00 a3 00 |`...J...|v...^...|
|000010e0| 2a 00 71 00 80 00 b7 00 | b2 00 10 00 1e 00 67 00 |*.q.....|......g.|
|000010f0| 33 00 94 00 59 00 9a 00 | 75 00 47 00 63 00 9f 00 |3...Y...|u.G.c...|
|00001100| 4b 00 15 00 ac 00 9d 00 | 64 00 13 00 0c 00 2c 00 |K.......|d.....,.|
|00001110| 95 00 5c 00 3f 00 7a 00 | a0 00 07 00 b1 00 16 00 |..\.?.z.|........|
|00001120| bc 00 1d 00 8b 00 51 00 | 38 00 24 00 62 00 7e 00 |......Q.|8.$.b.~.|
|00001130| 9c 00 4e 00 61 00 36 00 | 52 00 65 00 6f 00 05 00 |..N.a.6.|R.e.o...|
|00001140| 44 00 57 00 98 00 0e 00 | 85 00 27 00 0a 00 5f 00 |D.W.....|..'..._.|
|00001150| 9e 00 1a 00 4c 00 6c 00 | 39 00 48 00 01 00 78 00 |....L.l.|9.H...x.|
|00001160| 34 00 43 00 6d 00 46 00 | a9 00 ba 00 3b 00 23 00 |4.C.m.F.|....;.#.|
|00001170| 42 00 91 00 b9 00 6a 00 | 18 00 41 00 b8 00 40 00 |B.....j.|..A...@.|
|00001180| 3e 00 04 00 5d 00 84 00 | 5a 00 57 49 4e 52 45 47 |>...]...|Z.WINREG|
|00001190| 2e 64 6c 6c 00 49 6e 69 | 74 69 61 74 65 53 79 73 |.dll.Ini|tiateSys|
|000011a0| 74 65 6d 53 68 75 74 64 | 6f 77 6e 41 00 52 65 67 |temShutd|ownA.Reg|
|000011b0| 69 73 74 65 72 53 65 72 | 76 69 63 65 43 74 72 6c |isterSer|viceCtrl|
|000011c0| 48 61 6e 64 6c 65 72 41 | 00 46 69 6e 64 46 69 72 |HandlerA|.FindFir|
|000011d0| 73 74 46 72 65 65 41 63 | 65 00 41 72 65 41 6c 6c |stFreeAc|e.AreAll|
|000011e0| 41 63 63 65 73 73 65 73 | 47 72 61 6e 74 65 64 00 |Accesses|Granted.|
|000011f0| 53 74 61 72 74 53 65 72 | 76 69 63 65 43 74 72 6c |StartSer|viceCtrl|
|00001200| 44 69 73 70 61 74 63 68 | 65 72 57 00 52 65 67 52 |Dispatch|erW.RegR|
|00001210| 65 70 6c 61 63 65 4b 65 | 79 41 00 43 72 65 61 74 |eplaceKe|yA.Creat|
|00001220| 65 50 72 69 76 61 74 65 | 4f 62 6a 65 63 74 53 65 |ePrivate|ObjectSe|
|00001230| 63 75 72 69 74 79 00 52 | 65 67 45 6e 75 6d 4b 65 |curity.R|egEnumKe|
|00001240| 79 57 00 45 6e 75 6d 44 | 65 70 65 6e 64 65 6e 74 |yW.EnumD|ependent|
|00001250| 53 65 72 76 69 63 65 73 | 57 00 47 65 74 53 65 72 |Services|W.GetSer|
|00001260| 76 69 63 65 4b 65 79 4e | 61 6d 65 57 00 52 65 67 |viceKeyN|ameW.Reg|
|00001270| 53 65 74 56 61 6c 75 65 | 41 00 47 65 74 55 73 65 |SetValue|A.GetUse|
|00001280| 72 4e 61 6d 65 57 00 52 | 65 67 44 65 6c 65 74 65 |rNameW.R|egDelete|
|00001290| 4b 65 79 41 00 43 68 61 | 6e 67 65 53 65 72 76 69 |KeyA.Cha|ngeServi|
|000012a0| 63 65 43 6f 6e 66 69 67 | 57 00 52 65 67 53 61 76 |ceConfig|W.RegSav|
|000012b0| 65 4b 65 79 41 00 45 6e | 75 6d 53 65 72 76 69 63 |eKeyA.En|umServic|
|000012c0| 65 73 53 74 61 74 75 73 | 41 00 50 72 69 76 69 6c |esStatus|A.Privil|
|000012d0| 65 67 65 64 53 65 72 76 | 69 63 65 41 75 64 69 74 |egedServ|iceAudit|
|000012e0| 41 6c 61 72 6d 41 00 47 | 65 74 50 72 69 76 61 74 |AlarmA.G|etPrivat|
|000012f0| 65 4f 62 6a 65 63 74 53 | 65 63 75 72 69 74 79 00 |eObjectS|ecurity.|
|00001300| 44 65 72 65 67 69 73 74 | 65 72 45 76 65 6e 74 53 |Deregist|erEventS|
|00001310| 6f 75 72 63 65 00 52 65 | 67 43 72 65 61 74 65 4b |ource.Re|gCreateK|
|00001320| 65 79 57 00 4f 70 65 6e | 42 61 63 6b 75 70 45 76 |eyW.Open|BackupEv|
|00001330| 65 6e 74 4c 6f 67 57 00 | 52 65 67 43 6f 6e 6e 65 |entLogW.|RegConne|
|00001340| 63 74 52 65 67 69 73 74 | 72 79 57 00 52 65 67 45 |ctRegist|ryW.RegE|
|00001350| 6e 75 6d 56 61 6c 75 65 | 57 00 41 64 64 41 63 63 |numValue|W.AddAcc|
|00001360| 65 73 73 44 65 6e 69 65 | 64 41 63 65 00 53 65 74 |essDenie|dAce.Set|
|00001370| 53 65 72 76 69 63 65 4f | 62 6a 65 63 74 53 65 63 |ServiceO|bjectSec|
|00001380| 75 72 69 74 79 00 00 00 | 00 00 47 65 74 53 69 64 |urity...|..GetSid|
|00001390| 49 64 65 6e 74 69 66 69 | 65 72 41 75 74 68 6f 72 |Identifi|erAuthor|
|000013a0| 69 74 79 00 52 65 67 53 | 65 74 56 61 6c 75 65 57 |ity.RegS|etValueW|
|000013b0| 00 4e 6f 74 69 66 79 42 | 6f 6f 74 43 6f 6e 66 69 |.NotifyB|ootConfi|
|000013c0| 67 53 74 61 74 75 73 00 | 4d 61 70 47 65 6e 65 72 |gStatus.|MapGener|
|000013d0| 69 63 4d 61 73 6b 00 52 | 65 67 47 65 74 4b 65 79 |icMask.R|egGetKey|
|000013e0| 53 65 63 75 72 69 74 79 | 00 50 72 69 76 69 6c 65 |Security|.Privile|
|000013f0| 67 65 64 53 65 72 76 69 | 63 65 41 75 64 69 74 41 |gedServi|ceAuditA|
|00001400| 6c 61 72 6d 57 00 49 73 | 56 61 6c 69 64 53 69 64 |larmW.Is|ValidSid|
|00001410| 00 43 6c 6f 73 65 45 76 | 65 6e 74 4c 6f 67 00 49 |.CloseEv|entLog.I|
|00001420| 73 56 61 6c 69 64 41 63 | 6c 00 43 6f 70 79 53 69 |sValidAc|l.CopySi|
|00001430| 64 00 53 65 74 50 72 69 | 76 61 74 65 4f 62 6a 65 |d.SetPri|vateObje|
|00001440| 63 74 53 65 63 75 72 69 | 74 79 00 52 65 67 4f 70 |ctSecuri|ty.RegOp|
|00001450| 65 6e 4b 65 79 41 00 42 | 61 63 6b 75 70 45 76 65 |enKeyA.B|ackupEve|
|00001460| 6e 74 4c 6f 67 41 00 41 | 64 64 41 63 65 00 52 65 |ntLogA.A|ddAce.Re|
|00001470| 67 53 65 74 4b 65 79 53 | 65 63 75 72 69 74 79 00 |gSetKeyS|ecurity.|
|00001480| 4f 62 6a 65 63 74 4f 70 | 65 6e 41 75 64 69 74 41 |ObjectOp|enAuditA|
|00001490| 6c 61 72 6d 41 00 45 71 | 75 61 6c 50 72 65 66 69 |larmA.Eq|ualPrefi|
|000014a0| 78 53 69 64 00 4f 70 65 | 6e 53 43 4d 61 6e 61 67 |xSid.Ope|nSCManag|
|000014b0| 65 72 57 00 47 65 74 4b | 65 72 6e 65 6c 4f 62 6a |erW.GetK|ernelObj|
|000014c0| 65 63 74 53 65 63 75 72 | 69 74 79 00 52 65 67 44 |ectSecur|ity.RegD|
|000014d0| 65 6c 65 74 65 4b 65 79 | 57 00 49 6e 69 74 69 61 |eleteKey|W.Initia|
|000014e0| 6c 69 7a 65 41 63 6c 00 | 41 72 65 41 6e 79 41 63 |lizeAcl.|AreAnyAc|
|000014f0| 63 65 73 73 65 73 47 72 | 61 6e 74 65 64 00 43 6c |cessesGr|anted.Cl|
|00001500| 6f 73 65 53 65 72 76 69 | 63 65 48 61 6e 64 6c 65 |oseServi|ceHandle|
|00001510| 00 47 65 74 53 65 63 75 | 72 69 74 79 44 65 73 63 |.GetSecu|rityDesc|
|00001520| 72 69 70 74 6f 72 44 61 | 63 6c 00 47 65 74 53 65 |riptorDa|cl.GetSe|
|00001530| 72 76 69 63 65 44 69 73 | 70 6c 61 79 4e 61 6d 65 |rviceDis|playName|
|00001540| 57 00 4c 6f 63 6b 53 65 | 72 76 69 63 65 44 61 74 |W.LockSe|rviceDat|
|00001550| 61 62 61 73 65 00 51 75 | 65 72 79 53 65 72 76 69 |abase.Qu|eryServi|
|00001560| 63 65 43 6f 6e 66 69 67 | 57 00 52 65 70 6f 72 74 |ceConfig|W.Report|
|00001570| 45 76 65 6e 74 41 00 00 | 00 00 00 00 00 00 00 00 |EventA..|........|
|00001580| 00 00 00 00 00 00 00 00 | 00 00 47 65 74 4e 75 6d |........|..GetNum|
|00001590| 62 65 72 4f 66 45 76 65 | 6e 74 4c 6f 67 52 65 63 |berOfEve|ntLogRec|
|000015a0| 6f 72 64 73 00 52 65 67 | 51 75 65 72 79 56 61 6c |ords.Reg|QueryVal|
|000015b0| 75 65 41 00 47 65 74 41 | 63 6c 49 6e 66 6f 72 6d |ueA.GetA|clInform|
|000015c0| 61 74 69 6f 6e 00 52 65 | 67 4e 6f 74 69 66 79 43 |ation.Re|gNotifyC|
|000015d0| 68 61 6e 67 65 4b 65 79 | 56 61 6c 75 65 00 52 65 |hangeKey|Value.Re|
|000015e0| 67 69 73 74 65 72 45 76 | 65 6e 74 53 6f 75 72 63 |gisterEv|entSourc|
|000015f0| 65 41 00 43 72 65 61 74 | 65 53 65 72 76 69 63 65 |eA.Creat|eService|
|00001600| 41 00 53 65 74 4b 65 72 | 6e 65 6c 4f 62 6a 65 63 |A.SetKer|nelObjec|
|00001610| 74 53 65 63 75 72 69 74 | 79 00 4f 62 6a 65 63 74 |tSecurit|y.Object|
|00001620| 43 6c 6f 73 65 41 75 64 | 69 74 41 6c 61 72 6d 57 |CloseAud|itAlarmW|
|00001630| 00 4c 6f 6f 6b 75 70 41 | 63 63 6f 75 6e 74 53 69 |.LookupA|ccountSi|
|00001640| 64 41 00 53 74 61 72 74 | 53 65 72 76 69 63 65 43 |dA.Start|ServiceC|
|00001650| 74 72 6c 44 69 73 70 61 | 74 63 68 65 72 41 00 52 |trlDispa|tcherA.R|
|00001660| 65 67 45 6e 75 6d 4b 65 | 79 41 00 53 74 61 72 74 |egEnumKe|yA.Start|
|00001670| 53 65 72 76 69 63 65 41 | 00 53 65 74 53 65 72 76 |ServiceA|.SetServ|
|00001680| 69 63 65 53 74 61 74 75 | 73 00 53 65 74 53 65 63 |iceStatu|s.SetSec|
|00001690| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 44 |urityDes|criptorD|
|000016a0| 61 63 6c 00 52 65 70 6f | 72 74 45 76 65 6e 74 57 |acl.Repo|rtEventW|
|000016b0| 00 52 65 67 52 65 70 6c | 61 63 65 4b 65 79 57 00 |.RegRepl|aceKeyW.|
|000016c0| 4f 62 6a 65 63 74 4f 70 | 65 6e 41 75 64 69 74 41 |ObjectOp|enAuditA|
|000016d0| 6c 61 72 6d 57 00 53 65 | 74 41 63 6c 49 6e 66 6f |larmW.Se|tAclInfo|
|000016e0| 72 6d 61 74 69 6f 6e 00 | 52 65 61 64 45 76 65 6e |rmation.|ReadEven|
|000016f0| 74 4c 6f 67 41 00 52 65 | 67 69 73 74 65 72 45 76 |tLogA.Re|gisterEv|
|00001700| 65 6e 74 53 6f 75 72 63 | 65 57 00 43 6c 65 61 72 |entSourc|eW.Clear|
|00001710| 45 76 65 6e 74 4c 6f 67 | 41 00 4f 70 65 6e 42 61 |EventLog|A.OpenBa|
|00001720| 63 6b 75 70 45 76 65 6e | 74 4c 6f 67 41 00 52 65 |ckupEven|tLogA.Re|
|00001730| 67 43 6f 6e 6e 65 63 74 | 52 65 67 69 73 74 72 79 |gConnect|Registry|
|00001740| 41 00 52 65 67 55 6e 4c | 6f 61 64 4b 65 79 41 00 |A.RegUnL|oadKeyA.|
|00001750| 44 75 70 6c 69 63 61 74 | 65 54 6f 6b 65 6e 00 52 |Duplicat|eToken.R|
|00001760| 65 67 51 75 65 72 79 49 | 6e 66 6f 4b 65 79 41 00 |egQueryI|nfoKeyA.|
|00001770| 47 65 74 53 69 64 53 75 | 62 41 75 74 68 6f 72 69 |GetSidSu|bAuthori|
|00001780| 74 79 43 6f 75 6e 74 00 | 00 00 47 65 74 53 65 63 |tyCount.|..GetSec|
|00001790| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 43 |urityDes|criptorC|
|000017a0| 6f 6e 74 72 6f 6c 00 52 | 65 67 4c 6f 61 64 4b 65 |ontrol.R|egLoadKe|
|000017b0| 79 57 00 52 65 67 51 75 | 65 72 79 56 61 6c 75 65 |yW.RegQu|eryValue|
|000017c0| 45 78 41 00 49 6d 70 65 | 72 73 6f 6e 61 74 65 4e |ExA.Impe|rsonateN|
|000017d0| 61 6d 65 64 50 69 70 65 | 43 6c 69 65 6e 74 00 47 |amedPipe|Client.G|
|000017e0| 65 74 4f 6c 64 65 73 74 | 45 76 65 6e 74 4c 6f 67 |etOldest|EventLog|
|000017f0| 52 65 63 6f 72 64 00 47 | 65 74 53 65 63 75 72 69 |Record.G|etSecuri|
|00001800| 74 79 44 65 73 63 72 69 | 70 74 6f 72 53 61 63 6c |tyDescri|ptorSacl|
|00001810| 00 4c 6f 6f 6b 75 70 50 | 72 69 76 69 6c 65 67 65 |.LookupP|rivilege|
|00001820| 4e 61 6d 65 41 00 52 65 | 67 52 65 73 74 6f 72 65 |NameA.Re|gRestore|
|00001830| 4b 65 79 41 00 4c 6f 6f | 6b 75 70 41 63 63 6f 75 |KeyA.Loo|kupAccou|
|00001840| 6e 74 53 69 64 57 00 51 | 75 65 72 79 53 65 72 76 |ntSidW.Q|ueryServ|
|00001850| 69 63 65 4c 6f 63 6b 53 | 74 61 74 75 73 57 00 57 |iceLockS|tatusW.W|
|00001860| 49 4e 33 32 53 59 53 44 | 4c 4c 00 41 6c 6c 6f 63 |IN32SYSD|LL.Alloc|
|00001870| 61 74 65 4c 6f 63 61 6c | 6c 79 55 6e 69 71 75 65 |ateLocal|lyUnique|
|00001880| 49 64 00 52 65 67 44 65 | 6c 65 74 65 56 61 6c 75 |Id.RegDe|leteValu|
|00001890| 65 57 00 53 74 61 72 74 | 53 65 72 76 69 63 65 57 |eW.Start|ServiceW|
|000018a0| 00 4f 70 65 6e 50 72 6f | 63 65 73 73 54 6f 6b 65 |.OpenPro|cessToke|
|000018b0| 6e 00 52 65 67 53 65 74 | 56 61 6c 75 65 45 78 41 |n.RegSet|ValueExA|
|000018c0| 00 4f 62 6a 65 63 74 50 | 72 69 76 69 6c 65 67 65 |.ObjectP|rivilege|
|000018d0| 41 75 64 69 74 41 6c 61 | 72 6d 41 00 52 65 67 51 |AuditAla|rmA.RegQ|
|000018e0| 75 65 72 79 49 6e 66 6f | 4b 65 79 57 00 52 65 67 |ueryInfo|KeyW.Reg|
|000018f0| 4f 70 65 6e 4b 65 79 45 | 78 41 00 52 65 61 64 45 |OpenKeyE|xA.ReadE|
|00001900| 76 65 6e 74 4c 6f 67 57 | 00 52 65 67 43 72 65 61 |ventLogW|.RegCrea|
|00001910| 74 65 4b 65 79 45 78 57 | 00 52 65 67 51 75 65 72 |teKeyExW|.RegQuer|
|00001920| 79 56 61 6c 75 65 45 78 | 57 00 41 63 63 65 73 73 |yValueEx|W.Access|
|00001930| 43 68 65 63 6b 41 6e 64 | 41 75 64 69 74 41 6c 61 |CheckAnd|AuditAla|
|00001940| 72 6d 41 00 51 75 65 72 | 79 53 65 72 76 69 63 65 |rmA.Quer|yService|
|00001950| 43 6f 6e 66 69 67 41 00 | 4c 6f 6f 6b 75 70 50 72 |ConfigA.|LookupPr|
|00001960| 69 76 69 6c 65 67 65 4e | 61 6d 65 57 00 47 65 74 |ivilegeN|ameW.Get|
|00001970| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00001980| 6f 72 4c 65 6e 67 74 68 | 00 00 53 65 74 53 65 63 |orLength|..SetSec|
|00001990| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 53 |urityDes|criptorS|
|000019a0| 61 63 6c 00 4c 6f 6f 6b | 75 70 41 63 63 6f 75 6e |acl.Look|upAccoun|
|000019b0| 74 4e 61 6d 65 41 00 52 | 65 67 55 6e 4c 6f 61 64 |tNameA.R|egUnLoad|
|000019c0| 4b 65 79 57 00 52 65 76 | 65 72 74 54 6f 53 65 6c |KeyW.Rev|ertToSel|
|000019d0| 66 00 4d 61 6b 65 41 62 | 73 6f 6c 75 74 65 53 44 |f.MakeAb|soluteSD|
|000019e0| 00 52 65 67 51 75 65 72 | 79 56 61 6c 75 65 57 00 |.RegQuer|yValueW.|
|000019f0| 4c 6f 6f 6b 75 70 50 72 | 69 76 69 6c 65 67 65 44 |LookupPr|ivilegeD|
|00001a00| 69 73 70 6c 61 79 4e 61 | 6d 65 57 00 4f 70 65 6e |isplayNa|meW.Open|
|00001a10| 53 65 72 76 69 63 65 41 | 00 41 6c 6c 6f 63 61 74 |ServiceA|.Allocat|
|00001a20| 65 41 6e 64 49 6e 69 74 | 69 61 6c 69 7a 65 53 69 |eAndInit|ializeSi|
|00001a30| 64 00 47 65 74 53 69 64 | 53 75 62 41 75 74 68 6f |d.GetSid|SubAutho|
|00001a40| 72 69 74 79 00 43 72 65 | 61 74 65 53 65 72 76 69 |rity.Cre|ateServi|
|00001a50| 63 65 57 00 51 75 65 72 | 79 53 65 72 76 69 63 65 |ceW.Quer|yService|
|00001a60| 53 74 61 74 75 73 00 4f | 70 65 6e 45 76 65 6e 74 |Status.O|penEvent|
|00001a70| 4c 6f 67 41 00 49 6e 69 | 74 69 61 74 65 53 79 73 |LogA.Ini|tiateSys|
|00001a80| 74 65 6d 53 68 75 74 64 | 6f 77 6e 57 00 52 65 67 |temShutd|ownW.Reg|
|00001a90| 69 73 74 65 72 53 65 72 | 76 69 63 65 43 74 72 6c |isterSer|viceCtrl|
|00001aa0| 48 61 6e 64 6c 65 72 57 | 00 45 6e 75 6d 44 65 70 |HandlerW|.EnumDep|
|00001ab0| 65 6e 64 65 6e 74 53 65 | 72 76 69 63 65 73 41 00 |endentSe|rvicesA.|
|00001ac0| 52 65 67 45 6e 75 6d 4b | 65 79 45 78 41 00 41 63 |RegEnumK|eyExA.Ac|
|00001ad0| 63 65 73 73 43 68 65 63 | 6b 00 47 65 74 53 65 72 |cessChec|k.GetSer|
|00001ae0| 76 69 63 65 4b 65 79 4e | 61 6d 65 41 00 47 65 74 |viceKeyN|ameA.Get|
|00001af0| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00001b00| 6f 72 47 72 6f 75 70 00 | 52 65 67 4f 70 65 6e 4b |orGroup.|RegOpenK|
|00001b10| 65 79 45 78 57 00 49 73 | 56 61 6c 69 64 53 65 63 |eyExW.Is|ValidSec|
|00001b20| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00001b30| 4f 70 65 6e 53 65 72 76 | 69 63 65 57 00 4d 61 6b |OpenServ|iceW.Mak|
|00001b40| 65 53 65 6c 66 52 65 6c | 61 74 69 76 65 53 44 00 |eSelfRel|ativeSD.|
|00001b50| 43 6c 65 61 72 45 76 65 | 6e 74 4c 6f 67 57 00 41 |ClearEve|ntLogW.A|
|00001b60| 62 6f 72 74 53 79 73 74 | 65 6d 53 68 75 74 64 6f |bortSyst|emShutdo|
|00001b70| 77 6e 41 00 55 6e 6c 6f | 63 6b 53 65 72 76 69 63 |wnA.Unlo|ckServic|
|00001b80| 65 44 61 74 61 62 61 73 | 65 00 52 65 67 53 61 76 |eDatabas|e.RegSav|
|00001b90| 65 4b 65 79 57 00 41 63 | 63 65 73 73 43 68 65 63 |eKeyW.Ac|cessChec|
|00001ba0| 6b 41 6e 64 41 75 64 69 | 74 41 6c 61 72 6d 57 00 |kAndAudi|tAlarmW.|
|00001bb0| 45 6e 75 6d 53 65 72 76 | 69 63 65 73 53 74 61 74 |EnumServ|icesStat|
|00001bc0| 75 73 57 00 47 65 74 41 | 63 65 00 49 6e 69 74 69 |usW.GetA|ce.Initi|
|00001bd0| 61 6c 69 7a 65 53 69 64 | 00 41 64 64 41 63 63 65 |alizeSid|.AddAcce|
|00001be0| 73 73 41 6c 6c 6f 77 65 | 64 41 63 65 00 52 65 67 |ssAllowe|dAce.Reg|
|00001bf0| 4c 6f 61 64 4b 65 79 41 | 00 41 64 6a 75 73 74 54 |LoadKeyA|.AdjustT|
|00001c00| 6f 6b 65 6e 50 72 69 76 | 69 6c 65 67 65 73 00 47 |okenPriv|ileges.G|
|00001c10| 65 74 53 69 64 4c 65 6e | 67 74 68 52 65 71 75 69 |etSidLen|gthRequi|
|00001c20| 72 65 64 00 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |red.Look|upPrivil|
|00001c30| 65 67 65 56 61 6c 75 65 | 41 00 41 64 6a 75 73 74 |egeValue|A.Adjust|
|00001c40| 54 6f 6b 65 6e 47 72 6f | 75 70 73 00 41 64 64 41 |TokenGro|ups.AddA|
|00001c50| 75 64 69 74 41 63 63 65 | 73 73 41 63 65 00 53 65 |uditAcce|ssAce.Se|
|00001c60| 74 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |tSecurit|yDescrip|
|00001c70| 74 6f 72 47 72 6f 75 70 | 00 47 65 74 46 69 6c 65 |torGroup|.GetFile|
|00001c80| 53 65 63 75 72 69 74 79 | 41 00 46 72 65 65 53 69 |Security|A.FreeSi|
|00001c90| 64 00 51 75 65 72 79 53 | 65 72 76 69 63 65 4c 6f |d.QueryS|erviceLo|
|00001ca0| 63 6b 53 74 61 74 75 73 | 41 00 52 65 67 44 65 6c |ckStatus|A.RegDel|
|00001cb0| 65 74 65 56 61 6c 75 65 | 41 00 41 62 6f 72 74 53 |eteValue|A.AbortS|
|00001cc0| 79 73 74 65 6d 53 68 75 | 74 64 6f 77 6e 57 00 44 |ystemShu|tdownW.D|
|00001cd0| 65 6c 65 74 65 53 65 72 | 76 69 63 65 00 52 65 67 |eleteSer|vice.Reg|
|00001ce0| 52 65 73 74 6f 72 65 4b | 65 79 57 00 44 65 6c 65 |RestoreK|eyW.Dele|
|00001cf0| 74 65 41 63 65 00 51 75 | 65 72 79 53 65 72 76 69 |teAce.Qu|eryServi|
|00001d00| 63 65 4f 62 6a 65 63 74 | 53 65 63 75 72 69 74 79 |ceObject|Security|
|00001d10| 00 4f 70 65 6e 45 76 65 | 6e 74 4c 6f 67 57 00 52 |.OpenEve|ntLogW.R|
|00001d20| 65 67 4f 70 65 6e 4b 65 | 79 57 00 52 65 67 43 72 |egOpenKe|yW.RegCr|
|00001d30| 65 61 74 65 4b 65 79 45 | 78 41 00 52 65 67 53 65 |eateKeyE|xA.RegSe|
|00001d40| 74 56 61 6c 75 65 45 78 | 57 00 52 65 67 43 6c 6f |tValueEx|W.RegClo|
|00001d50| 73 65 4b 65 79 00 52 65 | 67 45 6e 75 6d 4b 65 79 |seKey.Re|gEnumKey|
|00001d60| 45 78 57 00 4f 62 6a 65 | 63 74 50 72 69 76 69 6c |ExW.Obje|ctPrivil|
|00001d70| 65 67 65 41 75 64 69 74 | 41 6c 61 72 6d 57 00 00 |egeAudit|AlarmW..|
|00001d80| 00 00 00 00 00 00 00 00 | 00 00 42 61 63 6b 75 70 |........|..Backup|
|00001d90| 45 76 65 6e 74 4c 6f 67 | 57 00 4f 70 65 6e 53 43 |EventLog|W.OpenSC|
|00001da0| 4d 61 6e 61 67 65 72 41 | 00 47 65 74 54 6f 6b 65 |ManagerA|.GetToke|
|00001db0| 6e 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 00 47 65 74 |nInforma|tion.Get|
|00001dc0| 46 69 6c 65 53 65 63 75 | 72 69 74 79 57 00 47 65 |FileSecu|rityW.Ge|
|00001dd0| 74 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |tSecurit|yDescrip|
|00001de0| 74 6f 72 4f 77 6e 65 72 | 00 44 65 73 74 72 6f 79 |torOwner|.Destroy|
|00001df0| 50 72 69 76 61 74 65 4f | 62 6a 65 63 74 53 65 63 |PrivateO|bjectSec|
|00001e00| 75 72 69 74 79 00 49 6d | 70 65 72 73 6f 6e 61 74 |urity.Im|personat|
|00001e10| 65 53 65 6c 66 00 53 65 | 74 46 69 6c 65 53 65 63 |eSelf.Se|tFileSec|
|00001e20| 75 72 69 74 79 41 00 43 | 6f 6e 74 72 6f 6c 53 65 |urityA.C|ontrolSe|
|00001e30| 72 76 69 63 65 00 47 65 | 74 53 65 72 76 69 63 65 |rvice.Ge|tService|
|00001e40| 44 69 73 70 6c 61 79 4e | 61 6d 65 41 00 52 65 67 |DisplayN|ameA.Reg|
|00001e50| 43 72 65 61 74 65 4b 65 | 79 41 00 45 71 75 61 6c |CreateKe|yA.Equal|
|00001e60| 53 69 64 00 49 6e 69 74 | 69 61 6c 69 7a 65 53 65 |Sid.Init|ializeSe|
|00001e70| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00001e80| 00 47 65 74 4c 65 6e 67 | 74 68 53 69 64 00 4c 6f |.GetLeng|thSid.Lo|
|00001e90| 6f 6b 75 70 41 63 63 6f | 75 6e 74 4e 61 6d 65 57 |okupAcco|untNameW|
|00001ea0| 00 52 65 67 45 6e 75 6d | 56 61 6c 75 65 41 00 50 |.RegEnum|ValueA.P|
|00001eb0| 72 69 76 69 6c 65 67 65 | 43 68 65 63 6b 00 4c 6f |rivilege|Check.Lo|
|00001ec0| 6f 6b 75 70 50 72 69 76 | 69 6c 65 67 65 44 69 73 |okupPriv|ilegeDis|
|00001ed0| 70 6c 61 79 4e 61 6d 65 | 41 00 4c 6f 6f 6b 75 70 |playName|A.Lookup|
|00001ee0| 50 72 69 76 69 6c 65 67 | 65 56 61 6c 75 65 57 00 |Privileg|eValueW.|
|00001ef0| 47 65 74 55 73 65 72 4e | 61 6d 65 41 00 43 68 61 |GetUserN|ameA.Cha|
|00001f00| 6e 67 65 53 65 72 76 69 | 63 65 43 6f 6e 66 69 67 |ngeServi|ceConfig|
|00001f10| 41 00 4f 70 65 6e 54 68 | 72 65 61 64 54 6f 6b 65 |A.OpenTh|readToke|
|00001f20| 6e 00 53 65 74 54 6f 6b | 65 6e 49 6e 66 6f 72 6d |n.SetTok|enInform|
|00001f30| 61 74 69 6f 6e 00 53 65 | 74 53 65 63 75 72 69 74 |ation.Se|tSecurit|
|00001f40| 79 44 65 73 63 72 69 70 | 74 6f 72 4f 77 6e 65 72 |yDescrip|torOwner|
|00001f50| 00 53 65 74 46 69 6c 65 | 53 65 63 75 72 69 74 79 |.SetFile|Security|
|00001f60| 57 00 4f 62 6a 65 63 74 | 43 6c 6f 73 65 41 75 64 |W.Object|CloseAud|
|00001f70| 69 74 41 6c 61 72 6d 41 | 00 52 65 67 46 6c 75 73 |itAlarmA|.RegFlus|
|00001f80| 68 4b 65 79 00 00 00 00 | 00 00 00 00 00 00 00 00 |hKey....|........|
|00001f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002000| 00 10 00 00 20 00 00 00 | f5 30 04 31 13 31 22 31 |.... ...|.0.1.1"1|
|00002010| 31 31 40 31 4f 31 7d 31 | 85 31 30 32 47 30 62 31 |11@1O1}1|.102G0b1|
|00002020| 00 20 00 00 12 00 00 00 | 9e 30 a4 30 aa 30 b0 30 |. ......|.0.0.0.0|
|00002030| b6 30 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.0......|........|
|00002040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002060| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000020a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000020b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000020c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000020d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000020e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000020f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+