Edit C:\Windows\System32\mpnotify.exe
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ 6F?<r'?r'?r'??os'??os'?? oy'?r'?='??of'??op'?? os'??os'?Richr'? PE d? ?R ? " ( ?' @ ? ? `? hb x p H P ? ? ? @ ? ? ` h l5 @ .text & ( `.data @ , @ ?.pdata ? P . @ @.idata ? ` 0 @ @.rsrc H p < @ @.reloc ? ? D @ B X1 @ ?' @ ?& @ ?* @ ?R % D D p@ @ A @ MPR.dll S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ \ n e t w o r k p r o v i d e r P r o v i d e r P a t h NPPasswordChangeNotify W i n s t a 0 M S V 1 _ 0 : I n t e r a c t i v e M i c r o s o f t W i n d o w s N e t w o r k n c a l r p c 1 f 2 a 0 4 7 b - 9 6 d 8 - 4 8 8 e - b c 9 b - 1 d 5 e % 0 8 X ]?? ?? +H` ? @ ? @ 8 @ B @ 3qq?7I????6 @ @ @ / @ / @ 5 @ @ ? ? C H @ H @ @ ? @ ? @ B @ [ ? @ @ ` ?<?hJ?`k?? ]?? ?? +H` ? @ ? @ ! ? @ ! ? @ ? @ @ ,0 r ? @ P @ ? @ ? ? @ ? ? @ ? ( ? @ @ P @ ? @ 5 ? @ ? ? d 0 A ? @ < @ p @ 0 @ ? @ 8 @ ? @ 0 @ / @ / @ [ @6[ ? \[ U U [ B6[ ?%\ 3qq?7I????6 H ( 2 G ? $ A B p H 0 2 F R H H p ( 6 ! 0 @ @ n( r P @ ? @ ? ? @ ? ? @ ? ? @ @ @ RSDSM?o?5M?(T?C? mpnotify.pdb H?$? 3??D??L?fA9t I?I????u ? ?L??L?M+??IJ? A?I+?2M???L?+??tE? fE?tfD?I???H????u H?? ?f?H?$???????$L?$ SUVWH?(3???H?H=???? ?G??x5H??L?$hH?H???? ?xH?;?uf?,^?f?,^? ??H?tf?.?H?(_^][?????@SH? H??? L?H?3?? [H?%}F ?????SH? H??? L?H?3?? [H?%YF ??????$H?$UWATAVAWH?$???H?p H??% H3??` L?? L? h??H?P? L+??E3??H?PI???H?tA?f?t f?H?I????uH?L?H?PfD?"???L?]??H?P???H?$HH?PA? E3?? ?H?$ ?PE ?? H?$HH?$@L?$DH?$(H?$PH?0??E3?D$@ H?$PH?$ ?? ??to=? u??$@3?dE H?H?t/H?$HH?$@L?$DH?$(H????E3??$ ?? ??t%H?$H?? H?$PH;? H??/E ?? H?$H?? ?$Du H?PD?H??E ??= vJ? ??$Du<H?PH?H?PH+????H?t? f?t f?H?H????uH?fD?!H?$P?????H;? H??? H?P?VD H?H?tWH???H??ND H?t/?? M?I??$0H? ??L?$(H?$ H? ??L???? D H???? ??? ??H?` H3?? L?$p I?0I?8I?A_A^A\_]?????SH?0? ? 3?X??3?? ?u99D$Ht33?? ?u'??$ L?$@H?"??3?C ??#L$@?$@?t?,D ?$@H?0[?????H?HH?I?? I? I???E3?????!D ?u#?$`r?$h u?????????? H?H?????L?I?I? M?WATAUAVAWH?? M?3??$XH??H?$`D?A?I???$TL? L??L??(H??$T?H?$x??@?? H?H?$h3??u? ?$P? D?(H?0H??? L?$? H?$`H?? ?y ?? D ??$PH?$`D?$? ?' ??L?$? f?$? f?$? L?$? f?$? f?$? H?$`H?$? D?$? fD?$? fD?$? H?$XH?$@E3??$8H?{??H?$0L?$(L?$ L?$? L?m??H?$ H? ????! ??$P?urH?$XH?thE?H?$pI??I??F9$Bu?????f?D?c??BH?$pfE?u??A?????I?H????fE? E?H?$XH?? ??$XH?t H?? A H?tL?$x3??? H??? H?tE?3??? H??? H? & ?|@ ?L?$? I?0I?HI?A_A^A]A\_?????L?I?I?WATAUAVAWH?? E?L?3???$PD?A??H?$H?$@H?$X?$DI?H? H??$hH?H??$p?(H??$D?H?$`??@??? L?H?$XH?u?? D?(H?0H??? L?$@H?$HI?? ?y??? H?$H? I?3??$`?I???? H?$X ?$D ?8H??$D?H?$`?? ?l? L?H?$XH?u ?H?$H? D?8H?@H??? L?$0 H?$PI?? ?y??? H?$PD?$0 ??????H?$hH?$? f?$? f?$? H?$pH?$? f?$? f?$? H?$PH?$? D?$0 fD?$? fD?$? H?$? f?$? f?$? H?$? f?$? f?$? H?$HH?$? ?$@f?$? f?$? ?$@ uA?D?$8L?$? M?tH?$xH?$ I?????3H?$0 H????H?$(H?$xH?$ H????L?H? ????? ?M?tL?$`3??? I???= H?tE?3??? H???= H?tD?$@3??? H???= H? ?" ?^= ?L?$? I?0I?8I?A_A^A]A\_????H?$VH?? H?? H3??$? H?$0 ?$< ?$8 E3?3???3?-= E3?3?3?3?= H?n" H?u ??< ?? E3?? H? &????= ??? H?s??H?$(?$ ? D?(E3?3?? R????= ??? ?$8H?$0?s= ??? eH?%` D?? L?????%H?$`???H?$PH?$`?%= ??u^?$@H?$PH?$HE3??$@H?$0H? ????'= ??u0?$<D?? ???< ??u??H? e! ??; ??u?? R! H?t??; ?$< tL?$@H?$0H? g???y< ?H?$0 t H?$0??< ??$8 tD?3?? 7???Y< ??H?$? H3?- H?$? H?? ^??????H?UVWATAUAVAWH?0E3??L?H?A?D?A?E?M?u ? ?7 L?*E?(H?u3?% H??H??D9,yu??$? ???: ?u ? ?? ?$? ??? ??:D?4?? A?A???: H?H?u ? ?? L?H?H?? ? H?$? E3??H?3??$ ?: ?uc?c: ?z?????$? ??????? H?K: H?H?t??$? L?D?H?3??$ ??9 ?t?$? D?4 I?4$E?7? ? ??t3?3???H??: ?H?$pH?0A_A^A]A\_^]?????(?Z f9D??t3?OHc s??H?0??H?9PE u??= t= u?3?? v9? ?3?ytv 9? ?? ?4 ? ???: H? ?: H??H?? H?? ? ?H? W: ? ?? ?=? u H? ?d: 3??(?????H?8?? D? ? L?? ?? H?? H?? H? ? H?$ ?F: ?t H?8????H?(? H?(? ???H?$H?$AVH?? ?$ H?$@??8 ?H?%0 H?3?3?H? ? tH;?? ? ? ??8 ??? ?u ? ? ??? ?uQ?? L?5???H? ???H?$8?$0I;? ?u H? H?t??D$0H?H?$8??t? ? ?u ?C ?u H?G??H? 0??? ?! ?u 3?? H?= t"H? ? ?tE3??3??? ????8 H?H?$(?$ ?; wq?; t?uh??< w H???$(??$|?$? A? DE??3?? ???????? ?=? u??f8 ?=? u ?G8 ?? ??;"u 3?????$ ? ? 8 ?tH???$(H???$(?????M ?=f u ???7 ?=8 u ??7 ?& L?$? I?I?I?A^????f ? H; ? uH?f???u??? ???H?(H??8csm?#?u ? ??l??v? @?u??7 ?3??(????H?(H? ????C6 3??(????%`7 ????H?3???H??<?Z f9u*9Q<|%?< s HcA<H??$?8PE HE??H?$?3??$H?H??????SH? ?3??5 H?t(H?????H?t? f9H\u??f?\? t?H? [?????%?6 ???3??????cA<E3??L??E?H?I??t ? L;? ??;?A???(E;??3???????H?$WH? H?H?= ??H?? ?t"H+??H?????H?t?$? ???3??$0H? _??????????H??Z f9t3?HcH<H?3?9PE u ? f9Q??????$ UH?H? H?? H? H?2?-?+ H;?? H??&4 H?H??(4 ?H1E?4 ?H1E??3 ?H?H1E??3 H??H3EH3?? H???3 ? H? H?????? H3E H3EH#??3?-?+ H;?D??? H?$HH?H?? H? ]????%?4 ????%|4 ????@SH? H?3??3 H??B3 ??3 ? ??H? [H?%x3 ????H?$H?? H? m ??4 H?X H?$HE3??$PH?$H?x4 H?$@H?$@ tBH?$8 H?$XH?$0H?$`H?$(H? H?$ L?$@L?$HH?$P3?C4 ?#H?? H? H?? H?y H?H?n H?? H?8 H?$? H?9 ? ? ? ? Hk? H? H? ? Hk?H? ? H?d H?? Hk?H? ? H?Q H?? Hk? H? 5 H?h? Hk?H? ( H?hH? ??????H?? ?????%2 ????%2 ???H?? ? ???H?$H?$L?$L?$ H?hfD$ fL$0fT$@f\$PH?H? ? foD$ foL$0foT$@fo\$PH?$pH?$xL?$? L?$? H?h? ??????` ?????????8?$( L????H?$ H?L? H? ??? H?8????%1 ????%1 ????H?(M?8H?I?? ? H?(????@SH? E?H?L?A??? L?tA?McP?L?c?#?c??H??HK?t ?????3??H? [?????????H?H?H?H? AVH? M?8H?M?A?H?I?H?H?I?I??????D?D?A?A?? #???DD??tL?M?H?H???0 ?H?$0H?$8H?$@H?$H?H? A^????%j0 ????%?0 ???? ??????UH? H?? t??/ ?? ]????@UH?0H?H?0]????@SUH?XH?H?XH?t??. ??hH?tD?T3??????H???. ??`H?tD?? 3??????H???. ?? ? ?M. ??X][????@UWH?HH?H?XH?tD?D3??????H??\. ??PH?tD?0 3?????H??8. ??HH?tD?@3?????H??. ?? W ??- ??H_]????@UH?0H?H? 2 H?t??- ?}< tL?@H?0H? I???[. ??0 t H?0??. ?}8 t3??H? ????. ??0]????@UH? H?H?H??????? ]???????UH? H?H?3?8 ???H? ]? 4 Bp ` P 0 202 !du !4t !n ??? p P 0 ` R0F- ? f1 2P ? F- . v ?1 RP d! 4 ????p F- ? ? ?1 ?P0 d% 4$ ???? p F- M ?" 2 ?pP 4 ` ?0 O# ?$ ?2 ? 4 R??? ? p `P B b t 4 ? F- ( ?) 3 ?) " F- ?* + + 4 2pF- ?+ , @3 , 4 2P ? t d T 4 2? ? ? @ ?5 ?5 ?5 ?5 WNetLogonNotify WNetPasswordChangeNotify 2?-?+ ? ????/ @ / @ ? `3 ? h3 ? ? x3 ? ? x3 ? ? ?3 ? ?3 $ { ?3 ? ? ?3 # 44 # % t4 % ?& ?4 ?& {' ?4 ?' ?' ?4 ?' ?' ?4 ?' * ?4 T* ?* ?4 ?* ?* ?4 ?* + ?4 + a+ x3 ?+ , 5 d, 4- 85 T- ?- x3 ?- / D5 2/ ?/ L5 ?/ ?/ ?4 0 10 ?4 80 ?0 x3 ?0 :1 T5 f1 ?1 ?3 ?1 ?1 ?3 ?1 2 (4 2 ?2 h4 ?2 3 ?3 3 53 ?3 @3 `3 ?3 \e pe ? ? ? He ? ? ? ? f f f 0f @f Rf `f pf ? ? ? *j j j ? ? ? ? ? vi ni Zj nj ? Fj ? ? ? ? ? ? ? ? ? ? h 0h Bh Zh rh ? ? ?g vg ^g Rg >g 0g &g g g g ? ? ? ? ? ? 6i "i i Pi ? ? ` c ? 8` ? ? ? d ? (a e di @b \e pe ? ? ? He ? ? ? ? f f f 0f @f Rf `f pf ? ? ? *j j j ? ? ? ? ? vi ni Zj nj ? Fj ? ? ? ? ? ? ? ? ? ? h 0h Bh Zh rh ? ? ?g vg ^g Rg >g 0g &g g g g ? ? ? ? ? ? 6i "i i Pi ? CredIsProtectedW ?RegQueryValueExW ? CredUnprotectW ?RegOpenKeyExW _ CheckTokenMembership TRegCloseKey ADVAPI32.dll ?FreeLibrary 8HeapAlloc <HeapFree ?WaitForSingleObject ?SetEvent ?GetProcessHeap ?LoadLibraryW VGetLastError ?GetProcAddress ?LocalAlloc ? CreateEventW @HeapSetInformation CloseHandle ?LocalFree [ExpandEnvironmentStringsW KERNEL32.dll j_vsnwprintf V _XcptFilter ? _amsg_exit ? __getmainargs ? __set_app_type 3exit _exit ? _cexit ?_ismbblead ? __setusermatherr ~_initterm X __C_specific_handler ? _acmdln (_fmode ? _commode msvcrt.dll 0 ?terminate@@YAXXZ ?RpcServerRegisterIfEx ?RpcServerInqBindings ?RpcServerListen sRpcBindingInqAuthClientW % I_RpcBindingIsClientLocal ?RpcEpRegisterW ?RpcServerUseProtseqW ?RpcImpersonateClient ?RpcBindingVectorFree UuidFromStringW ?RpcServerUnregisterIf ?RpcRevertToSelf ?RpcEpUnregister *NdrServerCall2 +NdrServerCallAll RPCRT4.dll pRtlNtStatusToDosError ?RtlCaptureContext ]RtlLookupFunctionEntry iRtlVirtualUnwind ntdll.dll [Sleep ?GetStartupInfoW LSetUnhandledExceptionFilter lGetModuleHandleW -QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId ?GetSystemTimeAsFileTime ?GetTickCount ?UnhandledExceptionFilter GetCurrentProcess jTerminateProcess DelayLoadFailureHook ?ResolveDelayLoadedAPI ?memcpy ?memset ? 8 ? P ? h ? ? ? hs ? ? ? <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <!-- Copyright (c) Microsoft Corporation --> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="5.1.0.0" processorArchitecture="amd64" name="Microsoft.Windows.Security.MPNotify" type="win32" /> <description>Windows NT Multiple Provider Notification Application</description> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false" /> </requestedPrivileges> </security> </trustInfo> </assembly> ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? > S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n ? 6 F i l e D e s c r i p t i o n W i n d o w s N T M u l t i p l e P r o v i d e r N o t i f i c a t i o n A p p l i c a t i o n r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) : I n t e r n a l N a m e m p n o t i f y . e x e ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . B O r i g i n a l F i l e n a m e m p n o t i f y . e x e j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? x ??(?0????????????8??????????????? ?? ?0?8???????????? ?(??????? ? @ ? ?
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de