Edit C:\Windows\System32\adhapi.dll
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ?????????9??2???2???????2???2???2???2???2???Rich?? PE d? ?R ? " : ?; ? ? ? ` ? ? r @ ? ` ? ? 0 ? p .text ?9 : `.data P > @ ?.pdata ` @ @ @.idata ? p D @ @.rsrc ? P @ @.reloc ? ? V @ B ? ? d9 ? ?R # ? ? 0P ? ? ? \ A ` ? ? ? A ? ? ? ? 0 0 @ 8 < ( r ? ? ? ? ? < ? ? < ? ? < ? P? ( < ? ? 0 ( * T ? ? ? , ? p?pI pM @ n@ T H r ? ? ? ? ? ? ? ? ? ? < ? X ( < ? P? 0 < ? ? 8 p? A P ? ? ? ? ]?? ?? +H` ? ? p ? R ? 3qq?7I????6 x ? p? 0? 0? 0I 0?0M ? \[! ???? L ?\[ @6[ ? [ L ?L ?\[! ???? L ?\[ @6[ ?H L ?L ?L ?L ?\[0M ? ) )T( [? \ \? pI 8 ? ? ? 5 H ? 0 ? ? ! ? ? C x ? h ? p? 1 H ? ! X ? ? ! ? ? ? 0 ! ? ? ? @ ! ? ? ? A H ? ? ? ? @ ` D r ? ? @ ? < ? ? ` pZ??N? ? >? ]?? ?? +H` ? ? H 2 @ D A p H 2 8 @ D A p H 2 \ @ D A p H ( 2 $ ? C " p H 2 \ @ D A p H @ 2 N @ G G ? ? ? ? ? X( P!0 p 8 H 8 2 : $ D A ? H H P!( p 0 ]?? ?? +H` @ < D r @ ? < ? ? @ ` D r ? ? ? ? < ? ? P ? ?4 ? ?4 ? ? ? R ? [ ? ? ( ` ? @ ? ? ? ? ? ? ? ? ? ! ? pI ? ? ? ? p ? ( ? ? ? @ J( $ r P ? ? ? ? < ? ? pM @ D r ? < ? ? n c a l r p c ????QT??> ?N???`?=< N U L L > N U L L AdhAlloc AdhStringBuild ??? ?2X??Uh? P ? ? RSDS ???A?c?%?? AdhApi.pdb H?8H?$ D??+ ??U H?8?????E? H?HI?? I? D?I?? L?m???+ I??? H?H?????H?$H?$WH? A? H??t??? ?3?3?2?!I??pU H?H??\U H?@??HU ?t H?H?HE??@?? 3??$0H?$8H? _?????$H?$WH?P3??? ??? ?? H????H? ?8 H?5?8 H?5?8 H??8 H??8 H?=?8 H? ?2 L?H?H?$HH?$8H?$@H?$0L?$@H? ???A? H?H?$(H?H?$ L? ?aT H?H?u?7H? x2 H?=q2 H;?$?H?H?t ?+T H?H?H?u??=H2 H?$`H?$h? H?P_????H?$H?$UWATAVAWH?$??? H??1 H3??'L?H? ?1 L?%?1 I;?? tH?L?q??? ???E3?3????C3???????????E$ H???$(H? ??E3?3?3??$ ?? D?????A?L???>?? ??t#H? [1 I;?? ? ? A? ? H????iQ ??t$H? $1 I;?? ? ? ? ?( 3?????J?? H?? ?? ?6R ?u,?4Q ?H? ?0 I;?? ? ? ? ? H???????$(H??3?3??$ ?? ?? ?? ?zuk??X?? ??? ??, H???? ??? ?? H?H?t[H?tVH???????$(H???H?H?$ ?wQ ?u^?eP ?H? ?/ I;??) ? ? ? ? ? H? ?/ I;?? ? ? H??D????? L???H???H?L?$ ? ??y3% ? = u?H? v/ I;?? ? ? ? D??H???????$0A??A? D?$(L?$ ? O ??tH? !/ I;?R? tL? ?0H?? D??? ??t%H? ?. I;? ? t? D?H?????H????tL9}? H??? L9}? H??? H?? H?? H??? ?H?'H3?? L?$? I?8I?@I?A_A^A\_]????H?$H?$WH? H?H? C. H?5<. H;?"? t H?L????? ???H? . H?u?WH;?T? tN?D??=3??D? ? H?? ?????t+H? ?- H;?? t? D?H????H?? H?$8?H?$0H? _????SH? H?H? ?- H?}- H;?? tH?L????? ?=??H?tH? tH??oM H? H? [??????$H?$VWAVH?@L?H?5- H? - H;?? t? L????H?????{M H?? D??aM H?H?$hH?u1?H? ?, H;??3 ? ?) ?D?H????? H??7????t$H? ?, H;?? ? ? ? D??H?H?$ L?E3?3?? ???bL H??$0?t/H? 8, H;? ? t? D?H?? ??H? , ? ???$0?t?H??+ H? ?+ H;? ? t? D?H????H? ?+ H?5?+ H?$h??H?5?+ L?$`H?$hH? ?+ H;?? t? D?H????I?>H? ?+ ?t H?tH????H?? H? f+ H;?? t? L????H??&???H?$pH?@A^_^?????$H?$H?$ AVH?@H?H?=+ H? + H;?"? t ? L????H????H? ?* 3??u"D?WA?H;?? ? ? ? ? H?H?$PH? ?2 L?I?> ?$ ? ?t)? H? ?* H;??) ? ? ? D?? H? b* H;?? t?" L????H??"??L?$ L?E3??H? ????=J H??$0?t(H? * H;?? t?# D?H????? I?& H? ?) H;?? t?$ L?h??H???????$0?t8H??) H? ?) H;?? t?% D?H????H?=?) H?$P?/H?=|) H?$P?!A? A?H;?? t A??????H????H?? H? =) H;?? t?& L????H?????H?$XH?$`H?$hH?@A^?????H?$WH? ? H??? ??p?t,H? ?( H??( H;?0? t*H??' D?????H?? H? ?, H?0?H?$0H? _????H?H?H?H?WH?PH??? H?u:D?WD???U( H? N( H;?? ? ? ?(H??3??? H?$@H??$H D??pH?? ?' ?? ? ?$@?t(H??' H? ?' H;?? ? ? ?) ?H?? H?H?? ?SxH?H? ? H?H?@? H?? H?& D?$@E?t+H??' H? ' H;?? ? ? ?* ?*???H????D??$@?t+H?H' H? A' H;?? ? ? ?+ ???E3??? H?? ?=H ??' H? ?& H;?? t?, L???H????H?? H?? H?H?$0H?$(H?$ L?E3??H? \???? ?D?H?$hH?? ?' ?$@?t)H??& H? |& H;?? t?- H?????? H?$`H?$pH?P_????H?H?H?L? H?WAVAWH?`I?L?L?H?5& H? & H;?"? t ?. L????H????H? ?% ?$@ H?$P 3?M?u"D?WA?H;??7 ? ?- ?/? L?$PI9~? I9~? ?'F H?? A? ? F H?H?$HH?u)D?A?H? h% H;?? ? ? ?1? 3?? H?? L?? L?xH?? ?? ?? ?? E3?3?3?3?? H?? H?u)D?A?H? ?$ H;?? ? ? ?2?- H??????t'H? ?$ H;?? ? ? ?3 D?? E3??H? ???? H?? H?u)D?A?H? l$ H;?? ? ? ?4? E3??0H??qE ??H?? H?$(H?$ M?E3??H? ????+D H??$@?t/H? $ H;? ? t?5 D?H????H? ?# ? ???$@?tBH??# H? ?# H;? ? t?6 D?H????H? ?# H?5?# H?$H? H?5?# L?$? H?$HH?? M?H?? H?$0H?$(L?$ L?E3??H? ????7C ???$@?t?H?,# H? %# H;? ? t?7 D?H?? ??H? # H?5?" H?$H?H?5?" L?$? H?$H?? ??F ?? H?$? H?8?$@?!A? A?H;?? tA??????H? ?" ?tH?tH?H?$P? H? t" H;?? t?8 D?H?????L?$`I?(I?0I?A_A^_??????$ H?$H?$VAVAWH?0H?L?H?5" H? " H;?"? t ?9 L????H????H? ?! 3?D$`M?u$D?WD?$`H;?? ? ? ?:? I9F? I9F? H?u$D?WD?$`H;?? ? ? ?<? L?? I9u'A? D?$`H;?? ? ?6 A?? H?? H?t$? ?OB H?? ?JB H?? ?$`I?? tS?? I?L?$(H?$ M?E3??H? ????? ?$`??$`H?5? H?$XL?$PH?? ?? u3?t? H??? ??H?? ?? H?$`H??? ?pH?? H??H???? H?? 3?? H?? H?? ??N ?#A? D?$`H;?8? tA????$??H? H;?? t?> D?$`H?????$`H?$hH?0A_A^^??????$H?$L?$ WAVAWH?`I?M?D?H?H?=? H? ? H;?"? t ?? L?/??H????H? ? ?$? ?$P H?u#D?WA?H;?? ? ? A??? L?M?? H?H?? H?u"D?WA?H;?? ? ? ?B? M?u(D96t#E?WA?H;?? ? ? A?C?7 A??? ?H?$PH?$HH?$? H?$@?$8L?$0D?$(H?$ E3??H? P????> H??$T???$T?t=H?? H? y H;? ? t? D?H????H? V H?=O ? H?=C H?$? ?u?$? ?? A? A;?#?$P?H? H;?? ? te? ?H? ? H;?n? tL? D??2A? A?H;?P? t.A??A? A?H;?6? tA??????H? ? H;?? t? D?H?????L?$`I?(I?0I?A_A^_?????H?H?H?H?L? AWH?`E?E??H?H?=5 H? . H;?"? t ? L????H????H? ???* H?u#D?WA?H;?? ? ?3 A?? L?M?? H?H?? H?$? H?$@D?$8D?$0?$(H?$ E3??H? >????< H??$P?t/H? v H;? ? t? D?H????H? S ? H? G ? ??$P?t:H?1 H? * H;? ? t? D?H????H? H?= ?H?=? H? ? ?A? A?H;?P? t.A??A? A?H;?6? tA??????H? ? H;?? t? D?H?????L?$`I?I?I? M?(I?A_????@SH? 3??u ?W??; ?? H?H?H? [?????3 ????SH? H???; L?H?? H? [H?%?; ???H?t!SH? H???; L?H?3?c; H? [?????H?HE3??t$fE9uA?? H??H??E9Au??E ?? M?tfE9H?G??LD?L? J??L?$0? H?$(L?$ D?L?[???+ ??; H?H????L?H?XI?? I?? I?(I??; H? ??D?I?? L? ???+ I??J; H?X?????L?H?xI?? I?? I?????? ?? H????D?L????I??????I?? ?+ ?$` I???: H?x?????$L?$L?$ SUVWATAUAVH?0L?H? ] L?-V I;? ? tH?L?8??? ???H?$x3??$? A???I?.H?t-I???H??H??9,Ju??;??#?4I?I?H?u????????H?$ H?< H;? A?A?? ?! ??: ? ?H?u ?W??8 ?H????L?H?u ? ?? f?(L?$xH?$? M?? H?A? ?H?????H=??AG??+H?I??H?tf9*t H?H????tH?H+?A?H??xIL?I? QL+?6I?L???H+??+??tA? f?tf?I???I????uH?f?)H?L?M?????M?H? ? I;? ? tH?????y ?? ??H?0A^A]A\_^][?????$WH?0?H? m H?=f H;?:? t H?L?H???: ?&??H? ? H;?? t H??$ ????H?$@H?0_????SH?0H? H? H;?6? t H?L?????> ???H? ? H;?? t H????? ?H?0[?????(? ?%8 H?v H?g H?u? ?H? 3??(??????$H?$H?$ATAVAWH? 3??L??? ?Q ?? ????> eH?%0 H??H;?? ??6 3?H?=? u?A? ?? ?t? ? ? H?-? H?t`H?=? L?L?H?H;?3H9 t??H? ??? ? H?{ L;?L;???H?L?H??H??7 H? S H? T ? ^ E?? H? F ? 3?? ?? eH?%0 ?H??H;?? ?6 3?H?= u?? ?? ?t ? ? ?H?=???L?%???? ?I;? ?u??H?t???I;???????H????H? ???? ?? ?u H?H?} H9 ? t!H? } ? ?tM?? I??c ?u ? H?$@H?$HH?$PH? A_A^A\?????$H?$WH? I??H??u? L??H?H?$0H?$8H? _? ?????H? L??H?VWAVH?@ ?L?? ??$ ;??? ?u9? u 3?\$ ? ??;?? L? ? M?t<?? ;?D?? L?$p A???D$ ?3?\$ ??$h L?$` ?? L?$p ?I??????$ ?3?\$ ??$h L?$` ??3 L?$p ?I??????$ ?3?\$ ??$h L?$` ;?? ?u~E3?3??????? ?$h L?$` ?$ E3?3???7???? ?$h L?$` ?$ H?? H?t$E3?3????? ?$h L?$` ?$ ?t?unL?$p ?I??????$ ?3?\$ ??$h L?$` H? H?t0?=# t'L?$p ?I????D$ ?3?\$ ??$h ;? ?? ?????H?$x H?@ A^_^?????f ? H; ? uH?f???u???2 ????%&3 ????%3 ?????LcA<E3??L??E?H?I??t ? L;? ??;?A???(E;??3???????H?$WH? H?H?=???H?? ?t"H+??H?????H?t?$? ???3??$0H? _??????????H??Z f9t3?HcH<H?3?9PE u ? f9Q??????$ UH?H? H?p H? H?2?-?+ H;?? H??n1 H?H?? 1 ?H1E? 1 ?H1E?@1 ?H?H1E?01 H??H3EH3?? H???0 ? H? H?????? H3E H3EH#??3?-?+ H;?D??? H?$HH?H?? H? ]????%01 ????%L1 ????@SH? H?3??/ H???/ ?D0 ? ??H? [H?%(0 ????H?$H?? H? ?1 H?? H?$HE3??$PH?$H??0 H?$@H?$@ tBH?$8 H?$XH?$0H?$`H?$(H?? H?$ L?$@L?$HH?$P3??0 ?#H?* H? H?? H? H?H? H?g H?? H?$? H?? ?? ?? ?? ? Hk? H? ? H? ? Hk?H? ? H?D H?? Hk?H? x H?1 H?? Hk? H? H?h? Hk?H? H?hH? T?????H?? ????H?(M?8H?I?? ? H?(????@SH? E?H?L?A??? L?tA?McP?L?c?#?c??H??HK?t ?????3??H? [???????%/ ????? ????????UH? H?H? H???? H?? ?P?P=csm?H?? ?P????0??0 ?0H? ]?@UH? H?H? H???? H?? ?p?p=csm?H?? ?p? ???8??8 ?8H? ]?@UH? H?H?0 H???? H?? ?`?`=csm?H?? ?`????H??H ?HH? ]?@UH? H?H? H???? H?? ?? ?? =csm?H?? ?? ????$??$ ?$H? ]?@UH? H?H? H???? H?? ?(?(=csm?H?? ?(????4??4 ?4H? ]?@UH? H?H? H???? H?? ?@?@=csm?H?? ?@????L??L ?LH? ]?@UH? H?H?( H???? H?? ?X?X=csm?H?? ?X????h??h ?hH? ]?@UH? H?H?8 H???? H?? ?x?x=csm?H?? ?x????? ? ?? ?? H? ]?@UH? H??h w ?\ ????H? ]????????????UH? H?H?3?8 ???H? ]? b ? d 4 2 p d 4 ? p, d$ 4# ??? p P (B ? 20 4 r? p `f@ ?# $ $ t d 4 r?@ ?% S& S& 4 2p d 4 ?pf@ ) t) t) d 4 ???pf@ ?+ A, A, ?, ?, ?, 4 R??`f@ / >/ >/ d 4 ???pf@ >1 ?1 ?1 ? t d 4 ??@ \3 ?3 ?3 20 ? ? ? R???p`P0 4 Rp R0 t T 4 2??? B 4/ ( ?p` f@ y< ?< ? ?< ?< ?< *C ?< ?< = ~C = 5= D= ? D= \= k= /D k= ?= ?= ? ?= ?= ?= ? ?= > > +E > A< *> ? 2P 4 2pf@ ?> 0? ? 0? 4 2P ??R NI I $I @I ?$ ?" 80 ?2 ?) ?- ? YI hI vI ? ? ? ? AdhApi.dll AdhEngineClose AdhEngineOpen AdhGetConfig AdhGetEvidenceCollectorResult AdhStatusEventSubscribe AdhStatusEventUnsubscribe DllMain ???? 2?-?+ ? ???P ? ? ? W ? ` ? ? ? ? F ? ?! F ?! ~" ? ?" ?" 4F ?" ?$ <F ?$ ' dF ' ?' ? ?' ?) ? ?) ?- ? ?- 00 G 80 ?2 (G ?2 ?4 TG ?4 ?4 4F ?4 5 4F 5 ;5 ? D5 ?5 ? ?5 6 ? $6 ?6 ? ?6 ?8 ? ?8 ?8 ? 9 ^9 ? d9 ?9 ? ?9 ?; ? ?; < ? < N> ? ?> =? ? ?? T@ ? t@ ? 4F ? !B ? (B EB ? LB ? 4F ? *C ? *C ~C ? ~C ? ? ? /D ? /D ? ? ? ? ? ? +E ? +E ? ? ? ? ? ? ? ? dx fw ? ? x ? ? ? ? w w ? ty ? Vw ? ? ? ? ? 4y ? ? ? y y zx <x dy Jy ? ? (x Lx ? @w r{ ? ? ? ? ?u ? ? ? ? rv Xv >v $v v ? ? ? ? ? 0u ? ? `s ? p t ? ? ? ? pq ? z `p ? Fz 8q `t lz q ? ? ? ? ? `q ? ? ? (t { ? ?t *{ q Pt N{ ? ? ? ?q dx fw ? ? x ? ? ? ? w w ? ty ? Vw ? ? ? ? ? 4y ? ? ? y y zx <x dy Jy ? ? (x Lx ? @w r{ ? ? ? ? ?u ? ? ? ? rv Xv >v $v v ? ? V _XcptFilter ? _amsg_exit Mfree ?malloc ~_initterm X __C_specific_handler msvcrt.dll Q EtwTraceMessage E EtwGetTraceLoggerHandle D EtwGetTraceEnableLevel C EtwGetTraceEnableFlags L EtwRegisterTraceGuidsW S EtwUnregisterTraceGuids ?RtlCaptureContext ]RtlLookupFunctionEntry iRtlVirtualUnwind ntdll.dll ? Ndr64AsyncClientCall ? NdrClientCall3 DisableThreadLibraryCalls RpcStringBindingComposeW oRpcBindingFromStringBindingW # CreateWellKnownSid GetLastError ~RpcBindingSetAuthInfoExW ?RpcBindingSetOption mRpcBindingFree RpcStringFreeW # WaitForThreadpoolWaitCallbacks CloseThreadpoolWait gRpcAsyncInitializeHandle eRpcAsyncCompleteCall SetThreadpoolWait CreateEventW CreateThreadpoolWait dRpcAsyncCancelCall 3 WaitForSingleObject SetLastError HeapAlloc GetProcessHeap HeapFree TraceMessage CloseHandle GetCurrentThreadId GetCurrentProcess + Sleep QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetTickCount UnhandledExceptionFilter SetUnhandledExceptionFilter ? TerminateProcess RPCRT4.dll api-ms-win-core-libraryloader-l1-2-0.dll api-ms-win-security-base-l1-2-0.dll api-ms-win-core-errorhandling-l1-1-1.dll api-ms-win-core-threadpool-l1-2-0.dll api-ms-win-core-synch-l1-2-0.dll api-ms-win-core-heap-l1-2-0.dll api-ms-win-eventing-classicprovider-l1-1-0.dll api-ms-win-core-handle-l1-1-0.dll api-ms-win-core-processthreads-l1-1-2.dll api-ms-win-core-sysinfo-l1-2-1.dll api-ms-win-core-profile-l1-1-0.dll LookupAccountSidLocalW api-ms-win-security-lsalookup-l1-1-1.dll ?memset ? 0 ? H `? ? ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n j ! F i l e D e s c r i p t i o n A D h a r v e s t s i t e s a n d s u b n e t s A P I r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) 6 I n t e r n a l N a m e A d h A p i . d l l ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . > O r i g i n a l F i l e n a m e A d h A p i . d l l j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? ? ? ???????? ?? ?0????? ?? ?0????????? ????????? ?0?????ò????????????????????? ?0?????? P ?
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de