Analysis
| Category | Package | Started | Completed | Duration | Options | Log(s) |
|---|---|---|---|---|---|---|
| FILE | exe | 2025-06-11 14:12:41 | 2025-06-11 14:30:05 | 1044 seconds | Show Options | Show Analysis Log |
procmemdump=1
import_reconstruction=1
unpacker=2
norefer=1
no-iat=1
2024-11-25 13:37:15,194 [root] INFO: Date set to: 20250611T08:31:47, timeout set to: 1000 2025-06-11 09:31:47,453 [root] DEBUG: Starting analyzer from: C:\tmp_gell1p8 2025-06-11 09:31:47,453 [root] DEBUG: Storing results at: C:\SbKWKlSV 2025-06-11 09:31:47,453 [root] DEBUG: Pipe server name: \\.\PIPE\OVRmkbV 2025-06-11 09:31:47,453 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32 2025-06-11 09:31:47,453 [root] INFO: analysis running as an admin 2025-06-11 09:31:47,453 [root] INFO: analysis package specified: "exe" 2025-06-11 09:31:47,453 [root] DEBUG: importing analysis package module: "modules.packages.exe"... 2025-06-11 09:31:48,078 [root] DEBUG: imported analysis package "exe" 2025-06-11 09:31:48,078 [root] DEBUG: initializing analysis package "exe"... 2025-06-11 09:31:48,094 [lib.common.common] INFO: wrapping 2025-06-11 09:31:48,094 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation 2025-06-11 09:31:48,094 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\setup_wm.exe 2025-06-11 09:31:48,094 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option 2025-06-11 09:31:48,094 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option 2025-06-11 09:31:48,094 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option 2025-06-11 09:31:48,094 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option 2025-06-11 09:31:48,438 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser" 2025-06-11 09:31:48,469 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig" 2025-06-11 09:31:48,516 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise" 2025-06-11 09:31:48,531 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human" 2025-06-11 09:31:48,547 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops' 2025-06-11 09:31:48,547 [lib.api.screenshot] ERROR: No module named 'PIL' 2025-06-11 09:31:48,547 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots" 2025-06-11 09:31:48,547 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump" 2025-06-11 09:31:48,547 [root] DEBUG: Initialized auxiliary module "Browser" 2025-06-11 09:31:48,547 [root] DEBUG: attempting to configure 'Browser' from data 2025-06-11 09:31:48,547 [root] DEBUG: module Browser does not support data configuration, ignoring 2025-06-11 09:31:48,547 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"... 2025-06-11 09:31:48,547 [root] DEBUG: Started auxiliary module modules.auxiliary.browser 2025-06-11 09:31:48,547 [root] DEBUG: Initialized auxiliary module "DigiSig" 2025-06-11 09:31:48,547 [root] DEBUG: attempting to configure 'DigiSig' from data 2025-06-11 09:31:48,563 [root] DEBUG: module DigiSig does not support data configuration, ignoring 2025-06-11 09:31:48,563 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"... 2025-06-11 09:31:48,563 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature 2025-06-11 09:31:48,703 [modules.auxiliary.digisig] DEBUG: File is not signed 2025-06-11 09:31:48,703 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json 2025-06-11 09:31:48,719 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig 2025-06-11 09:31:48,719 [root] DEBUG: Initialized auxiliary module "Disguise" 2025-06-11 09:31:48,719 [root] DEBUG: attempting to configure 'Disguise' from data 2025-06-11 09:31:48,719 [root] DEBUG: module Disguise does not support data configuration, ignoring 2025-06-11 09:31:48,719 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"... 2025-06-11 09:31:48,719 [modules.auxiliary.disguise] INFO: Disguising GUID to 17f92b02-79d2-44f4-a080-01a9f0954dcc 2025-06-11 09:31:48,719 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise 2025-06-11 09:31:48,719 [root] DEBUG: Initialized auxiliary module "Human" 2025-06-11 09:31:48,719 [root] DEBUG: attempting to configure 'Human' from data 2025-06-11 09:31:48,719 [root] DEBUG: module Human does not support data configuration, ignoring 2025-06-11 09:31:48,719 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"... 2025-06-11 09:31:48,719 [root] DEBUG: Started auxiliary module modules.auxiliary.human 2025-06-11 09:31:48,719 [root] DEBUG: Initialized auxiliary module "Screenshots" 2025-06-11 09:31:48,719 [root] DEBUG: attempting to configure 'Screenshots' from data 2025-06-11 09:31:48,719 [root] DEBUG: module Screenshots does not support data configuration, ignoring 2025-06-11 09:31:48,719 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"... 2025-06-11 09:31:48,719 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled 2025-06-11 09:31:48,719 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots 2025-06-11 09:31:48,719 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets" 2025-06-11 09:31:48,719 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data 2025-06-11 09:31:48,719 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring 2025-06-11 09:31:48,719 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"... 2025-06-11 09:31:48,719 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696 2025-06-11 09:31:48,750 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmp_gell1p8\dll\696.ini 2025-06-11 09:31:48,766 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor 2025-06-11 09:31:48,766 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor 2025-06-11 09:31:48,766 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor 2025-06-11 09:31:48,766 [lib.api.process] INFO: Option 'norefer' with value '1' sent to monitor 2025-06-11 09:31:48,766 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor 2025-06-11 09:31:48,766 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor 2025-06-11 09:31:48,766 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp_gell1p8\dll\eJXvNnhR.dll, loader C:\tmp_gell1p8\bin\IytHUKoC.exe 2025-06-11 09:31:48,828 [root] DEBUG: Loader: IAT patching disabled. 2025-06-11 09:31:48,828 [root] DEBUG: Loader: Injecting process 696 with C:\tmp_gell1p8\dll\eJXvNnhR.dll. 2025-06-11 09:31:48,875 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'. 2025-06-11 09:31:48,875 [root] INFO: Disabling sleep skipping. 2025-06-11 09:31:48,875 [root] DEBUG: 696: Full process memory dumps enabled. 2025-06-11 09:31:48,875 [root] DEBUG: 696: Import reconstruction of process dumps enabled. 2025-06-11 09:31:48,875 [root] DEBUG: 696: Active unpacking of payloads enabled 2025-06-11 09:31:48,875 [root] DEBUG: 696: CAPE debug - unrecognised key norefer. 2025-06-11 09:31:48,875 [root] DEBUG: 696: TLS secret dump mode enabled. 2025-06-11 09:31:48,875 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542 2025-06-11 09:31:48,891 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable 2025-06-11 09:31:48,891 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0 2025-06-11 09:31:48,891 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF8234D0000, thread 4648, image base 0x00007FF60D500000, stack from 0x0000008EFAA74000-0x0000008EFAA80000 2025-06-11 09:31:48,891 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe 2025-06-11 09:31:48,907 [root] DEBUG: 696: Hooked 5 out of 5 functions 2025-06-11 09:31:48,907 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread. 2025-06-11 09:31:48,907 [root] DEBUG: Successfully injected DLL C:\tmp_gell1p8\dll\eJXvNnhR.dll. 2025-06-11 09:31:48,907 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe> 2025-06-11 09:31:48,907 [roo <truncated>
Machine
| Name | Label | Manager | Started On | Shutdown On | Route |
|---|---|---|---|---|---|
| win10-2 | win10-2 | KVM | 2025-06-11 14:12:41 | 2025-06-11 14:29:44 | none |
File Details
| File Name |
setup_wm.exe
|
|---|---|
| File Type | PE32+ executable (GUI) x86-64, for MS Windows |
| File Size | 1835008 bytes |
| MD5 | 2598574253e2f749d1bcdf1975036e46 |
| SHA1 | 374559ba7545bcc76823dedd1b7bbfcf86b51d17 |
| SHA256 | 7e1065bd659f3403d2655e5e5a459996f2ea742459a0ca6f866edd3d90276802 [VT] [MWDB] [Bazaar] |
| SHA3-384 | 1f70a5709b7d35eb98f99e12e08e3fe27945719d99c04bf46090d579edd27d4bfa53b0cb3dd505ea7bef09dad8c87d71 |
| CRC32 | 9FD5A4CB |
| TLSH | T154853286F603ED4BE3D4E8348825DA76626237BD97F348B9BC6CB5D8F61A5533014E02 |
| Ssdeep | 12288:vW9s7CMVCz3QpjrSVxsTBE/vRcvJYQqLWac0qpb0qD0xc:Be8p6J54JYJL1q2qDF |
| PE | File Strings BinGraph Vba2Graph |
Full Results
| Engine | Result | Engine | Result | Engine | Result | APEX | Malicious |
|---|
HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH
fE9$^u
l$ VWATAVAWH
Processed %S line: '%S', result 0x%x.
Q555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555&eIIIIIII
1/.-,*J
AkB,="6
::+,-
@.data
D$HHc
tiD9=
D$hE3
Rycec2
uC9|$0u=
SelectObject
IsDlgButtonChecked
/3<99;30//
N&~/i
>FQ[N[YYXXXWWWccbbbbaaa````````nnn`
7e<QP[ZYXdccaa``nmllkjjzzzyyxxxxx
'-Xijm
Service installer failed initializing. Finishing now.
ERROR: Install for package was halted. RunDll32.exe was not found on the system.
ERROR: Bad pointer.
ReleaseMutex
GetStartupInfoW
R#&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$R
}{zxwvurqpolaheJ6B0.+
/FixUps
PA^_^][
}{zywvurqponlljjdU6B15
^eeeeeeeeeeeeeeefdfdfd]#(
ERROR: Failed delaying dll registration for file '%S': '0x%x'.
WARNING: Reboot required due to file '%S'.
GetInstallSizeEstimate for '%S': size: '%lu'.
AddAccessAllowedAceEx
V.;;2
b////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////bH9:=?bccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccb?=:98777
?hnF444444Nuhlz
CurrentBuildNumber
Warning: AllowInstall returned FALSE for this service.
5//-----|0447==
UrlMkSetSessionOption
W????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????XfSTUVXZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZXVUTSRQQQ
ButtonText
NONADMININSTALL
ERROR: %S was not executed as the WMP11 install check was -ve. Setup will not fail because of this issue.
ERROR: Download manager busy. Try again later.
wr5?DDDDDEEEE;s
u*9Q<|%
14"5#
SendUserGUID
ERROR: Could not find file '%S' at source '%S' for dest '%S': 0x%x.
@(oBq
InternetHangup
CheckRadioButton
H!M8I
ERROR: XML Parser: No install available locally, URL not provided.
HHHHHHHSP[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[%
=<=<=<<<<G<=fu
d$X9D$PA
%stmp%05d.WMC\%s
T33~sr}u[
Finished building install list. Result: '0x%x'.
}8-vf
u}}~}
}{{ywvurqponlljheJ6
Uouuzzz
Setup commandlines are %S.
UnInstall warning: dependencies found.
L$xE3
CreateWindowExW
SetThreadDpiAwarenessContext
L(``
WritePrivateProfileStringW
L9()6
6666666665
ERROR: Could not set system restore point: error 0x%x.
JKLN%888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888%NLKJIHHHHjjHHHHHHHSP666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666%
SetCursor
RegSetValueExW
tHRYb
3333333332**(*
%lu.%lu.%lu.%lu
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
Warning: User profile not fully loaded: 0x%x.
ux|}}}}}}}v
L$HE3
hCCAAACAAAAAA?Z
XVCBB@C
Software\Microsoft\WindowsMedia\Setup\BlockingRefCounts\%s
ef-:,
*))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))''''''''''''''''''''CV[[[[[[[[[[[[[[[[^^^^[t
ED"<=-
TYaBvu~
gop6:.
</security>
E666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666bH9;>AbHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHbA>;987777jj7777777
CLSIDFromString
vjihmmmmmmmmmmmggggggggspYY=1qmxpY<=JGKG0<3%
rC)''
r{%&&&&&&$$$+I
Jmzrj.
~1f====f@]>3
ERROR: %S, 2-queryservicestatus
SetEntriesInAclW
Reading
RII:!
Begywvurqponljjjj``dU6B15
H!\$ E3
GBiqoommmmmmmggggggggspYY=1qmxnYY=JG
DefaultSubscriptionService
Service '%S' is either not installed or has not been used yet.
RRRSTVWXZ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ZXWVTiYbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbZhRRRRRRR
VL_Bvu~
H9phL
VWAVH
UDBVersion
_wcslwr
ERROR: Reg Parser: Missing required Dependency attribute '%S'.
wmp11-64.exe
H!\$ 3
!\$4E3
ggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg
-,::+-
```Vdl.
46666666561
]D|zEu
:Ds&^
'j())kkkkk))rj'
RequiredFile
4444444
I@KBKBX
d$@E3
Microsoft Corporation
Starting process '%S'.
ERROR: WMC_CopyFile: Could not find source file '%S'. Error: '0x%x'.
<+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*
SUCCESS: Package '%S'. Result: 0x%x.
LoadLibraryExW
'-Ihhhhijg7y
PathFindFileNameW
CommonFilesDir
type="win32"
,zzXihhiilXN
97t%H
Dll Registration: Succeeded for file '%S'.
W````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````XfSTUVX\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\XVUTSRQQQQjjQQQQQQQ
_XcptFilter
f;D$ u
COPYFILES
_lock
InternetAutoDial returned: '0x%x' for connection '%lu'.
Cwrt~),)))QG{{{{
$?8()vb6<
\G;FLLRPPPZXdcaa`nmljjii{
D9t$0
INF set SmartReboot=A
USVWATAUAVAWH
EVNT0
InternetAutodial
I;;;,
Q31tsrrrromwy
-5)JDkf=0=]aiA|
X'!%)
PIO *!OA
t<D9=a
m6.4$z
=tu{QV
@SUVWAVH
f\/E;
splg7yx
fE9,@u
name="Microsoft.Windows.MediaPlayer.SetupWM"
WMFSDK11_DRMUpgrade
D;Xdr
ERROR: MoveFileEx failed for file '%S'. Error: '0x%x'.
GetTempPathA
Parsing Reg section:'%S'.
9
@A@BL
ERROR: FUE believed a reboot was required. Resetting this.
GFBFFJNW[_XRS[SRR[
Install denied: a newer version is already on the system.
ERROR: Installer: Not initialized: shutting down.
ERROR: Attempted to install '%S' which had been marked as noninstallable.
Setup requires a reboot. The user will need to reboot.
}WJeb
1:FLM
\WMPNSCFG.exe
|x||||u
Default service is now set to: '%S'.
}{zxwvurqpheJ6B0.-+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++/50Q^
ATL.DLL
%s %s
FUE_PATH_TAKEN
6666665556,
sssoooqh5
_initterm
e\\\\\YUb
msiexec.exe /uninstall %s /qn /norestart
Task1ButtonText
9|$HtwHc
Software\Microsoft\Multimedia\WMPlayer\WMPQFEBackup
L9k`trH
Stopping service '%S'.
.idata$5
`L@C@
{xxwmvfp>
&*)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))'%YW
LoadLibraryW
E)('(((%|Sby
L$ VWATAVAWH
XML Service content partner status: '%S'.
NoServices
CreateSolidBrush
^<KKKDKKKKKKKKKKKRKKKKKKKKKLE
LvtiD|z
uuuuzz
SubscriptionObjectGUID
s;EEEEE;r:+-
:5/-/---//04477===
ERROR: Download canceled. Out of memory.
D;Xdw
ObtainUserAgentString
static
System is already on-line.
vvvvvvvvyyyw
WMCv2 Migration: Migrating user '%S'.
!\$lL
.pdata
wcschr
button
Microsoft
WMPNSCFG
ngC('
]D|zEv
fh2"2
Task3ButtonText
_acmdln
/////////////
H95}<
S3kvsrrrooooomsy
ERROR: Download Manager timed out connecting.
UNINSTALL
{}xvtpnlije`a_LKZYGFEA@><8:(
INSTALLEDSIZE
|!!t$hL
4999999999
ggggggggiQh$
752pi
Global\ServicePackOrHotfix
_Bvt~
#111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111XfSTUVX333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333XVUTSRQQQQjj
\==<G<GGGFFFLLLRRP[ZZdcbba`nmlkjzzyyxx
RedistPackage
JA$.0
!I\ZZGFEAA><86421.,++*$%
ERROR: Package download failure has occured. Result: 0x%x.
s;EEFEL
is not
QnES8`1
CloseServiceHandle
GetMessageW
AcceptedEULA
}HD9}P
10<>=.KP
KPG:55/---|||0.2
0tl{ctl{ctl{c
T$LE3
DEFAULTINSTALL
fD94Bu
\msxml.dll
SetEvent
03"4O,Ie
L$XE3
Preparing
SleepConditionVariableSRW
_exit
H2Dus}v
/ServiceExtra
|xvtrplijdef_L\KZGFCBA><96420$%
,:VYU
Software\Microsoft\MediaPlayer\Services\%s
Windows Media Player 8
CatalogURL
MPlayer2_FixUp
GetConnectedState: User '%hs' connected via LAN.
t)L9c
t+958r
D9d$huQL
%USERNAME%
Cab Extractor: Extracting '%hs' from cab.
Install for component '%S' was halted. Ran out of disk space. Needed at least %lu kbytes more.
0A^_^
l$DHc
MoveFileExW
InternetQueryOptionA
!QU1f
u*9] u
|$LD;|$P
GetFileTime
00000000
9JCg|
wvvvvvyvyyyww
Z[^{N4t
Warning: Base URL not defined in XML.
GetFileAttributesA
vvvvvvyyy~ywwwv~
eF[[[YXXWccbba``nnmlllkjjjzzzzzzzyyyi
\?BBAAAABAAAAAAAAAA>
w}||||}|}}}}}}}}}~~}~~~~
Jcx6"1
f9\$$
!<?64410.,++*)$,
Windows Media Player 10
LaunchSecurityDialog
`YaBvu~
0A_A^A\_^
f9D$0u
UPDATEEXE
Z[`{PR
C/:bz
8889:;>@deeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeed@>;:Kd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dH8888888
InternetCrackUrlW
RRRSTVWXZ444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444ZXWVTif666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666ZhRRRRRRR
!D$4L
UninstallString
t$HHc
p WAVAWH
D;d$d|
Progress_MaxInstall
fD9$Ou
http\shell\open\command
w~|||||
qtDJKN
J;555553557
FD:98<;521/..
%lu|%lu|%lu|%lu|%s
/CreateService
.tls$ZZZ
CoCreateInstance
wrpmkghe`a]LKZZ;;;55<
GetCommandLineW
'-Xhhhiiog4)"
*Downloading new UDB file.
IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII
Parsing DelDirs section:'%S'.
ERROR: ProcessSetupCommand failed for: '%S': 0x%x.
;;<<<<9<9
:`t4w_D
DESCRIPTION
inetcpl.cpl
REASON
InternetDial returned: '0x%x' for connection '%lu'.
G/.,+
tJMMMMaNNMMMMKKMNaijbbb
GetFileAttributesW
%s_%s
\wmplayer.exe
1.pOLN
GetScrollInfo
F+*''Fd
tv!E(H
=KKDJJJKJJJJJJJJRJJJRRRRRRRKD
ERROR: Package download failure for '%S'. Result: 0x%x.
t-9=a
Progress_CurrentInstall
RUNPOSTSETUPCOMMANDS
SetupGetStringFieldW
.CRT$XIA
oJ020N
#222335
N?94355332LT
GdipDisposeImage
!J &X
/SysTrayAndQuit
Trust on catalog '%S' beginning. Last result: 0x%x.
LCBABAABAAAY
reglB6
tE95B=
|$(E3
DispatchMessageW
PJD)1
%s\Microsoft\Media Player\%s\%s
OpenEventW
D+L$pH
t$X95
|xvtrplijhef_L\KZGFCBA><984210,#
;;;;;;6666A
13Bxrr}y
mppqk#"
~{|}vtrpnigh`abL\KZYGCBA><9647'
H9phH
ERROR: Reg Parser: Failed to add dependency information from reg. Result: 0x%x.
lll445556l
Y[00Q
rGKMKKKa
]D|zEu[[k,
=====Building Install list.
t,D9=
ERROR: Dll Registration: Failed for file '%S': '0x%x'.
ResetEvent
x UAVAWH
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
BASEURL
#222333l4l
RO444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444$R
FileDescription
UPDATEDB
T$|E3
78M$H
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
ServiceLargeURL
}zyxwurqponllje
Parsing DeleteServices section:'%S'.
9.0.0.0
!l$hH
Previous service is: '%S'.
%s.bak
-A<986410.,++*
=<<GGGFFLLLRRP[ZZdcba``mmkjjzzyxx
ERROR: DRM licence migration failed. Setup will not fail because of this issue.
H9XpL
Q555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555&eIIIIIIIIppIIIJKLMO&^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^&OMLK
'-Ihhfhhic2yy
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\MediaPlayer
>K[[[YXXWWcbbbaa`nnnmmmlllkkjjjjjjjjr
WMC_CopyFile: File '%S' is newer than the installed version. This file will be installed.
UWATAVAWH
</asmv3:application>
xo`_^Hv|D49:@x
UebKHs
BeginPaint
*)))))))))))))))))'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''CV[[[[[[[[[[[[[[[[^^^^[t
}{zxwvuqeU6
10///0
d$tE3
d$hfD
ntdll.dll
322##
WinVerifyTrust
XML Parser: Parsing Element '%S'.
()*+,-.FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF.-,+*))))
AllowProtectedRenames
PPPPP:
InitializeCriticalSection
WakeAllConditionVariable
win:Informational
WMSetup10RTM-UI
1111,*,*,*(((******1111
A_A^A\_^
SetWindowLongPtrW
L$hE3
F8,3u
TYPEDATA
d$4D9t$8A
,47gsppppsj
SetWindowLongW
D9t$0t
GdipCreateBitmapFromHBITMAP
AdjustTokenPrivileges
rB,l"l
@8|$@t
Moved file '%S' to temp location for clean-up upon reboot.
l$0E3
jt47ZK
SOFTWARE\Microsoft\MediaPlayer\Preferences
GetFileVersionInfoSizeW
GHL9oP
e4`4~
d555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555XfSTUVX333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333XVUTSRQQQ
D$HA9\$
System\CurrentControlSet\Control\ProductOptions
hhiD|z
?hnFR44444Nyhl}
version="6.0.0.0"
408|420|80|22
Could not obtain SID for user.
InternetReadFile
!OEWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbW
ERROR: XML Parser: Missing required component attribute '%S'.
Install denied: Loc version already installed.
D$(E3
}{yxwvur_^E6
fD9<Hu
wmp.dll
CLSID
H9222"MU
wmdbexport.exe
ConvertSidToStringSidW
ERROR: Unknown install type in Service provider install.
x@<;,
%sWMC%4.4lu.tmp
XML Parser: AddService returned '0x%x'.
RRRSTVWXZ444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444ZXWVTi$222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222ZhRRRRRRR
/392
CompuServe
UWATH
+D$<D+L$8H
L$(E3
z{{{x
H UATAUAVAWH
/#;879<520/////00011
E666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666bH9;>AbHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHbA>;98777
fF9$wu
D!t$(I
}{zxwvurfl?6=>(-))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))*$@V
+Z:z6
|$HA;
UVWAVAWH
ERROR: Nothing to install.
L$0E3
GetSysColor
ExpandEnvironmentStringsForUserW
ERROR: Component '%S' is NOT available for install.
'-Xjmp=
R#ZJGGCA@@<9:4200,,+)
fG9<qu
?hnF444444Nyhlz
DrawFocusRect
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''ACCCCCCCCCCCCCCCCCCCCBW
ERROR: Registry transaction failure for: '%S'.
//////
{}xvtrnlPjh`a_L\KYGFCB@>99644.
Software\Microsoft\Multimedia\WMPlayer\WMFDistQFEBackup
A_A^A\_]
!#/.
,47cpppppplJ47I______\F8?MSSRUUUUUUUUUUUUUUUUUURURURRRRRRRRRRORRRLY
EULAURL
InitiateShutdownW
GetWindowsDirectoryA
Installation DirectoryLFN
GetCurrentDirectoryW
%s_NT
+L$4D
F.-+*)))))jj))))))))(
H!\$0E3
vwm>T
TerminateProcess
~ML9?tHA
T$0fD
SetupFindNextLine
f9,Au
^^@D|zE{hcD,KNIh
C-/3:9<41//
ccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccd`:
D!t$
Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVD
will not
\Spool
'-Xjp4
fD9<zu
D$p;D$h
CompareStringW
A_A^A]
531vsrrowy
]D|zEtZZk,
NOTICE: Deskband is currently running.
_Bvu~
D;d$Lu
WMC_CopyFile: Could not replace file '%S'. This file will be replaced on reboot.
\rundll32.exe
t$hfD
ERROR: Registry key change failed: lRes = 0x%x.
]\\\\Y
Uninstalling legacy WMC install.
advinf
Service '%S' is already installed.
t-H9-
e;;F;;;;;GG<=
t{D9=
Current directory is: '%S'.
F2322!
)L$0f
L!D$@E3
D+L$X
{}wtrpniPhe`b^\KZYGCBA@<9847("W
System restore point set.
JKLN%\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\%NLKJIHHH
;;;6E
GetModuleHandleA
.text$x
%lu.%lu
%2.2u:%2.2u:%2.2u
F.-+*))))
CreateMutexW
_wtoi
Software\Microsoft\Windows\CurrentVersion\Uninstall\WMCSetup
/Relaunch
KillTimer
SetFileAttributesW
X@@@AABBBCCCCD?D
Stopping service '%S' %S.
Gemvrqppolljjjj``d
Software\Microsoft\MediaPlayer\Preferences
L$HH3
Q21usr}y
A^_^
CryptCATAdminAcquireContext
\===<<<G<GGG=>>=FLRRPP[ZXdcba``nmkjjzzyyxx
GetModuleHandleW
Setupapi INF
Jaz}a
MigrationSchema
.!FnWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb]]]]]]]]]]]]]W
failed
L$`H!\$ I
IIIJKLMO&999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999&OMLK
L$ E3
Created instance of download manager. Now converting URL to ANSI.
xSV^pdh
ForceOnline
!pdwt
.CRT$XLZ
&~}uU
QQQQQQQ
.giats
E9npA
v Z[`{PPPOO4
EEEEEEEEEE
Microsoft.Windows.MediaFoundation.CallStack
setup_wm.exe
D$ H;
QQQHHHH~~AApjjd`````
ERROR: WMC_CopyFile: Could not find file version for '%S'. This file will not be copied.
yyyxxyw
M9.uHL
t{zz{{{{xx|x||||t
https://go.microsoft.com/fwlink/?LinkId=120764&mpver=%s&id=%x&contextid=%lu&originalid=%lu
Copied file '%S' to '%S'.
~{}xvtrplPgh`a_L\KYGFCB@>9!
GD$X)D$\
&(''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
0000#4h^<JJJJQJJJQQQQOOQPOOOPPOPPPPPQC
Z[`{Rz
0233ll44456
eeee```
0A_A^_
uc9t$Tu]
OriginalFilename
win:Start
))))))))(
/////////////////
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++'jj(())))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))((jj'@@''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''@@%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&%$%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
>FOO[YXXXXWccbbba```nnnmmmmmlllllkll
12>>>00]?ct
d$0E3
9D$Pt
ERROR: Bad file destination '%S'.
FileTimeToSystemTime
:::@:::(:::3:::
ActiveService
RDDDDEEE<\
"$ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ$"
6F4!7
:::::::
ZIbihd
%lu.%lu.%04lu.%lu
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
fD9$Pu
SOFTWARE\Microsoft\Windows Media Connect 2\Shares
fD94Au
_Xrruurlljbbljnnnnljbibb^^__^_w
}{zywvurqponheU
<<=0,BG
_cbegmrssxrruvqqqnnhc
\\\\\
?Z[TH}|E
fA9,@u
sCREATESERVICES
****+,-./GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG/.-,+*)
QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ
fcgcggf
ERROR: Could not open request: '0x%x'.
EnableWindow
L$ UVWAVAWH
fD9$zu
l3C/b
'-Ihhhhhic2y+3H
*l<VSM
zzzzz{{{{{{|x||t
t*D95<
SetupIterateCabinetA
_aCl`4
UVWATAUAVAWH
Q<A;be#
xzm4Q
BA@BA
tZD9-
ZCCABACACAAC?
Recommended
H9p H
CloseHandle
L$8E3
'/XsM
<)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))<
****+,-./GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG/.-,+*)
t,D95Bb
@.reloc
_vsnprintf
Added Component %S to Uninstall.
FfplNF
\;;;;;;G<<<<>t
umwdf
/ OEWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbW
FreeSid
swscanf
31tsrrrowy
WtZ-
\X_blllliiibbb___b^x
L()'('''(CPXj
R@KKBCKU
o75;5,
!#%[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[%#!
|][?dhnnqvvvvvqnqqvvvvvtyyyuuyyyuuyyyyyyyyyyyyyyyyyyyyxxx{{{{{{{{{
ERROR: Install files were not available.
Set DirSecurity on '%S'.
0-.>:VpfccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccbbbbbbbbbbbbbW:#
Removing component database for '%S'.
a^X5I&
}zxwvurqpona_fE6
]NLKKLKKKKNgi
UIY}%m!2~!IQR
LoadResource
_purecall
ADDREG
Software\Microsoft\MediaPlayer\Subscriptions
8#aKPcccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccQF"
SOFTWARE\Microsoft\Windows Media Player NSS\3.0\MAC Access Control
WININET.dll
pQcccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccf>4
GetSystemTimeAsFileTime
'-Xhhhhijg2
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&T:,122>>00]@jq|K
D9|$d~rA
~b}l{c
RegEnumValueW
SeShutdownPrivilege
JKLN%ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ%NLKJIHHHHjjHHHHHHHSP444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444%
d$DL9f
User is likely connected via LAN.
T33~s
wmplayer.exe
L$XA+
Download complete.
\Drivers
''8cgggcdgd
tu{QVajBvu~
dj]wt
'-Xhhhhhic7y+3
fD94xu
Exited library thread.
MetadataRetrieval
{}xvttpnljhefb^\KZYFCBA@-
@AkBh
@ @@@`@
b_jjjiiy
U$''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''%
<dependency>
/EnsureFileVersions
*5GK`knqrr#"
SID Conversion failed. Error returned %lu.
Package '%S' does not appear to be installed as there is no specific version to check against.
WMC_CopyFile: File '%S' is not to be installed if already present on the system. It was present and thus will not be reinstalled.
SetupSetDirectoryIdW
CharNextW
=QLKKZGFEBA><864210,,+*!
SetUnhandledExceptionFilter
\notepad.exe
A0 uU
l555566666#
[Na 5
S0..G
D$`f;
{hQgf
GetSystemDefaultLangID
Component '%S' can not be installed: No install package available.
?hnF444444Nyhl}
t$TA;
'/Xp\
-6>aNM
D$ E3
.text
Failed to get information from inf with error code '0x%x'.
u[[k,KPL?
fD9,Gu
K ~&k
qydiw{gS\n1
Version
l$0H9/uOL
%S Setup complete. Result: '0x%x'.
SystemComponent
gQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQg
DELREG
Load user profile returned 0x%x.
\X3vn
kjd|x
u#H9_0L
Tahoma
QQQQQQHH~~AAApjhcccbbbbbbui;;>1JHQB<<2666:#&
XML Parser: Deliberately did not add package information from XML.
LoadStringA
9\$0~0L
.rdata$brc
SetWindowPos
3nPsw.,_i2
ControlService
\wmp11-64.exe
//000//
c`^33Dh
000000
L$`E3
,.>F[
}{zxwvurponfh?@=>*
Parsing CustomDestination INFSection:'%S'
'&JFCB@><964200.++*'
Install for component '%S' was halted. It was deemed already installed.
wmplayer.ocx
E[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[bH9;>Ab________________________________________________________________________________________________________________________bA>;987777jj7777777
User is connected via modem.
DELETESERVICES
===774400|+++++++..+
Z[^{N
Files\File
W]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]XfSTUVXZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZXVUTSRQQQQjjQQQQQQQ
!&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
https://
LocalAlloc
0;<?SM
YEXD\
t,D95
iijiiiiicgcgbbi
.idata$4
EnumDependentServicesW
Software\Microsoft\MediaPlayer\Setup\UserOptions
T$LE+
LoadUserProfileW
fD9,pu
l><>42/-Kog@
vvy~~~
PPGG::54000....2.9
RRRSTVWXZaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaZXWVTiYNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNZhRRRRRRR
.rdata$T$brc
GetTokenInformation
""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
+|$xI
FFFFFFFFFFFFG6v5s=10HF
__dllonexit
H95AV
<asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">
JKLN%ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ%NLKJIHHH
Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVR-MS
Could not decode INF key name:'%S'
!l$p9l$h
VERSION.dll
setupapi.dll
RegEnumKeyExW
f;L$0
H!|$X
ULKCK
KGFFD
D$4E3
tgbMQ
SHGetMalloc
e\\\ZWf
COMCTL32.dll
<;<<<<<<<<<<=
InternetGetLastResponseInfoA
@SVWATAVAWH
sfc.dll
MMMMOIe
Kernel32.dll
ERROR: Failed to delete service : '%S'. Result: 0x%x.
fD9,zu
t<Kef\
__C_specific_handler
@USVWAVAWH
f9<Au
H92)Ge
}{zxwvurqponlljj_fE6=0
68;=/qIG
UDBBaseURL
wv~}}}}}~~u~uu~u~~~~
TraceMessage
@@CB@X
4>Zerrpoolljjjj``fp?@2
b,#QZ
0A_A^A]A\_^]
2t3IpZ,
!#%\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\%#!
W````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````XfSTUVX\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\XVUTSRQQQ
MoveWindow
Software\Microsoft\MediaPlayer\Preferences\HME\
UDBSOURCEURL
|$@E3
ux}}}}}}u
t>EDDDDEDEEEEEEEEEFFEFFFF
%s\%s
H(a7]
fE9<nu
t-D;l$4t
CreateEventW
D9i(v
|$ AVH
Install denied: user does not have sufficient disk space.
}{ywvurqponllj_fE6
K>M=uv{
RemoveDirectoryW
-T5Q~1f====f@BGR
}zzxwurrqonllhdU6B15
,547=BBBDBB==
DeleteObject
Gfq<4
.text$mn$00
t$ WH
9O(v#
MDxx}QVLW
.Dqi,
SetLastError
-#>"DaT
/NoMutex
Q]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]&eIIIIIII
.rsrc$01
]D|zEtZ
SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\WindowsFeatures\WindowsMediaVersion
|$0A3
aNMMMMMKKMUjibi
ZXv Z[`{PPPPO4Iey
DebugBreak
{}wttrnlPjh`b_\\KYGFCB@>986420!
Uninstall denied: User does not have enough diskspace.
HHHHHHHSP''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''%
D$DE3
ERROR: WriteFile failed. Result: '0x%x'.
InstallApp
A_A^A]A\_^[]
!\$@H
RegDeleteValueW
Error deleting package list object.
pSC(%04440,(GMivww
D$pE3
IDATB
ppIIIJKLMO&\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\&OMLK
T\fBvt~
t&L90H
Reg Parser: Deliberately did not add component from reg.
u<D9|$@u5L
tiHcQ
_beginthreadex
@K@CKBU
____________________________________________________________________________________________________________________________________________________________________________________
FMMMKa
N`````
Uninstall
Roxio
fD9$_u
'-Xiimmmo^
UUUUUURRRRRRRRRROOOOO\[44
MS_AutodialMonitor
D3Bssrrowy
?^^yIIIIINy2
GIq3"=-
WMP9DeskBand
7777777
**-$COu
GetConnectedStateEx: User '%hs' connected via modem.
eYaBvt@
L9\$(t
|D.\u
f9,xu
InitializeAcl
CoInitialize
USERENV.dll
})) M
CREATESERVICES
dN@BBBBBB5s
tq9=~
RegEnumKeyW
AkBq.#<8>
Specified service is not valid: '0x%x'.
////////
%S: File signature not validated: WinVerifyTrust on file '%S' returned 0x%x.
GetWindowRect
.MEtG
7f=EEEEEEEFFEFFFFFFF;Gf
SetEntriesInAcl returned %lu.
GetSystemWindowsDirectoryW
gWindows-Media-Player/
Parsing '%S' INFSection:'%S'
EndPaint
Software\Microsoft\MediaPlayer\Setup\BlockingRefCounts\%s
IsWindow
8X:zt
8889:<?BdIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIdB?<:KF777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777dH8888888
f9<Xu
vuyyyyvyvvyvw
LeaveCriticalSection
VIDAT
s:+,,,,,+:::
w6\3=
AcceptedPrivacyStatement
ConsentPromptBehaviorUser
tx|||||}}}}u
ERROR: Registration for restart event for setup_wm.exe failed.
SetupCloseInfFile
uLL9%
%s\Local Settings\Application Data\Microsoft\Media Player
zzzzzz{{{{x||||||t
tmL9c
L$ SVWH
Z[^{IIIIIa
//0011
Updates available are for a previous version of the player only.
ks*'%
DEPENDENCY
OEM service override is: '%S'.
Component
Microsoft Corporation. All rights reserved.
u>=FEEDEEE5FE;FFF;FGF
setupapiinf
L$PH3
PathAddBackslashW
`UaBvt~
23444555566
uO@8|$@t
Parsing UpdateIni section:'%S'.
zzzz{{{{{{x|||||t
.text$yd
dj^zt
ERROR: XML Parser: Failed to add dependency information from XML. Last result: 0x%x.
Service data gathering returned 0x%x.
_strlwr
fA94Fu
uuuuuuuyyyvw
9
:Q|GG
INSTALLTYPE
GetWindowLongPtrW
,47dppppppp
InternetDialA
CreateDirectoryW
ERROR: INF parser failed on: '%S'. Result: 0x%x.
5EEEE5F;FF<HI
RebarWindow32
^e5N]
t-fD9
WATAVH
!pg-w
JKLN%888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888%NLKJIHHH
47M______S94?UYYYY
Migrated NSS Version
t#MF~!
LcA<E3
setupapi,InstallHinfSection DefaultInstall 132
$NTUninstallWMFDist11$
H9x`H
Ldhjj````e
SOFTWARE\Microsoft\Windows Media Connect 2\Devices
22333ll451
CatalogPath
::::7GGG=KK
$--*'=Ft
dq#o9
version="11.0.0.0"
fD9,xu
'zO{T
H WATAUAVAWH
m_pD#7'$'78FQpxuwt
@.rsrc
Download failed for %hs at %lu of %lu bytes.
System restore turned off for this install.
Software\Microsoft\MediaPlayer\Services
Software\Microsoft\Multimedia\Components
Z[^{IIN
JGJJFFJIJMMQ[
y^[^DBqqn|
!D$0H
D!D$
kD$Ld3
AcquireSRWLockExclusive
/Upgrade
42M______SD2A\RE?BP
+L$TE3
aBvt~
^GOOOONYYYYXXXWcWccbbbbbbbaaaaaabbT
ERROR: Failed to assign destination for: '%S'.
\<<FGFLLLRRP[ZXdcba`nmmkjjzyxiz
`A_A^A]A\_^]
^\ZZ\
?F |J
ERROR: Out of memory.
ServiceTask3
{zxwvurqponlljjj`fm?@=
LegalCopyright
Windows Media Format SDK
CallWindowProcW
ERROR: Failed to open service: '%S'. Result: 0x%x.
QBQw.
e31e09cb-b1d4-4b2c-b088-0aa51c598562
uuzzy
xx||}}}}}uv
dN@ABBBBBB?r600
SetCurrentDirectoryW
/hf_^\KZGFCBA><984210.,++
J0iOzK
D$ uqH
SourceDir
p]iiuuuuuwuxwwwwwx
Parsing RunCommands section: '%S'.
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Service is not being installed: user is in Vista Express mode.
IzjjhtM
Z[`{PPP
<dependentAssembly>
WMC_CopyFile: Could not find file version for '%S'. This file will be overwritten.
UDBRev
ERROR: Replace file in place failed for '%S'. File still exists.
fD94Yu
SHGetFolderLocation
PreventCDDVDMetadataRetrieval
ttfD;l$`tlH
C>AAAAAAAAAA>?D
OPCOx
Install list not generated or parsed for this install type.
D9}@u
ERROR: Could not start download. Result: '0x%x'.
FFFFFFFFFFFFp
f;D$ptpH
w~0XZ
Z[`{Rw
L9h0L
@A_A^A]A\_^]
ERROR: Cab extraction failed for '%S'. Error 0x%x.
IIIJKLMO&^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^&OMLK
%stmp%05d.WMC
ImageLargeURL
L$0H3
4:OaJdcccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccPJ8C'
External App
!ctnighe`bL\KZYGCBA@<984410.,+$%
XML Parser: Loading XML file succeeded.
Registry
#wx+F
zzz{{{{{{x
.rdata$zzzdbg
Z[`{Rs
Software\Microsoft\Updates
Starting service '%S' %S.
!pdzv[
f94Au
Starting download.
+++++++++++++++++++++++++++,(
fUG@CCCCCCCCCCCCAAAAAAA('''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''.W
5::631
aNE><-
LoadStringW
qMKMMKb
J]Yi)
YBvu~
WAVAWH
ERROR: Process '%S' deadlocked. Terminated after '%lu'ms.
.rdata
#:OLM
|$XE3
fTppTOOPORWfuwutwt
k,LOF^
E84,u
H!|$HH
ERROR: Could not crack URL: '0x%x'.
%lu,%lu,%lu
RegDeleteKeyW
&('''''''''''''''''''''''''''''''''''''''
`VCAC@
%lu,%lu,%lu,%lu
]X1
A_A^_^[]
OpenSCManagerW
{}wttrnlPhd`b^\\KYGFBA@>9847$%
%s%lu
h4Z&"
GIa</
Assigned destination: '%S' for section '%S'
bkl{c
~_1>A
wcsstr
\$jE3
t+9=8
D$$I;
l^nrryzo}~M
\=<<GGGFGFLLLRRPPZZXcca`nnmkjjzzyxxx
ServiceTask2
%lu%lu
IsWow64Process
ERROR: ReplaceFileOnReboot: Could not move file '%S' to '%S'. Error 0x%x.
<assemblyIdentity
e\aBvt~
}zywvurqp__E6
fD9,Au
b____YY
h*,<~
w||||
;5EEEEEE;
GdiplusStartup
MOREINSTALLINFO
No EULA found for service. Finishing now.
kpdwt
H95WS
>B??6B15
urlmon.dll
WaitForSingleObject
Starting download of '%hs'.
ERROR: Failed to start service: '%S'. Result: 0x%x.
ekrkr##"
{}vtrpnighe`bL\KZYGCBA><984210
ProductType
SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Devices
|$pt%
Executing: %S %S.
%S:%u
lstrlenW
qsort
L$ UVWATAUAVAWH
?hnFRRRRRR
Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows Media Connect
Now starting service: '%S'.
'-Xjim
OpenProcessToken
D9d$Xt
XML Parser: Parsing child element '%S': '%S'.
}zxxwvrqpoollafh?@=
`TQGA
.04:l1,IG
Download complete. Result: '0x%x'.
/NoService
HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH
710.,+**)'
/runonce:
SystemParametersInfoW
'/XopG
=4ll3=22#2
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++'jj(())))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))'jj(()))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))'@@'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''@@''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''@%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&%$%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%$%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
MessageBoxW
UURROa
~GFDDJOOYXWbb``m``
PRIORITY
Faw;3(b
-<VLU
t$8E3
SharedLibraryPath
}{yxwurrheJ6B!5')))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))<5&I[
chhnqqvvvvvqqqnnhhc
68;2/,BrA
=P[[YYXWccbba``nnmllkjjjjzzzyzyyxxxx
SetNamedSecurityInfoW
WMPlayer_PluginAddRemove
memcpy
SetForegroundWindow
.idata$3
9nm/V
Cab extraction succeeded for '%S'.
'-Xjiiji}
CurrentItemProgressCount
t}}}}}uuu~v
cCdiouxXeEfgGnpsS
\unregmp2.exe
%I64u
L$0H!\$ H
t)95C
=RPP[ZXXccba``nmlkjjzzzyxxxx
Launching %S Install.
5=i^`WdJ6
f9<Pu
WMC_CopyFile: File '%S' should always to be installed. This file will be installed.
=agZ(
t+D95Pf
Added catalog '%S'. Last result: 0x%x.
EEEEEEEE
ERROR: XML Parser: Missing required Dependency attribute '%S'.
!!!!!!!!!!!###### R
8v([\fu4
UNLOADED
=====Installing Install list. Last result: 0x%x.
;uH}vH
E222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222bH9;>@bHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHb@>;98777
TestParameter
REGISTEROCXS
InternetOpenUrlA
TU_Bvt~
##### Service XML download Complete
DR>VW
jRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRj
FF??B
%s\inf\%s
ERROR: Application '%S' not found. Process could not be executed.
****+,./G
>IG;e;C
Adding dependency type '%S' to registry.
E33D49A9-409C-4acd-A1F5-DA7DBB99EB30
SHGetFolderPathW
ERROR: Execution of %S failed. Setup will not fail because of this issue.
SRSetRestorePointA
<<<<<<<<<<<=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
k VWAVH
ImageSmallURL
Install
ERROR: Could not store delayed file move for '%S': '0x%x'.
ERROR: Could not delete '%S': 0x%x.
ExpandEnvironmentStringsW
ERROR: Reg Parser: Failed to add component from reg. Result: 0x%x.
L$PH!\$ H
+D$0A
InternetConnectA
gQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQg
L$@H!\$ H
(_^][
t$Ptx
iexplore
LEVL@
ewzzww
__setusermatherr
-//001
UsageTracking
UATAUAVAWH
System\CurrentControlSet\Control\Session Manager
QDuWW
fA9\M
Z[`{PP@
e```^fE@=>8:
SeRestorePrivilege
GetTickCount
fE9,Gu
Querying service '%S'.
D9d$luQL
T$PE3
UNREGISTEROCXS
L$\E3
EAA;H
G`H9_h
UUURRROa
HJF:1
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
L$@E3
,4=gsspsssoJ47Ma
wvvyyyyy~~~
L$Ptd
fD9<xu
.CRT$XIY
yNOl'zA~
}QDHL=tt
"@1+e7
[YYYY
}xrrxxxxxxxwwwwwwwwwwwzzzzzzzzzzz}
Never
L$@H3
PostMessageW
}zyxwurqponlljjj`dU6B1.
Unable to find WMC uninstall information: skipping.
;?DEEEEFF;<H
control.xml
1,KNL`[
4;<<64#/-C
GdiplusShutdown
npd4|
ERROR: Web Help URL could not be generated.
/>
\Bvu~
>LRQP[[Xdccba`nmlljjzzyyxxx
hBkg@
WEVT_TEMPLATE
fF9,Bu
H3Dtssrrrooooooms|
ERROR: Dll Registration: Could not find file '%S': '0x%x'.
QueryServiceConfigW
fD9,ru
fD94pu
InProc
521vs
UWAVH
MultiByteToWideChar
User is not on-line and wants to stay off-line.
Connecting
p4P75T
eula.txt
Finished migrating WMCv1 user.
"|XQbihhc
_f<JJQQQOOOO[[[[NYNYYYYYYYXYYYYYYV
zzzzz{{{{{xx|||t
Creating service '%S' %S.
WMPSetup
Library migration skipped due to installing app request.
zfRs
FAILURE: Attempted to get INF size for unknown INF.
JM{[Rf``````]fiffft
^\\\YY
GdipCloneImage
VERSION
#"" " "
UWAUAVAWH
!\$(E3
User migrated.
>EJKJJJJJJQQJQQQQQQQQQQPQRRRRD
GetNameForCatalogOnSystem returned '0x%x'.
)*********
'-XjjoJ
Got catalog context. Attempting to determine valid name for installed catalog.
W]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]XfSTUVXZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZXVUTSRQQQ
t:H95
fD9$Qu
}{zxwvrqpe\
User is not on-line but wants us to dial up.
JX|F##mo-
msiexec.exe
ERROR: Could not obtain connection result: '0x%x'.
_itow
kld|x
Parsing StartServices section:'%S'.
SHELL32.dll
Install denied: OS version is greater than package version.
rb0l{c
||||}}}u
*Jb-]
WINTRUST.dll
%s\drmupgds.exe
,4=gssppsso
CUSTOMDESTINATION
D9t$8A
@A^_]
}{zxwvrrqpoeU
|$hE3
WMPNetworkSvc
Unable to establish connection: 0x%x.
ERROR: Failed to create service: '%S'. Result: 0x%x.
A^A\]
InstallResult
ALERT: Less then 50MB of free disk space is available.
_ismbblead
hhD,K
0.,+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-.>FV
31vsrrrrooooomsy
vvyyy~y~~
COMPONENTNAME
'-XiiiilVN
%s%s.cab
L$@tg
{}vttpniPjef_^\KZGGFBA@<98:2!
InternetDial
H955>
'-Xhiiimoc3V
"$ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ$"
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
Setup requires a reboot - the system will reboot now.
CreateProcessW
9\$Pt*H
An INF will be installing a driver. May require a reboot.
ColorPlayerText
Software\Microsoft\Windows Media Connect 2\Shares
STOPSERVICES
WaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaXfSTUVX\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\XVUTSRQQQ
L9eHuJ
@SUVWATAVAWH
WATAUAVAWH
/RunOnce
FUE_INTERNAL_CONFIGURATION
t*95z
bgorswxxz
{}xttrnlPhh`a_\\KYGFBB@>?
}{yxwvrqpoolljjjfh?@2
1s<;E;s
ShellExecuteW
wmsetup.log
??555555552L[
6"5#.
Copied file '%S' to DllCache.
Xjwnm
`n~aa~O
Q~G<>;;;;;666666
Vglhhhhia2
<;;G;G<<<<<<>t
GainsFrom
t+95!!
444444Nyhlw
===777440..+++25
456555544l4
"%s%s"
A_A^A]A\_
|$ E3
.CRT$XCAA
~{{ywvvrqponlljjj`_fE@
''@#>nNU
processorArchitecture="*"
Install for %S returned 0x%x.
xMMMMMM
WTHelperGetProvSignerFromChain
D$\fD
\$ UH
#-5QHB1f===]]@BG
C847u
L$PL9``H
ADVAPI32.dll
\wmploc.dll
L9eXtoM
N@@@ABBBBCCCDDDDD5
hd436Moe
CreateThread
CoRevokeClassObject
SetBkMode
.00cfg
63333"
fD9,Fu
t$ UWAUAVAWH
_wcsicmp
Finished updating install list.
,47gsppppsl
,1--#:
FreeLibrary
9s;DDDEEEEE;
Error
ERROR: Trust on catalog '%S' failed. Could not load Crypto Lib. Last result: 0x%x.
Jc@.$-~
0 VnW]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]_81**
XML-specified default service is: '%S'.
lstrlenA
=DvswnXYfJGL
dvh{FFFIII
;75Behajjj````dU6B14
fD9<Cu
Database path not found for user %S.
t~uuuuuuuuuw
I,>;,
UVWATAVH
LB1vs
bNLKKKCKK@
D$jfA
[*WMC Logging begun at %lu/%02lu/%02lu - %02lu:%02lu%:%02lu. Logging at level: '%lu'.
jjQQQQQQQ
CodeURL
ERROR: Could not set CustomDestination '%lu'. Result: 0x%x.
CompanyName
Z[`{PRv
AH7%%
GetCurrentThreadId
fD9$Hu
t!H;T
e#222
__getmainargs
63323"
b////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////bH9:=?bccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccb?=:987777jj7777777GDB0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000BCG8:<>bQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQb><:877777jj)))))))
,/4:#
\\.\System\System Up Time
zzz{{{{t
MenuURL
Component '%S' can not be installed: file '%S' not found.
D$hfE
mfcore.dll
Retrieving key files for '%S'.
u HcA<H
L9pxH
_C'w@
{7553,
H95b>
f94Zu
gggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg
x#*2*
2'->b
vyyyvyvvvyvv
Plylst
>FDDKKDKKKKKKKKKKKKKKKLLLLLS
calloc
CryptCATAdminReleaseContext
CoRegisterClassObject
\DllCache
XML Parser: Found value '%S' for attribute '%S'.
T@CB@BX
Sleep
ninstall
XML Parser: loading root element from xml failed. Result: '0x%x'.
544ll3322#
NB8%H||
.,++++,---
!&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
QueryServiceStatus
CLASSES_ROOT\%s
SetSecurityInfo
mC01<0/4040-*GQvxw
SetMapMode
PPGG::55/|||00..44777777
GlobalFree
WMC_WMPDBExport
'-Xiiil[N
D9|$Tu
______bbbbeeeeeeeop<Y=1pluj<<>1~QH0<2:::::::
t$ UWATAVAWH
InternetGoOnline
GetUserDefaultUILanguage
ServiceSmallURL
GetDiskFreeSpaceExW
ShellExecuteExW
RO444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444$R
D9=T2
_______bbbmj<<=kpltj<;>1,QH0;2::::
WMC_CopyFile: File '%S' is newer than the version to be installed. No copy will occur.
#plPje`a_LKZYGFEA@>986420.,+
SUCCESS: GetInstallSizeEstimate for '%S': size: '%lu'.
PrivacyInfoURL
|$ H;
User chose Express mode.
Advancing to Service Selector dialog.
INSTALLNAME
The system is currently on-line.
XML Parser: Deliberately did not add component from XML.
gQC1:3
%sallservices.xml
Uninstall For Setup Launched.
9w(vsL
OS is %s. OSVer is %S.%lu. System Lang is %lu. Prev version system is %S. Setup version %S.]
_wtol
fD9DE
UNKNOWN
%s.NT%lu.%lu
+''''''''(
SetupGetLineTextW
RegOpenKeyExW
0A_A^A]
/prefetch
Assigned destination: '%S' to '%S'.
Setup complete. Result: '0x%x'.
l$@E3
%s\Microsoft\Media Player\%s
SetBkColor
}[NM'9
D9l$Pu
Legacy service is: '%S'.
}QDEL=
cIB8v
GetUserDefaultLangID
5=ifnllljj```WdJ6
FindFirstFileW
_wcsnicmp
FUE_CONFIGURATION
vw{QVLW
/DownloadService
QGKKKK@X
RRRSTVWXZ\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ZXWVTiY@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ZhRRRRRRR
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++,(
PA_A^A]A\_^]
LockResource
D9cdt
GetObjectW
l$ VWAVH
H9xpH
Success: Ran command: '%S'.
t*953
No downloads required.
L9-gp
D$8H;
+L`?a
VVVVVV
A^_^][
UDBLocalPath
GetLongPathNameW
Software\Microsoft\MediaPlayer\Preferences\HME\%s
&`)1Mp
fE94Au
9KqVE
fhic2yy2H
H;\$xr
/NestedRestore
|$8E3
L$ SUVWH
'/XpW
No download is needed for this service.
GetNumberFormatW
JFWUI2
VOZBww~
<<<<<<<<<<<=e
t{H!\$8H
_BAABAABABAAAAAAAAAAA>
/1";FqIc
{}wtrpnlPhe`b^\KZYGCBA@>?(
WinNT
Default
NOTICE: This system is a MUI SKU.
Nc{c[c_TA@@ATOSYRRZ
&qjefb_\KZGGFBA@<984210.,+'
!|$@H
R#&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&$R
3,0,/
R$fA;Z*
:75BiddQ6B04;
Nv|/&%y
//"D/pQ
SHGetPathFromIDListW
L<D?er
wcsrchr
c#wxI
Software\Microsoft\Windows NT\CurrentVersion\ProfileList\%s
47M____a_W?2
==77740|0|+++++....2222222<:
zzzzz{{{{{{x|x|
Partner
vvvvvvvvyyyv
ERROR: Could not set AllowProtectedRename flag for SFP. Error: 0x%x
newer
WaitForMultipleObjects
n*6/]B
m?:";#
<EEE;F;F;;;=
UATAVH
DecryptFileW
D$PE3
3+8!7
B/!L]&$*|
GdipCreateHBITMAPFromBitmap
t>JP[[YXdcbbba`nnmlkjjzzyyyxxxx
D$H!\$HE3
\XXX__bbiilwrrru
User has declined the EULA. Setup will terminate.
%02lu:%02lu%:%02lu - %s
3\|!a*/
wmdbexport.exe was not run as wmp11 installs did not complete.
"$333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333$"
fD94Fu
uiAccess="false"
ISxW>""",221'&9
%s&version=%s&locale=%x&userlocale=%x
Installation Directory
t*95,s
}{ywvurqponheJ6
FriendlyName
_callnewh
`|yj-"
&.-)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))'.>FV
Unregistration failure ignored: file is either not present or has already been unregistered.
%2.2u:%2.2u
>FQP[ZYXWccaa`nnmlkjjzzzyyxxx
W ',+**
__set_app_type
Windows Media Player 11
D+L$pD
/+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++<
ReliesUpon
eI\:-
SMARTREBOOT
CreateFontA
MS_WebcheckMonitor
LoadIconW
#111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111XfSTUVX333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333XVUTSRQQQ
//////////
DELDIRS
Microsoft-Windows-WMP-Setup_WM
ERROR: Localization of this build is incorrect. The dialog font has been changed but the button placement has not been updated.
IDATx
NonAdmin
GetUserDefaultLCID
SUPPORTEDRANGE
JCDCCCDDCCCCC?CC??????FFFFFFFFFFFAA
GetAce
040904B0
Component '%S' may be installable from URL: '%S'.
1Rf^`
D9d$dtYH
D9t$4
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
HHHHHHHSP444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444%
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Z[
.rdata$zETW2
HHHHHHHSP666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666%
/n[+;
wcstol
J5[Zu:Z5[
GdipCreateBitmapFromFile
Delayed action until reboot.
%s.NT
D9l$`
@:8C:
,,#7\Y_]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
124;<89:DF
FindWindowExW
%s,%s
PA_A^A\_^][
ReleaseDC
L$XHc
!HTRRRRRRRRRRRRRRRRRRRRRRRRSD
L+*'')(KUX
!rr##e"
ha8yy.;
HcA<H
]|/9P
LockSetForegroundWindow
/;<OaJd
A_A^A]A\_^]
[ZYYUUUUUUUUURRRRRRROa
:::+,-
MMMMONl
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
XML Parser: Failed to Load DOM. Result: '0x%x'.
Could not open service : '%S'.
PeekMessageW
A_A^]
FnW]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]W7.
X@@@AABBBBCCDDDD5V6
CreateEvent For ExitSyncEvent failed. LastError: '0x%x'.
iswalnum
Installed
D9l$T
ERROR: Code URL specified but no InstallApp indicated. Install is not possible.
""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
D$p!\$hI
SHLWAPI.dll
Warning
TranslateMessage
GetComputerNameW
L$XD9=
&~VS|
________________________________________________________________________________________________________________________
%s\%s\wmploc.dll
=KOOOO[YYYXXXXdWWWWWWWcbbbbbbbbbbW
IIIIIIHHHMMMMMMMMMM
Windows Media Player
///////
zzzz{{{{{{xt
Package '%S' is not currently installed: no version of it appears to be present on the system.
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
GetClientRect
IsDialogMessageW
~{}xvtrpligh`a_L\KYGFCB@>9?4
*0<;LT
ERROR
d@@@BABBBCC??
ERROR: Could not set CustomDestination '%S'. Result: 0x%x.
+D$dD
v>FRPP[YXdccaa`nmmlkjjzzyyxxx
DisableMRUPlaylists
752mg~zywvurqponlljjj`WdJ6
PatBlt
Z[`{PP4{
QQQQHHHH~~Appjddd``
t%L9e
Z[`{Rx
ReadFile
Z[`{MMMM
}{yxwvrqpon_fE6
GetAclInformation
ybul{cRichtl{c
.12">=
WideCharToMultiByte
RegQueryValueExW
lQ.=:-4:;;;;;;;;;5=
t$(E3
@SVWH
VarFileInfo
VWAUAVAWH
Z\Zj
_B@CAL
A;;;;;;6E
_fmode
ggggggSK{@-
DEFAULTDESTDIR
ERROR: InternetReadFile failed. Result: '0x%x'.
ekrk##""
H9Y@t
PGLKKKKa
ggggggggggggr
SetupGetLineCountW
strstr
{6t-2
DrawTextW
Z[^{IIINy2
{#222
`__\Z
CreateStreamOnHGlobal
fD9<su
strnlen
Featured
v2F\VH
ERROR: CABINET EXTRACTION FAILED: INVALID INFORMATION.
@2>*))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))-(
D9kht
A=9d4
.WMC\
GetFileVersionInfoW
_vsnwprintf
Software\Microsoft\MediaPlayer\Setup\Reentrant
LcC4E3
IGNOREERRORS
d555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555XfSTUVX333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333XVUTSRQQQQjjQQQQQQQ
Install for component '%S' was halted. Component is not available for install.
Setup requires a reboot, but the parent application delayed this reboot.
trnlPhd`b^\\ZYGCBA@>986420.,+
2l33322#
fD9$nu
u}}~~uuuuuuw
CreateFileW
\msdxm.ocx
GlobalAlloc
+L$LA
L!l$ H
OL`[{
Z[`{PRw
AllocateAndInitializeSid
/ServiceExtra:
DISPLAYNAME
DR=tu{
fG9,~u
America Online
0UNxuY
MOMMIMQSTW__WWWb___]]
/DefaultService
!#%444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444%#!
CopyFileW
IGNORERESULT
f94Xu
~C2}L3
ERROR: Package '%S'. Result: 0x%x.
#fF5(T
!D$4H
L$PE3
Reboot requested due to '%S' file copy.
MPH!\$ H
A^A]]
GetTimeZoneInformation
V7555,
CriticalTo
Control Panel\Desktop\ResourceLocale
SetupGetBinaryField
/Fixups
Gathering existing system service data...
GGG~~Apjdd```
te>FRRQP[ZXdcbaa`nmlkjjzzyxxx
MCGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGCM)*******
<security>
]YYYUUUUUUUURRRRRRRROOO_Tzz}
FUE_PATH_SELECTION
setupapi,InstallHinfSection Uninstall 132
Q]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]&eIIIIIIIIppIIIJKLMO&aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa&OMLK
CoUninitialize
ERROR: Failed to open INF: '%S'. Result: 0x%x.
<!-- Copyright (c) Microsoft Corporation -->
t*D95
FAILED: GetInstallSizeEstimate for '%S': Result: 0x%x.
<requestedExecutionLevel
ERROR: Could not create directory '%S'. Error: '0x%x'.
&&&&&&&!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!]
D+L$H
ERROR: Download canceled. Download manager is not ready.
\$4E3
aWMKKKKK@Cb
f==<=<<<GGGGFFLLLRRPPZZXdcaa`nmlkjjzyyxx
E\$ H
A_A^A]A\_
eccccibgcbci
TU_Bvu~
Windows Media Player 9
ERROR: Service key is not defined.
ServiceInfo
__bbeellgms
D9d$@u
)))))))
Z[`{PPPPP4Ih\5
RIGHT
DeleteCriticalSection
"$YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY$"
ERROR: XML Parser: Failed to add package information from XML. Result: 0x%x.
OMMMI
_eGO[[YXXXWWcbbaa`nnmmmllkjkjjjjjzzzzi
GetWindowLongW
A9\$t
R#84210.,+**
{}xvtpnlPje`a_\KZYGFEA@>986410'
qd< Ff
RtlCaptureContext
~UC#)
Z[`{PPPPP4Ih\5
win:Info
7BR]f
A]A\]
I*EP)!
$(0.,+**)
\ZZ[`
INF: Error '0x%x' reported for '%S'. Honoring INF error override and continuing.
System restore point could not be set: reboot is pending.
User chose Custom mode.
E[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[bH9;>Ab____________________________________________________________________________________________________________________________________________________________________________________bA>;98777
WinVerifyTrust on file '%S' returned 0x%x.
x ATAVAWH
110//.
QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ
InternetDial returned: '0x%x'.
9t$Pt
sUSiI
.CRT$XLA
i'(ko
4Xhhhhijaz
ERROR: Unable to obtain base URL for UDB file. Result: '0x%x'.
'-Xijmjl_
ProfileImagePath
GetFileSize
ERROR: Install of %S failed. Setup will not fail because of this issue.
47M_aaa
ImageMenuURL
_P96ifj
HA_A^A\_^[
EqualSid
ppRRRSTVWXZaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaZXWVTiYNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNZhRRRRRRRRppRRRSTVWXZ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ZXWVTiYbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbZhRRRRRRRRppRRRSTVWXZ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ZXWVTiYccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccZhRRRRRRRRppRRRSTVWXZ\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ZXWVTiY@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ZhRRRRRRRRppRRRSTVWXZ\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ZXWVTiY________________________________________________________________________________________________________________________ZhRRRRRRRRppRRRSTVWXZ444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444ZXWVTif666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666ZhRRRRRRRRppRRRSTVWXZ444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444ZXWVTi$222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222ZhRRRRRRRRpp
>FDDDDDKDKLDLLELELEEELFFFe
InfParser: Set source directory '%S'.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
WTHelperProvDataFromStateData
g]MKKKKKKKLa
G0Y3W%
/WMFDIST
` UAVAWH
4:?LM
http://
GetLengthSid
(0+%"t
older or equal to
l$(E3
fF9,pu
PdhCollectQueryData
publicKeyToken="6595b64144ccf1df"
MediaPlayerV2.dll
=DylL
6665555443*
\$XE3
A_A^_
`^Y\\Y
PathFindExtensionW
H9Y(t
A>MBww}QVLW
ColorPlayer
rbP<>=====;;;;;;:>
Windows Media Setup
UPDATEINIS
_bryzeIE(&$((EI|lj_ljiiiby
Z[^{IIIINt2
<RQPP[YXdcbaa`nmlkjjzzyyxxx
WriteFile
VUUU+L$dE3
D$X+D$P
InternetErrorDlg
KERNEL32
531vsrrwy
Z@@@AAABBBCCDDDDDD5
A_A^A\
Software\Policies\Microsoft\WindowsMediaPlayer
ERROR: XML Parser: Could not set Dependency attribute '%S'.
DestroyWindow
*eR 8
Z[`{P
fD9$Ku
D$0H;
+T$DE3
Alerted WMP to the updated service.
ERROR: Download Manager timed out.
System restore is disabled on this system.
PPGG:
%sserviceinfo.xml
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Z[[lI
=QO[YYXXXWccbbaa``nnnmmmlllkkkjjjjjo
x AUAVAWH
</asmv3:windowsSettings>
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&!!!!!!!!!!!!!!!!!]
@USVWATAVAWH
XML Parser: No data available for Dependency attribute '%S'.
FWxSQG5&&&&&'6BYfef
Critical
b]NMKMKMKKKbhb
ExtTextOutW
COMPONENT
_endthread
SetWindowTextW
C?????>>>?D
ouuzz
INF: Found section '%S'.
XML Parser: Parsing element '%S: '%S''.
DeleteDC
INSTALLFILE
VVT[[[[[[XXXXX
_biiy
MigrationPercentage
GdipAlloc
===<<<<<<GG=>
Media Library import completed.
cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc
8889:<?AdIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIdA?<:KF333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333dH8888888
ERROR: Decryption failed for file '%S'. Last result: 0x%x.
y2?gM
31qsrrrrooomsy
=BBDBB
ReleaseSRWLockExclusive
13Asrrrrowy
1#;"7 7"<6l2
EnableMenuItem
fD94{u
LoadCursorW
SHGetSpecialFolderLocation
WaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaXfSTUVX\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\XVUTSRQQQQjjQQQQQQQ
L$X+L$P
=====Updating Install list for UI.
JKLN%\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\%NLKJIHHHHjjHHHHHHHSP222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222%
}{zywvure\
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Z[^{
Enqueue
y[[aD|zEy^
rRkIUT
RtlLookupFunctionEntry
Service added from command line: 0x%x.
Kn>rs
MP10_EnsureFileVer
XMLURL
PdhOpenQueryW
[]Dts
!OEWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbW!
Z[^{IIIN@
fD9$~u
ERROR: Could not open URL: '0x%x'.
ERROR: Too many commas in CopyFiles section.
&test=
x+Q<b"MD
QueryPerformanceCounter
\wmdbexport.exe
?hqFRRRRRR
ERROR: Unsupported use of UpdateIni: '%S'.
RRRSTVWXZ\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ZXWVTiY____________________________________________________________________________________________________________________________________________________________________________________ZhRRRRRRR
ERROR: Could not store delayed action for component '%S': '0x%x'.
t$0E3
\LCACBACAAA
)********
|}vtrpnigheabL\KZYGCBA><?(
d$8Lc
ERROR: %S, 1-queryservicestatus
hfX+yy.
ZDxx@
file://
msvcrt.dll
/s "
bixwrnz
\$ UVWATAUAVAWH
\wmp.dll
StringFileInfo
=JO[O[YYXXXXWWWcccbbbaaaaaaa``a```
WMP11RollbackTo
% cs,T
t$ WAVAWH
t$ UWATAUAWH
%stmp%05d.WMC\
f9D$P
gdiplus.dll
0A_A^A]A\_
ole32.dll
!\$dL
JKLN%____________________________________________________________________________________________________________________________________________________________________________________%NLKJIHHH
D9d$D|
t{{{{x|x|||}}}t
AOL Frame25
000000000
Reboot required due to '%S' driver installation.
GetConnectedStateEx: User '%hs' connected via unknown connection type.
\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmsocm.cat
vRLwE
wmplayer.ocx.7
SetupLogFile
BT--***
ERROR: Could not add catalog '%S'. Result: 0x%x.
Kdpspq
1NP>'R<p<K
Q((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((&eIIIIIIIIppIIIJKLMO&^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^&OMLK
t*95&t
4}lH;_
F;"8>l0,
uNLcF
.text$mn
System restore is disabled on this system due to low disk space.
l$ VWAUAVAWH
e_aBvt~
D$XE3
L$ SH
Blocking
4ukN8T
/NoWMPLaunch
Roxio will require a reboot in order to be functional: %lu.
GdipImageRotateFlip
Service Install denied: user is not an admin.
GetTextFaceA
GlobalUnlock
YQKLv
nQhH
LookupAccountSidW
lHMMMMMMMMMNNabjjggbb
Attempted to delete: '%S'.
&'&&&'&&&&B|lXljiy
xbwl{c
ERROR: CustomDestination '%S' not settable: LDIDs require 8 characters previous to '=' due to setupapi.
}YN@BBB?J
x3fD;m
Z[`{OO
Z[^yIIIIII@
f9<Cu
Dll UnRegistration: Could not find file '%S'.
vGD%S
nuyuuxxyxx
(((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
?/00--++CQxu
ZaD|z
u&H9{
Added CustomDestination '%lu' as '%S'.
2+&Vvf
oHTTP
fE9,Fu
=<"62/,BkA
sO7&H~|
HMKMKKa
WARNING: System will require a reboot: reboot cache grew during install: was %lu, now is %lu.
`q'>z
d$hE3
XML Parser: Parsing element '%S': '%S'.
<description>Windows Media Player Setup</description>
P5]7B
EventWriteTransfer
InitCommonControlsEx
fD9,Cu
D$@tD
47M__aaabY8
zuzzzy
SETUPAPI.dll
Progress_MaxDialog
Q740D
QQQQQHHH~~AApjjdd
`~a_bL
t*954i
T$@E3
/Uninstall
Parsing INFSection:'%S'.
|EN\u
u,D9|$@u%
fD9$Cu
.!OEWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbW!
D$@E3
=2?MZZZZ\\MF?
%s (%lu of %lu items)
u}}}}}u
UpdateWindow
Services information URL is : '%S'.
M'&&'''&&&&&E
UnloadUserProfile
Setup beginning.
L$ SWH
ERROR: OLE Initialization failed: '0x%x'.
SQMLaunchIndex
fD94^u
k#"
/=;8">O
13Bxr}tZ[aD|z
ERROR: No network connection is currently available.
L$P!D$8!D$<3
/3"#\KP
slihic8
}DDDDDD<Hv
CHAN4
ubO/./<<<..<|hjryxxwrr
F'''''''&&&FeXji
ERROR: Initialization of CWMXDownload failed. Result: '0x%x'.
dk7.6
The XML default service is: '%S'.
#22330
mshelp://windows/?id=%s
IsDebuggerPresent
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&T:,122>>00]@jq|K
DESTINATIONDIRS
DeleteFileA
Italic
=JOOOO[[NYYYXXXXXWWWWWWcccccccccW
A^A\_^]
WMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMXfSTUVX________________________________________________________________________________________________________________________XVUTSRQQQQjjQQQQQQQ
CATALOGFILE
###re````
RtlVirtualUnwind
HttpOpenRequestA
L$hH!t$ H
$V!&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&:
Setup succeeded. WMP will be launched now.
d$lE3
53IlO
GetModuleFileNameW
b^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^bH9;=@bccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccb@=;98777
3>=%%
OEWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbW
FW_BOLD
\Help
36<<<6l#0
t+D95
pA_A^_^]
J3Drrrrroowy
ERROR: Could not connect to host: '0x%x'.
Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source
t{xxx|||}}}}t
Image
A_A^A]_^
Install for component '%S' was halted. A required component was not available.
SetTimer
Could not determine download size for URL.
_wcsupr
t0H9-
ScrollWindow
+.>K[
(@t5H9-
SHChangeNotify
P?DDD<H
Ser9R
.CRT$XCA
%s\%s\wmvcore.dll
GetSecurityInfo
C>!Q'
D8<8u
KERNEL32.dll
=KJJJJQQQOQOO[[[OOO[[[[[[[[PPPM
vp;DEDEEEEEEEEFFEFFFFFFG
OleInitialize
GetConnectedState: User '%hs' connected via unknown connection type.
\Spool\Drivers
|$DE3
}zyxwurqponlfh?@=>
kjd0xT
DisableMRUMusic
WMFDist11RollbackTo
f;D$@
%ssetb%lu.tmp
w'}QT
Task1ButtonTip
@:8F5
u|||}}}}}t
GetConnectedStateEx: User '%hs' connected via LAN.
OGNKMKa
}{zywvurroeU
dN@@@ABBBCCCC5s
i;<2::::T
SetupURL
UnhandledExceptionFilter
XML Parser: Loading nodes from xml element failed. Result: '0x%x'.
/RunOnce:
cul{c
MFPlat.DLL
Shell_TrayWnd
GetWindowsDirectoryW
setup_wm.pdb
DefWindowProcW
f94xu
EventUnregister
FindResourceW
https://go.microsoft.com/fwlink/?LinkId=52492&sv=2
ERROR: Could not open URL. Result: '0x%x'.
TASK0
Z[`{P44
JSxQRrND@34?GN[f`[t
fE9,Lu
Parsing CreateServices section:'%S'.
w}}}}}}}}}}~~~~~~uuu
D$Pf;
GetVersionExW
(local)
Service '%S' should be shown to user.
Install denied: this is a MUI system for which a localized package should not be used.
PACKAGESIZE
Package install complete. Last result 0x%x.
QQQQHHH~AGB;;>21Df>2:#'
Cb````````````
GetSystemDirectoryW
ERROR: HTTPSendRequest failed. Result: '0x%x'.
UnInstall denied: Blocking dependencies found.
2''.:a[
VS_VERSION_INFO
xvtrnlPjh`a_L\KYGFCB@>986420.,,
ObfuscatedSamplePlaylistsPath
aXQ6H}|F #'*
ServiceExtra
XML Parser: Dependency requirements are not met, no need to add to list.
u>EJJJJQOOOOO[O[[[[[[[YYYY[[[[[[U
Software\Microsoft\MediaPlayer\Setup
Definition
D:#*)*
/52Si
x UATAUAVAWH
</dependency>
``````U
ERROR: UDB file not downloaded. Result: '0x%x'.
A_A^_^]
HttpQueryInfoA
L$pfD
RegisterWindowMessageA
==Qsp)T^wm
L9%2j
8889:<?BdaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaadB?<:KF]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]dH8888888
:5///--||004447777=====777.B
.CRT$XCZ
9\$8t
GetConnectedState: User '%hs' connected via modem.
\X_bjbbiiibbu
:Ke!mo
Install denied: user is not an admin.
Microsoft.Windows.MediaPlayer64
PostQuitMessage
ERROR: Display percentage overflow.
Reg Parser: Obtained value '%S' for attribute '%S'.
12.0.17763.194
SetupFindFirstLineW
fD9<pu
D9d$Du\H
sH>pa
fF9$pu
`bfBvt~
DisableMRUVideo
\kernel32.dll
%s\Microsoft\Media Player
> VO#m
InternetSetOptionA
qsdwt
ZO5P`
u]bcfV><WURG
SendMessageW
D3Brsrrwy
'-Xhiimm
246<"98">4321
SeBackupPrivilege
L$pE3
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.data
x UAUAVH
t>KJOQOOOOO[YYYYYYYYXYXXXXXXXXXZXV
CRYPT32.dll
jjHHHHHHHSP''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''%
L$\f;
.58FnWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbW8/
Advpack INF
\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\
%s.NT5
fD9$pu
EEEEE
MediaPlayerText
4":l#
ERROR: Setup missing uninstall file: '%S'.
}{yxwvuqpponljjje
=KOO[YYYXXWWWcbbaaa``nnnnnmmmmmmmll]
u+L9e
memset
ERROR: Reg Parser: Missing required Package attribute '%S'.
#233l444ll322
Color
,4=gsspppso
Could not set system restore end point: error 0x%x.
GetActiveWindow
PreventMusicFileMetadataRetrieval
ContentPartner
W????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????XfSTUVXZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZXVUTSRQQQQjjQQQQQQQ
v>FP[[YXXWcbba``nmmlkkjjjzzzzyyyxxxxxq
{{1:K
CreateFileA
/DefaultService:
%lu%%
TrustCatalogFile returned 0x%x.
An INF requested a reboot via the SmartReboot section.
SetFocus
bozzzzwz
X_jjx
?hnFRRRRRRPyhl}
PdhCloseQuery
\$ UVWAVAWH
GetProcAddress
CurrentItemTotalProgressCount
,I9^(
</trustInfo>
\wmp11.exe
ProductName
;;;;;666>
WMPDeskBand
fD;d$`t:fD;
{}vtrpniPjef_L\KZGFFBA><984210.
;:a`^]]]]]]]]]]]
CreateCompatibleDC
strrchr
6hvg.1R
Software\Microsoft\Multimedia\WMPlayer\Devices\DVD
Could not retrieve service information URL: '0x%x'.
zzzzz{{{{{{|t
InternetGetConnectedState
.idata$6
Another Update.exe package is running on the box.
PRVAT
ServiceTask1
QQQQQHH~~AAAAphhhui;;>kpq
CertVerifyCertificateChainPolicy
Z[`{P4P
IDATx{
!\$XH
ERROR: Could not resolve destination %lu.
JJJJJJF
IcV%$(~
wmploc.dll
GetParent
ccchhnnnnqqqqqnnnhtj<<>f@`hi;;>fiHA<06
/NoMigrate
GdipFree
JX{ST
f;D$ u)L
@A_A^_^]
,47gsppppso
D$HE3
$D<@u
AddAce
~=>>;;;;;66E
ge2XH
D+L$p
/prefetch:1
}zyxwurqsfh?6=&(,++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++)))))))))))))))))))))))-(>@V
H!|$ H
type="win32"
&!!!!!!!!!!!!!!!!!!!!!!!!
XML Parser: Parsing Element '%S': '%S'.
A9\$xudA
L$`td
~:=B5
'-XjjldN
LcC8E3
h^=DDDDDEEEEEEEEEFFFFFFF;
xlP;2H}|/"()-x
%1vr5CCCDDDDEEEE5U6
MoveFileW
Package '%S' is version '%S'. This is '%S' than the version currently installed.
12>>>00]?hq|K
Z[`{MM
FileVersion
ERROR: Invalid params given to DoProcess.
x|||v
fD9$Au
`YaBvt~
'-XsE
KqtBD|
WMC_CopyFile: File '%S' was only to be installed if already present on the system. It was not present and thus will not be installed.
*/4[lssssssp]DBDJF
cccccccccccccd`:
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3">
PendingFileRenameOperations
m8%<$z
HK;4k(
*u_,?
Setup has failed: '0x%x'.
/////////
UUURRRRROaBvv{
u)D9d$tu"L
t$ E3
fD94Xu
=====Setup preparing to download needed files from network.
CreateDialogParamW
&pb')
-/>8<2
Starting download to file '%hs'.
LANG=ENU&
%s_NT%lu
+D$\3
`YfBvt~
u99t$4u3H
DllUnregisterServer
GetExitCodeProcess
w|||||}}}}}}}}}~~~~~~~u
fponlljjj```^fE@=>8:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Z[^{
Z-PXra
fA9Z*v$A
A_A^_
UAVAWH
!D$ D
ERROR: XML Parser: Failed to add component from XML. Result: 0x%x.
memcpy_s
4Am],0
%s advpack.dll,LaunchINFSectionEx %s,%s,,%lu,N
ERROR: Back-up files may not be available for rollback.
Informational
{|xvtrplijdea_LKZZGFCA@><9:("
</dependentAssembly>
File replacement for '%S' queued in non-admin file cache.
( t-H9-
SetFilePointer
<requestedPrivileges>
Z[`{4E
'-Xpd
>KP[YXXddcbaa`nnmllkjjzzzyyyxxxxx
IIIJKLMO&aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa&OMLK
`\\\i
Software\Microsoft\Windows\CurrentVersion\Run
Microsoft Windows Media Configuration Utility
"$333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333$"
======Installing component '%S'.
Q333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333&eIIIIIII
/ServiceInfo
VersionNumber
A8>.w
,03"lFqfe
'-XjjjoZ
ksnwt
L$(fE
Migration progress: %lu%%.
xA_A^A]A\_^[]
ggggggggggg
]CK@CK
XML Service key name '%S' is already set as '%S'.
/>
},*,--
l$TE3
VerQueryValueW
wcstok
Software\Microsoft\MediaPlayer\Preferences\ContentPartners\%s
Failed to Add Component %S to Uninstall.
#)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))'(1Mm
System restore is not supported on this system.
(((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
!#%444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444%#!
((((((((((((****,,,11
D8-._
TSw]g8E
EventRegister
Processed UpdateIni line: '%S'.
InternetOpenA
InternetGetConnectedStateExA
)t$\D
GlobalLock
u|}|}}}}}}}}~}~~~~~~~y
SystemUptime
DeleteFileW
S31vsrrrroomsy
u\EOJOOOOO[YYYYYXXXXXXXXXWWdWWdddWf6
YjBvt~
GDI32.dll
H*</z
S@KKKK@X
,+BrS
Software\Microsoft\Windows\CurrentVersion\Policies\System
L$ H;
ERROR: Invalid arguments passed to AddDirectoryToList.
InvalidateRect
`VCBBBBA[
GetDpiForWindow
55554ll333
'zXiiiiji,
This service is already installed.
XML Parser: CoCreateInstance for DOM succeeded.
GetStockObject
A_A^A\_^
Command line-specified default service is: '%S'.
H!t$0E3
&geoid=%x
G93225327
H1ivrroommmmmmmmmggsqXX=1qownYY=JGKG=Y3W
'-Xijmm
DestroyCursor
yyyyyyywy
WWW$#V
>cdj````em?@2
.data$brc
L$pH3
RoxioReboot
f9,zu
`Z\YYY
LaunchPrivacyDialog
/1#2;<87 !!!!!!! 78:>4l2#1/
H3E H3E
InternalName
strncpy_s
1 (q]
CreatePen
CryptCATAdminAddCatalog
malloc
fA94@u
WMPSetupID
|D>\u
8W(ac
7777777GDB0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000BCG8:<>bQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQb><:87777
l;<>53
*'&&%$$$$$$$$'
8889:<>AdeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeedA><:Kd````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````dH8888888
Ga]]]]]]]]]]]]]]]]]]]]aaaaa??@@@ijpppAnAAnqvvvv||||
zbGl{ctlzcgn{c
u/H95
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
f;D$0u
Q333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333&eIIIIIIIIppIIIJKLMO&999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999&OMLK
l0o9K
}zxxwurqponlljjj`e
0;:DmT
88889;=?dRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRd?=;9HEC1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111CDH8888888
Software\Microsoft\Windows\CurrentVersion
.rsrc$02
uW9E0uRH
%swatermark.jpg
85\K^cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccQ?>k)
^\\\\Y
_unlock
&(''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''$W
0.0.0.0
[Dz'-
Creating download manager. We '%hs' force a connection.
ButtonTip
GetDC
SetTextColor
fhhic2y+3H
vvvvvvvyyyyw
DisplayName
/UninstallAll
RegQueryValueExA
f<OO[[YYXXXWWccbbbaa````n`nnnnnmmmm`
jRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRj
RegisterApplicationRestart
qXXf,K
en-US
InternetCrackUrlA
WCBBBABB?h
{}vttpniPjef_L\KZGGFBA@<96!
{}wvtppiPje`bO\KZYGFEA@<3
CurrentItemEstimatedTime
FindNextFileW
Service
TlsSetValue
OLEAUT32.dll
952323"
QQQQHHH~~AApjjd``````
kernel32.dll
LBFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFBL(*+-.F
DELFILES
Mp!D$4!D$8!D$D3
QGKKKKKU
.text$di
FindClose
/NoPID
D9idt
.qBk'
/51Sk
\Fonts
ActiveServiceName
t^9=/
>";2/,BkA
VWATAVAWH
MulDiv
</requestedPrivileges>
SOFTWARE\Microsoft\Windows Media Player NSS\3.0
adn{PRRRRRR4}ttuyyyuyxyuuuuuuuuuuuuuuuuuuuuuryyxxxxxxxxxxxwwwwwwww}
GetTempPathW
%stmp%05d%s
i!?wS
HHHHHHHSP222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222%
IdOS-
IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII
Q((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((&eIIIIIII
*11;<=0qfG
AkB+.;"6/.
t0H9-G
/ShowWMP /SetShowState /CreateMediaLibrary
RUNPRESETUPCOMMANDS
\$0E3
GetCurrentProcessId
,.=7OqWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbW7
E0!]0L
RegCreateKeyExW
ConvertStringSidToSidW
B;;;;;;;66666>D'x{QBEL=%%
System restore end point set.
?DDDEEEEE;=u
EulaURL
/NonSilentPlayerWarning
t+9=`!
WMC_RebootCheck
H9(uLH
L$`tg
{|xvtpplije`a_LKZZGFEA@><86410("W
EGKKKKK^
<assemblyIdentity
;;;;6E
F6>By
Install denied: the OS Arch does not match.
INF: Line '%S' not found in section: '%S'. Result: 0x%x.
Sh1<&
VBBBACAAAAAAAAA
FireNamedEvent : OpenEvent returned 0x%x.
SilentAcquisition
k,LOIc[| Z[`{POPO4OK
'/XsH
language="*"
t>EEEEEEEEEFFEEFFFFFF;^
@KC@C@X
fE9<Au
Software\Policies\Microsoft\WindowsMediaPlayer\
MapWindowPoints
LegacyContentProviderName
47M_abaK
t)95W#
Installer: Preparing to set system restore point...
./#!
GetSystemMetrics
Trust on catalog '%S' complete. Result: 0x%x.
yilVOA0AOVlrr
wmp11.exe
InternetHangupA
InternetHangup returned: '0x%x' for connection '%lu'.
\All Users\Application Data
I94$u#
63533"
@LS_[[
D9o`t
f94yu
=DDDDKKDKKKKKKLKKKLLLLLLLFH
L$XD+L$PD
\wmpband.dll
Software\Microsoft\MediaPlayer\%lu.%lu\Registration
t+95r"
@USWH
.!FnWbbbbbbbbbbb]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]W
DllRegisterServer
%slogo.jpg
CoTaskMemFree
GetDlgItem
cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc
fE9,Du
PostThreadMessageW
11;<l
processorArchitecture="amd64"
GetDesktopWindow
Z[`{M
tB95.
OOMMNQQRVVVW]
`^\\\\Y
RegOpenKeyExA
InternetAutodialHangup
E222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222bH9;>@bHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHb@>;987777jj7777777
t=QO[YYXXWccbba``nnmmllkjjjjjzzzzzzzy
jOQx3ms
.CRT$XIZ
Registering DLL: '%S'.
((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
Installed %S
Another version of catalog file '%S' was previously installed.
PdhAddCounterW
>)z;_
b^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^bH9;=@bccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccb@=;987777jj7777777
Version=
PACKAGE
zzz{z{{{{{xx
NAMEDEVENTS
GetShortPathNameW
!This program cannot be run in DOS mode.
N{ "C
MediaPlayer
[YaBvt~
\wmvcore.dll
ERROR: XML Parser: Missing required Package attribute '%S'.
PPPP~_Z:,
Beginning download of component '%S'.
Required
CreateServiceW
XML Parser: ServiceNameFromXML: '%S'.
A_A^_H
S-1-5-4
ERROR: Window handle has become invalid.
SRSetRestorePoint
,4=gssssssoJ78]ld
/00000//
GetLocaleInfoW
!#%\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\%#!
PAS=uu{QV
&parch=x64&arch=x64
t$@E3
&?=>HX
mscat32.dll
TgfhWbfpvxxii_cb`]ba
3333>:%%
5BAABBBCCCDDDDDD5L
//001
\VarFileInfo\Translation
12.0.17763.194 (WinBuild.160101.0800)
v*S%h
:::::GGPPP
USER32.dll
https://go.microsoft.com/fwlink/?LinkId=120764&mpver=%s&id=%x&contextid=%lu&originalid=%x
NT AUTHORITY\LocalService
WMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMXfSTUVX____________________________________________________________________________________________________________________________________________________________________________________XVUTSRQQQ
COMPONENTGROUP
D81u#D9a
ForceUsageTracking
A^A\_
u]H95iU
OpenServiceW
t)9=p
Service install returned 0x%x.
wcspbrk
/DisallowSystemRestore
k,LOFZXv Z[`{PPPPO4Is
/s /u "
fD9,qu
User name not found: '0x%x'.
W"-CA@>986420.,++*
IIIJKLMO&\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\&OMLK
Source location is:'%S'.
GetUserGeoID
XML Parser: PopulateFromXML returned: '0x%x'.
MCGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGCM)********
CreateFontIndirectW
HeapSetInformation
\$(E3
U$''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''%
Z[^{N4d
f9H\u
EnterCriticalSection
.CRT$XCU
|!!\$PL
%I64u.%lu
\$ E3
##### Beginning download. Download will be to '%hs'.
,4=gsppppso
Processed DefaultService. Exiting.
SKGGGGG~~~~~pppppiiiii@@@@@aaaaa]]]]aaaaaa@@@@ijjpppAAA~~~v
AkB,#:>/.-
|!!\$@L
\wmdband.dll
A download will be required for component '%S' from URL '%S'.
D;|$Dt
LoadImageW
extinf
b]CGCK@W
PGGG::444B
D$8H;D$(u
LookupAccountNameW
SetScrollInfo
>|||||||||||||||||e
MINIMUMVERSION
()*+,-.FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF.-,+*)))))jj
CryptCATAdminReleaseCatalogContext
ERROR: Reg Parser: Missing required component attribute '%S'.
SendDlgItemMessageW
/////
4455555666
:::*:::
Optional
}zyxwurqsfh?6=&(,+++++++++++++++++++++))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))-(>@V
DownloadFileFromURL: We '%hs' force a connection.
BT``````
I^=DDKDDKKKKDDKKKLLDLELLLEEe
UP555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555%
|!!\$0L
<AEEEE
ERROR: Trust on catalog '%S' failed. Error: 0x%x.
<asmv3:application>
GetCurrentProcess
L$HD+
Z[`{4}3
[^[V;#Ftl
]LKKKK@@b
Parsing RegisterOCX INFSection:'%S'.
Q777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777&eIIIIIIIIpp8889:<?BdaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaadB?<:KF]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]dH88888888pp8889:<?BdIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIdB?<:KF777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777dH88888888pp8889:<?AdIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIdA?<:KF333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333dH88888888pp8889:<>AdeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeedA><:Kd````````````````````````````````````````````````````````````````````````````````````````````````````````````````````````dH88888888pp8889:;>@deeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeed@>;:Kd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dH88888888pp88889;=?dRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRd?=;9HEC1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111CDH88888888_p****+,./G
AddsTo
win:Stop
Pending
FT1Aw
1:OLM
User has declined the Service EULA. The service will not be installed.
ERROR: Catalog download failed: '0x%x'.
NOTICE: Windows Media Player is currently running.
wL*(ef
Z[`{POB
y}}}u~~~~uuv
d$ E3
Finished migrating WMCv2 user.
advapi32.dll
D9d$Xu
H!|$H
Task3ButtonTip
XML Service key name is: '%S'.
8-SQH
ERROR: Download failed. Result: '0x%x'.
LocalFree
GetNamedSecurityInfo returned %lu.
y}QCHLDwt{
D$8E3
*@FMl4n
f<<<<<<<<<<<=f
}{zywvuqppne\
%lu,%lu
</assembly>
H!t$8H!t$0H!t$(H!t$ 3
fE9$Nu
User is connected via LAN.
qGMMMa
%s.NT4
Warning: Need to account for cabinet download and extraction size.
.7\mZ
SOURCEURL
Translation
Reboot requested due to '%S' file clean-up.
gHJ-<5,
A_A^A]A\_^]
GetDiskFreeSpaceEx failed. Error: '%x'
LegacyContentProviderFound
w}}}}}}}}~~}~~~~~~~~u
}@@@@ABBBBCCCDDD5
t&H9p
FindWindowW
ERROR: Process '%S' failed. Error: '0x%x'.
V?;:87 ! 78:>?V
S-1-5-80-2375682873-768044350-3534595160-1005545032-2873800392
OleUninitialize
<dpiAwareness>PerMonitorV2</dpiAwareness>
Z[`{PO4R
Software\Microsoft\MediaPlayer\Setup\CatalogIteration
c8lVl
SetupOpenInfFileW
((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
ccbbhhnnnnnnyj;<>3Bp~i;;>2@j=>
DesktopShortcut
xIL9l$Ht
Package clean-up: Cleaning up files at '%S'.
GetNamedSecurityInfoW
{ UATAUH
H!\$X
><1qI
wmfdist11-64.exe
/Play
DefaultInstall
fD9<Gu
INSTORDER
FileType
Non-admin user cannot elevate.
RRRSTVWXZ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ZXWVTiYccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccZhRRRRRRR
EH E3
!pd'tT
ProductVersion
OMMMM
J?;4;;5;5554Ge
Parsing StopServices section:'%S'.
Secur32.dll
f94Cu
Progress_CurrentDialog
t$PE3
%seula.txt
Software\Microsoft\Windows NT\CurrentVersion
ShowWindow
5556666666,
11110#l;:":<43#0
_onexit
fE9,Au
WARNING: Could not get size for file '%S' for INF '%S'.
!&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&V~=>000]?hv
DisableMRUPictures
h>AAAAAAAAAAAAAA>A
.CRT$XIAA
0-.>:VpfcccccccccccbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbW:#
fD9<Au
}zyxvvmeF=&()))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))'BV
go?;:
XML Parser: LoadFile for service xml failed. Result: '0x%x'.
A_A^A\_^[]
pX=B_T
STARTSERVICES
Windows
GetUserNameExW
ERROR: Service information could not be retrieved for '%S': 0x%x.
LLLLLLL
"$YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY$"
[\bBvu~
}NABB?M
Resolving destination: %lu.
Querying service '%S' %S.
uQ95z
%s\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
D$0E3
level="asInvoker"
fD9$Yu
0+-+|..22888<E
}{zywvurpponle\
---!OEWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbW!*
95535"
=X1#$$$$$###V"
SetupLogLevel
9|$0u
.idata$2
wmfdist11.exe
OEMServiceOverride11
GetTextMetricsW
=PP[YYXWWcbaa`nnmllkjjjzzzyyyxxxxxx
x AVH
SetCurrentProcessExplicitAppUserModelID
Service data gathering complete: %lu interesting service(s) found. Result 0x%x.
XjoD+'''&&&&&&&$$E|i
YLcC8
WMPlayerApp
|$PE3
L$dE3
\regsvr32.exe
,4=gsss
.tls$
chhnnqqqqqqqqnnnhhccb___ej<<0ficlj<;>1,QH0;2
JKLN%________________________________________________________________________________________________________________________%NLKJIHHHHjj7777777
MP2.SaveDir
vvvyy~~~
=?<<999999
InstallData
INFParser using delayed transactions
PathAddBackslashA
LookupPrivilegeValueW
L9\$(t&
rlbbiiibbbbx
.xdata
0"[>I*c
InternetCloseHandle
.gfids
Zl&:X
#"Fdl
D8|$@t=H
fD9<Xu
Reg parser: Adding dependency '%S'.
TDkArsooooooooooogs|Z
RNIFF}e
Firing event: '%S'.
3A:%%
Operating System
IL`Wp
''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''<$W
{xvtrpnijhef_L\KZGFCBA><9:
GetModuleHandleExW
ERROR: Catalog download failed because '%S' could not be created. Error '0x%x'.
rrr##""
EEEEHEEM!
D$rfA
_cexit
;EEF;F;;;;;=
EventData
GetLocalTime
d_\ZWf
?hqFRR
Deletion of service : '%S' succeeded.
M5BBBCCDDDDDEEE5
1.0.0.0
|$0E3
MPs8H
FireNamedEvent : SetEvent returned 0x%x.
/0><#.KP
!#%[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[%#!
t$ WATAUAVAWH
uuuuyuyyvvyvw
D93v%H
GetLastError
@USVWATAUAVAWH
_commode
LBFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFBL(*+-.F
D$8L!D$0
}{zxwvrrqonllljjWdJ6
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
WARNING: Base URL is not set. All packages must be available locally.
CENTER
buinf
c<=:G
_amsg_exit
Delayed Dll Registration: Succeeded for file '%S'.
\#-WU
fD9$Gu
oXH9_`u
SetNamedSecurityInfo returned %lu.
A_A]A\_]
?terminate@@YAXXZ
INF: INF requested error override for '%S'.
\catalog.wmdb.lz
AUAVAWH
{}wttrnlPjh`b^\\ZYGFCA@>9862#
succeeded
{xvtrpnighe`b^\KZYFEBA@<98441.
ProgramFilesDir
Trusting Catalog: '%S'.
rX9.-z-.....2222333333333333;5
0123456789ABCDEF
;|$0|
CommandLineToArgvW
\$HE3
,,49\Y_]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]^;6
Local AppData
fD94Hu
GetUpdatedUDB: We '%hs' force a connection.
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Unknown
ERROR: %S, timed out
n5gp,
wvvvvyyyy~~y~~
WWWWWWWWWWWWWWWWWWWWW
;:a`^]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
Deleted file '%S'.
_stricmp
StartServiceW
D9|$\t(D+|$\E3
}N@@@AABBBCCCD5M
pA_A^A]A\_^]
lrrT?.==?===;=;.Geblyxwwn
DeleteService
M9&uXH
'T5,D1f==0=]@iA|K
name="Microsoft.Windows.Common-Controls"
H9=1B
%lu.%lu.%lu
,4=gsssss
ERROR: XML for service '%S' is invalid and missing either the EULA or Privacy URL.
UP555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555%
ZIchd
ERROR: Failed to open SCM: '%S'. Result: 0x%x.
MFGetSystemTime
A_A^A]A\]
A_A^A]_]
u^h`p
f9,~u
/0<>#aJH
pdh.dll
GetSystemInfo
gggggggggggI"
%s&partner=%lu
HJD6'&
fA9\E
{}xvtrpnigh`a_L\KYGGCB@><964210,'
"Gwl(
re_^`bbbbbeeeegggggggggggerpYY=1nlypY<=1HGG0<2
`.rdata
PdhGetFormattedCounterValue
,1#:>2.KP
ERROR: Reg Parser: Failed to add uninstall information from reg. Last result: 0x%x.
RegQueryInfoKeyW
HttpSendRequestA
RegCloseKey
?hqFRRRRR
Download manager now connecting to URL.
GetSystemMenu
2;"<l
Starting Media Library migration.
3#Eoq
&'D>nX
Q777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777&eIIIIIII
*+1<>\TM
$NTUninstallWMP11$
|oWXUI@O
%s\%s%d.wpl
-1D":DnM
!\$(I |
23d74b5f76639ee6446bf7f659c73577 | e1d160e2dd1e7084855a364fed211b9f | 00f0e6c8d8c8e6e0 |
Version Infos
| CompanyName | Microsoft Corporation |
|---|---|
| FileDescription | Microsoft Windows Media Configuration Utility |
| FileVersion | 12.0.17763.194 (WinBuild.160101.0800) |
| InternalName | setup_wm.exe |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | setup_wm.exe |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 12.0.17763.194 |
| Translation | 0x0409 0x04b0 |
Sections
| Name | RAW Address | Virtual Address | Virtual Size | Size of Raw Data | Characteristics | Entropy |
|---|---|---|---|---|---|---|
| .text | 0x00000400 | 0x00001000 | 0x0003c55a | 0x0003c600 | IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ | 6.30 |
| .rdata | 0x0003ca00 | 0x0003e000 | 0x0001077e | 0x00010800 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 5.09 |
| .data | 0x0004d200 | 0x0004f000 | 0x00002fe8 | 0x00001600 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 0.86 |
| .pdata | 0x0004e800 | 0x00052000 | 0x00001848 | 0x00001a00 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 5.30 |
| .rsrc | 0x00050200 | 0x00054000 | 0x0016fa38 | 0x0016fc00 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 5.16 |
| .reloc | 0x001bfe00 | 0x001c4000 | 0x00000160 | 0x00000200 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ | 3.86 |
| Name | Offset | Size | Language | Sub-language | Entropy | File type |
|---|---|---|---|---|---|---|
| MUI | 0x001c3928 | 0x00000110 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.76 | None |
| WEVT_TEMPLATE | 0x00055190 | 0x000004f2 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.57 | None |
| RT_BITMAP | 0x000c1000 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.21 | None |
| RT_BITMAP | 0x000e58e0 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 1.32 | None |
| RT_BITMAP | 0x0010a1c0 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.86 | None |
| RT_BITMAP | 0x0012eaa0 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0.78 | None |
| RT_BITMAP | 0x00153380 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.21 | None |
| RT_BITMAP | 0x00177c60 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 1.29 | None |
| RT_BITMAP | 0x00075b28 | 0x000027c0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 1.08 | None |
| RT_BITMAP | 0x0007a750 | 0x000027c0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 1.08 | None |
| RT_BITMAP | 0x00080308 | 0x000037b0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0.90 | None |
| RT_BITMAP | 0x00086e98 | 0x000037b0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0.90 | None |
| RT_BITMAP | 0x0009c720 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0.19 | None |
| RT_BITMAP | 0x000d3470 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 1.32 | None |
| RT_BITMAP | 0x0011c630 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0.78 | None |
| RT_BITMAP | 0x001657f0 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 1.29 | None |
| RT_BITMAP | 0x0008a648 | 0x000120d2 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.38 | None |
| RT_BITMAP | 0x000aeb90 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.21 | None |
| RT_BITMAP | 0x001b2f08 | 0x00007ef6 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.41 | None |
| RT_BITMAP | 0x001c2cf8 | 0x0000039e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.80 | None |
| RT_BITMAP | 0x001c3098 | 0x00000332 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.63 | None |
| RT_BITMAP | 0x000736a8 | 0x0000247a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.45 | None |
| RT_BITMAP | 0x001c33d0 | 0x00000552 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.57 | None |
| RT_BITMAP | 0x000782e8 | 0x00002462 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.44 | None |
| RT_BITMAP | 0x00140f10 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.21 | None |
| RT_BITMAP | 0x000f7d50 | 0x0001246e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.86 | None |
| RT_BITMAP | 0x0018a0d0 | 0x00028e36 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 0.74 | None |
| RT_BITMAP | 0x001bae00 | 0x00007ef6 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.41 | None |
| RT_BITMAP | 0x0007cf10 | 0x000033f2 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.27 | None |
| RT_BITMAP | 0x00083ab8 | 0x000033da | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.26 | None |
| RT_ICON | 0x00055688 | 0x00000a68 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.12 | None |
| RT_ICON | 0x000560f0 | 0x00000668 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.25 | None |
| RT_ICON | 0x00056758 | 0x000002e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.46 | None |
| RT_ICON | 0x00056a40 | 0x000001e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.60 | None |
| RT_ICON | 0x00056c28 | 0x00000128 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.50 | None |
| RT_ICON | 0x00056d50 | 0x00001628 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.73 | None |
| RT_ICON | 0x00058378 | 0x00000ea8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.66 | None |
| RT_ICON | 0x00059220 | 0x000008a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.60 | None |
| RT_ICON | 0x00059ac8 | 0x000006c8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.95 | None |
| RT_ICON | 0x0005a190 | 0x00000568 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.82 | None |
| RT_ICON | 0x0005a6f8 | 0x00008fbf | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.98 | None |
| RT_ICON | 0x000636b8 | 0x00004228 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.47 | None |
| RT_ICON | 0x000678e0 | 0x000025a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.33 | None |
| RT_ICON | 0x00069e88 | 0x000010a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.22 | None |
| RT_ICON | 0x0006af30 | 0x00000988 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.37 | None |
| RT_ICON | 0x0006b8b8 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.89 | None |
| RT_ICON | 0x0006be08 | 0x00000668 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.25 | None |
| RT_ICON | 0x0006c470 | 0x000002e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.46 | None |
| RT_ICON | 0x0006c758 | 0x000001e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.60 | None |
| RT_ICON | 0x0006c940 | 0x00000128 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.50 | None |
| RT_ICON | 0x0006ca68 | 0x00000ea8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.66 | None |
| RT_ICON | 0x0006d910 | 0x000008a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.60 | None |
| RT_ICON | 0x0006e1b8 | 0x000006c8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.95 | None |
| RT_ICON | 0x0006e880 | 0x00000568 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.82 | None |
| RT_ICON | 0x0006ede8 | 0x000025a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.33 | None |
| RT_ICON | 0x00071390 | 0x000010a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.22 | None |
| RT_ICON | 0x00072438 | 0x00000988 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.37 | None |
| RT_ICON | 0x00072dc0 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.89 | None |
| RT_GROUP_ICON | 0x0006bd20 | 0x000000e6 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.16 | None |
| RT_GROUP_ICON | 0x00073228 | 0x000000ae | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.18 | None |
| RT_VERSION | 0x000732d8 | 0x000003d0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.49 | None |
| RT_MANIFEST | 0x00054c80 | 0x0000050b | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.94 | None |
Imports
| Name | Address |
|---|---|
| CreateFontA | 0x14003e678 |
| GetStockObject | 0x14003e680 |
| DeleteDC | 0x14003e688 |
| SetTextColor | 0x14003e690 |
| SetBkMode | 0x14003e698 |
| CreatePen | 0x14003e6a0 |
| GetTextMetricsW | 0x14003e6a8 |
| GetTextFaceA | 0x14003e6b0 |
| GetObjectW | 0x14003e6b8 |
| SetBkColor | 0x14003e6c0 |
| DeleteObject | 0x14003e6c8 |
| CreateSolidBrush | 0x14003e6d0 |
| SetMapMode | 0x14003e6d8 |
| CreateFontIndirectW | 0x14003e6e0 |
| SelectObject | 0x14003e6e8 |
| CreateCompatibleDC | 0x14003e6f0 |
| ExtTextOutW | 0x14003e6f8 |
| PatBlt | 0x14003e700 |
| Name | Address |
|---|---|
| _itow | 0x14003ee98 |
| strrchr | 0x14003eea0 |
| _purecall | 0x14003eea8 |
| strstr | 0x14003eeb0 |
| wcstok | 0x14003eeb8 |
| calloc | 0x14003eec0 |
| wcstol | 0x14003eec8 |
| _wcsupr | 0x14003eed0 |
| iswalnum | 0x14003eed8 |
| _strlwr | 0x14003eee0 |
| _stricmp | 0x14003eee8 |
| wcspbrk | 0x14003eef0 |
| malloc | 0x14003eef8 |
| _unlock | 0x14003ef00 |
| qsort | 0x14003ef08 |
| strncpy_s | 0x14003ef10 |
| strnlen | 0x14003ef18 |
| memcpy | 0x14003ef20 |
| memset | 0x14003ef28 |
| ceil | 0x14003ef30 |
| _vsnprintf | 0x14003ef38 |
| _endthread | 0x14003ef40 |
| __C_specific_handler | 0x14003ef48 |
| wcsrchr | 0x14003ef50 |
| _lock | 0x14003ef58 |
| ?terminate@@YAXXZ | 0x14003ef60 |
| _commode | 0x14003ef68 |
| __dllonexit | 0x14003ef70 |
| _onexit | 0x14003ef78 |
| _fmode | 0x14003ef80 |
| _acmdln | 0x14003ef88 |
| _initterm | 0x14003ef90 |
| __setusermatherr | 0x14003ef98 |
| _wtol | 0x14003efa0 |
| _wcsnicmp | 0x14003efa8 |
| wcsstr | 0x14003efb0 |
| wcschr | 0x14003efb8 |
| _wcslwr | 0x14003efc0 |
| _wtoi | 0x14003efc8 |
| _ismbblead | 0x14003efd0 |
| _cexit | 0x14003efd8 |
| _exit | 0x14003efe0 |
| exit | 0x14003efe8 |
| __set_app_type | 0x14003eff0 |
| __getmainargs | 0x14003eff8 |
| _amsg_exit | 0x14003f000 |
| _XcptFilter | 0x14003f008 |
| free | 0x14003f010 |
| _callnewh | 0x14003f018 |
| _beginthreadex | 0x14003f020 |
| swscanf | 0x14003f028 |
| _wcsicmp | 0x14003f030 |
| _vsnwprintf | 0x14003f038 |
| memcpy_s | 0x14003f040 |
| Name | Address |
|---|---|
| RtlLookupFunctionEntry | 0x14003f050 |
| RtlVirtualUnwind | 0x14003f058 |
| RtlCaptureContext | 0x14003f060 |
| Name | Address |
|---|---|
| PdhAddCounterW | 0x14003f0c8 |
| PdhGetFormattedCounterValue | 0x14003f0d0 |
| PdhOpenQueryW | 0x14003f0d8 |
| PdhCloseQuery | 0x14003f0e0 |
| PdhCollectQueryData | 0x14003f0e8 |
| Name | Address |
|---|---|
| CoCreateInstance | 0x14003f070 |
| CoUninitialize | 0x14003f078 |
| CoInitialize | 0x14003f080 |
| OleInitialize | 0x14003f088 |
| CLSIDFromString | 0x14003f090 |
| CoRevokeClassObject | 0x14003f098 |
| CoTaskMemFree | 0x14003f0a0 |
| CoRegisterClassObject | 0x14003f0a8 |
| OleUninitialize | 0x14003f0b0 |
| CreateStreamOnHGlobal | 0x14003f0b8 |
| Name | Address |
|---|---|
| SysAllocStringLen | 0x14003ea80 |
| SystemTimeToVariantTime | 0x14003ea88 |
| SysAllocString | 0x14003ea90 |
| SysFreeString | 0x14003ea98 |
| VariantClear | 0x14003eaa0 |
| VariantInit | 0x14003eaa8 |
| VariantTimeToSystemTime | 0x14003eab0 |
| SysStringLen | 0x14003eab8 |
| Name | Address |
|---|---|
| InitCommonControlsEx | 0x14003e658 |
| Name | Address |
|---|---|
| SHChangeNotify | 0x14003eb10 |
| SHGetFolderLocation | 0x14003eb18 |
| SHGetPathFromIDListW | 0x14003eb20 |
| ShellExecuteExW | 0x14003eb28 |
| SHGetMalloc | 0x14003eb30 |
| SHGetSpecialFolderLocation | 0x14003eb38 |
| SetCurrentProcessExplicitAppUserModelID | 0x14003eb40 |
| CommandLineToArgvW | 0x14003eb48 |
| ShellExecuteW | 0x14003eb50 |
| SHGetFolderPathW | 0x14003eb58 |
| Name | Address |
|---|---|
| GdipCreateBitmapFromHBITMAP | 0x14003ee40 |
| GdipCloneImage | 0x14003ee48 |
| GdipDisposeImage | 0x14003ee50 |
| GdipCreateHBITMAPFromBitmap | 0x14003ee58 |
| GdipFree | 0x14003ee60 |
| GdiplusStartup | 0x14003ee68 |
| GdipImageRotateFlip | 0x14003ee70 |
| GdipAlloc | 0x14003ee78 |
| GdiplusShutdown | 0x14003ee80 |
| GdipCreateBitmapFromFile | 0x14003ee88 |
| Name | Address |
|---|---|
| InternetCrackUrlW | 0x14003ee10 |
| Name | Address |
|---|---|
| SetupGetBinaryField | 0x14003eac8 |
| SetupFindFirstLineW | 0x14003ead0 |
| SetupGetStringFieldW | 0x14003ead8 |
| SetupGetLineCountW | 0x14003eae0 |
| SetupGetLineTextW | 0x14003eae8 |
| SetupIterateCabinetA | 0x14003eaf0 |
| SetupFindNextLine | 0x14003eaf8 |
| SetupCloseInfFile | 0x14003eb00 |
| Name | Address |
|---|---|
| WinVerifyTrust | 0x14003ee20 |
| WTHelperProvDataFromStateData | 0x14003ee28 |
| WTHelperGetProvSignerFromChain | 0x14003ee30 |
| Name | Address |
|---|---|
| ObtainUserAgentString | 0x14003f0f8 |
| UrlMkSetSessionOption | 0x14003f100 |
| Name | Address |
|---|---|
| PathAddBackslashW | 0x14003eb68 |
| PathFindFileNameW | 0x14003eb70 |
| PathAddBackslashA | 0x14003eb78 |
| PathFindExtensionW | 0x14003eb80 |
| Name | Address |
|---|---|
| CertVerifyCertificateChainPolicy | 0x14003e668 |
| Name | Address |
|---|---|
| LoadUserProfileW | 0x14003edd0 |
| UnloadUserProfile | 0x14003edd8 |
| ExpandEnvironmentStringsForUserW | 0x14003ede0 |
| Name | Address |
|---|---|
| GetUserNameExW | 0x14003eb90 |
| Name | Address |
|---|---|
| MFGetSystemTime | 0x14003ea70 |
| Name | Address |
|---|---|
| GetFileVersionInfoW | 0x14003edf0 |
| GetFileVersionInfoSizeW | 0x14003edf8 |
| VerQueryValueW | 0x14003ee00 |
Usage
Processing ( 13.14 seconds )
- 11.766 ProcessMemory
- 1.346 CAPE
- 0.019 BehaviorAnalysis
- 0.007 AnalysisInfo
- 0.001 Debug
Signatures ( 0.06 seconds )
- 0.008 ransomware_files
- 0.006 antianalysis_detectfile
- 0.005 antiav_detectreg
- 0.005 ransomware_extensions
- 0.003 ursnif_behavior
- 0.002 antiav_detectfile
- 0.002 infostealer_bitcoin
- 0.002 infostealer_ftp
- 0.002 infostealer_im
- 0.002 poullight_files
- 0.002 territorial_disputes_sigs
- 0.001 antianalysis_detectreg
- 0.001 antivm_vbox_files
- 0.001 antivm_vbox_keys
- 0.001 geodo_banking_trojan
- 0.001 browser_security
- 0.001 disables_backups
- 0.001 disables_browser_warn
- 0.001 disables_power_options
- 0.001 azorult_mutexes
- 0.001 cryptbot_files
- 0.001 echelon_files
- 0.001 infostealer_mail
- 0.001 masquerade_process_name
- 0.001 revil_mutexes
- 0.001 modirat_behavior
- 0.001 lokibot_mutexes
Reporting ( 0.01 seconds )
- 0.007 CAPASummary
- 0.002 JsonDump
Signatures
The PE file contains a PDB path
pdbpath: setup_wm.pdb
SetUnhandledExceptionFilter detected (possible anti-debug)
Possible date expiration check, exits too soon after checking local time
process: setup_wm.exe, PID 464
Yara detections observed in process dumps, payloads or dropped files
Hit: PID 464 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 59 }']'
Anomalous binary characteristics
anomaly: Entrypoint of binary is located outside of any mapped sections
Binary compilation timestomping detected
anomaly: Compilation timestamp is in the future
Screenshots
No screenshots available.Hosts
No hosts contacted.
DNS
No domains contacted.
Summary
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\wmsetup.log
C:\Users\Packager\AppData\Local\Temp\wmsetup.log
C:\Windows\System32\wmploc.DLL
C:\Users\Packager\AppData\Local\Temp\setup_wm.exe
C:\Windows\wmsetup.log
C:\Users\Packager\AppData\Local\Temp\wmsetup.log
C:\Windows\System32\wmploc.DLL
C:\Users\Packager\AppData\Local\Temp\setup_wm.exe
C:\Users\Packager\AppData\Local\Temp\wmsetup.log
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\PendingFileRenameOperations
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MediaPlayer\SetupLogFile
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MediaPlayer\SetupLogLevel
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentBuildNumber
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\PendingFileRenameOperations
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MediaPlayer\SetupLogFile
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MediaPlayer\SetupLogLevel
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentBuildNumber
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\PendingFileRenameOperations
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MediaPlayer\SetupLogFile
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MediaPlayer\SetupLogLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentBuildNumber
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MediaPlayer\SetupLogFile
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MediaPlayer\SetupLogLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentBuildNumber
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
Local\SM0:464:304:WilStaging_02
Sorry! No behavior.
Sorry! No strace.
Sorry! No tracee.
No hosts contacted.
No TCP connections recorded.
No UDP connections recorded.
No domains contacted.
HTTP Requests
No HTTP(s) requests performed.
SMTP traffic
No SMTP traffic performed.
IRC traffic
No IRC requests performed.
No ICMP traffic performed.
CIF Results
No CIF Results
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Suricata HTTP
No Suricata HTTP
Sorry! No Suricata Extracted files.
Sorry! No dropped files.
Sorry! No process dumps.
Sorry! No process dumps.