Hacked By AnonymousFox
| Current Path : C:/Windows/SysWOW64/ |
|
|
| Current File : C:/Windows/SysWOW64/eventcreate.exe |
MZ @ !L!This program cannot be run in DOS mode.
$ g N N NN Nǔ O Nǔ
O Nǔ
O NN NǔO NǔO NǔN Nǔ O NRich N PE L +
\ ( f p @
@ $ p P p T .text [ \ `.data p ` @ .idata ( b @ @.rsrc p
t @ @.reloc P ~ @ B pp@ p@ p@ @ @ @ u c@ pc@ f@ pc c f 0f @f f Pg i i
\ \ % s S Y S T E M \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ E v e n t L o g % s \ % s \ % s C u s t o m S o u r c e % s \ % s % S y s t e m R o o t % \ S y s t e m 3 2 \ E v e n t C r e a t e . e x e E v e n t M e s s a g e F i l e T y p e s S u p p o r t e d | e r r o r | i n f o r m a t i o n | w a r n i n g | s u c c e s s PARSER2 ? s u p l t s o i d d * s e c u r i t y E R R O R S U C C E S S W A R N I N G I N F O R M A T I O N % s | % s | %s % c
BUFFER \ \ l o c a l h o s t \ / [ ] : | < > + = ; , ? $ # ( ) ! @ ^ " ` { } * % . I P C $ \ \ % s \ % s \ V a r F i l e I n f o \ T r a n s l a t i o n \ S t r i n g F i l e I n f o \ % 0 4 x % 0 4 x \ I n t e r n a l N a m e . E X E % s % s / PARSER2 - / + % +
+ i RSDSd_Ձ2 ߏ' evcreate.pdb GCTL .rdata$brc .CRT$XCA .CRT$XCAA .CRT$XCZ .CRT$XIA .CRT$XIAA .CRT$XIY .CRT$XIZ ( .gfids .rdata .rdata$sxdata .rdata$zzzdbg T .text$mn `k .xdata$x p @ .data @p | .bss .idata$5 .00cfg $ l .idata$2 .idata$3 .idata$4 Ć d
.idata$6 .rsrc$01 .rsrc$02 U8SVW3ۍEj4]Y@uU EMPEP u3CU3G9}u- jS Y G vH uUuMuԉ}uA1 ujS Y h@ = t= Ptz= uj]S Y M ; 9]tlW9]tDWS Y@ 8 S \ uuuPWjW,S YPg ]S Y@ S u&9]t9WR Y@ S uuPWWWR YP <h+ d@ jR Y ߍM
#jR Y M
3;_^[]ËUS3VEEEE ~ tvv@ ~ vv@ WEPj@ P@ upE3PWWju@ h@ zuVMI1$ EtDMQuPju@ u&F 3QEEPEQW0F$v QPS|@ ut } t u@ } tM # ~ St@ @ _h+ d@ - 3^[]ËU< p@ 3ĉ$8 SV3 WVPD$ ىD$0D$ D$D$D$HPP V$P j PP uh+ d@ 3 st&& uVh@ j t| D$Ph V @ tP멍D$Ph j h @ t$$ @ t*HtPh d@ 0 t$@ kC3҉D$,CD$0 T$4D$@D$ T$ t$$T$ @uD$8PRRRD$(PD$TPRt$,@ 9|$,tKT$@j j u@D$ D$ L$0E = D$ Ph VD$LPt$ @ 3D$ $@ @uD$8PRRRD$(P$T PRt$(@ uhK$@ Pjp tHFD$ $@ 3҈@uD$8PRRRD$(P$T PVt$(@ = uD$$ Pd@
t$ @ !|$ 3|$$uc9t$, |$ uKT$@Vj D$@ Pj t 3PFV t$ u 9D$ T$4D$@BD$ T$4 @uD$8P3PPPD$(PD$TPRt$,@ 3= 5 t$$!t$($@ PD$D3Ph @ hX@ Gj|$0 u
3Fk L$ Qjj Pt$$ @ t Pd@ 3PPPPhl@ t$ @ t$ @ Wd@ 4 3F|$ t$@ d$ K 9|$, D$ u{P sPj\ t$@ Nj$D _^[3G ]t$ @ uD$( u3PFd@ e3D$( G3S|$0 tu|$$ ush @ h@ j
A
L$Qh j Pt$$ @ SL$ ut$@ t$t$ 3G@ t$@ |$0 |$$ j
|$( j
US3ىEEEVW h@ H@ E } u@ EPEP3Ph Ph@ PVS@ tPd@
M M3ۍ PWjSh@ u @ tPd@ u@ ]j^VEE PVSh @ u @ uVE3PVShl@ uG} @ uu@ M8 jWd@ ^ 3_^[]ËU p@ 3ʼnEE SVW}ى , @ujx@ ,i 3Dž< @Dž4
3Djx@ @|XDžL@ " 3Dž @jx@ Dž@ 3Dž @jx@ Dž@ 3Dž, @0jx@ 4l$Dž<@ q 3Dž| @jx@ tDž@ 6 3Dž @jXPjjZ
h0@ (H@ (p Ɖ$ t*$(3f $0@ d jx@ Dž@ \3Dž FDž,@ jx@ $N p Mtx@ w Džl jDžd uDž|@ 3e @QEĉE,PQQE Ę@ J5 3A9u1jX;~#hd@ j a Z { H= A w HGG8GE؉WO G tuhd@ 뀅tu
ntuu G, Gu @G, u@ G0 ta8 t H u-tw0@ 3F39_uaOuCG p@ JQQ@ uԺ u
B 3F3G0 QQ p@ uG$p@ OtSV@ ) u S jSjeZ QQOX SjhZ QQO; SjfZ QQO tiSjgZt QQO tLQQO@ tJQQO@ t3QQO@ tQQO@ ujjXfG$3fw$,h Qj PjXPB hd@ 3M_^3[? ] VW~(u QNJ! NT NL N D N< N 4 N9 p@ t$ N9$p@ _^t 3@ËV3F95t@ u
t@ U7 uoh@ u{h+ n=t@ uB7 ȉ
t@ %7 tCQD@ 7 u4:9 ;u+19 u!'9 uj 5t@ Ā@ ft^h@ ujd@ 3^Ã=t@ Vt<jZ9 ;v0Vr; t&V?: tjh<@ Vȁ@ uF ^3^ËUQQUSVW}utPtGjZ~9 ;w#
t@ jZ9 t'Ӌ+B8 tS: tS9 uG3_^[] jYC utf <@ f j VSA: u
Mm jh<@ Vȁ@ u]t
xF;w v%?;s ?u. F b~N TtW N 4 ҃} u?Pj Q(B F !
t@ t"5 t38 D@ ËVWh@ uh@ ujWd@ 3_^utQ
t@ 3V8 uh@ ujWd@ 3@NjUM V3Wuh@ uijW_9uu
y3@Xj 3VjYt+EPu =z tЅyP_^]0h@ ujd@ 3_^]ËUQV3utkVVEPVh@ PVh @ tMt4u@ 49utu@ h@ ujd@ h@ ujd@ 3^]ËUQe 3VWj 3W tIj33WAt6% HPW HPVEP@ u.tEjX_^]ËVtЋ
t3@^3^ËSVڅtp th tW3Gt "t t
t { Ph@ WWV eЋM
_h@ ujWd@ 3^[ËUQ
t@ `2 uvWjZ5 t\VwV
7 = uDV5 Et7H M
t@ j jZC0 tx u
H 4 Nu^t@ ^2 _=t@ u0@ 3@]ËU( p@ 3ʼnEV Vj P> ft@ 3FDž jjj j fE@ jVRP@ jj RP@ RPjP @ 3Ʌ^M39 ]át@ 3Vj
@^t@ R ^ËUQQSV3uWuh@ : jW- t& 3B3 ;}w,
t@ 3B 4 U+BI3 j3WjYE WPSV(@ ȅu5h@ = VVEPVSVh @ ȅ EEG;s
t@ 3VBZ. t9xuUQuH 3 ƅt:9ut u@ u
t@ 3VB. t9xu
UH P3 h@ ujd@ D@ _^[] UVW3}tj tatjWW3uh@ uOjÉ@ 8EPV@ ]́@ 8"tMt Z uEh@ ujWd@ _^]ËUQVW3} WW3buh@ urjhQ3ҋ6 tǴ@ j
8Ef>-PVu@ @ ́@ 8"tMt uh@ ujWd@ 3_^]ËUQVW3} W3Wuh@ u|jrQ3ҋ 9 tc9}uf>-tX́@ }j
8EPVu@ @ ́@ 8"t'Mt u3@h@ ujWd@ 3_^] VWuh@ u*jW tWV0@ t+h d@ _^ U SVW Z j33ɍXSEuh@ j|+ 3jP3҉EArEtVuh@ SV yP>W}h@ uW xQu 3Ƀh@ ujWd@ 3_^[] UQSVWEtNtJ t6y t+n t 3tEQQfpu!F;rh h@ ujWd@ _^[] USVWtEtA ϋ t(t$;r }WVu,@ $@ t+ h h@ ujWd@ _^[] Up@ 3ʼnE @ SVWEf @ 3ۉ}u]fE q t ^ uEEft!]QS(@ t
fu]uft4}QW(@ tu3ۃfu}t3f];v @PB D@ M_^3[`2 ] VWt"t V|@ uWV\@ t3@3_^ËUQSVW3}uh@ upjWfQЁ@ ́@ V8@ YYtĆ@ 8 t8S|@ u4+tt ujjjԀ@ UK
jd@ 3_^[]ËUVtFtBE~;3Ʌt=vW xQRQЋG t yPd@ 3^] 3@UVtBE~;3҅t=vW xQVQ
t3fyPd@ 3^] 3@U
t tU~P yPd@ 3] 3@u3QH@ ËUVt.t*E 3Ƀ}uPRPVQ@ P@@ h@ ujWd@ 3^] ttjRjQjj@@ h@ ujWd@ 3 Ue SVW P4 Y;ujԀ@ ؉] j4 Y; jԀ@ ؉Ee j EPVWST@ t;utXh@ uU3ۉEt= +;vj EPVWuT@ t!;uu E ف ;r3@` j 4 Yj܀@ h@ 4 h+ $ Bh j hs@ u3 3Ƀ Et+M v GEQQQQVPQX@ P8@ E = v v+N3ɉMtyE;sh j hs@ l3 3PPh hs@ VuPX@ P8@ EtHuhs@ h$@ S@ S@ Eu;3/h@ u h+ d@ jh@ ujWd@ 3_^[]ËUQQUSV } } u
M } 3ɍEE3j3H% QjMYtIEPEHPVj j uh @ uh@ th@ zu~e u]M3@nh@ ubjX3j ESj3҉EYtuӋu| e =z tDžyPh@ ujWd@ 3^[]ËUQSVW3щU ] u93 tv{qttu Pj WS1 U t
RL@ ;~VWPuj j<@ uEh@ u h+ d@ tBt>u Pj W0 )Qj W0 3@h@ ujWd@ 3_^[] UDp@ 3ʼnE3US؉EȉEЉEVW}܉Mf3}諫uh@ jWd@ jԀ@ Uċ3҅UԅtjVP@ U3}ܫf3}諫}Ej PjuCEPVx@ } ? EۍUE܍M܍EE
P#fMfMEPVL@ G fMf
jXf; UԅxPh(@ Ej
P Ej PjEPjԀ@ PT@ j h(@ Ej
Pb Ej PjEPjԀ@ PT@ jh(@ Ej
P2 Ej PjEPjԀ@ PT@ KUEH;uj EPjh0@ !Uj
Xf;j Ef _PjCh@ jԀ@ PT@ u3Vf_P@ j
XP4@ M8j MQjMQjԀ@ PT@ 3@ uVP@ 3M_^3[3) ]ËSVWuh@ u!jWd@ 39 u3@;@ u3+ uh@ PS6- 6SW@ _^[ËVuh@ u$jW@ tVj P@ u
jd@ 3^jh`k@ + uh@ u|jWd@ r@ the Vj P@ EEPE E3@Ëe} t} uhp d@ h@ ujd@ E3Y+ j hk@ + u u! @ e W6j P@ uh@ ujd@ EUE3@IE E3@Ëe} t} uhp d@ 3h@ ujWd@ 3}* ËVuh@ ujWd@ ^$t@ tVj P@ ^ËUSVW3W tvxBt
f98tu+ǁ#xQu+Q y _^[] Ut+E VW+t<ft f9Nu_^uҁ3fz ] Ut&E SV+t t ANu^[uI ҁz ] UE 3Ʌt=vW xMQuQM tE3f]ËUSVWuru 3VW@ x;wu
z 3fw_^[] U3tvW xu uQ t3f] Vuh@ ujWd@
Iw3^jjH@ ?^@ËUQSVW3W}d@ VH@ EPWj\@ h@ = u'ju3jY,uh@ ujd@ 3 EPSj\@ tWjtqx }EuiQP3ҋ tju3jYtQEP tj jLtP@ j j8g3@_^[]PWj\@ h@ = Bju3jYG)EPWj\@ 떋UDp@ 3ĉD$@SVWٍ|$d@ jYtuSH@ tjx QuBd$ D$P3ҋ t'jt$3jYtQL$Q u 3 QT$ t
j5d@ 3@L$L_^[3" ]ËUp@ 3ʼnESVW3tzVH@ toWWjY9uh@ u`jVh@ P@ YYt=j 2t;n= w-h@ j _@ YYu˃u@
hO% d@ 3M_^3[" ]ËU
p@ 3ʼnES]3VWjY3 fE 9t; 9t@ u, Ph 4@ t 8@ P t@ PPVW<@ @j3fEj Ph Pww@@ t=* u f9u u>h@ P@ YY6@9s3Ft 3 D@ h@ ujWd@ 3M_^3[ ] UQVW3utktbPu'Wh@ j t,Cuj
YNVVj
Yu h@ ujd@
3_^]ÍMQjeP@ uMA tAi q Q@ ËU$SVW0 " uuh@ * h@ H@ j_t,h@ Vh@ jt9Du jY Vh@ j j j jYЅu h@ uWd@ j3|$YPSuD$ D$8D$,D$ PT$4 @ t uD3Wd@ = sQS 낅t,SH@ t!~ c| Vd@ 3_^[] VW VH@
uh@ Vh@ jt%3u
jYR WWjYuh@ ujd@ jX5jWP@ t t+ Wd@ 3_^ UQSVWj ڋd@ }u2t}r } t}s h@ ujWd@ / ϋ uw}u,} t&M @ j j^uz 3ΉEdtt/SH@ t$EQ#E P}u3@33Q@j EEUt u uh Pj d@ 3@_^[] ;w7 4tVtG h d@ /Vd@ 3뷁 vс. } tSH@ uEPSj @ S} Pjjj YPUM Qu Ӌ+4S G ;t< = & ;$~ F_WPVj d@ uh@ ujWd@ 3^VH@ ~fQQ`@ t3@^ËU SV3WVuuuuud@ ƺ j% RjU3YU uWV@ UJ;sEPWjp@ Eu#h@ h@ u jWh
ȉEuT Vuj Wjt@ u
M4 EPEPh@ Vl@ tjj@j3Ye 3UEvMDPPh@ j@REPEPuVl@ uE3ɋUGM;rMew M9h@ h+ yQM<@ jwt uH@ WH@ M+3fqtguH@ SH@ j 3PjYEu#Mh@ ujd@ 3_^[]SuhH@ uV#Uu
jY j j jYLtVu$@ jjPj 3Y.tu fPjPVM#ySVWj d@ tiQQj|Zuj d@ qjG3Pj Yuh@ u7j-GT@ PGPh@ ujWd@ 3_^[ËUSVW3W]}d@ uuh@ n jWa t <}Fą: jhX@ jFPj@ P̀@ uN3ҋ~ԉM9u9Vu9Vu9V u߁ u9VtvH@ pM3ҋ% t~
V3@9EJE tE87U3һ #; FH $%Q@ ߁ t)ǃ 9V9Ft
~3/~ 3Ƀ tMN u Mǃ t
~ ~ t ~b ǃ %@ A% 2N'ǃ t
U~ >9V9Vu0FĉF(ǃ % 3ҋMAVPM 3@jxh@ u h+ d@ 3_^[] O@ ?P@ ?P@ P@ P@ P@ ?P@ ?P@ P@ P@ U@e SV]3ҋWR]ĉUd@ EtzP @UEtjtfBJ,zE؋B0EB(E؋BME
t1u-ǃ u! VH@ g Eu-% u/h@ ujWd@ *3_^[] z$ t
tEr$H w$V@ tCǃB t9j j j
Yuh@ ujQ @ ch@ uǃ tT^ U؋jmu<t*VH@ t u VSpPj u Sr
% t.SH@ u#tVH@ t
6 $ ǃ tDuFu% @ tQ jST
Q } t9SH@ ;E|-tVH@ tE HP E HP t"SH@ x ?uF,E} WӋ
3˃}P u#uM]ЋȉM3 t]uFu% @ t*}EQRPu
]к Mк uf}u
U uu 95 t MyuPtVH@ t
g Xu3@h@ tQ tMyt
3@tVH@ t
uPj[ uˋvRu]Uċu3 ty]EC% @ t:{QQuٍE]к
؍E]̺ P %Eك{Qu $
xEQ $J
cExu E MQr8SVr4 @ tTt&VH@ t uVPjRh@ u h+ d@ hd@ Y9R@ S@ S@ T@ T@ T@ T@ T@ V@ 4V@ UQSVWj d@ ] u
h 3 FtLF% te E > t 6H@ ~uKt GP r뢋3h@ u h+ d@ 3h@ ujWd@ _^[] U SVWj ]d@ } u & f QQj:Z WH@ +3҉EHjECPjYuh@ uhj^E3jPj YFt؋t CP} tNtuWZ6UYh@ ujWd@ _^[] UQVWtnh@ Eu
jYj j jY%t>Sj ,[> tF% tPuߋ[ud@ 3@[3_^]ËU<d$ SVWڋj \$0|$,d@ . & u ?u! h~ d@ v 3؉\$ VL$ d$ 3AL$$;b T$,AD$ <;D$(s
DD$d$ Wȃu?D$0PWȃuD$ ;Q |$3 D$4|$0D$3BT$T$kP L$t[uVCH wH\@ $\@ QQuD$0Pt$ t3BT$@#D$33BD$ D$<D$D$@D$8T$8Pω\$HT$88 Ct ;C CC % t 3@D$ D$ L$$ʉL$$;L$(u9\$3΅ AQD$4% t
y GP rj d@ 3@ t$ WPj1 ht*WH@ t t$ sW}Pjt$ sh@ h+ y uK u#h@ u h+ d@ 'p\y$t-WH@ t"S 9y$uI uS PjN jWd@ 3_^[] I hZ@ Z@ U t&9Qv!AV3r
@uMt1^3] UVW tJ~tDjYȅt6Ea AE yA c F~ uNF HN FH_^] teA ;w&t@= t9= t2= t+= t$= t = t = t=
t= u pVq = & ^ËUQSVWM q39Y U9~uv tX t7 t$ t uNF Dz>JF ;t/UN j u qtMF E D{ŋUvC;Yx_^[] t 9 u3@3jY,u3 HHH ËUQWt2GEt VpMBƉEu^3GGG _]ËV|t
^ ^ËUQQSVWUUtDRH@ p 6}t)UVW6 Pu M_^[] UQVWt-jY(Et Pj 8;u M__^]ËUQVWt-jYEt Pj 8u M_^]ËUQV]t0jYEt!E Pju M^] UQVt0jYIEt!E PjYu M}^] UQS t@ WtRω}t=V3j j 3ҋtFr^uWj u M_[]ËSWRu!V3tj j 3ҋtF;r^_[ËUQQe EVPCȉMt-UAtBF;N uV NM{3@^]Ë
t@ V3Vt x uH tq^3^j tx t x u@ 3j t
x u@ 3ËU
t@ j jZtx u
UH 3] UQSVWj Qts 9wt ucuH@ @ E u-G t?w 9_s w n& tE_O t UPC3@3_^[] U
t@ V3VjZt>x u5W} t(UH Vt 9Ht9pu H3x F_3^] U
t@ V3VjZVt x uUH V=tp3^] > jXp@ P@
t@
t@ YY@
lp@ @
`p@ = p@ u hPg@ ԁ@ Yl 3̡hp@ h\p@ 5dp@ \p@ hPp@ hLp@ hHp@ @ Tp@ j hk@ 9 3ۉ]d pt@ 3
t;u3Fh T@ 3F95t@ u
j Y:9 t@ u,5t@ h@ h@ YYtE 5Dp@ 95t@ uh@ h@ YYt@ u 3t@ =t@ t#ht@ YtSjS5t@ @ 5Pp@ 5Lp@ 5Hp@ Ʊ @p@ =Xp@ u6P@ M EQP[ YYËeE@p@ =Xp@ uP@ =Dp@ u @ @p@ E ËUVu3;u s Wu>t
@ ׃;u r_^]øMZ f9 @ uU
< @ @ PE uC @ f;t f;u( @ v 39 @ Ãt @ v
39 @ 3 ;
p@ u UE 8csmu+xu%@= t=!t="t= @u܁@ 3] h@f@ p@ 3%@ j hk@ 3ɋEtKtFMMZ f9u2P<x+ s#EPE # 3@Ëe3ɉME Uj @ t PtH\jXf;t
u3@]ËE]%@ 3̋UE3SVWH<AYt} p ;r H;r
B(;r3_^[]̋Ujhk@ hi@ d PSVWp@ 1E3PEd eE h @ z tTE- @ Ph @ Pt:@$ ЃEMd
Y_^[]ËE 3Ɂ8 ËeE3Md
Y_^[]̋UMMZ f9u A<8PE u f9Hu ]3]ËUe e p@ VWN@ ;tudEP`@ E3EE@ 1E@ 1Ed@ 3EM3EEP@ E3E3E;t5p@ uO@ȉ
p@ _p@ ^]h h @ YY%@ hi@ d5 D$l$l$+SVWp@ 1E3PeuEEEEd ËMd
Y__^[]Q̋Uuuu uh0f@ hp@ M ] Uj p@ ul@ h @ P@ ]ËU$ pq@
lq@ hq@ dq@ 5`q@ =\q@ fq@ f
|q@ f Xq@ fTq@ f%Pq@ f-Lq@ q@ E tq@ Exq@ Eq@ p@ xq@ |p@ pp@ tp@ p@ jXk ǀp@ jX
p@ p@ jX
p@ p@ jXk
p@ LjX
p@ Lh @ ]%@ U
M]%ā@ %@ =@ =@ >@ >@ 2e@ Fe@ f@ f@ ;h@ Nh@ N@DA p p l i c a t i o n E v e n t C r e a t e r b z t s o Ƌ 6 T ƍ v v Ԉ ̎ j X B $ ؍ F 6 @ T 0 f v j ̈ L f b . J · އ | P $ ҆ . ƌ < \ 8 . $ Ҍ Ć X B B i@ 8 p 0 ʉ | d > ܀ h ( T T Њ \ p Ԅ 0 4 V Ȅ $ ` t L ȅ $ ܅ 8
x * L x N Ԁ | H p ̀ 0 ڐ l r b z t s o Ƌ 6 T ƍ v v Ԉ ̎ j X B $ ؍ F 6 @ T 0 f v j ̈ L f b . J · އ | P $ ҆ . ƌ < \ 8 . $ Ҍ Ć X B B o _XcptFilter __p__commode _amsg_exit __wgetmainargs __set_app_type exit s_exit $_cexit __p__fmode __setusermatherr _initterm 5 ?terminate@@YAXXZ msvcrt.dll 7_controlfp j_except_handler4_common B GetTokenInformation % RegQueryValueExW ReportEventW RegisterEventSourceW
SetLastError GetCurrentProcess RegConnectRegistryW RegOpenKeyExW OpenProcessToken . RegSetValueExW RegEnumKeyExW GetLastError RegCreateKeyExW CloseHandle RegCloseKey DeregisterEventSource - Sleep SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter
GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount UnhandledExceptionFilter M TerminateProcess api-ms-win-security-base-l1-1-0.dll api-ms-win-core-registry-l1-1-0.dll api-ms-win-eventlog-legacy-l1-1-0.dll api-ms-win-core-errorhandling-l1-1-0.dll api-ms-win-core-processthreads-l1-1-0.dll api-ms-win-core-registry-l2-1-0.dll api-ms-win-core-handle-l1-1-0.dll api-ms-win-core-synch-l1-2-0.dll api-ms-win-core-libraryloader-l1-2-0.dll api-ms-win-core-profile-l1-1-0.dll api-ms-win-core-sysinfo-l1-1-0.dll uVerSetConditionMask RtlVerifyVersionInfo ntdll.dll 0 WNetGetLastErrorW
WNetAddConnection2W WNetCancelConnection2W MPR.dll GetAddrInfoW GetNameInfoW FreeAddrInfoW WS2_32.dll GetUserNameExW SspiCli.dll NetApiBufferFree netutils.dll NetServerGetInfo srvcli.dll OpenEventLogW L CloseEventLog ADVAPI32.dll LoadStringW * CharUpperW USER32.dll __iob_func _memicmp _vsnwprintf g_errno wcstod wcstol wcstoul _fileno _get_osfhandle fprintf fflush wcstok = SetThreadUILanguage FormatMessageW
LocalFree
StrChrIW
StrChrW 0 StrStrIW 3 StrStrW WideCharToMultiByte 1 GetFileType GetConsoleMode GetStdHandle
lstrlenA lstrlenW CompareStringW GetThreadLocale CompareStringA WriteConsoleW ExitProcess GetConsoleOutputCP MultiByteToWideChar SetConsoleMode I ReadFile ReadConsoleW GetProcessHeap HeapFree
HeapValidate HeapAlloc HeapReAlloc HeapSize GetComputerNameExW GetModuleFileNameW GetFileVersionInfoSizeExW GetFileVersionInfoExW VerQueryValueW api-ms-win-core-localization-l1-2-0.dll api-ms-win-core-heap-l2-1-0.dll api-ms-win-core-shlwapi-obsolete-l1-1-0.dll api-ms-win-core-string-l1-1-0.dll api-ms-win-core-file-l1-1-0.dll api-ms-win-core-console-l1-1-0.dll api-ms-win-core-processenvironment-l1-1-0.dll api-ms-win-core-string-obsolete-l1-1-0.dll api-ms-win-core-localization-obsolete-l1-2-0.dll api-ms-win-core-heap-l1-1-0.dll api-ms-win-core-version-l1-1-0.dll
memset ( @ X p M U I <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="5.1.0.0"
processorArchitecture="x86"
name="Microsoft.Windows.Cmdline.EventCreate"
type="win32"
/>
<description>Event Create - Creates a custom event in an event log</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"
/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
4 V S _ V E R S I O N _ I N F O
cE
cE? 2 S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n 6 F i l e D e s c r i p t i o n E v e n t C r e a t e - C r e a t e s a c u s t o m e v e n t i n a n e v e n t l o g h $ F i l e V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 1 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) @ I n t e r n a l N a m e e v e n t c r e a t e . e x e . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . B
O r i g i n a l F i l e n a m e e v c r e a t e . e x e j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m >
P r o d u c t V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 1 D V a r F i l e I n f o $ T r a n s l a t i o n ;r.xT;es3@a M U I M U I e n - U S 00D0H0P0X000077"8J88
9"999@9Z9`999999:":y::::::;m;;<i<<<D=z========>\>}>>>>?$?:?D???? 0 0'0K0T0_0m00000000&1W1s111112$2C2_22222 343;3a3333]4455J5Z5h5566+6w666677#737B7p7v7777778p88829K9X9d9p99999":.:V:c:~::::::;;;;;E<r<~<<<<<<==1===g====>/>k>t>>>>>?? ?<?H??????? 0 050c0x00000000I11111J2V22222222J3v3333 4,444=4L4X4{444F5|5555556 66a66666&7,7S777777 8888"8@8O8\8h88
991999
: :*:9:s::::::;N;;;;;;< <$<F<M<k<<<<<<<<<==-=`=u=========>&>2>H>>>>>> ??,?8?L?Z? @ 0+171P1u1111111S2z222222]33333333494444445?5F5~55556"6<6b6666666"7-7d7777 8 8"8[8g8v8888 9/9h99 : :=:N:;; ;';6;j;;;;;<1<8<q<<<<<==#=L=X=j===>4>D>c>o>>>>>> ?? P 11%1)1-1115191=1A1E1I1r111252[2i2x2223w33345-5)6?6d6s6666666666666+7V7e7t7777 8l8x888/9o9]:d:[;;;;<$<m<<<? ` $ 012`2203x33333333333333333 444404R4]4o4w4|4444444444445 55 5$5.5M5S5]5c5l5q555555556626y666667F777778888888
9 9.969K9T9Y9v9999:::):/:5:;:A:G:N:U:\:c:j:q:x:::::::::::::::;; ;/;I;O;t;x;;;;;;;;; 2
Hacked By AnonymousFox1.0, Coded By AnonymousFox