Strings - PwDump7.exe

Strings v2.51
Copyright (C) 1999-2013 Mark Russinovich
Sysinternals - www.sysinternals.com

!This program cannot be run in DOS mode.
 oF
Richd
.text
`.rdata
@.data
j@h4
j@hX
p%A
Ph|
M(Q
U(R
M$3
E P
E"%
E"%
t$h
p%A
p%A
=p%A
=p%A
TM(
BHP
QLR
JH;
QjP
=nk
,uU
HHQ
BLP
=nk
BHP
QLR
B$P
;Q$
QLR
`QA
`QA
=T(A
T(A
}!jIj
x%A
x%A
x%A
A,w
B,r
QE3
BEP
x%A
H=3
BEP
H=Q
HA3
HA3
HAQ
HAQ
H=3
BEP
BAP
Q R
Q(R
A$P
x%A
x%A
QA3
QA3
Q-R
HE3
Q9R
H Q
HEQ
I-3
B-3
rkw
R-3
H-3
rkw
Q-3
B-3
Q-3
@-3
rnw
H1Q
BEP
@-3
Q-3
rqw
I-3
B-3
rqw
H-3
Q-3
H-3
R-3
rsw
x%A
x%A
R ]
x%A
v-3
q$+
Q R
RPVQ
w}r
q-3
Q R
RPVQ
Q(R
A$P
RPVQ
Q(R
A$P
RPVQ
Q(R
A$P
RPVQ
x%A
x%A
x%A
0jIj
x%A
0Vh
`QA
B$P
`QA
`QA
`QA
zhP
j@h
j@h
tujZ
VPRQ
RPVQ
r/w
r'w
j@h
RPVQ
t'j@h
DP,
A4%
H f
: u
wDr
j@h
4VW
w;r
ESRA
w?r
w5r
ESRA
w9r
tZj
:ESRAu)
uYj
:ESRAu&
thH
tWj
8ESRAu&
ESRA
tZj
:ESRAu)
tWj
8ESRAu&
:INDXt
j@h
j@h@
j@h|
j@h
:FILEt
j@h
j@h
j@h4
t!h
j@h
9FILEt
j@h
t'j@hT
jZj
t%j
`QA
=\QA
`*A
hX(A
\QA
X(A
a*A
X(A
^*A
a*A
`*A
X(A
u<hw
t%j
RhL
PhX
Rh`
BJ9
~"h
Ph,
Rh<
Qj
Ph(
Ph0
Qh<
QhL
Qhx
9D$
;5l
_^[
SV3
u);
@BB;
WRj
PSj
VVj
H_^[]
tG3
GIu
GJu
t$V
YY^
GIt#
[^_
[^_
[^_
[^_
tzVS
GIt%
t/Ku
[^_
GKu
[^_
uRFGHt
H_^
 SV
;T$
;D$
;T$
;D$
+D$
+D$
_9=l
;5P
^h
YYh(
;t$
WVS
[^_
u7f
~&WP
SVW3
95@
F;5@
_^[
Yu!j
;5l
wDVSU
PSW
PSW
VSj
_^][
@@f
u;f
u.f
u!f
GGBBf
BBFFf
Wt/
BBf
AAf
BBf
AAf
^#E
Su<
f=Z
f=A
 AABBf
t7f;
FPF
GPG
_^]
Yu$
<xt
<Xt
<xt
<Xu
7;M
u,9E
_^[
t4V
QSVW
t";
F;]
Yuy
Yt.
_^[
SVW
9D$
j?I_
j?_
IZ;
ulSj
_^[
;#M
;#M
uY;]
D#M
pD#U
j #M
j?^;
 }+
_^[
VW3
t*j
SVW
j?i
NCu
_^[
SVW
j?Y
j?_
j?^
j?^
j?^
X_^[
Wtd
WPS
_WPS
^[]
SVW
 t;
HHt
*u#
It.
ht
?6u
HHtpHHtl
Pt;
Zt2
Yt3
HtQ
 Yt
 t!
RPWV
90u
@t&
Vj
Vj0
Y~2
Vj
_^[
KVW
_^[
Ytw
ucj
u S
X_[^
Vt"
t)V
t%P
t_j
X9E
_^[
DSUVWh
|$B
D$D
Yt8
_^][
w*;
u+Vj
_^[
VWj
^95@
F;5@
4$A
P#A
=T#A
X#A
f=A
rRf=Z
YYP
>t^
*t2
FtT
Lu7
6u,
<St
<Ct
g~8
jd^
+u"
Xt*
jo^
YYj0[
?]u
<]t_G<-uA
]t6G:
BNu
YY9u
+u"
xuO
8}S
xt?
pt:
8}l
t7S
>%uM
nuD
_^[
SUVW
tiW
Yt<
_^][
QQSV
<at
<rt
rt`
+tE
@u}
btHHt.
_^[
SUV3
W~]
_^][
 !A
$!A
4I+
5,!A
,!A
,!A
,!A
,!A
,!A
,!A
,!A
5,!A
5,!A
(!A
VWu
<=t
t9UW
?=t"U
QQS3
VWu
PSSW
PVW
8"uD
"t)
8"uF@
8\u
8"u,
u%3
 t?
_^[
VW3
@@f9
@@f9
SS@SSPVSS
D$4
t2U
t#SSUP
t$$VSS
uL;
t<8
UWV
_^][YY
SVWUj
]_^[
SVW
D$
t.;t$$t(
_^[
0!A
0!A
VC20XC00U
SVWU
tEVU
t3x<
]_^[
u!h
@!A
@!A
<v)
D!A
D!A
VWss
tVP
_^[
w9j
Ph
SVW
Yt3
WsR
WsU
B=P#A
QSUVW3
<f9-.
P#A
P#A
f9-
T#A
X#A
-T#A
-X#A
PUj?
9l$
PUj?
Sh@
9l$
>-u
F_V
P#A
<+t
>:uNFV
P#A
P#A
>:u#FV
P#A
P#A
P#A
T#A
_^][Y
SVW3
9=T#A
Qf9=
QPS
WQPWS
,f9=,
Pu(
WWWj
WWSj
PSS
WWWj
WWj
_^[
4$A
_;U
8$A
4$A
E,i
E(k
X#A
E,i
^[]
SVW
uFVVj
[Sh
"VVSh
9u u
E VVVV
t`WS
t7;
"9u
WSj
_^[
+D$
t4f
^[]
~*9E
|/3
PVj
VtA
SVW
uFWWj
[Sh
"WWSh
9} u
E WW
tfS
tMWWS
t@9}
_^[
WWu
VSh
SVW
^Vh
PVh
WSV
_^[
t-Ht!Ht
5t.;
t*;
tnj
_^[
SVW
Y;5
x$A
90tr
0B=h%A
j@3
j@3
p$A
|$A
UAA
_^[
Wj@Y3
t7SW

_[j
VPj
VPV
VPh
@AA;
VWuBhD
tPh(
_^[
SUVW
7G3
_^][
t&:a
Wte
95T
t>S
t/P
<8=u
WSP
_^[
SVW
^Vh
PVh
WWWW
VWP
WWV
_^[
W;5
I9M
);}
_^[
~oh
@}>j
QSUV
WWWWj
PWj
t>U
t/WWUPj
6Wj
_^][Y
9t$
0SVW
_u@W
PWPSS
PWPSS
9] u
E ;
@@8
@@8
SSV
_9]
tySS
t-VW
_^[
+D$
QQSVW3
tUj=
t@9u
uT9}
9=T
_^[
89=T
8+u
Y|C
Yt<
@@P
Yt.
Y+E
8<=t
^][_
YY]
YY^
^_[3
^_[
^_[
^_[
gVWj
SSSj
t8W
t*j
SWPj
Y_^[
EEE
 (8PX
700WP
`h````
ppxxxx
(null)
(null)
runtime error
TLOSS error
SING error
DOMAIN error
R6028
- unable to initialize heap
R6027
- not enough space for lowio initialization
R6026
- not enough space for stdio initialization
R6025
- pure virtual function call
R6024
- not enough space for _onexit/atexit table
R6019
- unable to open console device
R6018
- unexpected heap error
R6017
- unexpected multithread lock error
R6016
- not enough space for thread data
abnormal program termination
R6009
- not enough space for environment
R6008
- not enough space for arguments
R6002
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program:
...
<program name unknown>
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
GetLastActivePopup
GetActiveWindow
MessageBoxA
user32.dll
ReadFile
SetFilePointer
GetLastError
DosDateTimeToFileTime
SetLastError
FlushFileBuffers
WriteFile
GetFileAttributesW
CreateFileA
CloseHandle
GetWindowsDirectoryA
KERNEL32.dll
MessageBoxA
IsCharUpperW
IsCharAlphaW
USER32.dll
LIBEAY32.dll
HeapAlloc
MultiByteToWideChar
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
Error
FATAL: Error reading FAT
Error
FATAL: Error reading FAT
Error while setting pointer on device: %i
Error while opening device: %i
invalid fseek handle
TODO
Error: cluster_n en MFT_VCN fuera de rango
BAD_MFT
FATAL: Unable To Jump to MFT Record. SetFilePointer Error
FILE*
FATAL1: Error reading MFT Record
error
Unable to read 4096 bytes. weird..
Weird Error
ReadFile Failed...
Error: cluster_n en MFT_VCN fuera de rango
BAD_MFT
Error: %i
FATAL: Unable To Jump to MFT Record. SetFilePointer Error
FATAL1: Error reading MFT Record
FATAL2: Error reading MFT Record
Error
FATAL: FILESYSTEM DAMAGED. INVALID UPDATE_SEQUENCE
Error
FATAL: ATTR on ATTR_LST no on MFTref
FATAL: SETFILEPOINTER ERROR. UNABLE TO READ CLUSTER
FATAL3: Error reading cluster.
FATAL4: Error reading Full cluster Data.
FATAL: SETFILEPOINTER ERROR. UNABLE TO READ CLUSTER
ERROR ESCRIBIENDO EL CLUSTER
FATAL4: Error reading Full cluster Data.
Error
FATAL: Error reading SubNode INDEX
Error
FATAL: FILESYSTEM DAMAGED. INVALID UPDATE_SEQUENCE
ERROR
FATAL: DIR HAS NO INDEX ROOT
ERROR
FATAL: LARGE INDEX ROOT HAS NO INDEX ALLOCATION
Error
FATAL: Error reading directory magic
Error
FATAL: Directory has no name
Error
FATAL: Error reading directory data
FATAL: VOLUME_INFORMATION IN $VOLUME NOT FOUND
FATAL: DIRTY FLAG ENABLED. FILESYSTEM CORRUPTED. RUN CHKDSK /F
ERROR
FATAL: DIRTY FLAG ENABLED. FILESYSTEM CORRUPTED. RUN CHKDSK /F
Error
FATAL: Error reading MFT magic from MFT_RECORD_0
Error - UNSUPPORTED
FATAL: MFT RECORD 0 DATA ATTR IS RESIDENT. SHOULDN'T BE. SHIT HAPPENS.
Error reading FAT32 FS
UNABLE TO OPEN DEVICE?
\\.\%C:
Skew1
GBG
Data
Error reading system registry file %S
Error reading hive root key
%s\Select
Default
%s\ControlSet%03d\Control\Lsa\
%s%s
Error accessing key %s
Wrong/corrupted hive??
Pwdump v7.1 - raw password extractor
Author: Andres Tarasco Acuna
url: http://www.514.es
usage:
 pwdump7.exe                              (Dump system passwords)
 pwdump7.exe -s <samfile> <systemfile>    (Dump passwords from files)
 pwdump7.exe -d <filename> [destionation] (Copy filename to destionation)
 pwdump7.exe -h                           (Show this help)
!@#$%^&*()qwertyUIOPAzxcvbnmQQQQQQQQQQQQ)(*@&%
0123456789012345678901234567890123456789
NTPASSWORD
LMPASSWORD
savedump.dat
%s\SYSTEM32\CONFIG\SYSTEM
%s\SYSTEM32\CONFIG\SAM
saving %S as %s
 Unable to dump file %S
File %s saved
Error opening sam hive or not valid file("%S")
Error reading hive root key
%s\SAM\Domains\Account
%s\SAM\Domains\Account\Users
%s key!
No F!
No Users key!
Names
Asd -_- _RegEnumKey fail!
No V value!
%s:%d:
%.2X
%.2X
:::
%s:%d:
NO PASSWORD*********************:
%.2X
:::
%s:%d:
NO PASSWORD*********************:NO PASSWORD*********************:::
         (((((                  H
PST
PDT
\#A