home *** CD-ROM | disk | FTP | other *** search
/ PC Format (South-Africa) 2001 June / PCFJune.iso / Xenon / C++ / FreeCommandLineTools.exe / Lib / PSDK / advapi32.lib < prev    next >
Relocatable Object Module  |  2000-01-31  |  22.2 KB

open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text

This file was processed as: Relocatable Object Module (other/relocatableObjectModule).
This format is not currently supported by dexvert.

ConfidenceProgramDetectionMatch TypeSupport
1% dexvert Sibelius Music / Score (music/sibeliusMusicScore) ext Unsupported
1% dexvert IntelliFont Font (font/intelliFont) ext Unsupported
1% dexvert Relocatable Object Module (other/relocatableObjectModule) magic Unsupported
1% dexvert Amiga Hunk Library/Object (other/amigaLibrary) ext Unsupported
1% dexvert Amiga Shared Library (other/amigaSharedLibrary) ext Unsupported
1% dexvert Chess Assistant File (other/chessAssistant) ext Unsupported
1% dexvert COFF Library (other/coffLibrary) ext Unsupported
1% dexvert Maple Library (other/mapleLibrary) ext Unsupported
1% dexvert TopSpeed Modula-2 Library (other/topSpeedModula2Library) ext Unsupported
100% file 8086 relocatable (Microsoft), "advapi32", 1st record data length 10, 2nd record type 0x88, 2nd record data length 40 default
99% file data default
100% TrID OMF - Relocatable Object Module Format default (weak)
100% gt2 Borland Object Datei default (weak)



hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 80 0a 00 08 61 64 76 61 | 70 69 33 32 00 88 28 00 |....adva|pi32..(.|
|00000010| 00 a0 01 00 14 41 62 6f | 72 74 53 79 73 74 65 6d |.....Abo|rtSystem|
|00000020| 53 68 75 74 64 6f 77 6e | 41 0c 41 44 56 41 50 49 |Shutdown|A.ADVAPI|
|00000030| 33 32 2e 44 4c 4c 00 51 | 88 28 00 00 a0 01 00 14 |32.DLL.Q|.(......|
|00000040| 41 62 6f 72 74 53 79 73 | 74 65 6d 53 68 75 74 64 |AbortSys|temShutd|
|00000050| 6f 77 6e 57 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |ownW.ADV|API32.DL|
|00000060| 4c 00 3b 88 1f 00 00 a0 | 01 00 0b 41 63 63 65 73 |L.;.....|...Acces|
|00000070| 73 43 68 65 63 6b 0c 41 | 44 56 41 50 49 33 32 2e |sCheck.A|DVAPI32.|
|00000080| 44 4c 4c 00 4d 88 2d 00 | 00 a0 01 00 19 41 63 63 |DLL.M.-.|.....Acc|
|00000090| 65 73 73 43 68 65 63 6b | 41 6e 64 41 75 64 69 74 |essCheck|AndAudit|
|000000a0| 41 6c 61 72 6d 41 0c 41 | 44 56 41 50 49 33 32 2e |AlarmA.A|DVAPI32.|
|000000b0| 44 4c 4c 00 f9 88 2d 00 | 00 a0 01 00 19 41 63 63 |DLL...-.|.....Acc|
|000000c0| 65 73 73 43 68 65 63 6b | 41 6e 64 41 75 64 69 74 |essCheck|AndAudit|
|000000d0| 41 6c 61 72 6d 57 0c 41 | 44 56 41 50 49 33 32 2e |AlarmW.A|DVAPI32.|
|000000e0| 44 4c 4c 00 e3 88 25 00 | 00 a0 01 00 11 41 63 63 |DLL...%.|.....Acc|
|000000f0| 65 73 73 43 68 65 63 6b | 42 79 54 79 70 65 0c 41 |essCheck|ByType.A|
|00000100| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 e4 88 33 00 |DVAPI32.|DLL...3.|
|00000110| 00 a0 01 00 1f 41 63 63 | 65 73 73 43 68 65 63 6b |.....Acc|essCheck|
|00000120| 42 79 54 79 70 65 41 6e | 64 41 75 64 69 74 41 6c |ByTypeAn|dAuditAl|
|00000130| 61 72 6d 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |armA.ADV|API32.DL|
|00000140| 4c 00 90 88 33 00 00 a0 | 01 00 1f 41 63 63 65 73 |L...3...|...Acces|
|00000150| 73 43 68 65 63 6b 42 79 | 54 79 70 65 41 6e 64 41 |sCheckBy|TypeAndA|
|00000160| 75 64 69 74 41 6c 61 72 | 6d 57 0c 41 44 56 41 50 |uditAlar|mW.ADVAP|
|00000170| 49 33 32 2e 44 4c 4c 00 | 7a 88 2f 00 00 a0 01 00 |I32.DLL.|z./.....|
|00000180| 1b 41 63 63 65 73 73 43 | 68 65 63 6b 42 79 54 79 |.AccessC|heckByTy|
|00000190| 70 65 52 65 73 75 6c 74 | 4c 69 73 74 0c 41 44 56 |peResult|List.ADV|
|000001a0| 41 50 49 33 32 2e 44 4c | 4c 00 b5 88 3d 00 00 a0 |API32.DL|L...=...|
|000001b0| 01 00 29 41 63 63 65 73 | 73 43 68 65 63 6b 42 79 |..)Acces|sCheckBy|
|000001c0| 54 79 70 65 52 65 73 75 | 6c 74 4c 69 73 74 41 6e |TypeResu|ltListAn|
|000001d0| 64 41 75 64 69 74 41 6c | 61 72 6d 41 0c 41 44 56 |dAuditAl|armA.ADV|
|000001e0| 41 50 49 33 32 2e 44 4c | 4c 00 61 88 45 00 00 a0 |API32.DL|L.a.E...|
|000001f0| 01 00 31 41 63 63 65 73 | 73 43 68 65 63 6b 42 79 |..1Acces|sCheckBy|
|00000200| 54 79 70 65 52 65 73 75 | 6c 74 4c 69 73 74 41 6e |TypeResu|ltListAn|
|00000210| 64 41 75 64 69 74 41 6c | 61 72 6d 42 79 48 61 6e |dAuditAl|armByHan|
|00000220| 64 6c 65 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |dleA.ADV|API32.DL|
|00000230| 4c 00 4a 88 45 00 00 a0 | 01 00 31 41 63 63 65 73 |L.J.E...|..1Acces|
|00000240| 73 43 68 65 63 6b 42 79 | 54 79 70 65 52 65 73 75 |sCheckBy|TypeResu|
|00000250| 6c 74 4c 69 73 74 41 6e | 64 41 75 64 69 74 41 6c |ltListAn|dAuditAl|
|00000260| 61 72 6d 42 79 48 61 6e | 64 6c 65 57 0c 41 44 56 |armByHan|dleW.ADV|
|00000270| 41 50 49 33 32 2e 44 4c | 4c 00 34 88 3d 00 00 a0 |API32.DL|L.4.=...|
|00000280| 01 00 29 41 63 63 65 73 | 73 43 68 65 63 6b 42 79 |..)Acces|sCheckBy|
|00000290| 54 79 70 65 52 65 73 75 | 6c 74 4c 69 73 74 41 6e |TypeResu|ltListAn|
|000002a0| 64 41 75 64 69 74 41 6c | 61 72 6d 57 0c 41 44 56 |dAuditAl|armW.ADV|
|000002b0| 41 50 49 33 32 2e 44 4c | 4c 00 4b 88 27 00 00 a0 |API32.DL|L.K.'...|
|000002c0| 01 00 13 41 64 64 41 63 | 63 65 73 73 41 6c 6c 6f |...AddAc|cessAllo|
|000002d0| 77 65 64 41 63 65 0c 41 | 44 56 41 50 49 33 32 2e |wedAce.A|DVAPI32.|
|000002e0| 44 4c 4c 00 41 88 29 00 | 00 a0 01 00 15 41 64 64 |DLL.A.).|.....Add|
|000002f0| 41 63 63 65 73 73 41 6c | 6c 6f 77 65 64 41 63 65 |AccessAl|lowedAce|
|00000300| 45 78 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |Ex.ADVAP|I32.DLL.|
|00000310| 80 88 2d 00 00 a0 01 00 | 19 41 64 64 41 63 63 65 |..-.....|.AddAcce|
|00000320| 73 73 41 6c 6c 6f 77 65 | 64 4f 62 6a 65 63 74 41 |ssAllowe|dObjectA|
|00000330| 63 65 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |ce.ADVAP|I32.DLL.|
|00000340| de 88 26 00 00 a0 01 00 | 12 41 64 64 41 63 63 65 |..&.....|.AddAcce|
|00000350| 73 73 44 65 6e 69 65 64 | 41 63 65 0c 41 44 56 41 |ssDenied|Ace.ADVA|
|00000360| 50 49 33 32 2e 44 4c 4c | 00 c2 88 28 00 00 a0 01 |PI32.DLL|...(....|
|00000370| 00 14 41 64 64 41 63 63 | 65 73 73 44 65 6e 69 65 |..AddAcc|essDenie|
|00000380| 64 41 63 65 45 78 0c 41 | 44 56 41 50 49 33 32 2e |dAceEx.A|DVAPI32.|
|00000390| 44 4c 4c 00 01 88 2c 00 | 00 a0 01 00 18 41 64 64 |DLL...,.|.....Add|
|000003a0| 41 63 63 65 73 73 44 65 | 6e 69 65 64 4f 62 6a 65 |AccessDe|niedObje|
|000003b0| 63 74 41 63 65 0c 41 44 | 56 41 50 49 33 32 2e 44 |ctAce.AD|VAPI32.D|
|000003c0| 4c 4c 00 5f 88 1a 00 00 | a0 01 00 06 41 64 64 41 |LL._....|....AddA|
|000003d0| 63 65 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |ce.ADVAP|I32.DLL.|
|000003e0| 75 88 25 00 00 a0 01 00 | 11 41 64 64 41 75 64 69 |u.%.....|.AddAudi|
|000003f0| 74 41 63 63 65 73 73 41 | 63 65 0c 41 44 56 41 50 |tAccessA|ce.ADVAP|
|00000400| 49 33 32 2e 44 4c 4c 00 | 16 88 27 00 00 a0 01 00 |I32.DLL.|..'.....|
|00000410| 13 41 64 64 41 75 64 69 | 74 41 63 63 65 73 73 41 |.AddAudi|tAccessA|
|00000420| 63 65 45 78 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |ceEx.ADV|API32.DL|
|00000430| 4c 00 55 88 2b 00 00 a0 | 01 00 17 41 64 64 41 75 |L.U.+...|...AddAu|
|00000440| 64 69 74 41 63 63 65 73 | 73 4f 62 6a 65 63 74 41 |ditAcces|sObjectA|
|00000450| 63 65 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |ce.ADVAP|I32.DLL.|
|00000460| b3 88 2b 00 00 a0 01 00 | 17 41 64 64 55 73 65 72 |..+.....|.AddUser|
|00000470| 73 54 6f 45 6e 63 72 79 | 70 74 65 64 46 69 6c 65 |sToEncry|ptedFile|
|00000480| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 59 88 |.ADVAPI3|2.DLL.Y.|
|00000490| 25 00 00 a0 01 00 11 41 | 64 6a 75 73 74 54 6f 6b |%......A|djustTok|
|000004a0| 65 6e 47 72 6f 75 70 73 | 0c 41 44 56 41 50 49 33 |enGroups|.ADVAPI3|
|000004b0| 32 2e 44 4c 4c 00 85 88 | 29 00 00 a0 01 00 15 41 |2.DLL...|)......A|
|000004c0| 64 6a 75 73 74 54 6f 6b | 65 6e 50 72 69 76 69 6c |djustTok|enPrivil|
|000004d0| 65 67 65 73 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |eges.ADV|API32.DL|
|000004e0| 4c 00 e3 88 2c 00 00 a0 | 01 00 18 41 6c 6c 6f 63 |L...,...|...Alloc|
|000004f0| 61 74 65 41 6e 64 49 6e | 69 74 69 61 6c 69 7a 65 |ateAndIn|itialize|
|00000500| 53 69 64 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |Sid.ADVA|PI32.DLL|
|00000510| 00 f9 88 2b 00 00 a0 01 | 00 17 41 6c 6c 6f 63 61 |...+....|..Alloca|
|00000520| 74 65 4c 6f 63 61 6c 6c | 79 55 6e 69 71 75 65 49 |teLocall|yUniqueI|
|00000530| 64 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 4c |d.ADVAPI|32.DLL.L|
|00000540| 88 29 00 00 a0 01 00 15 | 41 72 65 41 6c 6c 41 63 |.)......|AreAllAc|
|00000550| 63 65 73 73 65 73 47 72 | 61 6e 74 65 64 0c 41 44 |cessesGr|anted.AD|
|00000560| 56 41 50 49 33 32 2e 44 | 4c 4c 00 49 88 29 00 00 |VAPI32.D|LL.I.)..|
|00000570| a0 01 00 15 41 72 65 41 | 6e 79 41 63 63 65 73 73 |....AreA|nyAccess|
|00000580| 65 73 47 72 61 6e 74 65 | 64 0c 41 44 56 41 50 49 |esGrante|d.ADVAPI|
|00000590| 33 32 2e 44 4c 4c 00 3a | 88 23 00 00 a0 01 00 0f |32.DLL.:|.#......|
|000005a0| 42 61 63 6b 75 70 45 76 | 65 6e 74 4c 6f 67 41 0c |BackupEv|entLogA.|
|000005b0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 ba 88 23 |ADVAPI32|.DLL...#|
|000005c0| 00 00 a0 01 00 0f 42 61 | 63 6b 75 70 45 76 65 6e |......Ba|ckupEven|
|000005d0| 74 4c 6f 67 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |tLogW.AD|VAPI32.D|
|000005e0| 4c 4c 00 a4 88 30 00 00 | a0 01 00 1c 42 75 69 6c |LL...0..|....Buil|
|000005f0| 64 45 78 70 6c 69 63 69 | 74 41 63 63 65 73 73 57 |dExplici|tAccessW|
|00000600| 69 74 68 4e 61 6d 65 41 | 0c 41 44 56 41 50 49 33 |ithNameA|.ADVAPI3|
|00000610| 32 2e 44 4c 4c 00 79 88 | 30 00 00 a0 01 00 1c 42 |2.DLL.y.|0......B|
|00000620| 75 69 6c 64 45 78 70 6c | 69 63 69 74 41 63 63 65 |uildExpl|icitAcce|
|00000630| 73 73 57 69 74 68 4e 61 | 6d 65 57 0c 41 44 56 41 |ssWithNa|meW.ADVA|
|00000640| 50 49 33 32 2e 44 4c 4c | 00 63 88 3b 00 00 a0 01 |PI32.DLL|.c.;....|
|00000650| 00 27 42 75 69 6c 64 49 | 6d 70 65 72 73 6f 6e 61 |.'BuildI|mpersona|
|00000660| 74 65 45 78 70 6c 69 63 | 69 74 41 63 63 65 73 73 |teExplic|itAccess|
|00000670| 57 69 74 68 4e 61 6d 65 | 41 0c 41 44 56 41 50 49 |WithName|A.ADVAPI|
|00000680| 33 32 2e 44 4c 4c 00 dc | 88 3b 00 00 a0 01 00 27 |32.DLL..|.;.....'|
|00000690| 42 75 69 6c 64 49 6d 70 | 65 72 73 6f 6e 61 74 65 |BuildImp|ersonate|
|000006a0| 45 78 70 6c 69 63 69 74 | 41 63 63 65 73 73 57 69 |Explicit|AccessWi|
|000006b0| 74 68 4e 61 6d 65 57 0c | 41 44 56 41 50 49 33 32 |thNameW.|ADVAPI32|
|000006c0| 2e 44 4c 4c 00 c6 88 2c | 00 00 a0 01 00 18 42 75 |.DLL...,|......Bu|
|000006d0| 69 6c 64 49 6d 70 65 72 | 73 6f 6e 61 74 65 54 72 |ildImper|sonateTr|
|000006e0| 75 73 74 65 65 41 0c 41 | 44 56 41 50 49 33 32 2e |usteeA.A|DVAPI32.|
|000006f0| 44 4c 4c 00 bf 88 2c 00 | 00 a0 01 00 18 42 75 69 |DLL...,.|.....Bui|
|00000700| 6c 64 49 6d 70 65 72 73 | 6f 6e 61 74 65 54 72 75 |ldImpers|onateTru|
|00000710| 73 74 65 65 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |steeW.AD|VAPI32.D|
|00000720| 4c 4c 00 a9 88 2c 00 00 | a0 01 00 18 42 75 69 6c |LL...,..|....Buil|
|00000730| 64 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |dSecurit|yDescrip|
|00000740| 74 6f 72 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |torA.ADV|API32.DL|
|00000750| 4c 00 bb 88 2c 00 00 a0 | 01 00 18 42 75 69 6c 64 |L...,...|...Build|
|00000760| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00000770| 6f 72 57 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |orW.ADVA|PI32.DLL|
|00000780| 00 a5 88 29 00 00 a0 01 | 00 15 42 75 69 6c 64 54 |...)....|..BuildT|
|00000790| 72 75 73 74 65 65 57 69 | 74 68 4e 61 6d 65 41 0c |rusteeWi|thNameA.|
|000007a0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 2f 88 29 |ADVAPI32|.DLL./.)|
|000007b0| 00 00 a0 01 00 15 42 75 | 69 6c 64 54 72 75 73 74 |......Bu|ildTrust|
|000007c0| 65 65 57 69 74 68 4e 61 | 6d 65 57 0c 41 44 56 41 |eeWithNa|meW.ADVA|
|000007d0| 50 49 33 32 2e 44 4c 4c | 00 19 88 33 00 00 a0 01 |PI32.DLL|...3....|
|000007e0| 00 1f 42 75 69 6c 64 54 | 72 75 73 74 65 65 57 69 |..BuildT|rusteeWi|
|000007f0| 74 68 4f 62 6a 65 63 74 | 73 41 6e 64 4e 61 6d 65 |thObject|sAndName|
|00000800| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 3e |A.ADVAPI|32.DLL.>|
|00000810| 88 33 00 00 a0 01 00 1f | 42 75 69 6c 64 54 72 75 |.3......|BuildTru|
|00000820| 73 74 65 65 57 69 74 68 | 4f 62 6a 65 63 74 73 41 |steeWith|ObjectsA|
|00000830| 6e 64 4e 61 6d 65 57 0c | 41 44 56 41 50 49 33 32 |ndNameW.|ADVAPI32|
|00000840| 2e 44 4c 4c 00 28 88 32 | 00 00 a0 01 00 1e 42 75 |.DLL.(.2|......Bu|
|00000850| 69 6c 64 54 72 75 73 74 | 65 65 57 69 74 68 4f 62 |ildTrust|eeWithOb|
|00000860| 6a 65 63 74 73 41 6e 64 | 53 69 64 41 0c 41 44 56 |jectsAnd|SidA.ADV|
|00000870| 41 50 49 33 32 2e 44 4c | 4c 00 a1 88 32 00 00 a0 |API32.DL|L...2...|
|00000880| 01 00 1e 42 75 69 6c 64 | 54 72 75 73 74 65 65 57 |...Build|TrusteeW|
|00000890| 69 74 68 4f 62 6a 65 63 | 74 73 41 6e 64 53 69 64 |ithObjec|tsAndSid|
|000008a0| 57 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 8b |W.ADVAPI|32.DLL..|
|000008b0| 88 28 00 00 a0 01 00 14 | 42 75 69 6c 64 54 72 75 |.(......|BuildTru|
|000008c0| 73 74 65 65 57 69 74 68 | 53 69 64 41 0c 41 44 56 |steeWith|SidA.ADV|
|000008d0| 41 50 49 33 32 2e 44 4c | 4c 00 92 88 28 00 00 a0 |API32.DL|L...(...|
|000008e0| 01 00 14 42 75 69 6c 64 | 54 72 75 73 74 65 65 57 |...Build|TrusteeW|
|000008f0| 69 74 68 53 69 64 57 0c | 41 44 56 41 50 49 33 32 |ithSidW.|ADVAPI32|
|00000900| 2e 44 4c 4c 00 7c 88 2a | 00 00 a0 01 00 16 43 61 |.DLL.|.*|......Ca|
|00000910| 6e 63 65 6c 4f 76 65 72 | 6c 61 70 70 65 64 41 63 |ncelOver|lappedAc|
|00000920| 63 65 73 73 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |cess.ADV|API32.DL|
|00000930| 4c 00 bd 88 29 00 00 a0 | 01 00 15 43 68 61 6e 67 |L...)...|...Chang|
|00000940| 65 53 65 72 76 69 63 65 | 43 6f 6e 66 69 67 32 41 |eService|Config2A|
|00000950| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 89 88 |.ADVAPI3|2.DLL...|
|00000960| 29 00 00 a0 01 00 15 43 | 68 61 6e 67 65 53 65 72 |)......C|hangeSer|
|00000970| 76 69 63 65 43 6f 6e 66 | 69 67 32 57 0c 41 44 56 |viceConf|ig2W.ADV|
|00000980| 41 50 49 33 32 2e 44 4c | 4c 00 73 88 28 00 00 a0 |API32.DL|L.s.(...|
|00000990| 01 00 14 43 68 61 6e 67 | 65 53 65 72 76 69 63 65 |...Chang|eService|
|000009a0| 43 6f 6e 66 69 67 41 0c | 41 44 56 41 50 49 33 32 |ConfigA.|ADVAPI32|
|000009b0| 2e 44 4c 4c 00 bd 88 28 | 00 00 a0 01 00 14 43 68 |.DLL...(|......Ch|
|000009c0| 61 6e 67 65 53 65 72 76 | 69 63 65 43 6f 6e 66 69 |angeServ|iceConfi|
|000009d0| 67 57 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |gW.ADVAP|I32.DLL.|
|000009e0| a7 88 28 00 00 a0 01 00 | 14 43 68 65 63 6b 54 6f |..(.....|.CheckTo|
|000009f0| 6b 65 6e 4d 65 6d 62 65 | 72 73 68 69 70 0c 41 44 |kenMembe|rship.AD|
|00000a00| 56 41 50 49 33 32 2e 44 | 4c 4c 00 80 88 22 00 00 |VAPI32.D|LL..."..|
|00000a10| a0 01 00 0e 43 6c 65 61 | 72 45 76 65 6e 74 4c 6f |....Clea|rEventLo|
|00000a20| 67 41 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |gA.ADVAP|I32.DLL.|
|00000a30| 2b 88 22 00 00 a0 01 00 | 0e 43 6c 65 61 72 45 76 |+.".....|.ClearEv|
|00000a40| 65 6e 74 4c 6f 67 57 0c | 41 44 56 41 50 49 33 32 |entLogW.|ADVAPI32|
|00000a50| 2e 44 4c 4c 00 15 88 29 | 00 00 a0 01 00 15 43 6c |.DLL...)|......Cl|
|00000a60| 6f 73 65 45 6e 63 72 79 | 70 74 65 64 46 69 6c 65 |oseEncry|ptedFile|
|00000a70| 52 61 77 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |Raw.ADVA|PI32.DLL|
|00000a80| 00 1b 88 21 00 00 a0 01 | 00 0d 43 6c 6f 73 65 45 |...!....|..CloseE|
|00000a90| 76 65 6e 74 4c 6f 67 0c | 41 44 56 41 50 49 33 32 |ventLog.|ADVAPI32|
|00000aa0| 2e 44 4c 4c 00 5f 88 26 | 00 00 a0 01 00 12 43 6c |.DLL._.&|......Cl|
|00000ab0| 6f 73 65 53 65 72 76 69 | 63 65 48 61 6e 64 6c 65 |oseServi|ceHandle|
|00000ac0| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 5c 88 |.ADVAPI3|2.DLL.\.|
|00000ad0| 1e 00 00 a0 01 00 0a 43 | 6c 6f 73 65 54 72 61 63 |.......C|loseTrac|
|00000ae0| 65 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 9a |e.ADVAPI|32.DLL..|
|00000af0| 88 30 00 00 a0 01 00 1c | 43 6f 6d 6d 61 6e 64 4c |.0......|CommandL|
|00000b00| 69 6e 65 46 72 6f 6d 4d | 73 69 44 65 73 63 72 69 |ineFromM|siDescri|
|00000b10| 70 74 6f 72 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |ptor.ADV|API32.DL|
|00000b20| 4c 00 38 88 22 00 00 a0 | 01 00 0e 43 6f 6e 74 72 |L.8."...|...Contr|
|00000b30| 6f 6c 53 65 72 76 69 63 | 65 0c 41 44 56 41 50 49 |olServic|e.ADVAPI|
|00000b40| 33 32 2e 44 4c 4c 00 c5 | 88 21 00 00 a0 01 00 0d |32.DLL..|.!......|
|00000b50| 43 6f 6e 74 72 6f 6c 54 | 72 61 63 65 41 0c 41 44 |ControlT|raceA.AD|
|00000b60| 56 41 50 49 33 32 2e 44 | 4c 4c 00 68 88 21 00 00 |VAPI32.D|LL.h.!..|
|00000b70| a0 01 00 0d 43 6f 6e 74 | 72 6f 6c 54 72 61 63 65 |....Cont|rolTrace|
|00000b80| 57 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 52 |W.ADVAPI|32.DLL.R|
|00000b90| 88 36 00 00 a0 01 00 22 | 43 6f 6e 76 65 72 74 41 |.6....."|ConvertA|
|00000ba0| 63 63 65 73 73 54 6f 53 | 65 63 75 72 69 74 79 44 |ccessToS|ecurityD|
|00000bb0| 65 73 63 72 69 70 74 6f | 72 41 0c 41 44 56 41 50 |escripto|rA.ADVAP|
|00000bc0| 49 33 32 2e 44 4c 4c 00 | a1 88 36 00 00 a0 01 00 |I32.DLL.|..6.....|
|00000bd0| 22 43 6f 6e 76 65 72 74 | 41 63 63 65 73 73 54 6f |"Convert|AccessTo|
|00000be0| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00000bf0| 6f 72 57 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |orW.ADVA|PI32.DLL|
|00000c00| 00 8b 88 32 00 00 a0 01 | 00 1e 43 6f 6e 76 65 72 |...2....|..Conver|
|00000c10| 74 53 44 54 6f 53 74 72 | 69 6e 67 53 44 52 6f 6f |tSDToStr|ingSDRoo|
|00000c20| 74 44 6f 6d 61 69 6e 41 | 0c 41 44 56 41 50 49 33 |tDomainA|.ADVAPI3|
|00000c30| 32 2e 44 4c 4c 00 d1 88 | 32 00 00 a0 01 00 1e 43 |2.DLL...|2......C|
|00000c40| 6f 6e 76 65 72 74 53 44 | 54 6f 53 74 72 69 6e 67 |onvertSD|ToString|
|00000c50| 53 44 52 6f 6f 74 44 6f | 6d 61 69 6e 57 0c 41 44 |SDRootDo|mainW.AD|
|00000c60| 56 41 50 49 33 32 2e 44 | 4c 4c 00 bb 88 36 00 00 |VAPI32.D|LL...6..|
|00000c70| a0 01 00 22 43 6f 6e 76 | 65 72 74 53 65 63 75 72 |..."Conv|ertSecur|
|00000c80| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 54 6f 41 |ityDescr|iptorToA|
|00000c90| 63 63 65 73 73 41 0c 41 | 44 56 41 50 49 33 32 2e |ccessA.A|DVAPI32.|
|00000ca0| 44 4c 4c 00 a1 88 3b 00 | 00 a0 01 00 27 43 6f 6e |DLL...;.|....'Con|
|00000cb0| 76 65 72 74 53 65 63 75 | 72 69 74 79 44 65 73 63 |vertSecu|rityDesc|
|00000cc0| 72 69 70 74 6f 72 54 6f | 41 63 63 65 73 73 4e 61 |riptorTo|AccessNa|
|00000cd0| 6d 65 64 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |medA.ADV|API32.DL|
|00000ce0| 4c 00 b2 88 3b 00 00 a0 | 01 00 27 43 6f 6e 76 65 |L...;...|..'Conve|
|00000cf0| 72 74 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |rtSecuri|tyDescri|
|00000d00| 70 74 6f 72 54 6f 41 63 | 63 65 73 73 4e 61 6d 65 |ptorToAc|cessName|
|00000d10| 64 57 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |dW.ADVAP|I32.DLL.|
|00000d20| 9c 88 36 00 00 a0 01 00 | 22 43 6f 6e 76 65 72 74 |..6.....|"Convert|
|00000d30| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00000d40| 6f 72 54 6f 41 63 63 65 | 73 73 57 0c 41 44 56 41 |orToAcce|ssW.ADVA|
|00000d50| 50 49 33 32 2e 44 4c 4c | 00 8b 88 48 00 00 a0 01 |PI32.DLL|...H....|
|00000d60| 00 34 43 6f 6e 76 65 72 | 74 53 65 63 75 72 69 74 |.4Conver|tSecurit|
|00000d70| 79 44 65 73 63 72 69 70 | 74 6f 72 54 6f 53 74 72 |yDescrip|torToStr|
|00000d80| 69 6e 67 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ingSecur|ityDescr|
|00000d90| 69 70 74 6f 72 41 0c 41 | 44 56 41 50 49 33 32 2e |iptorA.A|DVAPI32.|
|00000da0| 44 4c 4c 00 e1 88 48 00 | 00 a0 01 00 34 43 6f 6e |DLL...H.|....4Con|
|00000db0| 76 65 72 74 53 65 63 75 | 72 69 74 79 44 65 73 63 |vertSecu|rityDesc|
|00000dc0| 72 69 70 74 6f 72 54 6f | 53 74 72 69 6e 67 53 65 |riptorTo|StringSe|
|00000dd0| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00000de0| 57 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 cb |W.ADVAPI|32.DLL..|
|00000df0| 88 2a 00 00 a0 01 00 16 | 43 6f 6e 76 65 72 74 53 |.*......|ConvertS|
|00000e00| 69 64 54 6f 53 74 72 69 | 6e 67 53 69 64 41 0c 41 |idToStri|ngSidA.A|
|00000e10| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 cb 88 2a 00 |DVAPI32.|DLL...*.|
|00000e20| 00 a0 01 00 16 43 6f 6e | 76 65 72 74 53 69 64 54 |.....Con|vertSidT|
|00000e30| 6f 53 74 72 69 6e 67 53 | 69 64 57 0c 41 44 56 41 |oStringS|idW.ADVA|
|00000e40| 50 49 33 32 2e 44 4c 4c | 00 b5 88 32 00 00 a0 01 |PI32.DLL|...2....|
|00000e50| 00 1e 43 6f 6e 76 65 72 | 74 53 74 72 69 6e 67 53 |..Conver|tStringS|
|00000e60| 44 54 6f 53 44 52 6f 6f | 74 44 6f 6d 61 69 6e 41 |DToSDRoo|tDomainA|
|00000e70| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 d1 88 |.ADVAPI3|2.DLL...|
|00000e80| 32 00 00 a0 01 00 1e 43 | 6f 6e 76 65 72 74 53 74 |2......C|onvertSt|
|00000e90| 72 69 6e 67 53 44 54 6f | 53 44 52 6f 6f 74 44 6f |ringSDTo|SDRootDo|
|00000ea0| 6d 61 69 6e 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |mainW.AD|VAPI32.D|
|00000eb0| 4c 4c 00 bb 88 48 00 00 | a0 01 00 34 43 6f 6e 76 |LL...H..|...4Conv|
|00000ec0| 65 72 74 53 74 72 69 6e | 67 53 65 63 75 72 69 74 |ertStrin|gSecurit|
|00000ed0| 79 44 65 73 63 72 69 70 | 74 6f 72 54 6f 53 65 63 |yDescrip|torToSec|
|00000ee0| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 41 |urityDes|criptorA|
|00000ef0| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 e1 88 |.ADVAPI3|2.DLL...|
|00000f00| 48 00 00 a0 01 00 34 43 | 6f 6e 76 65 72 74 53 74 |H.....4C|onvertSt|
|00000f10| 72 69 6e 67 53 65 63 75 | 72 69 74 79 44 65 73 63 |ringSecu|rityDesc|
|00000f20| 72 69 70 74 6f 72 54 6f | 53 65 63 75 72 69 74 79 |riptorTo|Security|
|00000f30| 44 65 73 63 72 69 70 74 | 6f 72 57 0c 41 44 56 41 |Descript|orW.ADVA|
|00000f40| 50 49 33 32 2e 44 4c 4c | 00 cb 88 2a 00 00 a0 01 |PI32.DLL|...*....|
|00000f50| 00 16 43 6f 6e 76 65 72 | 74 53 74 72 69 6e 67 53 |..Conver|tStringS|
|00000f60| 69 64 54 6f 53 69 64 41 | 0c 41 44 56 41 50 49 33 |idToSidA|.ADVAPI3|
|00000f70| 32 2e 44 4c 4c 00 cb 88 | 2a 00 00 a0 01 00 16 43 |2.DLL...|*......C|
|00000f80| 6f 6e 76 65 72 74 53 74 | 72 69 6e 67 53 69 64 54 |onvertSt|ringSidT|
|00000f90| 6f 53 69 64 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |oSidW.AD|VAPI32.D|
|00000fa0| 4c 4c 00 b5 88 3d 00 00 | a0 01 00 29 43 6f 6e 76 |LL...=..|...)Conv|
|00000fb0| 65 72 74 54 6f 41 75 74 | 6f 49 6e 68 65 72 69 74 |ertToAut|oInherit|
|00000fc0| 50 72 69 76 61 74 65 4f | 62 6a 65 63 74 53 65 63 |PrivateO|bjectSec|
|00000fd0| 75 72 69 74 79 0c 41 44 | 56 41 50 49 33 32 2e 44 |urity.AD|VAPI32.D|
|00000fe0| 4c 4c 00 a7 88 1b 00 00 | a0 01 00 07 43 6f 70 79 |LL......|....Copy|
|00000ff0| 53 69 64 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |Sid.ADVA|PI32.DLL|
|00001000| 00 ca 88 2f 00 00 a0 01 | 00 1b 43 72 65 61 74 65 |.../....|..Create|
|00001010| 50 72 69 76 61 74 65 4f | 62 6a 65 63 74 53 65 63 |PrivateO|bjectSec|
|00001020| 75 72 69 74 79 0c 41 44 | 56 41 50 49 33 32 2e 44 |urity.AD|VAPI32.D|
|00001030| 4c 4c 00 7f 88 31 00 00 | a0 01 00 1d 43 72 65 61 |LL...1..|....Crea|
|00001040| 74 65 50 72 69 76 61 74 | 65 4f 62 6a 65 63 74 53 |tePrivat|eObjectS|
|00001050| 65 63 75 72 69 74 79 45 | 78 0c 41 44 56 41 50 49 |ecurityE|x.ADVAPI|
|00001060| 33 32 2e 44 4c 4c 00 be | 88 28 00 00 a0 01 00 14 |32.DLL..|.(......|
|00001070| 43 72 65 61 74 65 50 72 | 6f 63 65 73 73 41 73 55 |CreatePr|ocessAsU|
|00001080| 73 65 72 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |serA.ADV|API32.DL|
|00001090| 4c 00 a4 88 28 00 00 a0 | 01 00 14 43 72 65 61 74 |L...(...|...Creat|
|000010a0| 65 50 72 6f 63 65 73 73 | 41 73 55 73 65 72 57 0c |eProcess|AsUserW.|
|000010b0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 8e 88 2b |ADVAPI32|.DLL...+|
|000010c0| 00 00 a0 01 00 17 43 72 | 65 61 74 65 50 72 6f 63 |......Cr|eateProc|
|000010d0| 65 73 73 57 69 74 68 4c | 6f 67 6f 6e 57 0c 41 44 |essWithL|ogonW.AD|
|000010e0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 40 88 29 00 00 |VAPI32.D|LL.@.)..|
|000010f0| a0 01 00 15 43 72 65 61 | 74 65 52 65 73 74 72 69 |....Crea|teRestri|
|00001100| 63 74 65 64 54 6f 6b 65 | 6e 0c 41 44 56 41 50 49 |ctedToke|n.ADVAPI|
|00001110| 33 32 2e 44 4c 4c 00 fb | 88 22 00 00 a0 01 00 0e |32.DLL..|."......|
|00001120| 43 72 65 61 74 65 53 65 | 72 76 69 63 65 41 0c 41 |CreateSe|rviceA.A|
|00001130| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 11 88 22 00 |DVAPI32.|DLL...".|
|00001140| 00 a0 01 00 0e 43 72 65 | 61 74 65 53 65 72 76 69 |.....Cre|ateServi|
|00001150| 63 65 57 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ceW.ADVA|PI32.DLL|
|00001160| 00 fb 88 29 00 00 a0 01 | 00 15 43 72 65 61 74 65 |...)....|..Create|
|00001170| 54 72 61 63 65 49 6e 73 | 74 61 6e 63 65 49 64 0c |TraceIns|tanceId.|
|00001180| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 44 88 28 |ADVAPI32|.DLL.D.(|
|00001190| 00 00 a0 01 00 14 43 72 | 79 70 74 41 63 71 75 69 |......Cr|yptAcqui|
|000011a0| 72 65 43 6f 6e 74 65 78 | 74 41 0c 41 44 56 41 50 |reContex|tA.ADVAP|
|000011b0| 49 33 32 2e 44 4c 4c 00 | 69 88 28 00 00 a0 01 00 |I32.DLL.|i.(.....|
|000011c0| 14 43 72 79 70 74 41 63 | 71 75 69 72 65 43 6f 6e |.CryptAc|quireCon|
|000011d0| 74 65 78 74 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |textW.AD|VAPI32.D|
|000011e0| 4c 4c 00 53 88 26 00 00 | a0 01 00 12 43 72 79 70 |LL.S.&..|....Cryp|
|000011f0| 74 43 6f 6e 74 65 78 74 | 41 64 64 52 65 66 0c 41 |tContext|AddRef.A|
|00001200| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 52 88 23 00 |DVAPI32.|DLL.R.#.|
|00001210| 00 a0 01 00 0f 43 72 79 | 70 74 43 72 65 61 74 65 |.....Cry|ptCreate|
|00001220| 48 61 73 68 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |Hash.ADV|API32.DL|
|00001230| 4c 00 8b 88 20 00 00 a0 | 01 00 0c 43 72 79 70 74 |L... ...|...Crypt|
|00001240| 44 65 63 72 79 70 74 0c | 41 44 56 41 50 49 33 32 |Decrypt.|ADVAPI32|
|00001250| 2e 44 4c 4c 00 8e 88 22 | 00 00 a0 01 00 0e 43 72 |.DLL..."|......Cr|
|00001260| 79 70 74 44 65 72 69 76 | 65 4b 65 79 0c 41 44 56 |yptDeriv|eKey.ADV|
|00001270| 41 50 49 33 32 2e 44 4c | 4c 00 dd 88 24 00 00 a0 |API32.DL|L...$...|
|00001280| 01 00 10 43 72 79 70 74 | 44 65 73 74 72 6f 79 48 |...Crypt|DestroyH|
|00001290| 61 73 68 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ash.ADVA|PI32.DLL|
|000012a0| 00 f3 88 23 00 00 a0 01 | 00 0f 43 72 79 70 74 44 |...#....|..CryptD|
|000012b0| 65 73 74 72 6f 79 4b 65 | 79 0c 41 44 56 41 50 49 |estroyKe|y.ADVAPI|
|000012c0| 33 32 2e 44 4c 4c 00 50 | 88 26 00 00 a0 01 00 12 |32.DLL.P|.&......|
|000012d0| 43 72 79 70 74 44 75 70 | 6c 69 63 61 74 65 48 61 |CryptDup|licateHa|
|000012e0| 73 68 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |sh.ADVAP|I32.DLL.|
|000012f0| 3e 88 25 00 00 a0 01 00 | 11 43 72 79 70 74 44 75 |>.%.....|.CryptDu|
|00001300| 70 6c 69 63 61 74 65 4b | 65 79 0c 41 44 56 41 50 |plicateK|ey.ADVAP|
|00001310| 49 33 32 2e 44 4c 4c 00 | 9b 88 20 00 00 a0 01 00 |I32.DLL.|.. .....|
|00001320| 0c 43 72 79 70 74 45 6e | 63 72 79 70 74 0c 41 44 |.CryptEn|crypt.AD|
|00001330| 56 41 50 49 33 32 2e 44 | 4c 4c 00 84 88 2b 00 00 |VAPI32.D|LL...+..|
|00001340| a0 01 00 17 43 72 79 70 | 74 45 6e 75 6d 50 72 6f |....Cryp|tEnumPro|
|00001350| 76 69 64 65 72 54 79 70 | 65 73 41 0c 41 44 56 41 |viderTyp|esA.ADVA|
|00001360| 50 49 33 32 2e 44 4c 4c | 00 1d 88 2b 00 00 a0 01 |PI32.DLL|...+....|
|00001370| 00 17 43 72 79 70 74 45 | 6e 75 6d 50 72 6f 76 69 |..CryptE|numProvi|
|00001380| 64 65 72 54 79 70 65 73 | 57 0c 41 44 56 41 50 49 |derTypes|W.ADVAPI|
|00001390| 33 32 2e 44 4c 4c 00 07 | 88 27 00 00 a0 01 00 13 |32.DLL..|.'......|
|000013a0| 43 72 79 70 74 45 6e 75 | 6d 50 72 6f 76 69 64 65 |CryptEnu|mProvide|
|000013b0| 72 73 41 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |rsA.ADVA|PI32.DLL|
|000013c0| 00 c7 88 27 00 00 a0 01 | 00 13 43 72 79 70 74 45 |...'....|..CryptE|
|000013d0| 6e 75 6d 50 72 6f 76 69 | 64 65 72 73 57 0c 41 44 |numProvi|dersW.AD|
|000013e0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 b1 88 22 00 00 |VAPI32.D|LL..."..|
|000013f0| a0 01 00 0e 43 72 79 70 | 74 45 78 70 6f 72 74 4b |....Cryp|tExportK|
|00001400| 65 79 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |ey.ADVAP|I32.DLL.|
|00001410| ba 88 1f 00 00 a0 01 00 | 0b 43 72 79 70 74 47 65 |........|.CryptGe|
|00001420| 6e 4b 65 79 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |nKey.ADV|API32.DL|
|00001430| 4c 00 28 88 22 00 00 a0 | 01 00 0e 43 72 79 70 74 |L.(."...|...Crypt|
|00001440| 47 65 6e 52 61 6e 64 6f | 6d 0c 41 44 56 41 50 49 |GenRando|m.ADVAPI|
|00001450| 33 32 2e 44 4c 4c 00 ea | 88 2c 00 00 a0 01 00 18 |32.DLL..|.,......|
|00001460| 43 72 79 70 74 47 65 74 | 44 65 66 61 75 6c 74 50 |CryptGet|DefaultP|
|00001470| 72 6f 76 69 64 65 72 41 | 0c 41 44 56 41 50 49 33 |roviderA|.ADVAPI3|
|00001480| 32 2e 44 4c 4c 00 e0 88 | 2c 00 00 a0 01 00 18 43 |2.DLL...|,......C|
|00001490| 72 79 70 74 47 65 74 44 | 65 66 61 75 6c 74 50 72 |ryptGetD|efaultPr|
|000014a0| 6f 76 69 64 65 72 57 0c | 41 44 56 41 50 49 33 32 |oviderW.|ADVAPI32|
|000014b0| 2e 44 4c 4c 00 ca 88 25 | 00 00 a0 01 00 11 43 72 |.DLL...%|......Cr|
|000014c0| 79 70 74 47 65 74 48 61 | 73 68 50 61 72 61 6d 0c |yptGetHa|shParam.|
|000014d0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 ca 88 24 |ADVAPI32|.DLL...$|
|000014e0| 00 00 a0 01 00 10 43 72 | 79 70 74 47 65 74 4b 65 |......Cr|yptGetKe|
|000014f0| 79 50 61 72 61 6d 0c 41 | 44 56 41 50 49 33 32 2e |yParam.A|DVAPI32.|
|00001500| 44 4c 4c 00 27 88 25 00 | 00 a0 01 00 11 43 72 79 |DLL.'.%.|.....Cry|
|00001510| 70 74 47 65 74 50 72 6f | 76 50 61 72 61 6d 0c 41 |ptGetPro|vParam.A|
|00001520| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 a7 88 23 00 |DVAPI32.|DLL...#.|
|00001530| 00 a0 01 00 0f 43 72 79 | 70 74 47 65 74 55 73 65 |.....Cry|ptGetUse|
|00001540| 72 4b 65 79 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |rKey.ADV|API32.DL|
|00001550| 4c 00 7b 88 21 00 00 a0 | 01 00 0d 43 72 79 70 74 |L.{.!...|...Crypt|
|00001560| 48 61 73 68 44 61 74 61 | 0c 41 44 56 41 50 49 33 |HashData|.ADVAPI3|
|00001570| 32 2e 44 4c 4c 00 69 88 | 27 00 00 a0 01 00 13 43 |2.DLL.i.|'......C|
|00001580| 72 79 70 74 48 61 73 68 | 53 65 73 73 69 6f 6e 4b |ryptHash|SessionK|
|00001590| 65 79 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |ey.ADVAP|I32.DLL.|
|000015a0| ca 88 22 00 00 a0 01 00 | 0e 43 72 79 70 74 49 6d |..".....|.CryptIm|
|000015b0| 70 6f 72 74 4b 65 79 0c | 41 44 56 41 50 49 33 32 |portKey.|ADVAPI32|
|000015c0| 2e 44 4c 4c 00 c1 88 27 | 00 00 a0 01 00 13 43 72 |.DLL...'|......Cr|
|000015d0| 79 70 74 52 65 6c 65 61 | 73 65 43 6f 6e 74 65 78 |yptRelea|seContex|
|000015e0| 74 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 b5 |t.ADVAPI|32.DLL..|
|000015f0| 88 25 00 00 a0 01 00 11 | 43 72 79 70 74 53 65 74 |.%......|CryptSet|
|00001600| 48 61 73 68 50 61 72 61 | 6d 0c 41 44 56 41 50 49 |HashPara|m.ADVAPI|
|00001610| 33 32 2e 44 4c 4c 00 be | 88 24 00 00 a0 01 00 10 |32.DLL..|.$......|
|00001620| 43 72 79 70 74 53 65 74 | 4b 65 79 50 61 72 61 6d |CryptSet|KeyParam|
|00001630| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 1b 88 |.ADVAPI3|2.DLL...|
|00001640| 25 00 00 a0 01 00 11 43 | 72 79 70 74 53 65 74 50 |%......C|ryptSetP|
|00001650| 72 6f 76 50 61 72 61 6d | 0c 41 44 56 41 50 49 33 |rovParam|.ADVAPI3|
|00001660| 32 2e 44 4c 4c 00 9b 88 | 25 00 00 a0 01 00 11 43 |2.DLL...|%......C|
|00001670| 72 79 70 74 53 65 74 50 | 72 6f 76 69 64 65 72 41 |ryptSetP|roviderA|
|00001680| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 a7 88 |.ADVAPI3|2.DLL...|
|00001690| 27 00 00 a0 01 00 13 43 | 72 79 70 74 53 65 74 50 |'......C|ryptSetP|
|000016a0| 72 6f 76 69 64 65 72 45 | 78 41 0c 41 44 56 41 50 |roviderE|xA.ADVAP|
|000016b0| 49 33 32 2e 44 4c 4c 00 | e6 88 27 00 00 a0 01 00 |I32.DLL.|..'.....|
|000016c0| 13 43 72 79 70 74 53 65 | 74 50 72 6f 76 69 64 65 |.CryptSe|tProvide|
|000016d0| 72 45 78 57 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |rExW.ADV|API32.DL|
|000016e0| 4c 00 d0 88 25 00 00 a0 | 01 00 11 43 72 79 70 74 |L...%...|...Crypt|
|000016f0| 53 65 74 50 72 6f 76 69 | 64 65 72 57 0c 41 44 56 |SetProvi|derW.ADV|
|00001700| 41 50 49 33 32 2e 44 4c | 4c 00 91 88 22 00 00 a0 |API32.DL|L..."...|
|00001710| 01 00 0e 43 72 79 70 74 | 53 69 67 6e 48 61 73 68 |...Crypt|SignHash|
|00001720| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 0f |A.ADVAPI|32.DLL..|
|00001730| 88 22 00 00 a0 01 00 0e | 43 72 79 70 74 53 69 67 |."......|CryptSig|
|00001740| 6e 48 61 73 68 57 0c 41 | 44 56 41 50 49 33 32 2e |nHashW.A|DVAPI32.|
|00001750| 44 4c 4c 00 f9 88 29 00 | 00 a0 01 00 15 43 72 79 |DLL...).|.....Cry|
|00001760| 70 74 56 65 72 69 66 79 | 53 69 67 6e 61 74 75 72 |ptVerify|Signatur|
|00001770| 65 41 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |eA.ADVAP|I32.DLL.|
|00001780| ef 88 29 00 00 a0 01 00 | 15 43 72 79 70 74 56 65 |..).....|.CryptVe|
|00001790| 72 69 66 79 53 69 67 6e | 61 74 75 72 65 57 0c 41 |rifySign|atureW.A|
|000017a0| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 d9 88 20 00 |DVAPI32.|DLL... .|
|000017b0| 00 a0 01 00 0c 44 65 63 | 72 79 70 74 46 69 6c 65 |.....Dec|ryptFile|
|000017c0| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 df |A.ADVAPI|32.DLL..|
|000017d0| 88 20 00 00 a0 01 00 0c | 44 65 63 72 79 70 74 46 |. ......|DecryptF|
|000017e0| 69 6c 65 57 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |ileW.ADV|API32.DL|
|000017f0| 4c 00 c9 88 1d 00 00 a0 | 01 00 09 44 65 6c 65 74 |L.......|...Delet|
|00001800| 65 41 63 65 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |eAce.ADV|API32.DL|
|00001810| 4c 00 25 88 21 00 00 a0 | 01 00 0d 44 65 6c 65 74 |L.%.!...|...Delet|
|00001820| 65 53 65 72 76 69 63 65 | 0c 41 44 56 41 50 49 33 |eService|.ADVAPI3|
|00001830| 32 2e 44 4c 4c 00 55 88 | 29 00 00 a0 01 00 15 44 |2.DLL.U.|)......D|
|00001840| 65 72 65 67 69 73 74 65 | 72 45 76 65 6e 74 53 6f |eregiste|rEventSo|
|00001850| 75 72 63 65 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |urce.ADV|API32.DL|
|00001860| 4c 00 e8 88 30 00 00 a0 | 01 00 1c 44 65 73 74 72 |L...0...|...Destr|
|00001870| 6f 79 50 72 69 76 61 74 | 65 4f 62 6a 65 63 74 53 |oyPrivat|eObjectS|
|00001880| 65 63 75 72 69 74 79 0c | 41 44 56 41 50 49 33 32 |ecurity.|ADVAPI32|
|00001890| 2e 44 4c 4c 00 e7 88 2f | 00 00 a0 01 00 1b 44 75 |.DLL.../|......Du|
|000018a0| 70 6c 69 63 61 74 65 45 | 6e 63 72 79 70 74 69 6f |plicateE|ncryptio|
|000018b0| 6e 49 6e 66 6f 46 69 6c | 65 0c 41 44 56 41 50 49 |nInfoFil|e.ADVAPI|
|000018c0| 33 32 2e 44 4c 4c 00 8b | 88 22 00 00 a0 01 00 0e |32.DLL..|."......|
|000018d0| 44 75 70 6c 69 63 61 74 | 65 54 6f 6b 65 6e 0c 41 |Duplicat|eToken.A|
|000018e0| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 db 88 24 00 |DVAPI32.|DLL...$.|
|000018f0| 00 a0 01 00 10 44 75 70 | 6c 69 63 61 74 65 54 6f |.....Dup|licateTo|
|00001900| 6b 65 6e 45 78 0c 41 44 | 56 41 50 49 33 32 2e 44 |kenEx.AD|VAPI32.D|
|00001910| 4c 4c 00 1a 88 2a 00 00 | a0 01 00 16 45 6c 66 42 |LL...*..|....ElfB|
|00001920| 61 63 6b 75 70 45 76 65 | 6e 74 4c 6f 67 46 69 6c |ackupEve|ntLogFil|
|00001930| 65 41 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |eA.ADVAP|I32.DLL.|
|00001940| 15 88 2a 00 00 a0 01 00 | 16 45 6c 66 42 61 63 6b |..*.....|.ElfBack|
|00001950| 75 70 45 76 65 6e 74 4c | 6f 67 46 69 6c 65 57 0c |upEventL|ogFileW.|
|00001960| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 ff 88 23 |ADVAPI32|.DLL...#|
|00001970| 00 00 a0 01 00 0f 45 6c | 66 43 68 61 6e 67 65 4e |......El|fChangeN|
|00001980| 6f 74 69 66 79 0c 41 44 | 56 41 50 49 33 32 2e 44 |otify.AD|VAPI32.D|
|00001990| 4c 4c 00 9f 88 29 00 00 | a0 01 00 15 45 6c 66 43 |LL...)..|....ElfC|
|000019a0| 6c 65 61 72 45 76 65 6e | 74 4c 6f 67 46 69 6c 65 |learEven|tLogFile|
|000019b0| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 86 |A.ADVAPI|32.DLL..|
|000019c0| 88 29 00 00 a0 01 00 15 | 45 6c 66 43 6c 65 61 72 |.)......|ElfClear|
|000019d0| 45 76 65 6e 74 4c 6f 67 | 46 69 6c 65 57 0c 41 44 |EventLog|FileW.AD|
|000019e0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 70 88 24 00 00 |VAPI32.D|LL.p.$..|
|000019f0| a0 01 00 10 45 6c 66 43 | 6c 6f 73 65 45 76 65 6e |....ElfC|loseEven|
|00001a00| 74 4c 6f 67 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |tLog.ADV|API32.DL|
|00001a10| 4c 00 42 88 2c 00 00 a0 | 01 00 18 45 6c 66 44 65 |L.B.,...|...ElfDe|
|00001a20| 72 65 67 69 73 74 65 72 | 45 76 65 6e 74 53 6f 75 |register|EventSou|
|00001a30| 72 63 65 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |rce.ADVA|PI32.DLL|
|00001a40| 00 cb 88 26 00 00 a0 01 | 00 12 45 6c 66 4e 75 6d |...&....|..ElfNum|
|00001a50| 62 65 72 4f 66 52 65 63 | 6f 72 64 73 0c 41 44 56 |berOfRec|ords.ADV|
|00001a60| 41 50 49 33 32 2e 44 4c | 4c 00 68 88 23 00 00 a0 |API32.DL|L.h.#...|
|00001a70| 01 00 0f 45 6c 66 4f 6c | 64 65 73 74 52 65 63 6f |...ElfOl|destReco|
|00001a80| 72 64 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |rd.ADVAP|I32.DLL.|
|00001a90| 94 88 2a 00 00 a0 01 00 | 16 45 6c 66 4f 70 65 6e |..*.....|.ElfOpen|
|00001aa0| 42 61 63 6b 75 70 45 76 | 65 6e 74 4c 6f 67 41 0c |BackupEv|entLogA.|
|00001ab0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 03 88 2a |ADVAPI32|.DLL...*|
|00001ac0| 00 00 a0 01 00 16 45 6c | 66 4f 70 65 6e 42 61 63 |......El|fOpenBac|
|00001ad0| 6b 75 70 45 76 65 6e 74 | 4c 6f 67 57 0c 41 44 56 |kupEvent|LogW.ADV|
|00001ae0| 41 50 49 33 32 2e 44 4c | 4c 00 ed 88 24 00 00 a0 |API32.DL|L...$...|
|00001af0| 01 00 10 45 6c 66 4f 70 | 65 6e 45 76 65 6e 74 4c |...ElfOp|enEventL|
|00001b00| 6f 67 41 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ogA.ADVA|PI32.DLL|
|00001b10| 00 65 88 24 00 00 a0 01 | 00 10 45 6c 66 4f 70 65 |.e.$....|..ElfOpe|
|00001b20| 6e 45 76 65 6e 74 4c 6f | 67 57 0c 41 44 56 41 50 |nEventLo|gW.ADVAP|
|00001b30| 49 33 32 2e 44 4c 4c 00 | 4f 88 24 00 00 a0 01 00 |I32.DLL.|O.$.....|
|00001b40| 10 45 6c 66 52 65 61 64 | 45 76 65 6e 74 4c 6f 67 |.ElfRead|EventLog|
|00001b50| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 7b |A.ADVAPI|32.DLL.{|
|00001b60| 88 24 00 00 a0 01 00 10 | 45 6c 66 52 65 61 64 45 |.$......|ElfReadE|
|00001b70| 76 65 6e 74 4c 6f 67 57 | 0c 41 44 56 41 50 49 33 |ventLogW|.ADVAPI3|
|00001b80| 32 2e 44 4c 4c 00 65 88 | 2b 00 00 a0 01 00 17 45 |2.DLL.e.|+......E|
|00001b90| 6c 66 52 65 67 69 73 74 | 65 72 45 76 65 6e 74 53 |lfRegist|erEventS|
|00001ba0| 6f 75 72 63 65 41 0c 41 | 44 56 41 50 49 33 32 2e |ourceA.A|DVAPI32.|
|00001bb0| 44 4c 4c 00 55 88 2b 00 | 00 a0 01 00 17 45 6c 66 |DLL.U.+.|.....Elf|
|00001bc0| 52 65 67 69 73 74 65 72 | 45 76 65 6e 74 53 6f 75 |Register|EventSou|
|00001bd0| 72 63 65 57 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |rceW.ADV|API32.DL|
|00001be0| 4c 00 3f 88 23 00 00 a0 | 01 00 0f 45 6c 66 52 65 |L.?.#...|...ElfRe|
|00001bf0| 70 6f 72 74 45 76 65 6e | 74 41 0c 41 44 56 41 50 |portEven|tA.ADVAP|
|00001c00| 49 33 32 2e 44 4c 4c 00 | 9f 88 23 00 00 a0 01 00 |I32.DLL.|..#.....|
|00001c10| 0f 45 6c 66 52 65 70 6f | 72 74 45 76 65 6e 74 57 |.ElfRepo|rtEventW|
|00001c20| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 89 88 |.ADVAPI3|2.DLL...|
|00001c30| 1f 00 00 a0 01 00 0b 45 | 6e 61 62 6c 65 54 72 61 |.......E|nableTra|
|00001c40| 63 65 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |ce.ADVAP|I32.DLL.|
|00001c50| 47 88 20 00 00 a0 01 00 | 0c 45 6e 63 72 79 70 74 |G. .....|.Encrypt|
|00001c60| 46 69 6c 65 41 0c 41 44 | 56 41 50 49 33 32 2e 44 |FileA.AD|VAPI32.D|
|00001c70| 4c 4c 00 d5 88 20 00 00 | a0 01 00 0c 45 6e 63 72 |LL... ..|....Encr|
|00001c80| 79 70 74 46 69 6c 65 57 | 0c 41 44 56 41 50 49 33 |yptFileW|.ADVAPI3|
|00001c90| 32 2e 44 4c 4c 00 bf 88 | 25 00 00 a0 01 00 11 45 |2.DLL...|%......E|
|00001ca0| 6e 63 72 79 70 74 69 6f | 6e 44 69 73 61 62 6c 65 |ncryptio|nDisable|
|00001cb0| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 92 88 |.ADVAPI3|2.DLL...|
|00001cc0| 2a 00 00 a0 01 00 16 45 | 6e 75 6d 44 65 70 65 6e |*......E|numDepen|
|00001cd0| 64 65 6e 74 53 65 72 76 | 69 63 65 73 41 0c 41 44 |dentServ|icesA.AD|
|00001ce0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 b6 88 2a 00 00 |VAPI32.D|LL...*..|
|00001cf0| a0 01 00 16 45 6e 75 6d | 44 65 70 65 6e 64 65 6e |....Enum|Dependen|
|00001d00| 74 53 65 72 76 69 63 65 | 73 57 0c 41 44 56 41 50 |tService|sW.ADVAP|
|00001d10| 49 33 32 2e 44 4c 4c 00 | a0 88 25 00 00 a0 01 00 |I32.DLL.|..%.....|
|00001d20| 11 45 6e 75 6d 53 65 72 | 76 69 63 65 47 72 6f 75 |.EnumSer|viceGrou|
|00001d30| 70 57 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |pW.ADVAP|I32.DLL.|
|00001d40| a7 88 27 00 00 a0 01 00 | 13 45 6e 75 6d 53 65 72 |..'.....|.EnumSer|
|00001d50| 76 69 63 65 73 53 74 61 | 74 75 73 41 0c 41 44 56 |vicesSta|tusA.ADV|
|00001d60| 41 50 49 33 32 2e 44 4c | 4c 00 cf 88 29 00 00 a0 |API32.DL|L...)...|
|00001d70| 01 00 15 45 6e 75 6d 53 | 65 72 76 69 63 65 73 53 |...EnumS|ervicesS|
|00001d80| 74 61 74 75 73 45 78 41 | 0c 41 44 56 41 50 49 33 |tatusExA|.ADVAPI3|
|00001d90| 32 2e 44 4c 4c 00 0e 88 | 29 00 00 a0 01 00 15 45 |2.DLL...|)......E|
|00001da0| 6e 75 6d 53 65 72 76 69 | 63 65 73 53 74 61 74 75 |numServi|cesStatu|
|00001db0| 73 45 78 57 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |sExW.ADV|API32.DL|
|00001dc0| 4c 00 f8 88 27 00 00 a0 | 01 00 13 45 6e 75 6d 53 |L...'...|...EnumS|
|00001dd0| 65 72 76 69 63 65 73 53 | 74 61 74 75 73 57 0c 41 |ervicesS|tatusW.A|
|00001de0| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 b9 88 22 00 |DVAPI32.|DLL...".|
|00001df0| 00 a0 01 00 0e 45 71 75 | 61 6c 50 72 65 66 69 78 |.....Equ|alPrefix|
|00001e00| 53 69 64 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |Sid.ADVA|PI32.DLL|
|00001e10| 00 f1 88 1c 00 00 a0 01 | 00 08 45 71 75 61 6c 53 |........|..EqualS|
|00001e20| 69 64 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |id.ADVAP|I32.DLL.|
|00001e30| 6b 88 29 00 00 a0 01 00 | 15 46 69 6c 65 45 6e 63 |k.).....|.FileEnc|
|00001e40| 72 79 70 74 69 6f 6e 53 | 74 61 74 75 73 41 0c 41 |ryptionS|tatusA.A|
|00001e50| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 f9 88 29 00 |DVAPI32.|DLL...).|
|00001e60| 00 a0 01 00 15 46 69 6c | 65 45 6e 63 72 79 70 74 |.....Fil|eEncrypt|
|00001e70| 69 6f 6e 53 74 61 74 75 | 73 57 0c 41 44 56 41 50 |ionStatu|sW.ADVAP|
|00001e80| 49 33 32 2e 44 4c 4c 00 | e3 88 24 00 00 a0 01 00 |I32.DLL.|..$.....|
|00001e90| 10 46 69 6e 64 46 69 72 | 73 74 46 72 65 65 41 63 |.FindFir|stFreeAc|
|00001ea0| 65 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 5f |e.ADVAPI|32.DLL._|
|00001eb0| 88 35 00 00 a0 01 00 21 | 46 72 65 65 45 6e 63 72 |.5.....!|FreeEncr|
|00001ec0| 79 70 74 69 6f 6e 43 65 | 72 74 69 66 69 63 61 74 |yptionCe|rtificat|
|00001ed0| 65 48 61 73 68 4c 69 73 | 74 0c 41 44 56 41 50 49 |eHashLis|t.ADVAPI|
|00001ee0| 33 32 2e 44 4c 4c 00 21 | 88 1b 00 00 a0 01 00 07 |32.DLL.!|........|
|00001ef0| 46 72 65 65 53 69 64 0c | 41 44 56 41 50 49 33 32 |FreeSid.|ADVAPI32|
|00001f00| 2e 44 4c 4c 00 e3 88 32 | 00 00 a0 01 00 1e 47 65 |.DLL...2|......Ge|
|00001f10| 74 41 63 63 65 73 73 50 | 65 72 6d 69 73 73 69 6f |tAccessP|ermissio|
|00001f20| 6e 73 46 6f 72 4f 62 6a | 65 63 74 41 0c 41 44 56 |nsForObj|ectA.ADV|
|00001f30| 41 50 49 33 32 2e 44 4c | 4c 00 8a 88 32 00 00 a0 |API32.DL|L...2...|
|00001f40| 01 00 1e 47 65 74 41 63 | 63 65 73 73 50 65 72 6d |...GetAc|cessPerm|
|00001f50| 69 73 73 69 6f 6e 73 46 | 6f 72 4f 62 6a 65 63 74 |issionsF|orObject|
|00001f60| 57 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 74 |W.ADVAPI|32.DLL.t|
|00001f70| 88 1a 00 00 a0 01 00 06 | 47 65 74 41 63 65 0c 41 |........|GetAce.A|
|00001f80| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 5e 88 25 00 |DVAPI32.|DLL.^.%.|
|00001f90| 00 a0 01 00 11 47 65 74 | 41 63 6c 49 6e 66 6f 72 |.....Get|AclInfor|
|00001fa0| 6d 61 74 69 6f 6e 0c 41 | 44 56 41 50 49 33 32 2e |mation.A|DVAPI32.|
|00001fb0| 44 4c 4c 00 bb 88 31 00 | 00 a0 01 00 1d 47 65 74 |DLL...1.|.....Get|
|00001fc0| 41 75 64 69 74 65 64 50 | 65 72 6d 69 73 73 69 6f |AuditedP|ermissio|
|00001fd0| 6e 73 46 72 6f 6d 41 63 | 6c 41 0c 41 44 56 41 50 |nsFromAc|lA.ADVAP|
|00001fe0| 49 33 32 2e 44 4c 4c 00 | f8 88 31 00 00 a0 01 00 |I32.DLL.|..1.....|
|00001ff0| 1d 47 65 74 41 75 64 69 | 74 65 64 50 65 72 6d 69 |.GetAudi|tedPermi|
|00002000| 73 73 69 6f 6e 73 46 72 | 6f 6d 41 63 6c 57 0c 41 |ssionsFr|omAclW.A|
|00002010| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 e2 88 28 00 |DVAPI32.|DLL...(.|
|00002020| 00 a0 01 00 14 47 65 74 | 43 75 72 72 65 6e 74 48 |.....Get|CurrentH|
|00002030| 77 50 72 6f 66 69 6c 65 | 41 0c 41 44 56 41 50 49 |wProfile|A.ADVAPI|
|00002040| 33 32 2e 44 4c 4c 00 97 | 88 28 00 00 a0 01 00 14 |32.DLL..|.(......|
|00002050| 47 65 74 43 75 72 72 65 | 6e 74 48 77 50 72 6f 66 |GetCurre|ntHwProf|
|00002060| 69 6c 65 57 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |ileW.ADV|API32.DL|
|00002070| 4c 00 81 88 2e 00 00 a0 | 01 00 1a 47 65 74 45 66 |L.......|...GetEf|
|00002080| 66 65 63 74 69 76 65 52 | 69 67 68 74 73 46 72 6f |fectiveR|ightsFro|
|00002090| 6d 41 63 6c 41 0c 41 44 | 56 41 50 49 33 32 2e 44 |mAclA.AD|VAPI32.D|
|000020a0| 4c 4c 00 58 88 2e 00 00 | a0 01 00 1a 47 65 74 45 |LL.X....|....GetE|
|000020b0| 66 66 65 63 74 69 76 65 | 52 69 67 68 74 73 46 72 |ffective|RightsFr|
|000020c0| 6f 6d 41 63 6c 57 0c 41 | 44 56 41 50 49 33 32 2e |omAclW.A|DVAPI32.|
|000020d0| 44 4c 4c 00 42 88 2a 00 | 00 a0 01 00 16 47 65 74 |DLL.B.*.|.....Get|
|000020e0| 45 76 65 6e 74 4c 6f 67 | 49 6e 66 6f 72 6d 61 74 |EventLog|Informat|
|000020f0| 69 6f 6e 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ion.ADVA|PI32.DLL|
|00002100| 00 9d 88 2e 00 00 a0 01 | 00 1a 47 65 74 45 78 70 |........|..GetExp|
|00002110| 6c 69 63 69 74 45 6e 74 | 72 69 65 73 46 72 6f 6d |licitEnt|riesFrom|
|00002120| 41 63 6c 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |AclA.ADV|API32.DL|
|00002130| 4c 00 3e 88 2e 00 00 a0 | 01 00 1a 47 65 74 45 78 |L.>.....|...GetEx|
|00002140| 70 6c 69 63 69 74 45 6e | 74 72 69 65 73 46 72 6f |plicitEn|triesFro|
|00002150| 6d 41 63 6c 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |mAclW.AD|VAPI32.D|
|00002160| 4c 4c 00 28 88 24 00 00 | a0 01 00 10 47 65 74 46 |LL.(.$..|....GetF|
|00002170| 69 6c 65 53 65 63 75 72 | 69 74 79 41 0c 41 44 56 |ileSecur|ityA.ADV|
|00002180| 41 50 49 33 32 2e 44 4c | 4c 00 3a 88 24 00 00 a0 |API32.DL|L.:.$...|
|00002190| 01 00 10 47 65 74 46 69 | 6c 65 53 65 63 75 72 69 |...GetFi|leSecuri|
|000021a0| 74 79 57 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |tyW.ADVA|PI32.DLL|
|000021b0| 00 24 88 2b 00 00 a0 01 | 00 17 47 65 74 4b 65 72 |.$.+....|..GetKer|
|000021c0| 6e 65 6c 4f 62 6a 65 63 | 74 53 65 63 75 72 69 74 |nelObjec|tSecurit|
|000021d0| 79 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 35 |y.ADVAPI|32.DLL.5|
|000021e0| 88 20 00 00 a0 01 00 0c | 47 65 74 4c 65 6e 67 74 |. ......|GetLengt|
|000021f0| 68 53 69 64 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |hSid.ADV|API32.DL|
|00002200| 4c 00 d9 88 2f 00 00 a0 | 01 00 1b 47 65 74 4c 6f |L.../...|...GetLo|
|00002210| 63 61 6c 4d 61 6e 61 67 | 65 64 41 70 70 6c 69 63 |calManag|edApplic|
|00002220| 61 74 69 6f 6e 73 0c 41 | 44 56 41 50 49 33 32 2e |ations.A|DVAPI32.|
|00002230| 44 4c 4c 00 be 88 2a 00 | 00 a0 01 00 16 47 65 74 |DLL...*.|.....Get|
|00002240| 4d 61 6e 61 67 65 64 41 | 70 70 6c 69 63 61 74 69 |ManagedA|pplicati|
|00002250| 6f 6e 73 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ons.ADVA|PI32.DLL|
|00002260| 00 b3 88 25 00 00 a0 01 | 00 11 47 65 74 4d 61 6e |...%....|..GetMan|
|00002270| 67 6c 65 64 53 69 74 65 | 53 69 64 0c 41 44 56 41 |gledSite|Sid.ADVA|
|00002280| 50 49 33 32 2e 44 4c 4c | 00 e4 88 27 00 00 a0 01 |PI32.DLL|...'....|
|00002290| 00 13 47 65 74 4d 75 6c | 74 69 70 6c 65 54 72 75 |..GetMul|tipleTru|
|000022a0| 73 74 65 65 41 0c 41 44 | 56 41 50 49 33 32 2e 44 |steeA.AD|VAPI32.D|
|000022b0| 4c 4c 00 d4 88 30 00 00 | a0 01 00 1c 47 65 74 4d |LL...0..|....GetM|
|000022c0| 75 6c 74 69 70 6c 65 54 | 72 75 73 74 65 65 4f 70 |ultipleT|rusteeOp|
|000022d0| 65 72 61 74 69 6f 6e 41 | 0c 41 44 56 41 50 49 33 |erationA|.ADVAPI3|
|000022e0| 32 2e 44 4c 4c 00 11 88 | 30 00 00 a0 01 00 1c 47 |2.DLL...|0......G|
|000022f0| 65 74 4d 75 6c 74 69 70 | 6c 65 54 72 75 73 74 65 |etMultip|leTruste|
|00002300| 65 4f 70 65 72 61 74 69 | 6f 6e 57 0c 41 44 56 41 |eOperati|onW.ADVA|
|00002310| 50 49 33 32 2e 44 4c 4c | 00 fb 88 27 00 00 a0 01 |PI32.DLL|...'....|
|00002320| 00 13 47 65 74 4d 75 6c | 74 69 70 6c 65 54 72 75 |..GetMul|tipleTru|
|00002330| 73 74 65 65 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |steeW.AD|VAPI32.D|
|00002340| 4c 4c 00 be 88 29 00 00 | a0 01 00 15 47 65 74 4e |LL...)..|....GetN|
|00002350| 61 6d 65 64 53 65 63 75 | 72 69 74 79 49 6e 66 6f |amedSecu|rityInfo|
|00002360| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 3f |A.ADVAPI|32.DLL.?|
|00002370| 88 2b 00 00 a0 01 00 17 | 47 65 74 4e 61 6d 65 64 |.+......|GetNamed|
|00002380| 53 65 63 75 72 69 74 79 | 49 6e 66 6f 45 78 41 0c |Security|InfoExA.|
|00002390| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 7e 88 2b |ADVAPI32|.DLL.~.+|
|000023a0| 00 00 a0 01 00 17 47 65 | 74 4e 61 6d 65 64 53 65 |......Ge|tNamedSe|
|000023b0| 63 75 72 69 74 79 49 6e | 66 6f 45 78 57 0c 41 44 |curityIn|foExW.AD|
|000023c0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 68 88 29 00 00 |VAPI32.D|LL.h.)..|
|000023d0| a0 01 00 15 47 65 74 4e | 61 6d 65 64 53 65 63 75 |....GetN|amedSecu|
|000023e0| 72 69 74 79 49 6e 66 6f | 57 0c 41 44 56 41 50 49 |rityInfo|W.ADVAPI|
|000023f0| 33 32 2e 44 4c 4c 00 29 | 88 2e 00 00 a0 01 00 1a |32.DLL.)|........|
|00002400| 47 65 74 4e 75 6d 62 65 | 72 4f 66 45 76 65 6e 74 |GetNumbe|rOfEvent|
|00002410| 4c 6f 67 52 65 63 6f 72 | 64 73 0c 41 44 56 41 50 |LogRecor|ds.ADVAP|
|00002420| 49 33 32 2e 44 4c 4c 00 | 2b 88 2b 00 00 a0 01 00 |I32.DLL.|+.+.....|
|00002430| 17 47 65 74 4f 6c 64 65 | 73 74 45 76 65 6e 74 4c |.GetOlde|stEventL|
|00002440| 6f 67 52 65 63 6f 72 64 | 0c 41 44 56 41 50 49 33 |ogRecord|.ADVAPI3|
|00002450| 32 2e 44 4c 4c 00 57 88 | 2e 00 00 a0 01 00 1a 47 |2.DLL.W.|.......G|
|00002460| 65 74 4f 76 65 72 6c 61 | 70 70 65 64 41 63 63 65 |etOverla|ppedAcce|
|00002470| 73 73 52 65 73 75 6c 74 | 73 0c 41 44 56 41 50 49 |ssResult|s.ADVAPI|
|00002480| 33 32 2e 44 4c 4c 00 e9 | 88 2c 00 00 a0 01 00 18 |32.DLL..|.,......|
|00002490| 47 65 74 50 72 69 76 61 | 74 65 4f 62 6a 65 63 74 |GetPriva|teObject|
|000024a0| 53 65 63 75 72 69 74 79 | 0c 41 44 56 41 50 49 33 |Security|.ADVAPI3|
|000024b0| 32 2e 44 4c 4c 00 b9 88 | 30 00 00 a0 01 00 1c 47 |2.DLL...|0......G|
|000024c0| 65 74 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |etSecuri|tyDescri|
|000024d0| 70 74 6f 72 43 6f 6e 74 | 72 6f 6c 0c 41 44 56 41 |ptorCont|rol.ADVA|
|000024e0| 50 49 33 32 2e 44 4c 4c | 00 e3 88 2d 00 00 a0 01 |PI32.DLL|...-....|
|000024f0| 00 19 47 65 74 53 65 63 | 75 72 69 74 79 44 65 73 |..GetSec|urityDes|
|00002500| 63 72 69 70 74 6f 72 44 | 61 63 6c 0c 41 44 56 41 |criptorD|acl.ADVA|
|00002510| 50 49 33 32 2e 44 4c 4c | 00 56 88 2e 00 00 a0 01 |PI32.DLL|.V......|
|00002520| 00 1a 47 65 74 53 65 63 | 75 72 69 74 79 44 65 73 |..GetSec|urityDes|
|00002530| 63 72 69 70 74 6f 72 47 | 72 6f 75 70 0c 41 44 56 |criptorG|roup.ADV|
|00002540| 41 50 49 33 32 2e 44 4c | 4c 00 bb 88 2f 00 00 a0 |API32.DL|L.../...|
|00002550| 01 00 1b 47 65 74 53 65 | 63 75 72 69 74 79 44 65 |...GetSe|curityDe|
|00002560| 73 63 72 69 70 74 6f 72 | 4c 65 6e 67 74 68 0c 41 |scriptor|Length.A|
|00002570| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 64 88 2e 00 |DVAPI32.|DLL.d...|
|00002580| 00 a0 01 00 1a 47 65 74 | 53 65 63 75 72 69 74 79 |.....Get|Security|
|00002590| 44 65 73 63 72 69 70 74 | 6f 72 4f 77 6e 65 72 0c |Descript|orOwner.|
|000025a0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 bd 88 32 |ADVAPI32|.DLL...2|
|000025b0| 00 00 a0 01 00 1e 47 65 | 74 53 65 63 75 72 69 74 |......Ge|tSecurit|
|000025c0| 79 44 65 73 63 72 69 70 | 74 6f 72 52 4d 43 6f 6e |yDescrip|torRMCon|
|000025d0| 74 72 6f 6c 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |trol.ADV|API32.DL|
|000025e0| 4c 00 40 88 2d 00 00 a0 | 01 00 19 47 65 74 53 65 |L.@.-...|...GetSe|
|000025f0| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00002600| 53 61 63 6c 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |Sacl.ADV|API32.DL|
|00002610| 4c 00 47 88 23 00 00 a0 | 01 00 0f 47 65 74 53 65 |L.G.#...|...GetSe|
|00002620| 63 75 72 69 74 79 49 6e | 66 6f 0c 41 44 56 41 50 |curityIn|fo.ADVAP|
|00002630| 49 33 32 2e 44 4c 4c 00 | 71 88 26 00 00 a0 01 00 |I32.DLL.|q.&.....|
|00002640| 12 47 65 74 53 65 63 75 | 72 69 74 79 49 6e 66 6f |.GetSecu|rityInfo|
|00002650| 45 78 41 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ExA.ADVA|PI32.DLL|
|00002660| 00 6d 88 26 00 00 a0 01 | 00 12 47 65 74 53 65 63 |.m.&....|..GetSec|
|00002670| 75 72 69 74 79 49 6e 66 | 6f 45 78 57 0c 41 44 56 |urityInf|oExW.ADV|
|00002680| 41 50 49 33 32 2e 44 4c | 4c 00 57 88 2a 00 00 a0 |API32.DL|L.W.*...|
|00002690| 01 00 16 47 65 74 53 65 | 72 76 69 63 65 44 69 73 |...GetSe|rviceDis|
|000026a0| 70 6c 61 79 4e 61 6d 65 | 41 0c 41 44 56 41 50 49 |playName|A.ADVAPI|
|000026b0| 33 32 2e 44 4c 4c 00 de | 88 2a 00 00 a0 01 00 16 |32.DLL..|.*......|
|000026c0| 47 65 74 53 65 72 76 69 | 63 65 44 69 73 70 6c 61 |GetServi|ceDispla|
|000026d0| 79 4e 61 6d 65 57 0c 41 | 44 56 41 50 49 33 32 2e |yNameW.A|DVAPI32.|
|000026e0| 44 4c 4c 00 c8 88 26 00 | 00 a0 01 00 12 47 65 74 |DLL...&.|.....Get|
|000026f0| 53 65 72 76 69 63 65 4b | 65 79 4e 61 6d 65 41 0c |ServiceK|eyNameA.|
|00002700| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 93 88 26 |ADVAPI32|.DLL...&|
|00002710| 00 00 a0 01 00 12 47 65 | 74 53 65 72 76 69 63 65 |......Ge|tService|
|00002720| 4b 65 79 4e 61 6d 65 57 | 0c 41 44 56 41 50 49 33 |KeyNameW|.ADVAPI3|
|00002730| 32 2e 44 4c 4c 00 7d 88 | 2d 00 00 a0 01 00 19 47 |2.DLL.}.|-......G|
|00002740| 65 74 53 69 64 49 64 65 | 6e 74 69 66 69 65 72 41 |etSidIde|ntifierA|
|00002750| 75 74 68 6f 72 69 74 79 | 0c 41 44 56 41 50 49 33 |uthority|.ADVAPI3|
|00002760| 32 2e 44 4c 4c 00 55 88 | 28 00 00 a0 01 00 14 47 |2.DLL.U.|(......G|
|00002770| 65 74 53 69 64 4c 65 6e | 67 74 68 52 65 71 75 69 |etSidLen|gthRequi|
|00002780| 72 65 64 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |red.ADVA|PI32.DLL|
|00002790| 00 88 88 26 00 00 a0 01 | 00 12 47 65 74 53 69 64 |...&....|..GetSid|
|000027a0| 53 75 62 41 75 74 68 6f | 72 69 74 79 0c 41 44 56 |SubAutho|rity.ADV|
|000027b0| 41 50 49 33 32 2e 44 4c | 4c 00 3c 88 2b 00 00 a0 |API32.DL|L.<.+...|
|000027c0| 01 00 17 47 65 74 53 69 | 64 53 75 62 41 75 74 68 |...GetSi|dSubAuth|
|000027d0| 6f 72 69 74 79 43 6f 75 | 6e 74 0c 41 44 56 41 50 |orityCou|nt.ADVAP|
|000027e0| 49 33 32 2e 44 4c 4c 00 | 29 88 25 00 00 a0 01 00 |I32.DLL.|).%.....|
|000027f0| 11 47 65 74 53 69 74 65 | 44 69 72 65 63 74 6f 72 |.GetSite|Director|
|00002800| 79 41 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |yA.ADVAP|I32.DLL.|
|00002810| c6 88 25 00 00 a0 01 00 | 11 47 65 74 53 69 74 65 |..%.....|.GetSite|
|00002820| 44 69 72 65 63 74 6f 72 | 79 57 0c 41 44 56 41 50 |Director|yW.ADVAP|
|00002830| 49 33 32 2e 44 4c 4c 00 | b0 88 26 00 00 a0 01 00 |I32.DLL.|..&.....|
|00002840| 12 47 65 74 53 69 74 65 | 4e 61 6d 65 46 72 6f 6d |.GetSite|NameFrom|
|00002850| 53 69 64 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |Sid.ADVA|PI32.DLL|
|00002860| 00 85 88 27 00 00 a0 01 | 00 13 47 65 74 53 69 74 |...'....|..GetSit|
|00002870| 65 53 69 64 46 72 6f 6d | 54 6f 6b 65 6e 0c 41 44 |eSidFrom|Token.AD|
|00002880| 56 41 50 49 33 32 2e 44 | 4c 4c 00 03 88 25 00 00 |VAPI32.D|LL...%..|
|00002890| a0 01 00 11 47 65 74 53 | 69 74 65 53 69 64 46 72 |....GetS|iteSidFr|
|000028a0| 6f 6d 55 72 6c 0c 41 44 | 56 41 50 49 33 32 2e 44 |omUrl.AD|VAPI32.D|
|000028b0| 4c 4c 00 d5 88 27 00 00 | a0 01 00 13 47 65 74 54 |LL...'..|....GetT|
|000028c0| 6f 6b 65 6e 49 6e 66 6f | 72 6d 61 74 69 6f 6e 0c |okenInfo|rmation.|
|000028d0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 c6 88 27 |ADVAPI32|.DLL...'|
|000028e0| 00 00 a0 01 00 13 47 65 | 74 54 72 61 63 65 45 6e |......Ge|tTraceEn|
|000028f0| 61 62 6c 65 46 6c 61 67 | 73 0c 41 44 56 41 50 49 |ableFlag|s.ADVAPI|
|00002900| 33 32 2e 44 4c 4c 00 2a | 88 27 00 00 a0 01 00 13 |32.DLL.*|.'......|
|00002910| 47 65 74 54 72 61 63 65 | 45 6e 61 62 6c 65 4c 65 |GetTrace|EnableLe|
|00002920| 76 65 6c 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |vel.ADVA|PI32.DLL|
|00002930| 00 1f 88 28 00 00 a0 01 | 00 14 47 65 74 54 72 61 |...(....|..GetTra|
|00002940| 63 65 4c 6f 67 67 65 72 | 48 61 6e 64 6c 65 0c 41 |ceLogger|Handle.A|
|00002950| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 b0 88 23 00 |DVAPI32.|DLL...#.|
|00002960| 00 a0 01 00 0f 47 65 74 | 54 72 75 73 74 65 65 46 |.....Get|TrusteeF|
|00002970| 6f 72 6d 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |ormA.ADV|API32.DL|
|00002980| 4c 00 94 88 23 00 00 a0 | 01 00 0f 47 65 74 54 72 |L...#...|...GetTr|
|00002990| 75 73 74 65 65 46 6f 72 | 6d 57 0c 41 44 56 41 50 |usteeFor|mW.ADVAP|
|000029a0| 49 33 32 2e 44 4c 4c 00 | 7e 88 23 00 00 a0 01 00 |I32.DLL.|~.#.....|
|000029b0| 0f 47 65 74 54 72 75 73 | 74 65 65 4e 61 6d 65 41 |.GetTrus|teeNameA|
|000029c0| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 a7 88 |.ADVAPI3|2.DLL...|
|000029d0| 23 00 00 a0 01 00 0f 47 | 65 74 54 72 75 73 74 65 |#......G|etTruste|
|000029e0| 65 4e 61 6d 65 57 0c 41 | 44 56 41 50 49 33 32 2e |eNameW.A|DVAPI32.|
|000029f0| 44 4c 4c 00 91 88 23 00 | 00 a0 01 00 0f 47 65 74 |DLL...#.|.....Get|
|00002a00| 54 72 75 73 74 65 65 54 | 79 70 65 41 0c 41 44 56 |TrusteeT|ypeA.ADV|
|00002a10| 41 50 49 33 32 2e 44 4c | 4c 00 86 88 23 00 00 a0 |API32.DL|L...#...|
|00002a20| 01 00 0f 47 65 74 54 72 | 75 73 74 65 65 54 79 70 |...GetTr|usteeTyp|
|00002a30| 65 57 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |eW.ADVAP|I32.DLL.|
|00002a40| 70 88 20 00 00 a0 01 00 | 0c 47 65 74 55 73 65 72 |p. .....|.GetUser|
|00002a50| 4e 61 6d 65 41 0c 41 44 | 56 41 50 49 33 32 2e 44 |NameA.AD|VAPI32.D|
|00002a60| 4c 4c 00 fa 88 20 00 00 | a0 01 00 0c 47 65 74 55 |LL... ..|....GetU|
|00002a70| 73 65 72 4e 61 6d 65 57 | 0c 41 44 56 41 50 49 33 |serNameW|.ADVAPI3|
|00002a80| 32 2e 44 4c 4c 00 e4 88 | 27 00 00 a0 01 00 13 49 |2.DLL...|'......I|
|00002a90| 5f 53 63 53 65 74 53 65 | 72 76 69 63 65 42 69 74 |_ScSetSe|rviceBit|
|00002aa0| 73 41 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |sA.ADVAP|I32.DLL.|
|00002ab0| 3f 88 27 00 00 a0 01 00 | 13 49 5f 53 63 53 65 74 |?.'.....|.I_ScSet|
|00002ac0| 53 65 72 76 69 63 65 42 | 69 74 73 57 0c 41 44 56 |ServiceB|itsW.ADV|
|00002ad0| 41 50 49 33 32 2e 44 4c | 4c 00 29 88 2d 00 00 a0 |API32.DL|L.).-...|
|00002ae0| 01 00 19 49 6d 70 65 72 | 73 6f 6e 61 74 65 41 6e |...Imper|sonateAn|
|00002af0| 6f 6e 79 6d 6f 75 73 54 | 6f 6b 65 6e 0c 41 44 56 |onymousT|oken.ADV|
|00002b00| 41 50 49 33 32 2e 44 4c | 4c 00 10 88 2b 00 00 a0 |API32.DL|L...+...|
|00002b10| 01 00 17 49 6d 70 65 72 | 73 6f 6e 61 74 65 4c 6f |...Imper|sonateLo|
|00002b20| 67 67 65 64 4f 6e 55 73 | 65 72 0c 41 44 56 41 50 |ggedOnUs|er.ADVAP|
|00002b30| 49 33 32 2e 44 4c 4c 00 | 30 88 2e 00 00 a0 01 00 |I32.DLL.|0.......|
|00002b40| 1a 49 6d 70 65 72 73 6f | 6e 61 74 65 4e 61 6d 65 |.Imperso|nateName|
|00002b50| 64 50 69 70 65 43 6c 69 | 65 6e 74 0c 41 44 56 41 |dPipeCli|ent.ADVA|
|00002b60| 50 49 33 32 2e 44 4c 4c | 00 06 88 23 00 00 a0 01 |PI32.DLL|...#....|
|00002b70| 00 0f 49 6d 70 65 72 73 | 6f 6e 61 74 65 53 65 6c |..Impers|onateSel|
|00002b80| 66 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 64 |f.ADVAPI|32.DLL.d|
|00002b90| 88 21 00 00 a0 01 00 0d | 49 6e 69 74 69 61 6c 69 |.!......|Initiali|
|00002ba0| 7a 65 41 63 6c 0c 41 44 | 56 41 50 49 33 32 2e 44 |zeAcl.AD|VAPI32.D|
|00002bb0| 4c 4c 00 57 88 30 00 00 | a0 01 00 1c 49 6e 69 74 |LL.W.0..|....Init|
|00002bc0| 69 61 6c 69 7a 65 53 65 | 63 75 72 69 74 79 44 65 |ializeSe|curityDe|
|00002bd0| 73 63 72 69 70 74 6f 72 | 0c 41 44 56 41 50 49 33 |scriptor|.ADVAPI3|
|00002be0| 32 2e 44 4c 4c 00 d2 88 | 21 00 00 a0 01 00 0d 49 |2.DLL...|!......I|
|00002bf0| 6e 69 74 69 61 6c 69 7a | 65 53 69 64 0c 41 44 56 |nitializ|eSid.ADV|
|00002c00| 41 50 49 33 32 2e 44 4c | 4c 00 47 88 2b 00 00 a0 |API32.DL|L.G.+...|
|00002c10| 01 00 17 49 6e 69 74 69 | 61 74 65 53 79 73 74 65 |...Initi|ateSyste|
|00002c20| 6d 53 68 75 74 64 6f 77 | 6e 41 0c 41 44 56 41 50 |mShutdow|nA.ADVAP|
|00002c30| 49 33 32 2e 44 4c 4c 00 | 0c 88 2d 00 00 a0 01 00 |I32.DLL.|..-.....|
|00002c40| 19 49 6e 69 74 69 61 74 | 65 53 79 73 74 65 6d 53 |.Initiat|eSystemS|
|00002c50| 68 75 74 64 6f 77 6e 45 | 78 41 0c 41 44 56 41 50 |hutdownE|xA.ADVAP|
|00002c60| 49 33 32 2e 44 4c 4c 00 | 4b 88 2d 00 00 a0 01 00 |I32.DLL.|K.-.....|
|00002c70| 19 49 6e 69 74 69 61 74 | 65 53 79 73 74 65 6d 53 |.Initiat|eSystemS|
|00002c80| 68 75 74 64 6f 77 6e 45 | 78 57 0c 41 44 56 41 50 |hutdownE|xW.ADVAP|
|00002c90| 49 33 32 2e 44 4c 4c 00 | 35 88 2b 00 00 a0 01 00 |I32.DLL.|5.+.....|
|00002ca0| 17 49 6e 69 74 69 61 74 | 65 53 79 73 74 65 6d 53 |.Initiat|eSystemS|
|00002cb0| 68 75 74 64 6f 77 6e 57 | 0c 41 44 56 41 50 49 33 |hutdownW|.ADVAPI3|
|00002cc0| 32 2e 44 4c 4c 00 f6 88 | 26 00 00 a0 01 00 12 49 |2.DLL...|&......I|
|00002cd0| 6e 73 74 61 6c 6c 41 70 | 70 6c 69 63 61 74 69 6f |nstallAp|plicatio|
|00002ce0| 6e 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 24 |n.ADVAPI|32.DLL.$|
|00002cf0| 88 27 00 00 a0 01 00 13 | 49 73 50 72 6f 63 65 73 |.'......|IsProces|
|00002d00| 73 52 65 73 74 72 69 63 | 74 65 64 0c 41 44 56 41 |sRestric|ted.ADVA|
|00002d10| 50 49 33 32 2e 44 4c 4c | 00 b9 88 21 00 00 a0 01 |PI32.DLL|...!....|
|00002d20| 00 0d 49 73 54 65 78 74 | 55 6e 69 63 6f 64 65 0c |..IsText|Unicode.|
|00002d30| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 51 88 25 |ADVAPI32|.DLL.Q.%|
|00002d40| 00 00 a0 01 00 11 49 73 | 54 6f 6b 65 6e 52 65 73 |......Is|TokenRes|
|00002d50| 74 72 69 63 74 65 64 0c | 41 44 56 41 50 49 33 32 |tricted.|ADVAPI32|
|00002d60| 2e 44 4c 4c 00 9b 88 1e | 00 00 a0 01 00 0a 49 73 |.DLL....|......Is|
|00002d70| 56 61 6c 69 64 41 63 6c | 0c 41 44 56 41 50 49 33 |ValidAcl|.ADVAPI3|
|00002d80| 32 2e 44 4c 4c 00 c3 88 | 2d 00 00 a0 01 00 19 49 |2.DLL...|-......I|
|00002d90| 73 56 61 6c 69 64 53 65 | 63 75 72 69 74 79 44 65 |sValidSe|curityDe|
|00002da0| 73 63 72 69 70 74 6f 72 | 0c 41 44 56 41 50 49 33 |scriptor|.ADVAPI3|
|00002db0| 32 2e 44 4c 4c 00 3e 88 | 1e 00 00 a0 01 00 0a 49 |2.DLL.>.|.......I|
|00002dc0| 73 56 61 6c 69 64 53 69 | 64 0c 41 44 56 41 50 49 |sValidSi|d.ADVAPI|
|00002dd0| 33 32 2e 44 4c 4c 00 b3 | 88 27 00 00 a0 01 00 13 |32.DLL..|.'......|
|00002de0| 4c 6f 63 6b 53 65 72 76 | 69 63 65 44 61 74 61 62 |LockServ|iceDatab|
|00002df0| 61 73 65 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ase.ADVA|PI32.DLL|
|00002e00| 00 fe 88 1e 00 00 a0 01 | 00 0a 4c 6f 67 6f 6e 55 |........|..LogonU|
|00002e10| 73 65 72 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |serA.ADV|API32.DL|
|00002e20| 4c 00 a0 88 1e 00 00 a0 | 01 00 0a 4c 6f 67 6f 6e |L.......|...Logon|
|00002e30| 55 73 65 72 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |UserW.AD|VAPI32.D|
|00002e40| 4c 4c 00 8a 88 26 00 00 | a0 01 00 12 4c 6f 6f 6b |LL...&..|....Look|
|00002e50| 75 70 41 63 63 6f 75 6e | 74 4e 61 6d 65 41 0c 41 |upAccoun|tNameA.A|
|00002e60| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 66 88 26 00 |DVAPI32.|DLL.f.&.|
|00002e70| 00 a0 01 00 12 4c 6f 6f | 6b 75 70 41 63 63 6f 75 |.....Loo|kupAccou|
|00002e80| 6e 74 4e 61 6d 65 57 0c | 41 44 56 41 50 49 33 32 |ntNameW.|ADVAPI32|
|00002e90| 2e 44 4c 4c 00 50 88 25 | 00 00 a0 01 00 11 4c 6f |.DLL.P.%|......Lo|
|00002ea0| 6f 6b 75 70 41 63 63 6f | 75 6e 74 53 69 64 41 0c |okupAcco|untSidA.|
|00002eb0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 c9 88 25 |ADVAPI32|.DLL...%|
|00002ec0| 00 00 a0 01 00 11 4c 6f | 6f 6b 75 70 41 63 63 6f |......Lo|okupAcco|
|00002ed0| 75 6e 74 53 69 64 57 0c | 41 44 56 41 50 49 33 32 |untSidW.|ADVAPI32|
|00002ee0| 2e 44 4c 4c 00 b3 88 2f | 00 00 a0 01 00 1b 4c 6f |.DLL.../|......Lo|
|00002ef0| 6f 6b 75 70 50 72 69 76 | 69 6c 65 67 65 44 69 73 |okupPriv|ilegeDis|
|00002f00| 70 6c 61 79 4e 61 6d 65 | 41 0c 41 44 56 41 50 49 |playName|A.ADVAPI|
|00002f10| 33 32 2e 44 4c 4c 00 a4 | 88 2f 00 00 a0 01 00 1b |32.DLL..|./......|
|00002f20| 4c 6f 6f 6b 75 70 50 72 | 69 76 69 6c 65 67 65 44 |LookupPr|ivilegeD|
|00002f30| 69 73 70 6c 61 79 4e 61 | 6d 65 57 0c 41 44 56 41 |isplayNa|meW.ADVA|
|00002f40| 50 49 33 32 2e 44 4c 4c | 00 8e 88 28 00 00 a0 01 |PI32.DLL|...(....|
|00002f50| 00 14 4c 6f 6f 6b 75 70 | 50 72 69 76 69 6c 65 67 |..Lookup|Privileg|
|00002f60| 65 4e 61 6d 65 41 0c 41 | 44 56 41 50 49 33 32 2e |eNameA.A|DVAPI32.|
|00002f70| 44 4c 4c 00 88 88 28 00 | 00 a0 01 00 14 4c 6f 6f |DLL...(.|.....Loo|
|00002f80| 6b 75 70 50 72 69 76 69 | 6c 65 67 65 4e 61 6d 65 |kupPrivi|legeName|
|00002f90| 57 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 72 |W.ADVAPI|32.DLL.r|
|00002fa0| 88 29 00 00 a0 01 00 15 | 4c 6f 6f 6b 75 70 50 72 |.)......|LookupPr|
|00002fb0| 69 76 69 6c 65 67 65 56 | 61 6c 75 65 41 0c 41 44 |ivilegeV|alueA.AD|
|00002fc0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 0a 88 29 00 00 |VAPI32.D|LL...)..|
|00002fd0| a0 01 00 15 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |....Look|upPrivil|
|00002fe0| 65 67 65 56 61 6c 75 65 | 57 0c 41 44 56 41 50 49 |egeValue|W.ADVAPI|
|00002ff0| 33 32 2e 44 4c 4c 00 f4 | 88 32 00 00 a0 01 00 1e |32.DLL..|.2......|
|00003000| 4c 6f 6f 6b 75 70 53 65 | 63 75 72 69 74 79 44 65 |LookupSe|curityDe|
|00003010| 73 63 72 69 70 74 6f 72 | 50 61 72 74 73 41 0c 41 |scriptor|PartsA.A|
|00003020| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 1b 88 32 00 |DVAPI32.|DLL...2.|
|00003030| 00 a0 01 00 1e 4c 6f 6f | 6b 75 70 53 65 63 75 72 |.....Loo|kupSecur|
|00003040| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 50 61 72 |ityDescr|iptorPar|
|00003050| 74 73 57 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |tsW.ADVA|PI32.DLL|
|00003060| 00 05 88 27 00 00 a0 01 | 00 13 4c 73 61 41 64 64 |...'....|..LsaAdd|
|00003070| 41 63 63 6f 75 6e 74 52 | 69 67 68 74 73 0c 41 44 |AccountR|ights.AD|
|00003080| 56 41 50 49 33 32 2e 44 | 4c 4c 00 06 88 2d 00 00 |VAPI32.D|LL...-..|
|00003090| a0 01 00 19 4c 73 61 41 | 64 64 50 72 69 76 69 6c |....LsaA|ddPrivil|
|000030a0| 65 67 65 73 54 6f 41 63 | 63 6f 75 6e 74 0c 41 44 |egesToAc|count.AD|
|000030b0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 8e 88 24 00 00 |VAPI32.D|LL...$..|
|000030c0| a0 01 00 10 4c 73 61 43 | 6c 65 61 72 41 75 64 69 |....LsaC|learAudi|
|000030d0| 74 4c 6f 67 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |tLog.ADV|API32.DL|
|000030e0| 4c 00 53 88 1c 00 00 a0 | 01 00 08 4c 73 61 43 6c |L.S.....|...LsaCl|
|000030f0| 6f 73 65 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ose.ADVA|PI32.DLL|
|00003100| 00 6d 88 24 00 00 a0 01 | 00 10 4c 73 61 43 72 65 |.m.$....|..LsaCre|
|00003110| 61 74 65 41 63 63 6f 75 | 6e 74 0c 41 44 56 41 50 |ateAccou|nt.ADVAP|
|00003120| 49 33 32 2e 44 4c 4c 00 | 32 88 23 00 00 a0 01 00 |I32.DLL.|2.#.....|
|00003130| 0f 4c 73 61 43 72 65 61 | 74 65 53 65 63 72 65 74 |.LsaCrea|teSecret|
|00003140| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 9b 88 |.ADVAPI3|2.DLL...|
|00003150| 2a 00 00 a0 01 00 16 4c | 73 61 43 72 65 61 74 65 |*......L|saCreate|
|00003160| 54 72 75 73 74 65 64 44 | 6f 6d 61 69 6e 0c 41 44 |TrustedD|omain.AD|
|00003170| 56 41 50 49 33 32 2e 44 | 4c 4c 00 b0 88 2c 00 00 |VAPI32.D|LL...,..|
|00003180| a0 01 00 18 4c 73 61 43 | 72 65 61 74 65 54 72 75 |....LsaC|reateTru|
|00003190| 73 74 65 64 44 6f 6d 61 | 69 6e 45 78 0c 41 44 56 |stedDoma|inEx.ADV|
|000031a0| 41 50 49 33 32 2e 44 4c | 4c 00 ef 88 1d 00 00 a0 |API32.DL|L.......|
|000031b0| 01 00 09 4c 73 61 44 65 | 6c 65 74 65 0c 41 44 56 |...LsaDe|lete.ADV|
|000031c0| 41 50 49 33 32 2e 44 4c | 4c 00 0e 88 2a 00 00 a0 |API32.DL|L...*...|
|000031d0| 01 00 16 4c 73 61 44 65 | 6c 65 74 65 54 72 75 73 |...LsaDe|leteTrus|
|000031e0| 74 65 64 44 6f 6d 61 69 | 6e 0c 41 44 56 41 50 49 |tedDomai|n.ADVAPI|
|000031f0| 33 32 2e 44 4c 4c 00 b1 | 88 2d 00 00 a0 01 00 19 |32.DLL..|.-......|
|00003200| 4c 73 61 45 6e 75 6d 65 | 72 61 74 65 41 63 63 6f |LsaEnume|rateAcco|
|00003210| 75 6e 74 52 69 67 68 74 | 73 0c 41 44 56 41 50 49 |untRight|s.ADVAPI|
|00003220| 33 32 2e 44 4c 4c 00 5d | 88 28 00 00 a0 01 00 14 |32.DLL.]|.(......|
|00003230| 4c 73 61 45 6e 75 6d 65 | 72 61 74 65 41 63 63 6f |LsaEnume|rateAcco|
|00003240| 75 6e 74 73 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |unts.ADV|API32.DL|
|00003250| 4c 00 65 88 35 00 00 a0 | 01 00 21 4c 73 61 45 6e |L.e.5...|..!LsaEn|
|00003260| 75 6d 65 72 61 74 65 41 | 63 63 6f 75 6e 74 73 57 |umerateA|ccountsW|
|00003270| 69 74 68 55 73 65 72 52 | 69 67 68 74 0c 41 44 56 |ithUserR|ight.ADV|
|00003280| 41 50 49 33 32 2e 44 4c | 4c 00 12 88 2a 00 00 a0 |API32.DL|L...*...|
|00003290| 01 00 16 4c 73 61 45 6e | 75 6d 65 72 61 74 65 50 |...LsaEn|umerateP|
|000032a0| 72 69 76 69 6c 65 67 65 | 73 0c 41 44 56 41 50 49 |rivilege|s.ADVAPI|
|000032b0| 33 32 2e 44 4c 4c 00 87 | 88 33 00 00 a0 01 00 1f |32.DLL..|.3......|
|000032c0| 4c 73 61 45 6e 75 6d 65 | 72 61 74 65 50 72 69 76 |LsaEnume|ratePriv|
|000032d0| 69 6c 65 67 65 73 4f 66 | 41 63 63 6f 75 6e 74 0c |ilegesOf|Account.|
|000032e0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 f3 88 2e |ADVAPI32|.DLL....|
|000032f0| 00 00 a0 01 00 1a 4c 73 | 61 45 6e 75 6d 65 72 61 |......Ls|aEnumera|
|00003300| 74 65 54 72 75 73 74 65 | 64 44 6f 6d 61 69 6e 73 |teTruste|dDomains|
|00003310| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 e3 88 |.ADVAPI3|2.DLL...|
|00003320| 30 00 00 a0 01 00 1c 4c | 73 61 45 6e 75 6d 65 72 |0......L|saEnumer|
|00003330| 61 74 65 54 72 75 73 74 | 65 64 44 6f 6d 61 69 6e |ateTrust|edDomain|
|00003340| 73 45 78 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |sEx.ADVA|PI32.DLL|
|00003350| 00 22 88 21 00 00 a0 01 | 00 0d 4c 73 61 46 72 65 |.".!....|..LsaFre|
|00003360| 65 4d 65 6d 6f 72 79 0c | 41 44 56 41 50 49 33 32 |eMemory.|ADVAPI32|
|00003370| 2e 44 4c 4c 00 5e 88 2a | 00 00 a0 01 00 16 4c 73 |.DLL.^.*|......Ls|
|00003380| 61 47 65 74 51 75 6f 74 | 61 73 46 6f 72 41 63 63 |aGetQuot|asForAcc|
|00003390| 6f 75 6e 74 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |ount.ADV|API32.DL|
|000033a0| 4c 00 b6 88 28 00 00 a0 | 01 00 14 4c 73 61 47 65 |L...(...|...LsaGe|
|000033b0| 74 52 65 6d 6f 74 65 55 | 73 65 72 4e 61 6d 65 0c |tRemoteU|serName.|
|000033c0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 9f 88 2d |ADVAPI32|.DLL...-|
|000033d0| 00 00 a0 01 00 19 4c 73 | 61 47 65 74 53 79 73 74 |......Ls|aGetSyst|
|000033e0| 65 6d 41 63 63 65 73 73 | 41 63 63 6f 75 6e 74 0c |emAccess|Account.|
|000033f0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 7d 88 22 |ADVAPI32|.DLL.}."|
|00003400| 00 00 a0 01 00 0e 4c 73 | 61 47 65 74 55 73 65 72 |......Ls|aGetUser|
|00003410| 4e 61 6d 65 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |Name.ADV|API32.DL|
|00003420| 4c 00 17 88 24 00 00 a0 | 01 00 10 4c 73 61 49 43 |L...$...|...LsaIC|
|00003430| 4c 6f 6f 6b 75 70 4e 61 | 6d 65 73 0c 41 44 56 41 |LookupNa|mes.ADVA|
|00003440| 50 49 33 32 2e 44 4c 4c | 00 59 88 23 00 00 a0 01 |PI32.DLL|.Y.#....|
|00003450| 00 0f 4c 73 61 49 43 4c | 6f 6f 6b 75 70 53 69 64 |..LsaICL|ookupSid|
|00003460| 73 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 bc |s.ADVAPI|32.DLL..|
|00003470| 88 22 00 00 a0 01 00 0e | 4c 73 61 4c 6f 6f 6b 75 |."......|LsaLooku|
|00003480| 70 4e 61 6d 65 73 0c 41 | 44 56 41 50 49 33 32 2e |pNames.A|DVAPI32.|
|00003490| 44 4c 4c 00 e9 88 31 00 | 00 a0 01 00 1d 4c 73 61 |DLL...1.|.....Lsa|
|000034a0| 4c 6f 6f 6b 75 70 50 72 | 69 76 69 6c 65 67 65 44 |LookupPr|ivilegeD|
|000034b0| 69 73 70 6c 61 79 4e 61 | 6d 65 0c 41 44 56 41 50 |isplayNa|me.ADVAP|
|000034c0| 49 33 32 2e 44 4c 4c 00 | c1 88 2a 00 00 a0 01 00 |I32.DLL.|..*.....|
|000034d0| 16 4c 73 61 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |.LsaLook|upPrivil|
|000034e0| 65 67 65 4e 61 6d 65 0c | 41 44 56 41 50 49 33 32 |egeName.|ADVAPI32|
|000034f0| 2e 44 4c 4c 00 a5 88 2b | 00 00 a0 01 00 17 4c 73 |.DLL...+|......Ls|
|00003500| 61 4c 6f 6f 6b 75 70 50 | 72 69 76 69 6c 65 67 65 |aLookupP|rivilege|
|00003510| 56 61 6c 75 65 0c 41 44 | 56 41 50 49 33 32 2e 44 |Value.AD|VAPI32.D|
|00003520| 4c 4c 00 27 88 21 00 00 | a0 01 00 0d 4c 73 61 4c |LL.'.!..|....LsaL|
|00003530| 6f 6f 6b 75 70 53 69 64 | 73 0c 41 44 56 41 50 49 |ookupSid|s.ADVAPI|
|00003540| 33 32 2e 44 4c 4c 00 4c | 88 29 00 00 a0 01 00 15 |32.DLL.L|.)......|
|00003550| 4c 73 61 4e 74 53 74 61 | 74 75 73 54 6f 57 69 6e |LsaNtSta|tusToWin|
|00003560| 45 72 72 6f 72 0c 41 44 | 56 41 50 49 33 32 2e 44 |Error.AD|VAPI32.D|
|00003570| 4c 4c 00 08 88 22 00 00 | a0 01 00 0e 4c 73 61 4f |LL..."..|....LsaO|
|00003580| 70 65 6e 41 63 63 6f 75 | 6e 74 0c 41 44 56 41 50 |penAccou|nt.ADVAP|
|00003590| 49 33 32 2e 44 4c 4c 00 | f8 88 21 00 00 a0 01 00 |I32.DLL.|..!.....|
|000035a0| 0d 4c 73 61 4f 70 65 6e | 50 6f 6c 69 63 79 0c 41 |.LsaOpen|Policy.A|
|000035b0| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 57 88 21 00 |DVAPI32.|DLL.W.!.|
|000035c0| 00 a0 01 00 0d 4c 73 61 | 4f 70 65 6e 53 65 63 72 |.....Lsa|OpenSecr|
|000035d0| 65 74 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |et.ADVAP|I32.DLL.|
|000035e0| 61 88 28 00 00 a0 01 00 | 14 4c 73 61 4f 70 65 6e |a.(.....|.LsaOpen|
|000035f0| 54 72 75 73 74 65 64 44 | 6f 6d 61 69 6e 0c 41 44 |TrustedD|omain.AD|
|00003600| 56 41 50 49 33 32 2e 44 | 4c 4c 00 76 88 2e 00 00 |VAPI32.D|LL.v....|
|00003610| a0 01 00 1a 4c 73 61 4f | 70 65 6e 54 72 75 73 74 |....LsaO|penTrust|
|00003620| 65 64 44 6f 6d 61 69 6e | 42 79 4e 61 6d 65 0c 41 |edDomain|ByName.A|
|00003630| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 2e 88 33 00 |DVAPI32.|DLL...3.|
|00003640| 00 a0 01 00 1f 4c 73 61 | 51 75 65 72 79 44 6f 6d |.....Lsa|QueryDom|
|00003650| 61 69 6e 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 50 6f |ainInfor|mationPo|
|00003660| 6c 69 63 79 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |licy.ADV|API32.DL|
|00003670| 4c 00 d1 88 2d 00 00 a0 | 01 00 19 4c 73 61 51 75 |L...-...|...LsaQu|
|00003680| 65 72 79 49 6e 66 6f 54 | 72 75 73 74 65 64 44 6f |eryInfoT|rustedDo|
|00003690| 6d 61 69 6e 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |main.ADV|API32.DL|
|000036a0| 4c 00 5c 88 2d 00 00 a0 | 01 00 19 4c 73 61 51 75 |L.\.-...|...LsaQu|
|000036b0| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 50 6f |eryInfor|mationPo|
|000036c0| 6c 69 63 79 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |licy.ADV|API32.DL|
|000036d0| 4c 00 35 88 22 00 00 a0 | 01 00 0e 4c 73 61 51 75 |L.5."...|...LsaQu|
|000036e0| 65 72 79 53 65 63 72 65 | 74 0c 41 44 56 41 50 49 |erySecre|t.ADVAPI|
|000036f0| 33 32 2e 44 4c 4c 00 db | 88 2a 00 00 a0 01 00 16 |32.DLL..|.*......|
|00003700| 4c 73 61 51 75 65 72 79 | 53 65 63 75 72 69 74 79 |LsaQuery|Security|
|00003710| 4f 62 6a 65 63 74 0c 41 | 44 56 41 50 49 33 32 2e |Object.A|DVAPI32.|
|00003720| 44 4c 4c 00 82 88 2d 00 | 00 a0 01 00 19 4c 73 61 |DLL...-.|.....Lsa|
|00003730| 51 75 65 72 79 54 72 75 | 73 74 65 64 44 6f 6d 61 |QueryTru|stedDoma|
|00003740| 69 6e 49 6e 66 6f 0c 41 | 44 56 41 50 49 33 32 2e |inInfo.A|DVAPI32.|
|00003750| 44 4c 4c 00 5c 88 33 00 | 00 a0 01 00 1f 4c 73 61 |DLL.\.3.|.....Lsa|
|00003760| 51 75 65 72 79 54 72 75 | 73 74 65 64 44 6f 6d 61 |QueryTru|stedDoma|
|00003770| 69 6e 49 6e 66 6f 42 79 | 4e 61 6d 65 0c 41 44 56 |inInfoBy|Name.ADV|
|00003780| 41 50 49 33 32 2e 44 4c | 4c 00 14 88 2a 00 00 a0 |API32.DL|L...*...|
|00003790| 01 00 16 4c 73 61 52 65 | 6d 6f 76 65 41 63 63 6f |...LsaRe|moveAcco|
|000037a0| 75 6e 74 52 69 67 68 74 | 73 0c 41 44 56 41 50 49 |untRight|s.ADVAPI|
|000037b0| 33 32 2e 44 4c 4c 00 9b | 88 32 00 00 a0 01 00 1e |32.DLL..|.2......|
|000037c0| 4c 73 61 52 65 6d 6f 76 | 65 50 72 69 76 69 6c 65 |LsaRemov|ePrivile|
|000037d0| 67 65 73 46 72 6f 6d 41 | 63 63 6f 75 6e 74 0c 41 |gesFromA|ccount.A|
|000037e0| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 4e 88 2a 00 |DVAPI32.|DLL.N.*.|
|000037f0| 00 a0 01 00 16 4c 73 61 | 52 65 74 72 69 65 76 65 |.....Lsa|Retrieve|
|00003800| 50 72 69 76 61 74 65 44 | 61 74 61 0c 41 44 56 41 |PrivateD|ata.ADVA|
|00003810| 50 49 33 32 2e 44 4c 4c | 00 ac 88 31 00 00 a0 01 |PI32.DLL|...1....|
|00003820| 00 1d 4c 73 61 53 65 74 | 44 6f 6d 61 69 6e 49 6e |..LsaSet|DomainIn|
|00003830| 66 6f 72 6d 61 74 69 6f | 6e 50 6f 6c 69 63 79 0c |formatio|nPolicy.|
|00003840| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 bf 88 2b |ADVAPI32|.DLL...+|
|00003850| 00 00 a0 01 00 17 4c 73 | 61 53 65 74 49 6e 66 6f |......Ls|aSetInfo|
|00003860| 72 6d 61 74 69 6f 6e 50 | 6f 6c 69 63 79 0c 41 44 |rmationP|olicy.AD|
|00003870| 56 41 50 49 33 32 2e 44 | 4c 4c 00 23 88 32 00 00 |VAPI32.D|LL.#.2..|
|00003880| a0 01 00 1e 4c 73 61 53 | 65 74 49 6e 66 6f 72 6d |....LsaS|etInform|
|00003890| 61 74 69 6f 6e 54 72 75 | 73 74 65 64 44 6f 6d 61 |ationTru|stedDoma|
|000038a0| 69 6e 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |in.ADVAP|I32.DLL.|
|000038b0| 42 88 2a 00 00 a0 01 00 | 16 4c 73 61 53 65 74 51 |B.*.....|.LsaSetQ|
|000038c0| 75 6f 74 61 73 46 6f 72 | 41 63 63 6f 75 6e 74 0c |uotasFor|Account.|
|000038d0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 aa 88 20 |ADVAPI32|.DLL... |
|000038e0| 00 00 a0 01 00 0c 4c 73 | 61 53 65 74 53 65 63 72 |......Ls|aSetSecr|
|000038f0| 65 74 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |et.ADVAP|I32.DLL.|
|00003900| c9 88 28 00 00 a0 01 00 | 14 4c 73 61 53 65 74 53 |..(.....|.LsaSetS|
|00003910| 65 63 75 72 69 74 79 4f | 62 6a 65 63 74 0c 41 44 |ecurityO|bject.AD|
|00003920| 56 41 50 49 33 32 2e 44 | 4c 4c 00 70 88 2d 00 00 |VAPI32.D|LL.p.-..|
|00003930| a0 01 00 19 4c 73 61 53 | 65 74 53 79 73 74 65 6d |....LsaS|etSystem|
|00003940| 41 63 63 65 73 73 41 63 | 63 6f 75 6e 74 0c 41 44 |AccessAc|count.AD|
|00003950| 56 41 50 49 33 32 2e 44 | 4c 4c 00 71 88 31 00 00 |VAPI32.D|LL.q.1..|
|00003960| a0 01 00 1d 4c 73 61 53 | 65 74 54 72 75 73 74 65 |....LsaS|etTruste|
|00003970| 64 44 6f 6d 61 69 6e 49 | 6e 66 6f 42 79 4e 61 6d |dDomainI|nfoByNam|
|00003980| 65 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 02 |e.ADVAPI|32.DLL..|
|00003990| 88 32 00 00 a0 01 00 1e | 4c 73 61 53 65 74 54 72 |.2......|LsaSetTr|
|000039a0| 75 73 74 65 64 44 6f 6d | 61 69 6e 49 6e 66 6f 72 |ustedDom|ainInfor|
|000039b0| 6d 61 74 69 6f 6e 0c 41 | 44 56 41 50 49 33 32 2e |mation.A|DVAPI32.|
|000039c0| 44 4c 4c 00 42 88 27 00 | 00 a0 01 00 13 4c 73 61 |DLL.B.'.|.....Lsa|
|000039d0| 53 74 6f 72 65 50 72 69 | 76 61 74 65 44 61 74 61 |StorePri|vateData|
|000039e0| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 eb 88 |.ADVAPI3|2.DLL...|
|000039f0| 23 00 00 a0 01 00 0f 4d | 61 6b 65 41 62 73 6f 6c |#......M|akeAbsol|
|00003a00| 75 74 65 53 44 32 0c 41 | 44 56 41 50 49 33 32 2e |uteSD2.A|DVAPI32.|
|00003a10| 44 4c 4c 00 ef 88 22 00 | 00 a0 01 00 0e 4d 61 6b |DLL...".|.....Mak|
|00003a20| 65 41 62 73 6f 6c 75 74 | 65 53 44 0c 41 44 56 41 |eAbsolut|eSD.ADVA|
|00003a30| 50 49 33 32 2e 44 4c 4c | 00 23 88 26 00 00 a0 01 |PI32.DLL|.#.&....|
|00003a40| 00 12 4d 61 6b 65 53 65 | 6c 66 52 65 6c 61 74 69 |..MakeSe|lfRelati|
|00003a50| 76 65 53 44 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |veSD.ADV|API32.DL|
|00003a60| 4c 00 94 88 22 00 00 a0 | 01 00 0e 4d 61 70 47 65 |L..."...|...MapGe|
|00003a70| 6e 65 72 69 63 4d 61 73 | 6b 0c 41 44 56 41 50 49 |nericMas|k.ADVAPI|
|00003a80| 33 32 2e 44 4c 4c 00 10 | 88 2a 00 00 a0 01 00 16 |32.DLL..|.*......|
|00003a90| 4e 6f 74 69 66 79 42 6f | 6f 74 43 6f 6e 66 69 67 |NotifyBo|otConfig|
|00003aa0| 53 74 61 74 75 73 0c 41 | 44 56 41 50 49 33 32 2e |Status.A|DVAPI32.|
|00003ab0| 44 4c 4c 00 80 88 28 00 | 00 a0 01 00 14 4e 6f 74 |DLL...(.|.....Not|
|00003ac0| 69 66 79 43 68 61 6e 67 | 65 45 76 65 6e 74 4c 6f |ifyChang|eEventLo|
|00003ad0| 67 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 88 |g.ADVAPI|32.DLL..|
|00003ae0| 88 2a 00 00 a0 01 00 16 | 4f 62 6a 65 63 74 43 6c |.*......|ObjectCl|
|00003af0| 6f 73 65 41 75 64 69 74 | 41 6c 61 72 6d 41 0c 41 |oseAudit|AlarmA.A|
|00003b00| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 f5 88 2a 00 |DVAPI32.|DLL...*.|
|00003b10| 00 a0 01 00 16 4f 62 6a | 65 63 74 43 6c 6f 73 65 |.....Obj|ectClose|
|00003b20| 41 75 64 69 74 41 6c 61 | 72 6d 57 0c 41 44 56 41 |AuditAla|rmW.ADVA|
|00003b30| 50 49 33 32 2e 44 4c 4c | 00 df 88 2b 00 00 a0 01 |PI32.DLL|...+....|
|00003b40| 00 17 4f 62 6a 65 63 74 | 44 65 6c 65 74 65 41 75 |..Object|DeleteAu|
|00003b50| 64 69 74 41 6c 61 72 6d | 41 0c 41 44 56 41 50 49 |ditAlarm|A.ADVAPI|
|00003b60| 33 32 2e 44 4c 4c 00 96 | 88 2b 00 00 a0 01 00 17 |32.DLL..|.+......|
|00003b70| 4f 62 6a 65 63 74 44 65 | 6c 65 74 65 41 75 64 69 |ObjectDe|leteAudi|
|00003b80| 74 41 6c 61 72 6d 57 0c | 41 44 56 41 50 49 33 32 |tAlarmW.|ADVAPI32|
|00003b90| 2e 44 4c 4c 00 80 88 29 | 00 00 a0 01 00 15 4f 62 |.DLL...)|......Ob|
|00003ba0| 6a 65 63 74 4f 70 65 6e | 41 75 64 69 74 41 6c 61 |jectOpen|AuditAla|
|00003bb0| 72 6d 41 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |rmA.ADVA|PI32.DLL|
|00003bc0| 00 5b 88 29 00 00 a0 01 | 00 15 4f 62 6a 65 63 74 |.[.)....|..Object|
|00003bd0| 4f 70 65 6e 41 75 64 69 | 74 41 6c 61 72 6d 57 0c |OpenAudi|tAlarmW.|
|00003be0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 45 88 2e |ADVAPI32|.DLL.E..|
|00003bf0| 00 00 a0 01 00 1a 4f 62 | 6a 65 63 74 50 72 69 76 |......Ob|jectPriv|
|00003c00| 69 6c 65 67 65 41 75 64 | 69 74 41 6c 61 72 6d 41 |ilegeAud|itAlarmA|
|00003c10| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 3c 88 |.ADVAPI3|2.DLL.<.|
|00003c20| 2e 00 00 a0 01 00 1a 4f | 62 6a 65 63 74 50 72 69 |.......O|bjectPri|
|00003c30| 76 69 6c 65 67 65 41 75 | 64 69 74 41 6c 61 72 6d |vilegeAu|ditAlarm|
|00003c40| 57 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 26 |W.ADVAPI|32.DLL.&|
|00003c50| 88 27 00 00 a0 01 00 13 | 4f 70 65 6e 42 61 63 6b |.'......|OpenBack|
|00003c60| 75 70 45 76 65 6e 74 4c | 6f 67 41 0c 41 44 56 41 |upEventL|ogA.ADVA|
|00003c70| 50 49 33 32 2e 44 4c 4c | 00 20 88 27 00 00 a0 01 |PI32.DLL|. .'....|
|00003c80| 00 13 4f 70 65 6e 42 61 | 63 6b 75 70 45 76 65 6e |..OpenBa|ckupEven|
|00003c90| 74 4c 6f 67 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |tLogW.AD|VAPI32.D|
|00003ca0| 4c 4c 00 0a 88 29 00 00 | a0 01 00 15 4f 70 65 6e |LL...)..|....Open|
|00003cb0| 45 6e 63 72 79 70 74 65 | 64 46 69 6c 65 52 61 77 |Encrypte|dFileRaw|
|00003cc0| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 3e |A.ADVAPI|32.DLL.>|
|00003cd0| 88 29 00 00 a0 01 00 15 | 4f 70 65 6e 45 6e 63 72 |.)......|OpenEncr|
|00003ce0| 79 70 74 65 64 46 69 6c | 65 52 61 77 57 0c 41 44 |yptedFil|eRawW.AD|
|00003cf0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 28 88 21 00 00 |VAPI32.D|LL.(.!..|
|00003d00| a0 01 00 0d 4f 70 65 6e | 45 76 65 6e 74 4c 6f 67 |....Open|EventLog|
|00003d10| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 82 |A.ADVAPI|32.DLL..|
|00003d20| 88 21 00 00 a0 01 00 0d | 4f 70 65 6e 45 76 65 6e |.!......|OpenEven|
|00003d30| 74 4c 6f 67 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |tLogW.AD|VAPI32.D|
|00003d40| 4c 4c 00 6c 88 24 00 00 | a0 01 00 10 4f 70 65 6e |LL.l.$..|....Open|
|00003d50| 50 72 6f 63 65 73 73 54 | 6f 6b 65 6e 0c 41 44 56 |ProcessT|oken.ADV|
|00003d60| 41 50 49 33 32 2e 44 4c | 4c 00 01 88 22 00 00 a0 |API32.DL|L..."...|
|00003d70| 01 00 0e 4f 70 65 6e 53 | 43 4d 61 6e 61 67 65 72 |...OpenS|CManager|
|00003d80| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 53 |A.ADVAPI|32.DLL.S|
|00003d90| 88 22 00 00 a0 01 00 0e | 4f 70 65 6e 53 43 4d 61 |."......|OpenSCMa|
|00003da0| 6e 61 67 65 72 57 0c 41 | 44 56 41 50 49 33 32 2e |nagerW.A|DVAPI32.|
|00003db0| 44 4c 4c 00 3d 88 20 00 | 00 a0 01 00 0c 4f 70 65 |DLL.=. .|.....Ope|
|00003dc0| 6e 53 65 72 76 69 63 65 | 41 0c 41 44 56 41 50 49 |nService|A.ADVAPI|
|00003dd0| 33 32 2e 44 4c 4c 00 d7 | 88 20 00 00 a0 01 00 0c |32.DLL..|. ......|
|00003de0| 4f 70 65 6e 53 65 72 76 | 69 63 65 57 0c 41 44 56 |OpenServ|iceW.ADV|
|00003df0| 41 50 49 33 32 2e 44 4c | 4c 00 c1 88 23 00 00 a0 |API32.DL|L...#...|
|00003e00| 01 00 0f 4f 70 65 6e 54 | 68 72 65 61 64 54 6f 6b |...OpenT|hreadTok|
|00003e10| 65 6e 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |en.ADVAP|I32.DLL.|
|00003e20| 8a 88 1e 00 00 a0 01 00 | 0a 4f 70 65 6e 54 72 61 |........|.OpenTra|
|00003e30| 63 65 41 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ceA.ADVA|PI32.DLL|
|00003e40| 00 bd 88 1e 00 00 a0 01 | 00 0a 4f 70 65 6e 54 72 |........|..OpenTr|
|00003e50| 61 63 65 57 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |aceW.ADV|API32.DL|
|00003e60| 4c 00 a7 88 22 00 00 a0 | 01 00 0e 50 72 69 76 69 |L..."...|...Privi|
|00003e70| 6c 65 67 65 43 68 65 63 | 6b 0c 41 44 56 41 50 49 |legeChec|k.ADVAPI|
|00003e80| 33 32 2e 44 4c 4c 00 f2 | 88 30 00 00 a0 01 00 1c |32.DLL..|.0......|
|00003e90| 50 72 69 76 69 6c 65 67 | 65 64 53 65 72 76 69 63 |Privileg|edServic|
|00003ea0| 65 41 75 64 69 74 41 6c | 61 72 6d 41 0c 41 44 56 |eAuditAl|armA.ADV|
|00003eb0| 41 50 49 33 32 2e 44 4c | 4c 00 5a 88 30 00 00 a0 |API32.DL|L.Z.0...|
|00003ec0| 01 00 1c 50 72 69 76 69 | 6c 65 67 65 64 53 65 72 |...Privi|legedSer|
|00003ed0| 76 69 63 65 41 75 64 69 | 74 41 6c 61 72 6d 57 0c |viceAudi|tAlarmW.|
|00003ee0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 44 88 20 |ADVAPI32|.DLL.D. |
|00003ef0| 00 00 a0 01 00 0c 50 72 | 6f 63 65 73 73 54 72 61 |......Pr|ocessTra|
|00003f00| 63 65 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |ce.ADVAP|I32.DLL.|
|00003f10| ad 88 23 00 00 a0 01 00 | 0f 51 75 65 72 79 41 6c |..#.....|.QueryAl|
|00003f20| 6c 54 72 61 63 65 73 41 | 0c 41 44 56 41 50 49 33 |lTracesA|.ADVAPI3|
|00003f30| 32 2e 44 4c 4c 00 a3 88 | 23 00 00 a0 01 00 0f 51 |2.DLL...|#......Q|
|00003f40| 75 65 72 79 41 6c 6c 54 | 72 61 63 65 73 57 0c 41 |ueryAllT|racesW.A|
|00003f50| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 8d 88 36 00 |DVAPI32.|DLL...6.|
|00003f60| 00 a0 01 00 22 51 75 65 | 72 79 52 65 63 6f 76 65 |...."Que|ryRecove|
|00003f70| 72 79 41 67 65 6e 74 73 | 4f 6e 45 6e 63 72 79 70 |ryAgents|OnEncryp|
|00003f80| 74 65 64 46 69 6c 65 0c | 41 44 56 41 50 49 33 32 |tedFile.|ADVAPI32|
|00003f90| 2e 44 4c 4c 00 9d 88 28 | 00 00 a0 01 00 14 51 75 |.DLL...(|......Qu|
|00003fa0| 65 72 79 53 65 72 76 69 | 63 65 43 6f 6e 66 69 67 |eryServi|ceConfig|
|00003fb0| 32 41 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |2A.ADVAP|I32.DLL.|
|00003fc0| bb 88 28 00 00 a0 01 00 | 14 51 75 65 72 79 53 65 |..(.....|.QuerySe|
|00003fd0| 72 76 69 63 65 43 6f 6e | 66 69 67 32 57 0c 41 44 |rviceCon|fig2W.AD|
|00003fe0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 a5 88 27 00 00 |VAPI32.D|LL...'..|
|00003ff0| a0 01 00 13 51 75 65 72 | 79 53 65 72 76 69 63 65 |....Quer|yService|
|00004000| 43 6f 6e 66 69 67 41 0c | 41 44 56 41 50 49 33 32 |ConfigA.|ADVAPI32|
|00004010| 2e 44 4c 4c 00 ef 88 27 | 00 00 a0 01 00 13 51 75 |.DLL...'|......Qu|
|00004020| 65 72 79 53 65 72 76 69 | 63 65 43 6f 6e 66 69 67 |eryServi|ceConfig|
|00004030| 57 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 d9 |W.ADVAPI|32.DLL..|
|00004040| 88 2b 00 00 a0 01 00 17 | 51 75 65 72 79 53 65 72 |.+......|QuerySer|
|00004050| 76 69 63 65 4c 6f 63 6b | 53 74 61 74 75 73 41 0c |viceLock|StatusA.|
|00004060| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 30 88 2b |ADVAPI32|.DLL.0.+|
|00004070| 00 00 a0 01 00 17 51 75 | 65 72 79 53 65 72 76 69 |......Qu|eryServi|
|00004080| 63 65 4c 6f 63 6b 53 74 | 61 74 75 73 57 0c 41 44 |ceLockSt|atusW.AD|
|00004090| 56 41 50 49 33 32 2e 44 | 4c 4c 00 1a 88 2e 00 00 |VAPI32.D|LL......|
|000040a0| a0 01 00 1a 51 75 65 72 | 79 53 65 72 76 69 63 65 |....Quer|yService|
|000040b0| 4f 62 6a 65 63 74 53 65 | 63 75 72 69 74 79 0c 41 |ObjectSe|curity.A|
|000040c0| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 c9 88 26 00 |DVAPI32.|DLL...&.|
|000040d0| 00 a0 01 00 12 51 75 65 | 72 79 53 65 72 76 69 63 |.....Que|ryServic|
|000040e0| 65 53 74 61 74 75 73 0c | 41 44 56 41 50 49 33 32 |eStatus.|ADVAPI32|
|000040f0| 2e 44 4c 4c 00 04 88 28 | 00 00 a0 01 00 14 51 75 |.DLL...(|......Qu|
|00004100| 65 72 79 53 65 72 76 69 | 63 65 53 74 61 74 75 73 |eryServi|ceStatus|
|00004110| 45 78 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |Ex.ADVAP|I32.DLL.|
|00004120| 43 88 2d 00 00 a0 01 00 | 19 51 75 65 72 79 55 73 |C.-.....|.QueryUs|
|00004130| 65 72 73 4f 6e 45 6e 63 | 72 79 70 74 65 64 46 69 |ersOnEnc|ryptedFi|
|00004140| 6c 65 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |le.ADVAP|I32.DLL.|
|00004150| 4e 88 30 00 00 a0 01 00 | 1c 51 75 65 72 79 57 69 |N.0.....|.QueryWi|
|00004160| 6e 64 6f 77 73 33 31 46 | 69 6c 65 73 4d 69 67 72 |ndows31F|ilesMigr|
|00004170| 61 74 69 6f 6e 0c 41 44 | 56 41 50 49 33 32 2e 44 |ation.AD|VAPI32.D|
|00004180| 4c 4c 00 59 88 28 00 00 | a0 01 00 14 52 65 61 64 |LL.Y.(..|....Read|
|00004190| 45 6e 63 72 79 70 74 65 | 64 46 69 6c 65 52 61 77 |Encrypte|dFileRaw|
|000041a0| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 97 88 |.ADVAPI3|2.DLL...|
|000041b0| 21 00 00 a0 01 00 0d 52 | 65 61 64 45 76 65 6e 74 |!......R|eadEvent|
|000041c0| 4c 6f 67 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |LogA.ADV|API32.DL|
|000041d0| 4c 00 98 88 21 00 00 a0 | 01 00 0d 52 65 61 64 45 |L...!...|...ReadE|
|000041e0| 76 65 6e 74 4c 6f 67 57 | 0c 41 44 56 41 50 49 33 |ventLogW|.ADVAPI3|
|000041f0| 32 2e 44 4c 4c 00 82 88 | 1f 00 00 a0 01 00 0b 52 |2.DLL...|.......R|
|00004200| 65 67 43 6c 6f 73 65 4b | 65 79 0c 41 44 56 41 50 |egCloseK|ey.ADVAP|
|00004210| 49 33 32 2e 44 4c 4c 00 | 40 88 27 00 00 a0 01 00 |I32.DLL.|@.'.....|
|00004220| 13 52 65 67 43 6f 6e 6e | 65 63 74 52 65 67 69 73 |.RegConn|ectRegis|
|00004230| 74 72 79 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |tryA.ADV|API32.DL|
|00004240| 4c 00 eb 88 27 00 00 a0 | 01 00 13 52 65 67 43 6f |L...'...|...RegCo|
|00004250| 6e 6e 65 63 74 52 65 67 | 69 73 74 72 79 57 0c 41 |nnectReg|istryW.A|
|00004260| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 d5 88 21 00 |DVAPI32.|DLL...!.|
|00004270| 00 a0 01 00 0d 52 65 67 | 43 72 65 61 74 65 4b 65 |.....Reg|CreateKe|
|00004280| 79 41 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |yA.ADVAP|I32.DLL.|
|00004290| 9d 88 23 00 00 a0 01 00 | 0f 52 65 67 43 72 65 61 |..#.....|.RegCrea|
|000042a0| 74 65 4b 65 79 45 78 41 | 0c 41 44 56 41 50 49 33 |teKeyExA|.ADVAPI3|
|000042b0| 32 2e 44 4c 4c 00 dc 88 | 23 00 00 a0 01 00 0f 52 |2.DLL...|#......R|
|000042c0| 65 67 43 72 65 61 74 65 | 4b 65 79 45 78 57 0c 41 |egCreate|KeyExW.A|
|000042d0| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 c6 88 21 00 |DVAPI32.|DLL...!.|
|000042e0| 00 a0 01 00 0d 52 65 67 | 43 72 65 61 74 65 4b 65 |.....Reg|CreateKe|
|000042f0| 79 57 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |yW.ADVAP|I32.DLL.|
|00004300| 87 88 21 00 00 a0 01 00 | 0d 52 65 67 44 65 6c 65 |..!.....|.RegDele|
|00004310| 74 65 4b 65 79 41 0c 41 | 44 56 41 50 49 33 32 2e |teKeyA.A|DVAPI32.|
|00004320| 44 4c 4c 00 9e 88 21 00 | 00 a0 01 00 0d 52 65 67 |DLL...!.|.....Reg|
|00004330| 44 65 6c 65 74 65 4b 65 | 79 57 0c 41 44 56 41 50 |DeleteKe|yW.ADVAP|
|00004340| 49 33 32 2e 44 4c 4c 00 | 88 88 23 00 00 a0 01 00 |I32.DLL.|..#.....|
|00004350| 0f 52 65 67 44 65 6c 65 | 74 65 56 61 6c 75 65 41 |.RegDele|teValueA|
|00004360| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 c6 88 |.ADVAPI3|2.DLL...|
|00004370| 23 00 00 a0 01 00 0f 52 | 65 67 44 65 6c 65 74 65 |#......R|egDelete|
|00004380| 56 61 6c 75 65 57 0c 41 | 44 56 41 50 49 33 32 2e |ValueW.A|DVAPI32.|
|00004390| 44 4c 4c 00 b0 88 2d 00 | 00 a0 01 00 19 52 65 67 |DLL...-.|.....Reg|
|000043a0| 44 69 73 61 62 6c 65 50 | 72 65 64 65 66 69 6e 65 |DisableP|redefine|
|000043b0| 64 43 61 63 68 65 0c 41 | 44 56 41 50 49 33 32 2e |dCache.A|DVAPI32.|
|000043c0| 44 4c 4c 00 c5 88 1f 00 | 00 a0 01 00 0b 52 65 67 |DLL.....|.....Reg|
|000043d0| 45 6e 75 6d 4b 65 79 41 | 0c 41 44 56 41 50 49 33 |EnumKeyA|.ADVAPI3|
|000043e0| 32 2e 44 4c 4c 00 60 88 | 21 00 00 a0 01 00 0d 52 |2.DLL.`.|!......R|
|000043f0| 65 67 45 6e 75 6d 4b 65 | 79 45 78 41 0c 41 44 56 |egEnumKe|yExA.ADV|
|00004400| 41 50 49 33 32 2e 44 4c | 4c 00 9f 88 21 00 00 a0 |API32.DL|L...!...|
|00004410| 01 00 0d 52 65 67 45 6e | 75 6d 4b 65 79 45 78 57 |...RegEn|umKeyExW|
|00004420| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 89 88 |.ADVAPI3|2.DLL...|
|00004430| 1f 00 00 a0 01 00 0b 52 | 65 67 45 6e 75 6d 4b 65 |.......R|egEnumKe|
|00004440| 79 57 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |yW.ADVAP|I32.DLL.|
|00004450| 4a 88 21 00 00 a0 01 00 | 0d 52 65 67 45 6e 75 6d |J.!.....|.RegEnum|
|00004460| 56 61 6c 75 65 41 0c 41 | 44 56 41 50 49 33 32 2e |ValueA.A|DVAPI32.|
|00004470| 44 4c 4c 00 88 88 21 00 | 00 a0 01 00 0d 52 65 67 |DLL...!.|.....Reg|
|00004480| 45 6e 75 6d 56 61 6c 75 | 65 57 0c 41 44 56 41 50 |EnumValu|eW.ADVAP|
|00004490| 49 33 32 2e 44 4c 4c 00 | 72 88 1f 00 00 a0 01 00 |I32.DLL.|r.......|
|000044a0| 0b 52 65 67 46 6c 75 73 | 68 4b 65 79 0c 41 44 56 |.RegFlus|hKey.ADV|
|000044b0| 41 50 49 33 32 2e 44 4c | 4c 00 34 88 25 00 00 a0 |API32.DL|L.4.%...|
|000044c0| 01 00 11 52 65 67 47 65 | 74 4b 65 79 53 65 63 75 |...RegGe|tKeySecu|
|000044d0| 72 69 74 79 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |rity.ADV|API32.DL|
|000044e0| 4c 00 b2 88 1f 00 00 a0 | 01 00 0b 52 65 67 4c 6f |L.......|...RegLo|
|000044f0| 61 64 4b 65 79 41 0c 41 | 44 56 41 50 49 33 32 2e |adKeyA.A|DVAPI32.|
|00004500| 44 4c 4c 00 75 88 1f 00 | 00 a0 01 00 0b 52 65 67 |DLL.u...|.....Reg|
|00004510| 4c 6f 61 64 4b 65 79 57 | 0c 41 44 56 41 50 49 33 |LoadKeyW|.ADVAPI3|
|00004520| 32 2e 44 4c 4c 00 5f 88 | 2b 00 00 a0 01 00 17 52 |2.DLL._.|+......R|
|00004530| 65 67 4e 6f 74 69 66 79 | 43 68 61 6e 67 65 4b 65 |egNotify|ChangeKe|
|00004540| 79 56 61 6c 75 65 0c 41 | 44 56 41 50 49 33 32 2e |yValue.A|DVAPI32.|
|00004550| 44 4c 4c 00 62 88 26 00 | 00 a0 01 00 12 52 65 67 |DLL.b.&.|.....Reg|
|00004560| 4f 70 65 6e 43 75 72 72 | 65 6e 74 55 73 65 72 0c |OpenCurr|entUser.|
|00004570| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 3d 88 1f |ADVAPI32|.DLL.=..|
|00004580| 00 00 a0 01 00 0b 52 65 | 67 4f 70 65 6e 4b 65 79 |......Re|gOpenKey|
|00004590| 41 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 63 |A.ADVAPI|32.DLL.c|
|000045a0| 88 21 00 00 a0 01 00 0d | 52 65 67 4f 70 65 6e 4b |.!......|RegOpenK|
|000045b0| 65 79 45 78 41 0c 41 44 | 56 41 50 49 33 32 2e 44 |eyExA.AD|VAPI32.D|
|000045c0| 4c 4c 00 a2 88 21 00 00 | a0 01 00 0d 52 65 67 4f |LL...!..|....RegO|
|000045d0| 70 65 6e 4b 65 79 45 78 | 57 0c 41 44 56 41 50 49 |penKeyEx|W.ADVAPI|
|000045e0| 33 32 2e 44 4c 4c 00 8c | 88 1f 00 00 a0 01 00 0b |32.DLL..|........|
|000045f0| 52 65 67 4f 70 65 6e 4b | 65 79 57 0c 41 44 56 41 |RegOpenK|eyW.ADVA|
|00004600| 50 49 33 32 2e 44 4c 4c | 00 4d 88 2a 00 00 a0 01 |PI32.DLL|.M.*....|
|00004610| 00 16 52 65 67 4f 70 65 | 6e 55 73 65 72 43 6c 61 |..RegOpe|nUserCla|
|00004620| 73 73 65 73 52 6f 6f 74 | 0c 41 44 56 41 50 49 33 |ssesRoot|.ADVAPI3|
|00004630| 32 2e 44 4c 4c 00 a6 88 | 28 00 00 a0 01 00 14 52 |2.DLL...|(......R|
|00004640| 65 67 4f 76 65 72 72 69 | 64 65 50 72 65 64 65 66 |egOverri|dePredef|
|00004650| 4b 65 79 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |Key.ADVA|PI32.DLL|
|00004660| 00 8e 88 24 00 00 a0 01 | 00 10 52 65 67 51 75 65 |...$....|..RegQue|
|00004670| 72 79 49 6e 66 6f 4b 65 | 79 41 0c 41 44 56 41 50 |ryInfoKe|yA.ADVAP|
|00004680| 49 33 32 2e 44 4c 4c 00 | 49 88 24 00 00 a0 01 00 |I32.DLL.|I.$.....|
|00004690| 10 52 65 67 51 75 65 72 | 79 49 6e 66 6f 4b 65 79 |.RegQuer|yInfoKey|
|000046a0| 57 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 33 |W.ADVAPI|32.DLL.3|
|000046b0| 88 2b 00 00 a0 01 00 17 | 52 65 67 51 75 65 72 79 |.+......|RegQuery|
|000046c0| 4d 75 6c 74 69 70 6c 65 | 56 61 6c 75 65 73 41 0c |Multiple|ValuesA.|
|000046d0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 34 88 2b |ADVAPI32|.DLL.4.+|
|000046e0| 00 00 a0 01 00 17 52 65 | 67 51 75 65 72 79 4d 75 |......Re|gQueryMu|
|000046f0| 6c 74 69 70 6c 65 56 61 | 6c 75 65 73 57 0c 41 44 |ltipleVa|luesW.AD|
|00004700| 56 41 50 49 33 32 2e 44 | 4c 4c 00 1e 88 22 00 00 |VAPI32.D|LL..."..|
|00004710| a0 01 00 0e 52 65 67 51 | 75 65 72 79 56 61 6c 75 |....RegQ|ueryValu|
|00004720| 65 41 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |eA.ADVAP|I32.DLL.|
|00004730| 05 88 24 00 00 a0 01 00 | 10 52 65 67 51 75 65 72 |..$.....|.RegQuer|
|00004740| 79 56 61 6c 75 65 45 78 | 41 0c 41 44 56 41 50 49 |yValueEx|A.ADVAPI|
|00004750| 33 32 2e 44 4c 4c 00 44 | 88 24 00 00 a0 01 00 10 |32.DLL.D|.$......|
|00004760| 52 65 67 51 75 65 72 79 | 56 61 6c 75 65 45 78 57 |RegQuery|ValueExW|
|00004770| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 2e 88 |.ADVAPI3|2.DLL...|
|00004780| 22 00 00 a0 01 00 0e 52 | 65 67 51 75 65 72 79 56 |"......R|egQueryV|
|00004790| 61 6c 75 65 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |alueW.AD|VAPI32.D|
|000047a0| 4c 4c 00 ef 88 22 00 00 | a0 01 00 0e 52 65 67 52 |LL..."..|....RegR|
|000047b0| 65 70 6c 61 63 65 4b 65 | 79 41 0c 41 44 56 41 50 |eplaceKe|yA.ADVAP|
|000047c0| 49 33 32 2e 44 4c 4c 00 | 33 88 22 00 00 a0 01 00 |I32.DLL.|3.".....|
|000047d0| 0e 52 65 67 52 65 70 6c | 61 63 65 4b 65 79 57 0c |.RegRepl|aceKeyW.|
|000047e0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 1d 88 22 |ADVAPI32|.DLL..."|
|000047f0| 00 00 a0 01 00 0e 52 65 | 67 52 65 73 74 6f 72 65 |......Re|gRestore|
|00004800| 4b 65 79 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |KeyA.ADV|API32.DL|
|00004810| 4c 00 0b 88 22 00 00 a0 | 01 00 0e 52 65 67 52 65 |L..."...|...RegRe|
|00004820| 73 74 6f 72 65 4b 65 79 | 57 0c 41 44 56 41 50 49 |storeKey|W.ADVAPI|
|00004830| 33 32 2e 44 4c 4c 00 f5 | 88 1f 00 00 a0 01 00 0b |32.DLL..|........|
|00004840| 52 65 67 53 61 76 65 4b | 65 79 41 0c 41 44 56 41 |RegSaveK|eyA.ADVA|
|00004850| 50 49 33 32 2e 44 4c 4c | 00 66 88 1f 00 00 a0 01 |PI32.DLL|.f......|
|00004860| 00 0b 52 65 67 53 61 76 | 65 4b 65 79 57 0c 41 44 |..RegSav|eKeyW.AD|
|00004870| 56 41 50 49 33 32 2e 44 | 4c 4c 00 50 88 25 00 00 |VAPI32.D|LL.P.%..|
|00004880| a0 01 00 11 52 65 67 53 | 65 74 4b 65 79 53 65 63 |....RegS|etKeySec|
|00004890| 75 72 69 74 79 0c 41 44 | 56 41 50 49 33 32 2e 44 |urity.AD|VAPI32.D|
|000048a0| 4c 4c 00 a6 88 20 00 00 | a0 01 00 0c 52 65 67 53 |LL... ..|....RegS|
|000048b0| 65 74 56 61 6c 75 65 41 | 0c 41 44 56 41 50 49 33 |etValueA|.ADVAPI3|
|000048c0| 32 2e 44 4c 4c 00 f3 88 | 22 00 00 a0 01 00 0e 52 |2.DLL...|"......R|
|000048d0| 65 67 53 65 74 56 61 6c | 75 65 45 78 41 0c 41 44 |egSetVal|ueExA.AD|
|000048e0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 32 88 22 00 00 |VAPI32.D|LL.2."..|
|000048f0| a0 01 00 0e 52 65 67 53 | 65 74 56 61 6c 75 65 45 |....RegS|etValueE|
|00004900| 78 57 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |xW.ADVAP|I32.DLL.|
|00004910| 1c 88 20 00 00 a0 01 00 | 0c 52 65 67 53 65 74 56 |.. .....|.RegSetV|
|00004920| 61 6c 75 65 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |alueW.AD|VAPI32.D|
|00004930| 4c 4c 00 dd 88 21 00 00 | a0 01 00 0d 52 65 67 55 |LL...!..|....RegU|
|00004940| 6e 4c 6f 61 64 4b 65 79 | 41 0c 41 44 56 41 50 49 |nLoadKey|A.ADVAPI|
|00004950| 33 32 2e 44 4c 4c 00 ae | 88 21 00 00 a0 01 00 0d |32.DLL..|.!......|
|00004960| 52 65 67 55 6e 4c 6f 61 | 64 4b 65 79 57 0c 41 44 |RegUnLoa|dKeyW.AD|
|00004970| 56 41 50 49 33 32 2e 44 | 4c 4c 00 98 88 28 00 00 |VAPI32.D|LL...(..|
|00004980| a0 01 00 14 52 65 67 69 | 73 74 65 72 45 76 65 6e |....Regi|sterEven|
|00004990| 74 53 6f 75 72 63 65 41 | 0c 41 44 56 41 50 49 33 |tSourceA|.ADVAPI3|
|000049a0| 32 2e 44 4c 4c 00 72 88 | 28 00 00 a0 01 00 14 52 |2.DLL.r.|(......R|
|000049b0| 65 67 69 73 74 65 72 45 | 76 65 6e 74 53 6f 75 72 |egisterE|ventSour|
|000049c0| 63 65 57 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ceW.ADVA|PI32.DLL|
|000049d0| 00 5c 88 2f 00 00 a0 01 | 00 1b 52 65 67 69 73 74 |.\./....|..Regist|
|000049e0| 65 72 53 65 72 76 69 63 | 65 43 74 72 6c 48 61 6e |erServic|eCtrlHan|
|000049f0| 64 6c 65 72 41 0c 41 44 | 56 41 50 49 33 32 2e 44 |dlerA.AD|VAPI32.D|
|00004a00| 4c 4c 00 b3 88 31 00 00 | a0 01 00 1d 52 65 67 69 |LL...1..|....Regi|
|00004a10| 73 74 65 72 53 65 72 76 | 69 63 65 43 74 72 6c 48 |sterServ|iceCtrlH|
|00004a20| 61 6e 64 6c 65 72 45 78 | 41 0c 41 44 56 41 50 49 |andlerEx|A.ADVAPI|
|00004a30| 33 32 2e 44 4c 4c 00 f2 | 88 31 00 00 a0 01 00 1d |32.DLL..|.1......|
|00004a40| 52 65 67 69 73 74 65 72 | 53 65 72 76 69 63 65 43 |Register|ServiceC|
|00004a50| 74 72 6c 48 61 6e 64 6c | 65 72 45 78 57 0c 41 44 |trlHandl|erExW.AD|
|00004a60| 56 41 50 49 33 32 2e 44 | 4c 4c 00 dc 88 2f 00 00 |VAPI32.D|LL.../..|
|00004a70| a0 01 00 1b 52 65 67 69 | 73 74 65 72 53 65 72 76 |....Regi|sterServ|
|00004a80| 69 63 65 43 74 72 6c 48 | 61 6e 64 6c 65 72 57 0c |iceCtrlH|andlerW.|
|00004a90| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 9d 88 27 |ADVAPI32|.DLL...'|
|00004aa0| 00 00 a0 01 00 13 52 65 | 67 69 73 74 65 72 54 72 |......Re|gisterTr|
|00004ab0| 61 63 65 47 75 69 64 73 | 41 0c 41 44 56 41 50 49 |aceGuids|A.ADVAPI|
|00004ac0| 33 32 2e 44 4c 4c 00 fc | 88 27 00 00 a0 01 00 13 |32.DLL..|.'......|
|00004ad0| 52 65 67 69 73 74 65 72 | 54 72 61 63 65 47 75 69 |Register|TraceGui|
|00004ae0| 64 73 57 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |dsW.ADVA|PI32.DLL|
|00004af0| 00 e6 88 27 00 00 a0 01 | 00 13 52 65 6d 6f 76 65 |...'....|..Remove|
|00004b00| 54 72 61 63 65 43 61 6c | 6c 62 61 63 6b 0c 41 44 |TraceCal|lback.AD|
|00004b10| 56 41 50 49 33 32 2e 44 | 4c 4c 00 03 88 30 00 00 |VAPI32.D|LL...0..|
|00004b20| a0 01 00 1c 52 65 6d 6f | 76 65 55 73 65 72 73 46 |....Remo|veUsersF|
|00004b30| 72 6f 6d 45 6e 63 72 79 | 70 74 65 64 46 69 6c 65 |romEncry|ptedFile|
|00004b40| 0c 41 44 56 41 50 49 33 | 32 2e 44 4c 4c 00 19 88 |.ADVAPI3|2.DLL...|
|00004b50| 20 00 00 a0 01 00 0c 52 | 65 70 6f 72 74 45 76 65 | ......R|eportEve|
|00004b60| 6e 74 41 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ntA.ADVA|PI32.DLL|
|00004b70| 00 bc 88 20 00 00 a0 01 | 00 0c 52 65 70 6f 72 74 |... ....|..Report|
|00004b80| 45 76 65 6e 74 57 0c 41 | 44 56 41 50 49 33 32 2e |EventW.A|DVAPI32.|
|00004b90| 44 4c 4c 00 a6 88 20 00 | 00 a0 01 00 0c 52 65 76 |DLL... .|.....Rev|
|00004ba0| 65 72 74 54 6f 53 65 6c | 66 0c 41 44 56 41 50 49 |ertToSel|f.ADVAPI|
|00004bb0| 33 32 2e 44 4c 4c 00 b6 | 88 25 00 00 a0 01 00 11 |32.DLL..|.%......|
|00004bc0| 53 65 74 41 63 6c 49 6e | 66 6f 72 6d 61 74 69 6f |SetAclIn|formatio|
|00004bd0| 6e 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 af |n.ADVAPI|32.DLL..|
|00004be0| 88 2b 00 00 a0 01 00 17 | 53 65 74 45 6e 74 72 69 |.+......|SetEntri|
|00004bf0| 65 73 49 6e 41 63 63 65 | 73 73 4c 69 73 74 41 0c |esInAcce|ssListA.|
|00004c00| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 79 88 2b |ADVAPI32|.DLL.y.+|
|00004c10| 00 00 a0 01 00 17 53 65 | 74 45 6e 74 72 69 65 73 |......Se|tEntries|
|00004c20| 49 6e 41 63 63 65 73 73 | 4c 69 73 74 57 0c 41 44 |InAccess|ListW.AD|
|00004c30| 56 41 50 49 33 32 2e 44 | 4c 4c 00 63 88 24 00 00 |VAPI32.D|LL.c.$..|
|00004c40| a0 01 00 10 53 65 74 45 | 6e 74 72 69 65 73 49 6e |....SetE|ntriesIn|
|00004c50| 41 63 6c 41 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |AclA.ADV|API32.DL|
|00004c60| 4c 00 65 88 24 00 00 a0 | 01 00 10 53 65 74 45 6e |L.e.$...|...SetEn|
|00004c70| 74 72 69 65 73 49 6e 41 | 63 6c 57 0c 41 44 56 41 |triesInA|clW.ADVA|
|00004c80| 50 49 33 32 2e 44 4c 4c | 00 4f 88 2a 00 00 a0 01 |PI32.DLL|.O.*....|
|00004c90| 00 16 53 65 74 45 6e 74 | 72 69 65 73 49 6e 41 75 |..SetEnt|riesInAu|
|00004ca0| 64 69 74 4c 69 73 74 41 | 0c 41 44 56 41 50 49 33 |ditListA|.ADVAPI3|
|00004cb0| 32 2e 44 4c 4c 00 d6 88 | 2a 00 00 a0 01 00 16 53 |2.DLL...|*......S|
|00004cc0| 65 74 45 6e 74 72 69 65 | 73 49 6e 41 75 64 69 74 |etEntrie|sInAudit|
|00004cd0| 4c 69 73 74 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |ListW.AD|VAPI32.D|
|00004ce0| 4c 4c 00 c0 88 24 00 00 | a0 01 00 10 53 65 74 46 |LL...$..|....SetF|
|00004cf0| 69 6c 65 53 65 63 75 72 | 69 74 79 41 0c 41 44 56 |ileSecur|ityA.ADV|
|00004d00| 41 50 49 33 32 2e 44 4c | 4c 00 2e 88 24 00 00 a0 |API32.DL|L...$...|
|00004d10| 01 00 10 53 65 74 46 69 | 6c 65 53 65 63 75 72 69 |...SetFi|leSecuri|
|00004d20| 74 79 57 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |tyW.ADVA|PI32.DLL|
|00004d30| 00 18 88 2b 00 00 a0 01 | 00 17 53 65 74 4b 65 72 |...+....|..SetKer|
|00004d40| 6e 65 6c 4f 62 6a 65 63 | 74 53 65 63 75 72 69 74 |nelObjec|tSecurit|
|00004d50| 79 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 29 |y.ADVAPI|32.DLL.)|
|00004d60| 88 29 00 00 a0 01 00 15 | 53 65 74 4e 61 6d 65 64 |.)......|SetNamed|
|00004d70| 53 65 63 75 72 69 74 79 | 49 6e 66 6f 41 0c 41 44 |Security|InfoA.AD|
|00004d80| 56 41 50 49 33 32 2e 44 | 4c 4c 00 33 88 2b 00 00 |VAPI32.D|LL.3.+..|
|00004d90| a0 01 00 17 53 65 74 4e | 61 6d 65 64 53 65 63 75 |....SetN|amedSecu|
|00004da0| 72 69 74 79 49 6e 66 6f | 45 78 41 0c 41 44 56 41 |rityInfo|ExA.ADVA|
|00004db0| 50 49 33 32 2e 44 4c 4c | 00 72 88 2b 00 00 a0 01 |PI32.DLL|.r.+....|
|00004dc0| 00 17 53 65 74 4e 61 6d | 65 64 53 65 63 75 72 69 |..SetNam|edSecuri|
|00004dd0| 74 79 49 6e 66 6f 45 78 | 57 0c 41 44 56 41 50 49 |tyInfoEx|W.ADVAPI|
|00004de0| 33 32 2e 44 4c 4c 00 5c | 88 29 00 00 a0 01 00 15 |32.DLL.\|.)......|
|00004df0| 53 65 74 4e 61 6d 65 64 | 53 65 63 75 72 69 74 79 |SetNamed|Security|
|00004e00| 49 6e 66 6f 57 0c 41 44 | 56 41 50 49 33 32 2e 44 |InfoW.AD|VAPI32.D|
|00004e10| 4c 4c 00 1d 88 2c 00 00 | a0 01 00 18 53 65 74 50 |LL...,..|....SetP|
|00004e20| 72 69 76 61 74 65 4f 62 | 6a 65 63 74 53 65 63 75 |rivateOb|jectSecu|
|00004e30| 72 69 74 79 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |rity.ADV|API32.DL|
|00004e40| 4c 00 ad 88 2e 00 00 a0 | 01 00 1a 53 65 74 50 72 |L.......|...SetPr|
|00004e50| 69 76 61 74 65 4f 62 6a | 65 63 74 53 65 63 75 72 |ivateObj|ectSecur|
|00004e60| 69 74 79 45 78 0c 41 44 | 56 41 50 49 33 32 2e 44 |ityEx.AD|VAPI32.D|
|00004e70| 4c 4c 00 ec 88 30 00 00 | a0 01 00 1c 53 65 74 53 |LL...0..|....SetS|
|00004e80| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00004e90| 72 43 6f 6e 74 72 6f 6c | 0c 41 44 56 41 50 49 33 |rControl|.ADVAPI3|
|00004ea0| 32 2e 44 4c 4c 00 d7 88 | 2d 00 00 a0 01 00 19 53 |2.DLL...|-......S|
|00004eb0| 65 74 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |etSecuri|tyDescri|
|00004ec0| 70 74 6f 72 44 61 63 6c | 0c 41 44 56 41 50 49 33 |ptorDacl|.ADVAPI3|
|00004ed0| 32 2e 44 4c 4c 00 4a 88 | 2e 00 00 a0 01 00 1a 53 |2.DLL.J.|.......S|
|00004ee0| 65 74 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |etSecuri|tyDescri|
|00004ef0| 70 74 6f 72 47 72 6f 75 | 70 0c 41 44 56 41 50 49 |ptorGrou|p.ADVAPI|
|00004f00| 33 32 2e 44 4c 4c 00 af | 88 2e 00 00 a0 01 00 1a |32.DLL..|........|
|00004f10| 53 65 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |SetSecur|ityDescr|
|00004f20| 69 70 74 6f 72 4f 77 6e | 65 72 0c 41 44 56 41 50 |iptorOwn|er.ADVAP|
|00004f30| 49 33 32 2e 44 4c 4c 00 | b1 88 32 00 00 a0 01 00 |I32.DLL.|..2.....|
|00004f40| 1e 53 65 74 53 65 63 75 | 72 69 74 79 44 65 73 63 |.SetSecu|rityDesc|
|00004f50| 72 69 70 74 6f 72 52 4d | 43 6f 6e 74 72 6f 6c 0c |riptorRM|Control.|
|00004f60| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 34 88 2d |ADVAPI32|.DLL.4.-|
|00004f70| 00 00 a0 01 00 19 53 65 | 74 53 65 63 75 72 69 74 |......Se|tSecurit|
|00004f80| 79 44 65 73 63 72 69 70 | 74 6f 72 53 61 63 6c 0c |yDescrip|torSacl.|
|00004f90| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 3b 88 23 |ADVAPI32|.DLL.;.#|
|00004fa0| 00 00 a0 01 00 0f 53 65 | 74 53 65 63 75 72 69 74 |......Se|tSecurit|
|00004fb0| 79 49 6e 66 6f 0c 41 44 | 56 41 50 49 33 32 2e 44 |yInfo.AD|VAPI32.D|
|00004fc0| 4c 4c 00 65 88 26 00 00 | a0 01 00 12 53 65 74 53 |LL.e.&..|....SetS|
|00004fd0| 65 63 75 72 69 74 79 49 | 6e 66 6f 45 78 41 0c 41 |ecurityI|nfoExA.A|
|00004fe0| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 61 88 26 00 |DVAPI32.|DLL.a.&.|
|00004ff0| 00 a0 01 00 12 53 65 74 | 53 65 63 75 72 69 74 79 |.....Set|Security|
|00005000| 49 6e 66 6f 45 78 57 0c | 41 44 56 41 50 49 33 32 |InfoExW.|ADVAPI32|
|00005010| 2e 44 4c 4c 00 4b 88 22 | 00 00 a0 01 00 0e 53 65 |.DLL.K."|......Se|
|00005020| 74 53 65 72 76 69 63 65 | 42 69 74 73 0c 41 44 56 |tService|Bits.ADV|
|00005030| 41 50 49 33 32 2e 44 4c | 4c 00 e8 88 2c 00 00 a0 |API32.DL|L...,...|
|00005040| 01 00 18 53 65 74 53 65 | 72 76 69 63 65 4f 62 6a |...SetSe|rviceObj|
|00005050| 65 63 74 53 65 63 75 72 | 69 74 79 0c 41 44 56 41 |ectSecur|ity.ADVA|
|00005060| 50 49 33 32 2e 44 4c 4c | 00 b7 88 24 00 00 a0 01 |PI32.DLL|...$....|
|00005070| 00 10 53 65 74 53 65 72 | 76 69 63 65 53 74 61 74 |..SetSer|viceStat|
|00005080| 75 73 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |us.ADVAP|I32.DLL.|
|00005090| f2 88 22 00 00 a0 01 00 | 0e 53 65 74 54 68 72 65 |..".....|.SetThre|
|000050a0| 61 64 54 6f 6b 65 6e 0c | 41 44 56 41 50 49 33 32 |adToken.|ADVAPI32|
|000050b0| 2e 44 4c 4c 00 f2 88 27 | 00 00 a0 01 00 13 53 65 |.DLL...'|......Se|
|000050c0| 74 54 6f 6b 65 6e 49 6e | 66 6f 72 6d 61 74 69 6f |tTokenIn|formatio|
|000050d0| 6e 0c 41 44 56 41 50 49 | 33 32 2e 44 4c 4c 00 ba |n.ADVAPI|32.DLL..|
|000050e0| 88 24 00 00 a0 01 00 10 | 53 65 74 54 72 61 63 65 |.$......|SetTrace|
|000050f0| 43 61 6c 6c 62 61 63 6b | 0c 41 44 56 41 50 49 33 |Callback|.ADVAPI3|
|00005100| 32 2e 44 4c 4c 00 4b 88 | 2c 00 00 a0 01 00 18 53 |2.DLL.K.|,......S|
|00005110| 65 74 55 73 65 72 46 69 | 6c 65 45 6e 63 72 79 70 |etUserFi|leEncryp|
|00005120| 74 69 6f 6e 4b 65 79 0c | 41 44 56 41 50 49 33 32 |tionKey.|ADVAPI32|
|00005130| 2e 44 4c 4c 00 c4 88 21 | 00 00 a0 01 00 0d 53 74 |.DLL...!|......St|
|00005140| 61 72 74 53 65 72 76 69 | 63 65 41 0c 41 44 56 41 |artServi|ceA.ADVA|
|00005150| 50 49 33 32 2e 44 4c 4c | 00 59 88 2f 00 00 a0 01 |PI32.DLL|.Y./....|
|00005160| 00 1b 53 74 61 72 74 53 | 65 72 76 69 63 65 43 74 |..StartS|erviceCt|
|00005170| 72 6c 44 69 73 70 61 74 | 63 68 65 72 41 0c 41 44 |rlDispat|cherA.AD|
|00005180| 56 41 50 49 33 32 2e 44 | 4c 4c 00 a1 88 2f 00 00 |VAPI32.D|LL.../..|
|00005190| a0 01 00 1b 53 74 61 72 | 74 53 65 72 76 69 63 65 |....Star|tService|
|000051a0| 43 74 72 6c 44 69 73 70 | 61 74 63 68 65 72 57 0c |CtrlDisp|atcherW.|
|000051b0| 41 44 56 41 50 49 33 32 | 2e 44 4c 4c 00 8b 88 21 |ADVAPI32|.DLL...!|
|000051c0| 00 00 a0 01 00 0d 53 74 | 61 72 74 53 65 72 76 69 |......St|artServi|
|000051d0| 63 65 57 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |ceW.ADVA|PI32.DLL|
|000051e0| 00 43 88 1f 00 00 a0 01 | 00 0b 53 74 61 72 74 54 |.C......|..StartT|
|000051f0| 72 61 63 65 41 0c 41 44 | 56 41 50 49 33 32 2e 44 |raceA.AD|VAPI32.D|
|00005200| 4c 4c 00 3f 88 1f 00 00 | a0 01 00 0b 53 74 61 72 |LL.?....|....Star|
|00005210| 74 54 72 61 63 65 57 0c | 41 44 56 41 50 49 33 32 |tTraceW.|ADVAPI32|
|00005220| 2e 44 4c 4c 00 29 88 41 | 00 00 a0 01 00 2d 53 79 |.DLL.).A|.....-Sy|
|00005230| 6e 63 68 72 6f 6e 69 7a | 65 57 69 6e 64 6f 77 73 |nchroniz|eWindows|
|00005240| 33 31 46 69 6c 65 73 41 | 6e 64 57 69 6e 64 6f 77 |31FilesA|ndWindow|
|00005250| 73 4e 54 52 65 67 69 73 | 74 72 79 0c 41 44 56 41 |sNTRegis|try.ADVA|
|00005260| 50 49 33 32 2e 44 4c 4c | 00 62 88 25 00 00 a0 01 |PI32.DLL|.b.%....|
|00005270| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005280| 30 30 31 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |001.ADVA|PI32.DLL|
|00005290| 00 15 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|000052a0| 46 75 6e 63 74 69 6f 6e | 30 30 32 0c 41 44 56 41 |Function|002.ADVA|
|000052b0| 50 49 33 32 2e 44 4c 4c | 00 14 88 25 00 00 a0 01 |PI32.DLL|...%....|
|000052c0| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|000052d0| 30 30 33 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |003.ADVA|PI32.DLL|
|000052e0| 00 13 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|000052f0| 46 75 6e 63 74 69 6f 6e | 30 30 34 0c 41 44 56 41 |Function|004.ADVA|
|00005300| 50 49 33 32 2e 44 4c 4c | 00 12 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005310| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005320| 30 30 35 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |005.ADVA|PI32.DLL|
|00005330| 00 11 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005340| 46 75 6e 63 74 69 6f 6e | 30 30 36 0c 41 44 56 41 |Function|006.ADVA|
|00005350| 50 49 33 32 2e 44 4c 4c | 00 10 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005360| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005370| 30 30 37 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |007.ADVA|PI32.DLL|
|00005380| 00 0f 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005390| 46 75 6e 63 74 69 6f 6e | 30 30 38 0c 41 44 56 41 |Function|008.ADVA|
|000053a0| 50 49 33 32 2e 44 4c 4c | 00 0e 88 25 00 00 a0 01 |PI32.DLL|...%....|
|000053b0| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|000053c0| 30 30 39 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |009.ADVA|PI32.DLL|
|000053d0| 00 0d 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|000053e0| 46 75 6e 63 74 69 6f 6e | 30 31 30 0c 41 44 56 41 |Function|010.ADVA|
|000053f0| 50 49 33 32 2e 44 4c 4c | 00 15 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005400| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005410| 30 31 31 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |011.ADVA|PI32.DLL|
|00005420| 00 14 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005430| 46 75 6e 63 74 69 6f 6e | 30 31 32 0c 41 44 56 41 |Function|012.ADVA|
|00005440| 50 49 33 32 2e 44 4c 4c | 00 13 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005450| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005460| 30 31 33 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |013.ADVA|PI32.DLL|
|00005470| 00 12 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005480| 46 75 6e 63 74 69 6f 6e | 30 31 34 0c 41 44 56 41 |Function|014.ADVA|
|00005490| 50 49 33 32 2e 44 4c 4c | 00 11 88 25 00 00 a0 01 |PI32.DLL|...%....|
|000054a0| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|000054b0| 30 31 35 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |015.ADVA|PI32.DLL|
|000054c0| 00 10 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|000054d0| 46 75 6e 63 74 69 6f 6e | 30 31 36 0c 41 44 56 41 |Function|016.ADVA|
|000054e0| 50 49 33 32 2e 44 4c 4c | 00 0f 88 25 00 00 a0 01 |PI32.DLL|...%....|
|000054f0| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005500| 30 31 37 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |017.ADVA|PI32.DLL|
|00005510| 00 0e 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005520| 46 75 6e 63 74 69 6f 6e | 30 31 38 0c 41 44 56 41 |Function|018.ADVA|
|00005530| 50 49 33 32 2e 44 4c 4c | 00 0d 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005540| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005550| 30 31 39 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |019.ADVA|PI32.DLL|
|00005560| 00 0c 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005570| 46 75 6e 63 74 69 6f 6e | 30 32 30 0c 41 44 56 41 |Function|020.ADVA|
|00005580| 50 49 33 32 2e 44 4c 4c | 00 14 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005590| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|000055a0| 30 32 31 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |021.ADVA|PI32.DLL|
|000055b0| 00 13 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|000055c0| 46 75 6e 63 74 69 6f 6e | 30 32 32 0c 41 44 56 41 |Function|022.ADVA|
|000055d0| 50 49 33 32 2e 44 4c 4c | 00 12 88 25 00 00 a0 01 |PI32.DLL|...%....|
|000055e0| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|000055f0| 30 32 33 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |023.ADVA|PI32.DLL|
|00005600| 00 11 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005610| 46 75 6e 63 74 69 6f 6e | 30 32 34 0c 41 44 56 41 |Function|024.ADVA|
|00005620| 50 49 33 32 2e 44 4c 4c | 00 10 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005630| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005640| 30 32 35 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |025.ADVA|PI32.DLL|
|00005650| 00 0f 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005660| 46 75 6e 63 74 69 6f 6e | 30 32 36 0c 41 44 56 41 |Function|026.ADVA|
|00005670| 50 49 33 32 2e 44 4c 4c | 00 0e 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005680| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005690| 30 32 37 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |027.ADVA|PI32.DLL|
|000056a0| 00 0d 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|000056b0| 46 75 6e 63 74 69 6f 6e | 30 32 38 0c 41 44 56 41 |Function|028.ADVA|
|000056c0| 50 49 33 32 2e 44 4c 4c | 00 0c 88 25 00 00 a0 01 |PI32.DLL|...%....|
|000056d0| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|000056e0| 30 32 39 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |029.ADVA|PI32.DLL|
|000056f0| 00 0b 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005700| 46 75 6e 63 74 69 6f 6e | 30 33 30 0c 41 44 56 41 |Function|030.ADVA|
|00005710| 50 49 33 32 2e 44 4c 4c | 00 13 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005720| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005730| 30 33 31 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |031.ADVA|PI32.DLL|
|00005740| 00 12 88 25 00 00 a0 01 | 00 11 53 79 73 74 65 6d |...%....|..System|
|00005750| 46 75 6e 63 74 69 6f 6e | 30 33 32 0c 41 44 56 41 |Function|032.ADVA|
|00005760| 50 49 33 32 2e 44 4c 4c | 00 11 88 25 00 00 a0 01 |PI32.DLL|...%....|
|00005770| 00 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00005780| 30 33 33 0c 41 44 56 41 | 50 49 33 32 2e 44 4c 4c |033.ADVA|PI32.DLL|
|00005790| 00 10 88 1e 00 00 a0 01 | 00 0a 54 72 61 63 65 45 |........|..TraceE|
|000057a0| 76 65 6e 74 0c 41 44 56 | 41 50 49 33 32 2e 44 4c |vent.ADV|API32.DL|
|000057b0| 4c 00 8e 88 26 00 00 a0 | 01 00 12 54 72 61 63 65 |L...&...|...Trace|
|000057c0| 45 76 65 6e 74 49 6e 73 | 74 61 6e 63 65 0c 41 44 |EventIns|tance.AD|
|000057d0| 56 41 50 49 33 32 2e 44 | 4c 4c 00 49 88 2a 00 00 |VAPI32.D|LL.I.*..|
|000057e0| a0 01 00 16 54 72 75 73 | 74 65 65 41 63 63 65 73 |....Trus|teeAcces|
|000057f0| 73 54 6f 4f 62 6a 65 63 | 74 41 0c 41 44 56 41 50 |sToObjec|tA.ADVAP|
|00005800| 49 33 32 2e 44 4c 4c 00 | ce 88 2a 00 00 a0 01 00 |I32.DLL.|..*.....|
|00005810| 16 54 72 75 73 74 65 65 | 41 63 63 65 73 73 54 6f |.Trustee|AccessTo|
|00005820| 4f 62 6a 65 63 74 57 0c | 41 44 56 41 50 49 33 32 |ObjectW.|ADVAPI32|
|00005830| 2e 44 4c 4c 00 b8 88 28 | 00 00 a0 01 00 14 55 6e |.DLL...(|......Un|
|00005840| 69 6e 73 74 61 6c 6c 41 | 70 70 6c 69 63 61 74 69 |installA|pplicati|
|00005850| 6f 6e 0c 41 44 56 41 50 | 49 33 32 2e 44 4c 4c 00 |on.ADVAP|I32.DLL.|
|00005860| 3d 88 29 00 00 a0 01 00 | 15 55 6e 6c 6f 63 6b 53 |=.).....|.UnlockS|
|00005870| 65 72 76 69 63 65 44 61 | 74 61 62 61 73 65 0c 41 |erviceDa|tabase.A|
|00005880| 44 56 41 50 49 33 32 2e | 44 4c 4c 00 17 88 28 00 |DVAPI32.|DLL...(.|
|00005890| 00 a0 01 00 14 55 6e 72 | 65 67 69 73 74 65 72 54 |.....Unr|egisterT|
|000058a0| 72 61 63 65 47 75 69 64 | 73 0c 41 44 56 41 50 49 |raceGuid|s.ADVAPI|
|000058b0| 33 32 2e 44 4c 4c 00 58 | 88 29 00 00 a0 01 00 15 |32.DLL.X|.)......|
|000058c0| 57 72 69 74 65 45 6e 63 | 72 79 70 74 65 64 46 69 |WriteEnc|ryptedFi|
|000058d0| 6c 65 52 61 77 0c 41 44 | 56 41 50 49 33 32 2e 44 |leRaw.AD|VAPI32.D|
|000058e0| 4c 4c 00 06 8a 02 00 00 | 00 |LL......|. |
+--------+-------------------------+-------------------------+--------+--------+