--- afterdivvun11installed.reg 2012-12-11 00:47:31.000000000 +0100 +++ afterdivvun11removed.reg 2012-12-11 00:49:44.000000000 +0100 @@ -896066,26 +896066,6 @@ 00,5f,00,31,00,30,00,33,00,33,00,3e,00,3f,00,72,00,54,00,5d,00,6a,00,49,00,\ 7b,00,6a,00,66,00,28,00,3d,00,31,00,26,00,4c,00,5b,00,2d,00,38,00,31,00,2d,\ 00,5d,00,00,00,00,00 -"5179"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,66,00,33,00,\ - 66,00,70,00,5f,00,6b,00,4c,00,51,00,64,00,3f,00,6b,00,3d,00,79,00,67,00,2d,\ - 00,5d,00,67,00,5b,00,6a,00,3f,00,00,00,00,00 -"1083"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,37,00,2a,00,\ - 63,00,2b,00,70,00,34,00,31,00,4b,00,5d,00,41,00,48,00,58,00,6c,00,75,00,79,\ - 00,76,00,69,00,58,00,5e,00,50,00,00,00,00,00 -"3131"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,37,00,2a,00,\ - 63,00,2b,00,70,00,34,00,31,00,4b,00,5d,00,41,00,48,00,58,00,6c,00,75,00,79,\ - 00,76,00,69,00,58,00,5e,00,50,00,00,00,00,00 -"2107"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,37,00,2a,00,\ - 63,00,2b,00,70,00,34,00,31,00,4b,00,5d,00,41,00,48,00,58,00,6c,00,75,00,79,\ - 00,76,00,69,00,58,00,5e,00,50,00,00,00,00,00 -"4155"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,66,00,33,00,\ - 66,00,70,00,5f,00,6b,00,4c,00,51,00,64,00,3f,00,6b,00,3d,00,79,00,67,00,2d,\ - 00,5d,00,67,00,5b,00,6a,00,3f,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\54BE92CC2CB71D119A12000A9CE1A22A] "3082"=hex(7):76,00,55,00,70,00,41,00,56,00,5e,00,7d,00,74,00,72,00,26,00,21,\ @@ -900378,26 +900358,6 @@ 00,5f,00,31,00,30,00,33,00,33,00,3e,00,41,00,72,00,54,00,5d,00,6a,00,49,00,\ 7b,00,6a,00,66,00,28,00,3d,00,31,00,26,00,4c,00,5b,00,2d,00,38,00,31,00,2d,\ 00,5d,00,00,00,00,00 -"5179"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,36,00,51,00,\ - 69,00,7a,00,29,00,70,00,76,00,4b,00,40,00,39,00,7a,00,42,00,3f,00,4b,00,4b,\ - 00,7b,00,7a,00,39,00,4e,00,3d,00,00,00,00,00 -"1083"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,72,00,7d,00,\ - 41,00,39,00,52,00,30,00,52,00,27,00,31,00,3f,00,67,00,51,00,45,00,42,00,3d,\ - 00,4d,00,45,00,2d,00,69,00,41,00,00,00,00,00 -"3131"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,72,00,7d,00,\ - 41,00,39,00,52,00,30,00,52,00,27,00,31,00,3f,00,67,00,51,00,45,00,42,00,3d,\ - 00,4d,00,45,00,2d,00,69,00,41,00,00,00,00,00 -"2107"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,72,00,7d,00,\ - 41,00,39,00,52,00,30,00,52,00,27,00,31,00,3f,00,67,00,51,00,45,00,42,00,3d,\ - 00,4d,00,45,00,2d,00,69,00,41,00,00,00,00,00 -"4155"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,00,71,\ - 00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,36,00,51,00,\ - 69,00,7a,00,29,00,70,00,76,00,4b,00,40,00,39,00,7a,00,42,00,3f,00,4b,00,4b,\ - 00,7b,00,7a,00,39,00,4e,00,3d,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\7BEAAA678348EF84FA21340B6D9C7269] "OGL"=hex(7):76,00,55,00,70,00,41,00,56,00,35,00,21,00,21,00,21,00,21,00,21,00,\ @@ -901682,26 +901642,6 @@ 00,6d,00,61,00,72,00,46,00,69,00,6c,00,65,00,73,00,5f,00,31,00,30,00,33,00,\ 36,00,3e,00,4b,00,2b,00,59,00,7e,00,48,00,37,00,28,00,41,00,49,00,39,00,35,\ 00,47,00,3d,00,6d,00,30,00,53,00,6c,00,34,00,6f,00,69,00,00,00,00,00 -"3131\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,46,00,\ - 6e,00,4c,00,33,00,2a,00,54,00,28,00,68,00,64,00,3d,00,2d,00,64,00,35,00,71,\ - 00,43,00,4c,00,46,00,75,00,35,00,32,00,00,00,00,00 -"2107\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,46,00,\ - 6e,00,4c,00,33,00,2a,00,54,00,28,00,68,00,64,00,3d,00,2d,00,64,00,35,00,71,\ - 00,43,00,4c,00,46,00,75,00,35,00,32,00,00,00,00,00 -"1083\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,46,00,\ - 6e,00,4c,00,33,00,2a,00,54,00,28,00,68,00,64,00,3d,00,2d,00,64,00,35,00,71,\ - 00,43,00,4c,00,46,00,75,00,35,00,32,00,00,00,00,00 -"4155\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,62,00,\ - 40,00,33,00,69,00,52,00,58,00,56,00,75,00,4c,00,41,00,62,00,48,00,5f,00,5d,\ - 00,6e,00,4f,00,44,00,28,00,32,00,6d,00,00,00,00,00 -"5179\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,62,00,\ - 40,00,33,00,69,00,52,00,58,00,56,00,75,00,4c,00,41,00,62,00,48,00,5f,00,5d,\ - 00,6e,00,4f,00,44,00,28,00,32,00,6d,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\D3C84C3C6B7369C458A98CF4752D1D80] "1033/3082"=hex(7):76,00,55,00,70,00,41,00,56,00,5e,00,7d,00,74,00,72,00,26,00,\ @@ -902349,26 +902289,6 @@ 00,6d,00,61,00,72,00,46,00,69,00,6c,00,65,00,73,00,5f,00,31,00,30,00,33,00,\ 36,00,3e,00,78,00,37,00,65,00,78,00,61,00,59,00,77,00,2a,00,66,00,40,00,28,\ 00,70,00,51,00,2c,00,78,00,49,00,76,00,6f,00,41,00,27,00,00,00,00,00 -"3131\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,6f,00,\ - 3f,00,34,00,50,00,38,00,61,00,34,00,52,00,7e,00,3d,00,7a,00,62,00,60,00,45,\ - 00,6f,00,68,00,6a,00,6e,00,39,00,21,00,00,00,00,00 -"2107\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,6f,00,\ - 3f,00,34,00,50,00,38,00,61,00,34,00,52,00,7e,00,3d,00,7a,00,62,00,60,00,45,\ - 00,6f,00,68,00,6a,00,6e,00,39,00,21,00,00,00,00,00 -"1083\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,6f,00,\ - 3f,00,34,00,50,00,38,00,61,00,34,00,52,00,7e,00,3d,00,7a,00,62,00,60,00,45,\ - 00,6f,00,68,00,6a,00,6e,00,39,00,21,00,00,00,00,00 -"4155\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,79,00,\ - 79,00,69,00,62,00,6f,00,43,00,4b,00,7b,00,24,00,40,00,69,00,5f,00,4a,00,50,\ - 00,2a,00,43,00,61,00,46,00,6b,00,53,00,00,00,00,00 -"5179\\Normal"=hex(7):5a,00,27,00,4b,00,70,00,62,00,74,00,4c,00,46,00,67,00,3d,\ - 00,71,00,7e,00,75,00,38,00,77,00,71,00,39,00,5b,00,36,00,66,00,3e,00,79,00,\ - 79,00,69,00,62,00,6f,00,43,00,4b,00,7b,00,24,00,40,00,69,00,5f,00,4a,00,50,\ - 00,2a,00,43,00,61,00,46,00,6b,00,53,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\F4BE92CC2CB71D119A12000A9CE1A22A] "3082"=hex(7):76,00,55,00,70,00,41,00,56,00,5e,00,7d,00,74,00,72,00,26,00,21,\ @@ -902843,9 +902763,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\00004109500200000000000000F01FEC] "OfficeFileValidator"="" -[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\57CB6F3B98FBBB64A855473F371F97EB] -"Sami_F"="" - [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\D7314F9862C648A4DB8BE2A5B47BE100] "Complete"="" "Complete5.1.10411.0"="" @@ -904304,39 +904221,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\00004109500200000000000000F01FEC\SourceList\Media] "1"=";" -[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\57CB6F3B98FBBB64A855473F371F97EB] -"ProductName"="Sámi Proofing Tools" -"PackageCode"="D5396B7C01BF6E44BB9E3500DF64A2CB" -"Language"=dword:00000409 -"Version"=dword:01000003 -"Assignment"=dword:00000001 -"AdvertiseFlags"=dword:00000184 -"ProductIcon"="C:\\Windows\\Installer\\{B3F6BC75-BF89-46BB-8A55-74F373F179BE}\\ARPPRODUCTICON.exe" -"InstanceType"=dword:00000000 -"AuthorizedLUAApp"=dword:00000000 -"DeploymentFlags"=dword:00000003 -"Clients"=hex(7):3a,00,00,00,00,00 - -[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\57CB6F3B98FBBB64A855473F371F97EB\SourceList] -"PackageName"="setupSami_Northern.msi" -"LastUsedSource"=hex(2):6e,00,3b,00,31,00,3b,00,43,00,3a,00,5c,00,55,00,73,00,\ - 65,00,72,00,73,00,5c,00,36,00,34,00,2d,00,37,00,2d,00,57,00,7e,00,31,00,5c,\ - 00,41,00,70,00,70,00,44,00,61,00,74,00,61,00,5c,00,4c,00,6f,00,63,00,61,00,\ - 6c,00,5c,00,54,00,65,00,6d,00,70,00,5c,00,70,00,62,00,43,00,33,00,43,00,46,\ - 00,5c,00,69,00,6e,00,73,00,74,00,61,00,6c,00,6c,00,65,00,72,00,73,00,5c,00,\ - 00,00 - -[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\57CB6F3B98FBBB64A855473F371F97EB\SourceList\Media] -"DiskPrompt"="[1]" -"1"="DISK1;1" - -[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\57CB6F3B98FBBB64A855473F371F97EB\SourceList\Net] -"1"=hex(2):43,00,3a,00,5c,00,55,00,73,00,65,00,72,00,73,00,5c,00,36,00,34,00,\ - 2d,00,37,00,2d,00,57,00,7e,00,31,00,5c,00,41,00,70,00,70,00,44,00,61,00,74,\ - 00,61,00,5c,00,4c,00,6f,00,63,00,61,00,6c,00,5c,00,54,00,65,00,6d,00,70,00,\ - 5c,00,70,00,62,00,43,00,33,00,43,00,46,00,5c,00,69,00,6e,00,73,00,74,00,61,\ - 00,6c,00,6c,00,65,00,72,00,73,00,5c,00,00,00 - [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D7314F9862C648A4DB8BE2A5B47BE100] "ProductName"="Microsoft Silverlight" "PackageCode"="A91E649BE825CAF4C9984020C70CF64C" @@ -904493,9 +904377,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\00004100500200000000000000F01FEC] "00004109500200000000000000F01FEC"="" -[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\36A23EF78F3EA5E488346BD88373774E] -"57CB6F3B98FBBB64A855473F371F97EB"="" - [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\4AE2841C3D7016247914C7DE6E8A2CA5] "D7314F9862C648A4DB8BE2A5B47BE100"="" @@ -1318269,8 +1318150,8 @@ 00,00,00,00,00,00,00,01,00,00,00,64,00,00,00,48,00,00,00,1c,00,00,00,42,00,\ 61,00,74,00,74,00,65,00,72,00,79,00,53,00,74,00,61,00,74,00,75,00,73,00,00,\ 00,00,00,00,00,00,00,00,00,30,00,00,00,1a,00,00,00,49,00,6e,00,73,00,74,00,\ - 61,00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,20,49,6e,63,6c,75,64,\ - 65,20,66,69,6c,65,20,40,00,00,00,00,00,00,00,02,00,00,00,03,00,00,00,00,00,\ + 61,00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,40,00,00,00,00,00,00,00,02,00,00,00,03,00,00,00,00,00,\ 00,00,64,00,00,00,00,00,01,00,40,00,00,00,16,00,00,00,43,00,68,00,61,00,72,\ 00,67,00,65,00,52,00,61,00,74,00,65,00,00,00,00,00,00,00,00,00,48,00,00,00,\ 00,00,00,00,04,00,00,00,03,00,00,00,00,00,00,00,64,00,00,00,00,00,01,00,48,\ @@ -1318288,7 +1318169,7 @@ 49,00,5f,00,43,00,6f,00,6e,00,6e,00,65,00,63,00,74,00,69,00,6f,00,6e,00,53,\ 00,74,00,61,00,74,00,69,00,73,00,74,00,69,00,63,00,73,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,30,00,00,00,1a,00,00,00,49,00,6e,00,73,00,74,00,61,00,6e,\ - 00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,36,00,00,00,00,00,58,01,36,00,\ + 00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,74,00,79,00,00,00,00,00,00,00,\ 00,00,00,00,48,00,00,00,0c,00,00,00,0e,00,00,00,15,00,00,00,00,00,00,00,64,\ 00,00,00,00,05,41,10,48,00,00,00,1c,00,00,00,42,00,79,00,74,00,65,00,73,00,\ 52,00,65,00,63,00,65,00,69,00,76,00,65,00,64,00,00,00,00,00,00,00,00,00,00,\ @@ -1318306,8 +1318187,8 @@ 5f,00,49,00,6e,00,69,00,74,00,69,00,61,00,74,00,6f,00,72,00,49,00,6e,00,73,\ 00,74,00,61,00,6e,00,63,00,65,00,53,00,74,00,61,00,74,00,69,00,73,00,74,00,\ 69,00,63,00,73,00,00,00,00,00,00,00,30,00,00,00,1a,00,00,00,49,00,6e,00,73,\ - 00,74,00,61,00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,15,00,\ - 00,00,00,00,00,00,64,00,00,00,70,00,00,00,16,00,00,00,18,00,00,00,13,00,00,\ + 00,74,00,61,00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,10,00,00,00,\ + 00,00,58,01,10,00,00,00,00,00,70,00,00,00,16,00,00,00,18,00,00,00,13,00,00,\ 00,00,00,00,00,64,00,00,00,00,00,01,00,70,00,00,00,46,00,00,00,53,00,65,00,\ 73,00,73,00,69,00,6f,00,6e,00,43,00,6f,00,6e,00,6e,00,65,00,63,00,74,00,69,\ 00,6f,00,6e,00,54,00,69,00,6d,00,65,00,6f,00,75,00,74,00,45,00,72,00,72,00,\ @@ -1318327,8 +1318208,8 @@ 00,49,00,5f,00,49,00,6e,00,69,00,74,00,69,00,61,00,74,00,6f,00,72,00,4c,00,\ 6f,00,67,00,69,00,6e,00,53,00,74,00,61,00,74,00,69,00,73,00,74,00,69,00,63,\ 00,73,00,00,00,00,00,00,00,00,00,00,00,00,00,30,00,00,00,1a,00,00,00,49,00,\ - 6e,00,73,00,74,00,61,00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,\ - 00,15,00,00,00,00,00,00,00,64,00,00,00,48,00,00,00,20,00,00,00,22,00,00,00,\ + 6e,00,73,00,74,00,61,00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,10,\ + 00,00,00,00,00,58,01,10,00,00,00,00,00,48,00,00,00,20,00,00,00,22,00,00,00,\ 13,00,00,00,00,00,00,00,64,00,00,00,00,00,01,00,48,00,00,00,20,00,00,00,4c,\ 00,6f,00,67,00,69,00,6e,00,41,00,63,00,63,00,65,00,70,00,74,00,52,00,73,00,\ 70,00,73,00,00,00,00,00,00,00,58,00,00,00,20,00,00,00,24,00,00,00,13,00,00,\ @@ -1318361,8 +1318242,8 @@ 00,00,00,4d,00,53,00,69,00,53,00,43,00,53,00,49,00,5f,00,4d,00,4d,00,49,00,\ 50,00,53,00,45,00,43,00,53,00,74,00,61,00,74,00,73,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,30,00,00,00,1a,00,00,00,49,00,6e,00,73,00,74,00,61,00,6e,00,\ - 63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,00,00,48,00,00,00,34,00,00,00,36,00,00,00,15,00,00,00,00,00,00,00,64,00,\ + 63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,1a,00,00,00,49,00,6e,00,73,\ + 00,74,00,48,00,00,00,34,00,00,00,36,00,00,00,15,00,00,00,00,00,00,00,64,00,\ 00,00,00,01,01,00,48,00,00,00,20,00,00,00,41,00,63,00,71,00,75,00,69,00,72,\ 00,65,00,46,00,61,00,69,00,6c,00,75,00,72,00,65,00,73,00,00,00,00,00,00,00,\ 48,00,00,00,34,00,00,00,38,00,00,00,15,00,00,00,00,00,00,00,64,00,00,00,00,\ @@ -1318429,8 +1318310,8 @@ 00,00,00,2e,00,00,00,4d,00,53,00,69,00,53,00,43,00,53,00,49,00,5f,00,4e,00,\ 49,00,43,00,50,00,65,00,72,00,66,00,6f,00,72,00,6d,00,61,00,6e,00,63,00,65,\ 00,00,00,00,00,00,00,00,00,30,00,00,00,1a,00,00,00,49,00,6e,00,73,00,74,00,\ - 61,00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,00,00,00,00,00,\ - 00,00,00,00,00,00,00,48,00,00,00,60,00,00,00,62,00,00,00,13,00,00,00,00,00,\ + 61,00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,1a,00,00,00,49,\ + 00,6e,00,73,00,74,00,48,00,00,00,60,00,00,00,62,00,00,00,13,00,00,00,00,00,\ 00,00,64,00,00,00,00,04,41,10,48,00,00,00,1c,00,00,00,42,00,79,00,74,00,65,\ 00,73,00,52,00,65,00,63,00,65,00,69,00,76,00,65,00,64,00,00,00,00,00,00,00,\ 00,00,00,00,50,00,00,00,60,00,00,00,64,00,00,00,13,00,00,00,00,00,00,00,64,\ @@ -1318446,8 +1318327,8 @@ 00,00,2a,00,00,00,4d,00,53,00,69,00,53,00,43,00,53,00,49,00,5f,00,51,00,4d,\ 00,49,00,50,00,53,00,45,00,43,00,53,00,74,00,61,00,74,00,73,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,30,00,00,00,1a,00,00,00,49,00,6e,00,73,00,74,00,61,\ - 00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,15,00,00,00,00,00,\ - 00,00,64,00,00,00,40,00,00,00,6a,00,00,00,6c,00,00,00,15,00,00,00,00,00,00,\ + 00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,1a,00,00,00,49,00,\ + 6e,00,73,00,74,00,40,00,00,00,6a,00,00,00,6c,00,00,00,15,00,00,00,00,00,00,\ 00,64,00,00,00,00,01,01,00,40,00,00,00,12,00,00,00,41,00,63,00,74,00,69,00,\ 76,00,65,00,53,00,41,00,00,00,00,00,00,00,00,00,00,00,00,00,48,00,00,00,6a,\ 00,00,00,6e,00,00,00,15,00,00,00,00,00,00,00,64,00,00,00,00,01,01,00,48,00,\ @@ -1318510,8 +1318391,8 @@ 53,00,49,00,5f,00,52,00,65,00,71,00,75,00,65,00,73,00,74,00,54,00,69,00,6d,\ 00,65,00,53,00,74,00,61,00,74,00,69,00,73,00,74,00,69,00,63,00,73,00,00,00,\ 00,00,00,00,00,00,00,00,30,00,00,00,1a,00,00,00,49,00,6e,00,73,00,74,00,61,\ - 00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,15,00,00,00,00,00,\ - 00,00,64,00,00,00,58,00,00,00,90,00,00,00,92,00,00,00,13,00,00,00,00,00,00,\ + 00,6e,00,63,00,65,00,4e,00,61,00,6d,00,65,00,00,00,6e,00,63,00,65,00,02,00,\ + 00,02,15,95,00,00,58,00,00,00,90,00,00,00,92,00,00,00,13,00,00,00,00,00,00,\ 00,64,00,00,00,00,05,41,10,58,00,00,00,2c,00,00,00,41,00,76,00,65,00,72,00,\ 61,00,67,00,65,00,50,00,72,00,6f,00,63,00,65,00,73,00,73,00,69,00,6e,00,67,\ 00,54,00,69,00,6d,00,65,00,00,00,00,00,00,00,00,00,00,00,58,00,00,00,90,00,\ @@ -1318523,7 +1318404,7 @@ 00,43,00,53,00,49,00,5f,00,53,00,65,00,73,00,73,00,69,00,6f,00,6e,00,53,00,\ 74,00,61,00,74,00,69,00,73,00,74,00,69,00,63,00,73,00,00,00,00,00,00,00,00,\ 00,00,00,30,00,00,00,1a,00,00,00,49,00,6e,00,73,00,74,00,61,00,6e,00,63,00,\ - 65,00,4e,00,61,00,6d,00,65,00,00,00,00,00,15,00,00,00,00,00,00,00,64,00,00,\ + 65,00,4e,00,61,00,6d,00,65,00,00,00,6e,00,63,00,65,00,02,00,00,02,15,95,00,\ 00,48,00,00,00,96,00,00,00,98,00,00,00,15,00,00,00,00,00,00,00,64,00,00,00,\ 00,05,41,10,48,00,00,00,1c,00,00,00,42,00,79,00,74,00,65,00,73,00,52,00,65,\ 00,63,00,65,00,69,00,76,00,65,00,64,00,00,00,00,00,00,00,00,00,00,00,40,00,\ @@ -1319154,7 +1319035,7 @@ "TimeQuantaLength"=dword:0000012c "UseLmCompat"=dword:00000002 "IGDSearcherDLL"="bitsigd.dll" -"StateIndex"=dword:00000001 +"StateIndex"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing] "EnableDpxLog"=dword:00000001 @@ -1319168,7 +1319049,7 @@ "RollbackFailed"=dword:00000000 "CanceledCurrentFailedTransaction"=dword:00000000 "SessionIdHigh"=dword:01cdd730 -"SessionIdLow"=dword:87506f51 +"SessionIdLow"=dword:f888aef7 "DoqTime"=dword:00000000 "DoqCount"=dword:00000004 "PoqTime"=dword:0000000e @@ -1383734,9 +1383615,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\00004100500200000000000000F01FEC] "00004109500200000000000000F01FEC"="" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\36A23EF78F3EA5E488346BD88373774E] -"57CB6F3B98FBBB64A855473F371F97EB"="" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\4AE2841C3D7016247914C7DE6E8A2CA5] "D7314F9862C648A4DB8BE2A5B47BE100"="" @@ -1386236,9 +1386114,6 @@ "SharedComponent"="0" "IsFullFile"="1" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\21149A5106EBB324CA0B03E684AE9D54] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mshy3samiLule-SE.dll" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2140372DDD2448850CF18C3B9B1A1EE8] "00002109110000000000000000F01FEC"="" @@ -1386681,9 +1386556,6 @@ "SharedComponent"="0" "IsFullFile"="1" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2922D4AB6EF5D4740B298CD75C24E4C5] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mshy3samiLule-dic.lex" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29322913B4A79444B8DD69E9B291FA9D] "DFC90B5F2B0FFA63D84FD16F6BF37C4B"="c:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallUtil.exe" @@ -1387008,9 +1386880,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DDB01A5DC3F2B43F9BD7A3E962726AC] "DFC90B5F2B0FFA63D84FD16F6BF37C4B"="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\Client\\1033\\eula.rtf" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DF27058FFEB22F48BA0D98DA860714D] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mssp3samiLule.lex" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DF3423286177E54B9DCD34B716252E5] "DFC90B5F2B0FFA63D84FD16F6BF37C4B"="c:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\WindowsBase.dll" @@ -1389136,9 +1389005,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4EB0A34D63E668B4FA1E24B45DC3DB0A] "00002109110000000000000000F01FEC"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\THEMES12\\QUAD\\QUAD.INF" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4EB657382DC3A08489B4A654984D1205] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mshy3samiNorthern-NO.dll" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4EBB202F98A9ADB4D82A2F4DCBF41FF9] "DFC90B5F2B0FFA63D84FD16F6BF37C4B"="" @@ -1389615,9 +1389481,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\55B5FB707172B1B429F7DEEE895A8C7B] "00002109110000000000000000F01FEC"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE12\\MUOPTIN.DLL" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\55EF2BF3CD33B874CBC22EAD2AA7CC00] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mssp3samiNorthern-NO.dll" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\55F27AB867CB926359718FA8B976EEB6] "DFC90B5F2B0FFA63D84FD16F6BF37C4B"="02:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217\\" @@ -1390015,9 +1389878,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5CD521FB6DFE3D115AF2000A9CAC24AB] "00002109E60090400000000000F01FEC"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Help\\3082\\hxdsui.dll" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5CF385611BB33A64DB4A6A6517AF63C2] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mssp3samiNorthern.lex" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D07CFE4732E32A46A20E1108A3323AA] "00002109440090400000000000F01FEC"="C:\\Program Files (x86)\\Microsoft Office\\Office12\\INFFORMS\\1033\\ASSETTRK.XSN" @@ -1396126,9 +1395986,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B42F239FFD106204FBA9EB1699061975] "00002109B10090400000000000F01FEC"="C:\\Program Files (x86)\\Microsoft Office\\Office12\\1033\\QuickStyles\\Default.dotx" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4499EBD185EEBA4F974247163428388] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mssp3samiLule-SE.dll" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B470EAB9550F3C6D0BF18C3B9B1A1EE8] "00002109110000000000000000F01FEC"="" @@ -1397095,9 +1396952,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C3FAC2B9BA0BCE110CF18C3B9B1A1EE8] "00002109110000000000000000F01FEC"="" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C4235A1B947FF844FAA4AB8A7E83DC91] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mshy3samiNorthern-dic.lex" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C423EFD3C31BABA4EA47C3982B9E7A96] "00002109110000000000000000F01FEC"="02:\\Software\\Microsoft\\Office\\12.0\\Common\\DRM\\CloudLicenseServer" @@ -1399783,9 +1399637,6 @@ "SharedComponent"="0" "IsFullFile"="1" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDF04AAADDD5DB940B50B61293AB6F94] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mshy3samiLule.lex" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE0FD56954BACD943B9F92B7F59028D3] "DFC90B5F2B0FFA63D84FD16F6BF37C4B"="c:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.JScript.dll" @@ -1400688,9 +1400539,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FC7607DA69F22F140AC94A2A2D32B550] "DFC90B5F2B0FFA63D84FD16F6BF37C4B"="c:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Activities.dll" -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FCB2A3DD99D14BF47A819BBF6F2CA6E7] -"57CB6F3B98FBBB64A855473F371F97EB"="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Proof\\mshy3samiNorthern.lex" - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FCC2B6814E9DDD11C96900E1C49F9986] "DFC90B5F2B0FFA63D84FD16F6BF37C4B"="c:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelReg.exe" @@ -1402948,54 +1402796,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109500200000000000000F01FEC\Usage] -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\57CB6F3B98FBBB64A855473F371F97EB] - -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\57CB6F3B98FBBB64A855473F371F97EB\Features] -"Sami_F"="6Qiz)pvK@9zB?KK{z9N=f3fp_kLQd?k=yg-]g[j?6IVsdXGuv=]Z=LP+_caEyyiboCK{$@i_JP*CaFkSb@3iRXVuLAbH_]nOD(2mr}A9R0R'1?gQEB=ME-iA7*c+p41K]AHXluyviX^PS6)+b9*'&=+]N7_*2s@+o?4P8a4R~=zb`Eohjn9!FnL3*T(hd=-d5qCLFu52" - -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\57CB6F3B98FBBB64A855473F371F97EB\InstallProperties] -"RegOwner"="64-7-windows" -"RegCompany"="" -"ProductID"="none" -"LocalPackage"="C:\\Windows\\Installer\\46536.msi" -"AuthorizedCDFPrefix"="" -"Comments"="" -"Contact"="" -"DisplayVersion"="1.0.3" -"HelpLink"="" -"HelpTelephone"="" -"InstallDate"="20121211" -"InstallLocation"="C:\\Program Files (x86)\\" -"InstallSource"="C:\\Users\\64-7-W~1\\AppData\\Local\\Temp\\pbC3CF\\installers\\" -"ModifyPath"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,\ - 00,65,00,20,00,2f,00,58,00,7b,00,42,00,33,00,46,00,36,00,42,00,43,00,37,00,\ - 35,00,2d,00,42,00,46,00,38,00,39,00,2d,00,34,00,36,00,42,00,42,00,2d,00,38,\ - 00,41,00,35,00,35,00,2d,00,37,00,34,00,46,00,33,00,37,00,33,00,46,00,31,00,\ - 37,00,39,00,42,00,45,00,7d,00,00,00 -"NoModify"=dword:00000001 -"Publisher"="Polderland Language & Speech Technology bv" -"Readme"="" -"Size"="" -"EstimatedSize"=dword:00002208 -"UninstallString"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\ - 78,00,65,00,20,00,2f,00,58,00,7b,00,42,00,33,00,46,00,36,00,42,00,43,00,37,\ - 00,35,00,2d,00,42,00,46,00,38,00,39,00,2d,00,34,00,36,00,42,00,42,00,2d,00,\ - 38,00,41,00,35,00,35,00,2d,00,37,00,34,00,46,00,33,00,37,00,33,00,46,00,31,\ - 00,37,00,39,00,42,00,45,00,7d,00,00,00 -"URLInfoAbout"="http://www.polderland.nl" -"URLUpdateInfo"="" -"VersionMajor"=dword:00000001 -"VersionMinor"=dword:00000000 -"WindowsInstaller"=dword:00000001 -"Version"=dword:01000003 -"Language"=dword:00000409 -"DisplayName"="Sámi Proofing Tools" - -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\57CB6F3B98FBBB64A855473F371F97EB\Patches] -"AllPatches"="" - -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\57CB6F3B98FBBB64A855473F371F97EB\Usage] - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7314F9862C648A4DB8BE2A5B47BE100] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7314F9862C648A4DB8BE2A5B47BE100\Features] @@ -1518976,7 +1518776,7 @@ "SusClientIdValidation"=hex:06,02,28,01,00,00,56,00,42,00,62,00,31,00,62,00,37,\ 00,34,00,38,00,39,00,37,00,2d,00,34,00,61,00,62,00,31,00,38,00,65,00,30,00,\ 37,00,20,00,06,08,00,27,e3,9a,05 -"LastRestorePointSetTime"="2012-12-06 13:52:27" +"LastRestorePointSetTime"="2012-12-10 23:48:54" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update] "ElevateNonAdmins"=dword:00000001 @@ -1518988,25 +1518788,26 @@ "ScheduledInstallTime"=dword:00000003 "IncludeRecommendedUpdates"=dword:00000001 "ActionCenterLastPossibleRestartNotification"="2012-12-05 02:00:00" -"NextDetectionTime"="2012-12-10 23:43:53" +"NextDetectionTime"="2012-12-11 21:16:15" "NextFeaturedUpdatesNotificationTime"="2012-11-30 21:47:37" "ScheduledInstallDate"="2012-12-11 02:00:00" "ActionCenterNotificationCount"=dword:00000004 "BalloonTime"="2012-12-06 14:07:16" "BalloonType"=dword:00000008 +"DownloadExpirationTime"="2012-12-12 23:47:31" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Detect] -"LastSuccessTime"="2012-12-06 13:41:58" +"LastSuccessTime"="2012-12-10 23:47:31" "LastError"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Download] -"LastSuccessTime"="2012-12-06 13:47:08" +"LastSuccessTime"="2012-12-10 23:47:52" "LastError"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] -"LastSuccessTime"="2012-12-06 13:52:27" +"LastSuccessTime"="2012-12-10 23:48:54" "LastError"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\UAS] @@ -1535042,9 +1534843,9 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Signature Updates] "EngineVersion"="1.1.9002.0" -"ASSignatureVersion"="1.141.1048.0" -"ASSignatureApplied"=hex:80,c9,dc,26,b2,d1,cd,01 -"SignatureLocation"="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{97A5B97F-CA81-4C45-B8EB-3764156502FB}" +"ASSignatureVersion"="1.141.1308.0" +"ASSignatureApplied"=hex:80,82,6a,54,ff,d3,cd,01 +"SignatureLocation"="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{A3DF0E73-DD94-445F-B444-B23941670228}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\SpyNet] "SpyNetReporting"=dword:00000001 @@ -1616565,6 +1616366,8 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A7C73732-9F11-4281-8D19-764D4EC9D94D}] +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AB085BA9-7510-4E3B-8B0B-A16BB0E2B493}] + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC4E5ACF-89F7-4220-BA21-81EE183975E2}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC668097-4D6B-4093-AC14-014C09DBF820}] @@ -1616595,8 +1616398,6 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D26AD5CF-542C-4B54-A5A8-3D2795E4AC61}] -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D9B8F6BD-A54B-4074-A506-8285CEEB35AB}] - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DA41DE71-8431-42FB-9DB0-EB64A961DEAD}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DD9F510C-95F4-499A-90C8-BAC5BC372FF4}] @@ -1617553,6 +1617354,25 @@ "Hash"=hex:dc,33,8f,10,a3,cf,c7,96,a1,88,c9,f3,52,7f,69,73,1f,42,da,ff,d4,5d,\ c3,43,71,74,14,5a,40,8a,4a,05 +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AB085BA9-7510-4E3B-8B0B-A16BB0E2B493}] +"Path"="\\Microsoft\\Windows Defender\\MP Scheduled Scan" +"Hash"=hex:ba,12,89,83,7a,80,ed,45,ae,f8,f6,2e,c9,02,69,e4,67,c4,e1,2d,ea,78,\ + 7f,5b,5b,54,cf,cf,d0,89,bf,a5 +"Triggers"=hex:15,00,00,00,00,00,00,00,01,89,85,01,00,00,00,00,80,b4,b5,f0,fb,\ + 53,bf,01,01,89,85,01,00,00,00,00,00,00,64,77,63,71,2f,02,52,21,c2,03,48,48,\ + 48,48,3a,e0,fd,ee,48,48,48,48,00,48,48,48,48,48,48,48,00,48,48,48,48,48,48,\ + 48,05,00,00,00,48,48,48,48,0c,00,00,00,48,48,48,48,01,01,00,00,00,00,00,05,\ + 12,00,00,00,48,48,48,48,00,00,00,00,48,48,48,48,38,00,00,00,48,48,48,48,3c,\ + 00,00,00,40,38,00,00,80,f4,03,00,ff,ff,ff,ff,07,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,dd,dd,00,00,00,00,00,00,01,89,85,01,00,00,00,00,80,b4,b5,f0,\ + fb,53,bf,01,01,89,85,01,00,00,00,00,00,00,64,77,63,71,2f,02,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,01,00,\ + 00,00,01,00,00,00,00,00,00,00,00,01,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00 +"DynamicInfo"=hex:03,00,00,00,9f,01,54,d1,30,d7,cd,01,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00 + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC4E5ACF-89F7-4220-BA21-81EE183975E2}] "Path"="\\Microsoft\\Windows\\Application Experience\\AitAgent" "Triggers"=hex:15,00,00,00,00,00,00,00,01,12,72,fb,fe,07,00,00,00,04,c5,1f,53,\ @@ -1617880,25 +1617700,6 @@ "Hash"=hex:02,e6,03,f0,f0,b9,82,21,f0,70,dd,81,a8,8b,3d,b6,7c,e5,da,31,5b,c5,\ 68,42,37,32,f9,ee,d1,5f,3f,79 -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D9B8F6BD-A54B-4074-A506-8285CEEB35AB}] -"Path"="\\Microsoft\\Windows Defender\\MP Scheduled Scan" -"Hash"=hex:bb,68,ba,23,48,f5,c1,c9,2e,7e,60,18,2a,0d,e6,38,35,e3,40,34,d0,fe,\ - 70,9a,6b,3e,a8,66,e9,0c,87,7a -"Triggers"=hex:15,00,00,00,00,00,00,00,01,89,32,01,00,00,00,00,80,67,6b,12,0d,\ - 54,bf,01,01,89,32,01,00,00,00,00,00,00,64,77,63,71,2f,02,52,21,c2,03,48,48,\ - 48,48,ab,22,21,b4,48,48,48,48,00,48,48,48,48,48,48,48,00,48,48,48,48,48,48,\ - 48,05,00,00,00,48,48,48,48,0c,00,00,00,48,48,48,48,01,01,00,00,00,00,00,05,\ - 12,00,00,00,48,48,48,48,00,00,00,00,48,48,48,48,38,00,00,00,48,48,48,48,3c,\ - 00,00,00,40,38,00,00,80,f4,03,00,ff,ff,ff,ff,07,00,00,00,00,00,00,00,00,00,\ - 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,00,00,00,00,dd,dd,00,00,00,00,00,00,01,89,32,01,00,00,00,00,80,67,6b,12,\ - 0d,54,bf,01,01,89,32,01,00,00,00,00,00,00,64,77,63,71,2f,02,00,00,00,00,00,\ - 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,01,00,\ - 00,00,01,00,00,00,00,00,00,00,00,01,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00 -"DynamicInfo"=hex:03,00,00,00,ec,1c,75,54,bb,d3,cd,01,00,00,00,00,00,00,00,00,\ - 00,00,00,00,00,00,00,00 - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA41DE71-8431-42FB-9DB0-EB64A961DEAD}] "Path"="\\Microsoft\\Windows\\Maintenance\\WinSAT" "Triggers"=hex:15,00,00,00,00,00,00,00,01,8c,68,01,00,00,00,00,00,28,3b,a2,11,\ @@ -1618641,7 +1618442,7 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows Defender] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows Defender\MP Scheduled Scan] -"Id"="{D9B8F6BD-A54B-4074-A506-8285CEEB35AB}" +"Id"="{AB085BA9-7510-4E3B-8B0B-A16BB0E2B493}" "Index"=dword:00000003 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SeCEdit] @@ -1619438,7 +1619239,7 @@ "OEM"="%windir%\\system32\\oem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP] -"LastIndex"=dword:00000024 +"LastIndex"=dword:00000025 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients] "{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}"=hex(7):5c,00,5c,00,3f,00,5c,00,56,00,\ @@ -1619693,7 +1619494,7 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "RPSessionInterval"=dword:00000001 "FirstRun"=dword:00000000 -"LastIndex"=dword:00000024 +"LastIndex"=dword:00000025 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\cfg] "DiskPercent"=dword:0000000f @@ -1619707,7 +1619508,7 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\Volatile] "NestingLevel"=dword:00000000 -"StartNesting"=hex(b):2a,4f,59,65,30,d7,cd,01 +"StartNesting"=hex(b):8a,47,27,c5,30,d7,cd,01 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server] @@ -1733955,40 +1733756,6 @@ "Language"=dword:00000000 "DisplayName"="Microsoft Office File Validation Add-In" -[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B3F6BC75-BF89-46BB-8A55-74F373F179BE}] -"AuthorizedCDFPrefix"="" -"Comments"="" -"Contact"="" -"DisplayVersion"="1.0.3" -"HelpLink"="" -"HelpTelephone"="" -"InstallDate"="20121211" -"InstallLocation"="C:\\Program Files (x86)\\" -"InstallSource"="C:\\Users\\64-7-W~1\\AppData\\Local\\Temp\\pbC3CF\\installers\\" -"ModifyPath"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,\ - 00,65,00,20,00,2f,00,58,00,7b,00,42,00,33,00,46,00,36,00,42,00,43,00,37,00,\ - 35,00,2d,00,42,00,46,00,38,00,39,00,2d,00,34,00,36,00,42,00,42,00,2d,00,38,\ - 00,41,00,35,00,35,00,2d,00,37,00,34,00,46,00,33,00,37,00,33,00,46,00,31,00,\ - 37,00,39,00,42,00,45,00,7d,00,00,00 -"NoModify"=dword:00000001 -"Publisher"="Polderland Language & Speech Technology bv" -"Readme"="" -"Size"="" -"EstimatedSize"=dword:00002208 -"UninstallString"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\ - 78,00,65,00,20,00,2f,00,58,00,7b,00,42,00,33,00,46,00,36,00,42,00,43,00,37,\ - 00,35,00,2d,00,42,00,46,00,38,00,39,00,2d,00,34,00,36,00,42,00,42,00,2d,00,\ - 38,00,41,00,35,00,35,00,2d,00,37,00,34,00,46,00,33,00,37,00,33,00,46,00,31,\ - 00,37,00,39,00,42,00,45,00,7d,00,00,00 -"URLInfoAbout"="http://www.polderland.nl" -"URLUpdateInfo"="" -"VersionMajor"=dword:00000001 -"VersionMinor"=dword:00000000 -"WindowsInstaller"=dword:00000001 -"Version"=dword:01000003 -"Language"=dword:00000409 -"DisplayName"="Sámi Proofing Tools" - [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841] @="KB2160841" "NoRemove"=dword:00000001 @@ -2049213,7 +2048980,7 @@ [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\Settings\LanguageConfiguration] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings] -"StringCacheGeneration"=dword:000000a8 +"StringCacheGeneration"=dword:000000a9 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\UILanguages] @@ -2092052,13 +2091819,13 @@ "AddressType"=dword:00000000 "IsServerNapAware"=dword:00000000 "DhcpConnForceBroadcastFlag"=dword:00000001 -"DhcpInterfaceOptions"=hex:36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,\ - c5,c7,50,0a,00,02,02,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,c5,\ - c7,50,00,01,51,80,06,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,c5,c7,\ - 50,0a,00,02,03,03,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,c5,c7,50,\ - 0a,00,02,02,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,c5,c7,50,ff,\ - ff,ff,00,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,98,c5,c7,50,05,00,\ - 00,00,fc,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,48,73,c6,50 +"DhcpInterfaceOptions"=hex:36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,\ + c6,c7,50,0a,00,02,02,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,c6,\ + c7,50,00,01,51,80,06,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,c6,c7,\ + 50,0a,00,02,03,03,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,c6,c7,50,\ + 0a,00,02,02,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,c6,c7,50,ff,\ + ff,ff,00,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,15,c6,c7,50,05,00,\ + 00,00,fc,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,54,74,c6,50 "DhcpGatewayHardware"=hex:0a,00,02,02,06,00,00,00,52,54,00,12,35,02 "DhcpGatewayHardwareCount"=dword:00000001 "DhcpNameServer"="10.0.2.3" @@ -2093528,47 +2093295,47 @@ 07,00,00,7c,07,00,00,d1,07,00,00,01,00,00,00,00,00,00,00,01,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"SppCreate (Enter)"=hex:48,00,00,00,00,00,00,00,de,13,5e,65,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppCreate (Enter)"=hex:48,00,00,00,00,00,00,00,8a,47,27,c5,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"SppGatherWriterMetadata (Enter)"=hex:48,00,00,00,00,00,00,00,9a,b4,c3,66,30,\ - d7,cd,01,50,05,00,00,84,0b,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppGatherWriterMetadata (Enter)"=hex:48,00,00,00,00,00,00,00,98,6e,2e,c5,30,\ + d7,cd,01,4c,03,00,00,a0,0b,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"SppGatherWriterMetadata (Leave)"=hex:48,00,00,00,00,00,00,00,a4,6a,5e,7a,30,\ - d7,cd,01,50,05,00,00,84,0b,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\ +"SppGatherWriterMetadata (Leave)"=hex:48,00,00,00,00,00,00,00,29,9d,7e,cc,30,\ + d7,cd,01,4c,03,00,00,a0,0b,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"SppAddInterestingComponents (Enter)"=hex:48,00,00,00,00,00,00,00,a4,6a,5e,7a,\ - 30,d7,cd,01,50,05,00,00,84,0b,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\ +"SppAddInterestingComponents (Enter)"=hex:48,00,00,00,00,00,00,00,29,9d,7e,cc,\ + 30,d7,cd,01,4c,03,00,00,a0,0b,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00 -"SppAddInterestingComponents (Leave)"=hex:48,00,00,00,00,00,00,00,24,01,f7,7a,\ - 30,d7,cd,01,50,05,00,00,84,0b,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\ +"SppAddInterestingComponents (Leave)"=hex:48,00,00,00,00,00,00,00,93,5d,e0,cc,\ + 30,d7,cd,01,4c,03,00,00,a0,0b,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00 -"SppCreate (Leave)"=hex:48,00,00,00,00,00,00,00,30,2c,fe,82,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppCreate (Leave)"=hex:48,00,00,00,00,00,00,00,bb,a9,c4,d3,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\SystemRestore] -"SrCreateRp (Enter)"=hex:48,00,00,00,00,00,00,00,2a,4f,59,65,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SrCreateRp (Enter)"=hex:48,00,00,00,00,00,00,00,8a,47,27,c5,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"SrCreateRp (Leave)"=hex:48,00,00,00,00,00,00,00,30,2c,fe,82,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SrCreateRp (Leave)"=hex:48,00,00,00,00,00,00,00,bb,a9,c4,d3,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\ASR Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,0a,ed,fc,66,30,d7,cd,01,fc,0b,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,92,f6,56,c5,30,d7,cd,01,fc,0b,\ 00,00,b8,0b,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,20,c3,33,67,30,d7,cd,01,fc,0b,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,d2,41,a3,c5,30,d7,cd,01,fc,0b,\ 00,00,b8,0b,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 @@ -2093576,583 +2093343,583 @@ [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\BITS Writer] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\COM+ REGDB Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,64,4f,ff,66,30,d7,cd,01,fc,0b,\ - 00,00,d4,08,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,8c,7e,7f,c5,30,d7,cd,01,fc,0b,\ + 00,00,e4,08,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,20,c3,33,67,30,d7,cd,01,fc,0b,\ - 00,00,d4,08,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,4e,6a,8b,c5,30,d7,cd,01,fc,0b,\ + 00,00,e4,08,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,2a,a6,ff,7b,30,d7,cd,01,fc,\ - 0b,00,00,d4,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,89,a4,89,cd,30,d7,cd,01,fc,\ + 0b,00,00,70,08,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,36,c3,df,7c,30,d7,cd,01,fc,\ - 0b,00,00,d4,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,c1,40,a6,cd,30,d7,cd,01,fc,\ + 0b,00,00,70,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,36,c3,df,7c,30,\ - d7,cd,01,fc,0b,00,00,d4,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,c1,40,a6,cd,30,\ + d7,cd,01,fc,0b,00,00,70,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,2a,d3,30,7d,30,d7,cd,01,fc,0b,\ - 00,00,b8,0b,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,03,c3,4a,ce,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,de,97,35,7d,30,d7,cd,01,fc,0b,\ - 00,00,b8,0b,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,11,ea,51,ce,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,26,92,b1,7d,30,d7,cd,01,\ - fc,0b,00,00,80,0a,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,4d,f4,1e,cf,30,d7,cd,01,\ + fc,0b,00,00,7c,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,c4,ad,b0,7e,30,d7,cd,01,\ - fc,0b,00,00,80,0a,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,a1,0b,7b,d0,30,d7,cd,01,\ + fc,0b,00,00,7c,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,c4,\ - ad,b0,7e,30,d7,cd,01,fc,0b,00,00,80,0a,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,a1,\ + 0b,7b,d0,30,d7,cd,01,fc,0b,00,00,7c,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,f6,2b,58,81,30,d7,cd,01,fc,0b,00,\ - 00,84,0a,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,23,06,9d,d2,30,d7,cd,01,fc,0b,00,\ + 00,80,0a,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,f6,2b,58,81,30,d7,cd,01,fc,0b,00,\ - 00,84,0a,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,23,06,9d,d2,30,d7,cd,01,fc,0b,00,\ + 00,80,0a,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,f6,2b,\ - 58,81,30,d7,cd,01,fc,0b,00,00,84,0a,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,23,06,\ + 9d,d2,30,d7,cd,01,fc,0b,00,00,80,0a,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,f6,2b,58,81,30,d7,cd,\ - 01,fc,0b,00,00,a4,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,\ + 01,fc,0b,00,00,34,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,\ - 48,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,15,0c,c7,d3,30,d7,cd,01,fc,0b,00,00,\ + 80,0a,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,\ - 01,fc,0b,00,00,a4,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,15,0c,c7,d3,30,d7,cd,\ + 01,fc,0b,00,00,34,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,\ - 48,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,15,0c,c7,d3,30,d7,cd,01,fc,0b,00,00,\ + 80,0a,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,15,0c,c7,d3,30,d7,cd,01,fc,0b,00,00,80,0a,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,54,56,6d,84,30,d7,cd,01,fc,\ - 0b,00,00,84,0a,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,1d,e8,27,d5,30,d7,cd,01,fc,\ + 0b,00,00,80,0a,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,ae,b8,6f,84,30,d7,cd,01,fc,\ - 0b,00,00,84,0a,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,77,4a,2a,d5,30,d7,cd,01,fc,\ + 0b,00,00,80,0a,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,ae,b8,6f,84,30,d7,cd,01,fc,0b,00,00,84,0a,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,77,4a,2a,d5,30,d7,cd,01,fc,0b,00,00,80,0a,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - fc,0b,00,00,48,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,17,f2,da,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - fc,0b,00,00,48,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,17,f2,da,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Lovelace] -"OPEN_VOLUME_HANDLE (Enter)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Enter)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"OPEN_VOLUME_HANDLE (Leave)"=hex:48,00,00,00,00,00,00,00,7a,30,a1,82,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Leave)"=hex:48,00,00,00,00,00,00,00,c7,99,73,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:48,00,00,00,00,00,00,00,7a,30,a1,82,30,d7,\ - cd,01,fc,0b,00,00,5c,09,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:48,00,00,00,00,00,00,00,c7,99,73,d3,30,d7,\ + cd,01,fc,0b,00,00,9c,04,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:48,00,00,00,00,00,00,00,06,b7,e8,82,30,d7,\ - cd,01,fc,0b,00,00,5c,09,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:48,00,00,00,00,00,00,00,67,bf,99,d3,30,d7,\ + cd,01,fc,0b,00,00,9c,04,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Enter)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Enter)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"IOCTL_RELEASE (Leave)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Leave)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Lovelace(__?_Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}_)] -"OPEN_VOLUME_HANDLE (Enter)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,bc,09,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Enter)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,bc,0a,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"OPEN_VOLUME_HANDLE (Leave)"=hex:48,00,00,00,00,00,00,00,7a,30,a1,82,30,d7,cd,\ - 01,fc,0b,00,00,bc,09,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Leave)"=hex:48,00,00,00,00,00,00,00,c7,99,73,d3,30,d7,cd,\ + 01,fc,0b,00,00,bc,0a,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:48,00,00,00,00,00,00,00,7a,30,a1,82,30,d7,\ - cd,01,fc,0b,00,00,bc,09,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:48,00,00,00,00,00,00,00,c7,99,73,d3,30,d7,\ + cd,01,fc,0b,00,00,bc,0a,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:48,00,00,00,00,00,00,00,06,b7,e8,82,30,d7,\ - cd,01,fc,0b,00,00,bc,09,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:48,00,00,00,00,00,00,00,67,bf,99,d3,30,d7,\ + cd,01,fc,0b,00,00,bc,0a,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Enter)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,fc,\ - 0b,00,00,bc,09,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Enter)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,fc,\ + 0b,00,00,bc,0a,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"IOCTL_RELEASE (Leave)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,fc,\ - 0b,00,00,bc,09,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Leave)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,fc,\ + 0b,00,00,bc,0a,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\MSSearch Service Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,56,28,f8,66,30,d7,cd,01,d0,06,\ - 00,00,fc,08,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,92,f6,56,c5,30,d7,cd,01,d0,06,\ + 00,00,c8,0b,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,20,c3,33,67,30,d7,cd,01,d0,06,\ - 00,00,fc,08,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,8c,7e,7f,c5,30,d7,cd,01,d0,06,\ + 00,00,c8,0b,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,de,6a,04,7c,30,d7,cd,01,d0,\ - 06,00,00,fc,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,4b,90,95,cd,30,d7,cd,01,d0,\ + 06,00,00,c8,0b,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,58,89,c5,7c,30,d7,cd,01,d0,\ - 06,00,00,fc,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,15,2b,d1,cd,30,d7,cd,01,d0,\ + 06,00,00,c8,0b,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,58,89,c5,7c,30,\ - d7,cd,01,d0,06,00,00,fc,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,15,2b,d1,cd,30,\ + d7,cd,01,d0,06,00,00,c8,0b,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,a6,fb,18,7d,30,d7,cd,01,d0,06,\ - 00,00,fc,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,11,ea,51,ce,30,d7,cd,01,d0,06,\ + 00,00,c8,0b,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,b4,22,20,7d,30,d7,cd,01,d0,06,\ - 00,00,fc,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,c5,ae,56,ce,30,d7,cd,01,d0,06,\ + 00,00,c8,0b,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,3c,68,e8,7d,30,d7,cd,01,\ - d0,06,00,00,dc,06,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,09,68,53,cf,30,d7,cd,01,\ + d0,06,00,00,c8,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,fc,49,cd,7e,30,d7,cd,01,\ - d0,06,00,00,dc,06,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,71,1e,8e,d0,30,d7,cd,01,\ + d0,06,00,00,c8,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,fc,\ - 49,cd,7e,30,d7,cd,01,d0,06,00,00,dc,06,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,71,\ + 1e,8e,d0,30,d7,cd,01,d0,06,00,00,c8,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,50,8e,5a,81,30,d7,cd,01,d0,06,00,\ - 00,dc,06,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,01,d0,06,00,\ + 00,c8,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,50,8e,5a,81,30,d7,cd,01,d0,06,00,\ - 00,dc,06,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,01,d0,06,00,\ + 00,c8,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,50,8e,\ - 5a,81,30,d7,cd,01,d0,06,00,00,dc,06,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,7d,68,\ + 9f,d2,30,d7,cd,01,d0,06,00,00,c8,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,50,8e,5a,81,30,d7,cd,\ - 01,d0,06,00,00,34,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,\ + 01,d0,06,00,00,58,05,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,ec,9f,32,83,30,d7,cd,01,d0,06,00,00,\ - dc,06,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,7d,95,d0,d3,30,d7,cd,01,d0,06,00,00,\ + c8,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,ec,9f,32,83,30,d7,cd,\ - 01,d0,06,00,00,34,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,7d,95,d0,d3,30,d7,cd,\ + 01,d0,06,00,00,58,05,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,ec,9f,32,83,30,d7,cd,01,d0,06,00,00,\ - dc,06,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,7d,95,d0,d3,30,d7,cd,01,d0,06,00,00,\ + c8,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,ec,9f,32,83,30,d7,cd,01,d0,06,00,00,dc,06,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,7d,95,d0,d3,30,d7,cd,01,d0,06,00,00,c8,0b,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,08,1b,72,84,30,d7,cd,01,d0,\ - 06,00,00,dc,06,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,d1,ac,2c,d5,30,d7,cd,01,d0,\ + 06,00,00,c8,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,b2,53,51,86,30,d7,cd,01,d0,\ - 06,00,00,dc,06,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,3d,a4,e6,d5,30,d7,cd,01,d0,\ + 06,00,00,c8,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,b2,53,51,86,30,d7,cd,01,d0,06,00,00,dc,06,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,3d,a4,e6,d5,30,d7,cd,01,d0,06,00,00,c8,0b,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,66,c6,11,ad,30,d7,cd,01,\ - d0,06,00,00,dc,06,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + d0,06,00,00,04,08,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,66,c6,11,ad,30,d7,cd,01,\ - d0,06,00,00,dc,06,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + d0,06,00,00,04,08,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Registry Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,b0,8a,fa,66,30,d7,cd,01,fc,0b,\ - 00,00,b0,0b,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,92,f6,56,c5,30,d7,cd,01,fc,0b,\ + 00,00,a4,0a,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,20,c3,33,67,30,d7,cd,01,fc,0b,\ - 00,00,b0,0b,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,70,30,71,c5,30,d7,cd,01,fc,0b,\ + 00,00,a4,0a,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,dc,33,ac,7b,30,d7,cd,01,fc,\ - 0b,00,00,d4,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,05,cd,71,cd,30,d7,cd,01,fc,\ + 0b,00,00,b8,0b,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,f2,09,e3,7b,30,d7,cd,01,fc,\ - 0b,00,00,d4,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,d5,df,84,cd,30,d7,cd,01,fc,\ + 0b,00,00,b8,0b,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,f2,09,e3,7b,30,\ - d7,cd,01,fc,0b,00,00,d4,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,d5,df,84,cd,30,\ + d7,cd,01,fc,0b,00,00,b8,0b,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,00,5e,1b,7d,30,d7,cd,01,fc,0b,\ - 00,00,d4,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,4f,fe,45,ce,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,68,e7,24,7d,30,d7,cd,01,fc,0b,\ - 00,00,d4,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,03,c3,4a,ce,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,cc,2f,af,7d,30,d7,cd,01,\ - fc,0b,00,00,94,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,6f,ba,04,cf,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,c4,ad,b0,7e,30,d7,cd,01,\ - fc,0b,00,00,94,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,c3,d1,60,d0,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,c4,\ - ad,b0,7e,30,d7,cd,01,fc,0b,00,00,94,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,c3,\ + d1,60,d0,30,d7,cd,01,fc,0b,00,00,c4,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,1a,29,96,81,30,d7,cd,01,fc,0b,00,\ - 00,94,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,2b,b5,cc,d2,30,d7,cd,01,fc,0b,00,\ + 00,48,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,01,fc,0b,00,\ - 00,94,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,01,fc,0b,00,\ + 00,48,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,68,9b,\ - e9,81,30,d7,cd,01,fc,0b,00,00,94,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,ef,d7,\ + 30,d3,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,c8,08,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,c4,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,d0,51,24,83,30,d7,cd,01,fc,0b,00,00,\ - 84,0a,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,\ + 48,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,d0,51,24,83,30,d7,cd,\ - 01,fc,0b,00,00,c8,08,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,\ + 01,fc,0b,00,00,c4,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,d0,51,24,83,30,d7,cd,01,fc,0b,00,00,\ - 84,0a,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,\ + 48,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,d0,51,24,83,30,d7,cd,01,fc,0b,00,00,84,0a,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,a0,91,68,84,30,d7,cd,01,fc,\ - 0b,00,00,48,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,c3,85,25,d5,30,d7,cd,01,fc,\ + 0b,00,00,c4,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,fa,f3,6a,84,30,d7,cd,01,fc,\ - 0b,00,00,48,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,1d,e8,27,d5,30,d7,cd,01,fc,\ + 0b,00,00,c4,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,fa,f3,6a,84,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,1d,e8,27,d5,30,d7,cd,01,fc,0b,00,00,c4,0b,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - fc,0b,00,00,48,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,17,f2,da,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - fc,0b,00,00,48,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,17,f2,da,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Shadow Copy Optimization Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,0a,ed,fc,66,30,d7,cd,01,fc,0b,\ - 00,00,70,03,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,ec,58,59,c5,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,c6,60,31,67,30,d7,cd,01,fc,0b,\ - 00,00,70,03,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,24,f5,75,c5,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,0e,58,f1,7b,30,d7,cd,01,fc,\ - 0b,00,00,b0,0b,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,c7,b8,7d,cd,30,d7,cd,01,fc,\ + 0b,00,00,e4,08,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,e2,d8,b4,7c,30,d7,cd,01,fc,\ - 0b,00,00,b0,0b,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,f1,2d,93,cd,30,d7,cd,01,fc,\ + 0b,00,00,e4,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,e2,d8,b4,7c,30,\ - d7,cd,01,fc,0b,00,00,b0,0b,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,f1,2d,93,cd,30,\ + d7,cd,01,fc,0b,00,00,e4,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,b4,22,20,7d,30,d7,cd,01,fc,0b,\ - 00,00,b0,0b,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,03,c3,4a,ce,30,d7,cd,01,fc,0b,\ + 00,00,e4,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,76,0e,2c,7d,30,d7,cd,01,fc,0b,\ - 00,00,b0,0b,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,5d,25,4d,ce,30,d7,cd,01,fc,0b,\ + 00,00,e4,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,72,cd,ac,7d,30,d7,cd,01,\ - fc,0b,00,00,7c,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,37,1e,e8,ce,30,d7,cd,01,\ + fc,0b,00,00,94,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,6a,4b,ae,7e,30,d7,cd,01,\ - fc,0b,00,00,7c,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,2f,9c,e9,cf,30,d7,cd,01,\ + fc,0b,00,00,94,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,6a,\ - 4b,ae,7e,30,d7,cd,01,fc,0b,00,00,7c,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,2f,\ + 9c,e9,cf,30,d7,cd,01,fc,0b,00,00,94,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,46,a8,d2,80,30,d7,cd,01,fc,0b,00,\ - 00,c4,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,3b,e6,fa,d1,30,d7,cd,01,fc,0b,00,\ + 00,7c,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,46,a8,d2,80,30,d7,cd,01,fc,0b,00,\ - 00,c4,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,3b,e6,fa,d1,30,d7,cd,01,fc,0b,00,\ + 00,7c,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,46,a8,\ - d2,80,30,d7,cd,01,fc,0b,00,00,c4,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,3b,e6,\ + fa,d1,30,d7,cd,01,fc,0b,00,00,7c,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,08,94,de,80,30,d7,cd,\ - 01,fc,0b,00,00,90,09,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,49,0d,02,d2,30,d7,cd,\ + 01,fc,0b,00,00,8c,06,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,\ - 84,0a,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,\ + 7c,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,\ - 01,fc,0b,00,00,90,09,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,\ + 01,fc,0b,00,00,8c,06,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,\ - 84,0a,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,\ + 7c,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,84,0a,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,7c,0b,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,ae,b8,6f,84,30,d7,cd,01,fc,\ - 0b,00,00,94,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,77,4a,2a,d5,30,d7,cd,01,fc,\ + 0b,00,00,48,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,fa,74,f5,a9,30,d7,cd,01,fc,\ - 0b,00,00,94,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,3b,95,b6,fa,30,d7,cd,01,fc,\ + 0b,00,00,48,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,fa,74,f5,a9,30,d7,cd,01,fc,0b,00,00,94,0b,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,3b,95,b6,fa,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,2e,2a,f5,ac,30,d7,cd,01,\ - fc,0b,00,00,84,0a,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,71,54,dd,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,2e,2a,f5,ac,30,d7,cd,01,\ - fc,0b,00,00,84,0a,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,71,54,dd,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\SwProvider_{b5946137-7b9f-4925-af80-51abd60b20d5}] -"PROVIDER_BEGINPREPARE (Enter)"=hex:48,00,00,00,00,00,00,00,20,c0,77,7b,30,d7,\ - cd,01,fc,0b,00,00,d4,08,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"PROVIDER_BEGINPREPARE (Enter)"=hex:48,00,00,00,00,00,00,00,ef,f6,3a,cd,30,d7,\ + cd,01,fc,0b,00,00,b8,0b,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"PROVIDER_BEGINPREPARE (Leave)"=hex:48,00,00,00,00,00,00,00,20,c0,77,7b,30,d7,\ - cd,01,fc,0b,00,00,d4,08,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"PROVIDER_BEGINPREPARE (Leave)"=hex:48,00,00,00,00,00,00,00,ef,f6,3a,cd,30,d7,\ + cd,01,fc,0b,00,00,b8,0b,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"PROVIDER_ENDPREPARE (Enter)"=hex:48,00,00,00,00,00,00,00,02,95,73,7d,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_ENDPREPARE (Enter)"=hex:48,00,00,00,00,00,00,00,73,fb,83,ce,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_ENDPREPARE (Leave)"=hex:48,00,00,00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_ENDPREPARE (Leave)"=hex:48,00,00,00,00,00,00,00,59,e4,cd,ce,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_PRECOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_PRECOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_PRECOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_PRECOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_COMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,06,b7,e8,82,30,d7,cd,01,\ - fc,0b,00,00,cc,08,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_COMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,\ + fc,0b,00,00,d8,0a,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PROVIDER_COMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,\ - fc,0b,00,00,cc,08,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_COMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,\ + fc,0b,00,00,d8,0a,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PROVIDER_POSTCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_POSTCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_POSTCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_POSTCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_PREFINALCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,fa,c6,39,83,30,\ - d7,cd,01,fc,0b,00,00,5c,09,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"PROVIDER_PREFINALCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,d7,f7,d2,d3,30,\ + d7,cd,01,fc,0b,00,00,9c,04,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"PROVIDER_PREFINALCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,de,a5,5c,84,30,\ - d7,cd,01,fc,0b,00,00,5c,09,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"PROVIDER_PREFINALCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,3f,ae,0d,d5,30,\ + d7,cd,01,fc,0b,00,00,9c,04,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"PROVIDER_POSTFINALCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,fa,74,f5,a9,30,\ - d7,cd,01,fc,0b,00,00,5c,09,00,00,07,04,00,00,01,00,00,00,00,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"PROVIDER_POSTFINALCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,3b,95,b6,fa,30,\ + d7,cd,01,fc,0b,00,00,9c,04,00,00,07,04,00,00,01,00,00,00,00,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"PROVIDER_POSTFINALCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,aa,52,dd,ac,30,\ - d7,cd,01,fc,0b,00,00,5c,09,00,00,07,04,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"PROVIDER_POSTFINALCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,df,55,be,fc,30,\ + d7,cd,01,fc,0b,00,00,9c,04,00,00,07,04,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\System Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,0a,ed,fc,66,30,d7,cd,01,0c,02,\ - 00,00,c4,02,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,92,f6,56,c5,30,d7,cd,01,0c,02,\ + 00,00,7c,05,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,62,da,92,72,30,d7,cd,01,0c,02,\ - 00,00,c4,02,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,c6,7e,25,c7,30,d7,cd,01,0c,02,\ + 00,00,7c,05,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,6e,32,cb,7b,30,d7,cd,01,0c,\ - 02,00,00,c4,02,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,4b,90,95,cd,30,d7,cd,01,0c,\ + 02,00,00,7c,05,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,14,fd,f9,7c,30,d7,cd,01,0c,\ - 02,00,00,c4,02,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,fb,13,1b,ce,30,d7,cd,01,0c,\ + 02,00,00,7c,05,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,14,fd,f9,7c,30,\ - d7,cd,01,0c,02,00,00,c4,02,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,fb,13,1b,ce,30,\ + d7,cd,01,0c,02,00,00,7c,05,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,68,e7,24,7d,30,d7,cd,01,0c,02,\ - 00,00,7c,05,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,1f,11,59,ce,30,d7,cd,01,0c,02,\ + 00,00,dc,0a,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,d0,70,2e,7d,30,d7,cd,01,0c,02,\ - 00,00,7c,05,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,79,73,5b,ce,30,d7,cd,01,0c,02,\ + 00,00,dc,0a,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,1a,a2,02,7e,30,d7,cd,01,\ - 0c,02,00,00,7c,05,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,95,ee,9a,cf,30,d7,cd,01,\ + 0c,02,00,00,dc,0a,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,7c,0d,97,80,30,d7,cd,01,\ - 0c,02,00,00,7c,05,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,33,37,cb,d1,30,d7,cd,01,\ + 0c,02,00,00,dc,0a,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,7c,\ - 0d,97,80,30,d7,cd,01,0c,02,00,00,7c,05,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,33,\ + 37,cb,d1,30,d7,cd,01,0c,02,00,00,dc,0a,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,50,8e,5a,81,30,d7,cd,01,0c,02,00,\ - 00,c4,02,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,01,0c,02,00,\ + 00,7c,05,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,0c,02,00,\ - 00,c4,02,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,4d,7b,b2,d2,30,d7,cd,01,0c,02,00,\ + 00,7c,05,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,88,2a,\ - 77,81,30,d7,cd,01,0c,02,00,00,c4,02,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,4d,7b,\ + b2,d2,30,d7,cd,01,0c,02,00,00,7c,05,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,\ - 01,0c,02,00,00,34,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,\ + 01,0c,02,00,00,6c,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,92,3d,30,83,30,d7,cd,01,0c,02,00,00,\ - c4,02,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,c9,d0,cb,d3,30,d7,cd,01,0c,02,00,00,\ + 7c,05,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,92,3d,30,83,30,d7,cd,\ - 01,0c,02,00,00,34,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,c9,d0,cb,d3,30,d7,cd,\ + 01,0c,02,00,00,6c,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,92,3d,30,83,30,d7,cd,01,0c,02,00,00,\ - c4,02,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,c9,d0,cb,d3,30,d7,cd,01,0c,02,00,00,\ + 7c,05,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,92,3d,30,83,30,d7,cd,01,0c,02,00,00,c4,02,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,c9,d0,cb,d3,30,d7,cd,01,0c,02,00,00,7c,05,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,62,7d,74,84,30,d7,cd,01,0c,\ - 02,00,00,c4,02,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,2b,0f,2f,d5,30,d7,cd,01,0c,\ + 02,00,00,7c,05,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,98,0f,6a,85,30,d7,cd,01,0c,\ - 02,00,00,c4,02,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,95,cf,90,d5,30,d7,cd,01,0c,\ + 02,00,00,7c,05,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,98,0f,6a,85,30,d7,cd,01,0c,02,00,00,c4,02,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,95,cf,90,d5,30,d7,cd,01,0c,02,00,00,7c,05,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,66,c6,11,ad,30,d7,cd,01,\ - 0c,02,00,00,7c,05,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,71,54,dd,fc,30,d7,cd,01,\ + 0c,02,00,00,dc,0a,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,66,c6,11,ad,30,d7,cd,01,\ - 0c,02,00,00,7c,05,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,71,54,dd,fc,30,d7,cd,01,\ + 0c,02,00,00,dc,0a,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\VolSnap] @@ -2094173,11 +2093940,11 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}ComputeIgnorableProduct (Enter)"=hex:48,\ - 00,00,00,00,00,00,00,ce,4f,1b,ad,30,d7,cd,01,00,00,00,00,00,00,00,00,0c,00,\ + 00,00,00,00,00,00,00,4f,8e,f7,fc,30,d7,cd,01,00,00,00,00,00,00,00,00,0c,00,\ 00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}ComputeIgnorableProduct (Leave)"=hex:48,\ - 00,00,00,00,00,00,00,ce,4f,1b,ad,30,d7,cd,01,00,00,00,00,00,00,00,00,0d,00,\ + 00,00,00,00,00,00,00,4f,8e,f7,fc,30,d7,cd,01,00,00,00,00,00,00,00,00,0d,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}Activate (Leave)"=hex:48,00,00,00,\ @@ -2094189,19 +2093956,19 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}DeleteProcess (Enter)"=hex:48,00,\ - 00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,00,00,00,00,00,00,00,00,12,00,00,\ + 00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,00,00,00,00,00,00,00,00,12,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}SetIgnorable (Enter)"=hex:48,00,\ - 00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,00,00,00,00,00,00,00,00,0a,00,00,\ + 00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,00,00,00,00,00,00,00,00,0a,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}SetIgnorable (Leave)"=hex:48,00,\ - 00,00,00,00,00,00,1c,8d,1f,83,30,d7,cd,01,00,00,00,00,00,00,00,00,0b,00,00,\ + 00,00,00,00,00,00,33,91,2d,d4,30,d7,cd,01,00,00,00,00,00,00,00,00,0b,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}AdjustBitmap (Enter)"=hex:48,00,\ - 00,00,00,00,00,00,50,f0,da,ac,30,d7,cd,01,00,00,00,00,00,00,00,00,04,00,00,\ + 00,00,00,00,00,00,2b,91,b9,fc,30,d7,cd,01,00,00,00,00,00,00,00,00,04,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}ValidateDiffAreaFiles (Enter)"=hex:48,\ @@ -2094221,254 +2093988,254 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}AdjustBitmap (Leave)"=hex:48,00,\ - 00,00,00,00,00,00,ce,4f,1b,ad,30,d7,cd,01,00,00,00,00,00,00,00,00,05,00,00,\ + 00,00,00,00,00,00,4f,8e,f7,fc,30,d7,cd,01,00,00,00,00,00,00,00,00,05,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}DeleteProcess (Leave)"=hex:48,00,\ - 00,00,00,00,00,00,a8,13,67,83,30,d7,cd,01,00,00,00,00,00,00,00,00,13,00,00,\ + 00,00,00,00,00,00,7b,8b,a9,d4,30,d7,cd,01,00,00,00,00,00,00,00,00,13,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}PrepareForSnapshot (Enter)"=hex:48,\ - 00,00,00,00,00,00,00,48,58,97,7d,30,d7,cd,01,f0,0b,00,00,68,02,00,00,00,00,\ + 00,00,00,00,00,00,00,e9,ab,94,ce,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,00,00,\ 00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}PreExposure (Enter)"=hex:48,00,00,\ - 00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,01,f0,0b,00,00,68,02,00,00,02,00,00,00,\ + 00,00,00,00,00,59,e4,cd,ce,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,02,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}PreExposure (Leave)"=hex:48,00,00,\ - 00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,01,f0,0b,00,00,68,02,00,00,03,00,00,00,\ + 00,00,00,00,00,59,e4,cd,ce,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,03,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}PrepareForSnapshot (Leave)"=hex:48,\ - 00,00,00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,01,f0,0b,00,00,68,02,00,00,01,00,\ + 00,00,00,00,00,00,00,59,e4,cd,ce,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,01,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}EndCommit (Enter)"=hex:48,00,00,\ - 00,00,00,00,00,60,19,eb,82,30,d7,cd,01,f0,0b,00,00,68,02,00,00,06,00,00,00,\ + 00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,06,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}EndCommit (Leave)"=hex:48,00,00,\ - 00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,f0,0b,00,00,68,02,00,00,07,00,00,00,\ + 00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,07,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\VssapiPublisher] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,5c,a0,cf,66,30,d7,cd,01,50,05,\ - 00,00,38,0a,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,98,6e,2e,c5,30,d7,cd,01,4c,03,\ + 00,00,6c,08,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,d8,8a,a3,72,30,d7,cd,01,50,05,\ - 00,00,38,0a,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,ce,2d,55,c7,30,d7,cd,01,4c,03,\ + 00,00,6c,08,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,7a,22,7a,7b,30,d7,cd,01,50,\ - 05,00,00,a0,04,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,49,59,3d,cd,30,d7,cd,01,4c,\ + 03,00,00,d0,0b,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,6e,5f,fc,7c,30,d7,cd,01,50,\ - 05,00,00,a0,04,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,55,76,1d,ce,30,d7,cd,01,4c,\ + 03,00,00,d0,0b,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,c8,c1,fe,7c,30,d7,cd,01,50,05,\ - 00,00,0c,07,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,09,3b,22,ce,30,d7,cd,01,4c,03,\ + 00,00,9c,0a,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,de,97,35,7d,30,d7,cd,01,50,05,\ - 00,00,0c,07,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,79,73,5b,ce,30,d7,cd,01,4c,03,\ + 00,00,9c,0a,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"DOSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,a8,32,71,7d,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"DOSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,73,fb,83,ce,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"DOSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,50,05,\ - 00,00,38,06,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"DOSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,4c,03,\ + 00,00,64,0a,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\VssvcPublisher] -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,01,\ - fc,0b,00,00,5c,09,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,b3,46,d0,ce,30,d7,cd,01,\ + fc,0b,00,00,9c,04,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,98,5b,a5,80,30,d7,cd,01,\ - fc,0b,00,00,5c,09,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,41,5e,d2,d1,30,d7,cd,01,\ + fc,0b,00,00,9c,04,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,98,5b,a5,80,30,d7,cd,01,fc,0b,00,\ - 00,5c,09,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,41,5e,d2,d1,30,d7,cd,01,fc,0b,00,\ + 00,9c,04,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE_FRONT (Enter)"=hex:48,00,00,00,00,00,00,00,98,5b,a5,80,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_FRONT (Enter)"=hex:48,00,00,00,00,00,00,00,41,5e,d2,d1,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_FRONT (Leave)"=hex:48,00,00,00,00,00,00,00,be,8f,3b,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_FRONT (Leave)"=hex:48,00,00,00,00,00,00,00,e9,32,28,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_BACK (Enter)"=hex:48,00,00,00,00,00,00,00,be,8f,3b,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_BACK (Enter)"=hex:48,00,00,00,00,00,00,00,e9,32,28,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_BACK (Leave)"=hex:48,00,00,00,00,00,00,00,da,dd,49,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_BACK (Leave)"=hex:48,00,00,00,00,00,00,00,eb,69,80,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_SYSTEM (Enter)"=hex:48,00,00,00,00,00,00,00,da,dd,49,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_SYSTEM (Enter)"=hex:48,00,00,00,00,00,00,00,eb,69,80,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_SYSTEM (Leave)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_SYSTEM (Leave)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_KTM (Enter)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_KTM (Enter)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"FREEZE_KTM (Leave)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_KTM (Leave)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"FREEZE_RM (Enter)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_RM (Enter)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"FREEZE_RM (Leave)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_RM (Leave)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,01,fc,0b,00,\ - 00,5c,09,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,01,fc,0b,00,\ + 00,9c,04,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"THAW_KTM (Enter)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW_KTM (Enter)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"THAW_KTM (Leave)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW_KTM (Leave)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,fc,0b,00,00,\ - 5c,09,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,fc,0b,00,00,\ + 9c,04,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,fa,c6,39,83,30,d7,cd,01,fc,0b,00,00,\ - 5c,09,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,d7,f7,d2,d3,30,d7,cd,01,fc,0b,00,00,\ + 9c,04,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,38,08,5f,84,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,3f,ae,0d,d5,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,fa,74,f5,a9,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,f5,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,3b,95,b6,fa,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,f5,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,b8,79,e4,ac,30,d7,cd,01,\ - fc,0b,00,00,5c,09,00,00,fb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,df,55,be,fc,30,d7,cd,01,\ + fc,0b,00,00,9c,04,00,00,fb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,ce,4f,1b,ad,30,d7,cd,01,\ - fc,0b,00,00,5c,09,00,00,fb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + fc,0b,00,00,9c,04,00,00,fb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\WMI Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,fc,c5,f5,66,30,d7,cd,01,4c,03,\ - 00,00,78,08,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,2a,6d,4d,c5,30,d7,cd,01,4c,03,\ + 00,00,50,07,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,c6,60,31,67,30,d7,cd,01,4c,03,\ - 00,00,78,08,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,de,31,52,c5,30,d7,cd,01,4c,03,\ + 00,00,50,07,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,52,e4,bc,7b,30,d7,cd,01,4c,\ - 03,00,00,78,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,db,57,5c,cd,30,d7,cd,01,4c,\ + 03,00,00,94,07,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,92,2f,09,7c,30,d7,cd,01,4c,\ - 03,00,00,78,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,51,08,6d,cd,30,d7,cd,01,4c,\ + 03,00,00,94,07,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,92,2f,09,7c,30,\ - d7,cd,01,4c,03,00,00,78,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,51,08,6d,cd,30,\ + d7,cd,01,4c,03,00,00,94,07,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,8a,ad,0a,7d,30,d7,cd,01,4c,03,\ - 00,00,78,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,9b,39,41,ce,30,d7,cd,01,4c,03,\ + 00,00,94,07,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,f2,36,14,7d,30,d7,cd,01,4c,03,\ - 00,00,78,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,f5,9b,43,ce,30,d7,cd,01,4c,03,\ + 00,00,94,07,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,80,f4,b3,7d,30,d7,cd,01,\ - 4c,03,00,00,78,08,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,61,93,fd,ce,30,d7,cd,01,\ + 4c,03,00,00,10,01,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,10,e9,ab,7e,30,d7,cd,01,\ - 4c,03,00,00,78,08,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,9d,9d,ca,cf,30,d7,cd,01,\ + 4c,03,00,00,10,01,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,10,\ - e9,ab,7e,30,d7,cd,01,4c,03,00,00,78,08,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,9d,\ + 9d,ca,cf,30,d7,cd,01,4c,03,00,00,10,01,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,24,e2,ec,80,30,d7,cd,01,4c,03,00,\ - 00,10,01,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,65,5b,10,d2,30,d7,cd,01,4c,03,00,\ + 00,9c,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,be,8f,3b,81,30,d7,cd,01,4c,03,00,\ - 00,10,01,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,db,0b,21,d2,30,d7,cd,01,4c,03,00,\ + 00,9c,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,be,8f,\ - 3b,81,30,d7,cd,01,4c,03,00,00,10,01,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,db,0b,\ + 21,d2,30,d7,cd,01,4c,03,00,00,9c,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,be,8f,3b,81,30,d7,cd,\ - 01,4c,03,00,00,dc,09,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,e9,32,28,d2,30,d7,cd,\ + 01,4c,03,00,00,d4,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,4c,03,00,00,\ - 9c,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,23,33,ce,d3,30,d7,cd,01,4c,03,00,00,\ + 70,04,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,\ - 01,4c,03,00,00,dc,09,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,23,33,ce,d3,30,d7,cd,\ + 01,4c,03,00,00,d4,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,4c,03,00,00,\ - 9c,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,23,33,ce,d3,30,d7,cd,01,4c,03,00,00,\ + 70,04,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,0e,66,18,83,30,d7,cd,01,4c,03,00,00,9c,0b,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,23,33,ce,d3,30,d7,cd,01,4c,03,00,00,70,04,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,08,1b,72,84,30,d7,cd,01,4c,\ - 03,00,00,10,01,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,77,4a,2a,d5,30,d7,cd,01,4c,\ + 03,00,00,70,04,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,86,7a,b2,84,30,d7,cd,01,4c,\ - 03,00,00,10,01,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,d1,ac,2c,d5,30,d7,cd,01,4c,\ + 03,00,00,70,04,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,86,7a,b2,84,30,d7,cd,01,4c,03,00,00,10,01,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,d1,ac,2c,d5,30,d7,cd,01,4c,03,00,00,70,04,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - 4c,03,00,00,9c,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + 4c,03,00,00,9c,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - 4c,03,00,00,9c,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + 4c,03,00,00,9c,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Providers] @@ -2190343,7 +2190110,7 @@ [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\Settings\LanguageConfiguration] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings] -"StringCacheGeneration"=dword:000000a8 +"StringCacheGeneration"=dword:000000a9 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\UILanguages] @@ -2233182,13 +2232949,13 @@ "AddressType"=dword:00000000 "IsServerNapAware"=dword:00000000 "DhcpConnForceBroadcastFlag"=dword:00000001 -"DhcpInterfaceOptions"=hex:36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,\ - c5,c7,50,0a,00,02,02,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,c5,\ - c7,50,00,01,51,80,06,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,c5,c7,\ - 50,0a,00,02,03,03,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,c5,c7,50,\ - 0a,00,02,02,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,98,c5,c7,50,ff,\ - ff,ff,00,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,98,c5,c7,50,05,00,\ - 00,00,fc,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,48,73,c6,50 +"DhcpInterfaceOptions"=hex:36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,\ + c6,c7,50,0a,00,02,02,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,c6,\ + c7,50,00,01,51,80,06,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,c6,c7,\ + 50,0a,00,02,03,03,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,c6,c7,50,\ + 0a,00,02,02,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,15,c6,c7,50,ff,\ + ff,ff,00,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,15,c6,c7,50,05,00,\ + 00,00,fc,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,54,74,c6,50 "DhcpGatewayHardware"=hex:0a,00,02,02,06,00,00,00,52,54,00,12,35,02 "DhcpGatewayHardwareCount"=dword:00000001 "DhcpNameServer"="10.0.2.3" @@ -2234658,47 +2234425,47 @@ 07,00,00,7c,07,00,00,d1,07,00,00,01,00,00,00,00,00,00,00,01,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"SppCreate (Enter)"=hex:48,00,00,00,00,00,00,00,de,13,5e,65,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppCreate (Enter)"=hex:48,00,00,00,00,00,00,00,8a,47,27,c5,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,d0,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"SppGatherWriterMetadata (Enter)"=hex:48,00,00,00,00,00,00,00,9a,b4,c3,66,30,\ - d7,cd,01,50,05,00,00,84,0b,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppGatherWriterMetadata (Enter)"=hex:48,00,00,00,00,00,00,00,98,6e,2e,c5,30,\ + d7,cd,01,4c,03,00,00,a0,0b,00,00,d3,07,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"SppGatherWriterMetadata (Leave)"=hex:48,00,00,00,00,00,00,00,a4,6a,5e,7a,30,\ - d7,cd,01,50,05,00,00,84,0b,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\ +"SppGatherWriterMetadata (Leave)"=hex:48,00,00,00,00,00,00,00,29,9d,7e,cc,30,\ + d7,cd,01,4c,03,00,00,a0,0b,00,00,d3,07,00,00,01,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"SppAddInterestingComponents (Enter)"=hex:48,00,00,00,00,00,00,00,a4,6a,5e,7a,\ - 30,d7,cd,01,50,05,00,00,84,0b,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\ +"SppAddInterestingComponents (Enter)"=hex:48,00,00,00,00,00,00,00,29,9d,7e,cc,\ + 30,d7,cd,01,4c,03,00,00,a0,0b,00,00,d4,07,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00 -"SppAddInterestingComponents (Leave)"=hex:48,00,00,00,00,00,00,00,24,01,f7,7a,\ - 30,d7,cd,01,50,05,00,00,84,0b,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\ +"SppAddInterestingComponents (Leave)"=hex:48,00,00,00,00,00,00,00,93,5d,e0,cc,\ + 30,d7,cd,01,4c,03,00,00,a0,0b,00,00,d4,07,00,00,01,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00 -"SppCreate (Leave)"=hex:48,00,00,00,00,00,00,00,30,2c,fe,82,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SppCreate (Leave)"=hex:48,00,00,00,00,00,00,00,bb,a9,c4,d3,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,d0,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SystemRestore] -"SrCreateRp (Enter)"=hex:48,00,00,00,00,00,00,00,2a,4f,59,65,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SrCreateRp (Enter)"=hex:48,00,00,00,00,00,00,00,8a,47,27,c5,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,d5,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"SrCreateRp (Leave)"=hex:48,00,00,00,00,00,00,00,30,2c,fe,82,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"SrCreateRp (Leave)"=hex:48,00,00,00,00,00,00,00,bb,a9,c4,d3,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,d5,07,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\ASR Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,0a,ed,fc,66,30,d7,cd,01,fc,0b,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,92,f6,56,c5,30,d7,cd,01,fc,0b,\ 00,00,b8,0b,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,20,c3,33,67,30,d7,cd,01,fc,0b,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,d2,41,a3,c5,30,d7,cd,01,fc,0b,\ 00,00,b8,0b,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 @@ -2234706,583 +2234473,583 @@ [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\BITS Writer] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\COM+ REGDB Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,64,4f,ff,66,30,d7,cd,01,fc,0b,\ - 00,00,d4,08,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,8c,7e,7f,c5,30,d7,cd,01,fc,0b,\ + 00,00,e4,08,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,20,c3,33,67,30,d7,cd,01,fc,0b,\ - 00,00,d4,08,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,4e,6a,8b,c5,30,d7,cd,01,fc,0b,\ + 00,00,e4,08,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,2a,a6,ff,7b,30,d7,cd,01,fc,\ - 0b,00,00,d4,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,89,a4,89,cd,30,d7,cd,01,fc,\ + 0b,00,00,70,08,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,36,c3,df,7c,30,d7,cd,01,fc,\ - 0b,00,00,d4,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,c1,40,a6,cd,30,d7,cd,01,fc,\ + 0b,00,00,70,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,36,c3,df,7c,30,\ - d7,cd,01,fc,0b,00,00,d4,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,c1,40,a6,cd,30,\ + d7,cd,01,fc,0b,00,00,70,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,2a,d3,30,7d,30,d7,cd,01,fc,0b,\ - 00,00,b8,0b,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,03,c3,4a,ce,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,de,97,35,7d,30,d7,cd,01,fc,0b,\ - 00,00,b8,0b,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,11,ea,51,ce,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,26,92,b1,7d,30,d7,cd,01,\ - fc,0b,00,00,80,0a,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,4d,f4,1e,cf,30,d7,cd,01,\ + fc,0b,00,00,7c,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,c4,ad,b0,7e,30,d7,cd,01,\ - fc,0b,00,00,80,0a,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,a1,0b,7b,d0,30,d7,cd,01,\ + fc,0b,00,00,7c,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,c4,\ - ad,b0,7e,30,d7,cd,01,fc,0b,00,00,80,0a,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,a1,\ + 0b,7b,d0,30,d7,cd,01,fc,0b,00,00,7c,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,f6,2b,58,81,30,d7,cd,01,fc,0b,00,\ - 00,84,0a,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,23,06,9d,d2,30,d7,cd,01,fc,0b,00,\ + 00,80,0a,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,f6,2b,58,81,30,d7,cd,01,fc,0b,00,\ - 00,84,0a,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,23,06,9d,d2,30,d7,cd,01,fc,0b,00,\ + 00,80,0a,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,f6,2b,\ - 58,81,30,d7,cd,01,fc,0b,00,00,84,0a,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,23,06,\ + 9d,d2,30,d7,cd,01,fc,0b,00,00,80,0a,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,f6,2b,58,81,30,d7,cd,\ - 01,fc,0b,00,00,a4,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,\ + 01,fc,0b,00,00,34,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,\ - 48,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,15,0c,c7,d3,30,d7,cd,01,fc,0b,00,00,\ + 80,0a,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,\ - 01,fc,0b,00,00,a4,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,15,0c,c7,d3,30,d7,cd,\ + 01,fc,0b,00,00,34,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,\ - 48,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,15,0c,c7,d3,30,d7,cd,01,fc,0b,00,00,\ + 80,0a,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,15,0c,c7,d3,30,d7,cd,01,fc,0b,00,00,80,0a,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,54,56,6d,84,30,d7,cd,01,fc,\ - 0b,00,00,84,0a,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,1d,e8,27,d5,30,d7,cd,01,fc,\ + 0b,00,00,80,0a,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,ae,b8,6f,84,30,d7,cd,01,fc,\ - 0b,00,00,84,0a,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,77,4a,2a,d5,30,d7,cd,01,fc,\ + 0b,00,00,80,0a,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,ae,b8,6f,84,30,d7,cd,01,fc,0b,00,00,84,0a,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,77,4a,2a,d5,30,d7,cd,01,fc,0b,00,00,80,0a,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - fc,0b,00,00,48,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,17,f2,da,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - fc,0b,00,00,48,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,17,f2,da,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Lovelace] -"OPEN_VOLUME_HANDLE (Enter)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Enter)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"OPEN_VOLUME_HANDLE (Leave)"=hex:48,00,00,00,00,00,00,00,7a,30,a1,82,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Leave)"=hex:48,00,00,00,00,00,00,00,c7,99,73,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:48,00,00,00,00,00,00,00,7a,30,a1,82,30,d7,\ - cd,01,fc,0b,00,00,5c,09,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:48,00,00,00,00,00,00,00,c7,99,73,d3,30,d7,\ + cd,01,fc,0b,00,00,9c,04,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:48,00,00,00,00,00,00,00,06,b7,e8,82,30,d7,\ - cd,01,fc,0b,00,00,5c,09,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:48,00,00,00,00,00,00,00,67,bf,99,d3,30,d7,\ + cd,01,fc,0b,00,00,9c,04,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Enter)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Enter)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"IOCTL_RELEASE (Leave)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Leave)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Lovelace(__?_Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}_)] -"OPEN_VOLUME_HANDLE (Enter)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,bc,09,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Enter)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,bc,0a,00,00,fd,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"OPEN_VOLUME_HANDLE (Leave)"=hex:48,00,00,00,00,00,00,00,7a,30,a1,82,30,d7,cd,\ - 01,fc,0b,00,00,bc,09,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"OPEN_VOLUME_HANDLE (Leave)"=hex:48,00,00,00,00,00,00,00,c7,99,73,d3,30,d7,cd,\ + 01,fc,0b,00,00,bc,0a,00,00,fd,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:48,00,00,00,00,00,00,00,7a,30,a1,82,30,d7,\ - cd,01,fc,0b,00,00,bc,09,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"IOCTL_FLUSH_AND_HOLD (Enter)"=hex:48,00,00,00,00,00,00,00,c7,99,73,d3,30,d7,\ + cd,01,fc,0b,00,00,bc,0a,00,00,fe,03,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:48,00,00,00,00,00,00,00,06,b7,e8,82,30,d7,\ - cd,01,fc,0b,00,00,bc,09,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"IOCTL_FLUSH_AND_HOLD (Leave)"=hex:48,00,00,00,00,00,00,00,67,bf,99,d3,30,d7,\ + cd,01,fc,0b,00,00,bc,0a,00,00,fe,03,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"IOCTL_RELEASE (Enter)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,fc,\ - 0b,00,00,bc,09,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Enter)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,fc,\ + 0b,00,00,bc,0a,00,00,ff,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"IOCTL_RELEASE (Leave)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,fc,\ - 0b,00,00,bc,09,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"IOCTL_RELEASE (Leave)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,fc,\ + 0b,00,00,bc,0a,00,00,ff,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\MSSearch Service Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,56,28,f8,66,30,d7,cd,01,d0,06,\ - 00,00,fc,08,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,92,f6,56,c5,30,d7,cd,01,d0,06,\ + 00,00,c8,0b,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,20,c3,33,67,30,d7,cd,01,d0,06,\ - 00,00,fc,08,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,8c,7e,7f,c5,30,d7,cd,01,d0,06,\ + 00,00,c8,0b,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,de,6a,04,7c,30,d7,cd,01,d0,\ - 06,00,00,fc,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,4b,90,95,cd,30,d7,cd,01,d0,\ + 06,00,00,c8,0b,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,58,89,c5,7c,30,d7,cd,01,d0,\ - 06,00,00,fc,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,15,2b,d1,cd,30,d7,cd,01,d0,\ + 06,00,00,c8,0b,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,58,89,c5,7c,30,\ - d7,cd,01,d0,06,00,00,fc,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,15,2b,d1,cd,30,\ + d7,cd,01,d0,06,00,00,c8,0b,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,a6,fb,18,7d,30,d7,cd,01,d0,06,\ - 00,00,fc,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,11,ea,51,ce,30,d7,cd,01,d0,06,\ + 00,00,c8,0b,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,b4,22,20,7d,30,d7,cd,01,d0,06,\ - 00,00,fc,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,c5,ae,56,ce,30,d7,cd,01,d0,06,\ + 00,00,c8,0b,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,3c,68,e8,7d,30,d7,cd,01,\ - d0,06,00,00,dc,06,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,09,68,53,cf,30,d7,cd,01,\ + d0,06,00,00,c8,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,fc,49,cd,7e,30,d7,cd,01,\ - d0,06,00,00,dc,06,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,71,1e,8e,d0,30,d7,cd,01,\ + d0,06,00,00,c8,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,fc,\ - 49,cd,7e,30,d7,cd,01,d0,06,00,00,dc,06,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,71,\ + 1e,8e,d0,30,d7,cd,01,d0,06,00,00,c8,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,50,8e,5a,81,30,d7,cd,01,d0,06,00,\ - 00,dc,06,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,01,d0,06,00,\ + 00,c8,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,50,8e,5a,81,30,d7,cd,01,d0,06,00,\ - 00,dc,06,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,01,d0,06,00,\ + 00,c8,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,50,8e,\ - 5a,81,30,d7,cd,01,d0,06,00,00,dc,06,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,7d,68,\ + 9f,d2,30,d7,cd,01,d0,06,00,00,c8,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,50,8e,5a,81,30,d7,cd,\ - 01,d0,06,00,00,34,0b,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,\ + 01,d0,06,00,00,58,05,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,ec,9f,32,83,30,d7,cd,01,d0,06,00,00,\ - dc,06,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,7d,95,d0,d3,30,d7,cd,01,d0,06,00,00,\ + c8,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,ec,9f,32,83,30,d7,cd,\ - 01,d0,06,00,00,34,0b,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,7d,95,d0,d3,30,d7,cd,\ + 01,d0,06,00,00,58,05,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,ec,9f,32,83,30,d7,cd,01,d0,06,00,00,\ - dc,06,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,7d,95,d0,d3,30,d7,cd,01,d0,06,00,00,\ + c8,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,ec,9f,32,83,30,d7,cd,01,d0,06,00,00,dc,06,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,7d,95,d0,d3,30,d7,cd,01,d0,06,00,00,c8,0b,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,08,1b,72,84,30,d7,cd,01,d0,\ - 06,00,00,dc,06,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,d1,ac,2c,d5,30,d7,cd,01,d0,\ + 06,00,00,c8,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,b2,53,51,86,30,d7,cd,01,d0,\ - 06,00,00,dc,06,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,3d,a4,e6,d5,30,d7,cd,01,d0,\ + 06,00,00,c8,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,b2,53,51,86,30,d7,cd,01,d0,06,00,00,dc,06,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,3d,a4,e6,d5,30,d7,cd,01,d0,06,00,00,c8,0b,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,66,c6,11,ad,30,d7,cd,01,\ - d0,06,00,00,dc,06,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + d0,06,00,00,04,08,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,66,c6,11,ad,30,d7,cd,01,\ - d0,06,00,00,dc,06,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + d0,06,00,00,04,08,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Registry Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,b0,8a,fa,66,30,d7,cd,01,fc,0b,\ - 00,00,b0,0b,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,92,f6,56,c5,30,d7,cd,01,fc,0b,\ + 00,00,a4,0a,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,20,c3,33,67,30,d7,cd,01,fc,0b,\ - 00,00,b0,0b,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,70,30,71,c5,30,d7,cd,01,fc,0b,\ + 00,00,a4,0a,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,dc,33,ac,7b,30,d7,cd,01,fc,\ - 0b,00,00,d4,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,05,cd,71,cd,30,d7,cd,01,fc,\ + 0b,00,00,b8,0b,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,f2,09,e3,7b,30,d7,cd,01,fc,\ - 0b,00,00,d4,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,d5,df,84,cd,30,d7,cd,01,fc,\ + 0b,00,00,b8,0b,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,f2,09,e3,7b,30,\ - d7,cd,01,fc,0b,00,00,d4,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,d5,df,84,cd,30,\ + d7,cd,01,fc,0b,00,00,b8,0b,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,00,5e,1b,7d,30,d7,cd,01,fc,0b,\ - 00,00,d4,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,4f,fe,45,ce,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,68,e7,24,7d,30,d7,cd,01,fc,0b,\ - 00,00,d4,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,03,c3,4a,ce,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,cc,2f,af,7d,30,d7,cd,01,\ - fc,0b,00,00,94,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,6f,ba,04,cf,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,c4,ad,b0,7e,30,d7,cd,01,\ - fc,0b,00,00,94,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,c3,d1,60,d0,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,c4,\ - ad,b0,7e,30,d7,cd,01,fc,0b,00,00,94,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,c3,\ + d1,60,d0,30,d7,cd,01,fc,0b,00,00,c4,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,1a,29,96,81,30,d7,cd,01,fc,0b,00,\ - 00,94,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,2b,b5,cc,d2,30,d7,cd,01,fc,0b,00,\ + 00,48,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,01,fc,0b,00,\ - 00,94,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,01,fc,0b,00,\ + 00,48,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,68,9b,\ - e9,81,30,d7,cd,01,fc,0b,00,00,94,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,ef,d7,\ + 30,d3,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,c8,08,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,c4,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,d0,51,24,83,30,d7,cd,01,fc,0b,00,00,\ - 84,0a,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,\ + 48,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,d0,51,24,83,30,d7,cd,\ - 01,fc,0b,00,00,c8,08,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,\ + 01,fc,0b,00,00,c4,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,d0,51,24,83,30,d7,cd,01,fc,0b,00,00,\ - 84,0a,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,\ + 48,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,d0,51,24,83,30,d7,cd,01,fc,0b,00,00,84,0a,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,a0,91,68,84,30,d7,cd,01,fc,\ - 0b,00,00,48,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,c3,85,25,d5,30,d7,cd,01,fc,\ + 0b,00,00,c4,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,fa,f3,6a,84,30,d7,cd,01,fc,\ - 0b,00,00,48,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,1d,e8,27,d5,30,d7,cd,01,fc,\ + 0b,00,00,c4,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,fa,f3,6a,84,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,1d,e8,27,d5,30,d7,cd,01,fc,0b,00,00,c4,0b,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - fc,0b,00,00,48,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,17,f2,da,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - fc,0b,00,00,48,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,17,f2,da,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\Shadow Copy Optimization Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,0a,ed,fc,66,30,d7,cd,01,fc,0b,\ - 00,00,70,03,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,ec,58,59,c5,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,c6,60,31,67,30,d7,cd,01,fc,0b,\ - 00,00,70,03,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,24,f5,75,c5,30,d7,cd,01,fc,0b,\ + 00,00,70,08,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,0e,58,f1,7b,30,d7,cd,01,fc,\ - 0b,00,00,b0,0b,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,c7,b8,7d,cd,30,d7,cd,01,fc,\ + 0b,00,00,e4,08,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,e2,d8,b4,7c,30,d7,cd,01,fc,\ - 0b,00,00,b0,0b,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,f1,2d,93,cd,30,d7,cd,01,fc,\ + 0b,00,00,e4,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,e2,d8,b4,7c,30,\ - d7,cd,01,fc,0b,00,00,b0,0b,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,f1,2d,93,cd,30,\ + d7,cd,01,fc,0b,00,00,e4,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,b4,22,20,7d,30,d7,cd,01,fc,0b,\ - 00,00,b0,0b,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,03,c3,4a,ce,30,d7,cd,01,fc,0b,\ + 00,00,e4,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,76,0e,2c,7d,30,d7,cd,01,fc,0b,\ - 00,00,b0,0b,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,5d,25,4d,ce,30,d7,cd,01,fc,0b,\ + 00,00,e4,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,72,cd,ac,7d,30,d7,cd,01,\ - fc,0b,00,00,7c,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,37,1e,e8,ce,30,d7,cd,01,\ + fc,0b,00,00,94,0b,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,6a,4b,ae,7e,30,d7,cd,01,\ - fc,0b,00,00,7c,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,2f,9c,e9,cf,30,d7,cd,01,\ + fc,0b,00,00,94,0b,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,6a,\ - 4b,ae,7e,30,d7,cd,01,fc,0b,00,00,7c,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,2f,\ + 9c,e9,cf,30,d7,cd,01,fc,0b,00,00,94,0b,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,46,a8,d2,80,30,d7,cd,01,fc,0b,00,\ - 00,c4,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,3b,e6,fa,d1,30,d7,cd,01,fc,0b,00,\ + 00,7c,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,46,a8,d2,80,30,d7,cd,01,fc,0b,00,\ - 00,c4,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,3b,e6,fa,d1,30,d7,cd,01,fc,0b,00,\ + 00,7c,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,46,a8,\ - d2,80,30,d7,cd,01,fc,0b,00,00,c4,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,3b,e6,\ + fa,d1,30,d7,cd,01,fc,0b,00,00,7c,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,08,94,de,80,30,d7,cd,\ - 01,fc,0b,00,00,90,09,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,49,0d,02,d2,30,d7,cd,\ + 01,fc,0b,00,00,8c,06,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,\ - 84,0a,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,\ + 7c,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,\ - 01,fc,0b,00,00,90,09,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,\ + 01,fc,0b,00,00,8c,06,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,\ - 84,0a,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,\ + 7c,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,0e,66,18,83,30,d7,cd,01,fc,0b,00,00,84,0a,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,6f,6e,c9,d3,30,d7,cd,01,fc,0b,00,00,7c,0b,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,ae,b8,6f,84,30,d7,cd,01,fc,\ - 0b,00,00,94,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,77,4a,2a,d5,30,d7,cd,01,fc,\ + 0b,00,00,48,0b,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,fa,74,f5,a9,30,d7,cd,01,fc,\ - 0b,00,00,94,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,3b,95,b6,fa,30,d7,cd,01,fc,\ + 0b,00,00,48,0b,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,fa,74,f5,a9,30,d7,cd,01,fc,0b,00,00,94,0b,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,3b,95,b6,fa,30,d7,cd,01,fc,0b,00,00,48,0b,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,2e,2a,f5,ac,30,d7,cd,01,\ - fc,0b,00,00,84,0a,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,71,54,dd,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,2e,2a,f5,ac,30,d7,cd,01,\ - fc,0b,00,00,84,0a,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,71,54,dd,fc,30,d7,cd,01,\ + fc,0b,00,00,c4,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\SwProvider_{b5946137-7b9f-4925-af80-51abd60b20d5}] -"PROVIDER_BEGINPREPARE (Enter)"=hex:48,00,00,00,00,00,00,00,20,c0,77,7b,30,d7,\ - cd,01,fc,0b,00,00,d4,08,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"PROVIDER_BEGINPREPARE (Enter)"=hex:48,00,00,00,00,00,00,00,ef,f6,3a,cd,30,d7,\ + cd,01,fc,0b,00,00,b8,0b,00,00,01,04,00,00,01,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"PROVIDER_BEGINPREPARE (Leave)"=hex:48,00,00,00,00,00,00,00,20,c0,77,7b,30,d7,\ - cd,01,fc,0b,00,00,d4,08,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,\ +"PROVIDER_BEGINPREPARE (Leave)"=hex:48,00,00,00,00,00,00,00,ef,f6,3a,cd,30,d7,\ + cd,01,fc,0b,00,00,b8,0b,00,00,01,04,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00 -"PROVIDER_ENDPREPARE (Enter)"=hex:48,00,00,00,00,00,00,00,02,95,73,7d,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_ENDPREPARE (Enter)"=hex:48,00,00,00,00,00,00,00,73,fb,83,ce,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,02,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_ENDPREPARE (Leave)"=hex:48,00,00,00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_ENDPREPARE (Leave)"=hex:48,00,00,00,00,00,00,00,59,e4,cd,ce,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,02,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_PRECOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_PRECOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,03,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_PRECOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_PRECOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,03,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_COMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,06,b7,e8,82,30,d7,cd,01,\ - fc,0b,00,00,cc,08,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_COMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,\ + fc,0b,00,00,d8,0a,00,00,04,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PROVIDER_COMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,01,\ - fc,0b,00,00,cc,08,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_COMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,\ + fc,0b,00,00,d8,0a,00,00,04,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PROVIDER_POSTCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,60,19,eb,82,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_POSTCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,c1,21,9c,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,05,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_POSTCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,\ - 01,fc,0b,00,00,5c,09,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"PROVIDER_POSTCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,\ + 01,fc,0b,00,00,9c,04,00,00,05,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"PROVIDER_PREFINALCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,fa,c6,39,83,30,\ - d7,cd,01,fc,0b,00,00,5c,09,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"PROVIDER_PREFINALCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,d7,f7,d2,d3,30,\ + d7,cd,01,fc,0b,00,00,9c,04,00,00,06,04,00,00,01,00,00,00,00,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"PROVIDER_PREFINALCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,de,a5,5c,84,30,\ - d7,cd,01,fc,0b,00,00,5c,09,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"PROVIDER_PREFINALCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,3f,ae,0d,d5,30,\ + d7,cd,01,fc,0b,00,00,9c,04,00,00,06,04,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"PROVIDER_POSTFINALCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,fa,74,f5,a9,30,\ - d7,cd,01,fc,0b,00,00,5c,09,00,00,07,04,00,00,01,00,00,00,00,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"PROVIDER_POSTFINALCOMMIT (Enter)"=hex:48,00,00,00,00,00,00,00,3b,95,b6,fa,30,\ + d7,cd,01,fc,0b,00,00,9c,04,00,00,07,04,00,00,01,00,00,00,00,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"PROVIDER_POSTFINALCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,aa,52,dd,ac,30,\ - d7,cd,01,fc,0b,00,00,5c,09,00,00,07,04,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"PROVIDER_POSTFINALCOMMIT (Leave)"=hex:48,00,00,00,00,00,00,00,df,55,be,fc,30,\ + d7,cd,01,fc,0b,00,00,9c,04,00,00,07,04,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\System Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,0a,ed,fc,66,30,d7,cd,01,0c,02,\ - 00,00,c4,02,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,92,f6,56,c5,30,d7,cd,01,0c,02,\ + 00,00,7c,05,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,62,da,92,72,30,d7,cd,01,0c,02,\ - 00,00,c4,02,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,c6,7e,25,c7,30,d7,cd,01,0c,02,\ + 00,00,7c,05,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,6e,32,cb,7b,30,d7,cd,01,0c,\ - 02,00,00,c4,02,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,4b,90,95,cd,30,d7,cd,01,0c,\ + 02,00,00,7c,05,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,14,fd,f9,7c,30,d7,cd,01,0c,\ - 02,00,00,c4,02,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,fb,13,1b,ce,30,d7,cd,01,0c,\ + 02,00,00,7c,05,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,14,fd,f9,7c,30,\ - d7,cd,01,0c,02,00,00,c4,02,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,fb,13,1b,ce,30,\ + d7,cd,01,0c,02,00,00,7c,05,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,68,e7,24,7d,30,d7,cd,01,0c,02,\ - 00,00,7c,05,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,1f,11,59,ce,30,d7,cd,01,0c,02,\ + 00,00,dc,0a,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,d0,70,2e,7d,30,d7,cd,01,0c,02,\ - 00,00,7c,05,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,79,73,5b,ce,30,d7,cd,01,0c,02,\ + 00,00,dc,0a,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,1a,a2,02,7e,30,d7,cd,01,\ - 0c,02,00,00,7c,05,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,95,ee,9a,cf,30,d7,cd,01,\ + 0c,02,00,00,dc,0a,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,7c,0d,97,80,30,d7,cd,01,\ - 0c,02,00,00,7c,05,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,33,37,cb,d1,30,d7,cd,01,\ + 0c,02,00,00,dc,0a,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,7c,\ - 0d,97,80,30,d7,cd,01,0c,02,00,00,7c,05,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,33,\ + 37,cb,d1,30,d7,cd,01,0c,02,00,00,dc,0a,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,50,8e,5a,81,30,d7,cd,01,0c,02,00,\ - 00,c4,02,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,7d,68,9f,d2,30,d7,cd,01,0c,02,00,\ + 00,7c,05,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,0c,02,00,\ - 00,c4,02,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,4d,7b,b2,d2,30,d7,cd,01,0c,02,00,\ + 00,7c,05,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,88,2a,\ - 77,81,30,d7,cd,01,0c,02,00,00,c4,02,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,4d,7b,\ + b2,d2,30,d7,cd,01,0c,02,00,00,7c,05,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,\ - 01,0c,02,00,00,34,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,\ + 01,0c,02,00,00,6c,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,92,3d,30,83,30,d7,cd,01,0c,02,00,00,\ - c4,02,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,c9,d0,cb,d3,30,d7,cd,01,0c,02,00,00,\ + 7c,05,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,92,3d,30,83,30,d7,cd,\ - 01,0c,02,00,00,34,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,c9,d0,cb,d3,30,d7,cd,\ + 01,0c,02,00,00,6c,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,92,3d,30,83,30,d7,cd,01,0c,02,00,00,\ - c4,02,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,c9,d0,cb,d3,30,d7,cd,01,0c,02,00,00,\ + 7c,05,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,92,3d,30,83,30,d7,cd,01,0c,02,00,00,c4,02,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,c9,d0,cb,d3,30,d7,cd,01,0c,02,00,00,7c,05,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,62,7d,74,84,30,d7,cd,01,0c,\ - 02,00,00,c4,02,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,2b,0f,2f,d5,30,d7,cd,01,0c,\ + 02,00,00,7c,05,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,98,0f,6a,85,30,d7,cd,01,0c,\ - 02,00,00,c4,02,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,95,cf,90,d5,30,d7,cd,01,0c,\ + 02,00,00,7c,05,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,98,0f,6a,85,30,d7,cd,01,0c,02,00,00,c4,02,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,95,cf,90,d5,30,d7,cd,01,0c,02,00,00,7c,05,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,66,c6,11,ad,30,d7,cd,01,\ - 0c,02,00,00,7c,05,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,71,54,dd,fc,30,d7,cd,01,\ + 0c,02,00,00,dc,0a,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,66,c6,11,ad,30,d7,cd,01,\ - 0c,02,00,00,7c,05,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,71,54,dd,fc,30,d7,cd,01,\ + 0c,02,00,00,dc,0a,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VolSnap] @@ -2235303,11 +2235070,11 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}ComputeIgnorableProduct (Enter)"=hex:48,\ - 00,00,00,00,00,00,00,ce,4f,1b,ad,30,d7,cd,01,00,00,00,00,00,00,00,00,0c,00,\ + 00,00,00,00,00,00,00,4f,8e,f7,fc,30,d7,cd,01,00,00,00,00,00,00,00,00,0c,00,\ 00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}ComputeIgnorableProduct (Leave)"=hex:48,\ - 00,00,00,00,00,00,00,ce,4f,1b,ad,30,d7,cd,01,00,00,00,00,00,00,00,00,0d,00,\ + 00,00,00,00,00,00,00,4f,8e,f7,fc,30,d7,cd,01,00,00,00,00,00,00,00,00,0d,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}Activate (Leave)"=hex:48,00,00,00,\ @@ -2235319,19 +2235086,19 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}DeleteProcess (Enter)"=hex:48,00,\ - 00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,00,00,00,00,00,00,00,00,12,00,00,\ + 00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,00,00,00,00,00,00,00,00,12,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}SetIgnorable (Enter)"=hex:48,00,\ - 00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,00,00,00,00,00,00,00,00,0a,00,00,\ + 00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,00,00,00,00,00,00,00,00,0a,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}SetIgnorable (Leave)"=hex:48,00,\ - 00,00,00,00,00,00,1c,8d,1f,83,30,d7,cd,01,00,00,00,00,00,00,00,00,0b,00,00,\ + 00,00,00,00,00,00,33,91,2d,d4,30,d7,cd,01,00,00,00,00,00,00,00,00,0b,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}AdjustBitmap (Enter)"=hex:48,00,\ - 00,00,00,00,00,00,50,f0,da,ac,30,d7,cd,01,00,00,00,00,00,00,00,00,04,00,00,\ + 00,00,00,00,00,00,2b,91,b9,fc,30,d7,cd,01,00,00,00,00,00,00,00,00,04,00,00,\ 00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}ValidateDiffAreaFiles (Enter)"=hex:48,\ @@ -2235351,254 +2235118,254 @@ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}AdjustBitmap (Leave)"=hex:48,00,\ - 00,00,00,00,00,00,ce,4f,1b,ad,30,d7,cd,01,00,00,00,00,00,00,00,00,05,00,00,\ + 00,00,00,00,00,00,4f,8e,f7,fc,30,d7,cd,01,00,00,00,00,00,00,00,00,05,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}DeleteProcess (Leave)"=hex:48,00,\ - 00,00,00,00,00,00,a8,13,67,83,30,d7,cd,01,00,00,00,00,00,00,00,00,13,00,00,\ + 00,00,00,00,00,00,7b,8b,a9,d4,30,d7,cd,01,00,00,00,00,00,00,00,00,13,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}PrepareForSnapshot (Enter)"=hex:48,\ - 00,00,00,00,00,00,00,48,58,97,7d,30,d7,cd,01,f0,0b,00,00,68,02,00,00,00,00,\ + 00,00,00,00,00,00,00,e9,ab,94,ce,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,00,00,\ 00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}PreExposure (Enter)"=hex:48,00,00,\ - 00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,01,f0,0b,00,00,68,02,00,00,02,00,00,00,\ + 00,00,00,00,00,59,e4,cd,ce,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,02,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}PreExposure (Leave)"=hex:48,00,00,\ - 00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,01,f0,0b,00,00,68,02,00,00,03,00,00,00,\ + 00,00,00,00,00,59,e4,cd,ce,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,03,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}PrepareForSnapshot (Leave)"=hex:48,\ - 00,00,00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,01,f0,0b,00,00,68,02,00,00,01,00,\ + 00,00,00,00,00,00,00,59,e4,cd,ce,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,01,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}EndCommit (Enter)"=hex:48,00,00,\ - 00,00,00,00,00,60,19,eb,82,30,d7,cd,01,f0,0b,00,00,68,02,00,00,06,00,00,00,\ + 00,00,00,00,00,c1,21,9c,d3,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,06,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Volume{00fe5fcb-3afd-11e2-a6f4-806e6f6e6963}EndCommit (Leave)"=hex:48,00,00,\ - 00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,f0,0b,00,00,68,02,00,00,07,00,00,00,\ + 00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,f0,0b,00,00,5c,0b,00,00,07,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VssapiPublisher] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,5c,a0,cf,66,30,d7,cd,01,50,05,\ - 00,00,38,0a,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,98,6e,2e,c5,30,d7,cd,01,4c,03,\ + 00,00,6c,08,00,00,e8,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,d8,8a,a3,72,30,d7,cd,01,50,05,\ - 00,00,38,0a,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,ce,2d,55,c7,30,d7,cd,01,4c,03,\ + 00,00,6c,08,00,00,e8,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,7a,22,7a,7b,30,d7,cd,01,50,\ - 05,00,00,a0,04,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,49,59,3d,cd,30,d7,cd,01,4c,\ + 03,00,00,d0,0b,00,00,e9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,6e,5f,fc,7c,30,d7,cd,01,50,\ - 05,00,00,a0,04,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,55,76,1d,ce,30,d7,cd,01,4c,\ + 03,00,00,d0,0b,00,00,e9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,c8,c1,fe,7c,30,d7,cd,01,50,05,\ - 00,00,0c,07,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,09,3b,22,ce,30,d7,cd,01,4c,03,\ + 00,00,9c,0a,00,00,f9,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,de,97,35,7d,30,d7,cd,01,50,05,\ - 00,00,0c,07,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,79,73,5b,ce,30,d7,cd,01,4c,03,\ + 00,00,9c,0a,00,00,f9,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"DOSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,a8,32,71,7d,30,d7,cd,01,50,05,\ - 00,00,84,0b,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"DOSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,73,fb,83,ce,30,d7,cd,01,4c,03,\ + 00,00,a0,0b,00,00,0a,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"DOSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,50,05,\ - 00,00,38,06,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"DOSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,4c,03,\ + 00,00,64,0a,00,00,0a,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\VssvcPublisher] -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,b0,e1,a0,7d,30,d7,cd,01,\ - fc,0b,00,00,5c,09,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,b3,46,d0,ce,30,d7,cd,01,\ + fc,0b,00,00,9c,04,00,00,ea,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,98,5b,a5,80,30,d7,cd,01,\ - fc,0b,00,00,5c,09,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,41,5e,d2,d1,30,d7,cd,01,\ + fc,0b,00,00,9c,04,00,00,ea,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,98,5b,a5,80,30,d7,cd,01,fc,0b,00,\ - 00,5c,09,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,41,5e,d2,d1,30,d7,cd,01,fc,0b,00,\ + 00,9c,04,00,00,eb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE_FRONT (Enter)"=hex:48,00,00,00,00,00,00,00,98,5b,a5,80,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_FRONT (Enter)"=hex:48,00,00,00,00,00,00,00,41,5e,d2,d1,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ec,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_FRONT (Leave)"=hex:48,00,00,00,00,00,00,00,be,8f,3b,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_FRONT (Leave)"=hex:48,00,00,00,00,00,00,00,e9,32,28,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ec,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_BACK (Enter)"=hex:48,00,00,00,00,00,00,00,be,8f,3b,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_BACK (Enter)"=hex:48,00,00,00,00,00,00,00,e9,32,28,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ed,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_BACK (Leave)"=hex:48,00,00,00,00,00,00,00,da,dd,49,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_BACK (Leave)"=hex:48,00,00,00,00,00,00,00,eb,69,80,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ed,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_SYSTEM (Enter)"=hex:48,00,00,00,00,00,00,00,da,dd,49,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_SYSTEM (Enter)"=hex:48,00,00,00,00,00,00,00,eb,69,80,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ee,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_SYSTEM (Leave)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_SYSTEM (Leave)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,ee,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"FREEZE_KTM (Enter)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_KTM (Enter)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,f0,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"FREEZE_KTM (Leave)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_KTM (Leave)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,f0,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"FREEZE_RM (Enter)"=hex:48,00,00,00,00,00,00,00,88,2a,77,81,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_RM (Enter)"=hex:48,00,00,00,00,00,00,00,a7,dd,b4,d2,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,ef,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"FREEZE_RM (Leave)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE_RM (Leave)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,ef,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,68,9b,e9,81,30,d7,cd,01,fc,0b,00,\ - 00,5c,09,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,ef,d7,30,d3,30,d7,cd,01,fc,0b,00,\ + 00,9c,04,00,00,eb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"THAW_KTM (Enter)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW_KTM (Enter)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,f4,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"THAW_KTM (Leave)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,fc,0b,\ - 00,00,5c,09,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW_KTM (Leave)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,fc,0b,\ + 00,00,9c,04,00,00,f4,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,d6,c9,fb,82,30,d7,cd,01,fc,0b,00,00,\ - 5c,09,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,dd,6f,aa,d3,30,d7,cd,01,fc,0b,00,00,\ + 9c,04,00,00,f2,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,fa,c6,39,83,30,d7,cd,01,fc,0b,00,00,\ - 5c,09,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,d7,f7,d2,d3,30,d7,cd,01,fc,0b,00,00,\ + 9c,04,00,00,f2,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,38,08,5f,84,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,3f,ae,0d,d5,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,f5,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,fa,74,f5,a9,30,d7,cd,01,fc,\ - 0b,00,00,5c,09,00,00,f5,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,3b,95,b6,fa,30,d7,cd,01,fc,\ + 0b,00,00,9c,04,00,00,f5,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,b8,79,e4,ac,30,d7,cd,01,\ - fc,0b,00,00,5c,09,00,00,fb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,df,55,be,fc,30,d7,cd,01,\ + fc,0b,00,00,9c,04,00,00,fb,03,00,00,01,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,ce,4f,1b,ad,30,d7,cd,01,\ - fc,0b,00,00,5c,09,00,00,fb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + fc,0b,00,00,9c,04,00,00,fb,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Diag\WMI Writer] -"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,fc,c5,f5,66,30,d7,cd,01,4c,03,\ - 00,00,78,08,00,00,e8,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Enter)"=hex:48,00,00,00,00,00,00,00,2a,6d,4d,c5,30,d7,cd,01,4c,03,\ + 00,00,50,07,00,00,e8,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,c6,60,31,67,30,d7,cd,01,4c,03,\ - 00,00,78,08,00,00,e8,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,\ +"IDENTIFY (Leave)"=hex:48,00,00,00,00,00,00,00,de,31,52,c5,30,d7,cd,01,4c,03,\ + 00,00,50,07,00,00,e8,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,52,e4,bc,7b,30,d7,cd,01,4c,\ - 03,00,00,78,08,00,00,e9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Enter)"=hex:48,00,00,00,00,00,00,00,db,57,5c,cd,30,d7,cd,01,4c,\ + 03,00,00,94,07,00,00,e9,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,92,2f,09,7c,30,d7,cd,01,4c,\ - 03,00,00,78,08,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"PREPAREBACKUP (Leave)"=hex:48,00,00,00,00,00,00,00,51,08,6d,cd,30,d7,cd,01,4c,\ + 03,00,00,94,07,00,00,e9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,92,2f,09,7c,30,\ - d7,cd,01,4c,03,00,00,78,08,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ - 00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,\ +"VSS_WS_STABLE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,51,08,6d,cd,30,\ + d7,cd,01,4c,03,00,00,94,07,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,\ + 00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00 -"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,8a,ad,0a,7d,30,d7,cd,01,4c,03,\ - 00,00,78,08,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Enter)"=hex:48,00,00,00,00,00,00,00,9b,39,41,ce,30,d7,cd,01,4c,03,\ + 00,00,94,07,00,00,f9,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,f2,36,14,7d,30,d7,cd,01,4c,03,\ - 00,00,78,08,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,94,06,\ - 6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,\ +"GETSTATE (Leave)"=hex:48,00,00,00,00,00,00,00,f5,9b,43,ce,30,d7,cd,01,4c,03,\ + 00,00,94,07,00,00,f9,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,ee,b7,\ + ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00 -"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,80,f4,b3,7d,30,d7,cd,01,\ - 4c,03,00,00,78,08,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,61,93,fd,ce,30,d7,cd,01,\ + 4c,03,00,00,10,01,00,00,ea,03,00,00,01,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,10,e9,ab,7e,30,d7,cd,01,\ - 4c,03,00,00,78,08,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"PREPARESNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,9d,9d,ca,cf,30,d7,cd,01,\ + 4c,03,00,00,10,01,00,00,ea,03,00,00,00,00,00,00,01,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,10,\ - e9,ab,7e,30,d7,cd,01,4c,03,00,00,78,08,00,00,02,00,00,00,01,00,00,00,01,00,\ - 00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,\ +"VSS_WS_WAITING_FOR_FREEZE (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,9d,\ + 9d,ca,cf,30,d7,cd,01,4c,03,00,00,10,01,00,00,02,00,00,00,01,00,00,00,01,00,\ + 00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00 -"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,24,e2,ec,80,30,d7,cd,01,4c,03,00,\ - 00,10,01,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Enter)"=hex:48,00,00,00,00,00,00,00,65,5b,10,d2,30,d7,cd,01,4c,03,00,\ + 00,9c,0b,00,00,eb,03,00,00,01,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,be,8f,3b,81,30,d7,cd,01,4c,03,00,\ - 00,10,01,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,4f,94,06,6c,\ - 64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"FREEZE (Leave)"=hex:48,00,00,00,00,00,00,00,db,0b,21,d2,30,d7,cd,01,4c,03,00,\ + 00,9c,0b,00,00,eb,03,00,00,00,00,00,00,02,00,00,00,00,00,00,00,84,ee,b7,ae,\ + e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00 -"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,be,8f,\ - 3b,81,30,d7,cd,01,4c,03,00,00,10,01,00,00,03,00,00,00,01,00,00,00,02,00,00,\ - 00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,\ +"VSS_WS_WAITING_FOR_THAW (SetCurrentState)"=hex:48,00,00,00,00,00,00,00,db,0b,\ + 21,d2,30,d7,cd,01,4c,03,00,00,9c,0b,00,00,03,00,00,00,01,00,00,00,02,00,00,\ + 00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00 -"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,be,8f,3b,81,30,d7,cd,\ - 01,4c,03,00,00,dc,09,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Enter)"=hex:48,00,00,00,00,00,00,00,e9,32,28,d2,30,d7,cd,\ + 01,4c,03,00,00,d4,0a,00,00,fc,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,4c,03,00,00,\ - 9c,0b,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Enter)"=hex:48,00,00,00,00,00,00,00,23,33,ce,d3,30,d7,cd,01,4c,03,00,00,\ + 70,04,00,00,f2,03,00,00,01,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 -"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,\ - 01,4c,03,00,00,dc,09,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ - 4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,\ +"BKGND_FREEZE_THREAD (Leave)"=hex:48,00,00,00,00,00,00,00,23,33,ce,d3,30,d7,cd,\ + 01,4c,03,00,00,d4,0a,00,00,fc,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,\ + 84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 -"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,0e,66,18,83,30,d7,cd,01,4c,03,00,00,\ - 9c,0b,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,4f,94,06,6c,64,\ - 10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ +"THAW (Leave)"=hex:48,00,00,00,00,00,00,00,23,33,ce,d3,30,d7,cd,01,4c,03,00,00,\ + 70,04,00,00,f2,03,00,00,00,00,00,00,03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,\ + 69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00 "VSS_WS_WAITING_FOR_POST_SNAPSHOT (SetCurrentState)"=hex:48,00,00,00,00,00,00,\ - 00,0e,66,18,83,30,d7,cd,01,4c,03,00,00,9c,0b,00,00,04,00,00,00,01,00,00,00,\ - 03,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,\ + 00,23,33,ce,d3,30,d7,cd,01,4c,03,00,00,70,04,00,00,04,00,00,00,01,00,00,00,\ + 03,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,08,1b,72,84,30,d7,cd,01,4c,\ - 03,00,00,10,01,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Enter)"=hex:48,00,00,00,00,00,00,00,77,4a,2a,d5,30,d7,cd,01,4c,\ + 03,00,00,70,04,00,00,f5,03,00,00,01,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 -"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,86,7a,b2,84,30,d7,cd,01,4c,\ - 03,00,00,10,01,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,4f,94,\ - 06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,00,\ +"POSTSNAPSHOT (Leave)"=hex:48,00,00,00,00,00,00,00,d1,ac,2c,d5,30,d7,cd,01,4c,\ + 03,00,00,70,04,00,00,f5,03,00,00,00,00,00,00,04,00,00,00,00,00,00,00,84,ee,\ + b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00 "VSS_WS_WAITING_FOR_BACKUP_COMPLETE (SetCurrentState)"=hex:48,00,00,00,00,00,\ - 00,00,86,7a,b2,84,30,d7,cd,01,4c,03,00,00,10,01,00,00,05,00,00,00,01,00,00,\ - 00,04,00,00,00,00,00,00,00,4f,94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,\ + 00,00,d1,ac,2c,d5,30,d7,cd,01,4c,03,00,00,70,04,00,00,05,00,00,00,01,00,00,\ + 00,04,00,00,00,00,00,00,00,84,ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - 4c,03,00,00,9c,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Enter)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + 4c,03,00,00,9c,0b,00,00,fb,03,00,00,01,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 -"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,d4,c7,f2,ac,30,d7,cd,01,\ - 4c,03,00,00,9c,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,4f,\ - 94,06,6c,64,10,16,47,8e,1b,bc,bc,f5,95,78,77,00,00,00,00,00,00,00,00,00,00,\ +"BACKUPSHUTDOWN (Leave)"=hex:48,00,00,00,00,00,00,00,cb,b6,df,fc,30,d7,cd,01,\ + 4c,03,00,00,9c,0b,00,00,fb,03,00,00,00,00,00,00,05,00,00,00,00,00,00,00,84,\ + ee,b7,ae,e9,69,bd,4f,b1,1f,62,c3,cf,99,9c,1e,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers] @@ -2238601,7 +2238368,7 @@ [HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache] -[HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\A8] +[HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\A9] [HKEY_USERS\.DEFAULT\Software\Microsoft] @@ -2248261,8 +2248028,8 @@ 65,00,35,00,30,00,39,00,2d,00,31,00,62,00,33,00,34,00,2d,00,34,00,31,00,63,\ 00,30,00,2d,00,61,00,63,00,62,00,37,00,2d,00,36,00,64,00,34,00,36,00,35,00,\ 30,00,31,00,36,00,38,00,39,00,31,00,35,00,00,00,00,00,00,00,00,00,ad,a4,ee,\ - eb,04,00,00,00,00,00,00,00,08,00,00,00,00,00,00,00,00,00,00,00,d4,64,72,b9,\ - 04,00,00,00,00,00,00,00,08,00,00,00,56,23,b0,10,bb,d3,cd,01,58,19,2c,c1,01,\ + eb,04,00,00,00,00,00,00,00,08,00,00,00,00,00,00,00,00,00,00,00,af,d9,04,ad,\ + 04,00,00,00,00,00,00,00,08,00,00,00,c5,ae,56,ce,30,d7,cd,01,58,19,2c,c1,01,\ 00,00,00,00,00,00,00,04,00,00,00,78,00,00,00,00,00,00,00,84,7b,cc,f1,01,00,\ 00,00,00,00,00,00,04,00,00,00,60,27,00,00,00,00,00,00 @@ -2254385,7 +2254152,7 @@ [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Microsoft\Windows\CurrentVersion\Action Center\Checks\{945a8954-c147-4acd-923f-40c45405a658}.check.42] "CheckSetting"=hex:23,00,41,00,43,00,42,00,6c,00,6f,00,62,00,00,00,00,00,00,00,\ - 00,00,00,00,01,00,00,00,00,00,00,00,50,38,d7,09 + 00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Microsoft\Windows\CurrentVersion\Action Center\Checks\{A5268B8E-7DB5-465b-BAB7-BDCDA39A394A}.check.100] @@ -2254829,8 +2254596,8 @@ 6c,00,61,00,2e,00,64,00,6f,00,63,00,78,00,00,00,29,00,00,00,03,00,00,00,00,\ 1f,10,00,00,01,00,00,00,09,00,00,00,64,00,6f,00,63,00,75,00,6d,00,65,00,6e,\ 00,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 -"MRUListEx"=hex:02,00,00,00,01,00,00,00,0b,00,00,00,0a,00,00,00,09,00,00,00,08,\ - 00,00,00,07,00,00,00,06,00,00,00,05,00,00,00,04,00,00,00,03,00,00,00,00,00,\ +"MRUListEx"=hex:04,00,00,00,02,00,00,00,01,00,00,00,0b,00,00,00,0a,00,00,00,09,\ + 00,00,00,08,00,00,00,07,00,00,00,06,00,00,00,05,00,00,00,03,00,00,00,00,00,\ 00,00,ff,ff,ff,ff "1"=hex:14,00,1f,58,0d,1a,2c,f0,21,be,50,43,88,b0,73,67,fc,96,ef,3c,1a,02,00,\ 00,14,02,bb,af,93,3b,06,02,04,00,00,00,00,00,3d,00,00,00,31,53,50,53,30,f1,\ @@ -2255424,8 +2255191,8 @@ 00,00,00,00,00,00,00,00,00,00,62,00,65,00,66,00,6f,00,72,00,65,00,64,00,69,\ 00,76,00,76,00,75,00,6e,00,31,00,31,00,2e,00,72,00,65,00,67,00,00,00,22,00,\ 00,00 -"MRUListEx"=hex:01,00,00,00,00,00,00,00,08,00,00,00,07,00,00,00,06,00,00,00,05,\ - 00,00,00,04,00,00,00,03,00,00,00,02,00,00,00,ff,ff,ff,ff +"MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,08,00,00,00,07,00,00,00,06,\ + 00,00,00,05,00,00,00,04,00,00,00,03,00,00,00,ff,ff,ff,ff "1"=hex:14,00,1f,58,0d,1a,2c,f0,21,be,50,43,88,b0,73,67,fc,96,ef,3c,1a,02,00,\ 00,14,02,bb,af,93,3b,06,02,04,00,00,00,00,00,3d,00,00,00,31,53,50,53,30,f1,\ 25,b7,ef,47,1a,10,a5,f1,02,60,8c,9e,eb,ac,21,00,00,00,0a,00,00,00,00,1f,00,\ @@ -2255730,6 +2255497,9 @@ "Implementing"=hex:1c,00,00,00,01,00,00,00,dc,07,0b,00,05,00,1e,00,16,00,00,00,\ 08,00,4c,00,01,00,00,00,1e,76,81,27,e0,28,09,41,99,fe,b9,d1,27,c5,7a,fe +[HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\DontShowMeThisDialogAgain] +"{948e51fb-0a48-44f0-86ac-33c36def540c}"="NO" + [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts] [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2] @@ -2259522,7 +2259292,7 @@ 68,06,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,\ 80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,61,60,02,\ a1,15,cf,cd,01,00,00,00,00 -"HRZR_PGYFRFFVBA"=hex:00,00,00,00,85,00,00,00,34,01,00,00,4b,85,8d,00,0e,00,00,\ +"HRZR_PGYFRFFVBA"=hex:00,00,00,00,85,00,00,00,39,01,00,00,21,79,8e,00,0e,00,00,\ 00,15,00,00,00,a0,68,06,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,\ 74,00,2e,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,2e,00,47,00,65,00,74,\ 00,74,00,69,00,6e,00,67,00,53,00,74,00,61,00,72,00,74,00,65,00,64,00,00,00,\ @@ -2259544,49 +2259314,49 @@ 00,00,00,fd,fc,b8,76,00,00,00,00,60,17,bb,75,00,00,00,00,01,00,00,00,00,00,\ 00,00,50,94,ec,fe,fe,07,00,00,00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,00,00,00,00,\ - 02,00,00,00,00,00,00,00,2e,00,00,00,5d,32,22,00,4d,00,69,00,63,00,72,00,6f,\ + 02,00,00,00,00,00,00,00,30,00,00,00,3f,b4,22,00,4d,00,69,00,63,00,72,00,6f,\ 00,73,00,6f,00,66,00,74,00,2e,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,\ 2e,00,43,00,6f,00,6e,00,74,00,72,00,6f,00,6c,00,50,00,61,00,6e,00,65,00,6c,\ - 00,00,00,00,00,00,00,00,00,5d,42,62,74,00,00,00,00,04,00,00,00,00,00,00,00,\ - 00,00,00,00,00,00,00,00,95,86,f4,fe,fe,07,00,00,50,fb,bc,06,00,00,00,00,00,\ - 00,00,00,00,00,00,00,80,f8,1c,00,00,00,00,00,5a,9d,f0,fe,fe,07,00,00,00,00,\ - 00,00,00,00,00,00,00,00,00,00,00,00,00,00,20,08,c6,06,00,00,00,00,03,00,00,\ - 00,00,00,00,00,80,df,d8,06,00,00,00,00,04,00,00,00,00,00,00,00,70,1f,24,00,\ - 00,00,00,00,00,00,00,00,00,00,00,00,a0,e1,a2,02,00,00,00,00,92,15,54,fd,fe,\ - 07,00,00,20,08,c6,06,00,00,00,00,70,1f,24,00,00,00,00,00,80,df,d8,06,00,00,\ - 00,00,04,00,00,00,00,00,00,00,70,1f,24,00,00,00,00,00,00,00,00,00,00,00,00,\ - 00,70,1f,24,00,00,00,00,00,43,9f,f4,fe,fe,07,00,00,70,1f,24,00,00,00,00,00,\ - 70,1f,24,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,00,00,00,00,70,\ - 1f,24,00,00,00,00,00,70,1f,24,00,00,00,00,00,03,00,00,00,00,00,00,00,ce,07,\ - f3,fe,fe,07,00,00,c0,fb,bc,06,00,00,00,00,03,00,00,00,00,00,00,00,40,08,c6,\ - 06,00,00,00,00,03,00,00,00,00,00,00,00,30,e1,a2,02,00,00,00,00,00,00,15,00,\ - 00,00,00,00,78,7f,cc,c9,f0,1c,f9,41,a1,1a,99,4b,a5,a9,a5,4d,0d,00,00,00,01,\ - 00,00,00,ec,2d,02,00,fc,07,00,00,8c,07,00,00,00,00,00,00,f3,24,7c,d2,2f,d7,\ - 00,00,66,01,32,01,ef,00,00,00,96,1c,f3,fe,fe,07,00,00,00,00,00,00,00,00,00,\ - 00,8e,5d,83,f8,fe,07,00,00,d0,d4,c6,06,00,00,00,00,12,88,84,f8,fe,07,00,00,\ - ff,00,00,00,00,00,00,00,07,01,00,00,00,00,00,00,01,02,00,00,00,00,00,00,98,\ - e2,a2,02,00,00,00,00,00,00,00,00,00,00,00,00,2e,00,00,00,5d,32,22,00,4d,00,\ + 00,00,00,32,00,38,00,46,00,43,00,32,00,33,00,7d,00,5c,00,72,00,65,00,67,00,\ + 65,00,64,00,69,00,74,00,2e,00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,48,80,7d,fd,fe,07,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,70,80,7d,fd,fe,07,\ + 00,00,02,0a,01,32,00,00,00,00,40,c8,bd,02,00,00,00,00,00,00,00,00,00,00,00,\ + 00,70,80,7d,fd,fe,07,00,00,02,0a,01,32,00,00,00,00,40,c8,bd,02,00,00,00,00,\ + 00,00,00,00,00,00,00,00,0f,00,00,00,00,00,00,00,d4,17,bd,02,00,00,00,00,d0,\ + 19,bd,02,00,00,00,00,d4,17,bd,02,00,00,00,00,00,00,00,00,00,00,00,00,64,66,\ + 6c,74,00,00,00,00,1c,1a,bd,02,00,00,00,00,b4,1a,bd,02,00,00,00,00,e0,e2,a2,\ + 02,00,00,00,00,5c,d6,7e,fd,fe,07,00,00,d0,19,bd,02,00,00,00,00,38,19,bd,02,\ + 00,00,00,00,00,00,00,00,00,00,00,00,38,19,bd,02,00,00,00,00,b4,1a,bd,02,00,\ + 00,00,00,08,91,7d,fd,fe,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,1c,1a,bd,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,d4,17,bd,02,00,00,00,00,38,19,bd,02,00,00,00,00,\ + 0f,00,00,00,00,00,00,00,1c,1a,bd,02,00,00,00,00,00,00,00,00,00,00,00,00,b4,\ + 1a,bd,02,00,00,00,00,1c,1a,bd,02,00,00,00,00,30,00,00,00,3f,b4,22,00,4d,00,\ 69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,2e,00,57,00,69,00,6e,00,64,\ 00,6f,00,77,00,73,00,2e,00,43,00,6f,00,6e,00,74,00,72,00,6f,00,6c,00,50,00,\ - 61,00,6e,00,65,00,6c,00,00,00,00,00,00,00,00,00,5d,42,62,74,00,00,00,00,04,\ - 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,95,86,f4,fe,fe,07,00,00,50,fb,\ - bc,06,00,00,00,00,00,00,00,00,00,00,00,00,80,f8,1c,00,00,00,00,00,5a,9d,f0,\ - fe,fe,07,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,20,08,c6,06,\ - 00,00,00,00,03,00,00,00,00,00,00,00,80,df,d8,06,00,00,00,00,04,00,00,00,00,\ - 00,00,00,70,1f,24,00,00,00,00,00,00,00,00,00,00,00,00,00,a0,e1,a2,02,00,00,\ - 00,00,92,15,54,fd,fe,07,00,00,20,08,c6,06,00,00,00,00,70,1f,24,00,00,00,00,\ - 00,80,df,d8,06,00,00,00,00,04,00,00,00,00,00,00,00,70,1f,24,00,00,00,00,00,\ - 00,00,00,00,00,00,00,00,70,1f,24,00,00,00,00,00,43,9f,f4,fe,fe,07,00,00,70,\ - 1f,24,00,00,00,00,00,70,1f,24,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,\ - 00,00,00,00,00,00,70,1f,24,00,00,00,00,00,70,1f,24,00,00,00,00,00,03,00,00,\ - 00,00,00,00,00,ce,07,f3,fe,fe,07,00,00,c0,fb,bc,06,00,00,00,00,03,00,00,00,\ - 00,00,00,00,40,08,c6,06,00,00,00,00,03,00,00,00,00,00,00,00,30,e1,a2,02,00,\ - 00,00,00,00,00,15,00,00,00,00,00,78,7f,cc,c9,f0,1c,f9,41,a1,1a,99,4b,a5,a9,\ - a5,4d,0d,00,00,00,01,00,00,00,ec,2d,02,00,fc,07,00,00,8c,07,00,00,00,00,00,\ - 00,f3,24,7c,d2,2f,d7,00,00,66,01,32,01,ef,00,00,00,96,1c,f3,fe,fe,07,00,00,\ - 00,00,00,00,00,00,00,00,8e,5d,83,f8,fe,07,00,00,d0,d4,c6,06,00,00,00,00,12,\ - 88,84,f8,fe,07,00,00,ff,00,00,00,00,00,00,00,07,01,00,00,00,00,00,00,01,02,\ - 00,00,00,00,00,00,98,e2,a2,02,00,00,00,00,00,00,00,00 + 61,00,6e,00,65,00,6c,00,00,00,32,00,38,00,46,00,43,00,32,00,33,00,7d,00,5c,\ + 00,72,00,65,00,67,00,65,00,64,00,69,00,74,00,2e,00,65,00,78,00,65,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,48,80,7d,fd,fe,07,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,70,80,7d,fd,fe,07,00,00,02,0a,01,32,00,00,00,00,40,c8,bd,02,00,00,00,00,\ + 00,00,00,00,00,00,00,00,70,80,7d,fd,fe,07,00,00,02,0a,01,32,00,00,00,00,40,\ + c8,bd,02,00,00,00,00,00,00,00,00,00,00,00,00,0f,00,00,00,00,00,00,00,d4,17,\ + bd,02,00,00,00,00,d0,19,bd,02,00,00,00,00,d4,17,bd,02,00,00,00,00,00,00,00,\ + 00,00,00,00,00,64,66,6c,74,00,00,00,00,1c,1a,bd,02,00,00,00,00,b4,1a,bd,02,\ + 00,00,00,00,e0,e2,a2,02,00,00,00,00,5c,d6,7e,fd,fe,07,00,00,d0,19,bd,02,00,\ + 00,00,00,38,19,bd,02,00,00,00,00,00,00,00,00,00,00,00,00,38,19,bd,02,00,00,\ + 00,00,b4,1a,bd,02,00,00,00,00,08,91,7d,fd,fe,07,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,1c,1a,bd,02,00,00,00,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,d4,17,bd,02,00,00,00,00,38,\ + 19,bd,02,00,00,00,00,0f,00,00,00,00,00,00,00,1c,1a,bd,02,00,00,00,00,00,00,\ + 00,00,00,00,00,00,b4,1a,bd,02,00,00,00,00,1c,1a,bd,02 "{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\qvfcynlfjvgpu.rkr"=hex:00,00,00,00,0d,\ 00,00,00,13,00,00,00,60,cc,05,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,\ 80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\ @@ -2259632,7 +2259402,7 @@ bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,50,87,98,e9,\ 16,cf,cd,01,00,00,00,00 "{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\rkcybere.rkr"=hex:00,00,00,00,06,00,\ - 00,00,26,00,00,00,99,0c,09,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\ + 00,00,27,00,00,00,51,18,09,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\ bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\ ff,ff,ff,ff,d0,97,e3,00,30,d7,cd,01,00,00,00,00 "Q:\\IOBKJVAQBJFNQQVGVBAF-NZQ64.RKR"=hex:00,00,00,00,00,00,00,00,04,00,00,00,\ @@ -2259647,7 +2259417,7 @@ 01,00,00,00,20,6a,01,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,\ 00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,\ ff,ff,70,72,96,0b,1e,cf,cd,01,00,00,00,00 -"Zvpebfbsg.Jvaqbjf.PbagebyCnary"=hex:00,00,00,00,00,00,00,00,2e,00,00,00,5d,32,\ +"Zvpebfbsg.Jvaqbjf.PbagebyCnary"=hex:00,00,00,00,00,00,00,00,30,00,00,00,3f,b4,\ 22,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\ bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,00,00,\ 00,00,00,00,00,00,00,00 @@ -2259688,7 +2259458,7 @@ 00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,\ ff,ff,ff,a0,a5,a0,a6,c0,d3,cd,01,00,00,00,00 "Zvpebfbsg.Jvaqbjf.JvaqbjfVafgnyyre"=hex:00,00,00,00,00,00,00,00,00,00,00,00,\ - 82,50,00,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,\ + b5,5f,00,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,\ 00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,\ 00,00,00,00,00,00,00,00,00,00 "{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\\Zvpebfbsg Bssvpr\\Bssvpr12\\JVAJBEQ.RKR"=hex:00,\ @@ -2259720,7 +2259490,7 @@ bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\ 00,00,80,bf,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00 "{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\ertrqvg.rkr"=hex:00,00,00,00,03,00,00,\ - 00,19,00,00,00,da,04,05,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\ + 00,1b,00,00,00,e3,5b,05,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\ 00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,\ ff,ff,ff,80,d2,17,14,30,d7,cd,01,00,00,00,00 "P:\\Hfref\\64-7-jvaqbjf\\Qbjaybnqf\\QviihaVafgnyyre-20081231.rkr"=hex:00,00,\ @@ -2261576,7 +2261346,7 @@ [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform] [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Activation] -"LastAction"=hex(b):b9,a9,ce,06,03,00,00,00 +"LastAction"=hex(b):c1,05,d7,06,03,00,00,00 "ActionId"=dword:0000001d [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows] @@ -2261940,11 +2261710,20 @@ [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Classes\Local Settings\MuiCache] -[HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Classes\Local Settings\MuiCache\A8] +[HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Classes\Local Settings\MuiCache\A9] -[HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Classes\Local Settings\MuiCache\A8\52C64B7E] +[HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Classes\Local Settings\MuiCache\A9\52C64B7E] "LanguageList"=hex(7):65,00,6e,00,2d,00,55,00,53,00,00,00,65,00,6e,00,00,00,00,\ 00 +"@C:\\Windows\\system32\\appwiz.cpl,-159"="Programs and Features" +"@appwiz.cpl,-165"="Uninstall" +"@appwiz.cpl,-166"="Uninstall this program." +"@appwiz.cpl,-167"="Change" +"@appwiz.cpl,-168"="Change the installation of this program." +"@appwiz.cpl,-169"="Repair" +"@appwiz.cpl,-170"="Repair the installation of this program." +"@appwiz.cpl,-171"="Uninstall/Change" +"@appwiz.cpl,-172"="Uninstall or change this program." "@C:\\Windows\\system32\\NetworkExplorer.dll,-1"="Network" [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Classes\Local Settings\Software] @@ -2264899,7 +2264678,7 @@ [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU] "NodeSlots"=hex:02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,\ 02,02,02,02,02,02,02,02,02,02,02,02,02 -"MRUListEx"=hex:00,00,00,00,02,00,00,00,04,00,00,00,03,00,00,00,01,00,00,00,ff,\ +"MRUListEx"=hex:01,00,00,00,00,00,00,00,02,00,00,00,04,00,00,00,03,00,00,00,ff,\ ff,ff,ff "0"=hex:14,00,1f,50,e0,4f,d0,20,ea,3a,69,10,a2,d8,08,00,2b,30,30,9d,00,00 "1"=hex:14,00,1f,70,68,06,ee,26,0a,a0,d7,44,93,71,be,b0,64,c9,86,83,00,00 @@ -2266452,11 +2266231,20 @@ [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000_Classes\Local Settings\MuiCache] -[HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000_Classes\Local Settings\MuiCache\A8] +[HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000_Classes\Local Settings\MuiCache\A9] -[HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000_Classes\Local Settings\MuiCache\A8\52C64B7E] +[HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000_Classes\Local Settings\MuiCache\A9\52C64B7E] "LanguageList"=hex(7):65,00,6e,00,2d,00,55,00,53,00,00,00,65,00,6e,00,00,00,00,\ 00 +"@C:\\Windows\\system32\\appwiz.cpl,-159"="Programs and Features" +"@appwiz.cpl,-165"="Uninstall" +"@appwiz.cpl,-166"="Uninstall this program." +"@appwiz.cpl,-167"="Change" +"@appwiz.cpl,-168"="Change the installation of this program." +"@appwiz.cpl,-169"="Repair" +"@appwiz.cpl,-170"="Repair the installation of this program." +"@appwiz.cpl,-171"="Uninstall/Change" +"@appwiz.cpl,-172"="Uninstall or change this program." "@C:\\Windows\\system32\\NetworkExplorer.dll,-1"="Network" [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000_Classes\Local Settings\Software] @@ -2269411,7 +2269199,7 @@ [HKEY_USERS\S-1-5-21-164310048-1186453185-3807058724-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU] "NodeSlots"=hex:02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,02,\ 02,02,02,02,02,02,02,02,02,02,02,02,02 -"MRUListEx"=hex:00,00,00,00,02,00,00,00,04,00,00,00,03,00,00,00,01,00,00,00,ff,\ +"MRUListEx"=hex:01,00,00,00,00,00,00,00,02,00,00,00,04,00,00,00,03,00,00,00,ff,\ ff,ff,ff "0"=hex:14,00,1f,50,e0,4f,d0,20,ea,3a,69,10,a2,d8,08,00,2b,30,30,9d,00,00 "1"=hex:14,00,1f,70,68,06,ee,26,0a,a0,d7,44,93,71,be,b0,64,c9,86,83,00,00 @@ -2271324,7 +2271112,7 @@ [HKEY_USERS\S-1-5-18\Software\Classes\Local Settings\MuiCache] -[HKEY_USERS\S-1-5-18\Software\Classes\Local Settings\MuiCache\A8] +[HKEY_USERS\S-1-5-18\Software\Classes\Local Settings\MuiCache\A9] [HKEY_USERS\S-1-5-18\Software\Microsoft]