Hacked By AnonymousFox

Current Path : C:/Windows/SysWOW64/
Upload File :
Current File : C:/Windows/SysWOW64/userinit.exe

MZ@	!L!This program cannot be run in DOS mode.

$=΋yvyvyvxvjvtvp3Ivzvyvrzv]xv_xvxvRichyvPELcuT
F&G`@


G@qT8p<R.text8EF `.data`J@.idatapL@@.didatd\@.rsrc^@@.relocf@BDF@@B(@@Bp@@B@@B@`@`@T@`@`@@q@@uL@0F@E@ F@0E@`E@"P&p+90E`EE F0FGGPK0MM@NpWLDAP32.dlllogoncli.dllnetutils.dllext-ms-win-session-userinit-l1-1-0ext-ms-win-session-userinit-l1-1-0.dllext-ms-win-session-winsta-l1-1-3.dllext-ms-win-session-winsta-l1-1-0ext-ms-win-session-winsta-l1-1-1ext-ms-win-session-winsta-l1-1-2ext-ms-win-session-winsta-l1-1-3\NULL.bat.cmdPATH;Volatile Environmentshell32.dllRegenerateUserEnvironmentexplorerexplorer.exe%SystemRoot%\Explorer.EXEShellExecuteExWopenrunasshellSoftware\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells\AvailableShellsDefaultShellSoftware\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShellsSoftware\Microsoft\Windows NT\CurrentVersion\WinlogonSoftware\Microsoft\Windows\CurrentVersion\Policies\Systemppishell.exevmapplet1SEE_MASK_NOZONECHECKSHideLegacyLogonScripts\\\NETLOGONSOFTWARE\Policies\Microsoft\Windows\SystemAllow-LogonScript-NetbiosDisabledUSERDNSDOMAIN\repl\import\scriptsShellReadyEventsystem\currentcontrolset\control\safeboot\optionUseAlternateShellsystem\currentcontrolset\control\safebootAlternateShellAppSetupUserInitLogonServerUserInitLogonScriptUserInitMprLogonScriptEnableProfileQuotaproquota.exeRunLogonScriptSyncaO[4C@sJ-A&>:oJ,ocuT%cuT
(cuT@NRSDSφLSy[Ϋ"userinit.pdbGCTL.rdata$brc.CRT$XCA.CRT$XCAA.CRT$XCZ.CRT$XIA.CRT$XIAA.CRT$XIAC.CRT$XIC.CRT$XIZ.CRT$XPA.CRT$XPZ.CRT$XTA.CRT$XTZ<.gfidsL.giatsP	.rdata.rdata$sxdataP.rdata$zzzdbgD.rtc$IAAH.rtc$IZZL.rtc$TAAP.rtc$TZZ`3.text$mnR<.xdata$x<R.didat$2R .didat$3Rd.didat$4`St.didat$6Td.didat$7`.data$brc`.data `.bssp.idata$5q.00cfgq.idata$2s.idata$3s.idata$4Tu	.idata$6d.didat$5.rsrc$01.rsrc$02U3tvWxQuQ}	t3f]USVW3WtvxBt
f98tu+ǁ#xQu+Qy_^[]Ut+EVW+t<ftf9Nu_^uҁ3fz]UjQht@j+uuq@]UUSV3Wt~ff;u+4uj
^uH@SVRQht@j+uuq@ _^[]UQQSVu3ۉM]Wj
_t֍Jff;u+U߅uH@Mt эzff;Eu+<UuH@3PSVWQuht@j+uuq@(_^[]USVu3ۉ]Wj
Zt ΍yff;u+MEUuH@}tύYff;Eu+MڅuH@Mt$эBEff;Eu+UUuH@3PjEPuVSWRQjht@j+uuq@8_^[]USVu3Wt֍zff;u+Uj
ZuH@SjEPRVQht@j+uuq@(_^[]UjjEPQht@j+uuq@ ]UjjEPjEPjEPQht@j+uuq@0]̋UQES3VuEWttjWXHÊ#uq@WSq@WSEq@UFt	Nt^~VF3_^[]Vrffu+j"X^f9u#f9DQu3fDQUPAPQD/q@d
0;ËUQSVWjjSp@u5`@=`@tg@taxr[,p@P`@Sppj
Y#>6Pj@ETp@u0`@=`@t@txruppjYD3VWSp@Ѕu5`@=`@t^@tXxrR,p@P`@SppjY5F;t:
`@`@t AtyrFPRVqqj
YWPp@t_^[]ËUQSVWڹl@}3th3Qff;u+ʍVff;u+4EVj@Tp@u0`@=`@t@txrVppjY%3_^[]uϋhx@֋3֋Whl@p@WPp@3@뺋U<`@3ʼnESVW3PhWh|@hp@3CDžPPPPPPPPWPPp@u695c@thc@P8p@;uc@c@p@t>WWh@dp@t+h@Vpp@tSPq@Vhp@M_^3[!]ËV3u3^ft0f"u3
uf tQp@fuҋ^̋U
`@3ĉ$
S]3VW}h@W\$ D$D$$Hq@YYt3h@WHq@YYt!h$PWp@t[$Rh$D$ Ph@p@t$`@=`@t@txrWppjY[}739c@u0PPh@dp@h@@Ppp@c@3ۍQff;u+MPj@Tp@؅׍Jff;D$u+ыWB9t$uEt3f9tfj<_3WPD$4P)ED$HD$,t$@5c@P|$0D$4@\$@D$<P@q@։D$t}tjt$hp@t$d@p@SPp@\$Ë#ىD$$#ωL$(fU3f$33D$xDf$FT$h|$|RT$|$RSSj SSSPQ$$$$$$$p@D$,p@=9]\$ 9c@u03PPh@dp@bh@@Ppp@c@IύQff;u+MPj@Tp@؅׍Jff;D$u+ыWB9t$uVt3f9tf3j<PD$4P'ED$HD$,t$@5c@PD$0<D$4@\$@D$<\@q@։D$tD$dD$hSPp@\$tct$ }tjt$lp@t$h@p@t
t$l@p@}D$$L$(\$3\$`@`@;t'@t!xr,p@P`@WppjYruz|$us!tj`@;t@txrppjYH$VPhH3Wlp@V$PhGWlp@$P$P @Ë$
_^[3k]̋U,ESVW3D$؉|$h|$|$,@D$$j@D$4|$,Tp@؅u3O9}tuhh@uHq@YY9}D$4|$0PhWhx@hp@t$D$4j@Tp@D$$PD$PVSD$(PD$ u%9|$$tD$D$PST$ L$8D$ 9|$0tt$4p@|$0VPp@WD$D$P39EhWh@Pp@u'D$PSD$ PWut$0p@t$D$$p@9|$ u4|$uD$v	f9|Ct9}tu#3f9|$(9}D$PhWh@@hp@D$D$PSD$ PWut$0p@t$p@u\|$uD$v	f9|CtCD$(SPp@P p@9|$0tt$4p@|$0SPp@f9;9}	hh@u|$0Hq@YYu>h@SHq@YYt$h@SHq@YYth@SHq@YYuD$(ftmЋft j,Zf;tЉT$$T$ fuj,Zf;u3fj Xf9tWt$0WuWQ~tD$΋fu9|$(u"t
4@ut$@|$SPp@_^[]h@uHq@YYu@Wt$0PuWSt3G뼋UQSVWhj@Tp@u2`@=`@t@txrhppjY3jVhuWS|p@ȅu6`@=`@t`@tZxrT,p@Pu`@WSppt6;v9`@=`@t!@txrRQhppjYVPp@h_^[Y]USVW3ENff;u+Qff;u+14EVj@Tp@u.`@=`@t@txrVppjY3uϋhD@֋S֋EQj#PuEujW&u;tWPp@ftf.t9Rp@
fu3Q0@Mu5ruD`@=`@t8@t2xr,ppjYjuuujWWPp@_^[]USVWE3PhVh@hup@@j_u#E}PEPEPVSup@up@EPhVh@@hp@u#E}PEPEPVSup@up@E_^[]Ul`@3ʼnESV3Uĉuى]uЉủuuȉuuWBt0@f93ˍQff;u+MSj@Tp@Eԅu2`@=`@@xSppjhD@uMԋ'Ӌ]hL@uEPVS4p@,p@}tSEPhVh`@hp@u+EEPEPEPVh@up@up@}35*9u!VVh@p@؉]ЅPj@Tp@ESPh@p@EPEh@VVPVT@M̅	эZff;u+vj\Xf9u	f9AuthQ@YY]]bEPhS@GMEPhS@(jhS@VjS@EEPjS@EEEPSu@YYhVVS@uPp@E̋Qff;u+Y
Pj@Tp@ȉMԅqE̋0TӋ]hL@;E@E&`@=`@@x,p@P`@ppjY`}ԍUЋ؅t#`@=`@t>@t8xr2Wppj!`@=`@t@txrWppjYUċjut*
`@`@tHAtByr<uuqqj&`@=`@t @txruuppjYtuhl@p@uPp@uPp@EtPPp@9ut	u\@EtP@Yt 9utY3@M_^3[T]VVq@u.`@=`@t[@tUxrO,p@P`@ppj3*Sj@Tp@u.`@=`@t@txrSppjY3qSWq@h@ӋwUЋt#`@=`@t>@t8xr2Wppj!`@=`@t@txrWppj Y]ċjut$`@=`@t@@t:xr4WSppj!"`@=`@t@txrWSppj"Yuhl@p@uPp@2`@=`@t&@t xr,p@P`@ppj#Y~WPp@t}t.SVW3SW3t2`@=`@t@txrVppj$Yt.-'`@=`@t@txrVppj%Y΍Qff;u+4Nf9u_3^@[̋UE8tWVW3,p@uDs?hp@GhD@jhp@tjVp@h Np@V@p@_^3]U$`@3ʼnESVWPV3ۿShh@Wp@DžPPPSh@p@p@9tqPVSh@Wp@uRDžPPPShD@p@u	f9up@Sh@p@3Gu,p@=t)8@tWWWSSd@VuWWWWSV9taSjSSSP13ۄW3VSVVhh@uWVSWh@hh@mNjM_^3[]utPL@tÄuw@@i3̋U`@3ĉ$E3SVWD$(ډT$T$c@c@c@d@c@c@d@d@5`@FPRRD$,L$,PjQVT$@h"@N q@6jZu͡`@=`@t@txrppj&Y&jjjjHp@thp+@hP&@(@عx@o@D$a@D$S|$ tNϋftBj,_f;uf99t3f;tfffuЋ|$ ;t3fjhx@p@jh@p@jh@p@Nt,@tWD@u3Ft@t3h@h@p@T$QL$V%֋D$X`@=`@t@txrppj'Yh@h@D$p@T$QL$j3ҋzt$Pp@t$Pp@WPp@jp@Pp@tPt$,<@D$43PWD$Ph9@WWp@t@hVp@=u&`@=`@t@txrppj(YV@p@D$PhWh@@hp@ugj^D$,|$PD$ t$0PD$8PWh@t$,p@u/9t$0u)9|$t#Qh @Qj2ZL$D*WjWWWD$LPgt$p@tShp@5`@`@;t(FFtvvq@~~6u`@$3_^[3]USVWE3PhVh@hup@<@j_u#E}PEPEPVSup@up@EPhVh@hp@u#E}PEPEPVSup@up@EPhVh@@hp@u#E}PEPEPVSup@up@EPhVh@@hp@u#E}PEPEPVSup@up@E_^[]ËUESVW}(3PhSh@hp@EPhSh@@hp@u|E$]EEEPuSVhh@up@uHEPu EPVh$@up@u(;Eu!E;EuPu uuup@up@_^[]$U<`@3ʼnESUȋMV3M̋MWEԋMVVMEQVMQMQWpp@uKEPY;~ME؍]EjY+څtftfuu3ft#];t=u3Gs3Es
$tuЍEuuVPEpp@M_^3[]U5@u5p@5@uh@p@]@QRPh<R@ZY@@T@QRPh\R@ZY@@\@QRPh|R@_ZY@UQ
,`@u0t)EEPh@
xE3ɄA
,`@2]ø,@QRPhR@ZY4@8@<@@@0@D@ @@$@(@L@QRPhR@tZYUQ
D`@u0t)EEPh @xE3ɄA
D`@2]HHHH3øH`@øP`@HHHH3̋Vj8}P3hj^t_hM@=PYYu=9rm9PY%tujd.3PYjhR@jY@2ۈ]eEܡt`@3A;uI
t`@h@h@
YYtEh@h@
YYt`@و]uY39>tVUYtWjW6q@o9>tV/Yt6O
YvPv
PWh@2t`u2
WjYYE5MEQPH
YYËeVt(}u	EEjV/
u	x;
`@uUEVH<AQAk(;tM;Jr
BB;r(;u3^]ËV!	t dx`@P;t3u2^ð^ËU}u|`@?u2]u
jY]ËU=p`@tVutut&u"hX`@Yuhd`@YtF2K`@uWX`@j Y+ȃ3`@EEEd`@EEuE_p`@^]j;jh R@eMZf9@u]<@@PEuLf9@u>E@+PQQYYt'x$|!EE3Ɂ8ËeE2[ËUzt}u	3x`@]ËU=|`@t}uuuYY]ËU`@3X`@uȃu_hX`@qYY#E]ËUuYH]ËUeEePp@E3EEp@1Ep@1EEPp@EM3E3E3]Ë
`@VWN@;tu&;uO@u

Gȉ
`@_
`@^3@3ø@h`@\p@ðhhj`uj;HHHHøc@øc@ËU$Sjp@tM)j$jP|xffftfpflfhEEDž@jPEjP5EE@EEp@jXۍEEۉE(p@EP$p@uujY[]ËUDjDEjPEPp@EtEj
X]4jtp@t4MZf9u*H<ȁ9PEuf9Auytvt2h0M@(p@̋UE8csmu%xu@= t=!t="t
=@t3]ñ%`@ËSVH@H@;sW>t
q@׃;r_^[̋SVP@P@;sW>t
q@׃;r_^[h@N@d5D$l$l$+SVW`@1E3PeuEEEEdËMd
Y__^[]Q̋UuuuuhG@h`@]ËUp@jc@Yj(p@u$p@=c@ujYh	p@Pp@]ËU$jp@tjY)a@
a@a@a@5a@=|a@fa@f
a@fxa@fta@f%pa@f-la@a@Ea@Ea@Ea@`@a@`@`@	`@`@jXkǀ`@jXk
`@LjX
`@Lh(@]ËU%c@$S3C	`@j
p@oe3
`@3VWc@}S[wO3ɉWE܋}EntelE5ineIEE5GenuE3@S[]܉EsEKSuCE%?=t#=`t=pt=Pt=`t=pu=c@=c@=c@}EE|3jX3S[]܉EsKS]t=c@]_^tf
`@c@tNtG3ЉEUEMu.`@c@`@ t c@`@3[]39`@%dq@%hq@%lq@%pq@%xq@%q@%q@%q@%q@%q@%q@% q@%$q@%(q@%,q@%4q@%8q@%<q@%@q@%Dq@%Lq@%Pq@%Tq@%Xq@%p@%\q@%0q@cG@wG@I@I@P `RT`$`TPSTp(`\XST0`SU4`LHS0UI.XjTJTTTSTSSSS0TT`SpSDsGetDcNameWNetApiBufferFree
SetupHotKeyForKeyboardLayoutIsSubDesktopSessionIsTSAppCompatOnLoadRemoteFontsAndInitMiscWorkerProcesRemoteSessionInitialCommandPerformXForestLogonCheckProcessTermSrvIniFilesDisplayMessageAndExitWindowsCreateExplorerSessionKey	SetShellDesktopSwitchEventImmWorkerWinStationIsBoundToCacheTerminal`@DN@~|}}u}(}vwvuHwfwwv|ww|wwt}uuuBv|Vw|w}}vF}4wX}|wuur|wvv\vv|vzzzzz{ {,{R{v{{{{{{|||&|6|zz"z,zZz,vwvvrvvTuPK@Luluqsw4p,tx|pxtJxpsnx p@txp0uxqtxptyPpt4yptVyptzypsy@psyHptydpudzdq(uzxqtP|qpt}pt~\ps,~phtN~psx~ps~ps~p~|}}u}(}vwvuHwfwwv|ww|wwt}uuuBv|Vw|w}}vF}4wX}|wuur|wvv\vv|vzzzzz{ {,{R{v{{{{{{|||&|6|zz"z,zZz,vwvvrvvTuRtlGetActiveConsoleIdntdll.dllCompareFileTimeSearchPathW%RegQueryValueExW
SetLastErrorExpandEnvironmentStringsWSetEnvironmentVariableWRegOpenKeyExWFSetThreadPriorityUnregisterTraceGuidsRegisterTraceGuidsWGetEnvironmentVariableW6WaitForSingleObjectGetTraceEnableLevelLocalAllocCharNextWOpenEventWGetSystemDirectoryWGetTraceEnableFlagsGetTraceLoggerHandle-SleepGetLastErrorTraceMessage+GetFileAttributesExWGetCurrentThreadCloseHandleCreateThread
HeapSetInformationLoadStringWGetProcAddressLocalFreeCreateProcessWFreeLibrary!RegQueryInfoKeyWRegCloseKeyLoadLibraryExWapi-ms-win-core-file-l1-1-0.dllapi-ms-win-core-processenvironment-l1-1-0.dllapi-ms-win-core-registry-l1-1-0.dllapi-ms-win-core-errorhandling-l1-1-0.dllapi-ms-win-core-processthreads-l1-1-0.dllapi-ms-win-eventing-classicprovider-l1-1-0.dllapi-ms-win-core-synch-l1-1-0.dllapi-ms-win-core-heap-l2-1-0.dllapi-ms-win-core-string-l2-1-0.dllapi-ms-win-core-sysinfo-l1-1-0.dllapi-ms-win-core-synch-l1-2-0.dllapi-ms-win-core-handle-l1-1-0.dllapi-ms-win-core-heap-l1-1-0.dllapi-ms-win-core-libraryloader-l1-2-0.dll8_initterm9_initterm_e_c_exit?_register_thread_local_exe_atexit_callbackmemsetapi-ms-win-crt-runtime-l1-1-0.dllapi-ms-win-crt-string-l1-1-0.dll{_o___p__commode_o__cexit_o__configthreadlocale_o__configure_narrow_argv_o__controlfp_s_o__crt_atexit_o__exit8_o__get_narrow_winmain_command_linec_o__initialize_narrow_environmentd_o__initialize_onexit_table_o__register_onexit_function_o__seh_filter_exe_o__set_app_type_o__set_fmode_o__set_new_mode_o__wcsicmpb_o__wtoi_o_exitR_o_terminate2_except_handler4_commonapi-ms-win-crt-private-l1-1-0.dllRegEnumValueWQueryPerformanceCounter
GetCurrentProcessIdGetCurrentThreadIdGetSystemTimeAsFileTimeInitializeSListHeadIsDebuggerPresentUnhandledExceptionFilterSetUnhandledExceptionFilter GetStartupInfoW/IsProcessorFeaturePresentGetModuleHandleWGetCurrentProcessMTerminateProcessResolveDelayLoadedAPIDelayLoadFailureHookapi-ms-win-core-profile-l1-1-0.dllapi-ms-win-core-interlocked-l1-1-0.dllapi-ms-win-core-debug-l1-1-0.dllapi-ms-win-core-processthreads-l1-1-1.dllapi-ms-win-core-delayload-l1-1-1.dllapi-ms-win-core-delayload-l1-1-0.dllApiSetQueryApiSetPresenceapi-ms-win-core-apiquery-l1-1-0.dllmemcmpmemmoveC@C@C@C@C@C@D@D@D@D@LD@D@gD@qD@{D@D@D@D@C@C@(@Xp			MUI<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">

<description>Userinit Logon Application</description>

<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
        <requestedPrivileges>
            <requestedExecutionLevel
                level="asInvoker"
                uiAccess="false"
            />
        </requestedPrivileges>
    </security>
</trustInfo>
</assembly>

4VS_VERSION_INFO
cE
cE?StringFileInfo040904B0LCompanyNameMicrosoft Corporation^FileDescriptionUserinit Logon Applicationh$FileVersion10.0.17763.1 (WinBuild.160101.0800)2	InternalNameuserinit.LegalCopyright Microsoft Corporation. All rights reserved.B
OriginalFilenameUSERINIT.EXEj%ProductNameMicrosoft Windows Operating System>
ProductVersion10.0.17763.1DVarFileInfo$Translation	w
~1TuJnKʽMUIMUIen-US80000$0(0,00040t0x000000000\?j???? 40<0K0Y0001#111w111111122>2I2222233+363;3j3u3z3333334L4W4\44444444b5l5s5555555555566_6x666666666*737;7H7O7T7788!8=8G8N8889&9,999@9E9q99::+:I:S:a::::::#;8;N;;;;<&<B<<<<<<=c=n=======>)>4>;>F>M>X>_>>
??%?.?l?w?|??????00000000061U1j1111122&2/2>2I2g2p2223 3%3V3t3333333344+4=4C4a44445!5@5_5w55556
6*606[6`6~66666677&7/7=7K7Y77777777788-828P8U888888888899'9i9n999:: :-:<:G:N:f:::::::: ;,;K;Y;_;l;;;;;;7<Z<{<<<<<<<<<<<<=
=7=E=J=P=W=a=o=======
>>4>=>B>H>p>u>>>>>>>>>	??#?5?A?F?i?y???????@d00010f0t0y0000000001%141?1]1f111111122B2K2c2273]3f3l3t3z3333333333334&4@4M4Z4h4r4|444444444445!5P5V55E6p66666666177:8h88888899.9E9Z9a9g9y9999:#:<::::::::;;q;w;;X<x<<<<==u=========R>W>l>s>>>>>>>>>>>>>>>?
????'?/?7?C?L?Q?W?a?k?{?????????P`0000001%1.1<1E1T1^1d1j1p1v1|1111111111111111111111224282`0p100000000 0$0(0,0004080<0@0D0L0T0\0

Hacked By AnonymousFox1.0, Coded By AnonymousFox