| / Programmer Plus 2007
/ Programmer-Plus-2007.iso / Programming / Compilers / digital marsC compier / dm / lib / Advapi32.lib
| next > |
| Microsoft Visual C/Basic Library | 1996-08-08 | 52.5 KB |
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 1% | dexvert | Microsoft Visual C/Basic Library (other/visualCLibrary) | magic | Unsupported |
| 1% | dexvert | Sibelius Music / Score (music/sibeliusMusicScore) | ext | Unsupported |
| 1% | dexvert | IntelliFont Font (font/intelliFont) | ext | Unsupported |
| 1% | dexvert | Amiga Hunk Library/Object (other/amigaLibrary) | ext | Unsupported |
| 1% | dexvert | Amiga Shared Library (other/amigaSharedLibrary) | ext | Unsupported |
| 1% | dexvert | Chess Assistant File (other/chessAssistant) | ext | Unsupported |
| 1% | dexvert | COFF Library (other/coffLibrary) | ext | Unsupported |
| 1% | dexvert | Maple Library (other/mapleLibrary) | ext | Unsupported |
| 1% | dexvert | TopSpeed Modula-2 Library (other/topSpeedModula2Library) | ext | Unsupported |
| 100% | file | Microsoft Visual C/OMF library, page size 16, at 0x9800 dictionary with 29 blocks (FFLAG=0xb7) 1st entry _BuildImpersonateExplicitAccessWithNameA@24 in page 130, 2nd record "AbortSystemShutdownA", 3rd record COMMENT Preserved class=0xa0 OMF extensions IMPDEF _AbortSystemShutdownA@4 exported by ADVAPI32 | default | |
| 99% | file | data | default | |
| 100% | TrID | Microsoft Visual C Library | default | |
| 100% | gt2 | C++ Bibliotheks Datei | default |
+--------+-------------------------+-------------------------+--------+--------+Only 25.0 KB of data is shown above.
|00000000| f0 0d 00 00 98 00 00 1d | 00 00 00 00 00 00 00 00 |........|........|
|00000010| 80 16 00 14 41 62 6f 72 | 74 53 79 73 74 65 6d 53 |....Abor|tSystemS|
|00000020| 68 75 74 64 6f 77 6e 41 | 00 88 3b 00 80 a0 01 00 |hutdownA|..;.....|
|00000030| 17 5f 41 62 6f 72 74 53 | 79 73 74 65 6d 53 68 75 |._AbortS|ystemShu|
|00000040| 74 64 6f 77 6e 41 40 34 | 08 41 44 56 41 50 49 33 |tdownA@4|.ADVAPI3|
|00000050| 32 14 41 62 6f 72 74 53 | 79 73 74 65 6d 53 68 75 |2.AbortS|ystemShu|
|00000060| 74 64 6f 77 6e 41 00 8a | 02 00 00 00 00 00 00 00 |tdownA..|........|
|00000070| 80 16 00 14 41 62 6f 72 | 74 53 79 73 74 65 6d 53 |....Abor|tSystemS|
|00000080| 68 75 74 64 6f 77 6e 57 | 00 88 3b 00 80 a0 01 00 |hutdownW|..;.....|
|00000090| 17 5f 41 62 6f 72 74 53 | 79 73 74 65 6d 53 68 75 |._AbortS|ystemShu|
|000000a0| 74 64 6f 77 6e 57 40 34 | 08 41 44 56 41 50 49 33 |tdownW@4|.ADVAPI3|
|000000b0| 32 14 41 62 6f 72 74 53 | 79 73 74 65 6d 53 68 75 |2.AbortS|ystemShu|
|000000c0| 74 64 6f 77 6e 57 00 8a | 02 00 00 00 00 00 00 00 |tdownW..|........|
|000000d0| 80 0d 00 0b 41 63 63 65 | 73 73 43 68 65 63 6b 00 |....Acce|ssCheck.|
|000000e0| 88 2a 00 80 a0 01 00 0f | 5f 41 63 63 65 73 73 43 |.*......|_AccessC|
|000000f0| 68 65 63 6b 40 33 32 08 | 41 44 56 41 50 49 33 32 |heck@32.|ADVAPI32|
|00000100| 0b 41 63 63 65 73 73 43 | 68 65 63 6b 00 8a 02 00 |.AccessC|heck....|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 80 1b 00 19 41 63 63 65 | 73 73 43 68 65 63 6b 41 |....Acce|ssCheckA|
|00000130| 6e 64 41 75 64 69 74 41 | 6c 61 72 6d 41 00 88 46 |ndAuditA|larmA..F|
|00000140| 00 80 a0 01 00 1d 5f 41 | 63 63 65 73 73 43 68 65 |......_A|ccessChe|
|00000150| 63 6b 41 6e 64 41 75 64 | 69 74 41 6c 61 72 6d 41 |ckAndAud|itAlarmA|
|00000160| 40 34 34 08 41 44 56 41 | 50 49 33 32 19 41 63 63 |@44.ADVA|PI32.Acc|
|00000170| 65 73 73 43 68 65 63 6b | 41 6e 64 41 75 64 69 74 |essCheck|AndAudit|
|00000180| 41 6c 61 72 6d 41 00 8a | 02 00 00 00 00 00 00 00 |AlarmA..|........|
|00000190| 80 1b 00 19 41 63 63 65 | 73 73 43 68 65 63 6b 41 |....Acce|ssCheckA|
|000001a0| 6e 64 41 75 64 69 74 41 | 6c 61 72 6d 57 00 88 46 |ndAuditA|larmW..F|
|000001b0| 00 80 a0 01 00 1d 5f 41 | 63 63 65 73 73 43 68 65 |......_A|ccessChe|
|000001c0| 63 6b 41 6e 64 41 75 64 | 69 74 41 6c 61 72 6d 57 |ckAndAud|itAlarmW|
|000001d0| 40 34 34 08 41 44 56 41 | 50 49 33 32 19 41 63 63 |@44.ADVA|PI32.Acc|
|000001e0| 65 73 73 43 68 65 63 6b | 41 6e 64 41 75 64 69 74 |essCheck|AndAudit|
|000001f0| 41 6c 61 72 6d 57 00 8a | 02 00 00 00 00 00 00 00 |AlarmW..|........|
|00000200| 80 15 00 13 41 64 64 41 | 63 63 65 73 73 41 6c 6c |....AddA|ccessAll|
|00000210| 6f 77 65 64 41 63 65 00 | 88 3a 00 80 a0 01 00 17 |owedAce.|.:......|
|00000220| 5f 41 64 64 41 63 63 65 | 73 73 41 6c 6c 6f 77 65 |_AddAcce|ssAllowe|
|00000230| 64 41 63 65 40 31 36 08 | 41 44 56 41 50 49 33 32 |dAce@16.|ADVAPI32|
|00000240| 13 41 64 64 41 63 63 65 | 73 73 41 6c 6c 6f 77 65 |.AddAcce|ssAllowe|
|00000250| 64 41 63 65 00 8a 02 00 | 00 00 00 00 00 00 00 00 |dAce....|........|
|00000260| 80 14 00 12 41 64 64 41 | 63 63 65 73 73 44 65 6e |....AddA|ccessDen|
|00000270| 69 65 64 41 63 65 00 88 | 38 00 80 a0 01 00 16 5f |iedAce..|8......_|
|00000280| 41 64 64 41 63 63 65 73 | 73 44 65 6e 69 65 64 41 |AddAcces|sDeniedA|
|00000290| 63 65 40 31 36 08 41 44 | 56 41 50 49 33 32 12 41 |ce@16.AD|VAPI32.A|
|000002a0| 64 64 41 63 63 65 73 73 | 44 65 6e 69 65 64 41 63 |ddAccess|DeniedAc|
|000002b0| 65 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |e.......|........|
|000002c0| 80 08 00 06 41 64 64 41 | 63 65 00 88 20 00 80 a0 |....AddA|ce.. ...|
|000002d0| 01 00 0a 5f 41 64 64 41 | 63 65 40 32 30 08 41 44 |..._AddA|ce@20.AD|
|000002e0| 56 41 50 49 33 32 06 41 | 64 64 41 63 65 00 8a 02 |VAPI32.A|ddAce...|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 80 13 00 11 41 64 64 41 | 75 64 69 74 41 63 63 65 |....AddA|uditAcce|
|00000310| 73 73 41 63 65 00 88 36 | 00 80 a0 01 00 15 5f 41 |ssAce..6|......_A|
|00000320| 64 64 41 75 64 69 74 41 | 63 63 65 73 73 41 63 65 |ddAuditA|ccessAce|
|00000330| 40 32 34 08 41 44 56 41 | 50 49 33 32 11 41 64 64 |@24.ADVA|PI32.Add|
|00000340| 41 75 64 69 74 41 63 63 | 65 73 73 41 63 65 00 8a |AuditAcc|essAce..|
|00000350| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 80 13 00 11 41 64 6a 75 | 73 74 54 6f 6b 65 6e 47 |....Adju|stTokenG|
|00000370| 72 6f 75 70 73 00 88 36 | 00 80 a0 01 00 15 5f 41 |roups..6|......_A|
|00000380| 64 6a 75 73 74 54 6f 6b | 65 6e 47 72 6f 75 70 73 |djustTok|enGroups|
|00000390| 40 32 34 08 41 44 56 41 | 50 49 33 32 11 41 64 6a |@24.ADVA|PI32.Adj|
|000003a0| 75 73 74 54 6f 6b 65 6e | 47 72 6f 75 70 73 00 8a |ustToken|Groups..|
|000003b0| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 80 17 00 15 41 64 6a 75 | 73 74 54 6f 6b 65 6e 50 |....Adju|stTokenP|
|000003d0| 72 69 76 69 6c 65 67 65 | 73 00 88 3e 00 80 a0 01 |rivilege|s..>....|
|000003e0| 00 19 5f 41 64 6a 75 73 | 74 54 6f 6b 65 6e 50 72 |.._Adjus|tTokenPr|
|000003f0| 69 76 69 6c 65 67 65 73 | 40 32 34 08 41 44 56 41 |ivileges|@24.ADVA|
|00000400| 50 49 33 32 15 41 64 6a | 75 73 74 54 6f 6b 65 6e |PI32.Adj|ustToken|
|00000410| 50 72 69 76 69 6c 65 67 | 65 73 00 8a 02 00 00 00 |Privileg|es......|
|00000420| 80 1a 00 18 41 6c 6c 6f | 63 61 74 65 41 6e 64 49 |....Allo|cateAndI|
|00000430| 6e 69 74 69 61 6c 69 7a | 65 53 69 64 00 88 44 00 |nitializ|eSid..D.|
|00000440| 80 a0 01 00 1c 5f 41 6c | 6c 6f 63 61 74 65 41 6e |....._Al|locateAn|
|00000450| 64 49 6e 69 74 69 61 6c | 69 7a 65 53 69 64 40 34 |dInitial|izeSid@4|
|00000460| 34 08 41 44 56 41 50 49 | 33 32 18 41 6c 6c 6f 63 |4.ADVAPI|32.Alloc|
|00000470| 61 74 65 41 6e 64 49 6e | 69 74 69 61 6c 69 7a 65 |ateAndIn|itialize|
|00000480| 53 69 64 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |Sid.....|........|
|00000490| 80 19 00 17 41 6c 6c 6f | 63 61 74 65 4c 6f 63 61 |....Allo|cateLoca|
|000004a0| 6c 6c 79 55 6e 69 71 75 | 65 49 64 00 88 41 00 80 |llyUniqu|eId..A..|
|000004b0| a0 01 00 1a 5f 41 6c 6c | 6f 63 61 74 65 4c 6f 63 |...._All|ocateLoc|
|000004c0| 61 6c 6c 79 55 6e 69 71 | 75 65 49 64 40 34 08 41 |allyUniq|ueId@4.A|
|000004d0| 44 56 41 50 49 33 32 17 | 41 6c 6c 6f 63 61 74 65 |DVAPI32.|Allocate|
|000004e0| 4c 6f 63 61 6c 6c 79 55 | 6e 69 71 75 65 49 64 00 |LocallyU|niqueId.|
|000004f0| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000500| 80 17 00 15 41 72 65 41 | 6c 6c 41 63 63 65 73 73 |....AreA|llAccess|
|00000510| 65 73 47 72 61 6e 74 65 | 64 00 88 3d 00 80 a0 01 |esGrante|d..=....|
|00000520| 00 18 5f 41 72 65 41 6c | 6c 41 63 63 65 73 73 65 |.._AreAl|lAccesse|
|00000530| 73 47 72 61 6e 74 65 64 | 40 38 08 41 44 56 41 50 |sGranted|@8.ADVAP|
|00000540| 49 33 32 15 41 72 65 41 | 6c 6c 41 63 63 65 73 73 |I32.AreA|llAccess|
|00000550| 65 73 47 72 61 6e 74 65 | 64 00 8a 02 00 00 00 00 |esGrante|d.......|
|00000560| 80 17 00 15 41 72 65 41 | 6e 79 41 63 63 65 73 73 |....AreA|nyAccess|
|00000570| 65 73 47 72 61 6e 74 65 | 64 00 88 3d 00 80 a0 01 |esGrante|d..=....|
|00000580| 00 18 5f 41 72 65 41 6e | 79 41 63 63 65 73 73 65 |.._AreAn|yAccesse|
|00000590| 73 47 72 61 6e 74 65 64 | 40 38 08 41 44 56 41 50 |sGranted|@8.ADVAP|
|000005a0| 49 33 32 15 41 72 65 41 | 6e 79 41 63 63 65 73 73 |I32.AreA|nyAccess|
|000005b0| 65 73 47 72 61 6e 74 65 | 64 00 8a 02 00 00 00 00 |esGrante|d.......|
|000005c0| 80 11 00 0f 42 61 63 6b | 75 70 45 76 65 6e 74 4c |....Back|upEventL|
|000005d0| 6f 67 41 00 88 31 00 80 | a0 01 00 12 5f 42 61 63 |ogA..1..|...._Bac|
|000005e0| 6b 75 70 45 76 65 6e 74 | 4c 6f 67 41 40 38 08 41 |kupEvent|LogA@8.A|
|000005f0| 44 56 41 50 49 33 32 0f | 42 61 63 6b 75 70 45 76 |DVAPI32.|BackupEv|
|00000600| 65 6e 74 4c 6f 67 41 00 | 8a 02 00 00 00 00 00 00 |entLogA.|........|
|00000610| 80 11 00 0f 42 61 63 6b | 75 70 45 76 65 6e 74 4c |....Back|upEventL|
|00000620| 6f 67 57 00 88 31 00 80 | a0 01 00 12 5f 42 61 63 |ogW..1..|...._Bac|
|00000630| 6b 75 70 45 76 65 6e 74 | 4c 6f 67 57 40 38 08 41 |kupEvent|LogW@8.A|
|00000640| 44 56 41 50 49 33 32 0f | 42 61 63 6b 75 70 45 76 |DVAPI32.|BackupEv|
|00000650| 65 6e 74 4c 6f 67 57 00 | 8a 02 00 00 00 00 00 00 |entLogW.|........|
|00000660| 80 15 00 13 42 75 69 6c | 64 41 63 63 65 73 73 52 |....Buil|dAccessR|
|00000670| 65 71 75 65 73 74 41 00 | 88 3a 00 80 a0 01 00 17 |equestA.|.:......|
|00000680| 5f 42 75 69 6c 64 41 63 | 63 65 73 73 52 65 71 75 |_BuildAc|cessRequ|
|00000690| 65 73 74 41 40 31 32 08 | 41 44 56 41 50 49 33 32 |estA@12.|ADVAPI32|
|000006a0| 13 42 75 69 6c 64 41 63 | 63 65 73 73 52 65 71 75 |.BuildAc|cessRequ|
|000006b0| 65 73 74 41 00 8a 02 00 | 00 00 00 00 00 00 00 00 |estA....|........|
|000006c0| 80 15 00 13 42 75 69 6c | 64 41 63 63 65 73 73 52 |....Buil|dAccessR|
|000006d0| 65 71 75 65 73 74 57 00 | 88 3a 00 80 a0 01 00 17 |equestW.|.:......|
|000006e0| 5f 42 75 69 6c 64 41 63 | 63 65 73 73 52 65 71 75 |_BuildAc|cessRequ|
|000006f0| 65 73 74 57 40 31 32 08 | 41 44 56 41 50 49 33 32 |estW@12.|ADVAPI32|
|00000700| 13 42 75 69 6c 64 41 63 | 63 65 73 73 52 65 71 75 |.BuildAc|cessRequ|
|00000710| 65 73 74 57 00 8a 02 00 | 00 00 00 00 00 00 00 00 |estW....|........|
|00000720| 80 1e 00 1c 42 75 69 6c | 64 45 78 70 6c 69 63 69 |....Buil|dExplici|
|00000730| 74 41 63 63 65 73 73 57 | 69 74 68 4e 61 6d 65 41 |tAccessW|ithNameA|
|00000740| 00 88 4c 00 80 a0 01 00 | 20 5f 42 75 69 6c 64 45 |..L.....| _BuildE|
|00000750| 78 70 6c 69 63 69 74 41 | 63 63 65 73 73 57 69 74 |xplicitA|ccessWit|
|00000760| 68 4e 61 6d 65 41 40 32 | 30 08 41 44 56 41 50 49 |hNameA@2|0.ADVAPI|
|00000770| 33 32 1c 42 75 69 6c 64 | 45 78 70 6c 69 63 69 74 |32.Build|Explicit|
|00000780| 41 63 63 65 73 73 57 69 | 74 68 4e 61 6d 65 41 00 |AccessWi|thNameA.|
|00000790| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 80 1e 00 1c 42 75 69 6c | 64 45 78 70 6c 69 63 69 |....Buil|dExplici|
|000007b0| 74 41 63 63 65 73 73 57 | 69 74 68 4e 61 6d 65 57 |tAccessW|ithNameW|
|000007c0| 00 88 4c 00 80 a0 01 00 | 20 5f 42 75 69 6c 64 45 |..L.....| _BuildE|
|000007d0| 78 70 6c 69 63 69 74 41 | 63 63 65 73 73 57 69 74 |xplicitA|ccessWit|
|000007e0| 68 4e 61 6d 65 57 40 32 | 30 08 41 44 56 41 50 49 |hNameW@2|0.ADVAPI|
|000007f0| 33 32 1c 42 75 69 6c 64 | 45 78 70 6c 69 63 69 74 |32.Build|Explicit|
|00000800| 41 63 63 65 73 73 57 69 | 74 68 4e 61 6d 65 57 00 |AccessWi|thNameW.|
|00000810| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000820| 80 29 00 27 42 75 69 6c | 64 49 6d 70 65 72 73 6f |.).'Buil|dImperso|
|00000830| 6e 61 74 65 45 78 70 6c | 69 63 69 74 41 63 63 65 |nateExpl|icitAcce|
|00000840| 73 73 57 69 74 68 4e 61 | 6d 65 41 00 88 62 00 80 |ssWithNa|meA..b..|
|00000850| a0 01 00 2b 5f 42 75 69 | 6c 64 49 6d 70 65 72 73 |...+_Bui|ldImpers|
|00000860| 6f 6e 61 74 65 45 78 70 | 6c 69 63 69 74 41 63 63 |onateExp|licitAcc|
|00000870| 65 73 73 57 69 74 68 4e | 61 6d 65 41 40 32 34 08 |essWithN|ameA@24.|
|00000880| 41 44 56 41 50 49 33 32 | 27 42 75 69 6c 64 49 6d |ADVAPI32|'BuildIm|
|00000890| 70 65 72 73 6f 6e 61 74 | 65 45 78 70 6c 69 63 69 |personat|eExplici|
|000008a0| 74 41 63 63 65 73 73 57 | 69 74 68 4e 61 6d 65 41 |tAccessW|ithNameA|
|000008b0| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008c0| 80 29 00 27 42 75 69 6c | 64 49 6d 70 65 72 73 6f |.).'Buil|dImperso|
|000008d0| 6e 61 74 65 45 78 70 6c | 69 63 69 74 41 63 63 65 |nateExpl|icitAcce|
|000008e0| 73 73 57 69 74 68 4e 61 | 6d 65 57 00 88 62 00 80 |ssWithNa|meW..b..|
|000008f0| a0 01 00 2b 5f 42 75 69 | 6c 64 49 6d 70 65 72 73 |...+_Bui|ldImpers|
|00000900| 6f 6e 61 74 65 45 78 70 | 6c 69 63 69 74 41 63 63 |onateExp|licitAcc|
|00000910| 65 73 73 57 69 74 68 4e | 61 6d 65 57 40 32 34 08 |essWithN|ameW@24.|
|00000920| 41 44 56 41 50 49 33 32 | 27 42 75 69 6c 64 49 6d |ADVAPI32|'BuildIm|
|00000930| 70 65 72 73 6f 6e 61 74 | 65 45 78 70 6c 69 63 69 |personat|eExplici|
|00000940| 74 41 63 63 65 73 73 57 | 69 74 68 4e 61 6d 65 57 |tAccessW|ithNameW|
|00000950| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 80 1a 00 18 42 75 69 6c | 64 49 6d 70 65 72 73 6f |....Buil|dImperso|
|00000970| 6e 61 74 65 54 72 75 73 | 74 65 65 41 00 88 43 00 |nateTrus|teeA..C.|
|00000980| 80 a0 01 00 1b 5f 42 75 | 69 6c 64 49 6d 70 65 72 |....._Bu|ildImper|
|00000990| 73 6f 6e 61 74 65 54 72 | 75 73 74 65 65 41 40 38 |sonateTr|usteeA@8|
|000009a0| 08 41 44 56 41 50 49 33 | 32 18 42 75 69 6c 64 49 |.ADVAPI3|2.BuildI|
|000009b0| 6d 70 65 72 73 6f 6e 61 | 74 65 54 72 75 73 74 65 |mpersona|teTruste|
|000009c0| 65 41 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |eA......|........|
|000009d0| 80 1a 00 18 42 75 69 6c | 64 49 6d 70 65 72 73 6f |....Buil|dImperso|
|000009e0| 6e 61 74 65 54 72 75 73 | 74 65 65 57 00 88 43 00 |nateTrus|teeW..C.|
|000009f0| 80 a0 01 00 1b 5f 42 75 | 69 6c 64 49 6d 70 65 72 |....._Bu|ildImper|
|00000a00| 73 6f 6e 61 74 65 54 72 | 75 73 74 65 65 57 40 38 |sonateTr|usteeW@8|
|00000a10| 08 41 44 56 41 50 49 33 | 32 18 42 75 69 6c 64 49 |.ADVAPI3|2.BuildI|
|00000a20| 6d 70 65 72 73 6f 6e 61 | 74 65 54 72 75 73 74 65 |mpersona|teTruste|
|00000a30| 65 57 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |eW......|........|
|00000a40| 80 1a 00 18 42 75 69 6c | 64 53 65 63 75 72 69 74 |....Buil|dSecurit|
|00000a50| 79 44 65 73 63 72 69 70 | 74 6f 72 41 00 88 44 00 |yDescrip|torA..D.|
|00000a60| 80 a0 01 00 1c 5f 42 75 | 69 6c 64 53 65 63 75 72 |....._Bu|ildSecur|
|00000a70| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 41 40 33 |ityDescr|iptorA@3|
|00000a80| 36 08 41 44 56 41 50 49 | 33 32 18 42 75 69 6c 64 |6.ADVAPI|32.Build|
|00000a90| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00000aa0| 6f 72 41 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |orA.....|........|
|00000ab0| 80 1a 00 18 42 75 69 6c | 64 53 65 63 75 72 69 74 |....Buil|dSecurit|
|00000ac0| 79 44 65 73 63 72 69 70 | 74 6f 72 57 00 88 44 00 |yDescrip|torW..D.|
|00000ad0| 80 a0 01 00 1c 5f 42 75 | 69 6c 64 53 65 63 75 72 |....._Bu|ildSecur|
|00000ae0| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 57 40 33 |ityDescr|iptorW@3|
|00000af0| 36 08 41 44 56 41 50 49 | 33 32 18 42 75 69 6c 64 |6.ADVAPI|32.Build|
|00000b00| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00000b10| 6f 72 57 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |orW.....|........|
|00000b20| 80 17 00 15 42 75 69 6c | 64 54 72 75 73 74 65 65 |....Buil|dTrustee|
|00000b30| 57 69 74 68 4e 61 6d 65 | 41 00 88 3d 00 80 a0 01 |WithName|A..=....|
|00000b40| 00 18 5f 42 75 69 6c 64 | 54 72 75 73 74 65 65 57 |.._Build|TrusteeW|
|00000b50| 69 74 68 4e 61 6d 65 41 | 40 38 08 41 44 56 41 50 |ithNameA|@8.ADVAP|
|00000b60| 49 33 32 15 42 75 69 6c | 64 54 72 75 73 74 65 65 |I32.Buil|dTrustee|
|00000b70| 57 69 74 68 4e 61 6d 65 | 41 00 8a 02 00 00 00 00 |WithName|A.......|
|00000b80| 80 17 00 15 42 75 69 6c | 64 54 72 75 73 74 65 65 |....Buil|dTrustee|
|00000b90| 57 69 74 68 4e 61 6d 65 | 57 00 88 3d 00 80 a0 01 |WithName|W..=....|
|00000ba0| 00 18 5f 42 75 69 6c 64 | 54 72 75 73 74 65 65 57 |.._Build|TrusteeW|
|00000bb0| 69 74 68 4e 61 6d 65 57 | 40 38 08 41 44 56 41 50 |ithNameW|@8.ADVAP|
|00000bc0| 49 33 32 15 42 75 69 6c | 64 54 72 75 73 74 65 65 |I32.Buil|dTrustee|
|00000bd0| 57 69 74 68 4e 61 6d 65 | 57 00 8a 02 00 00 00 00 |WithName|W.......|
|00000be0| 80 16 00 14 42 75 69 6c | 64 54 72 75 73 74 65 65 |....Buil|dTrustee|
|00000bf0| 57 69 74 68 53 69 64 41 | 00 88 3b 00 80 a0 01 00 |WithSidA|..;.....|
|00000c00| 17 5f 42 75 69 6c 64 54 | 72 75 73 74 65 65 57 69 |._BuildT|rusteeWi|
|00000c10| 74 68 53 69 64 41 40 38 | 08 41 44 56 41 50 49 33 |thSidA@8|.ADVAPI3|
|00000c20| 32 14 42 75 69 6c 64 54 | 72 75 73 74 65 65 57 69 |2.BuildT|rusteeWi|
|00000c30| 74 68 53 69 64 41 00 8a | 02 00 00 00 00 00 00 00 |thSidA..|........|
|00000c40| 80 16 00 14 42 75 69 6c | 64 54 72 75 73 74 65 65 |....Buil|dTrustee|
|00000c50| 57 69 74 68 53 69 64 57 | 00 88 3b 00 80 a0 01 00 |WithSidW|..;.....|
|00000c60| 17 5f 42 75 69 6c 64 54 | 72 75 73 74 65 65 57 69 |._BuildT|rusteeWi|
|00000c70| 74 68 53 69 64 57 40 38 | 08 41 44 56 41 50 49 33 |thSidW@8|.ADVAPI3|
|00000c80| 32 14 42 75 69 6c 64 54 | 72 75 73 74 65 65 57 69 |2.BuildT|rusteeWi|
|00000c90| 74 68 53 69 64 57 00 8a | 02 00 00 00 00 00 00 00 |thSidW..|........|
|00000ca0| 80 16 00 14 43 68 61 6e | 67 65 53 65 72 76 69 63 |....Chan|geServic|
|00000cb0| 65 43 6f 6e 66 69 67 41 | 00 88 3c 00 80 a0 01 00 |eConfigA|..<.....|
|00000cc0| 18 5f 43 68 61 6e 67 65 | 53 65 72 76 69 63 65 43 |._Change|ServiceC|
|00000cd0| 6f 6e 66 69 67 41 40 34 | 34 08 41 44 56 41 50 49 |onfigA@4|4.ADVAPI|
|00000ce0| 33 32 14 43 68 61 6e 67 | 65 53 65 72 76 69 63 65 |32.Chang|eService|
|00000cf0| 43 6f 6e 66 69 67 41 00 | 8a 02 00 00 00 00 00 00 |ConfigA.|........|
|00000d00| 80 16 00 14 43 68 61 6e | 67 65 53 65 72 76 69 63 |....Chan|geServic|
|00000d10| 65 43 6f 6e 66 69 67 57 | 00 88 3c 00 80 a0 01 00 |eConfigW|..<.....|
|00000d20| 18 5f 43 68 61 6e 67 65 | 53 65 72 76 69 63 65 43 |._Change|ServiceC|
|00000d30| 6f 6e 66 69 67 57 40 34 | 34 08 41 44 56 41 50 49 |onfigW@4|4.ADVAPI|
|00000d40| 33 32 14 43 68 61 6e 67 | 65 53 65 72 76 69 63 65 |32.Chang|eService|
|00000d50| 43 6f 6e 66 69 67 57 00 | 8a 02 00 00 00 00 00 00 |ConfigW.|........|
|00000d60| 80 10 00 0e 43 6c 65 61 | 72 45 76 65 6e 74 4c 6f |....Clea|rEventLo|
|00000d70| 67 41 00 88 2f 00 80 a0 | 01 00 11 5f 43 6c 65 61 |gA../...|..._Clea|
|00000d80| 72 45 76 65 6e 74 4c 6f | 67 41 40 38 08 41 44 56 |rEventLo|gA@8.ADV|
|00000d90| 41 50 49 33 32 0e 43 6c | 65 61 72 45 76 65 6e 74 |API32.Cl|earEvent|
|00000da0| 4c 6f 67 41 00 8a 02 00 | 00 00 00 00 00 00 00 00 |LogA....|........|
|00000db0| 80 10 00 0e 43 6c 65 61 | 72 45 76 65 6e 74 4c 6f |....Clea|rEventLo|
|00000dc0| 67 57 00 88 2f 00 80 a0 | 01 00 11 5f 43 6c 65 61 |gW../...|..._Clea|
|00000dd0| 72 45 76 65 6e 74 4c 6f | 67 57 40 38 08 41 44 56 |rEventLo|gW@8.ADV|
|00000de0| 41 50 49 33 32 0e 43 6c | 65 61 72 45 76 65 6e 74 |API32.Cl|earEvent|
|00000df0| 4c 6f 67 57 00 8a 02 00 | 00 00 00 00 00 00 00 00 |LogW....|........|
|00000e00| 80 0f 00 0d 43 6c 6f 73 | 65 45 76 65 6e 74 4c 6f |....Clos|eEventLo|
|00000e10| 67 00 88 2d 00 80 a0 01 | 00 10 5f 43 6c 6f 73 65 |g..-....|.._Close|
|00000e20| 45 76 65 6e 74 4c 6f 67 | 40 34 08 41 44 56 41 50 |EventLog|@4.ADVAP|
|00000e30| 49 33 32 0d 43 6c 6f 73 | 65 45 76 65 6e 74 4c 6f |I32.Clos|eEventLo|
|00000e40| 67 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |g.......|........|
|00000e50| 80 14 00 12 43 6c 6f 73 | 65 53 65 72 76 69 63 65 |....Clos|eService|
|00000e60| 48 61 6e 64 6c 65 00 88 | 37 00 80 a0 01 00 15 5f |Handle..|7......_|
|00000e70| 43 6c 6f 73 65 53 65 72 | 76 69 63 65 48 61 6e 64 |CloseSer|viceHand|
|00000e80| 6c 65 40 34 08 41 44 56 | 41 50 49 33 32 12 43 6c |le@4.ADV|API32.Cl|
|00000e90| 6f 73 65 53 65 72 76 69 | 63 65 48 61 6e 64 6c 65 |oseServi|ceHandle|
|00000ea0| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 80 10 00 0e 43 6f 6e 74 | 72 6f 6c 53 65 72 76 69 |....Cont|rolServi|
|00000ec0| 63 65 00 88 30 00 80 a0 | 01 00 12 5f 43 6f 6e 74 |ce..0...|..._Cont|
|00000ed0| 72 6f 6c 53 65 72 76 69 | 63 65 40 31 32 08 41 44 |rolServi|ce@12.AD|
|00000ee0| 56 41 50 49 33 32 0e 43 | 6f 6e 74 72 6f 6c 53 65 |VAPI32.C|ontrolSe|
|00000ef0| 72 76 69 63 65 00 8a 02 | 00 00 00 00 00 00 00 00 |rvice...|........|
|00000f00| 80 09 00 07 43 6f 70 79 | 53 69 64 00 88 22 00 80 |....Copy|Sid.."..|
|00000f10| a0 01 00 0b 5f 43 6f 70 | 79 53 69 64 40 31 32 08 |...._Cop|ySid@12.|
|00000f20| 41 44 56 41 50 49 33 32 | 07 43 6f 70 79 53 69 64 |ADVAPI32|.CopySid|
|00000f30| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 80 1d 00 1b 43 72 65 61 | 74 65 50 72 69 76 61 74 |....Crea|tePrivat|
|00000f50| 65 4f 62 6a 65 63 74 53 | 65 63 75 72 69 74 79 00 |eObjectS|ecurity.|
|00000f60| 88 4a 00 80 a0 01 00 1f | 5f 43 72 65 61 74 65 50 |.J......|_CreateP|
|00000f70| 72 69 76 61 74 65 4f 62 | 6a 65 63 74 53 65 63 75 |rivateOb|jectSecu|
|00000f80| 72 69 74 79 40 32 34 08 | 41 44 56 41 50 49 33 32 |rity@24.|ADVAPI32|
|00000f90| 1b 43 72 65 61 74 65 50 | 72 69 76 61 74 65 4f 62 |.CreateP|rivateOb|
|00000fa0| 6a 65 63 74 53 65 63 75 | 72 69 74 79 00 8a 02 00 |jectSecu|rity....|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 80 16 00 14 43 72 65 61 | 74 65 50 72 6f 63 65 73 |....Crea|teProces|
|00000fd0| 73 41 73 55 73 65 72 41 | 00 88 3c 00 80 a0 01 00 |sAsUserA|..<.....|
|00000fe0| 18 5f 43 72 65 61 74 65 | 50 72 6f 63 65 73 73 41 |._Create|ProcessA|
|00000ff0| 73 55 73 65 72 41 40 34 | 34 08 41 44 56 41 50 49 |sUserA@4|4.ADVAPI|
|00001000| 33 32 14 43 72 65 61 74 | 65 50 72 6f 63 65 73 73 |32.Creat|eProcess|
|00001010| 41 73 55 73 65 72 41 00 | 8a 02 00 00 00 00 00 00 |AsUserA.|........|
|00001020| 80 16 00 14 43 72 65 61 | 74 65 50 72 6f 63 65 73 |....Crea|teProces|
|00001030| 73 41 73 55 73 65 72 57 | 00 88 3c 00 80 a0 01 00 |sAsUserW|..<.....|
|00001040| 18 5f 43 72 65 61 74 65 | 50 72 6f 63 65 73 73 41 |._Create|ProcessA|
|00001050| 73 55 73 65 72 57 40 34 | 34 08 41 44 56 41 50 49 |sUserW@4|4.ADVAPI|
|00001060| 33 32 14 43 72 65 61 74 | 65 50 72 6f 63 65 73 73 |32.Creat|eProcess|
|00001070| 41 73 55 73 65 72 57 00 | 8a 02 00 00 00 00 00 00 |AsUserW.|........|
|00001080| 80 10 00 0e 43 72 65 61 | 74 65 53 65 72 76 69 63 |....Crea|teServic|
|00001090| 65 41 00 88 30 00 80 a0 | 01 00 12 5f 43 72 65 61 |eA..0...|..._Crea|
|000010a0| 74 65 53 65 72 76 69 63 | 65 41 40 35 32 08 41 44 |teServic|eA@52.AD|
|000010b0| 56 41 50 49 33 32 0e 43 | 72 65 61 74 65 53 65 72 |VAPI32.C|reateSer|
|000010c0| 76 69 63 65 41 00 8a 02 | 00 00 00 00 00 00 00 00 |viceA...|........|
|000010d0| 80 10 00 0e 43 72 65 61 | 74 65 53 65 72 76 69 63 |....Crea|teServic|
|000010e0| 65 57 00 88 30 00 80 a0 | 01 00 12 5f 43 72 65 61 |eW..0...|..._Crea|
|000010f0| 74 65 53 65 72 76 69 63 | 65 57 40 35 32 08 41 44 |teServic|eW@52.AD|
|00001100| 56 41 50 49 33 32 0e 43 | 72 65 61 74 65 53 65 72 |VAPI32.C|reateSer|
|00001110| 76 69 63 65 57 00 8a 02 | 00 00 00 00 00 00 00 00 |viceW...|........|
|00001120| 80 16 00 14 43 72 79 70 | 74 41 63 71 75 69 72 65 |....Cryp|tAcquire|
|00001130| 43 6f 6e 74 65 78 74 41 | 00 88 3c 00 80 a0 01 00 |ContextA|..<.....|
|00001140| 18 5f 43 72 79 70 74 41 | 63 71 75 69 72 65 43 6f |._CryptA|cquireCo|
|00001150| 6e 74 65 78 74 41 40 32 | 30 08 41 44 56 41 50 49 |ntextA@2|0.ADVAPI|
|00001160| 33 32 14 43 72 79 70 74 | 41 63 71 75 69 72 65 43 |32.Crypt|AcquireC|
|00001170| 6f 6e 74 65 78 74 41 00 | 8a 02 00 00 00 00 00 00 |ontextA.|........|
|00001180| 80 16 00 14 43 72 79 70 | 74 41 63 71 75 69 72 65 |....Cryp|tAcquire|
|00001190| 43 6f 6e 74 65 78 74 57 | 00 88 3c 00 80 a0 01 00 |ContextW|..<.....|
|000011a0| 18 5f 43 72 79 70 74 41 | 63 71 75 69 72 65 43 6f |._CryptA|cquireCo|
|000011b0| 6e 74 65 78 74 57 40 32 | 30 08 41 44 56 41 50 49 |ntextW@2|0.ADVAPI|
|000011c0| 33 32 14 43 72 79 70 74 | 41 63 71 75 69 72 65 43 |32.Crypt|AcquireC|
|000011d0| 6f 6e 74 65 78 74 57 00 | 8a 02 00 00 00 00 00 00 |ontextW.|........|
|000011e0| 80 11 00 0f 43 72 79 70 | 74 43 72 65 61 74 65 48 |....Cryp|tCreateH|
|000011f0| 61 73 68 00 88 32 00 80 | a0 01 00 13 5f 43 72 79 |ash..2..|...._Cry|
|00001200| 70 74 43 72 65 61 74 65 | 48 61 73 68 40 32 30 08 |ptCreate|Hash@20.|
|00001210| 41 44 56 41 50 49 33 32 | 0f 43 72 79 70 74 43 72 |ADVAPI32|.CryptCr|
|00001220| 65 61 74 65 48 61 73 68 | 00 8a 02 00 00 00 00 00 |eateHash|........|
|00001230| 80 0e 00 0c 43 72 79 70 | 74 44 65 63 72 79 70 74 |....Cryp|tDecrypt|
|00001240| 00 88 2c 00 80 a0 01 00 | 10 5f 43 72 79 70 74 44 |..,.....|._CryptD|
|00001250| 65 63 72 79 70 74 40 32 | 34 08 41 44 56 41 50 49 |ecrypt@2|4.ADVAPI|
|00001260| 33 32 0c 43 72 79 70 74 | 44 65 63 72 79 70 74 00 |32.Crypt|Decrypt.|
|00001270| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001280| 80 10 00 0e 43 72 79 70 | 74 44 65 72 69 76 65 4b |....Cryp|tDeriveK|
|00001290| 65 79 00 88 30 00 80 a0 | 01 00 12 5f 43 72 79 70 |ey..0...|..._Cryp|
|000012a0| 74 44 65 72 69 76 65 4b | 65 79 40 32 30 08 41 44 |tDeriveK|ey@20.AD|
|000012b0| 56 41 50 49 33 32 0e 43 | 72 79 70 74 44 65 72 69 |VAPI32.C|ryptDeri|
|000012c0| 76 65 4b 65 79 00 8a 02 | 00 00 00 00 00 00 00 00 |veKey...|........|
|000012d0| 80 12 00 10 43 72 79 70 | 74 44 65 73 74 72 6f 79 |....Cryp|tDestroy|
|000012e0| 48 61 73 68 00 88 33 00 | 80 a0 01 00 13 5f 43 72 |Hash..3.|....._Cr|
|000012f0| 79 70 74 44 65 73 74 72 | 6f 79 48 61 73 68 40 34 |yptDestr|oyHash@4|
|00001300| 08 41 44 56 41 50 49 33 | 32 10 43 72 79 70 74 44 |.ADVAPI3|2.CryptD|
|00001310| 65 73 74 72 6f 79 48 61 | 73 68 00 8a 02 00 00 00 |estroyHa|sh......|
|00001320| 80 11 00 0f 43 72 79 70 | 74 44 65 73 74 72 6f 79 |....Cryp|tDestroy|
|00001330| 4b 65 79 00 88 31 00 80 | a0 01 00 12 5f 43 72 79 |Key..1..|...._Cry|
|00001340| 70 74 44 65 73 74 72 6f | 79 4b 65 79 40 34 08 41 |ptDestro|yKey@4.A|
|00001350| 44 56 41 50 49 33 32 0f | 43 72 79 70 74 44 65 73 |DVAPI32.|CryptDes|
|00001360| 74 72 6f 79 4b 65 79 00 | 8a 02 00 00 00 00 00 00 |troyKey.|........|
|00001370| 80 0e 00 0c 43 72 79 70 | 74 45 6e 63 72 79 70 74 |....Cryp|tEncrypt|
|00001380| 00 88 2c 00 80 a0 01 00 | 10 5f 43 72 79 70 74 45 |..,.....|._CryptE|
|00001390| 6e 63 72 79 70 74 40 32 | 38 08 41 44 56 41 50 49 |ncrypt@2|8.ADVAPI|
|000013a0| 33 32 0c 43 72 79 70 74 | 45 6e 63 72 79 70 74 00 |32.Crypt|Encrypt.|
|000013b0| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013c0| 80 10 00 0e 43 72 79 70 | 74 45 78 70 6f 72 74 4b |....Cryp|tExportK|
|000013d0| 65 79 00 88 30 00 80 a0 | 01 00 12 5f 43 72 79 70 |ey..0...|..._Cryp|
|000013e0| 74 45 78 70 6f 72 74 4b | 65 79 40 32 34 08 41 44 |tExportK|ey@24.AD|
|000013f0| 56 41 50 49 33 32 0e 43 | 72 79 70 74 45 78 70 6f |VAPI32.C|ryptExpo|
|00001400| 72 74 4b 65 79 00 8a 02 | 00 00 00 00 00 00 00 00 |rtKey...|........|
|00001410| 80 0d 00 0b 43 72 79 70 | 74 47 65 6e 4b 65 79 00 |....Cryp|tGenKey.|
|00001420| 88 2a 00 80 a0 01 00 0f | 5f 43 72 79 70 74 47 65 |.*......|_CryptGe|
|00001430| 6e 4b 65 79 40 31 36 08 | 41 44 56 41 50 49 33 32 |nKey@16.|ADVAPI32|
|00001440| 0b 43 72 79 70 74 47 65 | 6e 4b 65 79 00 8a 02 00 |.CryptGe|nKey....|
|00001450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001460| 80 10 00 0e 43 72 79 70 | 74 47 65 6e 52 61 6e 64 |....Cryp|tGenRand|
|00001470| 6f 6d 00 88 30 00 80 a0 | 01 00 12 5f 43 72 79 70 |om..0...|..._Cryp|
|00001480| 74 47 65 6e 52 61 6e 64 | 6f 6d 40 31 32 08 41 44 |tGenRand|om@12.AD|
|00001490| 56 41 50 49 33 32 0e 43 | 72 79 70 74 47 65 6e 52 |VAPI32.C|ryptGenR|
|000014a0| 61 6e 64 6f 6d 00 8a 02 | 00 00 00 00 00 00 00 00 |andom...|........|
|000014b0| 80 13 00 11 43 72 79 70 | 74 47 65 74 48 61 73 68 |....Cryp|tGetHash|
|000014c0| 50 61 72 61 6d 00 88 36 | 00 80 a0 01 00 15 5f 43 |Param..6|......_C|
|000014d0| 72 79 70 74 47 65 74 48 | 61 73 68 50 61 72 61 6d |ryptGetH|ashParam|
|000014e0| 40 32 30 08 41 44 56 41 | 50 49 33 32 11 43 72 79 |@20.ADVA|PI32.Cry|
|000014f0| 70 74 47 65 74 48 61 73 | 68 50 61 72 61 6d 00 8a |ptGetHas|hParam..|
|00001500| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001510| 80 12 00 10 43 72 79 70 | 74 47 65 74 4b 65 79 50 |....Cryp|tGetKeyP|
|00001520| 61 72 61 6d 00 88 34 00 | 80 a0 01 00 14 5f 43 72 |aram..4.|....._Cr|
|00001530| 79 70 74 47 65 74 4b 65 | 79 50 61 72 61 6d 40 32 |yptGetKe|yParam@2|
|00001540| 30 08 41 44 56 41 50 49 | 33 32 10 43 72 79 70 74 |0.ADVAPI|32.Crypt|
|00001550| 47 65 74 4b 65 79 50 61 | 72 61 6d 00 8a 02 00 00 |GetKeyPa|ram.....|
|00001560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001570| 80 13 00 11 43 72 79 70 | 74 47 65 74 50 72 6f 76 |....Cryp|tGetProv|
|00001580| 50 61 72 61 6d 00 88 36 | 00 80 a0 01 00 15 5f 43 |Param..6|......_C|
|00001590| 72 79 70 74 47 65 74 50 | 72 6f 76 50 61 72 61 6d |ryptGetP|rovParam|
|000015a0| 40 32 30 08 41 44 56 41 | 50 49 33 32 11 43 72 79 |@20.ADVA|PI32.Cry|
|000015b0| 70 74 47 65 74 50 72 6f | 76 50 61 72 61 6d 00 8a |ptGetPro|vParam..|
|000015c0| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015d0| 80 11 00 0f 43 72 79 70 | 74 47 65 74 55 73 65 72 |....Cryp|tGetUser|
|000015e0| 4b 65 79 00 88 32 00 80 | a0 01 00 13 5f 43 72 79 |Key..2..|...._Cry|
|000015f0| 70 74 47 65 74 55 73 65 | 72 4b 65 79 40 31 32 08 |ptGetUse|rKey@12.|
|00001600| 41 44 56 41 50 49 33 32 | 0f 43 72 79 70 74 47 65 |ADVAPI32|.CryptGe|
|00001610| 74 55 73 65 72 4b 65 79 | 00 8a 02 00 00 00 00 00 |tUserKey|........|
|00001620| 80 0f 00 0d 43 72 79 70 | 74 48 61 73 68 44 61 74 |....Cryp|tHashDat|
|00001630| 61 00 88 2e 00 80 a0 01 | 00 11 5f 43 72 79 70 74 |a.......|.._Crypt|
|00001640| 48 61 73 68 44 61 74 61 | 40 31 36 08 41 44 56 41 |HashData|@16.ADVA|
|00001650| 50 49 33 32 0d 43 72 79 | 70 74 48 61 73 68 44 61 |PI32.Cry|ptHashDa|
|00001660| 74 61 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |ta......|........|
|00001670| 80 15 00 13 43 72 79 70 | 74 48 61 73 68 53 65 73 |....Cryp|tHashSes|
|00001680| 73 69 6f 6e 4b 65 79 00 | 88 3a 00 80 a0 01 00 17 |sionKey.|.:......|
|00001690| 5f 43 72 79 70 74 48 61 | 73 68 53 65 73 73 69 6f |_CryptHa|shSessio|
|000016a0| 6e 4b 65 79 40 31 32 08 | 41 44 56 41 50 49 33 32 |nKey@12.|ADVAPI32|
|000016b0| 13 43 72 79 70 74 48 61 | 73 68 53 65 73 73 69 6f |.CryptHa|shSessio|
|000016c0| 6e 4b 65 79 00 8a 02 00 | 00 00 00 00 00 00 00 00 |nKey....|........|
|000016d0| 80 10 00 0e 43 72 79 70 | 74 49 6d 70 6f 72 74 4b |....Cryp|tImportK|
|000016e0| 65 79 00 88 30 00 80 a0 | 01 00 12 5f 43 72 79 70 |ey..0...|..._Cryp|
|000016f0| 74 49 6d 70 6f 72 74 4b | 65 79 40 32 34 08 41 44 |tImportK|ey@24.AD|
|00001700| 56 41 50 49 33 32 0e 43 | 72 79 70 74 49 6d 70 6f |VAPI32.C|ryptImpo|
|00001710| 72 74 4b 65 79 00 8a 02 | 00 00 00 00 00 00 00 00 |rtKey...|........|
|00001720| 80 15 00 13 43 72 79 70 | 74 52 65 6c 65 61 73 65 |....Cryp|tRelease|
|00001730| 43 6f 6e 74 65 78 74 00 | 88 39 00 80 a0 01 00 16 |Context.|.9......|
|00001740| 5f 43 72 79 70 74 52 65 | 6c 65 61 73 65 43 6f 6e |_CryptRe|leaseCon|
|00001750| 74 65 78 74 40 38 08 41 | 44 56 41 50 49 33 32 13 |text@8.A|DVAPI32.|
|00001760| 43 72 79 70 74 52 65 6c | 65 61 73 65 43 6f 6e 74 |CryptRel|easeCont|
|00001770| 65 78 74 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |ext.....|........|
|00001780| 80 13 00 11 43 72 79 70 | 74 53 65 74 48 61 73 68 |....Cryp|tSetHash|
|00001790| 50 61 72 61 6d 00 88 36 | 00 80 a0 01 00 15 5f 43 |Param..6|......_C|
|000017a0| 72 79 70 74 53 65 74 48 | 61 73 68 50 61 72 61 6d |ryptSetH|ashParam|
|000017b0| 40 31 36 08 41 44 56 41 | 50 49 33 32 11 43 72 79 |@16.ADVA|PI32.Cry|
|000017c0| 70 74 53 65 74 48 61 73 | 68 50 61 72 61 6d 00 8a |ptSetHas|hParam..|
|000017d0| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017e0| 80 12 00 10 43 72 79 70 | 74 53 65 74 4b 65 79 50 |....Cryp|tSetKeyP|
|000017f0| 61 72 61 6d 00 88 34 00 | 80 a0 01 00 14 5f 43 72 |aram..4.|....._Cr|
|00001800| 79 70 74 53 65 74 4b 65 | 79 50 61 72 61 6d 40 31 |yptSetKe|yParam@1|
|00001810| 36 08 41 44 56 41 50 49 | 33 32 10 43 72 79 70 74 |6.ADVAPI|32.Crypt|
|00001820| 53 65 74 4b 65 79 50 61 | 72 61 6d 00 8a 02 00 00 |SetKeyPa|ram.....|
|00001830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001840| 80 13 00 11 43 72 79 70 | 74 53 65 74 50 72 6f 76 |....Cryp|tSetProv|
|00001850| 50 61 72 61 6d 00 88 36 | 00 80 a0 01 00 15 5f 43 |Param..6|......_C|
|00001860| 72 79 70 74 53 65 74 50 | 72 6f 76 50 61 72 61 6d |ryptSetP|rovParam|
|00001870| 40 31 36 08 41 44 56 41 | 50 49 33 32 11 43 72 79 |@16.ADVA|PI32.Cry|
|00001880| 70 74 53 65 74 50 72 6f | 76 50 61 72 61 6d 00 8a |ptSetPro|vParam..|
|00001890| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018a0| 80 13 00 11 43 72 79 70 | 74 53 65 74 50 72 6f 76 |....Cryp|tSetProv|
|000018b0| 69 64 65 72 41 00 88 35 | 00 80 a0 01 00 14 5f 43 |iderA..5|......_C|
|000018c0| 72 79 70 74 53 65 74 50 | 72 6f 76 69 64 65 72 41 |ryptSetP|roviderA|
|000018d0| 40 38 08 41 44 56 41 50 | 49 33 32 11 43 72 79 70 |@8.ADVAP|I32.Cryp|
|000018e0| 74 53 65 74 50 72 6f 76 | 69 64 65 72 41 00 8a 02 |tSetProv|iderA...|
|000018f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001900| 80 13 00 11 43 72 79 70 | 74 53 65 74 50 72 6f 76 |....Cryp|tSetProv|
|00001910| 69 64 65 72 57 00 88 35 | 00 80 a0 01 00 14 5f 43 |iderW..5|......_C|
|00001920| 72 79 70 74 53 65 74 50 | 72 6f 76 69 64 65 72 57 |ryptSetP|roviderW|
|00001930| 40 38 08 41 44 56 41 50 | 49 33 32 11 43 72 79 70 |@8.ADVAP|I32.Cryp|
|00001940| 74 53 65 74 50 72 6f 76 | 69 64 65 72 57 00 8a 02 |tSetProv|iderW...|
|00001950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001960| 80 10 00 0e 43 72 79 70 | 74 53 69 67 6e 48 61 73 |....Cryp|tSignHas|
|00001970| 68 41 00 88 30 00 80 a0 | 01 00 12 5f 43 72 79 70 |hA..0...|..._Cryp|
|00001980| 74 53 69 67 6e 48 61 73 | 68 41 40 32 34 08 41 44 |tSignHas|hA@24.AD|
|00001990| 56 41 50 49 33 32 0e 43 | 72 79 70 74 53 69 67 6e |VAPI32.C|ryptSign|
|000019a0| 48 61 73 68 41 00 8a 02 | 00 00 00 00 00 00 00 00 |HashA...|........|
|000019b0| 80 10 00 0e 43 72 79 70 | 74 53 69 67 6e 48 61 73 |....Cryp|tSignHas|
|000019c0| 68 57 00 88 30 00 80 a0 | 01 00 12 5f 43 72 79 70 |hW..0...|..._Cryp|
|000019d0| 74 53 69 67 6e 48 61 73 | 68 57 40 32 34 08 41 44 |tSignHas|hW@24.AD|
|000019e0| 56 41 50 49 33 32 0e 43 | 72 79 70 74 53 69 67 6e |VAPI32.C|ryptSign|
|000019f0| 48 61 73 68 57 00 8a 02 | 00 00 00 00 00 00 00 00 |HashW...|........|
|00001a00| 80 17 00 15 43 72 79 70 | 74 56 65 72 69 66 79 53 |....Cryp|tVerifyS|
|00001a10| 69 67 6e 61 74 75 72 65 | 41 00 88 3e 00 80 a0 01 |ignature|A..>....|
|00001a20| 00 19 5f 43 72 79 70 74 | 56 65 72 69 66 79 53 69 |.._Crypt|VerifySi|
|00001a30| 67 6e 61 74 75 72 65 41 | 40 32 34 08 41 44 56 41 |gnatureA|@24.ADVA|
|00001a40| 50 49 33 32 15 43 72 79 | 70 74 56 65 72 69 66 79 |PI32.Cry|ptVerify|
|00001a50| 53 69 67 6e 61 74 75 72 | 65 41 00 8a 02 00 00 00 |Signatur|eA......|
|00001a60| 80 17 00 15 43 72 79 70 | 74 56 65 72 69 66 79 53 |....Cryp|tVerifyS|
|00001a70| 69 67 6e 61 74 75 72 65 | 57 00 88 3e 00 80 a0 01 |ignature|W..>....|
|00001a80| 00 19 5f 43 72 79 70 74 | 56 65 72 69 66 79 53 69 |.._Crypt|VerifySi|
|00001a90| 67 6e 61 74 75 72 65 57 | 40 32 34 08 41 44 56 41 |gnatureW|@24.ADVA|
|00001aa0| 50 49 33 32 15 43 72 79 | 70 74 56 65 72 69 66 79 |PI32.Cry|ptVerify|
|00001ab0| 53 69 67 6e 61 74 75 72 | 65 57 00 8a 02 00 00 00 |Signatur|eW......|
|00001ac0| 80 0b 00 09 44 65 6c 65 | 74 65 41 63 65 00 88 25 |....Dele|teAce..%|
|00001ad0| 00 80 a0 01 00 0c 5f 44 | 65 6c 65 74 65 41 63 65 |......_D|eleteAce|
|00001ae0| 40 38 08 41 44 56 41 50 | 49 33 32 09 44 65 6c 65 |@8.ADVAP|I32.Dele|
|00001af0| 74 65 41 63 65 00 8a 02 | 00 00 00 00 00 00 00 00 |teAce...|........|
|00001b00| 80 0f 00 0d 44 65 6c 65 | 74 65 53 65 72 76 69 63 |....Dele|teServic|
|00001b10| 65 00 88 2d 00 80 a0 01 | 00 10 5f 44 65 6c 65 74 |e..-....|.._Delet|
|00001b20| 65 53 65 72 76 69 63 65 | 40 34 08 41 44 56 41 50 |eService|@4.ADVAP|
|00001b30| 49 33 32 0d 44 65 6c 65 | 74 65 53 65 72 76 69 63 |I32.Dele|teServic|
|00001b40| 65 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |e.......|........|
|00001b50| 80 13 00 11 44 65 6e 79 | 41 63 63 65 73 73 52 69 |....Deny|AccessRi|
|00001b60| 67 68 74 73 41 00 88 36 | 00 80 a0 01 00 15 5f 44 |ghtsA..6|......_D|
|00001b70| 65 6e 79 41 63 63 65 73 | 73 52 69 67 68 74 73 41 |enyAcces|sRightsA|
|00001b80| 40 31 36 08 41 44 56 41 | 50 49 33 32 11 44 65 6e |@16.ADVA|PI32.Den|
|00001b90| 79 41 63 63 65 73 73 52 | 69 67 68 74 73 41 00 8a |yAccessR|ightsA..|
|00001ba0| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bb0| 80 13 00 11 44 65 6e 79 | 41 63 63 65 73 73 52 69 |....Deny|AccessRi|
|00001bc0| 67 68 74 73 57 00 88 36 | 00 80 a0 01 00 15 5f 44 |ghtsW..6|......_D|
|00001bd0| 65 6e 79 41 63 63 65 73 | 73 52 69 67 68 74 73 57 |enyAcces|sRightsW|
|00001be0| 40 31 36 08 41 44 56 41 | 50 49 33 32 11 44 65 6e |@16.ADVA|PI32.Den|
|00001bf0| 79 41 63 63 65 73 73 52 | 69 67 68 74 73 57 00 8a |yAccessR|ightsW..|
|00001c00| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001c10| 80 17 00 15 44 65 72 65 | 67 69 73 74 65 72 45 76 |....Dere|gisterEv|
|00001c20| 65 6e 74 53 6f 75 72 63 | 65 00 88 3d 00 80 a0 01 |entSourc|e..=....|
|00001c30| 00 18 5f 44 65 72 65 67 | 69 73 74 65 72 45 76 65 |.._Dereg|isterEve|
|00001c40| 6e 74 53 6f 75 72 63 65 | 40 34 08 41 44 56 41 50 |ntSource|@4.ADVAP|
|00001c50| 49 33 32 15 44 65 72 65 | 67 69 73 74 65 72 45 76 |I32.Dere|gisterEv|
|00001c60| 65 6e 74 53 6f 75 72 63 | 65 00 8a 02 00 00 00 00 |entSourc|e.......|
|00001c70| 80 1e 00 1c 44 65 73 74 | 72 6f 79 50 72 69 76 61 |....Dest|royPriva|
|00001c80| 74 65 4f 62 6a 65 63 74 | 53 65 63 75 72 69 74 79 |teObject|Security|
|00001c90| 00 88 4b 00 80 a0 01 00 | 1f 5f 44 65 73 74 72 6f |..K.....|._Destro|
|00001ca0| 79 50 72 69 76 61 74 65 | 4f 62 6a 65 63 74 53 65 |yPrivate|ObjectSe|
|00001cb0| 63 75 72 69 74 79 40 34 | 08 41 44 56 41 50 49 33 |curity@4|.ADVAPI3|
|00001cc0| 32 1c 44 65 73 74 72 6f | 79 50 72 69 76 61 74 65 |2.Destro|yPrivate|
|00001cd0| 4f 62 6a 65 63 74 53 65 | 63 75 72 69 74 79 00 8a |ObjectSe|curity..|
|00001ce0| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001cf0| 80 10 00 0e 44 75 70 6c | 69 63 61 74 65 54 6f 6b |....Dupl|icateTok|
|00001d00| 65 6e 00 88 30 00 80 a0 | 01 00 12 5f 44 75 70 6c |en..0...|..._Dupl|
|00001d10| 69 63 61 74 65 54 6f 6b | 65 6e 40 31 32 08 41 44 |icateTok|en@12.AD|
|00001d20| 56 41 50 49 33 32 0e 44 | 75 70 6c 69 63 61 74 65 |VAPI32.D|uplicate|
|00001d30| 54 6f 6b 65 6e 00 8a 02 | 00 00 00 00 00 00 00 00 |Token...|........|
|00001d40| 80 12 00 10 44 75 70 6c | 69 63 61 74 65 54 6f 6b |....Dupl|icateTok|
|00001d50| 65 6e 45 78 00 88 34 00 | 80 a0 01 00 14 5f 44 75 |enEx..4.|....._Du|
|00001d60| 70 6c 69 63 61 74 65 54 | 6f 6b 65 6e 45 78 40 32 |plicateT|okenEx@2|
|00001d70| 34 08 41 44 56 41 50 49 | 33 32 10 44 75 70 6c 69 |4.ADVAPI|32.Dupli|
|00001d80| 63 61 74 65 54 6f 6b 65 | 6e 45 78 00 8a 02 00 00 |cateToke|nEx.....|
|00001d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001da0| 80 18 00 16 45 6c 66 42 | 61 63 6b 75 70 45 76 65 |....ElfB|ackupEve|
|00001db0| 6e 74 4c 6f 67 46 69 6c | 65 41 00 88 3f 00 80 a0 |ntLogFil|eA..?...|
|00001dc0| 01 00 19 5f 45 6c 66 42 | 61 63 6b 75 70 45 76 65 |..._ElfB|ackupEve|
|00001dd0| 6e 74 4c 6f 67 46 69 6c | 65 41 40 38 08 41 44 56 |ntLogFil|eA@8.ADV|
|00001de0| 41 50 49 33 32 16 45 6c | 66 42 61 63 6b 75 70 45 |API32.El|fBackupE|
|00001df0| 76 65 6e 74 4c 6f 67 46 | 69 6c 65 41 00 8a 02 00 |ventLogF|ileA....|
|00001e00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001e10| 80 18 00 16 45 6c 66 42 | 61 63 6b 75 70 45 76 65 |....ElfB|ackupEve|
|00001e20| 6e 74 4c 6f 67 46 69 6c | 65 57 00 88 3f 00 80 a0 |ntLogFil|eW..?...|
|00001e30| 01 00 19 5f 45 6c 66 42 | 61 63 6b 75 70 45 76 65 |..._ElfB|ackupEve|
|00001e40| 6e 74 4c 6f 67 46 69 6c | 65 57 40 38 08 41 44 56 |ntLogFil|eW@8.ADV|
|00001e50| 41 50 49 33 32 16 45 6c | 66 42 61 63 6b 75 70 45 |API32.El|fBackupE|
|00001e60| 76 65 6e 74 4c 6f 67 46 | 69 6c 65 57 00 8a 02 00 |ventLogF|ileW....|
|00001e70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001e80| 80 11 00 0f 45 6c 66 43 | 68 61 6e 67 65 4e 6f 74 |....ElfC|hangeNot|
|00001e90| 69 66 79 00 88 31 00 80 | a0 01 00 12 5f 45 6c 66 |ify..1..|...._Elf|
|00001ea0| 43 68 61 6e 67 65 4e 6f | 74 69 66 79 40 38 08 41 |ChangeNo|tify@8.A|
|00001eb0| 44 56 41 50 49 33 32 0f | 45 6c 66 43 68 61 6e 67 |DVAPI32.|ElfChang|
|00001ec0| 65 4e 6f 74 69 66 79 00 | 8a 02 00 00 00 00 00 00 |eNotify.|........|
|00001ed0| 80 17 00 15 45 6c 66 43 | 6c 65 61 72 45 76 65 6e |....ElfC|learEven|
|00001ee0| 74 4c 6f 67 46 69 6c 65 | 41 00 88 3d 00 80 a0 01 |tLogFile|A..=....|
|00001ef0| 00 18 5f 45 6c 66 43 6c | 65 61 72 45 76 65 6e 74 |.._ElfCl|earEvent|
|00001f00| 4c 6f 67 46 69 6c 65 41 | 40 38 08 41 44 56 41 50 |LogFileA|@8.ADVAP|
|00001f10| 49 33 32 15 45 6c 66 43 | 6c 65 61 72 45 76 65 6e |I32.ElfC|learEven|
|00001f20| 74 4c 6f 67 46 69 6c 65 | 41 00 8a 02 00 00 00 00 |tLogFile|A.......|
|00001f30| 80 17 00 15 45 6c 66 43 | 6c 65 61 72 45 76 65 6e |....ElfC|learEven|
|00001f40| 74 4c 6f 67 46 69 6c 65 | 57 00 88 3d 00 80 a0 01 |tLogFile|W..=....|
|00001f50| 00 18 5f 45 6c 66 43 6c | 65 61 72 45 76 65 6e 74 |.._ElfCl|earEvent|
|00001f60| 4c 6f 67 46 69 6c 65 57 | 40 38 08 41 44 56 41 50 |LogFileW|@8.ADVAP|
|00001f70| 49 33 32 15 45 6c 66 43 | 6c 65 61 72 45 76 65 6e |I32.ElfC|learEven|
|00001f80| 74 4c 6f 67 46 69 6c 65 | 57 00 8a 02 00 00 00 00 |tLogFile|W.......|
|00001f90| 80 12 00 10 45 6c 66 43 | 6c 6f 73 65 45 76 65 6e |....ElfC|loseEven|
|00001fa0| 74 4c 6f 67 00 88 33 00 | 80 a0 01 00 13 5f 45 6c |tLog..3.|....._El|
|00001fb0| 66 43 6c 6f 73 65 45 76 | 65 6e 74 4c 6f 67 40 34 |fCloseEv|entLog@4|
|00001fc0| 08 41 44 56 41 50 49 33 | 32 10 45 6c 66 43 6c 6f |.ADVAPI3|2.ElfClo|
|00001fd0| 73 65 45 76 65 6e 74 4c | 6f 67 00 8a 02 00 00 00 |seEventL|og......|
|00001fe0| 80 1a 00 18 45 6c 66 44 | 65 72 65 67 69 73 74 65 |....ElfD|eregiste|
|00001ff0| 72 45 76 65 6e 74 53 6f | 75 72 63 65 00 88 43 00 |rEventSo|urce..C.|
|00002000| 80 a0 01 00 1b 5f 45 6c | 66 44 65 72 65 67 69 73 |....._El|fDeregis|
|00002010| 74 65 72 45 76 65 6e 74 | 53 6f 75 72 63 65 40 34 |terEvent|Source@4|
|00002020| 08 41 44 56 41 50 49 33 | 32 18 45 6c 66 44 65 72 |.ADVAPI3|2.ElfDer|
|00002030| 65 67 69 73 74 65 72 45 | 76 65 6e 74 53 6f 75 72 |egisterE|ventSour|
|00002040| 63 65 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |ce......|........|
|00002050| 80 14 00 12 45 6c 66 4e | 75 6d 62 65 72 4f 66 52 |....ElfN|umberOfR|
|00002060| 65 63 6f 72 64 73 00 88 | 37 00 80 a0 01 00 15 5f |ecords..|7......_|
|00002070| 45 6c 66 4e 75 6d 62 65 | 72 4f 66 52 65 63 6f 72 |ElfNumbe|rOfRecor|
|00002080| 64 73 40 38 08 41 44 56 | 41 50 49 33 32 12 45 6c |ds@8.ADV|API32.El|
|00002090| 66 4e 75 6d 62 65 72 4f | 66 52 65 63 6f 72 64 73 |fNumberO|fRecords|
|000020a0| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000020b0| 80 11 00 0f 45 6c 66 4f | 6c 64 65 73 74 52 65 63 |....ElfO|ldestRec|
|000020c0| 6f 72 64 00 88 31 00 80 | a0 01 00 12 5f 45 6c 66 |ord..1..|...._Elf|
|000020d0| 4f 6c 64 65 73 74 52 65 | 63 6f 72 64 40 38 08 41 |OldestRe|cord@8.A|
|000020e0| 44 56 41 50 49 33 32 0f | 45 6c 66 4f 6c 64 65 73 |DVAPI32.|ElfOldes|
|000020f0| 74 52 65 63 6f 72 64 00 | 8a 02 00 00 00 00 00 00 |tRecord.|........|
|00002100| 80 18 00 16 45 6c 66 4f | 70 65 6e 42 61 63 6b 75 |....ElfO|penBacku|
|00002110| 70 45 76 65 6e 74 4c 6f | 67 41 00 88 40 00 80 a0 |pEventLo|gA..@...|
|00002120| 01 00 1a 5f 45 6c 66 4f | 70 65 6e 42 61 63 6b 75 |..._ElfO|penBacku|
|00002130| 70 45 76 65 6e 74 4c 6f | 67 41 40 31 32 08 41 44 |pEventLo|gA@12.AD|
|00002140| 56 41 50 49 33 32 16 45 | 6c 66 4f 70 65 6e 42 61 |VAPI32.E|lfOpenBa|
|00002150| 63 6b 75 70 45 76 65 6e | 74 4c 6f 67 41 00 8a 02 |ckupEven|tLogA...|
|00002160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002170| 80 18 00 16 45 6c 66 4f | 70 65 6e 42 61 63 6b 75 |....ElfO|penBacku|
|00002180| 70 45 76 65 6e 74 4c 6f | 67 57 00 88 40 00 80 a0 |pEventLo|gW..@...|
|00002190| 01 00 1a 5f 45 6c 66 4f | 70 65 6e 42 61 63 6b 75 |..._ElfO|penBacku|
|000021a0| 70 45 76 65 6e 74 4c 6f | 67 57 40 31 32 08 41 44 |pEventLo|gW@12.AD|
|000021b0| 56 41 50 49 33 32 16 45 | 6c 66 4f 70 65 6e 42 61 |VAPI32.E|lfOpenBa|
|000021c0| 63 6b 75 70 45 76 65 6e | 74 4c 6f 67 57 00 8a 02 |ckupEven|tLogW...|
|000021d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021e0| 80 12 00 10 45 6c 66 4f | 70 65 6e 45 76 65 6e 74 |....ElfO|penEvent|
|000021f0| 4c 6f 67 41 00 88 34 00 | 80 a0 01 00 14 5f 45 6c |LogA..4.|....._El|
|00002200| 66 4f 70 65 6e 45 76 65 | 6e 74 4c 6f 67 41 40 31 |fOpenEve|ntLogA@1|
|00002210| 32 08 41 44 56 41 50 49 | 33 32 10 45 6c 66 4f 70 |2.ADVAPI|32.ElfOp|
|00002220| 65 6e 45 76 65 6e 74 4c | 6f 67 41 00 8a 02 00 00 |enEventL|ogA.....|
|00002230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002240| 80 12 00 10 45 6c 66 4f | 70 65 6e 45 76 65 6e 74 |....ElfO|penEvent|
|00002250| 4c 6f 67 57 00 88 34 00 | 80 a0 01 00 14 5f 45 6c |LogW..4.|....._El|
|00002260| 66 4f 70 65 6e 45 76 65 | 6e 74 4c 6f 67 57 40 31 |fOpenEve|ntLogW@1|
|00002270| 32 08 41 44 56 41 50 49 | 33 32 10 45 6c 66 4f 70 |2.ADVAPI|32.ElfOp|
|00002280| 65 6e 45 76 65 6e 74 4c | 6f 67 57 00 8a 02 00 00 |enEventL|ogW.....|
|00002290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000022a0| 80 12 00 10 45 6c 66 52 | 65 61 64 45 76 65 6e 74 |....ElfR|eadEvent|
|000022b0| 4c 6f 67 41 00 88 34 00 | 80 a0 01 00 14 5f 45 6c |LogA..4.|....._El|
|000022c0| 66 52 65 61 64 45 76 65 | 6e 74 4c 6f 67 41 40 32 |fReadEve|ntLogA@2|
|000022d0| 38 08 41 44 56 41 50 49 | 33 32 10 45 6c 66 52 65 |8.ADVAPI|32.ElfRe|
|000022e0| 61 64 45 76 65 6e 74 4c | 6f 67 41 00 8a 02 00 00 |adEventL|ogA.....|
|000022f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002300| 80 12 00 10 45 6c 66 52 | 65 61 64 45 76 65 6e 74 |....ElfR|eadEvent|
|00002310| 4c 6f 67 57 00 88 34 00 | 80 a0 01 00 14 5f 45 6c |LogW..4.|....._El|
|00002320| 66 52 65 61 64 45 76 65 | 6e 74 4c 6f 67 57 40 32 |fReadEve|ntLogW@2|
|00002330| 38 08 41 44 56 41 50 49 | 33 32 10 45 6c 66 52 65 |8.ADVAPI|32.ElfRe|
|00002340| 61 64 45 76 65 6e 74 4c | 6f 67 57 00 8a 02 00 00 |adEventL|ogW.....|
|00002350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002360| 80 19 00 17 45 6c 66 52 | 65 67 69 73 74 65 72 45 |....ElfR|egisterE|
|00002370| 76 65 6e 74 53 6f 75 72 | 63 65 41 00 88 42 00 80 |ventSour|ceA..B..|
|00002380| a0 01 00 1b 5f 45 6c 66 | 52 65 67 69 73 74 65 72 |...._Elf|Register|
|00002390| 45 76 65 6e 74 53 6f 75 | 72 63 65 41 40 31 32 08 |EventSou|rceA@12.|
|000023a0| 41 44 56 41 50 49 33 32 | 17 45 6c 66 52 65 67 69 |ADVAPI32|.ElfRegi|
|000023b0| 73 74 65 72 45 76 65 6e | 74 53 6f 75 72 63 65 41 |sterEven|tSourceA|
|000023c0| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000023d0| 80 19 00 17 45 6c 66 52 | 65 67 69 73 74 65 72 45 |....ElfR|egisterE|
|000023e0| 76 65 6e 74 53 6f 75 72 | 63 65 57 00 88 42 00 80 |ventSour|ceW..B..|
|000023f0| a0 01 00 1b 5f 45 6c 66 | 52 65 67 69 73 74 65 72 |...._Elf|Register|
|00002400| 45 76 65 6e 74 53 6f 75 | 72 63 65 57 40 31 32 08 |EventSou|rceW@12.|
|00002410| 41 44 56 41 50 49 33 32 | 17 45 6c 66 52 65 67 69 |ADVAPI32|.ElfRegi|
|00002420| 73 74 65 72 45 76 65 6e | 74 53 6f 75 72 63 65 57 |sterEven|tSourceW|
|00002430| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002440| 80 11 00 0f 45 6c 66 52 | 65 70 6f 72 74 45 76 65 |....ElfR|eportEve|
|00002450| 6e 74 41 00 88 32 00 80 | a0 01 00 13 5f 45 6c 66 |ntA..2..|...._Elf|
|00002460| 52 65 70 6f 72 74 45 76 | 65 6e 74 41 40 34 38 08 |ReportEv|entA@48.|
|00002470| 41 44 56 41 50 49 33 32 | 0f 45 6c 66 52 65 70 6f |ADVAPI32|.ElfRepo|
|00002480| 72 74 45 76 65 6e 74 41 | 00 8a 02 00 00 00 00 00 |rtEventA|........|
|00002490| 80 11 00 0f 45 6c 66 52 | 65 70 6f 72 74 45 76 65 |....ElfR|eportEve|
|000024a0| 6e 74 57 00 88 32 00 80 | a0 01 00 13 5f 45 6c 66 |ntW..2..|...._Elf|
|000024b0| 52 65 70 6f 72 74 45 76 | 65 6e 74 57 40 34 38 08 |ReportEv|entW@48.|
|000024c0| 41 44 56 41 50 49 33 32 | 0f 45 6c 66 52 65 70 6f |ADVAPI32|.ElfRepo|
|000024d0| 72 74 45 76 65 6e 74 57 | 00 8a 02 00 00 00 00 00 |rtEventW|........|
|000024e0| 80 18 00 16 45 6e 75 6d | 44 65 70 65 6e 64 65 6e |....Enum|Dependen|
|000024f0| 74 53 65 72 76 69 63 65 | 73 41 00 88 40 00 80 a0 |tService|sA..@...|
|00002500| 01 00 1a 5f 45 6e 75 6d | 44 65 70 65 6e 64 65 6e |..._Enum|Dependen|
|00002510| 74 53 65 72 76 69 63 65 | 73 41 40 32 34 08 41 44 |tService|sA@24.AD|
|00002520| 56 41 50 49 33 32 16 45 | 6e 75 6d 44 65 70 65 6e |VAPI32.E|numDepen|
|00002530| 64 65 6e 74 53 65 72 76 | 69 63 65 73 41 00 8a 02 |dentServ|icesA...|
|00002540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002550| 80 18 00 16 45 6e 75 6d | 44 65 70 65 6e 64 65 6e |....Enum|Dependen|
|00002560| 74 53 65 72 76 69 63 65 | 73 57 00 88 40 00 80 a0 |tService|sW..@...|
|00002570| 01 00 1a 5f 45 6e 75 6d | 44 65 70 65 6e 64 65 6e |..._Enum|Dependen|
|00002580| 74 53 65 72 76 69 63 65 | 73 57 40 32 34 08 41 44 |tService|sW@24.AD|
|00002590| 56 41 50 49 33 32 16 45 | 6e 75 6d 44 65 70 65 6e |VAPI32.E|numDepen|
|000025a0| 64 65 6e 74 53 65 72 76 | 69 63 65 73 57 00 8a 02 |dentServ|icesW...|
|000025b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000025c0| 80 13 00 11 45 6e 75 6d | 53 65 72 76 69 63 65 47 |....Enum|ServiceG|
|000025d0| 72 6f 75 70 57 00 88 36 | 00 80 a0 01 00 15 5f 45 |roupW..6|......_E|
|000025e0| 6e 75 6d 53 65 72 76 69 | 63 65 47 72 6f 75 70 57 |numServi|ceGroupW|
|000025f0| 40 33 36 08 41 44 56 41 | 50 49 33 32 11 45 6e 75 |@36.ADVA|PI32.Enu|
|00002600| 6d 53 65 72 76 69 63 65 | 47 72 6f 75 70 57 00 8a |mService|GroupW..|
|00002610| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002620| 80 15 00 13 45 6e 75 6d | 53 65 72 76 69 63 65 73 |....Enum|Services|
|00002630| 53 74 61 74 75 73 41 00 | 88 3a 00 80 a0 01 00 17 |StatusA.|.:......|
|00002640| 5f 45 6e 75 6d 53 65 72 | 76 69 63 65 73 53 74 61 |_EnumSer|vicesSta|
|00002650| 74 75 73 41 40 33 32 08 | 41 44 56 41 50 49 33 32 |tusA@32.|ADVAPI32|
|00002660| 13 45 6e 75 6d 53 65 72 | 76 69 63 65 73 53 74 61 |.EnumSer|vicesSta|
|00002670| 74 75 73 41 00 8a 02 00 | 00 00 00 00 00 00 00 00 |tusA....|........|
|00002680| 80 15 00 13 45 6e 75 6d | 53 65 72 76 69 63 65 73 |....Enum|Services|
|00002690| 53 74 61 74 75 73 57 00 | 88 3a 00 80 a0 01 00 17 |StatusW.|.:......|
|000026a0| 5f 45 6e 75 6d 53 65 72 | 76 69 63 65 73 53 74 61 |_EnumSer|vicesSta|
|000026b0| 74 75 73 57 40 33 32 08 | 41 44 56 41 50 49 33 32 |tusW@32.|ADVAPI32|
|000026c0| 13 45 6e 75 6d 53 65 72 | 76 69 63 65 73 53 74 61 |.EnumSer|vicesSta|
|000026d0| 74 75 73 57 00 8a 02 00 | 00 00 00 00 00 00 00 00 |tusW....|........|
|000026e0| 80 10 00 0e 45 71 75 61 | 6c 50 72 65 66 69 78 53 |....Equa|lPrefixS|
|000026f0| 69 64 00 88 2f 00 80 a0 | 01 00 11 5f 45 71 75 61 |id../...|..._Equa|
|00002700| 6c 50 72 65 66 69 78 53 | 69 64 40 38 08 41 44 56 |lPrefixS|id@8.ADV|
|00002710| 41 50 49 33 32 0e 45 71 | 75 61 6c 50 72 65 66 69 |API32.Eq|ualPrefi|
|00002720| 78 53 69 64 00 8a 02 00 | 00 00 00 00 00 00 00 00 |xSid....|........|
|00002730| 80 0a 00 08 45 71 75 61 | 6c 53 69 64 00 88 23 00 |....Equa|lSid..#.|
|00002740| 80 a0 01 00 0b 5f 45 71 | 75 61 6c 53 69 64 40 38 |....._Eq|ualSid@8|
|00002750| 08 41 44 56 41 50 49 33 | 32 08 45 71 75 61 6c 53 |.ADVAPI3|2.EqualS|
|00002760| 69 64 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |id......|........|
|00002770| 80 12 00 10 46 69 6e 64 | 46 69 72 73 74 46 72 65 |....Find|FirstFre|
|00002780| 65 41 63 65 00 88 33 00 | 80 a0 01 00 13 5f 46 69 |eAce..3.|....._Fi|
|00002790| 6e 64 46 69 72 73 74 46 | 72 65 65 41 63 65 40 38 |ndFirstF|reeAce@8|
|000027a0| 08 41 44 56 41 50 49 33 | 32 10 46 69 6e 64 46 69 |.ADVAPI3|2.FindFi|
|000027b0| 72 73 74 46 72 65 65 41 | 63 65 00 8a 02 00 00 00 |rstFreeA|ce......|
|000027c0| 80 09 00 07 46 72 65 65 | 53 69 64 00 88 21 00 80 |....Free|Sid..!..|
|000027d0| a0 01 00 0a 5f 46 72 65 | 65 53 69 64 40 34 08 41 |...._Fre|eSid@4.A|
|000027e0| 44 56 41 50 49 33 32 07 | 46 72 65 65 53 69 64 00 |DVAPI32.|FreeSid.|
|000027f0| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002800| 80 08 00 06 47 65 74 41 | 63 65 00 88 20 00 80 a0 |....GetA|ce.. ...|
|00002810| 01 00 0a 5f 47 65 74 41 | 63 65 40 31 32 08 41 44 |..._GetA|ce@12.AD|
|00002820| 56 41 50 49 33 32 06 47 | 65 74 41 63 65 00 8a 02 |VAPI32.G|etAce...|
|00002830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002840| 80 13 00 11 47 65 74 41 | 63 6c 49 6e 66 6f 72 6d |....GetA|clInform|
|00002850| 61 74 69 6f 6e 00 88 36 | 00 80 a0 01 00 15 5f 47 |ation..6|......_G|
|00002860| 65 74 41 63 6c 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |etAclInf|ormation|
|00002870| 40 31 36 08 41 44 56 41 | 50 49 33 32 11 47 65 74 |@16.ADVA|PI32.Get|
|00002880| 41 63 6c 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 00 8a |AclInfor|mation..|
|00002890| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000028a0| 80 1f 00 1d 47 65 74 41 | 75 64 69 74 65 64 50 65 |....GetA|uditedPe|
|000028b0| 72 6d 69 73 73 69 6f 6e | 73 46 72 6f 6d 41 63 6c |rmission|sFromAcl|
|000028c0| 41 00 88 4e 00 80 a0 01 | 00 21 5f 47 65 74 41 75 |A..N....|.!_GetAu|
|000028d0| 64 69 74 65 64 50 65 72 | 6d 69 73 73 69 6f 6e 73 |ditedPer|missions|
|000028e0| 46 72 6f 6d 41 63 6c 41 | 40 31 36 08 41 44 56 41 |FromAclA|@16.ADVA|
|000028f0| 50 49 33 32 1d 47 65 74 | 41 75 64 69 74 65 64 50 |PI32.Get|AuditedP|
|00002900| 65 72 6d 69 73 73 69 6f | 6e 73 46 72 6f 6d 41 63 |ermissio|nsFromAc|
|00002910| 6c 41 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |lA......|........|
|00002920| 80 1f 00 1d 47 65 74 41 | 75 64 69 74 65 64 50 65 |....GetA|uditedPe|
|00002930| 72 6d 69 73 73 69 6f 6e | 73 46 72 6f 6d 41 63 6c |rmission|sFromAcl|
|00002940| 57 00 88 4e 00 80 a0 01 | 00 21 5f 47 65 74 41 75 |W..N....|.!_GetAu|
|00002950| 64 69 74 65 64 50 65 72 | 6d 69 73 73 69 6f 6e 73 |ditedPer|missions|
|00002960| 46 72 6f 6d 41 63 6c 57 | 40 31 36 08 41 44 56 41 |FromAclW|@16.ADVA|
|00002970| 50 49 33 32 1d 47 65 74 | 41 75 64 69 74 65 64 50 |PI32.Get|AuditedP|
|00002980| 65 72 6d 69 73 73 69 6f | 6e 73 46 72 6f 6d 41 63 |ermissio|nsFromAc|
|00002990| 6c 57 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |lW......|........|
|000029a0| 80 1e 00 1c 47 65 74 41 | 75 64 69 74 65 64 50 65 |....GetA|uditedPe|
|000029b0| 72 6d 69 73 73 69 6f 6e | 73 46 72 6f 6d 53 44 41 |rmission|sFromSDA|
|000029c0| 00 88 4c 00 80 a0 01 00 | 20 5f 47 65 74 41 75 64 |..L.....| _GetAud|
|000029d0| 69 74 65 64 50 65 72 6d | 69 73 73 69 6f 6e 73 46 |itedPerm|issionsF|
|000029e0| 72 6f 6d 53 44 41 40 31 | 36 08 41 44 56 41 50 49 |romSDA@1|6.ADVAPI|
|000029f0| 33 32 1c 47 65 74 41 75 | 64 69 74 65 64 50 65 72 |32.GetAu|ditedPer|
|00002a00| 6d 69 73 73 69 6f 6e 73 | 46 72 6f 6d 53 44 41 00 |missions|FromSDA.|
|00002a10| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a20| 80 1e 00 1c 47 65 74 41 | 75 64 69 74 65 64 50 65 |....GetA|uditedPe|
|00002a30| 72 6d 69 73 73 69 6f 6e | 73 46 72 6f 6d 53 44 57 |rmission|sFromSDW|
|00002a40| 00 88 4c 00 80 a0 01 00 | 20 5f 47 65 74 41 75 64 |..L.....| _GetAud|
|00002a50| 69 74 65 64 50 65 72 6d | 69 73 73 69 6f 6e 73 46 |itedPerm|issionsF|
|00002a60| 72 6f 6d 53 44 57 40 31 | 36 08 41 44 56 41 50 49 |romSDW@1|6.ADVAPI|
|00002a70| 33 32 1c 47 65 74 41 75 | 64 69 74 65 64 50 65 72 |32.GetAu|ditedPer|
|00002a80| 6d 69 73 73 69 6f 6e 73 | 46 72 6f 6d 53 44 57 00 |missions|FromSDW.|
|00002a90| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002aa0| 80 16 00 14 47 65 74 43 | 75 72 72 65 6e 74 48 77 |....GetC|urrentHw|
|00002ab0| 50 72 6f 66 69 6c 65 41 | 00 88 3b 00 80 a0 01 00 |ProfileA|..;.....|
|00002ac0| 17 5f 47 65 74 43 75 72 | 72 65 6e 74 48 77 50 72 |._GetCur|rentHwPr|
|00002ad0| 6f 66 69 6c 65 41 40 34 | 08 41 44 56 41 50 49 33 |ofileA@4|.ADVAPI3|
|00002ae0| 32 14 47 65 74 43 75 72 | 72 65 6e 74 48 77 50 72 |2.GetCur|rentHwPr|
|00002af0| 6f 66 69 6c 65 41 00 8a | 02 00 00 00 00 00 00 00 |ofileA..|........|
|00002b00| 80 16 00 14 47 65 74 43 | 75 72 72 65 6e 74 48 77 |....GetC|urrentHw|
|00002b10| 50 72 6f 66 69 6c 65 57 | 00 88 3b 00 80 a0 01 00 |ProfileW|..;.....|
|00002b20| 17 5f 47 65 74 43 75 72 | 72 65 6e 74 48 77 50 72 |._GetCur|rentHwPr|
|00002b30| 6f 66 69 6c 65 57 40 34 | 08 41 44 56 41 50 49 33 |ofileW@4|.ADVAPI3|
|00002b40| 32 14 47 65 74 43 75 72 | 72 65 6e 74 48 77 50 72 |2.GetCur|rentHwPr|
|00002b50| 6f 66 69 6c 65 57 00 8a | 02 00 00 00 00 00 00 00 |ofileW..|........|
|00002b60| 80 1b 00 19 47 65 74 45 | 66 66 65 63 74 69 76 65 |....GetE|ffective|
|00002b70| 41 63 63 65 73 73 52 69 | 67 68 74 73 41 00 88 46 |AccessRi|ghtsA..F|
|00002b80| 00 80 a0 01 00 1d 5f 47 | 65 74 45 66 66 65 63 74 |......_G|etEffect|
|00002b90| 69 76 65 41 63 63 65 73 | 73 52 69 67 68 74 73 41 |iveAcces|sRightsA|
|00002ba0| 40 31 36 08 41 44 56 41 | 50 49 33 32 19 47 65 74 |@16.ADVA|PI32.Get|
|00002bb0| 45 66 66 65 63 74 69 76 | 65 41 63 63 65 73 73 52 |Effectiv|eAccessR|
|00002bc0| 69 67 68 74 73 41 00 8a | 02 00 00 00 00 00 00 00 |ightsA..|........|
|00002bd0| 80 1b 00 19 47 65 74 45 | 66 66 65 63 74 69 76 65 |....GetE|ffective|
|00002be0| 41 63 63 65 73 73 52 69 | 67 68 74 73 57 00 88 46 |AccessRi|ghtsW..F|
|00002bf0| 00 80 a0 01 00 1d 5f 47 | 65 74 45 66 66 65 63 74 |......_G|etEffect|
|00002c00| 69 76 65 41 63 63 65 73 | 73 52 69 67 68 74 73 57 |iveAcces|sRightsW|
|00002c10| 40 31 36 08 41 44 56 41 | 50 49 33 32 19 47 65 74 |@16.ADVA|PI32.Get|
|00002c20| 45 66 66 65 63 74 69 76 | 65 41 63 63 65 73 73 52 |Effectiv|eAccessR|
|00002c30| 69 67 68 74 73 57 00 8a | 02 00 00 00 00 00 00 00 |ightsW..|........|
|00002c40| 80 1c 00 1a 47 65 74 45 | 66 66 65 63 74 69 76 65 |....GetE|ffective|
|00002c50| 52 69 67 68 74 73 46 72 | 6f 6d 41 63 6c 41 00 88 |RightsFr|omAclA..|
|00002c60| 48 00 80 a0 01 00 1e 5f | 47 65 74 45 66 66 65 63 |H......_|GetEffec|
|00002c70| 74 69 76 65 52 69 67 68 | 74 73 46 72 6f 6d 41 63 |tiveRigh|tsFromAc|
|00002c80| 6c 41 40 31 32 08 41 44 | 56 41 50 49 33 32 1a 47 |lA@12.AD|VAPI32.G|
|00002c90| 65 74 45 66 66 65 63 74 | 69 76 65 52 69 67 68 74 |etEffect|iveRight|
|00002ca0| 73 46 72 6f 6d 41 63 6c | 41 00 8a 02 00 00 00 00 |sFromAcl|A.......|
|00002cb0| 80 1c 00 1a 47 65 74 45 | 66 66 65 63 74 69 76 65 |....GetE|ffective|
|00002cc0| 52 69 67 68 74 73 46 72 | 6f 6d 41 63 6c 57 00 88 |RightsFr|omAclW..|
|00002cd0| 48 00 80 a0 01 00 1e 5f | 47 65 74 45 66 66 65 63 |H......_|GetEffec|
|00002ce0| 74 69 76 65 52 69 67 68 | 74 73 46 72 6f 6d 41 63 |tiveRigh|tsFromAc|
|00002cf0| 6c 57 40 31 32 08 41 44 | 56 41 50 49 33 32 1a 47 |lW@12.AD|VAPI32.G|
|00002d00| 65 74 45 66 66 65 63 74 | 69 76 65 52 69 67 68 74 |etEffect|iveRight|
|00002d10| 73 46 72 6f 6d 41 63 6c | 57 00 8a 02 00 00 00 00 |sFromAcl|W.......|
|00002d20| 80 1b 00 19 47 65 74 45 | 66 66 65 63 74 69 76 65 |....GetE|ffective|
|00002d30| 52 69 67 68 74 73 46 72 | 6f 6d 53 44 41 00 88 46 |RightsFr|omSDA..F|
|00002d40| 00 80 a0 01 00 1d 5f 47 | 65 74 45 66 66 65 63 74 |......_G|etEffect|
|00002d50| 69 76 65 52 69 67 68 74 | 73 46 72 6f 6d 53 44 41 |iveRight|sFromSDA|
|00002d60| 40 31 32 08 41 44 56 41 | 50 49 33 32 19 47 65 74 |@12.ADVA|PI32.Get|
|00002d70| 45 66 66 65 63 74 69 76 | 65 52 69 67 68 74 73 46 |Effectiv|eRightsF|
|00002d80| 72 6f 6d 53 44 41 00 8a | 02 00 00 00 00 00 00 00 |romSDA..|........|
|00002d90| 80 1b 00 19 47 65 74 45 | 66 66 65 63 74 69 76 65 |....GetE|ffective|
|00002da0| 52 69 67 68 74 73 46 72 | 6f 6d 53 44 57 00 88 46 |RightsFr|omSDW..F|
|00002db0| 00 80 a0 01 00 1d 5f 47 | 65 74 45 66 66 65 63 74 |......_G|etEffect|
|00002dc0| 69 76 65 52 69 67 68 74 | 73 46 72 6f 6d 53 44 57 |iveRight|sFromSDW|
|00002dd0| 40 31 32 08 41 44 56 41 | 50 49 33 32 19 47 65 74 |@12.ADVA|PI32.Get|
|00002de0| 45 66 66 65 63 74 69 76 | 65 52 69 67 68 74 73 46 |Effectiv|eRightsF|
|00002df0| 72 6f 6d 53 44 57 00 8a | 02 00 00 00 00 00 00 00 |romSDW..|........|
|00002e00| 80 1a 00 18 47 65 74 45 | 78 70 6c 69 63 69 74 41 |....GetE|xplicitA|
|00002e10| 63 63 65 73 73 52 69 67 | 68 74 73 41 00 88 44 00 |ccessRig|htsA..D.|
|00002e20| 80 a0 01 00 1c 5f 47 65 | 74 45 78 70 6c 69 63 69 |....._Ge|tExplici|
|00002e30| 74 41 63 63 65 73 73 52 | 69 67 68 74 73 41 40 31 |tAccessR|ightsA@1|
|00002e40| 36 08 41 44 56 41 50 49 | 33 32 18 47 65 74 45 78 |6.ADVAPI|32.GetEx|
|00002e50| 70 6c 69 63 69 74 41 63 | 63 65 73 73 52 69 67 68 |plicitAc|cessRigh|
|00002e60| 74 73 41 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |tsA.....|........|
|00002e70| 80 1a 00 18 47 65 74 45 | 78 70 6c 69 63 69 74 41 |....GetE|xplicitA|
|00002e80| 63 63 65 73 73 52 69 67 | 68 74 73 57 00 88 44 00 |ccessRig|htsW..D.|
|00002e90| 80 a0 01 00 1c 5f 47 65 | 74 45 78 70 6c 69 63 69 |....._Ge|tExplici|
|00002ea0| 74 41 63 63 65 73 73 52 | 69 67 68 74 73 57 40 31 |tAccessR|ightsW@1|
|00002eb0| 36 08 41 44 56 41 50 49 | 33 32 18 47 65 74 45 78 |6.ADVAPI|32.GetEx|
|00002ec0| 70 6c 69 63 69 74 41 63 | 63 65 73 73 52 69 67 68 |plicitAc|cessRigh|
|00002ed0| 74 73 57 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |tsW.....|........|
|00002ee0| 80 1c 00 1a 47 65 74 45 | 78 70 6c 69 63 69 74 45 |....GetE|xplicitE|
|00002ef0| 6e 74 72 69 65 73 46 72 | 6f 6d 41 63 6c 41 00 88 |ntriesFr|omAclA..|
|00002f00| 48 00 80 a0 01 00 1e 5f | 47 65 74 45 78 70 6c 69 |H......_|GetExpli|
|00002f10| 63 69 74 45 6e 74 72 69 | 65 73 46 72 6f 6d 41 63 |citEntri|esFromAc|
|00002f20| 6c 41 40 31 32 08 41 44 | 56 41 50 49 33 32 1a 47 |lA@12.AD|VAPI32.G|
|00002f30| 65 74 45 78 70 6c 69 63 | 69 74 45 6e 74 72 69 65 |etExplic|itEntrie|
|00002f40| 73 46 72 6f 6d 41 63 6c | 41 00 8a 02 00 00 00 00 |sFromAcl|A.......|
|00002f50| 80 1c 00 1a 47 65 74 45 | 78 70 6c 69 63 69 74 45 |....GetE|xplicitE|
|00002f60| 6e 74 72 69 65 73 46 72 | 6f 6d 41 63 6c 57 00 88 |ntriesFr|omAclW..|
|00002f70| 48 00 80 a0 01 00 1e 5f | 47 65 74 45 78 70 6c 69 |H......_|GetExpli|
|00002f80| 63 69 74 45 6e 74 72 69 | 65 73 46 72 6f 6d 41 63 |citEntri|esFromAc|
|00002f90| 6c 57 40 31 32 08 41 44 | 56 41 50 49 33 32 1a 47 |lW@12.AD|VAPI32.G|
|00002fa0| 65 74 45 78 70 6c 69 63 | 69 74 45 6e 74 72 69 65 |etExplic|itEntrie|
|00002fb0| 73 46 72 6f 6d 41 63 6c | 57 00 8a 02 00 00 00 00 |sFromAcl|W.......|
|00002fc0| 80 12 00 10 47 65 74 46 | 69 6c 65 53 65 63 75 72 |....GetF|ileSecur|
|00002fd0| 69 74 79 41 00 88 34 00 | 80 a0 01 00 14 5f 47 65 |ityA..4.|....._Ge|
|00002fe0| 74 46 69 6c 65 53 65 63 | 75 72 69 74 79 41 40 32 |tFileSec|urityA@2|
|00002ff0| 30 08 41 44 56 41 50 49 | 33 32 10 47 65 74 46 69 |0.ADVAPI|32.GetFi|
|00003000| 6c 65 53 65 63 75 72 69 | 74 79 41 00 8a 02 00 00 |leSecuri|tyA.....|
|00003010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003020| 80 12 00 10 47 65 74 46 | 69 6c 65 53 65 63 75 72 |....GetF|ileSecur|
|00003030| 69 74 79 57 00 88 34 00 | 80 a0 01 00 14 5f 47 65 |ityW..4.|....._Ge|
|00003040| 74 46 69 6c 65 53 65 63 | 75 72 69 74 79 57 40 32 |tFileSec|urityW@2|
|00003050| 30 08 41 44 56 41 50 49 | 33 32 10 47 65 74 46 69 |0.ADVAPI|32.GetFi|
|00003060| 6c 65 53 65 63 75 72 69 | 74 79 57 00 8a 02 00 00 |leSecuri|tyW.....|
|00003070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003080| 80 19 00 17 47 65 74 4b | 65 72 6e 65 6c 4f 62 6a |....GetK|ernelObj|
|00003090| 65 63 74 53 65 63 75 72 | 69 74 79 00 88 42 00 80 |ectSecur|ity..B..|
|000030a0| a0 01 00 1b 5f 47 65 74 | 4b 65 72 6e 65 6c 4f 62 |...._Get|KernelOb|
|000030b0| 6a 65 63 74 53 65 63 75 | 72 69 74 79 40 32 30 08 |jectSecu|rity@20.|
|000030c0| 41 44 56 41 50 49 33 32 | 17 47 65 74 4b 65 72 6e |ADVAPI32|.GetKern|
|000030d0| 65 6c 4f 62 6a 65 63 74 | 53 65 63 75 72 69 74 79 |elObject|Security|
|000030e0| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000030f0| 80 0e 00 0c 47 65 74 4c | 65 6e 67 74 68 53 69 64 |....GetL|engthSid|
|00003100| 00 88 2b 00 80 a0 01 00 | 0f 5f 47 65 74 4c 65 6e |..+.....|._GetLen|
|00003110| 67 74 68 53 69 64 40 34 | 08 41 44 56 41 50 49 33 |gthSid@4|.ADVAPI3|
|00003120| 32 0c 47 65 74 4c 65 6e | 67 74 68 53 69 64 00 8a |2.GetLen|gthSid..|
|00003130| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003140| 80 15 00 13 47 65 74 4d | 75 6c 74 69 70 6c 65 54 |....GetM|ultipleT|
|00003150| 72 75 73 74 65 65 41 00 | 88 39 00 80 a0 01 00 16 |rusteeA.|.9......|
|00003160| 5f 47 65 74 4d 75 6c 74 | 69 70 6c 65 54 72 75 73 |_GetMult|ipleTrus|
|00003170| 74 65 65 41 40 34 08 41 | 44 56 41 50 49 33 32 13 |teeA@4.A|DVAPI32.|
|00003180| 47 65 74 4d 75 6c 74 69 | 70 6c 65 54 72 75 73 74 |GetMulti|pleTrust|
|00003190| 65 65 41 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |eeA.....|........|
|000031a0| 80 1e 00 1c 47 65 74 4d | 75 6c 74 69 70 6c 65 54 |....GetM|ultipleT|
|000031b0| 72 75 73 74 65 65 4f 70 | 65 72 61 74 69 6f 6e 41 |rusteeOp|erationA|
|000031c0| 00 88 4b 00 80 a0 01 00 | 1f 5f 47 65 74 4d 75 6c |..K.....|._GetMul|
|000031d0| 74 69 70 6c 65 54 72 75 | 73 74 65 65 4f 70 65 72 |tipleTru|steeOper|
|000031e0| 61 74 69 6f 6e 41 40 34 | 08 41 44 56 41 50 49 33 |ationA@4|.ADVAPI3|
|000031f0| 32 1c 47 65 74 4d 75 6c | 74 69 70 6c 65 54 72 75 |2.GetMul|tipleTru|
|00003200| 73 74 65 65 4f 70 65 72 | 61 74 69 6f 6e 41 00 8a |steeOper|ationA..|
|00003210| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003220| 80 1e 00 1c 47 65 74 4d | 75 6c 74 69 70 6c 65 54 |....GetM|ultipleT|
|00003230| 72 75 73 74 65 65 4f 70 | 65 72 61 74 69 6f 6e 57 |rusteeOp|erationW|
|00003240| 00 88 4b 00 80 a0 01 00 | 1f 5f 47 65 74 4d 75 6c |..K.....|._GetMul|
|00003250| 74 69 70 6c 65 54 72 75 | 73 74 65 65 4f 70 65 72 |tipleTru|steeOper|
|00003260| 61 74 69 6f 6e 57 40 34 | 08 41 44 56 41 50 49 33 |ationW@4|.ADVAPI3|
|00003270| 32 1c 47 65 74 4d 75 6c | 74 69 70 6c 65 54 72 75 |2.GetMul|tipleTru|
|00003280| 73 74 65 65 4f 70 65 72 | 61 74 69 6f 6e 57 00 8a |steeOper|ationW..|
|00003290| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000032a0| 80 15 00 13 47 65 74 4d | 75 6c 74 69 70 6c 65 54 |....GetM|ultipleT|
|000032b0| 72 75 73 74 65 65 57 00 | 88 39 00 80 a0 01 00 16 |rusteeW.|.9......|
|000032c0| 5f 47 65 74 4d 75 6c 74 | 69 70 6c 65 54 72 75 73 |_GetMult|ipleTrus|
|000032d0| 74 65 65 57 40 34 08 41 | 44 56 41 50 49 33 32 13 |teeW@4.A|DVAPI32.|
|000032e0| 47 65 74 4d 75 6c 74 69 | 70 6c 65 54 72 75 73 74 |GetMulti|pleTrust|
|000032f0| 65 65 57 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |eeW.....|........|
|00003300| 80 17 00 15 47 65 74 4e | 61 6d 65 64 53 65 63 75 |....GetN|amedSecu|
|00003310| 72 69 74 79 49 6e 66 6f | 41 00 88 3e 00 80 a0 01 |rityInfo|A..>....|
|00003320| 00 19 5f 47 65 74 4e 61 | 6d 65 64 53 65 63 75 72 |.._GetNa|medSecur|
|00003330| 69 74 79 49 6e 66 6f 41 | 40 33 32 08 41 44 56 41 |ityInfoA|@32.ADVA|
|00003340| 50 49 33 32 15 47 65 74 | 4e 61 6d 65 64 53 65 63 |PI32.Get|NamedSec|
|00003350| 75 72 69 74 79 49 6e 66 | 6f 41 00 8a 02 00 00 00 |urityInf|oA......|
|00003360| 80 17 00 15 47 65 74 4e | 61 6d 65 64 53 65 63 75 |....GetN|amedSecu|
|00003370| 72 69 74 79 49 6e 66 6f | 57 00 88 3e 00 80 a0 01 |rityInfo|W..>....|
|00003380| 00 19 5f 47 65 74 4e 61 | 6d 65 64 53 65 63 75 72 |.._GetNa|medSecur|
|00003390| 69 74 79 49 6e 66 6f 57 | 40 33 32 08 41 44 56 41 |ityInfoW|@32.ADVA|
|000033a0| 50 49 33 32 15 47 65 74 | 4e 61 6d 65 64 53 65 63 |PI32.Get|NamedSec|
|000033b0| 75 72 69 74 79 49 6e 66 | 6f 57 00 8a 02 00 00 00 |urityInf|oW......|
|000033c0| 80 1c 00 1a 47 65 74 4e | 75 6d 62 65 72 4f 66 45 |....GetN|umberOfE|
|000033d0| 76 65 6e 74 4c 6f 67 52 | 65 63 6f 72 64 73 00 88 |ventLogR|ecords..|
|000033e0| 47 00 80 a0 01 00 1d 5f | 47 65 74 4e 75 6d 62 65 |G......_|GetNumbe|
|000033f0| 72 4f 66 45 76 65 6e 74 | 4c 6f 67 52 65 63 6f 72 |rOfEvent|LogRecor|
|00003400| 64 73 40 38 08 41 44 56 | 41 50 49 33 32 1a 47 65 |ds@8.ADV|API32.Ge|
|00003410| 74 4e 75 6d 62 65 72 4f | 66 45 76 65 6e 74 4c 6f |tNumberO|fEventLo|
|00003420| 67 52 65 63 6f 72 64 73 | 00 8a 02 00 00 00 00 00 |gRecords|........|
|00003430| 80 19 00 17 47 65 74 4f | 6c 64 65 73 74 45 76 65 |....GetO|ldestEve|
|00003440| 6e 74 4c 6f 67 52 65 63 | 6f 72 64 00 88 41 00 80 |ntLogRec|ord..A..|
|00003450| a0 01 00 1a 5f 47 65 74 | 4f 6c 64 65 73 74 45 76 |...._Get|OldestEv|
|00003460| 65 6e 74 4c 6f 67 52 65 | 63 6f 72 64 40 38 08 41 |entLogRe|cord@8.A|
|00003470| 44 56 41 50 49 33 32 17 | 47 65 74 4f 6c 64 65 73 |DVAPI32.|GetOldes|
|00003480| 74 45 76 65 6e 74 4c 6f | 67 52 65 63 6f 72 64 00 |tEventLo|gRecord.|
|00003490| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000034a0| 80 1a 00 18 47 65 74 50 | 72 69 76 61 74 65 4f 62 |....GetP|rivateOb|
|000034b0| 6a 65 63 74 53 65 63 75 | 72 69 74 79 00 88 44 00 |jectSecu|rity..D.|
|000034c0| 80 a0 01 00 1c 5f 47 65 | 74 50 72 69 76 61 74 65 |....._Ge|tPrivate|
|000034d0| 4f 62 6a 65 63 74 53 65 | 63 75 72 69 74 79 40 32 |ObjectSe|curity@2|
|000034e0| 30 08 41 44 56 41 50 49 | 33 32 18 47 65 74 50 72 |0.ADVAPI|32.GetPr|
|000034f0| 69 76 61 74 65 4f 62 6a | 65 63 74 53 65 63 75 72 |ivateObj|ectSecur|
|00003500| 69 74 79 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |ity.....|........|
|00003510| 80 1e 00 1c 47 65 74 53 | 65 63 75 72 69 74 79 44 |....GetS|ecurityD|
|00003520| 65 73 63 72 69 70 74 6f | 72 43 6f 6e 74 72 6f 6c |escripto|rControl|
|00003530| 00 88 4c 00 80 a0 01 00 | 20 5f 47 65 74 53 65 63 |..L.....| _GetSec|
|00003540| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 43 |urityDes|criptorC|
|00003550| 6f 6e 74 72 6f 6c 40 31 | 32 08 41 44 56 41 50 49 |ontrol@1|2.ADVAPI|
|00003560| 33 32 1c 47 65 74 53 65 | 63 75 72 69 74 79 44 65 |32.GetSe|curityDe|
|00003570| 73 63 72 69 70 74 6f 72 | 43 6f 6e 74 72 6f 6c 00 |scriptor|Control.|
|00003580| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003590| 80 1b 00 19 47 65 74 53 | 65 63 75 72 69 74 79 44 |....GetS|ecurityD|
|000035a0| 65 73 63 72 69 70 74 6f | 72 44 61 63 6c 00 88 46 |escripto|rDacl..F|
|000035b0| 00 80 a0 01 00 1d 5f 47 | 65 74 53 65 63 75 72 69 |......_G|etSecuri|
|000035c0| 74 79 44 65 73 63 72 69 | 70 74 6f 72 44 61 63 6c |tyDescri|ptorDacl|
|000035d0| 40 31 36 08 41 44 56 41 | 50 49 33 32 19 47 65 74 |@16.ADVA|PI32.Get|
|000035e0| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|000035f0| 6f 72 44 61 63 6c 00 8a | 02 00 00 00 00 00 00 00 |orDacl..|........|
|00003600| 80 1c 00 1a 47 65 74 53 | 65 63 75 72 69 74 79 44 |....GetS|ecurityD|
|00003610| 65 73 63 72 69 70 74 6f | 72 47 72 6f 75 70 00 88 |escripto|rGroup..|
|00003620| 48 00 80 a0 01 00 1e 5f | 47 65 74 53 65 63 75 72 |H......_|GetSecur|
|00003630| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 47 72 6f |ityDescr|iptorGro|
|00003640| 75 70 40 31 32 08 41 44 | 56 41 50 49 33 32 1a 47 |up@12.AD|VAPI32.G|
|00003650| 65 74 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |etSecuri|tyDescri|
|00003660| 70 74 6f 72 47 72 6f 75 | 70 00 8a 02 00 00 00 00 |ptorGrou|p.......|
|00003670| 80 1d 00 1b 47 65 74 53 | 65 63 75 72 69 74 79 44 |....GetS|ecurityD|
|00003680| 65 73 63 72 69 70 74 6f | 72 4c 65 6e 67 74 68 00 |escripto|rLength.|
|00003690| 88 49 00 80 a0 01 00 1e | 5f 47 65 74 53 65 63 75 |.I......|_GetSecu|
|000036a0| 72 69 74 79 44 65 73 63 | 72 69 70 74 6f 72 4c 65 |rityDesc|riptorLe|
|000036b0| 6e 67 74 68 40 34 08 41 | 44 56 41 50 49 33 32 1b |ngth@4.A|DVAPI32.|
|000036c0| 47 65 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |GetSecur|ityDescr|
|000036d0| 69 70 74 6f 72 4c 65 6e | 67 74 68 00 8a 02 00 00 |iptorLen|gth.....|
|000036e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000036f0| 80 1c 00 1a 47 65 74 53 | 65 63 75 72 69 74 79 44 |....GetS|ecurityD|
|00003700| 65 73 63 72 69 70 74 6f | 72 4f 77 6e 65 72 00 88 |escripto|rOwner..|
|00003710| 48 00 80 a0 01 00 1e 5f | 47 65 74 53 65 63 75 72 |H......_|GetSecur|
|00003720| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 4f 77 6e |ityDescr|iptorOwn|
|00003730| 65 72 40 31 32 08 41 44 | 56 41 50 49 33 32 1a 47 |er@12.AD|VAPI32.G|
|00003740| 65 74 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |etSecuri|tyDescri|
|00003750| 70 74 6f 72 4f 77 6e 65 | 72 00 8a 02 00 00 00 00 |ptorOwne|r.......|
|00003760| 80 1b 00 19 47 65 74 53 | 65 63 75 72 69 74 79 44 |....GetS|ecurityD|
|00003770| 65 73 63 72 69 70 74 6f | 72 53 61 63 6c 00 88 46 |escripto|rSacl..F|
|00003780| 00 80 a0 01 00 1d 5f 47 | 65 74 53 65 63 75 72 69 |......_G|etSecuri|
|00003790| 74 79 44 65 73 63 72 69 | 70 74 6f 72 53 61 63 6c |tyDescri|ptorSacl|
|000037a0| 40 31 36 08 41 44 56 41 | 50 49 33 32 19 47 65 74 |@16.ADVA|PI32.Get|
|000037b0| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|000037c0| 6f 72 53 61 63 6c 00 8a | 02 00 00 00 00 00 00 00 |orSacl..|........|
|000037d0| 80 11 00 0f 47 65 74 53 | 65 63 75 72 69 74 79 49 |....GetS|ecurityI|
|000037e0| 6e 66 6f 00 88 32 00 80 | a0 01 00 13 5f 47 65 74 |nfo..2..|...._Get|
|000037f0| 53 65 63 75 72 69 74 79 | 49 6e 66 6f 40 33 32 08 |Security|Info@32.|
|00003800| 41 44 56 41 50 49 33 32 | 0f 47 65 74 53 65 63 75 |ADVAPI32|.GetSecu|
|00003810| 72 69 74 79 49 6e 66 6f | 00 8a 02 00 00 00 00 00 |rityInfo|........|
|00003820| 80 18 00 16 47 65 74 53 | 65 72 76 69 63 65 44 69 |....GetS|erviceDi|
|00003830| 73 70 6c 61 79 4e 61 6d | 65 41 00 88 40 00 80 a0 |splayNam|eA..@...|
|00003840| 01 00 1a 5f 47 65 74 53 | 65 72 76 69 63 65 44 69 |..._GetS|erviceDi|
|00003850| 73 70 6c 61 79 4e 61 6d | 65 41 40 31 36 08 41 44 |splayNam|eA@16.AD|
|00003860| 56 41 50 49 33 32 16 47 | 65 74 53 65 72 76 69 63 |VAPI32.G|etServic|
|00003870| 65 44 69 73 70 6c 61 79 | 4e 61 6d 65 41 00 8a 02 |eDisplay|NameA...|
|00003880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003890| 80 18 00 16 47 65 74 53 | 65 72 76 69 63 65 44 69 |....GetS|erviceDi|
|000038a0| 73 70 6c 61 79 4e 61 6d | 65 57 00 88 40 00 80 a0 |splayNam|eW..@...|
|000038b0| 01 00 1a 5f 47 65 74 53 | 65 72 76 69 63 65 44 69 |..._GetS|erviceDi|
|000038c0| 73 70 6c 61 79 4e 61 6d | 65 57 40 31 36 08 41 44 |splayNam|eW@16.AD|
|000038d0| 56 41 50 49 33 32 16 47 | 65 74 53 65 72 76 69 63 |VAPI32.G|etServic|
|000038e0| 65 44 69 73 70 6c 61 79 | 4e 61 6d 65 57 00 8a 02 |eDisplay|NameW...|
|000038f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003900| 80 14 00 12 47 65 74 53 | 65 72 76 69 63 65 4b 65 |....GetS|erviceKe|
|00003910| 79 4e 61 6d 65 41 00 88 | 38 00 80 a0 01 00 16 5f |yNameA..|8......_|
|00003920| 47 65 74 53 65 72 76 69 | 63 65 4b 65 79 4e 61 6d |GetServi|ceKeyNam|
|00003930| 65 41 40 31 36 08 41 44 | 56 41 50 49 33 32 12 47 |eA@16.AD|VAPI32.G|
|00003940| 65 74 53 65 72 76 69 63 | 65 4b 65 79 4e 61 6d 65 |etServic|eKeyName|
|00003950| 41 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |A.......|........|
|00003960| 80 14 00 12 47 65 74 53 | 65 72 76 69 63 65 4b 65 |....GetS|erviceKe|
|00003970| 79 4e 61 6d 65 57 00 88 | 38 00 80 a0 01 00 16 5f |yNameW..|8......_|
|00003980| 47 65 74 53 65 72 76 69 | 63 65 4b 65 79 4e 61 6d |GetServi|ceKeyNam|
|00003990| 65 57 40 31 36 08 41 44 | 56 41 50 49 33 32 12 47 |eW@16.AD|VAPI32.G|
|000039a0| 65 74 53 65 72 76 69 63 | 65 4b 65 79 4e 61 6d 65 |etServic|eKeyName|
|000039b0| 57 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |W.......|........|
|000039c0| 80 1b 00 19 47 65 74 53 | 69 64 49 64 65 6e 74 69 |....GetS|idIdenti|
|000039d0| 66 69 65 72 41 75 74 68 | 6f 72 69 74 79 00 88 45 |fierAuth|ority..E|
|000039e0| 00 80 a0 01 00 1c 5f 47 | 65 74 53 69 64 49 64 65 |......_G|etSidIde|
|000039f0| 6e 74 69 66 69 65 72 41 | 75 74 68 6f 72 69 74 79 |ntifierA|uthority|
|00003a00| 40 34 08 41 44 56 41 50 | 49 33 32 19 47 65 74 53 |@4.ADVAP|I32.GetS|
|00003a10| 69 64 49 64 65 6e 74 69 | 66 69 65 72 41 75 74 68 |idIdenti|fierAuth|
|00003a20| 6f 72 69 74 79 00 8a 02 | 00 00 00 00 00 00 00 00 |ority...|........|
|00003a30| 80 16 00 14 47 65 74 53 | 69 64 4c 65 6e 67 74 68 |....GetS|idLength|
|00003a40| 52 65 71 75 69 72 65 64 | 00 88 3b 00 80 a0 01 00 |Required|..;.....|
|00003a50| 17 5f 47 65 74 53 69 64 | 4c 65 6e 67 74 68 52 65 |._GetSid|LengthRe|
|00003a60| 71 75 69 72 65 64 40 34 | 08 41 44 56 41 50 49 33 |quired@4|.ADVAPI3|
|00003a70| 32 14 47 65 74 53 69 64 | 4c 65 6e 67 74 68 52 65 |2.GetSid|LengthRe|
|00003a80| 71 75 69 72 65 64 00 8a | 02 00 00 00 00 00 00 00 |quired..|........|
|00003a90| 80 14 00 12 47 65 74 53 | 69 64 53 75 62 41 75 74 |....GetS|idSubAut|
|00003aa0| 68 6f 72 69 74 79 00 88 | 37 00 80 a0 01 00 15 5f |hority..|7......_|
|00003ab0| 47 65 74 53 69 64 53 75 | 62 41 75 74 68 6f 72 69 |GetSidSu|bAuthori|
|00003ac0| 74 79 40 38 08 41 44 56 | 41 50 49 33 32 12 47 65 |ty@8.ADV|API32.Ge|
|00003ad0| 74 53 69 64 53 75 62 41 | 75 74 68 6f 72 69 74 79 |tSidSubA|uthority|
|00003ae0| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003af0| 80 19 00 17 47 65 74 53 | 69 64 53 75 62 41 75 74 |....GetS|idSubAut|
|00003b00| 68 6f 72 69 74 79 43 6f | 75 6e 74 00 88 41 00 80 |horityCo|unt..A..|
|00003b10| a0 01 00 1a 5f 47 65 74 | 53 69 64 53 75 62 41 75 |...._Get|SidSubAu|
|00003b20| 74 68 6f 72 69 74 79 43 | 6f 75 6e 74 40 34 08 41 |thorityC|ount@4.A|
|00003b30| 44 56 41 50 49 33 32 17 | 47 65 74 53 69 64 53 75 |DVAPI32.|GetSidSu|
|00003b40| 62 41 75 74 68 6f 72 69 | 74 79 43 6f 75 6e 74 00 |bAuthori|tyCount.|
|00003b50| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003b60| 80 15 00 13 47 65 74 54 | 6f 6b 65 6e 49 6e 66 6f |....GetT|okenInfo|
|00003b70| 72 6d 61 74 69 6f 6e 00 | 88 3a 00 80 a0 01 00 17 |rmation.|.:......|
|00003b80| 5f 47 65 74 54 6f 6b 65 | 6e 49 6e 66 6f 72 6d 61 |_GetToke|nInforma|
|00003b90| 74 69 6f 6e 40 32 30 08 | 41 44 56 41 50 49 33 32 |tion@20.|ADVAPI32|
|00003ba0| 13 47 65 74 54 6f 6b 65 | 6e 49 6e 66 6f 72 6d 61 |.GetToke|nInforma|
|00003bb0| 74 69 6f 6e 00 8a 02 00 | 00 00 00 00 00 00 00 00 |tion....|........|
|00003bc0| 80 11 00 0f 47 65 74 54 | 72 75 73 74 65 65 4e 61 |....GetT|rusteeNa|
|00003bd0| 6d 65 41 00 88 31 00 80 | a0 01 00 12 5f 47 65 74 |meA..1..|...._Get|
|00003be0| 54 72 75 73 74 65 65 4e | 61 6d 65 41 40 34 08 41 |TrusteeN|ameA@4.A|
|00003bf0| 44 56 41 50 49 33 32 0f | 47 65 74 54 72 75 73 74 |DVAPI32.|GetTrust|
|00003c00| 65 65 4e 61 6d 65 41 00 | 8a 02 00 00 00 00 00 00 |eeNameA.|........|
|00003c10| 80 11 00 0f 47 65 74 54 | 72 75 73 74 65 65 4e 61 |....GetT|rusteeNa|
|00003c20| 6d 65 57 00 88 31 00 80 | a0 01 00 12 5f 47 65 74 |meW..1..|...._Get|
|00003c30| 54 72 75 73 74 65 65 4e | 61 6d 65 57 40 34 08 41 |TrusteeN|ameW@4.A|
|00003c40| 44 56 41 50 49 33 32 0f | 47 65 74 54 72 75 73 74 |DVAPI32.|GetTrust|
|00003c50| 65 65 4e 61 6d 65 57 00 | 8a 02 00 00 00 00 00 00 |eeNameW.|........|
|00003c60| 80 11 00 0f 47 65 74 54 | 72 75 73 74 65 65 54 79 |....GetT|rusteeTy|
|00003c70| 70 65 41 00 88 31 00 80 | a0 01 00 12 5f 47 65 74 |peA..1..|...._Get|
|00003c80| 54 72 75 73 74 65 65 54 | 79 70 65 41 40 34 08 41 |TrusteeT|ypeA@4.A|
|00003c90| 44 56 41 50 49 33 32 0f | 47 65 74 54 72 75 73 74 |DVAPI32.|GetTrust|
|00003ca0| 65 65 54 79 70 65 41 00 | 8a 02 00 00 00 00 00 00 |eeTypeA.|........|
|00003cb0| 80 11 00 0f 47 65 74 54 | 72 75 73 74 65 65 54 79 |....GetT|rusteeTy|
|00003cc0| 70 65 57 00 88 31 00 80 | a0 01 00 12 5f 47 65 74 |peW..1..|...._Get|
|00003cd0| 54 72 75 73 74 65 65 54 | 79 70 65 57 40 34 08 41 |TrusteeT|ypeW@4.A|
|00003ce0| 44 56 41 50 49 33 32 0f | 47 65 74 54 72 75 73 74 |DVAPI32.|GetTrust|
|00003cf0| 65 65 54 79 70 65 57 00 | 8a 02 00 00 00 00 00 00 |eeTypeW.|........|
|00003d00| 80 0e 00 0c 47 65 74 55 | 73 65 72 4e 61 6d 65 41 |....GetU|serNameA|
|00003d10| 00 88 2b 00 80 a0 01 00 | 0f 5f 47 65 74 55 73 65 |..+.....|._GetUse|
|00003d20| 72 4e 61 6d 65 41 40 38 | 08 41 44 56 41 50 49 33 |rNameA@8|.ADVAPI3|
|00003d30| 32 0c 47 65 74 55 73 65 | 72 4e 61 6d 65 41 00 8a |2.GetUse|rNameA..|
|00003d40| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003d50| 80 0e 00 0c 47 65 74 55 | 73 65 72 4e 61 6d 65 57 |....GetU|serNameW|
|00003d60| 00 88 2b 00 80 a0 01 00 | 0f 5f 47 65 74 55 73 65 |..+.....|._GetUse|
|00003d70| 72 4e 61 6d 65 57 40 38 | 08 41 44 56 41 50 49 33 |rNameW@8|.ADVAPI3|
|00003d80| 32 0c 47 65 74 55 73 65 | 72 4e 61 6d 65 57 00 8a |2.GetUse|rNameW..|
|00003d90| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003da0| 80 14 00 12 47 72 61 6e | 74 41 63 63 65 73 73 52 |....Gran|tAccessR|
|00003db0| 69 67 68 74 73 41 00 88 | 38 00 80 a0 01 00 16 5f |ightsA..|8......_|
|00003dc0| 47 72 61 6e 74 41 63 63 | 65 73 73 52 69 67 68 74 |GrantAcc|essRight|
|00003dd0| 73 41 40 31 36 08 41 44 | 56 41 50 49 33 32 12 47 |sA@16.AD|VAPI32.G|
|00003de0| 72 61 6e 74 41 63 63 65 | 73 73 52 69 67 68 74 73 |rantAcce|ssRights|
|00003df0| 41 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |A.......|........|
|00003e00| 80 14 00 12 47 72 61 6e | 74 41 63 63 65 73 73 52 |....Gran|tAccessR|
|00003e10| 69 67 68 74 73 57 00 88 | 38 00 80 a0 01 00 16 5f |ightsW..|8......_|
|00003e20| 47 72 61 6e 74 41 63 63 | 65 73 73 52 69 67 68 74 |GrantAcc|essRight|
|00003e30| 73 57 40 31 36 08 41 44 | 56 41 50 49 33 32 12 47 |sW@16.AD|VAPI32.G|
|00003e40| 72 61 6e 74 41 63 63 65 | 73 73 52 69 67 68 74 73 |rantAcce|ssRights|
|00003e50| 57 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |W.......|........|
|00003e60| 80 1b 00 19 49 5f 53 63 | 47 65 74 43 75 72 72 65 |....I_Sc|GetCurre|
|00003e70| 6e 74 47 72 6f 75 70 53 | 74 61 74 65 57 00 88 46 |ntGroupS|tateW..F|
|00003e80| 00 80 a0 01 00 1d 5f 49 | 5f 53 63 47 65 74 43 75 |......_I|_ScGetCu|
|00003e90| 72 72 65 6e 74 47 72 6f | 75 70 53 74 61 74 65 57 |rrentGro|upStateW|
|00003ea0| 40 31 32 08 41 44 56 41 | 50 49 33 32 19 49 5f 53 |@12.ADVA|PI32.I_S|
|00003eb0| 63 47 65 74 43 75 72 72 | 65 6e 74 47 72 6f 75 70 |cGetCurr|entGroup|
|00003ec0| 53 74 61 74 65 57 00 8a | 02 00 00 00 00 00 00 00 |StateW..|........|
|00003ed0| 80 15 00 13 49 5f 53 63 | 53 65 74 53 65 72 76 69 |....I_Sc|SetServi|
|00003ee0| 63 65 42 69 74 73 41 00 | 88 3a 00 80 a0 01 00 17 |ceBitsA.|.:......|
|00003ef0| 5f 49 5f 53 63 53 65 74 | 53 65 72 76 69 63 65 42 |_I_ScSet|ServiceB|
|00003f00| 69 74 73 41 40 32 30 08 | 41 44 56 41 50 49 33 32 |itsA@20.|ADVAPI32|
|00003f10| 13 49 5f 53 63 53 65 74 | 53 65 72 76 69 63 65 42 |.I_ScSet|ServiceB|
|00003f20| 69 74 73 41 00 8a 02 00 | 00 00 00 00 00 00 00 00 |itsA....|........|
|00003f30| 80 15 00 13 49 5f 53 63 | 53 65 74 53 65 72 76 69 |....I_Sc|SetServi|
|00003f40| 63 65 42 69 74 73 57 00 | 88 3a 00 80 a0 01 00 17 |ceBitsW.|.:......|
|00003f50| 5f 49 5f 53 63 53 65 74 | 53 65 72 76 69 63 65 42 |_I_ScSet|ServiceB|
|00003f60| 69 74 73 57 40 32 30 08 | 41 44 56 41 50 49 33 32 |itsW@20.|ADVAPI32|
|00003f70| 13 49 5f 53 63 53 65 74 | 53 65 72 76 69 63 65 42 |.I_ScSet|ServiceB|
|00003f80| 69 74 73 57 00 8a 02 00 | 00 00 00 00 00 00 00 00 |itsW....|........|
|00003f90| 80 19 00 17 49 6d 70 65 | 72 73 6f 6e 61 74 65 4c |....Impe|rsonateL|
|00003fa0| 6f 67 67 65 64 4f 6e 55 | 73 65 72 00 88 41 00 80 |oggedOnU|ser..A..|
|00003fb0| a0 01 00 1a 5f 49 6d 70 | 65 72 73 6f 6e 61 74 65 |...._Imp|ersonate|
|00003fc0| 4c 6f 67 67 65 64 4f 6e | 55 73 65 72 40 34 08 41 |LoggedOn|User@4.A|
|00003fd0| 44 56 41 50 49 33 32 17 | 49 6d 70 65 72 73 6f 6e |DVAPI32.|Imperson|
|00003fe0| 61 74 65 4c 6f 67 67 65 | 64 4f 6e 55 73 65 72 00 |ateLogge|dOnUser.|
|00003ff0| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004000| 80 1c 00 1a 49 6d 70 65 | 72 73 6f 6e 61 74 65 4e |....Impe|rsonateN|
|00004010| 61 6d 65 64 50 69 70 65 | 43 6c 69 65 6e 74 00 88 |amedPipe|Client..|
|00004020| 47 00 80 a0 01 00 1d 5f | 49 6d 70 65 72 73 6f 6e |G......_|Imperson|
|00004030| 61 74 65 4e 61 6d 65 64 | 50 69 70 65 43 6c 69 65 |ateNamed|PipeClie|
|00004040| 6e 74 40 34 08 41 44 56 | 41 50 49 33 32 1a 49 6d |nt@4.ADV|API32.Im|
|00004050| 70 65 72 73 6f 6e 61 74 | 65 4e 61 6d 65 64 50 69 |personat|eNamedPi|
|00004060| 70 65 43 6c 69 65 6e 74 | 00 8a 02 00 00 00 00 00 |peClient|........|
|00004070| 80 11 00 0f 49 6d 70 65 | 72 73 6f 6e 61 74 65 53 |....Impe|rsonateS|
|00004080| 65 6c 66 00 88 31 00 80 | a0 01 00 12 5f 49 6d 70 |elf..1..|...._Imp|
|00004090| 65 72 73 6f 6e 61 74 65 | 53 65 6c 66 40 34 08 41 |ersonate|Self@4.A|
|000040a0| 44 56 41 50 49 33 32 0f | 49 6d 70 65 72 73 6f 6e |DVAPI32.|Imperson|
|000040b0| 61 74 65 53 65 6c 66 00 | 8a 02 00 00 00 00 00 00 |ateSelf.|........|
|000040c0| 80 0f 00 0d 49 6e 69 74 | 69 61 6c 69 7a 65 41 63 |....Init|ializeAc|
|000040d0| 6c 00 88 2e 00 80 a0 01 | 00 11 5f 49 6e 69 74 69 |l.......|.._Initi|
|000040e0| 61 6c 69 7a 65 41 63 6c | 40 31 32 08 41 44 56 41 |alizeAcl|@12.ADVA|
|000040f0| 50 49 33 32 0d 49 6e 69 | 74 69 61 6c 69 7a 65 41 |PI32.Ini|tializeA|
|00004100| 63 6c 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |cl......|........|
|00004110| 80 1e 00 1c 49 6e 69 74 | 69 61 6c 69 7a 65 53 65 |....Init|ializeSe|
|00004120| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00004130| 00 88 4b 00 80 a0 01 00 | 1f 5f 49 6e 69 74 69 61 |..K.....|._Initia|
|00004140| 6c 69 7a 65 53 65 63 75 | 72 69 74 79 44 65 73 63 |lizeSecu|rityDesc|
|00004150| 72 69 70 74 6f 72 40 38 | 08 41 44 56 41 50 49 33 |riptor@8|.ADVAPI3|
|00004160| 32 1c 49 6e 69 74 69 61 | 6c 69 7a 65 53 65 63 75 |2.Initia|lizeSecu|
|00004170| 72 69 74 79 44 65 73 63 | 72 69 70 74 6f 72 00 8a |rityDesc|riptor..|
|00004180| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004190| 80 0f 00 0d 49 6e 69 74 | 69 61 6c 69 7a 65 53 69 |....Init|ializeSi|
|000041a0| 64 00 88 2e 00 80 a0 01 | 00 11 5f 49 6e 69 74 69 |d.......|.._Initi|
|000041b0| 61 6c 69 7a 65 53 69 64 | 40 31 32 08 41 44 56 41 |alizeSid|@12.ADVA|
|000041c0| 50 49 33 32 0d 49 6e 69 | 74 69 61 6c 69 7a 65 53 |PI32.Ini|tializeS|
|000041d0| 69 64 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |id......|........|
|000041e0| 80 19 00 17 49 6e 69 74 | 69 61 74 65 53 79 73 74 |....Init|iateSyst|
|000041f0| 65 6d 53 68 75 74 64 6f | 77 6e 41 00 88 42 00 80 |emShutdo|wnA..B..|
|00004200| a0 01 00 1b 5f 49 6e 69 | 74 69 61 74 65 53 79 73 |...._Ini|tiateSys|
|00004210| 74 65 6d 53 68 75 74 64 | 6f 77 6e 41 40 32 30 08 |temShutd|ownA@20.|
|00004220| 41 44 56 41 50 49 33 32 | 17 49 6e 69 74 69 61 74 |ADVAPI32|.Initiat|
|00004230| 65 53 79 73 74 65 6d 53 | 68 75 74 64 6f 77 6e 41 |eSystemS|hutdownA|
|00004240| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004250| 80 19 00 17 49 6e 69 74 | 69 61 74 65 53 79 73 74 |....Init|iateSyst|
|00004260| 65 6d 53 68 75 74 64 6f | 77 6e 57 00 88 42 00 80 |emShutdo|wnW..B..|
|00004270| a0 01 00 1b 5f 49 6e 69 | 74 69 61 74 65 53 79 73 |...._Ini|tiateSys|
|00004280| 74 65 6d 53 68 75 74 64 | 6f 77 6e 57 40 32 30 08 |temShutd|ownW@20.|
|00004290| 41 44 56 41 50 49 33 32 | 17 49 6e 69 74 69 61 74 |ADVAPI32|.Initiat|
|000042a0| 65 53 79 73 74 65 6d 53 | 68 75 74 64 6f 77 6e 57 |eSystemS|hutdownW|
|000042b0| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000042c0| 80 14 00 12 49 73 41 63 | 63 65 73 73 50 65 72 6d |....IsAc|cessPerm|
|000042d0| 69 74 74 65 64 41 00 88 | 38 00 80 a0 01 00 16 5f |ittedA..|8......_|
|000042e0| 49 73 41 63 63 65 73 73 | 50 65 72 6d 69 74 74 65 |IsAccess|Permitte|
|000042f0| 64 41 40 32 30 08 41 44 | 56 41 50 49 33 32 12 49 |dA@20.AD|VAPI32.I|
|00004300| 73 41 63 63 65 73 73 50 | 65 72 6d 69 74 74 65 64 |sAccessP|ermitted|
|00004310| 41 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |A.......|........|
|00004320| 80 14 00 12 49 73 41 63 | 63 65 73 73 50 65 72 6d |....IsAc|cessPerm|
|00004330| 69 74 74 65 64 57 00 88 | 38 00 80 a0 01 00 16 5f |ittedW..|8......_|
|00004340| 49 73 41 63 63 65 73 73 | 50 65 72 6d 69 74 74 65 |IsAccess|Permitte|
|00004350| 64 57 40 32 30 08 41 44 | 56 41 50 49 33 32 12 49 |dW@20.AD|VAPI32.I|
|00004360| 73 41 63 63 65 73 73 50 | 65 72 6d 69 74 74 65 64 |sAccessP|ermitted|
|00004370| 57 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |W.......|........|
|00004380| 80 0f 00 0d 49 73 54 65 | 78 74 55 6e 69 63 6f 64 |....IsTe|xtUnicod|
|00004390| 65 00 88 2e 00 80 a0 01 | 00 11 5f 49 73 54 65 78 |e.......|.._IsTex|
|000043a0| 74 55 6e 69 63 6f 64 65 | 40 31 32 08 41 44 56 41 |tUnicode|@12.ADVA|
|000043b0| 50 49 33 32 0d 49 73 54 | 65 78 74 55 6e 69 63 6f |PI32.IsT|extUnico|
|000043c0| 64 65 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |de......|........|
|000043d0| 80 0c 00 0a 49 73 56 61 | 6c 69 64 41 63 6c 00 88 |....IsVa|lidAcl..|
|000043e0| 27 00 80 a0 01 00 0d 5f | 49 73 56 61 6c 69 64 41 |'......_|IsValidA|
|000043f0| 63 6c 40 34 08 41 44 56 | 41 50 49 33 32 0a 49 73 |cl@4.ADV|API32.Is|
|00004400| 56 61 6c 69 64 41 63 6c | 00 8a 02 00 00 00 00 00 |ValidAcl|........|
|00004410| 80 1b 00 19 49 73 56 61 | 6c 69 64 53 65 63 75 72 |....IsVa|lidSecur|
|00004420| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 88 45 |ityDescr|iptor..E|
|00004430| 00 80 a0 01 00 1c 5f 49 | 73 56 61 6c 69 64 53 65 |......_I|sValidSe|
|00004440| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00004450| 40 34 08 41 44 56 41 50 | 49 33 32 19 49 73 56 61 |@4.ADVAP|I32.IsVa|
|00004460| 6c 69 64 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |lidSecur|ityDescr|
|00004470| 69 70 74 6f 72 00 8a 02 | 00 00 00 00 00 00 00 00 |iptor...|........|
|00004480| 80 0c 00 0a 49 73 56 61 | 6c 69 64 53 69 64 00 88 |....IsVa|lidSid..|
|00004490| 27 00 80 a0 01 00 0d 5f | 49 73 56 61 6c 69 64 53 |'......_|IsValidS|
|000044a0| 69 64 40 34 08 41 44 56 | 41 50 49 33 32 0a 49 73 |id@4.ADV|API32.Is|
|000044b0| 56 61 6c 69 64 53 69 64 | 00 8a 02 00 00 00 00 00 |ValidSid|........|
|000044c0| 80 15 00 13 4c 6f 63 6b | 53 65 72 76 69 63 65 44 |....Lock|ServiceD|
|000044d0| 61 74 61 62 61 73 65 00 | 88 39 00 80 a0 01 00 16 |atabase.|.9......|
|000044e0| 5f 4c 6f 63 6b 53 65 72 | 76 69 63 65 44 61 74 61 |_LockSer|viceData|
|000044f0| 62 61 73 65 40 34 08 41 | 44 56 41 50 49 33 32 13 |base@4.A|DVAPI32.|
|00004500| 4c 6f 63 6b 53 65 72 76 | 69 63 65 44 61 74 61 62 |LockServ|iceDatab|
|00004510| 61 73 65 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |ase.....|........|
|00004520| 80 0c 00 0a 4c 6f 67 6f | 6e 55 73 65 72 41 00 88 |....Logo|nUserA..|
|00004530| 28 00 80 a0 01 00 0e 5f | 4c 6f 67 6f 6e 55 73 65 |(......_|LogonUse|
|00004540| 72 41 40 32 34 08 41 44 | 56 41 50 49 33 32 0a 4c |rA@24.AD|VAPI32.L|
|00004550| 6f 67 6f 6e 55 73 65 72 | 41 00 8a 02 00 00 00 00 |ogonUser|A.......|
|00004560| 80 0c 00 0a 4c 6f 67 6f | 6e 55 73 65 72 57 00 88 |....Logo|nUserW..|
|00004570| 28 00 80 a0 01 00 0e 5f | 4c 6f 67 6f 6e 55 73 65 |(......_|LogonUse|
|00004580| 72 57 40 32 34 08 41 44 | 56 41 50 49 33 32 0a 4c |rW@24.AD|VAPI32.L|
|00004590| 6f 67 6f 6e 55 73 65 72 | 57 00 8a 02 00 00 00 00 |ogonUser|W.......|
|000045a0| 80 14 00 12 4c 6f 6f 6b | 75 70 41 63 63 6f 75 6e |....Look|upAccoun|
|000045b0| 74 4e 61 6d 65 41 00 88 | 38 00 80 a0 01 00 16 5f |tNameA..|8......_|
|000045c0| 4c 6f 6f 6b 75 70 41 63 | 63 6f 75 6e 74 4e 61 6d |LookupAc|countNam|
|000045d0| 65 41 40 32 38 08 41 44 | 56 41 50 49 33 32 12 4c |eA@28.AD|VAPI32.L|
|000045e0| 6f 6f 6b 75 70 41 63 63 | 6f 75 6e 74 4e 61 6d 65 |ookupAcc|ountName|
|000045f0| 41 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |A.......|........|
|00004600| 80 14 00 12 4c 6f 6f 6b | 75 70 41 63 63 6f 75 6e |....Look|upAccoun|
|00004610| 74 4e 61 6d 65 57 00 88 | 38 00 80 a0 01 00 16 5f |tNameW..|8......_|
|00004620| 4c 6f 6f 6b 75 70 41 63 | 63 6f 75 6e 74 4e 61 6d |LookupAc|countNam|
|00004630| 65 57 40 32 38 08 41 44 | 56 41 50 49 33 32 12 4c |eW@28.AD|VAPI32.L|
|00004640| 6f 6f 6b 75 70 41 63 63 | 6f 75 6e 74 4e 61 6d 65 |ookupAcc|ountName|
|00004650| 57 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |W.......|........|
|00004660| 80 13 00 11 4c 6f 6f 6b | 75 70 41 63 63 6f 75 6e |....Look|upAccoun|
|00004670| 74 53 69 64 41 00 88 36 | 00 80 a0 01 00 15 5f 4c |tSidA..6|......_L|
|00004680| 6f 6f 6b 75 70 41 63 63 | 6f 75 6e 74 53 69 64 41 |ookupAcc|ountSidA|
|00004690| 40 32 38 08 41 44 56 41 | 50 49 33 32 11 4c 6f 6f |@28.ADVA|PI32.Loo|
|000046a0| 6b 75 70 41 63 63 6f 75 | 6e 74 53 69 64 41 00 8a |kupAccou|ntSidA..|
|000046b0| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000046c0| 80 13 00 11 4c 6f 6f 6b | 75 70 41 63 63 6f 75 6e |....Look|upAccoun|
|000046d0| 74 53 69 64 57 00 88 36 | 00 80 a0 01 00 15 5f 4c |tSidW..6|......_L|
|000046e0| 6f 6f 6b 75 70 41 63 63 | 6f 75 6e 74 53 69 64 57 |ookupAcc|ountSidW|
|000046f0| 40 32 38 08 41 44 56 41 | 50 49 33 32 11 4c 6f 6f |@28.ADVA|PI32.Loo|
|00004700| 6b 75 70 41 63 63 6f 75 | 6e 74 53 69 64 57 00 8a |kupAccou|ntSidW..|
|00004710| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004720| 80 1d 00 1b 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |....Look|upPrivil|
|00004730| 65 67 65 44 69 73 70 6c | 61 79 4e 61 6d 65 41 00 |egeDispl|ayNameA.|
|00004740| 88 4a 00 80 a0 01 00 1f | 5f 4c 6f 6f 6b 75 70 50 |.J......|_LookupP|
|00004750| 72 69 76 69 6c 65 67 65 | 44 69 73 70 6c 61 79 4e |rivilege|DisplayN|
|00004760| 61 6d 65 41 40 32 30 08 | 41 44 56 41 50 49 33 32 |ameA@20.|ADVAPI32|
|00004770| 1b 4c 6f 6f 6b 75 70 50 | 72 69 76 69 6c 65 67 65 |.LookupP|rivilege|
|00004780| 44 69 73 70 6c 61 79 4e | 61 6d 65 41 00 8a 02 00 |DisplayN|ameA....|
|00004790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000047a0| 80 1d 00 1b 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |....Look|upPrivil|
|000047b0| 65 67 65 44 69 73 70 6c | 61 79 4e 61 6d 65 57 00 |egeDispl|ayNameW.|
|000047c0| 88 4a 00 80 a0 01 00 1f | 5f 4c 6f 6f 6b 75 70 50 |.J......|_LookupP|
|000047d0| 72 69 76 69 6c 65 67 65 | 44 69 73 70 6c 61 79 4e |rivilege|DisplayN|
|000047e0| 61 6d 65 57 40 32 30 08 | 41 44 56 41 50 49 33 32 |ameW@20.|ADVAPI32|
|000047f0| 1b 4c 6f 6f 6b 75 70 50 | 72 69 76 69 6c 65 67 65 |.LookupP|rivilege|
|00004800| 44 69 73 70 6c 61 79 4e | 61 6d 65 57 00 8a 02 00 |DisplayN|ameW....|
|00004810| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004820| 80 16 00 14 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |....Look|upPrivil|
|00004830| 65 67 65 4e 61 6d 65 41 | 00 88 3c 00 80 a0 01 00 |egeNameA|..<.....|
|00004840| 18 5f 4c 6f 6f 6b 75 70 | 50 72 69 76 69 6c 65 67 |._Lookup|Privileg|
|00004850| 65 4e 61 6d 65 41 40 31 | 36 08 41 44 56 41 50 49 |eNameA@1|6.ADVAPI|
|00004860| 33 32 14 4c 6f 6f 6b 75 | 70 50 72 69 76 69 6c 65 |32.Looku|pPrivile|
|00004870| 67 65 4e 61 6d 65 41 00 | 8a 02 00 00 00 00 00 00 |geNameA.|........|
|00004880| 80 16 00 14 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |....Look|upPrivil|
|00004890| 65 67 65 4e 61 6d 65 57 | 00 88 3c 00 80 a0 01 00 |egeNameW|..<.....|
|000048a0| 18 5f 4c 6f 6f 6b 75 70 | 50 72 69 76 69 6c 65 67 |._Lookup|Privileg|
|000048b0| 65 4e 61 6d 65 57 40 31 | 36 08 41 44 56 41 50 49 |eNameW@1|6.ADVAPI|
|000048c0| 33 32 14 4c 6f 6f 6b 75 | 70 50 72 69 76 69 6c 65 |32.Looku|pPrivile|
|000048d0| 67 65 4e 61 6d 65 57 00 | 8a 02 00 00 00 00 00 00 |geNameW.|........|
|000048e0| 80 17 00 15 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |....Look|upPrivil|
|000048f0| 65 67 65 56 61 6c 75 65 | 41 00 88 3e 00 80 a0 01 |egeValue|A..>....|
|00004900| 00 19 5f 4c 6f 6f 6b 75 | 70 50 72 69 76 69 6c 65 |.._Looku|pPrivile|
|00004910| 67 65 56 61 6c 75 65 41 | 40 31 32 08 41 44 56 41 |geValueA|@12.ADVA|
|00004920| 50 49 33 32 15 4c 6f 6f | 6b 75 70 50 72 69 76 69 |PI32.Loo|kupPrivi|
|00004930| 6c 65 67 65 56 61 6c 75 | 65 41 00 8a 02 00 00 00 |legeValu|eA......|
|00004940| 80 17 00 15 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |....Look|upPrivil|
|00004950| 65 67 65 56 61 6c 75 65 | 57 00 88 3e 00 80 a0 01 |egeValue|W..>....|
|00004960| 00 19 5f 4c 6f 6f 6b 75 | 70 50 72 69 76 69 6c 65 |.._Looku|pPrivile|
|00004970| 67 65 56 61 6c 75 65 57 | 40 31 32 08 41 44 56 41 |geValueW|@12.ADVA|
|00004980| 50 49 33 32 15 4c 6f 6f | 6b 75 70 50 72 69 76 69 |PI32.Loo|kupPrivi|
|00004990| 6c 65 67 65 56 61 6c 75 | 65 57 00 8a 02 00 00 00 |legeValu|eW......|
|000049a0| 80 20 00 1e 4c 6f 6f 6b | 75 70 53 65 63 75 72 69 |. ..Look|upSecuri|
|000049b0| 74 79 44 65 73 63 72 69 | 70 74 6f 72 50 61 72 74 |tyDescri|ptorPart|
|000049c0| 73 41 00 88 50 00 80 a0 | 01 00 22 5f 4c 6f 6f 6b |sA..P...|.."_Look|
|000049d0| 75 70 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |upSecuri|tyDescri|
|000049e0| 70 74 6f 72 50 61 72 74 | 73 41 40 32 38 08 41 44 |ptorPart|sA@28.AD|
|000049f0| 56 41 50 49 33 32 1e 4c | 6f 6f 6b 75 70 53 65 63 |VAPI32.L|ookupSec|
|00004a00| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 50 |urityDes|criptorP|
|00004a10| 61 72 74 73 41 00 8a 02 | 00 00 00 00 00 00 00 00 |artsA...|........|
|00004a20| 80 20 00 1e 4c 6f 6f 6b | 75 70 53 65 63 75 72 69 |. ..Look|upSecuri|
|00004a30| 74 79 44 65 73 63 72 69 | 70 74 6f 72 50 61 72 74 |tyDescri|ptorPart|
|00004a40| 73 57 00 88 50 00 80 a0 | 01 00 22 5f 4c 6f 6f 6b |sW..P...|.."_Look|
|00004a50| 75 70 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |upSecuri|tyDescri|
|00004a60| 70 74 6f 72 50 61 72 74 | 73 57 40 32 38 08 41 44 |ptorPart|sW@28.AD|
|00004a70| 56 41 50 49 33 32 1e 4c | 6f 6f 6b 75 70 53 65 63 |VAPI32.L|ookupSec|
|00004a80| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 50 |urityDes|criptorP|
|00004a90| 61 72 74 73 57 00 8a 02 | 00 00 00 00 00 00 00 00 |artsW...|........|
|00004aa0| 80 15 00 13 4c 73 61 41 | 64 64 41 63 63 6f 75 6e |....LsaA|ddAccoun|
|00004ab0| 74 52 69 67 68 74 73 00 | 88 3a 00 80 a0 01 00 17 |tRights.|.:......|
|00004ac0| 5f 4c 73 61 41 64 64 41 | 63 63 6f 75 6e 74 52 69 |_LsaAddA|ccountRi|
|00004ad0| 67 68 74 73 40 31 36 08 | 41 44 56 41 50 49 33 32 |ghts@16.|ADVAPI32|
|00004ae0| 13 4c 73 61 41 64 64 41 | 63 63 6f 75 6e 74 52 69 |.LsaAddA|ccountRi|
|00004af0| 67 68 74 73 00 8a 02 00 | 00 00 00 00 00 00 00 00 |ghts....|........|
|00004b00| 80 1b 00 19 4c 73 61 41 | 64 64 50 72 69 76 69 6c |....LsaA|ddPrivil|
|00004b10| 65 67 65 73 54 6f 41 63 | 63 6f 75 6e 74 00 88 45 |egesToAc|count..E|
|00004b20| 00 80 a0 01 00 1c 5f 4c | 73 61 41 64 64 50 72 69 |......_L|saAddPri|
|00004b30| 76 69 6c 65 67 65 73 54 | 6f 41 63 63 6f 75 6e 74 |vilegesT|oAccount|
|00004b40| 40 38 08 41 44 56 41 50 | 49 33 32 19 4c 73 61 41 |@8.ADVAP|I32.LsaA|
|00004b50| 64 64 50 72 69 76 69 6c | 65 67 65 73 54 6f 41 63 |ddPrivil|egesToAc|
|00004b60| 63 6f 75 6e 74 00 8a 02 | 00 00 00 00 00 00 00 00 |count...|........|
|00004b70| 80 12 00 10 4c 73 61 43 | 6c 65 61 72 41 75 64 69 |....LsaC|learAudi|
|00004b80| 74 4c 6f 67 00 88 33 00 | 80 a0 01 00 13 5f 4c 73 |tLog..3.|....._Ls|
|00004b90| 61 43 6c 65 61 72 41 75 | 64 69 74 4c 6f 67 40 34 |aClearAu|ditLog@4|
|00004ba0| 08 41 44 56 41 50 49 33 | 32 10 4c 73 61 43 6c 65 |.ADVAPI3|2.LsaCle|
|00004bb0| 61 72 41 75 64 69 74 4c | 6f 67 00 8a 02 00 00 00 |arAuditL|og......|
|00004bc0| 80 0a 00 08 4c 73 61 43 | 6c 6f 73 65 00 88 23 00 |....LsaC|lose..#.|
|00004bd0| 80 a0 01 00 0b 5f 4c 73 | 61 43 6c 6f 73 65 40 34 |....._Ls|aClose@4|
|00004be0| 08 41 44 56 41 50 49 33 | 32 08 4c 73 61 43 6c 6f |.ADVAPI3|2.LsaClo|
|00004bf0| 73 65 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |se......|........|
|00004c00| 80 12 00 10 4c 73 61 43 | 72 65 61 74 65 41 63 63 |....LsaC|reateAcc|
|00004c10| 6f 75 6e 74 00 88 34 00 | 80 a0 01 00 14 5f 4c 73 |ount..4.|....._Ls|
|00004c20| 61 43 72 65 61 74 65 41 | 63 63 6f 75 6e 74 40 31 |aCreateA|ccount@1|
|00004c30| 36 08 41 44 56 41 50 49 | 33 32 10 4c 73 61 43 72 |6.ADVAPI|32.LsaCr|
|00004c40| 65 61 74 65 41 63 63 6f | 75 6e 74 00 8a 02 00 00 |eateAcco|unt.....|
|00004c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004c60| 80 11 00 0f 4c 73 61 43 | 72 65 61 74 65 53 65 63 |....LsaC|reateSec|
|00004c70| 72 65 74 00 88 32 00 80 | a0 01 00 13 5f 4c 73 61 |ret..2..|...._Lsa|
|00004c80| 43 72 65 61 74 65 53 65 | 63 72 65 74 40 31 36 08 |CreateSe|cret@16.|
|00004c90| 41 44 56 41 50 49 33 32 | 0f 4c 73 61 43 72 65 61 |ADVAPI32|.LsaCrea|
|00004ca0| 74 65 53 65 63 72 65 74 | 00 8a 02 00 00 00 00 00 |teSecret|........|
|00004cb0| 80 18 00 16 4c 73 61 43 | 72 65 61 74 65 54 72 75 |....LsaC|reateTru|
|00004cc0| 73 74 65 64 44 6f 6d 61 | 69 6e 00 88 40 00 80 a0 |stedDoma|in..@...|
|00004cd0| 01 00 1a 5f 4c 73 61 43 | 72 65 61 74 65 54 72 75 |..._LsaC|reateTru|
|00004ce0| 73 74 65 64 44 6f 6d 61 | 69 6e 40 31 36 08 41 44 |stedDoma|in@16.AD|
|00004cf0| 56 41 50 49 33 32 16 4c | 73 61 43 72 65 61 74 65 |VAPI32.L|saCreate|
|00004d00| 54 72 75 73 74 65 64 44 | 6f 6d 61 69 6e 00 8a 02 |TrustedD|omain...|
|00004d10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004d20| 80 0b 00 09 4c 73 61 44 | 65 6c 65 74 65 00 88 25 |....LsaD|elete..%|
|00004d30| 00 80 a0 01 00 0c 5f 4c | 73 61 44 65 6c 65 74 65 |......_L|saDelete|
|00004d40| 40 34 08 41 44 56 41 50 | 49 33 32 09 4c 73 61 44 |@4.ADVAP|I32.LsaD|
|00004d50| 65 6c 65 74 65 00 8a 02 | 00 00 00 00 00 00 00 00 |elete...|........|
|00004d60| 80 18 00 16 4c 73 61 44 | 65 6c 65 74 65 54 72 75 |....LsaD|eleteTru|
|00004d70| 73 74 65 64 44 6f 6d 61 | 69 6e 00 88 3f 00 80 a0 |stedDoma|in..?...|
|00004d80| 01 00 19 5f 4c 73 61 44 | 65 6c 65 74 65 54 72 75 |..._LsaD|eleteTru|
|00004d90| 73 74 65 64 44 6f 6d 61 | 69 6e 40 38 08 41 44 56 |stedDoma|in@8.ADV|
|00004da0| 41 50 49 33 32 16 4c 73 | 61 44 65 6c 65 74 65 54 |API32.Ls|aDeleteT|
|00004db0| 72 75 73 74 65 64 44 6f | 6d 61 69 6e 00 8a 02 00 |rustedDo|main....|
|00004dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004dd0| 80 1b 00 19 4c 73 61 45 | 6e 75 6d 65 72 61 74 65 |....LsaE|numerate|
|00004de0| 41 63 63 6f 75 6e 74 52 | 69 67 68 74 73 00 88 46 |AccountR|ights..F|
|00004df0| 00 80 a0 01 00 1d 5f 4c | 73 61 45 6e 75 6d 65 72 |......_L|saEnumer|
|00004e00| 61 74 65 41 63 63 6f 75 | 6e 74 52 69 67 68 74 73 |ateAccou|ntRights|
|00004e10| 40 31 36 08 41 44 56 41 | 50 49 33 32 19 4c 73 61 |@16.ADVA|PI32.Lsa|
|00004e20| 45 6e 75 6d 65 72 61 74 | 65 41 63 63 6f 75 6e 74 |Enumerat|eAccount|
|00004e30| 52 69 67 68 74 73 00 8a | 02 00 00 00 00 00 00 00 |Rights..|........|
|00004e40| 80 16 00 14 4c 73 61 45 | 6e 75 6d 65 72 61 74 65 |....LsaE|numerate|
|00004e50| 41 63 63 6f 75 6e 74 73 | 00 88 3c 00 80 a0 01 00 |Accounts|..<.....|
|00004e60| 18 5f 4c 73 61 45 6e 75 | 6d 65 72 61 74 65 41 63 |._LsaEnu|merateAc|
|00004e70| 63 6f 75 6e 74 73 40 32 | 30 08 41 44 56 41 50 49 |counts@2|0.ADVAPI|
|00004e80| 33 32 14 4c 73 61 45 6e | 75 6d 65 72 61 74 65 41 |32.LsaEn|umerateA|
|00004e90| 63 63 6f 75 6e 74 73 00 | 8a 02 00 00 00 00 00 00 |ccounts.|........|
|00004ea0| 80 23 00 21 4c 73 61 45 | 6e 75 6d 65 72 61 74 65 |.#.!LsaE|numerate|
|00004eb0| 41 63 63 6f 75 6e 74 73 | 57 69 74 68 55 73 65 72 |Accounts|WithUser|
|00004ec0| 52 69 67 68 74 00 88 56 | 00 80 a0 01 00 25 5f 4c |Right..V|.....%_L|
|00004ed0| 73 61 45 6e 75 6d 65 72 | 61 74 65 41 63 63 6f 75 |saEnumer|ateAccou|
|00004ee0| 6e 74 73 57 69 74 68 55 | 73 65 72 52 69 67 68 74 |ntsWithU|serRight|
|00004ef0| 40 31 36 08 41 44 56 41 | 50 49 33 32 21 4c 73 61 |@16.ADVA|PI32!Lsa|
|00004f00| 45 6e 75 6d 65 72 61 74 | 65 41 63 63 6f 75 6e 74 |Enumerat|eAccount|
|00004f10| 73 57 69 74 68 55 73 65 | 72 52 69 67 68 74 00 8a |sWithUse|rRight..|
|00004f20| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004f30| 80 18 00 16 4c 73 61 45 | 6e 75 6d 65 72 61 74 65 |....LsaE|numerate|
|00004f40| 50 72 69 76 69 6c 65 67 | 65 73 00 88 40 00 80 a0 |Privileg|es..@...|
|00004f50| 01 00 1a 5f 4c 73 61 45 | 6e 75 6d 65 72 61 74 65 |..._LsaE|numerate|
|00004f60| 50 72 69 76 69 6c 65 67 | 65 73 40 32 30 08 41 44 |Privileg|es@20.AD|
|00004f70| 56 41 50 49 33 32 16 4c | 73 61 45 6e 75 6d 65 72 |VAPI32.L|saEnumer|
|00004f80| 61 74 65 50 72 69 76 69 | 6c 65 67 65 73 00 8a 02 |atePrivi|leges...|
|00004f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004fa0| 80 21 00 1f 4c 73 61 45 | 6e 75 6d 65 72 61 74 65 |.!..LsaE|numerate|
|00004fb0| 50 72 69 76 69 6c 65 67 | 65 73 4f 66 41 63 63 6f |Privileg|esOfAcco|
|00004fc0| 75 6e 74 00 88 51 00 80 | a0 01 00 22 5f 4c 73 61 |unt..Q..|..."_Lsa|
|00004fd0| 45 6e 75 6d 65 72 61 74 | 65 50 72 69 76 69 6c 65 |Enumerat|ePrivile|
|00004fe0| 67 65 73 4f 66 41 63 63 | 6f 75 6e 74 40 38 08 41 |gesOfAcc|ount@8.A|
|00004ff0| 44 56 41 50 49 33 32 1f | 4c 73 61 45 6e 75 6d 65 |DVAPI32.|LsaEnume|
|00005000| 72 61 74 65 50 72 69 76 | 69 6c 65 67 65 73 4f 66 |ratePriv|ilegesOf|
|00005010| 41 63 63 6f 75 6e 74 00 | 8a 02 00 00 00 00 00 00 |Account.|........|
|00005020| 80 1c 00 1a 4c 73 61 45 | 6e 75 6d 65 72 61 74 65 |....LsaE|numerate|
|00005030| 54 72 75 73 74 65 64 44 | 6f 6d 61 69 6e 73 00 88 |TrustedD|omains..|
|00005040| 48 00 80 a0 01 00 1e 5f | 4c 73 61 45 6e 75 6d 65 |H......_|LsaEnume|
|00005050| 72 61 74 65 54 72 75 73 | 74 65 64 44 6f 6d 61 69 |rateTrus|tedDomai|
|00005060| 6e 73 40 32 30 08 41 44 | 56 41 50 49 33 32 1a 4c |ns@20.AD|VAPI32.L|
|00005070| 73 61 45 6e 75 6d 65 72 | 61 74 65 54 72 75 73 74 |saEnumer|ateTrust|
|00005080| 65 64 44 6f 6d 61 69 6e | 73 00 8a 02 00 00 00 00 |edDomain|s.......|
|00005090| 80 0f 00 0d 4c 73 61 46 | 72 65 65 4d 65 6d 6f 72 |....LsaF|reeMemor|
|000050a0| 79 00 88 2d 00 80 a0 01 | 00 10 5f 4c 73 61 46 72 |y..-....|.._LsaFr|
|000050b0| 65 65 4d 65 6d 6f 72 79 | 40 34 08 41 44 56 41 50 |eeMemory|@4.ADVAP|
|000050c0| 49 33 32 0d 4c 73 61 46 | 72 65 65 4d 65 6d 6f 72 |I32.LsaF|reeMemor|
|000050d0| 79 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |y.......|........|
|000050e0| 80 18 00 16 4c 73 61 47 | 65 74 51 75 6f 74 61 73 |....LsaG|etQuotas|
|000050f0| 46 6f 72 41 63 63 6f 75 | 6e 74 00 88 3f 00 80 a0 |ForAccou|nt..?...|
|00005100| 01 00 19 5f 4c 73 61 47 | 65 74 51 75 6f 74 61 73 |..._LsaG|etQuotas|
|00005110| 46 6f 72 41 63 63 6f 75 | 6e 74 40 38 08 41 44 56 |ForAccou|nt@8.ADV|
|00005120| 41 50 49 33 32 16 4c 73 | 61 47 65 74 51 75 6f 74 |API32.Ls|aGetQuot|
|00005130| 61 73 46 6f 72 41 63 63 | 6f 75 6e 74 00 8a 02 00 |asForAcc|ount....|
|00005140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005150| 80 1b 00 19 4c 73 61 47 | 65 74 53 79 73 74 65 6d |....LsaG|etSystem|
|00005160| 41 63 63 65 73 73 41 63 | 63 6f 75 6e 74 00 88 45 |AccessAc|count..E|
|00005170| 00 80 a0 01 00 1c 5f 4c | 73 61 47 65 74 53 79 73 |......_L|saGetSys|
|00005180| 74 65 6d 41 63 63 65 73 | 73 41 63 63 6f 75 6e 74 |temAcces|sAccount|
|00005190| 40 38 08 41 44 56 41 50 | 49 33 32 19 4c 73 61 47 |@8.ADVAP|I32.LsaG|
|000051a0| 65 74 53 79 73 74 65 6d | 41 63 63 65 73 73 41 63 |etSystem|AccessAc|
|000051b0| 63 6f 75 6e 74 00 8a 02 | 00 00 00 00 00 00 00 00 |count...|........|
|000051c0| 80 10 00 0e 4c 73 61 47 | 65 74 55 73 65 72 4e 61 |....LsaG|etUserNa|
|000051d0| 6d 65 00 88 2f 00 80 a0 | 01 00 11 5f 4c 73 61 47 |me../...|..._LsaG|
|000051e0| 65 74 55 73 65 72 4e 61 | 6d 65 40 38 08 41 44 56 |etUserNa|me@8.ADV|
|000051f0| 41 50 49 33 32 0e 4c 73 | 61 47 65 74 55 73 65 72 |API32.Ls|aGetUser|
|00005200| 4e 61 6d 65 00 8a 02 00 | 00 00 00 00 00 00 00 00 |Name....|........|
|00005210| 80 12 00 10 4c 73 61 49 | 43 4c 6f 6f 6b 75 70 4e |....LsaI|CLookupN|
|00005220| 61 6d 65 73 00 88 34 00 | 80 a0 01 00 14 5f 4c 73 |ames..4.|....._Ls|
|00005230| 61 49 43 4c 6f 6f 6b 75 | 70 4e 61 6d 65 73 40 32 |aICLooku|pNames@2|
|00005240| 38 08 41 44 56 41 50 49 | 33 32 10 4c 73 61 49 43 |8.ADVAPI|32.LsaIC|
|00005250| 4c 6f 6f 6b 75 70 4e 61 | 6d 65 73 00 8a 02 00 00 |LookupNa|mes.....|
|00005260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005270| 80 11 00 0f 4c 73 61 49 | 43 4c 6f 6f 6b 75 70 53 |....LsaI|CLookupS|
|00005280| 69 64 73 00 88 32 00 80 | a0 01 00 13 5f 4c 73 61 |ids..2..|...._Lsa|
|00005290| 49 43 4c 6f 6f 6b 75 70 | 53 69 64 73 40 32 38 08 |ICLookup|Sids@28.|
|000052a0| 41 44 56 41 50 49 33 32 | 0f 4c 73 61 49 43 4c 6f |ADVAPI32|.LsaICLo|
|000052b0| 6f 6b 75 70 53 69 64 73 | 00 8a 02 00 00 00 00 00 |okupSids|........|
|000052c0| 80 10 00 0e 4c 73 61 4c | 6f 6f 6b 75 70 4e 61 6d |....LsaL|ookupNam|
|000052d0| 65 73 00 88 30 00 80 a0 | 01 00 12 5f 4c 73 61 4c |es..0...|..._LsaL|
|000052e0| 6f 6f 6b 75 70 4e 61 6d | 65 73 40 32 30 08 41 44 |ookupNam|es@20.AD|
|000052f0| 56 41 50 49 33 32 0e 4c | 73 61 4c 6f 6f 6b 75 70 |VAPI32.L|saLookup|
|00005300| 4e 61 6d 65 73 00 8a 02 | 00 00 00 00 00 00 00 00 |Names...|........|
|00005310| 80 1f 00 1d 4c 73 61 4c | 6f 6f 6b 75 70 50 72 69 |....LsaL|ookupPri|
|00005320| 76 69 6c 65 67 65 44 69 | 73 70 6c 61 79 4e 61 6d |vilegeDi|splayNam|
|00005330| 65 00 88 4e 00 80 a0 01 | 00 21 5f 4c 73 61 4c 6f |e..N....|.!_LsaLo|
|00005340| 6f 6b 75 70 50 72 69 76 | 69 6c 65 67 65 44 69 73 |okupPriv|ilegeDis|
|00005350| 70 6c 61 79 4e 61 6d 65 | 40 31 36 08 41 44 56 41 |playName|@16.ADVA|
|00005360| 50 49 33 32 1d 4c 73 61 | 4c 6f 6f 6b 75 70 50 72 |PI32.Lsa|LookupPr|
|00005370| 69 76 69 6c 65 67 65 44 | 69 73 70 6c 61 79 4e 61 |ivilegeD|isplayNa|
|00005380| 6d 65 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |me......|........|
|00005390| 80 18 00 16 4c 73 61 4c | 6f 6f 6b 75 70 50 72 69 |....LsaL|ookupPri|
|000053a0| 76 69 6c 65 67 65 4e 61 | 6d 65 00 88 40 00 80 a0 |vilegeNa|me..@...|
|000053b0| 01 00 1a 5f 4c 73 61 4c | 6f 6f 6b 75 70 50 72 69 |..._LsaL|ookupPri|
|000053c0| 76 69 6c 65 67 65 4e 61 | 6d 65 40 31 32 08 41 44 |vilegeNa|me@12.AD|
|000053d0| 56 41 50 49 33 32 16 4c | 73 61 4c 6f 6f 6b 75 70 |VAPI32.L|saLookup|
|000053e0| 50 72 69 76 69 6c 65 67 | 65 4e 61 6d 65 00 8a 02 |Privileg|eName...|
|000053f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005400| 80 19 00 17 4c 73 61 4c | 6f 6f 6b 75 70 50 72 69 |....LsaL|ookupPri|
|00005410| 76 69 6c 65 67 65 56 61 | 6c 75 65 00 88 42 00 80 |vilegeVa|lue..B..|
|00005420| a0 01 00 1b 5f 4c 73 61 | 4c 6f 6f 6b 75 70 50 72 |...._Lsa|LookupPr|
|00005430| 69 76 69 6c 65 67 65 56 | 61 6c 75 65 40 31 32 08 |ivilegeV|alue@12.|
|00005440| 41 44 56 41 50 49 33 32 | 17 4c 73 61 4c 6f 6f 6b |ADVAPI32|.LsaLook|
|00005450| 75 70 50 72 69 76 69 6c | 65 67 65 56 61 6c 75 65 |upPrivil|egeValue|
|00005460| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005470| 80 0f 00 0d 4c 73 61 4c | 6f 6f 6b 75 70 53 69 64 |....LsaL|ookupSid|
|00005480| 73 00 88 2e 00 80 a0 01 | 00 11 5f 4c 73 61 4c 6f |s.......|.._LsaLo|
|00005490| 6f 6b 75 70 53 69 64 73 | 40 32 30 08 41 44 56 41 |okupSids|@20.ADVA|
|000054a0| 50 49 33 32 0d 4c 73 61 | 4c 6f 6f 6b 75 70 53 69 |PI32.Lsa|LookupSi|
|000054b0| 64 73 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |ds......|........|
|000054c0| 80 17 00 15 4c 73 61 4e | 74 53 74 61 74 75 73 54 |....LsaN|tStatusT|
|000054d0| 6f 57 69 6e 45 72 72 6f | 72 00 88 3d 00 80 a0 01 |oWinErro|r..=....|
|000054e0| 00 18 5f 4c 73 61 4e 74 | 53 74 61 74 75 73 54 6f |.._LsaNt|StatusTo|
|000054f0| 57 69 6e 45 72 72 6f 72 | 40 34 08 41 44 56 41 50 |WinError|@4.ADVAP|
|00005500| 49 33 32 15 4c 73 61 4e | 74 53 74 61 74 75 73 54 |I32.LsaN|tStatusT|
|00005510| 6f 57 69 6e 45 72 72 6f | 72 00 8a 02 00 00 00 00 |oWinErro|r.......|
|00005520| 80 10 00 0e 4c 73 61 4f | 70 65 6e 41 63 63 6f 75 |....LsaO|penAccou|
|00005530| 6e 74 00 88 30 00 80 a0 | 01 00 12 5f 4c 73 61 4f |nt..0...|..._LsaO|
|00005540| 70 65 6e 41 63 63 6f 75 | 6e 74 40 31 36 08 41 44 |penAccou|nt@16.AD|
|00005550| 56 41 50 49 33 32 0e 4c | 73 61 4f 70 65 6e 41 63 |VAPI32.L|saOpenAc|
|00005560| 63 6f 75 6e 74 00 8a 02 | 00 00 00 00 00 00 00 00 |count...|........|
|00005570| 80 0f 00 0d 4c 73 61 4f | 70 65 6e 50 6f 6c 69 63 |....LsaO|penPolic|
|00005580| 79 00 88 2e 00 80 a0 01 | 00 11 5f 4c 73 61 4f 70 |y.......|.._LsaOp|
|00005590| 65 6e 50 6f 6c 69 63 79 | 40 31 36 08 41 44 56 41 |enPolicy|@16.ADVA|
|000055a0| 50 49 33 32 0d 4c 73 61 | 4f 70 65 6e 50 6f 6c 69 |PI32.Lsa|OpenPoli|
|000055b0| 63 79 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |cy......|........|
|000055c0| 80 0f 00 0d 4c 73 61 4f | 70 65 6e 53 65 63 72 65 |....LsaO|penSecre|
|000055d0| 74 00 88 2e 00 80 a0 01 | 00 11 5f 4c 73 61 4f 70 |t.......|.._LsaOp|
|000055e0| 65 6e 53 65 63 72 65 74 | 40 31 36 08 41 44 56 41 |enSecret|@16.ADVA|
|000055f0| 50 49 33 32 0d 4c 73 61 | 4f 70 65 6e 53 65 63 72 |PI32.Lsa|OpenSecr|
|00005600| 65 74 00 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |et......|........|
|00005610| 80 16 00 14 4c 73 61 4f | 70 65 6e 54 72 75 73 74 |....LsaO|penTrust|
|00005620| 65 64 44 6f 6d 61 69 6e | 00 88 3c 00 80 a0 01 00 |edDomain|..<.....|
|00005630| 18 5f 4c 73 61 4f 70 65 | 6e 54 72 75 73 74 65 64 |._LsaOpe|nTrusted|
|00005640| 44 6f 6d 61 69 6e 40 31 | 36 08 41 44 56 41 50 49 |Domain@1|6.ADVAPI|
|00005650| 33 32 14 4c 73 61 4f 70 | 65 6e 54 72 75 73 74 65 |32.LsaOp|enTruste|
|00005660| 64 44 6f 6d 61 69 6e 00 | 8a 02 00 00 00 00 00 00 |dDomain.|........|
|00005670| 80 1b 00 19 4c 73 61 51 | 75 65 72 79 49 6e 66 6f |....LsaQ|ueryInfo|
|00005680| 54 72 75 73 74 65 64 44 | 6f 6d 61 69 6e 00 88 46 |TrustedD|omain..F|
|00005690| 00 80 a0 01 00 1d 5f 4c | 73 61 51 75 65 72 79 49 |......_L|saQueryI|
|000056a0| 6e 66 6f 54 72 75 73 74 | 65 64 44 6f 6d 61 69 6e |nfoTrust|edDomain|
|000056b0| 40 31 32 08 41 44 56 41 | 50 49 33 32 19 4c 73 61 |@12.ADVA|PI32.Lsa|
|000056c0| 51 75 65 72 79 49 6e 66 | 6f 54 72 75 73 74 65 64 |QueryInf|oTrusted|
|000056d0| 44 6f 6d 61 69 6e 00 8a | 02 00 00 00 00 00 00 00 |Domain..|........|
|000056e0| 80 1b 00 19 4c 73 61 51 | 75 65 72 79 49 6e 66 6f |....LsaQ|ueryInfo|
|000056f0| 72 6d 61 74 69 6f 6e 50 | 6f 6c 69 63 79 00 88 46 |rmationP|olicy..F|
|00005700| 00 80 a0 01 00 1d 5f 4c | 73 61 51 75 65 72 79 49 |......_L|saQueryI|
|00005710| 6e 66 6f 72 6d 61 74 69 | 6f 6e 50 6f 6c 69 63 79 |nformati|onPolicy|
|00005720| 40 31 32 08 41 44 56 41 | 50 49 33 32 19 4c 73 61 |@12.ADVA|PI32.Lsa|
|00005730| 51 75 65 72 79 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |QueryInf|ormation|
|00005740| 50 6f 6c 69 63 79 00 8a | 02 00 00 00 00 00 00 00 |Policy..|........|
|00005750| 80 10 00 0e 4c 73 61 51 | 75 65 72 79 53 65 63 72 |....LsaQ|uerySecr|
|00005760| 65 74 00 88 30 00 80 a0 | 01 00 12 5f 4c 73 61 51 |et..0...|..._LsaQ|
|00005770| 75 65 72 79 53 65 63 72 | 65 74 40 32 30 08 41 44 |uerySecr|et@20.AD|
|00005780| 56 41 50 49 33 32 0e 4c | 73 61 51 75 65 72 79 53 |VAPI32.L|saQueryS|
|00005790| 65 63 72 65 74 00 8a 02 | 00 00 00 00 00 00 00 00 |ecret...|........|
|000057a0| 80 18 00 16 4c 73 61 51 | 75 65 72 79 53 65 63 75 |....LsaQ|uerySecu|
|000057b0| 72 69 74 79 4f 62 6a 65 | 63 74 00 88 40 00 80 a0 |rityObje|ct..@...|
|000057c0| 01 00 1a 5f 4c 73 61 51 | 75 65 72 79 53 65 63 75 |..._LsaQ|uerySecu|
|000057d0| 72 69 74 79 4f 62 6a 65 | 63 74 40 31 32 08 41 44 |rityObje|ct@12.AD|
|000057e0| 56 41 50 49 33 32 16 4c | 73 61 51 75 65 72 79 53 |VAPI32.L|saQueryS|
|000057f0| 65 63 75 72 69 74 79 4f | 62 6a 65 63 74 00 8a 02 |ecurityO|bject...|
|00005800| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005810| 80 1b 00 19 4c 73 61 51 | 75 65 72 79 54 72 75 73 |....LsaQ|ueryTrus|
|00005820| 74 65 64 44 6f 6d 61 69 | 6e 49 6e 66 6f 00 88 46 |tedDomai|nInfo..F|
|00005830| 00 80 a0 01 00 1d 5f 4c | 73 61 51 75 65 72 79 54 |......_L|saQueryT|
|00005840| 72 75 73 74 65 64 44 6f | 6d 61 69 6e 49 6e 66 6f |rustedDo|mainInfo|
|00005850| 40 31 36 08 41 44 56 41 | 50 49 33 32 19 4c 73 61 |@16.ADVA|PI32.Lsa|
|00005860| 51 75 65 72 79 54 72 75 | 73 74 65 64 44 6f 6d 61 |QueryTru|stedDoma|
|00005870| 69 6e 49 6e 66 6f 00 8a | 02 00 00 00 00 00 00 00 |inInfo..|........|
|00005880| 80 18 00 16 4c 73 61 52 | 65 6d 6f 76 65 41 63 63 |....LsaR|emoveAcc|
|00005890| 6f 75 6e 74 52 69 67 68 | 74 73 00 88 40 00 80 a0 |ountRigh|ts..@...|
|000058a0| 01 00 1a 5f 4c 73 61 52 | 65 6d 6f 76 65 41 63 63 |..._LsaR|emoveAcc|
|000058b0| 6f 75 6e 74 52 69 67 68 | 74 73 40 32 30 08 41 44 |ountRigh|ts@20.AD|
|000058c0| 56 41 50 49 33 32 16 4c | 73 61 52 65 6d 6f 76 65 |VAPI32.L|saRemove|
|000058d0| 41 63 63 6f 75 6e 74 52 | 69 67 68 74 73 00 8a 02 |AccountR|ights...|
|000058e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000058f0| 80 20 00 1e 4c 73 61 52 | 65 6d 6f 76 65 50 72 69 |. ..LsaR|emovePri|
|00005900| 76 69 6c 65 67 65 73 46 | 72 6f 6d 41 63 63 6f 75 |vilegesF|romAccou|
|00005910| 6e 74 00 88 50 00 80 a0 | 01 00 22 5f 4c 73 61 52 |nt..P...|.."_LsaR|
|00005920| 65 6d 6f 76 65 50 72 69 | 76 69 6c 65 67 65 73 46 |emovePri|vilegesF|
|00005930| 72 6f 6d 41 63 63 6f 75 | 6e 74 40 31 32 08 41 44 |romAccou|nt@12.AD|
|00005940| 56 41 50 49 33 32 1e 4c | 73 61 52 65 6d 6f 76 65 |VAPI32.L|saRemove|
|00005950| 50 72 69 76 69 6c 65 67 | 65 73 46 72 6f 6d 41 63 |Privileg|esFromAc|
|00005960| 63 6f 75 6e 74 00 8a 02 | 00 00 00 00 00 00 00 00 |count...|........|
|00005970| 80 18 00 16 4c 73 61 52 | 65 74 72 69 65 76 65 50 |....LsaR|etrieveP|
|00005980| 72 69 76 61 74 65 44 61 | 74 61 00 88 40 00 80 a0 |rivateDa|ta..@...|
|00005990| 01 00 1a 5f 4c 73 61 52 | 65 74 72 69 65 76 65 50 |..._LsaR|etrieveP|
|000059a0| 72 69 76 61 74 65 44 61 | 74 61 40 31 32 08 41 44 |rivateDa|ta@12.AD|
|000059b0| 56 41 50 49 33 32 16 4c | 73 61 52 65 74 72 69 65 |VAPI32.L|saRetrie|
|000059c0| 76 65 50 72 69 76 61 74 | 65 44 61 74 61 00 8a 02 |vePrivat|eData...|
|000059d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000059e0| 80 19 00 17 4c 73 61 53 | 65 74 49 6e 66 6f 72 6d |....LsaS|etInform|
|000059f0| 61 74 69 6f 6e 50 6f 6c | 69 63 79 00 88 42 00 80 |ationPol|icy..B..|
|00005a00| a0 01 00 1b 5f 4c 73 61 | 53 65 74 49 6e 66 6f 72 |...._Lsa|SetInfor|
|00005a10| 6d 61 74 69 6f 6e 50 6f | 6c 69 63 79 40 31 32 08 |mationPo|licy@12.|
|00005a20| 41 44 56 41 50 49 33 32 | 17 4c 73 61 53 65 74 49 |ADVAPI32|.LsaSetI|
|00005a30| 6e 66 6f 72 6d 61 74 69 | 6f 6e 50 6f 6c 69 63 79 |nformati|onPolicy|
|00005a40| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005a50| 80 20 00 1e 4c 73 61 53 | 65 74 49 6e 66 6f 72 6d |. ..LsaS|etInform|
|00005a60| 61 74 69 6f 6e 54 72 75 | 73 74 65 64 44 6f 6d 61 |ationTru|stedDoma|
|00005a70| 69 6e 00 88 50 00 80 a0 | 01 00 22 5f 4c 73 61 53 |in..P...|.."_LsaS|
|00005a80| 65 74 49 6e 66 6f 72 6d | 61 74 69 6f 6e 54 72 75 |etInform|ationTru|
|00005a90| 73 74 65 64 44 6f 6d 61 | 69 6e 40 31 32 08 41 44 |stedDoma|in@12.AD|
|00005aa0| 56 41 50 49 33 32 1e 4c | 73 61 53 65 74 49 6e 66 |VAPI32.L|saSetInf|
|00005ab0| 6f 72 6d 61 74 69 6f 6e | 54 72 75 73 74 65 64 44 |ormation|TrustedD|
|00005ac0| 6f 6d 61 69 6e 00 8a 02 | 00 00 00 00 00 00 00 00 |omain...|........|
|00005ad0| 80 18 00 16 4c 73 61 53 | 65 74 51 75 6f 74 61 73 |....LsaS|etQuotas|
|00005ae0| 46 6f 72 41 63 63 6f 75 | 6e 74 00 88 3f 00 80 a0 |ForAccou|nt..?...|
|00005af0| 01 00 19 5f 4c 73 61 53 | 65 74 51 75 6f 74 61 73 |..._LsaS|etQuotas|
|00005b00| 46 6f 72 41 63 63 6f 75 | 6e 74 40 38 08 41 44 56 |ForAccou|nt@8.ADV|
|00005b10| 41 50 49 33 32 16 4c 73 | 61 53 65 74 51 75 6f 74 |API32.Ls|aSetQuot|
|00005b20| 61 73 46 6f 72 41 63 63 | 6f 75 6e 74 00 8a 02 00 |asForAcc|ount....|
|00005b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005b40| 80 0e 00 0c 4c 73 61 53 | 65 74 53 65 63 72 65 74 |....LsaS|etSecret|
|00005b50| 00 88 2c 00 80 a0 01 00 | 10 5f 4c 73 61 53 65 74 |..,.....|._LsaSet|
|00005b60| 53 65 63 72 65 74 40 31 | 32 08 41 44 56 41 50 49 |Secret@1|2.ADVAPI|
|00005b70| 33 32 0c 4c 73 61 53 65 | 74 53 65 63 72 65 74 00 |32.LsaSe|tSecret.|
|00005b80| 8a 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005b90| 80 16 00 14 4c 73 61 53 | 65 74 53 65 63 75 72 69 |....LsaS|etSecuri|
|00005ba0| 74 79 4f 62 6a 65 63 74 | 00 88 3c 00 80 a0 01 00 |tyObject|..<.....|
|00005bb0| 18 5f 4c 73 61 53 65 74 | 53 65 63 75 72 69 74 79 |._LsaSet|Security|
|00005bc0| 4f 62 6a 65 63 74 40 31 | 32 08 41 44 56 41 50 49 |Object@1|2.ADVAPI|
|00005bd0| 33 32 14 4c 73 61 53 65 | 74 53 65 63 75 72 69 74 |32.LsaSe|tSecurit|
|00005be0| 79 4f 62 6a 65 63 74 00 | 8a 02 00 00 00 00 00 00 |yObject.|........|
|00005bf0| 80 1b 00 19 4c 73 61 53 | 65 74 53 79 73 74 65 6d |....LsaS|etSystem|
|00005c00| 41 63 63 65 73 73 41 63 | 63 6f 75 6e 74 00 88 45 |AccessAc|count..E|
|00005c10| 00 80 a0 01 00 1c 5f 4c | 73 61 53 65 74 53 79 73 |......_L|saSetSys|
|00005c20| 74 65 6d 41 63 63 65 73 | 73 41 63 63 6f 75 6e 74 |temAcces|sAccount|
|00005c30| 40 38 08 41 44 56 41 50 | 49 33 32 19 4c 73 61 53 |@8.ADVAP|I32.LsaS|
|00005c40| 65 74 53 79 73 74 65 6d | 41 63 63 65 73 73 41 63 |etSystem|AccessAc|
|00005c50| 63 6f 75 6e 74 00 8a 02 | 00 00 00 00 00 00 00 00 |count...|........|
|00005c60| 80 20 00 1e 4c 73 61 53 | 65 74 54 72 75 73 74 65 |. ..LsaS|etTruste|
|00005c70| 64 44 6f 6d 61 69 6e 49 | 6e 66 6f 72 6d 61 74 69 |dDomainI|nformati|
|00005c80| 6f 6e 00 88 50 00 80 a0 | 01 00 22 5f 4c 73 61 53 |on..P...|.."_LsaS|
|00005c90| 65 74 54 72 75 73 74 65 | 64 44 6f 6d 61 69 6e 49 |etTruste|dDomainI|
|00005ca0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 40 31 36 08 41 44 |nformati|on@16.AD|
|00005cb0| 56 41 50 49 33 32 1e 4c | 73 61 53 65 74 54 72 75 |VAPI32.L|saSetTru|
|00005cc0| 73 74 65 64 44 6f 6d 61 | 69 6e 49 6e 66 6f 72 6d |stedDoma|inInform|
|00005cd0| 61 74 69 6f 6e 00 8a 02 | 00 00 00 00 00 00 00 00 |ation...|........|
|00005ce0| 80 15 00 13 4c 73 61 53 | 74 6f 72 65 50 72 69 76 |....LsaS|torePriv|
|00005cf0| 61 74 65 44 61 74 61 00 | 88 3a 00 80 a0 01 00 17 |ateData.|.:......|
|00005d00| 5f 4c 73 61 53 74 6f 72 | 65 50 72 69 76 61 74 65 |_LsaStor|ePrivate|
|00005d10| 44 61 74 61 40 31 32 08 | 41 44 56 41 50 49 33 32 |Data@12.|ADVAPI32|
|00005d20| 13 4c 73 61 53 74 6f 72 | 65 50 72 69 76 61 74 65 |.LsaStor|ePrivate|
|00005d30| 44 61 74 61 00 8a 02 00 | 00 00 00 00 00 00 00 00 |Data....|........|
|00005d40| 80 10 00 0e 4d 61 6b 65 | 41 62 73 6f 6c 75 74 65 |....Make|Absolute|
|00005d50| 53 44 00 88 30 00 80 a0 | 01 00 12 5f 4d 61 6b 65 |SD..0...|..._Make|
|00005d60| 41 62 73 6f 6c 75 74 65 | 53 44 40 34 34 08 41 44 |Absolute|SD@44.AD|
|00005d70| 56 41 50 49 33 32 0e 4d | 61 6b 65 41 62 73 6f 6c |VAPI32.M|akeAbsol|
|00005d80| 75 74 65 53 44 00 8a 02 | 00 00 00 00 00 00 00 00 |uteSD...|........|
|00005d90| 80 14 00 12 4d 61 6b 65 | 53 65 6c 66 52 65 6c 61 |....Make|SelfRela|
|00005da0| 74 69 76 65 53 44 00 88 | 38 00 80 a0 01 00 16 5f |tiveSD..|8......_|
|00005db0| 4d 61 6b 65 53 65 6c 66 | 52 65 6c 61 74 69 76 65 |MakeSelf|Relative|
|00005dc0| 53 44 40 31 32 08 41 44 | 56 41 50 49 33 32 12 4d |SD@12.AD|VAPI32.M|
|00005dd0| 61 6b 65 53 65 6c 66 52 | 65 6c 61 74 69 76 65 53 |akeSelfR|elativeS|
|00005de0| 44 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |D.......|........|
|00005df0| 80 10 00 0e 4d 61 70 47 | 65 6e 65 72 69 63 4d 61 |....MapG|enericMa|
|00005e00| 73 6b 00 88 2f 00 80 a0 | 01 00 11 5f 4d 61 70 47 |sk../...|..._MapG|
|00005e10| 65 6e 65 72 69 63 4d 61 | 73 6b 40 38 08 41 44 56 |enericMa|sk@8.ADV|
|00005e20| 41 50 49 33 32 0e 4d 61 | 70 47 65 6e 65 72 69 63 |API32.Ma|pGeneric|
|00005e30| 4d 61 73 6b 00 8a 02 00 | 00 00 00 00 00 00 00 00 |Mask....|........|
|00005e40| 80 20 00 1e 4e 54 41 63 | 63 65 73 73 4d 61 73 6b |. ..NTAc|cessMask|
|00005e50| 54 6f 50 72 6f 76 41 63 | 63 65 73 73 52 69 67 68 |ToProvAc|cessRigh|
|00005e60| 74 73 00 88 50 00 80 a0 | 01 00 22 5f 4e 54 41 63 |ts..P...|.."_NTAc|
|00005e70| 63 65 73 73 4d 61 73 6b | 54 6f 50 72 6f 76 41 63 |cessMask|ToProvAc|
|00005e80| 63 65 73 73 52 69 67 68 | 74 73 40 31 32 08 41 44 |cessRigh|ts@12.AD|
|00005e90| 56 41 50 49 33 32 1e 4e | 54 41 63 63 65 73 73 4d |VAPI32.N|TAccessM|
|00005ea0| 61 73 6b 54 6f 50 72 6f | 76 41 63 63 65 73 73 52 |askToPro|vAccessR|
|00005eb0| 69 67 68 74 73 00 8a 02 | 00 00 00 00 00 00 00 00 |ights...|........|
|00005ec0| 80 18 00 16 4e 6f 74 69 | 66 79 42 6f 6f 74 43 6f |....Noti|fyBootCo|
|00005ed0| 6e 66 69 67 53 74 61 74 | 75 73 00 88 3f 00 80 a0 |nfigStat|us..?...|
|00005ee0| 01 00 19 5f 4e 6f 74 69 | 66 79 42 6f 6f 74 43 6f |..._Noti|fyBootCo|
|00005ef0| 6e 66 69 67 53 74 61 74 | 75 73 40 34 08 41 44 56 |nfigStat|us@4.ADV|
|00005f00| 41 50 49 33 32 16 4e 6f | 74 69 66 79 42 6f 6f 74 |API32.No|tifyBoot|
|00005f10| 43 6f 6e 66 69 67 53 74 | 61 74 75 73 00 8a 02 00 |ConfigSt|atus....|
|00005f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005f30| 80 16 00 14 4e 6f 74 69 | 66 79 43 68 61 6e 67 65 |....Noti|fyChange|
|00005f40| 45 76 65 6e 74 4c 6f 67 | 00 88 3b 00 80 a0 01 00 |EventLog|..;.....|
|00005f50| 17 5f 4e 6f 74 69 66 79 | 43 68 61 6e 67 65 45 76 |._Notify|ChangeEv|
|00005f60| 65 6e 74 4c 6f 67 40 38 | 08 41 44 56 41 50 49 33 |entLog@8|.ADVAPI3|
|00005f70| 32 14 4e 6f 74 69 66 79 | 43 68 61 6e 67 65 45 76 |2.Notify|ChangeEv|
|00005f80| 65 6e 74 4c 6f 67 00 8a | 02 00 00 00 00 00 00 00 |entLog..|........|
|00005f90| 80 18 00 16 4f 62 6a 65 | 63 74 43 6c 6f 73 65 41 |....Obje|ctCloseA|
|00005fa0| 75 64 69 74 41 6c 61 72 | 6d 41 00 88 40 00 80 a0 |uditAlar|mA..@...|
|00005fb0| 01 00 1a 5f 4f 62 6a 65 | 63 74 43 6c 6f 73 65 41 |..._Obje|ctCloseA|
|00005fc0| 75 64 69 74 41 6c 61 72 | 6d 41 40 31 32 08 41 44 |uditAlar|mA@12.AD|
|00005fd0| 56 41 50 49 33 32 16 4f | 62 6a 65 63 74 43 6c 6f |VAPI32.O|bjectClo|
|00005fe0| 73 65 41 75 64 69 74 41 | 6c 61 72 6d 41 00 8a 02 |seAuditA|larmA...|
|00005ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006000| 80 18 00 16 4f 62 6a 65 | 63 74 43 6c 6f 73 65 41 |....Obje|ctCloseA|
|00006010| 75 64 69 74 41 6c 61 72 | 6d 57 00 88 40 00 80 a0 |uditAlar|mW..@...|
|00006020| 01 00 1a 5f 4f 62 6a 65 | 63 74 43 6c 6f 73 65 41 |..._Obje|ctCloseA|
|00006030| 75 64 69 74 41 6c 61 72 | 6d 57 40 31 32 08 41 44 |uditAlar|mW@12.AD|
|00006040| 56 41 50 49 33 32 16 4f | 62 6a 65 63 74 43 6c 6f |VAPI32.O|bjectClo|
|00006050| 73 65 41 75 64 69 74 41 | 6c 61 72 6d 57 00 8a 02 |seAuditA|larmW...|
|00006060| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006070| 80 19 00 17 4f 62 6a 65 | 63 74 44 65 6c 65 74 65 |....Obje|ctDelete|
|00006080| 41 75 64 69 74 41 6c 61 | 72 6d 41 00 88 42 00 80 |AuditAla|rmA..B..|
|00006090| a0 01 00 1b 5f 4f 62 6a | 65 63 74 44 65 6c 65 74 |...._Obj|ectDelet|
|000060a0| 65 41 75 64 69 74 41 6c | 61 72 6d 41 40 31 32 08 |eAuditAl|armA@12.|
|000060b0| 41 44 56 41 50 49 33 32 | 17 4f 62 6a 65 63 74 44 |ADVAPI32|.ObjectD|
|000060c0| 65 6c 65 74 65 41 75 64 | 69 74 41 6c 61 72 6d 41 |eleteAud|itAlarmA|
|000060d0| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000060e0| 80 19 00 17 4f 62 6a 65 | 63 74 44 65 6c 65 74 65 |....Obje|ctDelete|
|000060f0| 41 75 64 69 74 41 6c 61 | 72 6d 57 00 88 42 00 80 |AuditAla|rmW..B..|
|00006100| a0 01 00 1b 5f 4f 62 6a | 65 63 74 44 65 6c 65 74 |...._Obj|ectDelet|
|00006110| 65 41 75 64 69 74 41 6c | 61 72 6d 57 40 31 32 08 |eAuditAl|armW@12.|
|00006120| 41 44 56 41 50 49 33 32 | 17 4f 62 6a 65 63 74 44 |ADVAPI32|.ObjectD|
|00006130| 65 6c 65 74 65 41 75 64 | 69 74 41 6c 61 72 6d 57 |eleteAud|itAlarmW|
|00006140| 00 8a 02 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00006150| 80 17 00 15 4f 62 6a 65 | 63 74 4f 70 65 6e 41 75 |....Obje|ctOpenAu|
|00006160| 64 69 74 41 6c 61 72 6d | 41 00 88 3e 00 80 a0 01 |ditAlarm|A..>....|
|00006170| 00 19 5f 4f 62 6a 65 63 | 74 4f 70 65 6e 41 75 64 |.._Objec|tOpenAud|
|00006180| 69 74 41 6c 61 72 6d 41 | 40 34 38 08 41 44 56 41 |itAlarmA|@48.ADVA|
|00006190| 50 49 33 32 15 4f 62 6a | 65 63 74 4f 70 65 6e 41 |PI32.Obj|ectOpenA|
|000061a0| 75 64 69 74 41 6c 61 72 | 6d 41 00 8a 02 00 00 00 |uditAlar|mA......|
|000061b0| 80 17 00 15 4f 62 6a 65 | 63 74 4f 70 65 6e 41 75 |....Obje|ctOpenAu|
|000061c0| 64 69 74 41 6c 61 72 6d | 57 00 88 3e 00 80 a0 01 |ditAlarm|W..>....|
|000061d0| 00 19 5f 4f 62 6a 65 63 | 74 4f 70 65 6e 41 75 64 |.._Objec|tOpenAud|
|000061e0| 69 74 41 6c 61 72 6d 57 | 40 34 38 08 41 44 56 41 |itAlarmW|@48.ADVA|
|000061f0| 50 49 33 32 15 4f 62 6a | 65 63 74 4f 70 65 6e 41 |PI32.Obj|ectOpenA|
|00006200| 75 64 69 74 41 6c 61 72 | 6d 57 00 8a 02 00 00 00 |uditAlar|mW......|
|00006210| 80 1c 00 1a 4f 62 6a 65 | 63 74 50 72 69 76 69 6c |....Obje|ctPrivil|
|00006220| 65 67 65 41 75 64 69 74 | 41 6c 61 72 6d 41 00 88 |egeAudit|AlarmA..|
|00006230| 48 00 80 a0 01 00 1e 5f | 4f 62 6a 65 63 74 50 72 |H......_|ObjectPr|
|00006240| 69 76 69 6c 65 67 65 41 | 75 64 69 74 41 6c 61 72 |ivilegeA|uditAlar|
|00006250| 6d 41 40 32 34 08 41 44 | 56 41 50 49 33 32 1a 4f |mA@24.AD|VAPI32.O|
|00006260| 62 6a 65 63 74 50 72 69 | 76 69 6c 65 67 65 41 75 |bjectPri|vilegeAu|
|00006270| 64 69 74 41 6c 61 72 6d | 41 00 8a 02 00 00 00 00 |ditAlarm|A.......|
|00006280| 80 1c 00 1a 4f 62 6a 65 | 63 74 50 72 69 76 69 6c |....Obje|ctPrivil|
|00006290| 65 67 65 41 75 64 69 74 | 41 6c 61 72 6d 57 00 88 |egeAudit|AlarmW..|
|000062a0| 48 00 80 a0 01 00 1e 5f | 4f 62 6a 65 63 74 50 72 |H......_|ObjectPr|
|000062b0| 69 76 69 6c 65 67 65 41 | 75 64 69 74 41 6c 61 72 |ivilegeA|uditAlar|
|000062c0| 6d 57 40 32 34 08 41 44 | 56 41 50 49 33 32 1a 4f |mW@24.AD|VAPI32.O|
|000062d0| 62 6a 65 63 74 50 72 69 | 76 69 6c 65 67 65 41 75 |bjectPri|vilegeAu|
|000062e0| 64 69 74 41 6c 61 72 6d | 57 00 8a 02 00 00 00 00 |ditAlarm|W.......|
|000062f0| 80 15 00 13 4f 70 65 6e | 42 61 63 6b 75 70 45 76 |....Open|BackupEv|
|00006300| 65 6e 74 4c 6f 67 41 00 | 88 39 00 80 a0 01 00 16 |entLogA.|.9......|
|00006310| 5f 4f 70 65 6e 42 61 63 | 6b 75 70 45 76 65 6e 74 |_OpenBac|kupEvent|
|00006320| 4c 6f 67 41 40 38 08 41 | 44 56 41 50 49 33 32 13 |LogA@8.A|DVAPI32.|
|00006330| 4f 70 65 6e 42 61 63 6b | 75 70 45 76 65 6e 74 4c |OpenBack|upEventL|
|00006340| 6f 67 41 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |ogA.....|........|
|00006350| 80 15 00 13 4f 70 65 6e | 42 61 63 6b 75 70 45 76 |....Open|BackupEv|
|00006360| 65 6e 74 4c 6f 67 57 00 | 88 39 00 80 a0 01 00 16 |entLogW.|.9......|
|00006370| 5f 4f 70 65 6e 42 61 63 | 6b 75 70 45 76 65 6e 74 |_OpenBac|kupEvent|
|00006380| 4c 6f 67 57 40 38 08 41 | 44 56 41 50 49 33 32 13 |LogW@8.A|DVAPI32.|
|00006390| 4f 70 65 6e 42 61 63 6b | 75 70 45 76 65 6e 74 4c |OpenBack|upEventL|
|000063a0| 6f 67 57 00 8a 02 00 00 | 00 00 00 00 00 00 00 00 |ogW.....|........|
|000063b0| 80 0f 00 0d 4f 70 65 6e | 45 76 65 6e 74 4c 6f 67 |....Open|EventLog|
|000063c0| 41 00 88 2d 00 80 a0 01 | 00 10 5f 4f 70 65 6e 45 |A..-....|.._OpenE|
|000063d0| 76 65 6e 74 4c 6f 67 41 | 40 38 08 41 44 56 41 50 |ventLogA|@8.ADVAP|
|000063e0| 49 33 32 0d 4f 70 65 6e | 45 76 65 6e 74 4c 6f 67 |I32.Open|EventLog|
|000063f0| 41 00 8a 02 00 00 00 00 | 00 00 00 00 00 00 00 00 |A.......|........|
+--------+-------------------------+-------------------------+--------+--------+