--- afterdivvun22removed.reg 2012-12-11 01:13:01.000000000 +0100 +++ afterdivvunkukuniiaatinstalled.reg 2012-12-11 01:18:10.000000000 +0100 @@ -851329,6 +851329,32 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office] +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings\Mso_CoreReg] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings\Mso_CoreReg\Create] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings\Mso_CoreReg\Create\Software] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings\Mso_CoreReg\Create\Software\Microsoft] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override\kl-GL] +"DLL"="C:\\Program Files\\Kukkuniiaat\\kalspell.dll" +"LEX"="C:\\Program Files\\Kukkuniiaat\\kal.foma" +"DLL64"="C:\\Program Files\\Kukkuniiaat\\kalspell64.dll" +"LEX64"="C:\\Program Files\\Kukkuniiaat\\kal.foma" + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\Common] @@ -851336,6 +851362,82 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\Common\InstallRoot] @="" +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings\Mso_CoreReg] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings\Mso_CoreReg\Create] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings\Mso_CoreReg\Create\Software] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings\Mso_CoreReg\Create\Software\Microsoft] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override\kl-GL] +"DLL"="C:\\Program Files\\Kukkuniiaat\\kalspell.dll" +"LEX"="C:\\Program Files\\Kukkuniiaat\\kal.foma" +"DLL64"="C:\\Program Files\\Kukkuniiaat\\kalspell64.dll" +"LEX64"="C:\\Program Files\\Kukkuniiaat\\kal.foma" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings\Mso_CoreReg] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings\Mso_CoreReg\Create] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings\Mso_CoreReg\Create\Software] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings\Mso_CoreReg\Create\Software\Microsoft] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override\kl-GL] +"DLL"="C:\\Program Files\\Kukkuniiaat\\kalspell.dll" +"LEX"="C:\\Program Files\\Kukkuniiaat\\kal.foma" +"DLL64"="C:\\Program Files\\Kukkuniiaat\\kalspell64.dll" +"LEX64"="C:\\Program Files\\Kukkuniiaat\\kal.foma" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings\Mso_CoreReg] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings\Mso_CoreReg\Create] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings\Mso_CoreReg\Create\Software] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings\Mso_CoreReg\Create\Software\Microsoft] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\13.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override\kl-GL] +"DLL"="C:\\Program Files\\Kukkuniiaat\\kalspell.dll" +"LEX"="C:\\Program Files\\Kukkuniiaat\\kal.foma" +"DLL64"="C:\\Program Files\\Kukkuniiaat\\kalspell64.dll" +"LEX64"="C:\\Program Files\\Kukkuniiaat\\kal.foma" + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Access] @@ -853535,6 +853637,20 @@ "Themes"="Themes" "Xlstart"="XLSTART" +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override\kl-GL] +"DLL"="C:\\Program Files\\Kukkuniiaat\\kalspell.dll" +"LEX"="C:\\Program Files\\Kukkuniiaat\\kal.foma" +"DLL64"="C:\\Program Files\\Kukkuniiaat\\kalspell64.dll" +"LEX64"="C:\\Program Files\\Kukkuniiaat\\kal.foma" + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\User Settings\Mso_Intl] "Count"=dword:00000001 "Order"=dword:00000001 @@ -854342,6 +854458,58 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Wxp\InstallRoot] "Path"="C:\\Program Files\\Microsoft Office\\Office14\\" +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings\Mso_CoreReg] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings\Mso_CoreReg\Create] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings\Mso_CoreReg\Create\Software] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings\Mso_CoreReg\Create\Software\Microsoft] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override\kl-GL] +"DLL"="C:\\Program Files\\Kukkuniiaat\\kalspell.dll" +"LEX"="C:\\Program Files\\Kukkuniiaat\\kal.foma" +"DLL64"="C:\\Program Files\\Kukkuniiaat\\kalspell64.dll" +"LEX64"="C:\\Program Files\\Kukkuniiaat\\kal.foma" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings\Mso_CoreReg] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Create] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Create\Software] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Create\Software\Microsoft] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Create\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override\kl-GL] +"DLL"="C:\\Program Files\\Kukkuniiaat\\kalspell.dll" +"LEX"="C:\\Program Files\\Kukkuniiaat\\kal.foma" +"DLL64"="C:\\Program Files\\Kukkuniiaat\\kalspell64.dll" +"LEX64"="C:\\Program Files\\Kukkuniiaat\\kal.foma" + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\8.0] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\8.0\Outlook] @@ -927457,6 +927625,8 @@ "C:\\Program Files\\Microsoft Office\\Office14\\1044\\GrooveForms5\\FormsStyles\\Solutions\\"="" "C:\\Program Files\\Microsoft Office\\Office14\\no\\"="" "C:\\Program Files\\Microsoft Office\\OFFICE14\\2068\\"="" +"C:\\Program Files\\Kukkuniiaat\\foma\\"="" +"C:\\Program Files\\Kukkuniiaat\\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\ResolveIOD] "outlook.exe"=dword:00000000 @@ -927535,6 +927705,9 @@ "00004109F10041400000000000F01FEC"="" "00004109F10070400000000000F01FEC"="" +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\35A5CA3AB1322A442AB85EC9AC79F90B] +"AAE9B640AC3D09C4BA77104EC191CDD5"="" + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\9DD53E019628E1F3794F990FADC3C2CE] "5C1093C35543A0E32A41B090A305076A"="" @@ -942927,6 +943100,66 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001] +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Components] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Components\024D14C581AD02540AD5CDF7F23E3419] +"AAE9B640AC3D09C4BA77104EC191CDD5"="01:\\Software\\Microsoft\\Shared Tools\\Proofing Tools\\1.0\\Override\\kl-GL\\DLL" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Components\0D35F489EE369424688EE3336D075E75] +"AAE9B640AC3D09C4BA77104EC191CDD5"="C:\\Program Files\\Kukkuniiaat\\foma\\flookup.exe" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Components\1AB73B0FB922D42489929D2C80408A3F] +"AAE9B640AC3D09C4BA77104EC191CDD5"="C:\\Program Files\\Kukkuniiaat\\kalspell.dll" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Components\76959BD222B847B409C911D3EF121747] +"AAE9B640AC3D09C4BA77104EC191CDD5"="C:\\Program Files\\Kukkuniiaat\\kalhyph.dll" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Products] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Products\AAE9B640AC3D09C4BA77104EC191CDD5] + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Products\AAE9B640AC3D09C4BA77104EC191CDD5\Features] +"Komplet"="?QcFvva?B9,I&^g}kKBw0bxyX[dsA9_%}O4WK79DfrF`E&BS6=(E$+Qf1QcV{$.d2@*F9@N6D^7)R(LM" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Products\AAE9B640AC3D09C4BA77104EC191CDD5\InstallProperties] +"LocalPackage"="C:\\Windows\\Installer\\46001.msi" +"AuthorizedCDFPrefix"="" +"Comments"="" +"Contact"="" +"DisplayVersion"="0.1.9" +"HelpLink"="" +"HelpTelephone"="" +"InstallDate"="20121211" +"InstallLocation"="" +"InstallSource"="C:\\Users\\abba\\Downloads\\" +"ModifyPath"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,\ + 00,65,00,20,00,2f,00,49,00,7b,00,30,00,34,00,36,00,42,00,39,00,45,00,41,00,\ + 41,00,2d,00,44,00,33,00,43,00,41,00,2d,00,34,00,43,00,39,00,30,00,2d,00,41,\ + 00,42,00,37,00,37,00,2d,00,30,00,31,00,45,00,34,00,31,00,43,00,31,00,39,00,\ + 44,00,43,00,35,00,44,00,7d,00,00,00 +"Publisher"="Tino Didriksen Consult" +"Readme"="" +"Size"="" +"EstimatedSize"=dword:00010111 +"UninstallString"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\ + 78,00,65,00,20,00,2f,00,49,00,7b,00,30,00,34,00,36,00,42,00,39,00,45,00,41,\ + 00,41,00,2d,00,44,00,33,00,43,00,41,00,2d,00,34,00,43,00,39,00,30,00,2d,00,\ + 41,00,42,00,37,00,37,00,2d,00,30,00,31,00,45,00,34,00,31,00,43,00,31,00,39,\ + 00,44,00,43,00,35,00,44,00,7d,00,00,00 +"URLInfoAbout"="" +"URLUpdateInfo"="" +"VersionMajor"=dword:00000000 +"VersionMinor"=dword:00000001 +"WindowsInstaller"=dword:00000001 +"Version"=dword:00010009 +"Language"=dword:00000406 +"DisplayName"="Kukkuniiaat til Microsoft Office" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Products\AAE9B640AC3D09C4BA77104EC191CDD5\Patches] +"AllPatches"="" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-623000061-4122497103-2362631931-1001\Products\AAE9B640AC3D09C4BA77104EC191CDD5\Usage] + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] "EnablePunycode"=dword:00000001 "CodeBaseSearchPath"="CODEBASE" @@ -1007098,6 +1007331,39 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC] "NoRemove"=dword:00000001 +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{046B9EAA-D3CA-4C90-AB77-01E41C19DC5D}] +"AuthorizedCDFPrefix"="" +"Comments"="" +"Contact"="" +"DisplayVersion"="0.1.9" +"HelpLink"="" +"HelpTelephone"="" +"InstallDate"="20121211" +"InstallLocation"="" +"InstallSource"="C:\\Users\\abba\\Downloads\\" +"ModifyPath"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,\ + 00,65,00,20,00,2f,00,49,00,7b,00,30,00,34,00,36,00,42,00,39,00,45,00,41,00,\ + 41,00,2d,00,44,00,33,00,43,00,41,00,2d,00,34,00,43,00,39,00,30,00,2d,00,41,\ + 00,42,00,37,00,37,00,2d,00,30,00,31,00,45,00,34,00,31,00,43,00,31,00,39,00,\ + 44,00,43,00,35,00,44,00,7d,00,00,00 +"Publisher"="Tino Didriksen Consult" +"Readme"="" +"Size"="" +"EstimatedSize"=dword:00010111 +"UninstallString"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\ + 78,00,65,00,20,00,2f,00,49,00,7b,00,30,00,34,00,36,00,42,00,39,00,45,00,41,\ + 00,41,00,2d,00,44,00,33,00,43,00,41,00,2d,00,34,00,43,00,39,00,30,00,2d,00,\ + 41,00,42,00,37,00,37,00,2d,00,30,00,31,00,45,00,34,00,31,00,43,00,31,00,39,\ + 00,44,00,43,00,35,00,44,00,7d,00,00,00 +"URLInfoAbout"="" +"URLUpdateInfo"="" +"VersionMajor"=dword:00000000 +"VersionMinor"=dword:00000001 +"WindowsInstaller"=dword:00000001 +"Version"=dword:00010009 +"Language"=dword:00000406 +"DisplayName"="Kukkuniiaat til Microsoft Office" + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3C3901C5-3455-3E0A-A214-0B093A5070A6}] "AuthorizedCDFPrefix"="" "Comments"="" @@ -1110441,7 +1110707,7 @@ "OEM"="%windir%\\system32\\oem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP] -"LastIndex"=dword:00000015 +"LastIndex"=dword:00000016 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients] "{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}"=hex(7):5c,00,5c,00,3f,00,5c,00,56,00,\ @@ -1110682,7 +1110948,7 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "RPSessionInterval"=dword:00000001 "FirstRun"=dword:00000000 -"LastIndex"=dword:00000015 +"LastIndex"=dword:00000016 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\cfg] "DiskPercent"=dword:0000000f @@ -1110696,7 +1110962,7 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\Volatile] "NestingLevel"=dword:00000000 -"StartNesting"=hex(b):8e,16,67,a0,33,d7,cd,01 +"StartNesting"=hex(b):e6,41,9e,db,34,d7,cd,01 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server] @@ -1167939,6 +1168205,8 @@ [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\STORAGE\VolumeSnapshot\HarddiskVolumeSnapshot3\LogConf] +[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\STORAGE\VolumeSnapshot\HarddiskVolumeSnapshot3\Control] + [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\STORAGE\VolumeSnapshot\HarddiskVolumeSnapshot4] "Capabilities"=dword:000000f0 "ConfigFlags"=dword:00000000 @@ -1191049,13 +1191317,13 @@ "AddressType"=dword:00000000 "IsServerNapAware"=dword:00000000 "DhcpConnForceBroadcastFlag"=dword:00000000 -"DhcpInterfaceOptions"=hex:36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,\ - cb,c7,50,0a,00,02,02,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,cb,\ - c7,50,00,01,51,80,06,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,cb,c7,\ - 50,0a,00,02,03,03,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,cb,c7,50,\ - 0a,00,02,02,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,cb,c7,50,ff,\ - ff,ff,00,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,19,cb,c7,50,05,00,\ - 00,00,fc,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,8a,79,c6,50 +"DhcpInterfaceOptions"=hex:36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,\ + cc,c7,50,0a,00,02,02,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,cc,\ + c7,50,00,01,51,80,06,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,cc,c7,\ + 50,0a,00,02,03,03,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,cc,c7,50,\ + 0a,00,02,02,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,cc,c7,50,ff,\ + ff,ff,00,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,ee,cc,c7,50,05,00,\ + 00,00,fc,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,d5,79,c6,50 "DhcpGatewayHardware"=hex:0a,00,02,02,06,00,00,00,52,54,00,12,35,02 "DhcpGatewayHardwareCount"=dword:00000001 "DhcpNameServer"="10.0.2.3" @@ -1192494,115 +1192762,115 @@ "SppEnumGroups (Leave)"=hex:40,00,00,00,00,00,00,00,3b,59,da,62,55,d2,cd,01,fc,\ 0b,00,00,58,0d,00,00,d1,07,00,00,01,00,00,00,00,00,00,00,01,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"SppCreate (Enter)"=hex:40,00,00,00,00,00,00,00,8e,16,67,a0,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppCreate (Enter)"=hex:40,00,00,00,00,00,00,00,e6,41,9e,db,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"SppGatherWriterMetadata (Enter)"=hex:40,00,00,00,00,00,00,00,7c,23,a7,a1,33,\ - d7,cd,01,80,03,00,00,a8,0b,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppGatherWriterMetadata (Enter)"=hex:40,00,00,00,00,00,00,00,26,0b,c9,db,34,\ + d7,cd,01,40,06,00,00,dc,0d,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00 -"SppGatherWriterMetadata (Leave)"=hex:40,00,00,00,00,00,00,00,b9,c3,bd,ad,33,\ - d7,cd,01,80,03,00,00,a8,0b,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\ +"SppGatherWriterMetadata (Leave)"=hex:40,00,00,00,00,00,00,00,d6,fb,5d,dd,34,\ + d7,cd,01,40,06,00,00,dc,0d,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00 -"SppAddInterestingComponents (Enter)"=hex:40,00,00,00,00,00,00,00,b9,c3,bd,ad,\ - 33,d7,cd,01,80,03,00,00,a8,0b,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\ +"SppAddInterestingComponents (Enter)"=hex:40,00,00,00,00,00,00,00,06,83,5f,dd,\ + 34,d7,cd,01,40,06,00,00,dc,0d,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"SppAddInterestingComponents (Leave)"=hex:40,00,00,00,00,00,00,00,1b,22,d1,ad,\ - 33,d7,cd,01,80,03,00,00,a8,0b,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\ +"SppAddInterestingComponents (Leave)"=hex:40,00,00,00,00,00,00,00,86,2f,84,dd,\ + 34,d7,cd,01,40,06,00,00,dc,0d,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"SppCreate (Leave)"=hex:40,00,00,00,00,00,00,00,fb,60,ee,b0,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppCreate (Leave)"=hex:40,00,00,00,00,00,00,00,66,7e,58,e0,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\SystemRestore] -"SrCreateRp (Enter)"=hex:40,00,00,00,00,00,00,00,8e,16,67,a0,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SrCreateRp (Enter)"=hex:40,00,00,00,00,00,00,00,e6,41,9e,db,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"SrCreateRp (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SrCreateRp (Leave)"=hex:40,00,00,00,00,00,00,00,66,7e,58,e0,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\ASR Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,2f,16,ca,a1,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,36,a6,3b,dc,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,09,e9,f9,a1,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,b6,df,47,dc,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\BITS Writer] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\COM+ REGDB Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,18,a4,da,a1,33,d7,cd,01,b8,00,\ - 00,00,34,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,d6,97,38,dc,34,d7,cd,01,7c,07,\ + 00,00,10,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,f9,7a,dc,a1,33,d7,cd,01,b8,00,\ - 00,00,34,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,36,a6,3b,dc,34,d7,cd,01,7c,07,\ + 00,00,10,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,b8,\ - 00,00,00,1c,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,ad,ef,37,ae,33,d7,cd,01,b8,\ - 00,00,00,1c,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,ad,ef,37,ae,33,\ - d7,cd,01,b8,00,00,00,1c,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,26,07,b2,dd,34,d7,cd,01,7c,\ + 07,00,00,c4,0d,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,b6,9c,b6,dd,34,d7,cd,01,7c,\ + 07,00,00,c4,0d,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,b6,9c,b6,dd,34,\ + d7,cd,01,7c,07,00,00,c4,0d,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,3b,53,48,ae,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,3b,53,48,ae,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,8f,a8,aa,ae,33,d7,cd,01,\ - b8,00,00,00,c4,01,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,1f,41,e6,ae,33,d7,cd,01,\ - b8,00,00,00,c4,01,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,1f,\ - 41,e6,ae,33,d7,cd,01,b8,00,00,00,c4,01,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,16,91,ea,dd,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,16,91,ea,dd,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,76,85,1e,de,34,d7,cd,01,\ + 7c,07,00,00,84,0d,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,16,d0,64,de,34,d7,cd,01,\ + 7c,07,00,00,84,0d,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,\ + d0,64,de,34,d7,cd,01,7c,07,00,00,84,0d,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,b8,00,00,\ - 00,10,02,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,b8,00,00,\ - 00,10,02,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,d3,bf,\ - 30,af,33,d7,cd,01,b8,00,00,00,10,02,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,56,0c,\ + a8,de,34,d7,cd,01,7c,07,00,00,b8,06,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,\ - 01,b8,00,00,00,8c,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,b8,00,00,00,8c,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,\ + 01,7c,07,00,00,d0,03,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,\ + ec,04,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,\ + 01,7c,07,00,00,d0,03,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,\ + ec,04,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,50,02,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,ec,04,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,15,c4,59,b2,33,d7,cd,01,b8,\ - 00,00,00,50,02,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,15,c4,59,b2,33,d7,cd,01,b8,\ - 00,00,00,50,02,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,15,c4,59,b2,33,d7,cd,01,b8,00,00,00,50,02,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,36,e4,4c,e3,34,d7,cd,01,7c,07,00,00,b8,06,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ b8,00,00,00,50,02,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1192612,113 +1192880,113 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Lovelace] -"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,ff,3d,60,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,1f,9b,a0,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,1f,9b,a0,b0,33,d7,\ - cd,01,b8,00,00,00,3c,02,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,c9,e6,d4,b0,33,d7,\ - cd,01,b8,00,00,00,3c,02,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,e6,1f,a1,df,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,e6,1f,a1,df,34,d7,\ + cd,01,7c,07,00,00,5c,08,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,c6,33,12,e0,34,d7,\ + cd,01,7c,07,00,00,5c,08,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Lovelace(__?_Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}_)] -"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,ff,3d,60,b0,33,d7,cd,\ - 01,b8,00,00,00,e4,0c,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,1f,9b,a0,b0,33,d7,cd,\ - 01,b8,00,00,00,e4,0c,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,1f,9b,a0,b0,33,d7,\ - cd,01,b8,00,00,00,e4,0c,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,c9,e6,d4,b0,33,d7,\ - cd,01,b8,00,00,00,e4,0c,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,b8,\ - 00,00,00,e4,0c,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,b8,\ - 00,00,00,e4,0c,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,fc,0c,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,e6,1f,a1,df,34,d7,cd,\ + 01,7c,07,00,00,fc,0c,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,e6,1f,a1,df,34,d7,\ + cd,01,7c,07,00,00,fc,0c,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,c6,33,12,e0,34,d7,\ + cd,01,7c,07,00,00,fc,0c,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,7c,\ + 07,00,00,fc,0c,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,7c,\ + 07,00,00,fc,0c,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\MSSearch Service Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,94,48,d3,a1,33,d7,cd,01,f8,03,\ - 00,00,c8,0b,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,c6,3b,40,dc,34,d7,cd,01,f8,03,\ + 00,00,f4,0e,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,bb,28,e0,a1,33,d7,cd,01,f8,03,\ - 00,00,c8,0b,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,f6,c2,41,dc,34,d7,cd,01,f8,03,\ + 00,00,f4,0e,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,f8,\ - 03,00,00,c8,0b,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,ad,ef,37,ae,33,d7,cd,01,f8,\ - 03,00,00,c8,0b,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,ad,ef,37,ae,33,\ - d7,cd,01,f8,03,00,00,c8,0b,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,16,ab,b9,dd,34,d7,cd,01,f8,\ + 03,00,00,f4,0e,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,76,b9,bc,dd,34,d7,cd,01,f8,\ + 03,00,00,f4,0e,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,76,b9,bc,dd,34,\ + d7,cd,01,f8,03,00,00,f4,0e,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,67,58,45,ae,33,d7,cd,01,f8,03,\ - 00,00,c8,0b,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,d1,d5,46,ae,33,d7,cd,01,f8,03,\ - 00,00,c8,0b,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,0b,99,b3,ae,33,d7,cd,01,\ - f8,03,00,00,c8,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,5d,b9,ea,ae,33,d7,cd,01,\ - f8,03,00,00,c8,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,5d,\ - b9,ea,ae,33,d7,cd,01,f8,03,00,00,c8,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,86,fb,e5,dd,34,d7,cd,01,f8,03,\ + 00,00,f4,0e,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,b6,82,e7,dd,34,d7,cd,01,f8,03,\ + 00,00,f4,0e,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,d6,93,21,de,34,d7,cd,01,\ + f8,03,00,00,f4,0e,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,16,b6,95,de,34,d7,cd,01,\ + f8,03,00,00,f4,0e,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,\ + b6,95,de,34,d7,cd,01,f8,03,00,00,f4,0e,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,f8,03,00,\ - 00,c8,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,f8,03,00,\ - 00,c8,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,d3,bf,\ - 30,af,33,d7,cd,01,f8,03,00,00,c8,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,f8,03,00,\ + 00,f4,0e,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,f8,03,00,\ + 00,f4,0e,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,56,0c,\ + a8,de,34,d7,cd,01,f8,03,00,00,f4,0e,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,\ - 01,f8,03,00,00,90,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,f8,03,00,00,\ - c8,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,f8,03,00,00,90,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,f8,03,00,00,\ - c8,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,\ + 01,f8,03,00,00,54,0e,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,f8,03,00,00,\ + f4,0e,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,\ + 01,f8,03,00,00,54,0e,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,f8,03,00,00,\ + f4,0e,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,f8,03,00,00,c8,0b,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,f6,13,5d,e0,34,d7,cd,01,f8,03,00,00,f4,0e,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,5b,1b,5b,b2,33,d7,cd,01,f8,\ - 03,00,00,c8,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,1f,72,2b,b5,33,d7,cd,01,f8,\ - 03,00,00,c8,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,f8,\ + 03,00,00,f4,0e,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,96,95,ef,e4,34,d7,cd,01,f8,\ + 03,00,00,f4,0e,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,1f,72,2b,b5,33,d7,cd,01,f8,03,00,00,c8,0b,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,96,95,ef,e4,34,d7,cd,01,f8,03,00,00,f4,0e,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ f8,03,00,00,c8,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1192728,73 +1192996,73 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Registry Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,f1,c3,cd,a1,33,d7,cd,01,b8,00,\ - 00,00,48,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,d6,97,38,dc,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,ea,bf,fb,a1,33,d7,cd,01,b8,00,\ - 00,00,48,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,06,1f,3a,dc,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,b8,\ - 00,00,00,48,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,43,72,36,ae,33,d7,cd,01,b8,\ - 00,00,00,48,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,43,72,36,ae,33,\ - d7,cd,01,b8,00,00,00,48,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,26,07,b2,dd,34,d7,cd,01,7c,\ + 07,00,00,68,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,e6,23,b8,dd,34,d7,cd,01,7c,\ + 07,00,00,68,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,e6,23,b8,dd,34,\ + d7,cd,01,7c,07,00,00,68,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,d1,d5,46,ae,33,d7,cd,01,b8,00,\ - 00,00,48,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,d1,d5,46,ae,33,d7,cd,01,b8,00,\ - 00,00,48,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,8f,a8,aa,ae,33,d7,cd,01,\ - b8,00,00,00,cc,02,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,b5,c3,e4,ae,33,d7,cd,01,\ - b8,00,00,00,cc,02,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,b5,\ - c3,e4,ae,33,d7,cd,01,b8,00,00,00,cc,02,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,56,74,e4,dd,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,86,fb,e5,dd,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,76,85,1e,de,34,d7,cd,01,\ + 7c,07,00,00,8c,0d,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,46,57,66,de,34,d7,cd,01,\ + 7c,07,00,00,8c,0d,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,46,\ + 57,66,de,34,d7,cd,01,7c,07,00,00,8c,0d,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,1b,8c,4e,af,33,d7,cd,01,b8,00,00,\ - 00,14,01,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,73,8f,5d,b0,33,d7,cd,01,b8,00,00,\ - 00,14,01,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,73,8f,\ - 5d,b0,33,d7,cd,01,b8,00,00,00,14,01,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,16,9c,c6,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,82,\ + f7,de,34,d7,cd,01,7c,07,00,00,b8,06,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,ff,3d,60,b0,33,d7,cd,\ - 01,b8,00,00,00,80,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,b8,00,00,00,80,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,8c,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,7c,07,00,00,\ + 8c,0d,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,\ + 01,7c,07,00,00,8c,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,7c,07,00,00,\ + 8c,0d,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,50,02,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,f6,13,5d,e0,34,d7,cd,01,7c,07,00,00,8c,0d,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,15,c4,59,b2,33,d7,cd,01,b8,\ - 00,00,00,50,02,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,5b,1b,5b,b2,33,d7,cd,01,b8,\ - 00,00,00,50,02,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,06,5d,4b,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,5b,1b,5b,b2,33,d7,cd,01,b8,00,00,00,50,02,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,36,e4,4c,e3,34,d7,cd,01,7c,07,00,00,b8,06,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ b8,00,00,00,14,01,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1192804,67 +1193072,67 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Shadow Copy Optimization Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,2f,16,ca,a1,33,d7,cd,01,b8,00,\ - 00,00,20,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,66,2d,3d,dc,34,d7,cd,01,7c,07,\ + 00,00,10,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,f1,c3,cd,a1,33,d7,cd,01,b8,00,\ - 00,00,20,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,96,b4,3e,dc,34,d7,cd,01,7c,07,\ + 00,00,10,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,b8,\ - 00,00,00,34,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,43,72,36,ae,33,d7,cd,01,b8,\ - 00,00,00,34,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,43,72,36,ae,33,\ - d7,cd,01,b8,00,00,00,34,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,66,ea,ab,dd,34,d7,cd,01,7c,\ + 07,00,00,68,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,26,07,b2,dd,34,d7,cd,01,7c,\ + 07,00,00,68,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,26,07,b2,dd,34,\ + d7,cd,01,7c,07,00,00,68,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,fd,da,43,ae,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,fd,da,43,ae,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,8f,a8,aa,ae,33,d7,cd,01,\ - b8,00,00,00,fc,02,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,f3,3b,e9,ae,33,d7,cd,01,\ - b8,00,00,00,fc,02,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,f3,\ - 3b,e9,ae,33,d7,cd,01,b8,00,00,00,fc,02,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,e6,09,e9,dd,34,d7,cd,01,7c,07,\ + 00,00,c4,0d,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,e6,09,e9,dd,34,d7,cd,01,7c,07,\ + 00,00,c4,0d,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,76,85,1e,de,34,d7,cd,01,\ + 7c,07,00,00,88,0d,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,16,d0,64,de,34,d7,cd,01,\ + 7c,07,00,00,88,0d,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,\ + d0,64,de,34,d7,cd,01,7c,07,00,00,88,0d,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,fd,8f,02,af,33,d7,cd,01,b8,00,00,\ - 00,14,01,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,fd,8f,02,af,33,d7,cd,01,b8,00,00,\ - 00,14,01,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,fd,8f,\ - 02,af,33,d7,cd,01,b8,00,00,00,14,01,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,06,5a,9d,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,06,5a,9d,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,06,5a,\ + 9d,de,34,d7,cd,01,7c,07,00,00,b8,06,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,fd,8f,02,af,33,d7,cd,\ - 01,b8,00,00,00,e0,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,b8,00,00,00,e0,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,06,5a,9d,de,34,d7,cd,\ + 01,7c,07,00,00,94,0d,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,\ + b8,06,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,\ + 01,7c,07,00,00,94,0d,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,\ + b8,06,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,50,02,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,b8,06,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,15,c4,59,b2,33,d7,cd,01,b8,\ - 00,00,00,14,01,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,0d,2a,e6,ca,33,d7,cd,01,b8,\ 00,00,00,14,01,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 @@ -1192880,43 +1193148,43 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\SwProvider_{b5946137-7b9f-4925-af80-51abd60b20d5}] -"PROVIDER_BEGINPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,b3,d9,fa,ad,33,d7,\ - cd,01,b8,00,00,00,48,0c,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_BEGINPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,c5,4c,02,ae,33,d7,\ - cd,01,b8,00,00,00,48,0c,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_ENDPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,33,34,5a,ae,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_ENDPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_PRECOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,73,8f,5d,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_PRECOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,ff,3d,60,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_COMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,c9,e6,d4,b0,33,d7,cd,01,\ - b8,00,00,00,bc,0c,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_COMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,\ - b8,00,00,00,bc,0c,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_POSTCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_POSTCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_PREFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,\ - d7,cd,01,b8,00,00,00,3c,02,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PROVIDER_BEGINPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,16,38,a1,dd,34,d7,\ + cd,01,7c,07,00,00,68,0c,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_BEGINPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,16,38,a1,dd,34,d7,\ + cd,01,7c,07,00,00,68,0c,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_ENDPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,36,bc,f3,dd,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_ENDPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,e6,ef,19,de,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_PRECOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_PRECOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_COMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,c6,33,12,e0,34,d7,cd,01,\ + 7c,07,00,00,98,0d,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_COMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,\ + 7c,07,00,00,98,0d,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_POSTCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_POSTCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_PREFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,\ + d7,cd,01,7c,07,00,00,5c,08,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"PROVIDER_PREFINALCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,fd,66,54,b2,33,\ - d7,cd,01,b8,00,00,00,3c,02,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PROVIDER_PREFINALCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,a6,4e,48,e3,34,\ + d7,cd,01,7c,07,00,00,5c,08,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 "PROVIDER_POSTFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,0d,2a,e6,ca,33,\ d7,cd,01,b8,00,00,00,3c,02,00,00,07,04,00,00,01,00,00,00,00,00,00,00,00,00,\ @@ -1192928,73 +1193196,73 @@ 00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\System Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,f1,c3,cd,a1,33,d7,cd,01,70,04,\ - 00,00,18,07,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,46,36,d2,db,34,d7,cd,01,70,04,\ + 00,00,90,07,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,60,c2,80,a7,33,d7,cd,01,70,04,\ - 00,00,18,07,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,16,7b,32,dc,34,d7,cd,01,70,04,\ + 00,00,90,07,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,70,\ - 04,00,00,90,07,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,81,ea,3a,ae,33,d7,cd,01,70,\ - 04,00,00,90,07,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,81,ea,3a,ae,33,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,76,b9,bc,dd,34,d7,cd,01,70,\ + 04,00,00,90,07,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,c6,de,df,dd,34,d7,cd,01,70,\ + 04,00,00,90,07,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,c6,de,df,dd,34,\ d7,cd,01,70,04,00,00,90,07,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,fd,da,43,ae,33,d7,cd,01,70,04,\ - 00,00,90,07,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,67,58,45,ae,33,d7,cd,01,70,04,\ - 00,00,90,07,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,0b,99,b3,ae,33,d7,cd,01,\ - 70,04,00,00,90,07,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,bf,17,fe,ae,33,d7,cd,01,\ - 70,04,00,00,90,07,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,bf,\ - 17,fe,ae,33,d7,cd,01,70,04,00,00,90,07,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,26,ed,e2,dd,34,d7,cd,01,70,04,\ + 00,00,90,07,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,26,ed,e2,dd,34,d7,cd,01,70,04,\ + 00,00,90,07,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,d6,93,21,de,34,d7,cd,01,\ + 70,04,00,00,90,07,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,e6,2e,94,de,34,d7,cd,01,\ + 70,04,00,00,90,07,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,e6,\ + 2e,94,de,34,d7,cd,01,70,04,00,00,90,07,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,70,04,00,\ - 00,90,07,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,70,04,00,\ - 00,90,07,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,47,91,\ - 4b,af,33,d7,cd,01,70,04,00,00,90,07,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,70,04,00,\ + 00,90,07,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,70,04,00,\ + 00,90,07,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,86,06,\ + c2,de,34,d7,cd,01,70,04,00,00,90,07,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,\ - 01,70,04,00,00,84,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,70,04,00,00,\ - 90,07,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,70,04,00,00,84,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,70,04,00,00,\ - 90,07,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,\ + 01,70,04,00,00,10,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,70,04,00,00,\ + 90,07,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,\ + 01,70,04,00,00,10,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,70,04,00,00,\ + 90,07,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,70,04,00,00,90,07,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,f6,13,5d,e0,34,d7,cd,01,70,04,00,00,90,07,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,a1,72,5c,b2,33,d7,cd,01,70,\ - 04,00,00,90,07,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,5d,db,69,b2,33,d7,cd,01,70,\ - 04,00,00,90,07,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,66,6b,4e,e3,34,d7,cd,01,70,\ + 04,00,00,90,07,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,46,b3,5d,e3,34,d7,cd,01,70,\ + 04,00,00,90,07,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,5d,db,69,b2,33,d7,cd,01,70,04,00,00,90,07,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,46,b3,5d,e3,34,d7,cd,01,70,04,00,00,90,07,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ 70,04,00,00,90,07,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1193021,15 +1193289,15 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}ComputeIgnorableProduct (Enter)"=hex:40,\ - 00,00,00,00,00,00,00,89,c6,2f,cc,33,d7,cd,01,00,00,00,00,00,00,00,00,0c,00,\ + 00,00,00,00,00,00,00,c6,d6,b1,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,0c,00,\ 00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}ComputeIgnorableProduct (Leave)"=hex:40,\ - 00,00,00,00,00,00,00,a0,38,31,cc,33,d7,cd,01,00,00,00,00,00,00,00,00,0d,00,\ + 00,00,00,00,00,00,00,46,10,be,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,0d,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}DeleteProcess (Enter)"=hex:40,00,\ - 00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,00,00,00,00,00,00,00,00,12,00,00,\ + 00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,00,00,00,00,00,00,00,00,12,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}Activate (Leave)"=hex:40,00,00,00,\ @@ -1193041,15 +1193309,15 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}SetIgnorable (Enter)"=hex:40,00,\ - 00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,00,00,00,00,00,00,00,00,0a,00,00,\ + 00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,00,00,00,00,00,00,00,00,0a,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}SetIgnorable (Leave)"=hex:40,00,\ - 00,00,00,00,00,00,cb,49,8f,b1,33,d7,cd,01,00,00,00,00,00,00,00,00,0b,00,00,\ + 00,00,00,00,00,00,56,a0,54,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,0b,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}AdjustBitmap (Enter)"=hex:40,00,\ - 00,00,00,00,00,00,1c,be,08,cc,33,d7,cd,01,00,00,00,00,00,00,00,00,04,00,00,\ + 00,00,00,00,00,00,56,a0,54,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,04,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}ValidateDiffAreaFiles (Enter)"=hex:40,\ @@ -1193067,122 +1193335,122 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}DeleteProcess (Leave)"=hex:40,00,\ - 00,00,00,00,00,00,e3,a6,94,b1,33,d7,cd,01,00,00,00,00,00,00,00,00,13,00,00,\ + 00,00,00,00,00,00,06,ba,ab,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,13,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}AdjustBitmap (Leave)"=hex:40,00,\ - 00,00,00,00,00,00,a0,38,31,cc,33,d7,cd,01,00,00,00,00,00,00,00,00,05,00,00,\ + 00,00,00,00,00,00,c6,d6,b1,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,05,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}PrepareForSnapshot (Enter)"=hex:40,\ - 00,00,00,00,00,00,00,ed,9c,67,ae,33,d7,cd,01,90,0b,00,00,88,0b,00,00,00,00,\ + 00,00,00,00,00,00,00,96,ca,f6,dd,34,d7,cd,01,a0,09,00,00,bc,08,00,00,00,00,\ 00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}PreExposure (Enter)"=hex:40,00,00,\ - 00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,01,90,0b,00,00,88,0b,00,00,02,00,00,00,\ + 00,00,00,00,00,e6,ef,19,de,34,d7,cd,01,a0,09,00,00,bc,08,00,00,02,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}PreExposure (Leave)"=hex:40,00,00,\ - 00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,01,90,0b,00,00,88,0b,00,00,03,00,00,00,\ + 00,00,00,00,00,e6,ef,19,de,34,d7,cd,01,a0,09,00,00,bc,08,00,00,03,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}PrepareForSnapshot (Leave)"=hex:40,\ - 00,00,00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,01,90,0b,00,00,88,0b,00,00,01,00,\ + 00,00,00,00,00,00,00,e6,ef,19,de,34,d7,cd,01,a0,09,00,00,bc,08,00,00,01,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}EndCommit (Enter)"=hex:40,00,00,\ - 00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,90,0b,00,00,88,0b,00,00,06,00,00,00,\ + 00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,a0,09,00,00,bc,08,00,00,06,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}EndCommit (Leave)"=hex:40,00,00,\ - 00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,90,0b,00,00,88,0b,00,00,07,00,00,00,\ + 00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,a0,09,00,00,bc,08,00,00,07,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\VssapiPublisher] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,c2,2c,b2,a1,33,d7,cd,01,80,03,\ - 00,00,54,0c,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,f6,11,84,a7,33,d7,cd,01,80,03,\ - 00,00,54,0c,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,c5,4c,02,ae,33,d7,cd,01,80,\ - 03,00,00,34,02,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,eb,67,3c,ae,33,d7,cd,01,80,\ - 03,00,00,34,02,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,eb,67,3c,ae,33,d7,cd,01,80,03,\ - 00,00,38,02,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,3b,53,48,ae,33,d7,cd,01,80,03,\ - 00,00,38,02,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"DOSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,5f,39,57,ae,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"DOSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,80,03,\ - 00,00,98,02,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,56,92,ca,db,34,d7,cd,01,40,06,\ + 00,00,0c,05,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,b6,df,47,dc,34,d7,cd,01,40,06,\ + 00,00,0c,05,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,16,38,a1,dd,34,d7,cd,01,40,\ + 06,00,00,10,0d,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,c6,de,df,dd,34,d7,cd,01,40,\ + 06,00,00,10,0d,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,f6,65,e1,dd,34,d7,cd,01,40,06,\ + 00,00,3c,04,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,46,18,ec,dd,34,d7,cd,01,40,06,\ + 00,00,3c,04,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"DOSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,36,bc,f3,dd,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"DOSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,40,06,\ + 00,00,c8,0d,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\VssvcPublisher] -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,01,\ - b8,00,00,00,3c,02,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,29,95,ff,ae,33,d7,cd,01,\ - b8,00,00,00,3c,02,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,29,95,ff,ae,33,d7,cd,01,b8,00,00,\ - 00,3c,02,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_FRONT (Enter)"=hex:40,00,00,00,00,00,00,00,29,95,ff,ae,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_FRONT (Leave)"=hex:40,00,00,00,00,00,00,00,83,d4,24,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_BACK (Enter)"=hex:40,00,00,00,00,00,00,00,83,d4,24,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_BACK (Leave)"=hex:40,00,00,00,00,00,00,00,57,cf,27,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_SYSTEM (Enter)"=hex:40,00,00,00,00,00,00,00,57,cf,27,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_SYSTEM (Leave)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_RM (Enter)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_RM (Leave)"=hex:40,00,00,00,00,00,00,00,73,8f,5d,b0,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,73,8f,5d,b0,33,d7,cd,01,b8,00,00,\ - 00,3c,02,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,b8,00,00,00,\ - 3c,02,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,d7,cd,01,b8,00,00,00,\ - 3c,02,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,43,be,55,b2,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,16,77,1b,de,34,d7,cd,01,\ + 7c,07,00,00,5c,08,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,46,3d,97,de,34,d7,cd,01,\ + 7c,07,00,00,5c,08,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,46,3d,97,de,34,d7,cd,01,7c,07,00,\ + 00,5c,08,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_FRONT (Enter)"=hex:40,00,00,00,00,00,00,00,46,3d,97,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_FRONT (Leave)"=hex:40,00,00,00,00,00,00,00,36,e1,9e,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_BACK (Enter)"=hex:40,00,00,00,00,00,00,00,36,e1,9e,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_BACK (Leave)"=hex:40,00,00,00,00,00,00,00,f6,fd,a4,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_SYSTEM (Enter)"=hex:40,00,00,00,00,00,00,00,f6,fd,a4,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_SYSTEM (Leave)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_RM (Enter)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_RM (Leave)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,01,7c,07,00,\ + 00,5c,08,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,7c,07,00,00,\ + 5c,08,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,7c,07,00,00,\ + 5c,08,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,a6,4e,48,e3,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,0d,2a,e6,ca,33,d7,cd,01,b8,\ 00,00,00,3c,02,00,00,f5,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 @@ -1193194,73 +1193462,73 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\WMI Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,6d,68,c6,a1,33,d7,cd,01,80,03,\ - 00,00,f4,08,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,96,b4,3e,dc,34,d7,cd,01,80,03,\ + 00,00,d8,0a,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,4e,3f,c8,a1,33,d7,cd,01,80,03,\ - 00,00,f4,08,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,c6,3b,40,dc,34,d7,cd,01,80,03,\ + 00,00,d8,0a,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,7f,b5,0f,ae,33,d7,cd,01,80,\ - 03,00,00,f4,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,eb,67,3c,ae,33,d7,cd,01,80,\ - 03,00,00,f4,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,eb,67,3c,ae,33,\ - d7,cd,01,80,03,00,00,f4,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,e6,23,b8,dd,34,d7,cd,01,80,\ + 03,00,00,d8,0a,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,16,ab,b9,dd,34,d7,cd,01,80,\ + 03,00,00,d8,0a,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,ab,b9,dd,34,\ + d7,cd,01,80,03,00,00,d8,0a,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,93,5d,42,ae,33,d7,cd,01,80,03,\ - 00,00,70,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,fd,da,43,ae,33,d7,cd,01,80,03,\ - 00,00,70,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,0b,99,b3,ae,33,d7,cd,01,\ - 80,03,00,00,90,03,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,5d,b9,ea,ae,33,d7,cd,01,\ - 80,03,00,00,90,03,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,5d,\ - b9,ea,ae,33,d7,cd,01,80,03,00,00,90,03,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,56,74,e4,dd,34,d7,cd,01,80,03,\ + 00,00,d8,0a,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,86,fb,e5,dd,34,d7,cd,01,80,03,\ + 00,00,d8,0a,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,06,1b,23,de,34,d7,cd,01,\ + 80,03,00,00,d8,0a,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,46,3d,97,de,34,d7,cd,01,\ + 80,03,00,00,d8,0a,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,46,\ + 3d,97,de,34,d7,cd,01,80,03,00,00,d8,0a,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,fd,8f,02,af,33,d7,cd,01,80,03,00,\ - 00,6c,0c,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,83,d4,24,af,33,d7,cd,01,80,03,00,\ - 00,6c,0c,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,83,d4,\ - 24,af,33,d7,cd,01,80,03,00,00,6c,0c,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,06,5a,9d,de,34,d7,cd,01,80,03,00,\ + 00,5c,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,36,e1,9e,de,34,d7,cd,01,80,03,00,\ + 00,5c,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,36,e1,\ + 9e,de,34,d7,cd,01,80,03,00,00,5c,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,83,d4,24,af,33,d7,cd,\ - 01,80,03,00,00,88,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,d7,cd,01,80,03,00,00,\ - 90,03,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,d7,cd,\ - 01,80,03,00,00,88,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,d7,cd,01,80,03,00,00,\ - 90,03,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,36,e1,9e,de,34,d7,cd,\ + 01,80,03,00,00,5c,0d,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,80,03,00,00,\ + d8,0a,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,\ + 01,80,03,00,00,5c,0d,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,80,03,00,00,\ + d8,0a,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,9f,6c,f6,b0,33,d7,cd,01,80,03,00,00,90,03,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,f6,13,5d,e0,34,d7,cd,01,80,03,00,00,d8,0a,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,5b,1b,5b,b2,33,d7,cd,01,80,\ - 03,00,00,90,03,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,a1,72,5c,b2,33,d7,cd,01,80,\ - 03,00,00,90,03,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,66,6b,4e,e3,34,d7,cd,01,80,\ + 03,00,00,d8,0a,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,66,6b,4e,e3,34,d7,cd,01,80,\ + 03,00,00,d8,0a,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,a1,72,5c,b2,33,d7,cd,01,80,03,00,00,90,03,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,66,6b,4e,e3,34,d7,cd,01,80,03,00,00,d8,0a,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ 80,03,00,00,6c,0c,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1327801,6 +1328069,8 @@ [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\STORAGE\VolumeSnapshot\HarddiskVolumeSnapshot3\LogConf] +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\STORAGE\VolumeSnapshot\HarddiskVolumeSnapshot3\Control] + [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\STORAGE\VolumeSnapshot\HarddiskVolumeSnapshot4] "Capabilities"=dword:000000f0 "ConfigFlags"=dword:00000000 @@ -1350911,13 +1351181,13 @@ "AddressType"=dword:00000000 "IsServerNapAware"=dword:00000000 "DhcpConnForceBroadcastFlag"=dword:00000000 -"DhcpInterfaceOptions"=hex:36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,\ - cb,c7,50,0a,00,02,02,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,cb,\ - c7,50,00,01,51,80,06,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,cb,c7,\ - 50,0a,00,02,03,03,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,cb,c7,50,\ - 0a,00,02,02,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,19,cb,c7,50,ff,\ - ff,ff,00,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,19,cb,c7,50,05,00,\ - 00,00,fc,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,8a,79,c6,50 +"DhcpInterfaceOptions"=hex:36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,\ + cc,c7,50,0a,00,02,02,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,cc,\ + c7,50,00,01,51,80,06,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,cc,c7,\ + 50,0a,00,02,03,03,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,cc,c7,50,\ + 0a,00,02,02,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,ee,cc,c7,50,ff,\ + ff,ff,00,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,ee,cc,c7,50,05,00,\ + 00,00,fc,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,d5,79,c6,50 "DhcpGatewayHardware"=hex:0a,00,02,02,06,00,00,00,52,54,00,12,35,02 "DhcpGatewayHardwareCount"=dword:00000001 "DhcpNameServer"="10.0.2.3" @@ -1352356,115 +1352626,115 @@ "SppEnumGroups (Leave)"=hex:40,00,00,00,00,00,00,00,3b,59,da,62,55,d2,cd,01,fc,\ 0b,00,00,58,0d,00,00,d1,07,00,00,01,00,00,00,00,00,00,00,01,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"SppCreate (Enter)"=hex:40,00,00,00,00,00,00,00,8e,16,67,a0,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppCreate (Enter)"=hex:40,00,00,00,00,00,00,00,e6,41,9e,db,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"SppGatherWriterMetadata (Enter)"=hex:40,00,00,00,00,00,00,00,7c,23,a7,a1,33,\ - d7,cd,01,80,03,00,00,a8,0b,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppGatherWriterMetadata (Enter)"=hex:40,00,00,00,00,00,00,00,26,0b,c9,db,34,\ + d7,cd,01,40,06,00,00,dc,0d,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00 -"SppGatherWriterMetadata (Leave)"=hex:40,00,00,00,00,00,00,00,b9,c3,bd,ad,33,\ - d7,cd,01,80,03,00,00,a8,0b,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\ +"SppGatherWriterMetadata (Leave)"=hex:40,00,00,00,00,00,00,00,d6,fb,5d,dd,34,\ + d7,cd,01,40,06,00,00,dc,0d,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00 -"SppAddInterestingComponents (Enter)"=hex:40,00,00,00,00,00,00,00,b9,c3,bd,ad,\ - 33,d7,cd,01,80,03,00,00,a8,0b,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\ +"SppAddInterestingComponents (Enter)"=hex:40,00,00,00,00,00,00,00,06,83,5f,dd,\ + 34,d7,cd,01,40,06,00,00,dc,0d,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"SppAddInterestingComponents (Leave)"=hex:40,00,00,00,00,00,00,00,1b,22,d1,ad,\ - 33,d7,cd,01,80,03,00,00,a8,0b,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\ +"SppAddInterestingComponents (Leave)"=hex:40,00,00,00,00,00,00,00,86,2f,84,dd,\ + 34,d7,cd,01,40,06,00,00,dc,0d,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"SppCreate (Leave)"=hex:40,00,00,00,00,00,00,00,fb,60,ee,b0,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppCreate (Leave)"=hex:40,00,00,00,00,00,00,00,66,7e,58,e0,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SystemRestore] -"SrCreateRp (Enter)"=hex:40,00,00,00,00,00,00,00,8e,16,67,a0,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SrCreateRp (Enter)"=hex:40,00,00,00,00,00,00,00,e6,41,9e,db,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"SrCreateRp (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SrCreateRp (Leave)"=hex:40,00,00,00,00,00,00,00,66,7e,58,e0,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\ASR Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,2f,16,ca,a1,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,36,a6,3b,dc,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,09,e9,f9,a1,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,b6,df,47,dc,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\BITS Writer] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\COM+ REGDB Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,18,a4,da,a1,33,d7,cd,01,b8,00,\ - 00,00,34,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,d6,97,38,dc,34,d7,cd,01,7c,07,\ + 00,00,10,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,f9,7a,dc,a1,33,d7,cd,01,b8,00,\ - 00,00,34,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,36,a6,3b,dc,34,d7,cd,01,7c,07,\ + 00,00,10,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,b8,\ - 00,00,00,1c,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,ad,ef,37,ae,33,d7,cd,01,b8,\ - 00,00,00,1c,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,ad,ef,37,ae,33,\ - d7,cd,01,b8,00,00,00,1c,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,26,07,b2,dd,34,d7,cd,01,7c,\ + 07,00,00,c4,0d,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,b6,9c,b6,dd,34,d7,cd,01,7c,\ + 07,00,00,c4,0d,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,b6,9c,b6,dd,34,\ + d7,cd,01,7c,07,00,00,c4,0d,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,3b,53,48,ae,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,3b,53,48,ae,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,8f,a8,aa,ae,33,d7,cd,01,\ - b8,00,00,00,c4,01,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,1f,41,e6,ae,33,d7,cd,01,\ - b8,00,00,00,c4,01,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,1f,\ - 41,e6,ae,33,d7,cd,01,b8,00,00,00,c4,01,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,16,91,ea,dd,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,16,91,ea,dd,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,76,85,1e,de,34,d7,cd,01,\ + 7c,07,00,00,84,0d,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,16,d0,64,de,34,d7,cd,01,\ + 7c,07,00,00,84,0d,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,\ + d0,64,de,34,d7,cd,01,7c,07,00,00,84,0d,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,b8,00,00,\ - 00,10,02,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,b8,00,00,\ - 00,10,02,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,d3,bf,\ - 30,af,33,d7,cd,01,b8,00,00,00,10,02,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,56,0c,\ + a8,de,34,d7,cd,01,7c,07,00,00,b8,06,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,\ - 01,b8,00,00,00,8c,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,b8,00,00,00,8c,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,\ + 01,7c,07,00,00,d0,03,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,\ + ec,04,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,\ + 01,7c,07,00,00,d0,03,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,\ + ec,04,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,50,02,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,ec,04,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,15,c4,59,b2,33,d7,cd,01,b8,\ - 00,00,00,50,02,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,15,c4,59,b2,33,d7,cd,01,b8,\ - 00,00,00,50,02,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,15,c4,59,b2,33,d7,cd,01,b8,00,00,00,50,02,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,36,e4,4c,e3,34,d7,cd,01,7c,07,00,00,b8,06,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ b8,00,00,00,50,02,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1352474,113 +1352744,113 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Lovelace] -"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,ff,3d,60,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,1f,9b,a0,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,1f,9b,a0,b0,33,d7,\ - cd,01,b8,00,00,00,3c,02,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,c9,e6,d4,b0,33,d7,\ - cd,01,b8,00,00,00,3c,02,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,e6,1f,a1,df,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,e6,1f,a1,df,34,d7,\ + cd,01,7c,07,00,00,5c,08,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,c6,33,12,e0,34,d7,\ + cd,01,7c,07,00,00,5c,08,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Lovelace(__?_Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}_)] -"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,ff,3d,60,b0,33,d7,cd,\ - 01,b8,00,00,00,e4,0c,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,1f,9b,a0,b0,33,d7,cd,\ - 01,b8,00,00,00,e4,0c,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,1f,9b,a0,b0,33,d7,\ - cd,01,b8,00,00,00,e4,0c,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,c9,e6,d4,b0,33,d7,\ - cd,01,b8,00,00,00,e4,0c,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,b8,\ - 00,00,00,e4,0c,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,b8,\ - 00,00,00,e4,0c,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"OPEN_VOLUME_HANDLE (Enter)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,fc,0c,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"OPEN_VOLUME_HANDLE (Leave)"=hex:40,00,00,00,00,00,00,00,e6,1f,a1,df,34,d7,cd,\ + 01,7c,07,00,00,fc,0c,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:40,00,00,00,00,00,00,00,e6,1f,a1,df,34,d7,\ + cd,01,7c,07,00,00,fc,0c,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:40,00,00,00,00,00,00,00,c6,33,12,e0,34,d7,\ + cd,01,7c,07,00,00,fc,0c,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_RELEASE (Enter)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,7c,\ + 07,00,00,fc,0c,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IOCTL_RELEASE (Leave)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,7c,\ + 07,00,00,fc,0c,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\MSSearch Service Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,94,48,d3,a1,33,d7,cd,01,f8,03,\ - 00,00,c8,0b,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,c6,3b,40,dc,34,d7,cd,01,f8,03,\ + 00,00,f4,0e,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,bb,28,e0,a1,33,d7,cd,01,f8,03,\ - 00,00,c8,0b,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,f6,c2,41,dc,34,d7,cd,01,f8,03,\ + 00,00,f4,0e,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,f8,\ - 03,00,00,c8,0b,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,ad,ef,37,ae,33,d7,cd,01,f8,\ - 03,00,00,c8,0b,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,ad,ef,37,ae,33,\ - d7,cd,01,f8,03,00,00,c8,0b,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,16,ab,b9,dd,34,d7,cd,01,f8,\ + 03,00,00,f4,0e,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,76,b9,bc,dd,34,d7,cd,01,f8,\ + 03,00,00,f4,0e,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,76,b9,bc,dd,34,\ + d7,cd,01,f8,03,00,00,f4,0e,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,67,58,45,ae,33,d7,cd,01,f8,03,\ - 00,00,c8,0b,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,d1,d5,46,ae,33,d7,cd,01,f8,03,\ - 00,00,c8,0b,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,0b,99,b3,ae,33,d7,cd,01,\ - f8,03,00,00,c8,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,5d,b9,ea,ae,33,d7,cd,01,\ - f8,03,00,00,c8,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,5d,\ - b9,ea,ae,33,d7,cd,01,f8,03,00,00,c8,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,86,fb,e5,dd,34,d7,cd,01,f8,03,\ + 00,00,f4,0e,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,b6,82,e7,dd,34,d7,cd,01,f8,03,\ + 00,00,f4,0e,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,d6,93,21,de,34,d7,cd,01,\ + f8,03,00,00,f4,0e,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,16,b6,95,de,34,d7,cd,01,\ + f8,03,00,00,f4,0e,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,\ + b6,95,de,34,d7,cd,01,f8,03,00,00,f4,0e,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,f8,03,00,\ - 00,c8,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,f8,03,00,\ - 00,c8,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,d3,bf,\ - 30,af,33,d7,cd,01,f8,03,00,00,c8,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,f8,03,00,\ + 00,f4,0e,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,f8,03,00,\ + 00,f4,0e,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,56,0c,\ + a8,de,34,d7,cd,01,f8,03,00,00,f4,0e,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,\ - 01,f8,03,00,00,90,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,f8,03,00,00,\ - c8,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,f8,03,00,00,90,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,f8,03,00,00,\ - c8,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,\ + 01,f8,03,00,00,54,0e,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,f8,03,00,00,\ + f4,0e,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,\ + 01,f8,03,00,00,54,0e,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,f8,03,00,00,\ + f4,0e,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,f8,03,00,00,c8,0b,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,f6,13,5d,e0,34,d7,cd,01,f8,03,00,00,f4,0e,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,5b,1b,5b,b2,33,d7,cd,01,f8,\ - 03,00,00,c8,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,1f,72,2b,b5,33,d7,cd,01,f8,\ - 03,00,00,c8,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,f8,\ + 03,00,00,f4,0e,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,96,95,ef,e4,34,d7,cd,01,f8,\ + 03,00,00,f4,0e,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,1f,72,2b,b5,33,d7,cd,01,f8,03,00,00,c8,0b,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,96,95,ef,e4,34,d7,cd,01,f8,03,00,00,f4,0e,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ f8,03,00,00,c8,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1352590,73 +1352860,73 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Registry Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,f1,c3,cd,a1,33,d7,cd,01,b8,00,\ - 00,00,48,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,d6,97,38,dc,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,ea,bf,fb,a1,33,d7,cd,01,b8,00,\ - 00,00,48,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,06,1f,3a,dc,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,b8,\ - 00,00,00,48,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,43,72,36,ae,33,d7,cd,01,b8,\ - 00,00,00,48,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,43,72,36,ae,33,\ - d7,cd,01,b8,00,00,00,48,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,26,07,b2,dd,34,d7,cd,01,7c,\ + 07,00,00,68,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,e6,23,b8,dd,34,d7,cd,01,7c,\ + 07,00,00,68,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,e6,23,b8,dd,34,\ + d7,cd,01,7c,07,00,00,68,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,d1,d5,46,ae,33,d7,cd,01,b8,00,\ - 00,00,48,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,d1,d5,46,ae,33,d7,cd,01,b8,00,\ - 00,00,48,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,8f,a8,aa,ae,33,d7,cd,01,\ - b8,00,00,00,cc,02,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,b5,c3,e4,ae,33,d7,cd,01,\ - b8,00,00,00,cc,02,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,b5,\ - c3,e4,ae,33,d7,cd,01,b8,00,00,00,cc,02,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,56,74,e4,dd,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,86,fb,e5,dd,34,d7,cd,01,7c,07,\ + 00,00,68,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,76,85,1e,de,34,d7,cd,01,\ + 7c,07,00,00,8c,0d,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,46,57,66,de,34,d7,cd,01,\ + 7c,07,00,00,8c,0d,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,46,\ + 57,66,de,34,d7,cd,01,7c,07,00,00,8c,0d,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,1b,8c,4e,af,33,d7,cd,01,b8,00,00,\ - 00,14,01,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,73,8f,5d,b0,33,d7,cd,01,b8,00,00,\ - 00,14,01,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,73,8f,\ - 5d,b0,33,d7,cd,01,b8,00,00,00,14,01,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,16,9c,c6,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,82,\ + f7,de,34,d7,cd,01,7c,07,00,00,b8,06,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,ff,3d,60,b0,33,d7,cd,\ - 01,b8,00,00,00,80,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,b8,00,00,00,80,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,8c,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,7c,07,00,00,\ + 8c,0d,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,\ + 01,7c,07,00,00,8c,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,7c,07,00,00,\ + 8c,0d,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,50,02,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,f6,13,5d,e0,34,d7,cd,01,7c,07,00,00,8c,0d,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,15,c4,59,b2,33,d7,cd,01,b8,\ - 00,00,00,50,02,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,5b,1b,5b,b2,33,d7,cd,01,b8,\ - 00,00,00,50,02,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,06,5d,4b,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,5b,1b,5b,b2,33,d7,cd,01,b8,00,00,00,50,02,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,36,e4,4c,e3,34,d7,cd,01,7c,07,00,00,b8,06,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ b8,00,00,00,14,01,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1352666,67 +1352936,67 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Shadow Copy Optimization Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,2f,16,ca,a1,33,d7,cd,01,b8,00,\ - 00,00,20,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,66,2d,3d,dc,34,d7,cd,01,7c,07,\ + 00,00,10,0c,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,f1,c3,cd,a1,33,d7,cd,01,b8,00,\ - 00,00,20,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,96,b4,3e,dc,34,d7,cd,01,7c,07,\ + 00,00,10,0c,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,b8,\ - 00,00,00,34,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,43,72,36,ae,33,d7,cd,01,b8,\ - 00,00,00,34,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,43,72,36,ae,33,\ - d7,cd,01,b8,00,00,00,34,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,66,ea,ab,dd,34,d7,cd,01,7c,\ + 07,00,00,68,0c,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,26,07,b2,dd,34,d7,cd,01,7c,\ + 07,00,00,68,0c,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,26,07,b2,dd,34,\ + d7,cd,01,7c,07,00,00,68,0c,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,fd,da,43,ae,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,fd,da,43,ae,33,d7,cd,01,b8,00,\ - 00,00,1c,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,8f,a8,aa,ae,33,d7,cd,01,\ - b8,00,00,00,fc,02,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,f3,3b,e9,ae,33,d7,cd,01,\ - b8,00,00,00,fc,02,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,f3,\ - 3b,e9,ae,33,d7,cd,01,b8,00,00,00,fc,02,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,e6,09,e9,dd,34,d7,cd,01,7c,07,\ + 00,00,c4,0d,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,e6,09,e9,dd,34,d7,cd,01,7c,07,\ + 00,00,c4,0d,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,76,85,1e,de,34,d7,cd,01,\ + 7c,07,00,00,88,0d,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,16,d0,64,de,34,d7,cd,01,\ + 7c,07,00,00,88,0d,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,\ + d0,64,de,34,d7,cd,01,7c,07,00,00,88,0d,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,fd,8f,02,af,33,d7,cd,01,b8,00,00,\ - 00,14,01,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,fd,8f,02,af,33,d7,cd,01,b8,00,00,\ - 00,14,01,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,fd,8f,\ - 02,af,33,d7,cd,01,b8,00,00,00,14,01,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,06,5a,9d,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,06,5a,9d,de,34,d7,cd,01,7c,07,00,\ + 00,b8,06,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,06,5a,\ + 9d,de,34,d7,cd,01,7c,07,00,00,b8,06,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,fd,8f,02,af,33,d7,cd,\ - 01,b8,00,00,00,e0,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,b8,00,00,00,e0,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,\ - 50,02,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,06,5a,9d,de,34,d7,cd,\ + 01,7c,07,00,00,94,0d,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,\ + b8,06,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,\ + 01,7c,07,00,00,94,0d,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,\ + b8,06,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,b8,00,00,00,50,02,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,c6,8c,5b,e0,34,d7,cd,01,7c,07,00,00,b8,06,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,15,c4,59,b2,33,d7,cd,01,b8,\ - 00,00,00,14,01,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,36,e4,4c,e3,34,d7,cd,01,7c,\ + 07,00,00,b8,06,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,0d,2a,e6,ca,33,d7,cd,01,b8,\ 00,00,00,14,01,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 @@ -1352742,43 +1353012,43 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SwProvider_{b5946137-7b9f-4925-af80-51abd60b20d5}] -"PROVIDER_BEGINPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,b3,d9,fa,ad,33,d7,\ - cd,01,b8,00,00,00,48,0c,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_BEGINPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,c5,4c,02,ae,33,d7,\ - cd,01,b8,00,00,00,48,0c,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_ENDPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,33,34,5a,ae,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_ENDPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_PRECOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,73,8f,5d,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_PRECOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,ff,3d,60,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_COMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,c9,e6,d4,b0,33,d7,cd,01,\ - b8,00,00,00,bc,0c,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_COMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,\ - b8,00,00,00,bc,0c,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_POSTCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_POSTCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,\ - 01,b8,00,00,00,3c,02,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PROVIDER_PREFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,\ - d7,cd,01,b8,00,00,00,3c,02,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PROVIDER_BEGINPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,16,38,a1,dd,34,d7,\ + cd,01,7c,07,00,00,68,0c,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_BEGINPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,16,38,a1,dd,34,d7,\ + cd,01,7c,07,00,00,68,0c,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_ENDPREPARE (Enter)"=hex:40,00,00,00,00,00,00,00,36,bc,f3,dd,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_ENDPREPARE (Leave)"=hex:40,00,00,00,00,00,00,00,e6,ef,19,de,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_PRECOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_PRECOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_COMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,c6,33,12,e0,34,d7,cd,01,\ + 7c,07,00,00,98,0d,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_COMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,\ + 7c,07,00,00,98,0d,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_POSTCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,f6,ba,13,e0,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_POSTCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,\ + 01,7c,07,00,00,5c,08,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PROVIDER_PREFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,\ + d7,cd,01,7c,07,00,00,5c,08,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"PROVIDER_PREFINALCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,fd,66,54,b2,33,\ - d7,cd,01,b8,00,00,00,3c,02,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PROVIDER_PREFINALCOMMIT (Leave)"=hex:40,00,00,00,00,00,00,00,a6,4e,48,e3,34,\ + d7,cd,01,7c,07,00,00,5c,08,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 "PROVIDER_POSTFINALCOMMIT (Enter)"=hex:40,00,00,00,00,00,00,00,0d,2a,e6,ca,33,\ d7,cd,01,b8,00,00,00,3c,02,00,00,07,04,00,00,01,00,00,00,00,00,00,00,00,00,\ @@ -1352790,73 +1353060,73 @@ 00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\System Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,f1,c3,cd,a1,33,d7,cd,01,70,04,\ - 00,00,18,07,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,46,36,d2,db,34,d7,cd,01,70,04,\ + 00,00,90,07,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,60,c2,80,a7,33,d7,cd,01,70,04,\ - 00,00,18,07,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,16,7b,32,dc,34,d7,cd,01,70,04,\ + 00,00,90,07,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,27,ab,15,ae,33,d7,cd,01,70,\ - 04,00,00,90,07,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,81,ea,3a,ae,33,d7,cd,01,70,\ - 04,00,00,90,07,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,81,ea,3a,ae,33,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,76,b9,bc,dd,34,d7,cd,01,70,\ + 04,00,00,90,07,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,c6,de,df,dd,34,d7,cd,01,70,\ + 04,00,00,90,07,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,c6,de,df,dd,34,\ d7,cd,01,70,04,00,00,90,07,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,fd,da,43,ae,33,d7,cd,01,70,04,\ - 00,00,90,07,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,67,58,45,ae,33,d7,cd,01,70,04,\ - 00,00,90,07,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,0b,99,b3,ae,33,d7,cd,01,\ - 70,04,00,00,90,07,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,bf,17,fe,ae,33,d7,cd,01,\ - 70,04,00,00,90,07,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,bf,\ - 17,fe,ae,33,d7,cd,01,70,04,00,00,90,07,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,26,ed,e2,dd,34,d7,cd,01,70,04,\ + 00,00,90,07,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,26,ed,e2,dd,34,d7,cd,01,70,04,\ + 00,00,90,07,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,d6,93,21,de,34,d7,cd,01,\ + 70,04,00,00,90,07,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,e6,2e,94,de,34,d7,cd,01,\ + 70,04,00,00,90,07,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,e6,\ + 2e,94,de,34,d7,cd,01,70,04,00,00,90,07,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,d3,bf,30,af,33,d7,cd,01,70,04,00,\ - 00,90,07,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,70,04,00,\ - 00,90,07,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,47,91,\ - 4b,af,33,d7,cd,01,70,04,00,00,90,07,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,56,0c,a8,de,34,d7,cd,01,70,04,00,\ + 00,90,07,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,70,04,00,\ + 00,90,07,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,86,06,\ + c2,de,34,d7,cd,01,70,04,00,00,90,07,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,\ - 01,70,04,00,00,84,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,70,04,00,00,\ - 90,07,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,\ - 01,70,04,00,00,84,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,13,be,f3,b0,33,d7,cd,01,70,04,00,00,\ - 90,07,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,\ + 01,70,04,00,00,10,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,70,04,00,00,\ + 90,07,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,\ + 01,70,04,00,00,10,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,70,04,00,00,\ + 90,07,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,13,be,f3,b0,33,d7,cd,01,70,04,00,00,90,07,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,f6,13,5d,e0,34,d7,cd,01,70,04,00,00,90,07,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,a1,72,5c,b2,33,d7,cd,01,70,\ - 04,00,00,90,07,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,5d,db,69,b2,33,d7,cd,01,70,\ - 04,00,00,90,07,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,66,6b,4e,e3,34,d7,cd,01,70,\ + 04,00,00,90,07,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,46,b3,5d,e3,34,d7,cd,01,70,\ + 04,00,00,90,07,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,5d,db,69,b2,33,d7,cd,01,70,04,00,00,90,07,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,46,b3,5d,e3,34,d7,cd,01,70,04,00,00,90,07,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ 70,04,00,00,90,07,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1352883,15 +1353153,15 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}ComputeIgnorableProduct (Enter)"=hex:40,\ - 00,00,00,00,00,00,00,89,c6,2f,cc,33,d7,cd,01,00,00,00,00,00,00,00,00,0c,00,\ + 00,00,00,00,00,00,00,c6,d6,b1,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,0c,00,\ 00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}ComputeIgnorableProduct (Leave)"=hex:40,\ - 00,00,00,00,00,00,00,a0,38,31,cc,33,d7,cd,01,00,00,00,00,00,00,00,00,0d,00,\ + 00,00,00,00,00,00,00,46,10,be,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,0d,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}DeleteProcess (Enter)"=hex:40,00,\ - 00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,00,00,00,00,00,00,00,00,12,00,00,\ + 00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,00,00,00,00,00,00,00,00,12,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}Activate (Leave)"=hex:40,00,00,00,\ @@ -1352903,15 +1353173,15 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}SetIgnorable (Enter)"=hex:40,00,\ - 00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,00,00,00,00,00,00,00,00,0a,00,00,\ + 00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,00,00,00,00,00,00,00,00,0a,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}SetIgnorable (Leave)"=hex:40,00,\ - 00,00,00,00,00,00,cb,49,8f,b1,33,d7,cd,01,00,00,00,00,00,00,00,00,0b,00,00,\ + 00,00,00,00,00,00,56,a0,54,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,0b,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}AdjustBitmap (Enter)"=hex:40,00,\ - 00,00,00,00,00,00,1c,be,08,cc,33,d7,cd,01,00,00,00,00,00,00,00,00,04,00,00,\ + 00,00,00,00,00,00,56,a0,54,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,04,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}ValidateDiffAreaFiles (Enter)"=hex:40,\ @@ -1352929,122 +1353199,122 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}DeleteProcess (Leave)"=hex:40,00,\ - 00,00,00,00,00,00,e3,a6,94,b1,33,d7,cd,01,00,00,00,00,00,00,00,00,13,00,00,\ + 00,00,00,00,00,00,06,ba,ab,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,13,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}AdjustBitmap (Leave)"=hex:40,00,\ - 00,00,00,00,00,00,a0,38,31,cc,33,d7,cd,01,00,00,00,00,00,00,00,00,05,00,00,\ + 00,00,00,00,00,00,c6,d6,b1,e1,34,d7,cd,01,00,00,00,00,00,00,00,00,05,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}PrepareForSnapshot (Enter)"=hex:40,\ - 00,00,00,00,00,00,00,ed,9c,67,ae,33,d7,cd,01,90,0b,00,00,88,0b,00,00,00,00,\ + 00,00,00,00,00,00,00,96,ca,f6,dd,34,d7,cd,01,a0,09,00,00,bc,08,00,00,00,00,\ 00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}PreExposure (Enter)"=hex:40,00,00,\ - 00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,01,90,0b,00,00,88,0b,00,00,02,00,00,00,\ + 00,00,00,00,00,e6,ef,19,de,34,d7,cd,01,a0,09,00,00,bc,08,00,00,02,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}PreExposure (Leave)"=hex:40,00,00,\ - 00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,01,90,0b,00,00,88,0b,00,00,03,00,00,00,\ + 00,00,00,00,00,e6,ef,19,de,34,d7,cd,01,a0,09,00,00,bc,08,00,00,03,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}PrepareForSnapshot (Leave)"=hex:40,\ - 00,00,00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,01,90,0b,00,00,88,0b,00,00,01,00,\ + 00,00,00,00,00,00,00,e6,ef,19,de,34,d7,cd,01,a0,09,00,00,bc,08,00,00,01,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}EndCommit (Enter)"=hex:40,00,00,\ - 00,00,00,00,00,0f,3e,d6,b0,33,d7,cd,01,90,0b,00,00,88,0b,00,00,06,00,00,00,\ + 00,00,00,00,00,f6,ba,13,e0,34,d7,cd,01,a0,09,00,00,bc,08,00,00,06,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00 "Volume{6d88a6f5-3e24-11e2-a826-806e6f6e6963}EndCommit (Leave)"=hex:40,00,00,\ - 00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,90,0b,00,00,88,0b,00,00,07,00,00,00,\ + 00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,a0,09,00,00,bc,08,00,00,07,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VssapiPublisher] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,c2,2c,b2,a1,33,d7,cd,01,80,03,\ - 00,00,54,0c,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,f6,11,84,a7,33,d7,cd,01,80,03,\ - 00,00,54,0c,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,c5,4c,02,ae,33,d7,cd,01,80,\ - 03,00,00,34,02,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,eb,67,3c,ae,33,d7,cd,01,80,\ - 03,00,00,34,02,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,eb,67,3c,ae,33,d7,cd,01,80,03,\ - 00,00,38,02,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,3b,53,48,ae,33,d7,cd,01,80,03,\ - 00,00,38,02,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"DOSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,5f,39,57,ae,33,d7,cd,01,80,03,\ - 00,00,a8,0b,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"DOSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,80,03,\ - 00,00,98,02,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,56,92,ca,db,34,d7,cd,01,40,06,\ + 00,00,0c,05,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,b6,df,47,dc,34,d7,cd,01,40,06,\ + 00,00,0c,05,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,16,38,a1,dd,34,d7,cd,01,40,\ + 06,00,00,10,0d,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,c6,de,df,dd,34,d7,cd,01,40,\ + 06,00,00,10,0d,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,f6,65,e1,dd,34,d7,cd,01,40,06,\ + 00,00,3c,04,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,46,18,ec,dd,34,d7,cd,01,40,06,\ + 00,00,3c,04,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"DOSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,36,bc,f3,dd,34,d7,cd,01,40,06,\ + 00,00,dc,0d,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"DOSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,40,06,\ + 00,00,c8,0d,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VssvcPublisher] -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,e7,b2,a4,ae,33,d7,cd,01,\ - b8,00,00,00,3c,02,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,29,95,ff,ae,33,d7,cd,01,\ - b8,00,00,00,3c,02,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,29,95,ff,ae,33,d7,cd,01,b8,00,00,\ - 00,3c,02,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_FRONT (Enter)"=hex:40,00,00,00,00,00,00,00,29,95,ff,ae,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_FRONT (Leave)"=hex:40,00,00,00,00,00,00,00,83,d4,24,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_BACK (Enter)"=hex:40,00,00,00,00,00,00,00,83,d4,24,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_BACK (Leave)"=hex:40,00,00,00,00,00,00,00,57,cf,27,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_SYSTEM (Enter)"=hex:40,00,00,00,00,00,00,00,57,cf,27,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_SYSTEM (Leave)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_RM (Enter)"=hex:40,00,00,00,00,00,00,00,47,91,4b,af,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE_RM (Leave)"=hex:40,00,00,00,00,00,00,00,73,8f,5d,b0,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,73,8f,5d,b0,33,d7,cd,01,b8,00,00,\ - 00,3c,02,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,b8,00,\ - 00,00,3c,02,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,b5,09,ed,b0,33,d7,cd,01,b8,00,00,00,\ - 3c,02,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,d7,cd,01,b8,00,00,00,\ - 3c,02,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,43,be,55,b2,33,d7,cd,01,b8,\ - 00,00,00,3c,02,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,16,77,1b,de,34,d7,cd,01,\ + 7c,07,00,00,5c,08,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,46,3d,97,de,34,d7,cd,01,\ + 7c,07,00,00,5c,08,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,46,3d,97,de,34,d7,cd,01,7c,07,00,\ + 00,5c,08,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_FRONT (Enter)"=hex:40,00,00,00,00,00,00,00,46,3d,97,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_FRONT (Leave)"=hex:40,00,00,00,00,00,00,00,36,e1,9e,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_BACK (Enter)"=hex:40,00,00,00,00,00,00,00,36,e1,9e,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_BACK (Leave)"=hex:40,00,00,00,00,00,00,00,f6,fd,a4,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_SYSTEM (Enter)"=hex:40,00,00,00,00,00,00,00,f6,fd,a4,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_SYSTEM (Leave)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_RM (Enter)"=hex:40,00,00,00,00,00,00,00,86,06,c2,de,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE_RM (Leave)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,16,82,f7,de,34,d7,cd,01,7c,07,00,\ + 00,5c,08,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW_KTM (Enter)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW_KTM (Leave)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,7c,07,\ + 00,00,5c,08,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,36,f7,56,e0,34,d7,cd,01,7c,07,00,00,\ + 5c,08,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,7c,07,00,00,\ + 5c,08,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,a6,4e,48,e3,34,d7,cd,01,7c,\ + 07,00,00,5c,08,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,0d,2a,e6,ca,33,d7,cd,01,b8,\ 00,00,00,3c,02,00,00,f5,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,\ cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 @@ -1353056,73 +1353326,73 @@ 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\WMI Writer] -"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,6d,68,c6,a1,33,d7,cd,01,80,03,\ - 00,00,f4,08,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:40,00,00,00,00,00,00,00,96,b4,3e,dc,34,d7,cd,01,80,03,\ + 00,00,d8,0a,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,4e,3f,c8,a1,33,d7,cd,01,80,03,\ - 00,00,f4,08,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:40,00,00,00,00,00,00,00,c6,3b,40,dc,34,d7,cd,01,80,03,\ + 00,00,d8,0a,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,7f,b5,0f,ae,33,d7,cd,01,80,\ - 03,00,00,f4,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,eb,67,3c,ae,33,d7,cd,01,80,\ - 03,00,00,f4,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,eb,67,3c,ae,33,\ - d7,cd,01,80,03,00,00,f4,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:40,00,00,00,00,00,00,00,e6,23,b8,dd,34,d7,cd,01,80,\ + 03,00,00,d8,0a,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPAREBACKUP (Leave)"=hex:40,00,00,00,00,00,00,00,16,ab,b9,dd,34,d7,cd,01,80,\ + 03,00,00,d8,0a,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_STABLE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,16,ab,b9,dd,34,\ + d7,cd,01,80,03,00,00,d8,0a,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,\ 00 -"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,93,5d,42,ae,33,d7,cd,01,80,03,\ - 00,00,70,0c,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,fd,da,43,ae,33,d7,cd,01,80,03,\ - 00,00,70,0c,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,01,cb,\ - 90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,0b,99,b3,ae,33,d7,cd,01,\ - 80,03,00,00,90,03,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,5d,b9,ea,ae,33,d7,cd,01,\ - 80,03,00,00,90,03,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,85,\ - 01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,5d,\ - b9,ea,ae,33,d7,cd,01,80,03,00,00,90,03,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,\ +"GETSTATE (Enter)"=hex:40,00,00,00,00,00,00,00,56,74,e4,dd,34,d7,cd,01,80,03,\ + 00,00,d8,0a,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"GETSTATE (Leave)"=hex:40,00,00,00,00,00,00,00,86,fb,e5,dd,34,d7,cd,01,80,03,\ + 00,00,d8,0a,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,59,9f,\ + 7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,06,1b,23,de,34,d7,cd,01,\ + 80,03,00,00,d8,0a,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"PREPARESNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,46,3d,97,de,34,d7,cd,01,\ + 80,03,00,00,d8,0a,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,44,\ + 59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,46,\ + 3d,97,de,34,d7,cd,01,80,03,00,00,d8,0a,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,\ 00,00,00,00,00 -"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,fd,8f,02,af,33,d7,cd,01,80,03,00,\ - 00,6c,0c,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,83,d4,24,af,33,d7,cd,01,80,03,00,\ - 00,6c,0c,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,85,01,cb,90,\ - 69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,83,d4,\ - 24,af,33,d7,cd,01,80,03,00,00,6c,0c,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,\ +"FREEZE (Enter)"=hex:40,00,00,00,00,00,00,00,06,5a,9d,de,34,d7,cd,01,80,03,00,\ + 00,5c,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"FREEZE (Leave)"=hex:40,00,00,00,00,00,00,00,36,e1,9e,de,34,d7,cd,01,80,03,00,\ + 00,5c,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,44,59,9f,7d,\ + 70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:40,00,00,00,00,00,00,00,36,e1,\ + 9e,de,34,d7,cd,01,80,03,00,00,5c,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,\ 00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,83,d4,24,af,33,d7,cd,\ - 01,80,03,00,00,88,0c,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,d7,cd,01,80,03,00,00,\ - 90,03,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,d7,cd,\ - 01,80,03,00,00,88,0c,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,9f,6c,f6,b0,33,d7,cd,01,80,03,00,00,\ - 90,03,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,85,01,cb,90,69,\ - 5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Enter)"=hex:40,00,00,00,00,00,00,00,36,e1,9e,de,34,d7,cd,\ + 01,80,03,00,00,5c,0d,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Enter)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,80,03,00,00,\ + d8,0a,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"BKGND_FREEZE_THREAD (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,\ + 01,80,03,00,00,5c,0d,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"THAW (Leave)"=hex:40,00,00,00,00,00,00,00,f6,13,5d,e0,34,d7,cd,01,80,03,00,00,\ + d8,0a,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,44,59,9f,7d,70,\ + 49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:40,00,00,00,00,00,00,\ - 00,9f,6c,f6,b0,33,d7,cd,01,80,03,00,00,90,03,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,\ + 00,f6,13,5d,e0,34,d7,cd,01,80,03,00,00,d8,0a,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,\ 00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,5b,1b,5b,b2,33,d7,cd,01,80,\ - 03,00,00,90,03,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,a1,72,5c,b2,33,d7,cd,01,80,\ - 03,00,00,90,03,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,85,01,\ - cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Enter)"=hex:40,00,00,00,00,00,00,00,66,6b,4e,e3,34,d7,cd,01,80,\ + 03,00,00,d8,0a,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 +"POSTSNAPSHOT (Leave)"=hex:40,00,00,00,00,00,00,00,66,6b,4e,e3,34,d7,cd,01,80,\ + 03,00,00,d8,0a,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,44,59,\ + 9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,00,00,00,00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:40,00,00,00,00,00,\ - 00,00,a1,72,5c,b2,33,d7,cd,01,80,03,00,00,90,03,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,85,01,cb,90,69,5f,2e,48,82,10,ce,d1,c1,64,09,de,\ + 00,00,66,6b,4e,e3,34,d7,cd,01,80,03,00,00,d8,0a,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,44,59,9f,7d,70,49,49,44,8f,37,e7,86,1b,8a,76,6b,\ 00,00,00,00,00,00,00,00 "BACKUPSHUTDOWN (Enter)"=hex:40,00,00,00,00,00,00,00,47,89,1b,cc,33,d7,cd,01,\ 80,03,00,00,6c,0c,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,85,\ @@ -1356137,20 +1356407,6 @@ [HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\11D] -[HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\11D\52C64B7E] -"LanguageList"=hex(7):65,00,6e,00,2d,00,55,00,53,00,00,00,65,00,6e,00,00,00,00,\ - 00 -"@C:\\Windows\\system32\\SampleRes.dll,-107"="Lighthouse" -"@C:\\Windows\\system32\\SampleRes.dll,-105"="Koala" -"@C:\\Windows\\system32\\SampleRes.dll,-104"="Jellyfish" -"@C:\\Windows\\system32\\SampleRes.dll,-103"="Hydrangeas" -"@C:\\Windows\\system32\\SampleRes.dll,-102"="Desert" -"@C:\\Windows\\system32\\SampleRes.dll,-101"="Chrysanthemum" -"@C:\\Windows\\system32\\unregmp2.exe,-9925"="MP3 Format Sound" -"@C:\\Windows\\system32\\SampleRes.dll,-118"="Sleep Away" -"@C:\\Windows\\system32\\SampleRes.dll,-117"="Maid with the Flaxen Hair" -"@C:\\Windows\\system32\\SampleRes.dll,-116"="Kalimba" - [HKEY_USERS\.DEFAULT\Software\Microsoft] [HKEY_USERS\.DEFAULT\Software\Microsoft\Advanced INF Setup] @@ -1370747,6 +1371003,56 @@ [HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\IMEJP\Colors] @="" +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer] + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\Components] + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\Components\D2BAB82BD3A45B64A98320C5DA73343A] +"1135\\Normal"=hex(7):32,00,5d,00,69,00,4b,00,24,00,4e,00,68,00,63,00,5b,00,40,\ + 00,2c,00,51,00,72,00,3f,00,72,00,42,00,42,00,30,00,32,00,46,00,3e,00,7b,00,\ + 24,00,2e,00,64,00,32,00,40,00,2a,00,46,00,39,00,40,00,4e,00,36,00,44,00,5e,\ + 00,37,00,29,00,52,00,28,00,4c,00,4d,00,48,00,79,00,70,00,68,00,65,00,6e,00,\ + 61,00,74,00,6f,00,72,00,00,00,00,00 + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\Features] + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\Features\AAE9B640AC3D09C4BA77104EC191CDD5] +"Komplet"="" + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\Products] + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\Products\AAE9B640AC3D09C4BA77104EC191CDD5] +"ProductName"="Kukkuniiaat til Microsoft Office" +"PackageCode"="4F293C90F4C369F4F94F5EB6937E4255" +"Language"=dword:00000406 +"Version"=dword:00010009 +"Assignment"=dword:00000000 +"AdvertiseFlags"=dword:00000184 +"InstanceType"=dword:00000000 +"AuthorizedLUAApp"=dword:00000000 +"DeploymentFlags"=dword:00000002 +"Clients"=hex(7):3a,00,00,00,00,00 + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\Products\AAE9B640AC3D09C4BA77104EC191CDD5\SourceList] +"PackageName"="Kukkuniiaat.msi" +"LastUsedSource"=hex(2):6e,00,3b,00,31,00,3b,00,43,00,3a,00,5c,00,55,00,73,00,\ + 65,00,72,00,73,00,5c,00,61,00,62,00,62,00,61,00,5c,00,44,00,6f,00,77,00,6e,\ + 00,6c,00,6f,00,61,00,64,00,73,00,5c,00,00,00 + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\Products\AAE9B640AC3D09C4BA77104EC191CDD5\SourceList\Media] +"DiskPrompt"="Kukkuniiaat Installation [1]" +"1"=";Disk #1" + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\Products\AAE9B640AC3D09C4BA77104EC191CDD5\SourceList\Net] +"1"=hex(2):43,00,3a,00,5c,00,55,00,73,00,65,00,72,00,73,00,5c,00,61,00,62,00,\ + 62,00,61,00,5c,00,44,00,6f,00,77,00,6e,00,6c,00,6f,00,61,00,64,00,73,00,5c,\ + 00,00,00 + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\UpgradeCodes] + +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Installer\UpgradeCodes\35A5CA3AB1322A442AB85EC9AC79F90B] +"AAE9B640AC3D09C4BA77104EC191CDD5"="" + [HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Internet Connection Wizard] "Completed"=dword:00000001 @@ -1372845,6 +1373151,12 @@ [HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override] +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override\kl-GL] +"DLL"="C:\\Program Files\\Kukkuniiaat\\kalspell.dll" +"LEX"="C:\\Program Files\\Kukkuniiaat\\kal.foma" +"DLL64"="C:\\Program Files\\Kukkuniiaat\\kalspell64.dll" +"LEX64"="C:\\Program Files\\Kukkuniiaat\\kal.foma" + [HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Override\se-FI] "DLL"="C:\\Program Files\\Microsoft Office\\Office14\\\\Proof\\mssp3samiNorthern-NO.dll" "LEX"="C:\\Program Files\\Microsoft Office\\Office14\\\\Proof\\mssp3samiNorthern.lex" @@ -1373421,8 +1373733,8 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,62,00,65,00,66,00,6f,00,72,00,65,\ 00,2d,00,6e,00,6f,00,2d,00,73,00,70,00,65,00,6c,00,6c,00,65,00,72,00,73,00,\ 2e,00,72,00,65,00,67,00,00,00,26,00,00,00 -"MRUListEx"=hex:08,00,00,00,07,00,00,00,05,00,00,00,0d,00,00,00,0c,00,00,00,0b,\ - 00,00,00,0a,00,00,00,09,00,00,00,06,00,00,00,04,00,00,00,03,00,00,00,02,00,\ +"MRUListEx"=hex:0a,00,00,00,08,00,00,00,07,00,00,00,05,00,00,00,0d,00,00,00,0c,\ + 00,00,00,0b,00,00,00,09,00,00,00,06,00,00,00,04,00,00,00,03,00,00,00,02,00,\ 00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "1"=hex:14,00,1f,42,25,48,1e,03,94,7b,c3,4d,b1,31,e9,46,b4,4c,8d,d5,74,00,00,\ 00,1a,00,ee,bb,fe,23,00,00,10,00,7d,b1,0d,7b,d2,9c,93,4a,97,33,46,cc,89,02,\ @@ -1373988,8 +1374300,8 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,62,00,65,00,66,00,6f,00,72,00,65,\ 00,2d,00,6e,00,6f,00,2d,00,73,00,70,00,65,00,6c,00,6c,00,65,00,72,00,73,00,\ 2e,00,72,00,65,00,67,00,00,00,26,00,00,00 -"MRUListEx"=hex:07,00,00,00,06,00,00,00,04,00,00,00,0b,00,00,00,0a,00,00,00,09,\ - 00,00,00,08,00,00,00,05,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,\ +"MRUListEx"=hex:08,00,00,00,07,00,00,00,06,00,00,00,04,00,00,00,0b,00,00,00,0a,\ + 00,00,00,09,00,00,00,05,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,\ 00,00,ff,ff,ff,ff "1"=hex:14,00,1f,58,0d,1a,2c,f0,21,be,50,43,88,b0,73,67,fc,96,ef,3c,1a,02,00,\ 00,14,02,bb,af,93,3b,06,02,04,00,00,00,00,00,3d,00,00,00,31,53,50,53,30,f1,\ @@ -1378398,7 +1378710,7 @@ 68,06,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,\ 80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,80,b4,28,\ cf,35,d2,cd,01,00,00,00,00 -"HRZR_PGYFRFFVBA"=hex:00,00,00,00,87,00,00,00,31,01,00,00,24,b7,84,00,0e,00,00,\ +"HRZR_PGYFRFFVBA"=hex:00,00,00,00,88,00,00,00,36,01,00,00,c3,1a,87,00,0e,00,00,\ 00,15,00,00,00,a0,68,06,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,\ 74,00,2e,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,2e,00,47,00,65,00,74,\ 00,74,00,69,00,6e,00,67,00,53,00,74,00,61,00,72,00,74,00,65,00,64,00,00,00,\ @@ -1378420,46 +1378732,46 @@ b4,c6,75,48,e2,00,00,a4,ce,44,92,f8,e1,90,02,2f,96,16,76,48,e2,90,02,fc,e1,\ 90,02,d3,99,16,76,00,00,00,00,3c,b4,31,00,24,e2,90,02,79,99,16,76,3c,b4,31,\ 00,d0,e2,90,02,b0,af,31,00,8d,99,16,76,00,00,00,00,2c,e2,90,02,a8,42,42,76,\ - a0,68,06,00,06,00,00,00,40,00,00,00,bf,c1,13,00,7b,00,46,00,33,00,38,00,42,\ + a0,68,06,00,06,00,00,00,43,00,00,00,93,27,14,00,7b,00,46,00,33,00,38,00,42,\ 00,46,00,34,00,30,00,34,00,2d,00,31,00,44,00,34,00,33,00,2d,00,34,00,32,00,\ 46,00,32,00,2d,00,39,00,33,00,30,00,35,00,2d,00,36,00,37,00,44,00,45,00,30,\ 00,42,00,32,00,38,00,46,00,43,00,32,00,33,00,7d,00,5c,00,65,00,78,00,70,00,\ 6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,65,00,00,00,78,00,65,00,00,\ - 00,00,00,dc,0c,30,02,00,00,00,00,78,ec,12,02,bc,16,9f,76,03,00,00,00,0f,00,\ - 00,00,0c,00,00,00,03,00,00,00,03,00,00,00,00,00,00,00,06,00,00,00,17,00,00,\ - 00,90,01,00,00,00,00,00,00,60,00,00,00,60,00,00,00,0d,00,fd,ff,0c,00,0d,00,\ - 00,00,00,27,00,01,00,00,ff,ff,ff,ff,00,00,01,00,00,00,00,00,00,00,00,00,c3,\ - 09,01,66,f8,0b,30,02,00,00,00,00,64,66,6c,74,00,00,00,00,00,08,0c,00,00,00,\ - 00,00,24,48,30,02,08,00,0f,00,0f,00,00,00,00,00,00,00,dc,0c,30,02,00,00,00,\ - 00,dc,0c,30,02,00,00,00,00,0f,00,00,00,74,0d,30,02,08,00,0f,00,0f,00,00,00,\ - 94,ea,12,02,01,00,00,01,54,00,00,00,00,00,01,00,b8,13,9c,76,a8,48,30,02,0c,\ - 00,03,00,03,00,00,00,00,00,0f,00,74,0d,30,02,00,00,00,00,0f,00,00,00,dc,0c,\ - 30,02,01,00,00,00,f0,ec,12,02,e8,ec,12,02,00,00,00,00,a0,ab,30,02,3c,00,00,\ - 00,00,00,00,00,01,00,01,00,cc,af,bc,35,e0,ea,12,02,94,0a,9f,76,ac,ea,12,02,\ - 00,00,00,00,00,00,00,00,10,00,00,00,00,00,00,00,00,00,00,00,f8,0b,30,02,0f,\ - 00,00,00,00,00,00,00,74,0d,30,02,f8,0b,30,02,11,00,00,00,b0,df,0b,00,a8,df,\ - 0b,00,00,00,00,00,00,b5,30,02,20,eb,00,00,cf,af,bc,35,d0,ea,12,02,8f,96,bf,\ + 00,00,00,00,00,00,00,00,00,00,00,84,e9,12,02,b2,3a,03,74,08,ea,12,02,e6,05,\ + 85,01,00,00,00,00,90,e9,12,02,9c,e9,12,02,b2,3a,03,74,20,ea,12,02,72,04,85,\ + 01,00,00,00,00,a8,e9,12,02,54,3f,03,74,1c,ec,12,02,fa,3e,03,74,4c,02,01,bb,\ + 60,00,00,00,24,ea,12,02,70,ec,12,02,ec,3c,6a,00,3a,3f,03,74,ae,03,00,00,02,\ + 00,00,00,c3,03,00,00,28,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,03,00,\ + 00,00,30,3c,6a,00,70,ec,12,02,10,ed,12,02,00,00,00,00,00,00,00,00,00,00,00,\ + 00,83,04,00,00,28,00,00,00,e0,12,61,00,72,04,85,01,4c,02,01,bb,00,00,00,00,\ + 00,00,00,00,72,04,85,01,00,00,00,00,01,00,00,00,48,ea,12,02,53,77,72,44,00,\ + 00,00,00,4c,02,01,bb,ae,03,00,00,02,00,00,00,c3,03,00,00,28,00,00,00,01,00,\ + 00,00,72,04,85,01,09,00,00,00,00,00,00,00,00,00,00,00,83,04,00,00,28,00,00,\ + 00,00,00,00,00,00,00,00,00,01,00,00,00,03,00,00,00,01,00,00,00,00,00,00,00,\ + 00,00,00,00,02,00,00,00,00,00,00,00,00,00,01,00,b8,ea,12,02,67,30,b7,00,66,\ + 0a,01,28,18,03,00,00,00,00,00,00,80,11,bf,00,11,00,00,00,b0,df,0b,00,a8,df,\ + 0b,00,19,90,ac,76,24,ed,12,02,20,eb,00,00,cf,af,bc,35,d0,ea,12,02,8f,96,bf,\ 75,20,eb,12,02,d4,ea,12,02,33,9a,bf,75,00,00,00,00,d4,04,7c,03,fc,ea,12,02,\ d9,99,bf,75,d4,04,7c,03,a8,eb,12,02,48,00,7c,03,ed,99,bf,75,00,00,00,00,48,\ - 00,7c,03,a8,eb,12,02,04,eb,12,02,04,00,00,00,25,00,00,00,5b,20,2b,00,7b,00,\ + 00,7c,03,a8,eb,12,02,04,eb,12,02,04,00,00,00,26,00,00,00,fb,0a,2d,00,7b,00,\ 46,00,33,00,38,00,42,00,46,00,34,00,30,00,34,00,2d,00,31,00,44,00,34,00,33,\ 00,2d,00,34,00,32,00,46,00,32,00,2d,00,39,00,33,00,30,00,35,00,2d,00,36,00,\ 37,00,44,00,45,00,30,00,42,00,32,00,38,00,46,00,43,00,32,00,33,00,7d,00,5c,\ 00,72,00,65,00,67,00,65,00,64,00,69,00,74,00,2e,00,65,00,78,00,65,00,00,00,\ - 00,00,78,00,65,00,00,00,00,00,dc,0c,30,02,00,00,00,00,78,ec,12,02,bc,16,9f,\ - 76,03,00,00,00,0f,00,00,00,0c,00,00,00,03,00,00,00,03,00,00,00,00,00,00,00,\ - 06,00,00,00,17,00,00,00,90,01,00,00,00,00,00,00,60,00,00,00,60,00,00,00,0d,\ - 00,fd,ff,0c,00,0d,00,00,00,00,27,00,01,00,00,ff,ff,ff,ff,00,00,01,00,00,00,\ - 00,00,00,00,00,00,c3,09,01,66,f8,0b,30,02,00,00,00,00,64,66,6c,74,00,00,00,\ - 00,00,08,0c,00,00,00,00,00,24,48,30,02,08,00,0f,00,0f,00,00,00,00,00,00,00,\ - dc,0c,30,02,00,00,00,00,dc,0c,30,02,00,00,00,00,0f,00,00,00,74,0d,30,02,08,\ - 00,0f,00,0f,00,00,00,94,ea,12,02,01,00,00,01,54,00,00,00,00,00,01,00,b8,13,\ - 9c,76,a8,48,30,02,0c,00,03,00,03,00,00,00,00,00,0f,00,74,0d,30,02,00,00,00,\ - 00,0f,00,00,00,dc,0c,30,02,01,00,00,00,f0,ec,12,02,e8,ec,12,02,00,00,00,00,\ - a0,ab,30,02,3c,00,00,00,00,00,00,00,01,00,01,00,cc,af,bc,35,e0,ea,12,02,94,\ - 0a,9f,76,ac,ea,12,02,00,00,00,00,00,00,00,00,10,00,00,00,00,00,00,00,00,00,\ - 00,00,f8,0b,30,02,0f,00,00,00,00,00,00,00,74,0d,30,02,f8,0b,30,02,11,00,00,\ - 00,b0,df,0b,00,a8,df,0b,00,00,00,00,00,00,b5,30,02,20,eb,00,00,cf,af,bc,35,\ + 00,00,78,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,84,e9,12,02,b2,3a,03,\ + 74,08,ea,12,02,e6,05,85,01,00,00,00,00,90,e9,12,02,9c,e9,12,02,b2,3a,03,74,\ + 20,ea,12,02,72,04,85,01,00,00,00,00,a8,e9,12,02,54,3f,03,74,1c,ec,12,02,fa,\ + 3e,03,74,4c,02,01,bb,60,00,00,00,24,ea,12,02,70,ec,12,02,ec,3c,6a,00,3a,3f,\ + 03,74,ae,03,00,00,02,00,00,00,c3,03,00,00,28,00,00,00,00,00,00,00,00,00,00,\ + 00,01,00,00,00,03,00,00,00,30,3c,6a,00,70,ec,12,02,10,ed,12,02,00,00,00,00,\ + 00,00,00,00,00,00,00,00,83,04,00,00,28,00,00,00,e0,12,61,00,72,04,85,01,4c,\ + 02,01,bb,00,00,00,00,00,00,00,00,72,04,85,01,00,00,00,00,01,00,00,00,48,ea,\ + 12,02,53,77,72,44,00,00,00,00,4c,02,01,bb,ae,03,00,00,02,00,00,00,c3,03,00,\ + 00,28,00,00,00,01,00,00,00,72,04,85,01,09,00,00,00,00,00,00,00,00,00,00,00,\ + 83,04,00,00,28,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,03,00,00,00,01,\ + 00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,00,00,00,00,00,00,01,00,b8,ea,\ + 12,02,67,30,b7,00,66,0a,01,28,18,03,00,00,00,00,00,00,80,11,bf,00,11,00,00,\ + 00,b0,df,0b,00,a8,df,0b,00,19,90,ac,76,24,ed,12,02,20,eb,00,00,cf,af,bc,35,\ d0,ea,12,02,8f,96,bf,75,20,eb,12,02,d4,ea,12,02,33,9a,bf,75,00,00,00,00,d4,\ 04,7c,03,fc,ea,12,02,d9,99,bf,75,d4,04,7c,03,a8,eb,12,02,48,00,7c,03,ed,99,\ bf,75,00,00,00,00,48,00,7c,03,a8,eb,12,02,04,eb,12,02 @@ -1378508,10 +1378820,10 @@ 00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,f0,a4,\ d6,79,eb,d2,cd,01,00,00,00,00 "{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\rkcybere.rkr"=hex:00,00,00,00,06,00,\ - 00,00,40,00,00,00,bf,c1,13,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\ + 00,00,43,00,00,00,93,27,14,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\ bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\ ff,ff,ff,ff,40,c6,cd,33,33,d7,cd,01,00,00,00,00 -"Zvpebfbsg.Jvaqbjf.PbagebyCnary"=hex:00,00,00,00,00,00,00,00,29,00,00,00,91,ee,\ +"Zvpebfbsg.Jvaqbjf.PbagebyCnary"=hex:00,00,00,00,00,00,00,00,2a,00,00,00,ed,fa,\ 0e,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\ bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,00,00,\ 00,00,00,00,00,00,00,00 @@ -1378540,15 +1378852,15 @@ 00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,\ ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00 "{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\ertrqvg.rkr"=hex:00,00,00,00,04,00,00,\ - 00,25,00,00,00,5b,20,2b,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\ + 00,26,00,00,00,fb,0a,2d,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\ 00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,\ ff,ff,ff,60,ea,a4,3b,33,d7,cd,01,00,00,00,00 -"{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\zfvrkrp.rkr"=hex:00,00,00,00,03,00,00,\ +"{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\zfvrkrp.rkr"=hex:00,00,00,00,04,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\ 00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,\ - ff,ff,ff,e0,7d,e9,87,b5,d3,cd,01,00,00,00,00 + ff,ff,ff,80,f9,74,db,34,d7,cd,01,00,00,00,00 "Zvpebfbsg.Jvaqbjf.JvaqbjfVafgnyyre"=hex:00,00,00,00,00,00,00,00,00,00,00,00,\ - d1,24,00,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,\ + a0,2b,00,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,\ 00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,\ 00,00,00,00,00,00,00,00,00,00 "{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\\Zvpebfbsg Bssvpr\\Bssvpr14\\JVAJBEQ.RKR"=hex:00,\ @@ -1381069,6 +1381381,8 @@ [HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\Wisp\Touch] "TouchUI"=dword:00000000 +[HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Microsoft\RestartManager] + [HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Netscape] [HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Netscape\Netscape Navigator] @@ -1381349,6 +1381663,9 @@ "@C:\\Windows\\System32\\ie4uinit.exe,-731"="Internet Explorer" "@C:\\Windows\\system32\\XpsRchVw.exe,-102"="XPS Viewer" "@C:\\Windows\\system32\\NetworkExplorer.dll,-1"="Network" +"@C:\\Windows\\System32\\msimsg.dll,-36"="&Install" +"@C:\\Windows\\System32\\msimsg.dll,-37"="Re&pair" +"@C:\\Windows\\System32\\msimsg.dll,-38"="&Uninstall" [HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001\Software\Classes\Local Settings\Software] @@ -1383421,7 +1383738,7 @@ "NodeSlots"=hex:02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,\ 02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,\ 02,02,02,02,02,02 -"MRUListEx"=hex:02,00,00,00,01,00,00,00,05,00,00,00,03,00,00,00,00,00,00,00,07,\ +"MRUListEx"=hex:05,00,00,00,02,00,00,00,01,00,00,00,03,00,00,00,00,00,00,00,07,\ 00,00,00,06,00,00,00,04,00,00,00,ff,ff,ff,ff "0"=hex:14,00,1f,42,25,48,1e,03,94,7b,c3,4d,b1,31,e9,46,b4,4c,8d,d5,00,00 "1"=hex:14,00,1f,70,68,06,ee,26,0a,a0,d7,44,93,71,be,b0,64,c9,86,83,00,00 @@ -1385504,6 +1385821,9 @@ "@C:\\Windows\\System32\\ie4uinit.exe,-731"="Internet Explorer" "@C:\\Windows\\system32\\XpsRchVw.exe,-102"="XPS Viewer" "@C:\\Windows\\system32\\NetworkExplorer.dll,-1"="Network" +"@C:\\Windows\\System32\\msimsg.dll,-36"="&Install" +"@C:\\Windows\\System32\\msimsg.dll,-37"="Re&pair" +"@C:\\Windows\\System32\\msimsg.dll,-38"="&Uninstall" [HKEY_USERS\S-1-5-21-623000061-4122497103-2362631931-1001_Classes\Local Settings\Software] @@ -1387576,7 +1387896,7 @@ "NodeSlots"=hex:02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,\ 02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,\ 02,02,02,02,02,02 -"MRUListEx"=hex:02,00,00,00,01,00,00,00,05,00,00,00,03,00,00,00,00,00,00,00,07,\ +"MRUListEx"=hex:05,00,00,00,02,00,00,00,01,00,00,00,03,00,00,00,00,00,00,00,07,\ 00,00,00,06,00,00,00,04,00,00,00,ff,ff,ff,ff "0"=hex:14,00,1f,42,25,48,1e,03,94,7b,c3,4d,b1,31,e9,46,b4,4c,8d,d5,00,00 "1"=hex:14,00,1f,70,68,06,ee,26,0a,a0,d7,44,93,71,be,b0,64,c9,86,83,00,00 @@ -1389993,20 +1390313,6 @@ [HKEY_USERS\S-1-5-18\Software\Classes\Local Settings\MuiCache\11D] -[HKEY_USERS\S-1-5-18\Software\Classes\Local Settings\MuiCache\11D\52C64B7E] -"LanguageList"=hex(7):65,00,6e,00,2d,00,55,00,53,00,00,00,65,00,6e,00,00,00,00,\ - 00 -"@C:\\Windows\\system32\\SampleRes.dll,-107"="Lighthouse" -"@C:\\Windows\\system32\\SampleRes.dll,-105"="Koala" -"@C:\\Windows\\system32\\SampleRes.dll,-104"="Jellyfish" -"@C:\\Windows\\system32\\SampleRes.dll,-103"="Hydrangeas" -"@C:\\Windows\\system32\\SampleRes.dll,-102"="Desert" -"@C:\\Windows\\system32\\SampleRes.dll,-101"="Chrysanthemum" -"@C:\\Windows\\system32\\unregmp2.exe,-9925"="MP3 Format Sound" -"@C:\\Windows\\system32\\SampleRes.dll,-118"="Sleep Away" -"@C:\\Windows\\system32\\SampleRes.dll,-117"="Maid with the Flaxen Hair" -"@C:\\Windows\\system32\\SampleRes.dll,-116"="Kalimba" - [HKEY_USERS\S-1-5-18\Software\Microsoft] [HKEY_USERS\S-1-5-18\Software\Microsoft\Advanced INF Setup]