Mini Kabibi Habibi
| Current Path : C:/Windows/System32/ |
|
|
| Current File : C:/Windows/System32/UserDataAccessRes.dll |
MZ� �� � @ � � � �!�L�!This program cannot be run in DOS mode.
$ 5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PE d� \J � " �
@ N� ` � 8 .rdata � @ @.rsrc � @ @ \J
T 8 8 \J $ � � 8 .rdata 8 x .rdata$zzzdbg .rsrc$01 ! � .rsrc$02 � �ڻ��0פȚ��C� [��ɱ��\J �( �� �@ � X � p � � � � � � � � �: � ! � �6 �
W E V T _ T E M P L A T E M U I CRIM� ����/�J����d���$ WEVT� ���� l
P � � � � � TTBL�
TEMP� � R�.&��]f�߈uhC ��� D� E v e n t D a t a A��? �o D a t a ' K� N a m e
P 1 _ H R e s u l t
A��= �o D a t a % K� N a m e P 2 _ S t r i n g
A��= �o D a t a % K� N a m e P 3 _ U I n t 3 2
� � P 1 _ H R e s u l t P 2 _ S t r i n g P 3 _ U I n t 3 2 TEMP� � z[���TR�HH/t ��Z D� E v e n t D a t a A��9 �o D a t a ! K� N a m e M e s s a g e
� M e s s a g e TEMP� � ���vڙ�\Q��o���� ��� D� E v e n t D a t a A��A �o D a t a ) K� N a m e P 1 _ H e x I n t 3 2
A��= �o D a t a % K� N a m e P 1 _ S t r i n g
A��= �o D a t a % K� N a m e P 1 _ U I n t 3 2
0 L d P 1 _ H e x I n t 3 2 P 1 _ S t r i n g P 1 _ U I n t 3 2 TEMP� � M�& ى<Xnit&N�� ��� D� E v e n t D a t a A��K �o D a t a 3 K� N a m e P r o p _ L I N E _ U I n t 3 2
A��[ �o D a t a C K� N a m e P r o p _ T r a c e _ U n i c o d e S t r i n g
� � ( P r o p _ L I N E _ U I n t 3 2 8 P r o p _ T r a c e _ U n i c o d e S t r i n g TEMP� � ���*�_ᘅ��z|� ��| D� E v e n t D a t a A��[ �o D a t a C K� N a m e P r o p _ T r a c e _ U n i c o d e S t r i n g
� 8 P r o p _ T r a c e _ U n i c o d e S t r i n g TEMPL � �BS H� [�e��=�9 ��� D� E v e n t D a t a A��K �o D a t a 3 K� N a m e P 1 _ U n i c o d e S t r i n g
A��= �o D a t a % K� N a m e P 1 _ U I n t 3 2
8 ( P 1 _ U n i c o d e S t r i n g P 1 _ U I n t 3 2 TEMP� x ߊ��`�]+I�s�ՊT ��� D� E v e n t D a t a A��A �o D a t a ) K� N a m e P 1 _ H e x I n t 3 2
A��A �o D a t a ) K� N a m e P r o p _ H a n d l e
A��C �o D a t a + K� N a m e P r o p _ H a n d l e 2
� � � P 1 _ H e x I n t 3 2 P r o p _ H a n d l e P r o p _ H a n d l e 2 TEMP� �
�W&�T[�" Hyn� ��l D� E v e n t D a t a A��K �o D a t a 3 K� N a m e P 1 _ U n i c o d e S t r i n g
�
( P 1 _ U n i c o d e S t r i n g TEMP� x ��H!ZIg\��_�jn*J ��\ D� E v e n t D a t a A��; �o D a t a # K� N a m e P 1 _ I n t 3 2
� P 1 _ I n t 3 2 TEMPl � � `~���TRla'�Z! ��� D� E v e n t D a t a A��K �o D a t a 3 K� N a m e P 1 _ U n i c o d e S t r i n g
A��K �o D a t a 3 K� N a m e P 2 _ U n i c o d e S t r i n g
� � ( P 1 _ U n i c o d e S t r i n g ( P 2 _ U n i c o d e S t r i n g TEMP@ �
�!� �
[7��[�� ��� D� E v e n t D a t a A��A �o D a t a ) K� N a m e P 1 _ H e x I n t 3 2
A��A �o D a t a ) K� N a m e P 2 _ H e x I n t 3 2
4 P 1 _ H e x I n t 3 2 P 2 _ H e x I n t 3 2 PRVAt d M i c r o s o f t - W i n d o w s - U s e r D a t a A c c e s s - U s e r D a t a U t i l s OPCO LEVL� P P$ P@ Ph w i n : E r r o r w i n : W a r n i n g ( w i n : I n f o r m a t i o n a l w i n : V e r b o s e TASKH p � t r a c e m e s s a g e KEYW ����� ����� ����� � � @ ���� � ���� ����D ����t @ ����� � ����� E r r o r P e r f o r m a n c e , U s e r D a t a A c c e s s U t i l s S e r v i c e B a s e d e b u g W a r n i n g $ S t a t e T r a n s i t i o n 0 m s : R e s e r v e d K e y w o r d 4 4 m s : T e l e m e t r y m s : M e a s u r e s $ m s : C r i t i c a l D a t a EVNT �x � x @ �x � | ���� � � e e �| � � f @ f � � � g g � � � h @ h � � � i i � � � j @ j � � � k @ k � � � - - �P � � � @ � �
� � � @ � �
� � � @ � � � � � @ � ��
� � � @ � ��
� � X X ��
� � Y Y �� � � Z Z �
� � � ( � h h � h � h � ( ( ( � h � h � � � �4 V S _ V E R S I O N _ I N F O ��
aJ
aJ? . S t r i n g F i l e I n f o
0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n | * F i l e D e s c r i p t i o n R e s o u r c e D L L f o r t h e U s e r D a t a A c c e s s s t a c k h $ F i l e V e r s i o n 1 0 . 0 . 1 9 0 4 1 . 1 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) D I n t e r n a l N a m e U s e r D a t a A c c e s s R e s � . L e g a l C o p y r i g h t � M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . T O r i g i n a l F i l e n a m e U s e r D a t a A c c e s s R e s . d l l j % P r o d u c t N a m e M i c r o s o f t � W i n d o w s � O p e r a t i n g S y s t e m >
P r o d u c t V e r s i o n 1 0 . 0 . 1 9 0 4 1 . 1 D V a r F i l e I n f o $ T r a n s l a t i o n � ��� ��b-��T��߫i�� y�sA��[� ;�FHUB � * � � � � W E V T _ T E M P L A T E M U I M U I e n - U S