0xff0xff

 'VA: 403BAC

Const cdata_0 = proc_40E1F8

 'VA: 406E7C

Const cdata_1 = &H5C

 'VA: 4065C8

Public cdata_2 As Variant

 'VA: 401C8C

Const cdata_3 = proc_40CB34

 'VA: 4066A4

Const cdata_4 = &H2E

 'VA: 403E58

Const cdata_5 = proc_40E670

 'VA: 406468

Const cdata_6 = &HA4C46780

 'VA: 403B7C

Const cdata_7 = proc_412EFC

 'VA: 401CD4

Const cdata_8 = proc_40DEA4

 'VA: 401162

Const cdata_9 = rtcStrConvVar2

 'VA: 40112C

Const cdata_A = rtcRightCharBstr

 'VA: 403EAC

Const cdata_B = proc_40BF54

 'VA: 407544

Const cdata_C = "MSXML2.DOMDocument"

 'VA: 4011FE

Const cdata_D = rtcCreateObject2

 'VA: 40756C

Const cdata_E = "loadXML"

 'VA: 407580

Const cdata_F = "channelAlias"

 'VA: 40759C

Const cdata_10 = "documentElement"

 'VA: 4075BC

Const cdata_11 = "getAttribute"

 'VA: 403E7C

Const cdata_12 = proc_40F3DC

 'VA: 4075DC

Const cdata_13 = "hosts"

 'VA: 4075E8

Const cdata_14 = "getElementsByTagName"

 'VA: 407514

Const cdata_15 = "Length"

 'VA: 40761C

Const cdata_16 = "childNodes"

 'VA: 407638

Const cdata_17 = "host"

 'VA: 406E38

Const cdata_18 = &H3A

 'VA: 407648

Const cdata_19 = "port"

 'VA: 401144

Const cdata_1A = rtcR8ValFromBstr

 'VA: 403B94

Const cdata_1B = proc_40E430

 'VA: 407658

Const cdata_1C = "xml"

 'VA: 407664

Const cdata_1D = "version='1.0' encoding='UTF-8'"

 'VA: 4076A4

Const cdata_1E = "createProcessingInstruction"

 'VA: 4076DC

Const cdata_1F = "appendChild"

 'VA: 4076F8

Const cdata_20 = "msagent"

 'VA: 407708

Const cdata_21 = "createElement"

 'VA: 403E88

Const cdata_22 = proc_40F158

 'VA: 407724

Const cdata_23 = "SetAttribute"

 'VA: 40113E

Const cdata_24 = rtcSplit

 'VA: 403F0C

Const cdata_25 = proc_40D190

 'VA: 40114A

Const cdata_26 = rtcIsNumeric

 'VA: 407744

Const cdata_27 = "item"

 'VA: 407750

Const cdata_28 = "xml"

 'VA: 403EA0

Const cdata_29 = proc_40C0D4

 'VA: 401C98

Const cdata_2A = proc_40ADE8

 'VA: 401CE0

Const cdata_2B = proc_410CBC

 'VA: 403B88

Const cdata_2C = proc_40A704

 'VA: 401CC8

Const cdata_2D = proc_40C3E4

 'VA: 401D28

Const cdata_2E = proc_40E9DC

 'VA: 401CBC

Const cdata_2F = proc_410AF8

 'VA: 405FA4

Const cdata_30 = &H41BD5CA1

 'VA: 401132

Const cdata_31 = rtcErrObj

 'VA: 406570

Const cdata_32 = &HA4C466B8

 'VA: 401180

Const cdata_33 = rtcImmediateIf

 'VA: 405F08

Const cdata_34 = &H41BD44A1

 'VA: 401204

Const cdata_35 = rtcDoEvents

 'VA: 40775C

Const cdata_36 = "HNetCfg.FwMgr"

 'VA: 407778

Const cdata_37 = "LocalPolicy"

 'VA: 407790

Const cdata_38 = "CurrentProfile"

 'VA: 4077B0

Const cdata_39 = "FirewallEnabled"

 'VA: 4077D0

Const cdata_3A = "AuthorizedApplications"

 'VA: 407800

Const cdata_3B = "ProcessImageFileName"

 'VA: 403C78

Const cdata_3C = proc_40CA48

 'VA: 40782C

Const cdata_3D = "Enabled"

 'VA: 41BE14

Public cdata_3E As Variant

 'VA: 406654

Const cdata_3F = &H2

 'VA: 406644

Const cdata_40 = &HFCFB3D22

 'VA: 406664

Const cdata_41 = &H33AD4F79

 'VA: 40783C

Const cdata_42 = "Name"

 'VA: 407848

Const cdata_43 = "IPVersion"

 'VA: 407860

Const cdata_44 = &H2A

 'VA: 407864

Const cdata_45 = "RemoteAddresses"

 'VA: 407884

Const cdata_46 = "scope"

 'VA: 407894

Const cdata_47 = "HNetCfg.FwAuthorizedApplication"

 'VA: 4078D4

Const cdata_48 = "Add"

 'VA: 403C00

Const cdata_49 = proc_40B36C

 'VA: 405E1C

Const cdata_4A = &H41BD20A1

 'VA: 404DD0

Const cdata_4B = &H41BAD4A1

 'VA: 405DD8

Const cdata_4C = &H41BD14A1

 'VA: 403BD0

Const cdata_4D = proc_40DFBC

 'VA: 403BDC

Const cdata_4E = proc_40F2A8

 'VA: 405A00

Const cdata_4F = &H41BC78A1

 'VA: 405E68

Const cdata_50 = &H41BD2CA1

 'VA: 405EB4

Const cdata_51 = &H41BD38A1

 'VA: 406448

Const cdata_52 = &HCDCEA7B6

 'VA: 403C3C

Const cdata_53 = proc_40B718

 'VA: 405D34

Const cdata_54 = &H41BCFCA1

 'VA: 401514

Const cdata_55 = &HB8

 'VA: 401500

Const cdata_56 = &HB8

 'VA: 405D78

Const cdata_57 = &H41BD08A1

 'VA: 4073E0

Const cdata_58 = &H20

 'VA: 4011BC

Const cdata_59 = rtcStringBstr

 'VA: 4078E0

Const cdata_5A = "..."

 'VA: 401126

Const cdata_5B = rtcLeftCharBstr

 'VA: 405C58

Const cdata_5C = &H41BCD8A1

 'VA: 405CF0

Const cdata_5D = &H41BCF0A1

 'VA: 40120A

Const cdata_5E = rtcSpaceBstr

 'VA: 401150

Const cdata_5F = VarPtr

 'VA: 405CA0

Const cdata_60 = &H41BCE4A1

 'VA: 403C48

Const cdata_61 = proc_40D46C

 'VA: 40449C

Const cdata_62 = "

 'VA: 401174

Const cdata_63 = rtcUpperCaseBstr

 'VA: 4078EC

Const cdata_64 = "/ALL"

 'VA: 4078FC

Const cdata_65 = &H23

 'VA: 407904

Const cdata_66 = "Handle"

 'VA: 407918

Const cdata_67 = "Title"

 'VA: 403C54

Const cdata_68 = proc_40FAD0

 'VA: 405C10

Const cdata_69 = &H41BCCCA1

 'VA: 405B80

Const cdata_6A = &H41BCB4A1

 'VA: 405BC8

Const cdata_6B = &H41BCC0A1

 'VA: 4050A0

Const cdata_6C = &H41BB34A1

 'VA: 4050E4

Const cdata_6D = &H41BB40A1

 'VA: 407928

Const cdata_6E = "Can not close the window!"

 'VA: 407960

Const cdata_6F = "The window ["

 'VA: 407980

Const cdata_70 = "] is closed!"

 'VA: 4079A0

Const cdata_71 = "] is destroyed!"

 'VA: 4079C4

Const cdata_72 = "] not found or access denied!"

 'VA: 4059BC

Const cdata_73 = &H41BC6CA1

 'VA: 401186

Const cdata_74 = rtcBstrFromAnsi

 'VA: 40117A

Const cdata_75 = rtcTrimBstr

 'VA: 405AA0

Const cdata_76 = &H41BC90A1

 'VA: 405AEC

Const cdata_77 = &H41BC9CA1

 'VA: 407A04

Public cdata_78 As Variant

 'VA: 405B3C

Const cdata_79 = &H41BCA8A1

 'VA: 405A48

Const cdata_7A = &H41BC84A1

 'VA: 403CB4

Const cdata_7B = proc_409F28

 'VA: 405970

Const cdata_7C = &H41BC60A1

 'VA: 403CC0

Const cdata_7D = proc_40B7BC

 'VA: 403C9C

Const cdata_7E = proc_409610

 'VA: 401210

Const cdata_7F = ADVAPI32.DLL.StartServiceCtrlDispatcherW                                                                        

 'VA: 403CCC

Const cdata_80 = proc_40A628

 'VA: 401216

Const cdata_81 = ADVAPI32.DLL.RegisterServiceCtrlHandlerW                                                                        

 'VA: 403CD8

Const cdata_82 = proc_40A01C

 'VA: 40121C

Const cdata_83 = KERNEL32.DLL.SetEvent                                                                                            

 'VA: 401222

Const cdata_84 = KERNEL32.DLL.WaitForSingleObject                                                                                

 'VA: 401228

Const cdata_85 = ADVAPI32.DLL.SetServiceStatus                                                                                    

 'VA: 407AA4

Const cdata_86 = "WinH"

 'VA: 407AB4

Const cdata_87 = "ttp.WinHt"

 'VA: 407ACC

Const cdata_88 = "tpRequest.5.1"

 'VA: 407AEC

Const cdata_89 = "GET"

 'VA: 407AF4

Const cdata_8A = "Open"

 'VA: 407B00

Const cdata_8B = "Send"

 'VA: 407B0C

Const cdata_8C = "Status"

 'VA: 407B1C

Const cdata_8D = "ResponseBody"

 'VA: 4053CC

Const cdata_8E = "8$"

 'VA: 405434

Const cdata_8F = &H41BB94A1

 'VA: 406040

Const cdata_90 = &H41BD74A1

 'VA: 405FEC

Const cdata_91 = &H41BD68A1

 'VA: 403EC4

Const cdata_92 = proc_40EB0C

 'VA: 401C80

Const cdata_93 = proc_40CCF4

 'VA: 407B3C

Const cdata_94 = "\zf3"

 'VA: 407B4C

Const cdata_95 = "2.dll"

 'VA: 407B5C

Const cdata_96 = "\zf"

 'VA: 407B70

Const cdata_97 = "32.dll"

 'VA: 407B84

Const cdata_98 = "\z"

 'VA: 407B90

Const cdata_99 = "f32.dll"

 'VA: 401CF8

Const cdata_9A = proc_4100E8

 'VA: 403C90

Const cdata_9B = proc_41165C

 'VA: 403C18

Const cdata_9C = proc_40C4B8

 'VA: 401CA4

Const cdata_9D = proc_40ACDC

 'VA: 40119E

Const cdata_9E = rtcShell

 'VA: 405F50

Const cdata_9F = &H41BD50A1

 'VA: 403BC4

Const cdata_A0 = proc_412118

 'VA: 401D1C

Const cdata_A1 = proc_409F78

 'VA: 403ED0

Const cdata_A2 = proc_40FC48

 'VA: 407BA4

Const cdata_A3 = "èدíÄg(5ÙñWz"

 'VA: 403EF4

Const cdata_A4 = proc_4131C8

 'VA: 403B70

Const cdata_A5 = proc_414918

 'VA: 402B58

Const cdata_A6 = &H40001

 'VA: 40674C

Const cdata_A7 = &HE82262E1

 'VA: 4044E0

Const cdata_A8 = &H4D5069B6

 'VA: 403BB8

Const cdata_A9 = proc_411CE0

 'VA: 403D14

Const cdata_AA = proc_40B49C

 'VA: 403D20

Const cdata_AB = proc_40D384

 'VA: 407BC4

Const cdata_AC = "RpcSs"

 'VA: 404484

Const cdata_AD = "Automatic"

 'VA: 403D08

Const cdata_AE = proc_411254

 'VA: 407BD4

Const cdata_AF = "Dhcp"

 'VA: 403D38

Const cdata_B0 = proc_411448

 'VA: 407BE4

Const cdata_B1 = "DnsCache"

 'VA: 407BFC

Const cdata_B2 = "LmHsts"

 'VA: 407C10

Const cdata_B3 = "lanmanworkstation"

 'VA: 403D50

Const cdata_B4 = proc_40C324

 'VA: 403D5C

Const cdata_B5 = proc_40C8AC

 'VA: 403CA8

Const cdata_B6 = proc_40A1CC

 'VA: 407C38

Const cdata_B7 = "SeDebugPrivilege"

 'VA: 403CFC

Const cdata_B8 = proc_40EEE0

 'VA: 405928

Const cdata_B9 = &H41BC54A1

 'VA: 40587C

Const cdata_BA = &H41BC3CA1

 'VA: 4058C8

Const cdata_BB = &H41BC48A1

 'VA: 405838

Const cdata_BC = &H41BC30A1

 'VA: 407C5C

Const cdata_BD = &H160001

 'VA: 4057E8

Const cdata_BE = &H41BC24A1

 'VA: 407C78

Const cdata_BF = &H2C

 'VA: 403D80

Const cdata_C0 = proc_40B19C

 'VA: 407C80

Const cdata_C1 = "Win32_BaseService"

 'VA: 407CA4

Const cdata_C2 = "Get"

 'VA: 407CB0

Const cdata_C3 = "LocalSystem"

 'VA: 40430C

Public cdata_C4 As Variant

 'VA: 407CC8

Const cdata_C5 = "Create"

 'VA: 4056B8

Const cdata_C6 = &H41BBF4A1

 'VA: 40566C

Const cdata_C7 = &H41BBE8A1

 'VA: 405624

Const cdata_C8 = &H41BBDCA1

 'VA: 405704

Const cdata_C9 = &H41BC00A1

 'VA: 405798

Const cdata_CA = &H41BC18A1

 'VA: 407CF4

Const cdata_CB = "Select * from Win32_Service Where (Name = '"

 'VA: 407D50

Const cdata_CC = "')"

 'VA: 407D58

Const cdata_CD = "ExecQuery"

 'VA: 403D8C

Const cdata_CE = proc_40ED74

 'VA: 403D44

Const cdata_CF = proc_40E0D4

 'VA: 403D2C

Const cdata_D0 = proc_40B844

 'VA: 407D6C

Const cdata_D1 = "Change"

 'VA: 407DF4

Const cdata_D2 = "Service"

 'VA: 407D80

Const cdata_D3 = "SYSTEM\CurrentControlSet\Control\SafeBoot\"

 'VA: 407DDC

Const cdata_D4 = "Minimal\"

 'VA: 403D74

Const cdata_D5 = proc_40C028

 'VA: 407E08

Const cdata_D6 = "\Network\"

 'VA: 40574C

Const cdata_D7 = &H41BC0CA1

 'VA: 405530

Const cdata_D8 = &H41BBB8A1

 'VA: 403D98

Const cdata_D9 = proc_40F010

 'VA: 40548C

Const cdata_DA = &H41BBA0A1

 'VA: 4054EC

Const cdata_DB = &H41BBACA1

 'VA: 4055C4

Const cdata_DC = &H41BBD0A1

 'VA: 407E20

Const cdata_DD = "winmgmts:{impersonationLevel=impersonate}!\\"

 'VA: 407E80

Const cdata_DE = "\root\cimv2"

 'VA: 40122E

Const cdata_DF = rtcGetObject

 'VA: 407EC8

Const cdata_E0 = "Associators of {Win32_Service.Name='"

 'VA: 407F18

Const cdata_E1 = "'} Where "

 'VA: 407F30

Const cdata_E2 = "AssocClass=Win32_DependentService "

 'VA: 407F7C

Const cdata_E3 = "Role=Dependent"

 'VA: 40557C

Const cdata_E4 = &H41BBC4A1

 'VA: 401234

Const cdata_E5 = rtcStringVar

 'VA: 406084

Const cdata_E6 = &H41BD80A1

 'VA: 4060B8

Const cdata_E7 = &H41BD8CA1

 'VA: 404D88

Const cdata_E8 = &H41BAC8A1

 'VA: 403DE0

Const cdata_E9 = proc_40A170

 'VA: 403E10

Const cdata_EA = proc_40A2E8

 'VA: 404440

Const cdata_EB = "Failed!"

 'VA: 407FA0

Const cdata_EC = "mdlCo"

 'VA: 403E28

Const cdata_ED = proc_410740

 'VA: 403E1C

Const cdata_EE = proc_411088

 'VA: 40642C

Const cdata_EF = &H41BE10A1

 'VA: 403E40

Const cdata_F0 = proc_40A870

 'VA: 4063D8

Const cdata_F1 = &H41BE04A1

 'VA: 407FB0

Const cdata_F2 = "Wait event(s) failed."

 'VA: 407FE0

Const cdata_F3 = &H3F

 'VA: 407FE8

Const cdata_F4 = &H21

 'VA: 407FF0

Const cdata_F5 = "Generic error!"

 'VA: 401156

Const cdata_F6 = rtcIsArray

 'VA: 406384

Const cdata_F7 = &H41BDF8A1

 'VA: 406338

Const cdata_F8 = &H41BDECA1

 'VA: 408014

Const cdata_F9 = "Default User"

 'VA: 404454

Const cdata_FA = "Windows "

 'VA: 408034

Const cdata_FB = "NT 3.x"

 'VA: 408048

Const cdata_FC = "NT 4.x"

 'VA: 40534C

Const cdata_FD = ">G"

 'VA: 407E9C

Const cdata_FE = "2000 Professional"

 'VA: 408060

Const cdata_FF = "2000 Datacenter Server"

 'VA: 408094

Const cdata_100 = "2000 Advanced Server"

 'VA: 4080C4

Const cdata_101 = "2000 Server"

 'VA: 406214

Const cdata_102 = &H41BDBCA1

 'VA: 4080E0

Const cdata_103 = "XP Media Center"

 'VA: 40446C

Const cdata_104 = " Edition"

 'VA: 408104

Const cdata_105 = "XP Starter"

 'VA: 408120

Const cdata_106 = "XP Tablet PC"

 'VA: 408140

Const cdata_107 = "XP Home"

 'VA: 408154

Const cdata_108 = "XP Professional"

 'VA: 406100

Const cdata_109 = &H41BD98A1

 'VA: 4061B8

Const cdata_10A = &H41BDB0A1

 'VA: 40616C

Const cdata_10B = &H41BDA4A1

 'VA: 408178

Const cdata_10C = "Server 2003 R2, "

 'VA: 4081A0

Const cdata_10D = "Storage Server 2003"

 'VA: 4081CC

Const cdata_10E = "XP Professional x64"

 'VA: 4081F8

Const cdata_10F = "Server 2003, "

 'VA: 40822C

Const cdata_110 = "Datacenter"

 'VA: 408248

Const cdata_111 = " for Itanium-based Systems"

 'VA: 408284

Const cdata_112 = "Enterprise"

 'VA: 4082A0

Const cdata_113 = "Datacenter x64"

 'VA: 4082C4

Const cdata_114 = "Enterprise x64"

 'VA: 4082E8

Const cdata_115 = "Standard x64"

 'VA: 408308

Const cdata_116 = "Compute Cluster"

 'VA: 40832C

Const cdata_117 = "Web"

 'VA: 408338

Const cdata_118 = "Standard"

 'VA: 408350

Const cdata_119 = "Vista "

 'VA: 408364

Const cdata_11A = "Server 2008 "

 'VA: 40625C

Const cdata_11B = &H41BDC8A1

 'VA: 408384

Const cdata_11C = "Ultimate"

 'VA: 40839C

Const cdata_11D = "Home "

 'VA: 4083AC

Const cdata_11E = "Premium"

 'VA: 4083C0

Const cdata_11F = "Home Basic"

 'VA: 407CDC

Const cdata_120 = "Business"

 'VA: 408218

Const cdata_121 = "Starter"

 'VA: 4083EC

Const cdata_122 = "Cluster "

 'VA: 408404

Const cdata_123 = "Server"

 'VA: 408418

Const cdata_124 = "Datacenter Edition (core installation)"

 'VA: 40846C

Const cdata_125 = "Enterprise Edition (core installation)"

 'VA: 4084C0

Const cdata_126 = "Enterprise Edition for Itanium-based Systems"

 'VA: 408520

Const cdata_127 = "Small "

 'VA: 408534

Const cdata_128 = "Business Server"

 'VA: 408558

Const cdata_129 = "Business Server Premium"

 'VA: 40858C

Const cdata_12A = "Standard "

 'VA: 4085C0

Const cdata_12B = "Edition (core installation)"

 'VA: 4085FC

Const cdata_12C = "Web Server"

 'VA: 408618

Const cdata_12D = ", 64-bit"

 'VA: 408630

Const cdata_12E = ", 32-bit"

 'VA: 408648

Const cdata_12F = "98 or ealier"

 'VA: 4011B0

Const cdata_130 = rtcMidCharBstr

 'VA: 408668

Const cdata_131 = " ("

 'VA: 408674

Const cdata_132 = &H29

 'VA: 40123A

Const cdata_133 = rtcStrFromVar

 'VA: 401240

Const cdata_134 = rtcLeftTrimBstr

 'VA: 40867C

Const cdata_135 = ". "

 'VA: 408688

Const cdata_136 = "Build: "

 'VA: 4062F4

Const cdata_137 = &H41BDE0A1

 'VA: 4062A8

Const cdata_138 = &H41BDD4A1

 'VA: 403EB8

Const cdata_139 = proc_40E89C

 'VA: 403E94

Const cdata_13A = proc_409684

 'VA: 40869C

Const cdata_13B = "SOFTWARE\Microsof"

 'VA: 4086C4

Const cdata_13C = "t\Windows\Cu"

 'VA: 4086E4

Const cdata_13D = "rrentVersion\R"

 'VA: 408708

Const cdata_13E = "un"

 'VA: 403D68

Const cdata_13F = proc_40B2CC

 'VA: 406A30

Const cdata_140 = &H41BE80A1

 'VA: 4085A4

Const cdata_141 = "id"

 'VA: 403EDC

Const cdata_142 = proc_40A220

 'VA: 4085B0

Const cdata_143 = "name"

 'VA: 4083DC

Const cdata_144 = "desc"

 'VA: 408714

Const cdata_145 = "options"

 'VA: 401246

Const cdata_146 = rtcLowerCaseBstr

 'VA: 408728

Const cdata_147 = "required"

 'VA: 408740

Const cdata_148 = "suggested"

 'VA: 408758

Const cdata_149 = "iPath"

 'VA: 408768

Const cdata_14A = "startup"

 'VA: 40877C

Const cdata_14B = "yes"

 'VA: 408788

Const cdata_14C = "zf32Req"

 'VA: 4053B0

Const cdata_14D = &H18001C

 'VA: 40879C

Const cdata_14E = "aliasPrefix"

 'VA: 4087B8

Const cdata_14F = "iDate"

 'VA: 4087C8

Const cdata_150 = "bDate"

 'VA: 4087D8

Const cdata_151 = "bPath"

 'VA: 403EE8

Const cdata_152 = proc_4105AC

 'VA: 4087E8

Const cdata_153 = "Built date: "

 'VA: 4043E8

Const cdata_154 = "yyyy-mm-dd hh:mm:ss"

 'VA: 40116E

Const cdata_155 = rtcBstrFromFormatVar

 'VA: 408808

Const cdata_156 = "Installed date: "

 'VA: 408830

Const cdata_157 = "Backup path: "

 'VA: 408850

Const cdata_158 = &H9

 'VA: 408858

Const cdata_159 = &H61

 'VA: 408860

Const cdata_15A = &H7A

 'VA: 408868

Const cdata_15B = &H41

 'VA: 408870

Const cdata_15C = &H5A

 'VA: 408878

Const cdata_15D = &H30

 'VA: 408880

Const cdata_15E = &H39

 'VA: 407B68

Const cdata_15F = &H2D

 'VA: 407618

Const cdata_160 = &H5F