Edit C:\Windows\System32\LogonUI.exe
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ?mY? ? ? +? ? +? ? +? ? +? ? ? ? +? ? +? ? +? ? Rich? PE d? ?R ? " L @ ? ? `? HQ P ` @ ? p @ 8 ? P H .text ? `.data ? 0 @ ?.pdata ? @ @ @.idata ? P @ @.rsrc ` " @ @.reloc b p , @ B T @ ? @ ? @ ? @ ?R $ ? ? ?R ? ? `0 @ 1 @ / t e s t c l i e n t p r o c e s s i d : / f l a g s : ??B?&I?&????S?A?]?? ? 0 @ @ RSDS??B?E???/? logonui.pdb UGP @SH?`I?? > ? H???= ? 3??> ?? 3??$0L? ???H? ???D?H?$pH?$ ?U> ???= L?$? E3??$PE3?fD9#? L?$@L?$8H?? ?? H?$xH?$@H?$? 3?L?$XL?$8H?t-I? ???f ? H??D9$Cu??? H??;??3?H?tjI? ??? D H??D9<Cu??? H? ???A? H??> ?? ?:H?? > H?tvfD9xto3??D???= D?I???< L?$XH?$? H?$xH?$0E?A?L? A?QH?$0H??RL?$PL?$? ? = ?H?$px3??`[???;??.????? H?`[????????SUAVAWH?83??$xM?I?M?I?H?$(L?$pE3??H?$pH?$xH?$ ? ?? ? H?$`H?$pH?H?? ??? ? H?$xH?H?? ??xmH?1H;?? ??xZH?$0H??wi3?< H?H?tO?x4H?$xH?7L?$pH?$(H?L?H?$ ? ??x6H?$pI??I?H?$0?H?$`H?8A_A^][? ?? ??? H??; ??????SAVAWH??M?M?H?f? ? f? ? L?$PH?$0H?$8H?$@L?$E3??,$E?A?A?fD;?? @?A?A? @?? A?I?E2? D B? CA? E?? ?"~F?? M?tfA? RH?H;?? H?A??? K?I;?? L?A??y?-?? ?? M?tfE?$RH?H;?? H?A??xzM?t M?I?M?RH?:H??;?? H?A??xPA?2??CfD;?? A? fD;?? ?x&fD;?L?uM@2???????x H?$XI?6H?8?L?$H?$@H?$8H?$0L?,$H?A_A^[?2????@??? ??????H?(?Z f9(??t3?OHc W??H???H?9PE u??= t= u?3?? v9? ?3?ytv 9? ?? ? ? ???9 H? l9 H??H?y H?z ?? ?H? [9 ?? ?? ?= u H? ? ?X9 3??(?????H?8?? D? ? L?? ?? H? H?d H? U H?$ ?29 ?H H?8????H?H?H?H?L? AWH?? E3??$ H??Z8 ?H?%0 H?A?3?H? ? tH;? ? ??? ?+8 ?? ?? ;?? ??6 ??n ?uP? d L?=???H?=???H?$0A??$$I;?s ?u H?H?t??D$$H?H?$0??t? ? ? P ? ? ;? H?.??H? ??? ?? ?u I?H?? L95? t"H? ? ? ?tE3??3??? ????7 H?H?u ? ? H?$(?$ f?9 wufD91t?uk?f+?;? H?H?$(??$|?$? A? DE??3?? ]??????r D95? u??A7 D95^ u ?"7 ?L ?f?9"uA?????$ H?H?$(?????" ?=; u ???6 ?= u ??6 ?? L?$? I?I?I? M?(I?A_?????H?(? H?(???????ff ? H; ? uH?f???u??? ???H?(H??8csm?#?u ? ??l??v? @?u??5 ?3??(????H?(H? ?????5 3??(????%(6 ????H?3???H??<?Z f9u*9Q<|%?< s HcA<H??$?8PE HE??H?$?3??$H?H??????SH? ?3??4 H?t(H?????H?t? f9H\u??f?\? t?H? [?????%j5 ?????????LcA<E3??L??E?H?I??t ? L;? ??;?A???(E;??3???????H?$WH? H?H?=???H?? ?t"H+??H?????H?t?$? ???3??$0H? _??????????H??Z f9t3?HcH<H?3?9PE u ? f9Q??????$ UH?H? H?P H? H?2?-?+ H;?? H??n3 H?H??p3 ?H1E?\3 ?H1E?@3 ?H?H1E?03 H??H3EH3?? H??53 ? H? H?????? H3E H3EH#??3?-?+ H;?D??? H?$HH?H?? H? ]?????3?????%T3 ????%@3 ????@SH? H?3??2 H??f2 ?H2 ? ??H? [H?%D2 ????H?$H?? H? ?C2 H?? H?$HE3??$PH?$H? 2 H?$@H?$@ tBH?$8 H?$XH?$0H?$`H?$(H?? H?$ L?$@L?$HH?$P3??1 ?#H?. H? H?? H? H?H? H?k H?? H?$? H?? ?? ?? ?? ? Hk? H? ? H? ? Hk?H? ? H? H?? Hk?H? | H? H?? Hk? H? ? H?h? Hk?H? ? H?hH? X?????H?? ????? ????????UH? H?H?H??????? ]???????@UH? H?H?3?8 ???H? ]?H? ???A? H??b1 ?????:H??^1 H????fD9`???3??D??21 D????H?????#??H?????5??H?????:??H?$p???? ???? ????"???E?????tU?"?.??D?fF;lCD??E2?<??A? ? ??H?????#??I?????0??H???????? ????H???????I??I;?L?A?? I???????????? ????? ?0! T ? ; ! ! ? ? ; U ! ! ? t d U ? ! ! U ? ! ! ; U ! ! ? ; ! ! ? ? ? t d T ? ; ! ! ? ; ! ! ? ? ? t d T ? ; ! b??P0 ! d ? ?! ! t n ?! ! n ?! ! ? ?! ! t d ? ?! ! d ? ?! ! t d ? ?! ??0! ? ? t d T / ?" ! / ?" ! ? ? t d T / ?" ! ? ? t d T / ?" ! / ?" B b ? t d 4 ? ? ? f ? " ? F F 20 4 2p? P ? P 2P 4 2P 2?-?+ ? ??? ? ; ! ; U ! U ? ! ? h 8! h ? T! ? ? d! ? ? t! ? ? ?! ? ? ?! ? ?! n ?! n ? " ? ? " ? ? ," ? ? <" / ?" / ? ?" ? ? ?" ? ? ?" ? ? # ? ? # ? C (# L ^ # ? ? # ? ? # T \# \ ? |# ] ?# ? t ?# ? ? |# ? M ?# f ? ?# ? ? ?# ? ?! 0 T" 0 : h" : ? ?" ? ! # ? ? S ? hU TU :U &U U ? ? ? ? ? ? rT jT ? &T T 8T ? ? ? ? ? ? ? ? ? ?S nS \S NS @S 6S ,S "S ? S P PR ? ? 0R JT ? ? ? S ? hU TU :U &U U ? ? ? ? ? ? rT jT ? &T T 8T ? ? ? ? ? ? ? ? ? ?S nS \S NS @S 6S ,S "S "SetPriorityClass GetCurrentProcess ?LocalFree KERNEL32.dll wcschr wcstoul wcsncmp V _XcptFilter ? _amsg_exit ? __wgetmainargs ? __set_app_type 3exit _exit ? _cexit ? __setusermatherr ~_initterm X __C_specific_handler ?_wcmdln (_fmode ? _commode msvcrt.dll 0 ?terminate@@YAXXZ CoCreateInstance B CoUninitialize & CoInitializeEx api-ms-win-core-com-l1-1-1.dll _Sleep ?GetStartupInfoW PSetUnhandledExceptionFilter mGetModuleHandleW 0QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId ?GetSystemTimeAsFileTime ?GetTickCount ?RtlCaptureContext ?RtlLookupFunctionEntry ?RtlVirtualUnwind ?UnhandledExceptionFilter nTerminateProcess ?LocalAlloc ? 8 ? P ? h ? ? ? pe ? ? ? <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <!-- Copyright (c) Microsoft Corporation --> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity name="Microsoft.Windows.Security.LogonUI" processorArchitecture="amd64" version="5.1.0.0" type="win32"/> <description>Windows Shell</description> <dependency> <dependentAssembly> <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*" /> </dependentAssembly> </dependency> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false" /> </requestedPrivileges> </security> </trustInfo> <application xmlns="urn:schemas-microsoft-com:asm.v3"> <windowsSettings> <dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">per monitor</dpiAware> </windowsSettings> </application> </assembly> ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n l " F i l e D e s c r i p t i o n W i n d o w s L o g o n U s e r I n t e r f a c e H o s t r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) 8 I n t e r n a l N a m e l o g o n u i . e x e ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . @ O r i g i n a l F i l e n a m e l o g o n u i . e x e j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? ??(?0?????
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de