WinXPTalk.com

pscyime · Guest

Hi

After reading this whole post i have to agree with Mike, disconnec
this machine from any network, low level the drive or used debug(scrip
on ms site for clearig partition table) from a known clean bootdisk t
level all the partitions then leave machine powered off for 20 mins is
so there is no memory resident nasty

then with known clean media boot from the the OS cd and creat
partitons and install, if you a mega paranoid enable any writ
protection to the cmos that your motherboard has and also any bio
virus protection which oonly really prevents boot sector virus' but he
give it a go

once this has been done there is no way unless from an outside sourc
that this can be reinfected, unless and i dont know if this is possibl
but could the code reside in the cmos if so flash the bios of you
motherboard with the latest version, or flash it agin if you have th
latest version THEN enable write protection for the cmos

another thing "It keeps re-installing from the partition" what on eart
does this mean, is this a system with a backup partition on to recove
from if so that may be infected but the above process will resolve tha
anyway

Hope you fix it , logic dictates the above and previous advice fro
Mike if followed acuratley will remove the(hey make that ANY) virus

HTH

--
pscyimePosted from http://www.pcreview.co.uk/ newsgroup acces

SRGriffin · Guest

Great information! Thanks! This is exactly what I've been seeing...all legacy
drivers, hotkeys, etc.

6+ hours on the phone with symantec and microsoft and still haven't been
able to reach anyone yet that knows more than I do:)

Mike,

Can't boot of the XP disk since CMOS changes don't take effect and disables
cdrom boot (as Merina mentions). Might be able to boot off a floppy...but
can't get download the files as it "filters" all downloads. And, I don't
have a clean machine that I can execute files from (kino's computers don't
allow it....maybe I'll check the library)....and finally, even if I can,
since nothing detects this...can't be 100% that it's clean anyway...

Actually appears to be an embeded NT or XP as a PXE (which would explain why
the CMOS doesn't seem to change...lots of .rom, .ram and .bin files that I
believe it uses to present a false CMOS).

This can be verified by changing "secure boot" to 0 in registry and hitting
F8...select anything...then hit F8 again immediately after it starts to boot.
It loads a few files then gives you ANOTHER "boot option" screen.

Install Linux (Linspire) and can see more of it....even changes fills and
permissions there too...so maybe it's a linux PXE??

Anyway from windows to trash/erase PXE?

Connie · Guest

Hi!

I seem to have the same infection on my computer. Has anyone figured
this out yet? Have you all managed to clean your machines without it
coming back? I'd love to have more information.

Thanks
CR

johnny_socket · Joined: 31 Aug 2005 Posts: 3 Location: san jose

Bless you Merna and PCGriffin...are you guys as tired as I am with the abject assumption of stupidity that we have been trying to penetrate. So far it seems the NTAuthoritys have not "really" been reading the excrutiating details. 6hours is nothing, I had $545 cell bill for MS customer serv. and escalated to the point they have called me twice to "confirm I am an idiot" and listen and refute and LISTEN AND REFUTE. It is most challenging as I may never have seen bona fide XP install but it definately uses version degradation.

IT IS IN CMOS AND IT IS SPOOF WISE like a mo fo and will do many different things to

I have been to the authorities six times and if that isn't in itself stupid enough to demonstrate that I am messed up I am sitting among the remains of a once sharp recording studio and not less than 7 pc's and 12 plus hard drives. They obfuscate file ext. and encode and multicast from a marshalling proxy ...using at times 9, 18, 36 bit ...the exploitr has been acting like I am a test ground since in the beginning 18 months ago it left motorola processed marked file headrs. Apple sign, that went away a year ago at a time when the code page designation changed from simple 0409 to this with a suffix of a few letters. 0409_1C0 or similar. It early on requires a "spinlock" for timing synchronization and I have found their code for taking latency in ticks for injecting the code ... linux is the hackers OS and if you try to installl it they will take you out even faster.

It is sso nice to have company and now maybe they will look at the logs anbd traces I have . Samples

Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 5/10/2005
Time: 8:53:48 AM
User: N/A
Computer: CALIMARI
Description:
The System Restore filter encountered the unexpected error '0xC000007F' while processing the file 'desktop.ini' on the volume 'BlockVolume2'. It has stopped monitoring the volume.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 06 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......?BR>0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

there is 10 gb on my system drive fu__ers...

Event Type: Information
Event Source: SRService
Event Category: None
Event ID: 107
Date: 5/10/2005
Time: 8:53:58 AM
User: N/A
Computer: CALIMARI
Description:
The System Restore service has been suspended because there is not enough disk space available on the drive \\?\Volume{4aad691a-6c0e-4c74-bb00-cfa8d5b3b9e1}\. System Restore will automatically resume service once at least 200 MB of free disk space is available on the system drive.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Information
Event Source: SRService
Event Category: None
Event ID: 108
Date: 5/12/2005
Time: 5:50:52 AM
User: N/A
Computer: CALIMARI
Description:
The System Restore service has resumed monitoring due to space freed on the system drive.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 5/8/2005
Time: 9:24:37 PM
User: N/A
Computer: CALIMARI
Description:
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 800706BF from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error

did it, answer..I AM THE PROBLEM

The odd stuff in a browser often references a web or site s:

and guys from MS refer to srx040311607987
and all my srx numbers for the last 2 years if you want more background. i HAVE 10 SRX NUMBERS IF YOU WANT THEM.

Get this...I sent a seasoned drive to Symantec in Oregon and they did not pick up on this CODE SPOOF AND PARALLEL HIDDEN PARTITION EXPLOIT so at least save your effort. This is going to take the same university types that KNOW it to unravel. Anyone else getting LARGE COMPUTER hpUx, SOLARIS AND vAX references?

Anyway I have to create a coherant litany which is so hard to do in this ...no one yet in authority has bothered to do more than act like we have a user problem. I went ion the lobby of symantec that is how I got them to look at a drive...freaked them out. Try it sometime. Software companies...well, the FBI is nearby and maybe now they will listen...I have all kinds of traces into china on this:L

*******Initializing Message Log:tsoc.dll 08/30/05 03:37:22
*******Version:Major=5, Minor=1, Build=2600, PlatForm=2, CSDVer=Service Pack 2, Free

hydraoc.cpp(188)Entering OC_PREINITIALIZE
hydraoc.cpp(189)Component=terminalserver, SubComponent=???????
hydraoc.cpp(297)OC_PREINITIALIZE Done. Returning 1

hydraoc.cpp(188)Entering OC_INIT_COMPONENT
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
state.cpp(1006)Setup Parameters ****************************
state.cpp(1007)We are running on Wks
state.cpp(1008)Is this adv server No
state.cpp(1009)Is this Personal (Home Edition) No
state.cpp(1010)Is this SBS server No
state.cpp(1011)IsStandAloneSetup = Yes
state.cpp(1012)IsFreshInstall = No
state.cpp(1013)IsTSFreshInstall = No
state.cpp(1014)IsUnattendSetup = No
state.cpp(1015)IsUpgradeFromTS40 = No
state.cpp(1016)IsUpgradeFromNT50 = No
state.cpp(1017)IsUpgradeFromNT51 = No
state.cpp(1018)IsUnattended = No
state.cpp(1020)Original State ******************************
state.cpp(1021)WasTSInstalled = Yes
state.cpp(1022)WasTSEnabled = Yes
state.cpp(1023)OriginalPermMode = WIN2K
state.cpp(1040)Original TS Mode = Personal TS
state.cpp(1050)Current State ******************************
state.cpp(1065)New TS Mode = Personal TS
state.cpp(1075)New Permissions Mode = PERM_WIN2K
state.cpp(1084)New Connections Allowed = False
hydraoc.cpp(297)OC_INIT_COMPONENT Done. Returning 0

hydraoc.cpp(188)Entering OC_EXTRA_ROUTINES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_EXTRA_ROUTINES Done. Returning 0

hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(196)OC_QUERY_STATE Done. Returning 0

hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
hydraoc.cpp(704)Query State Asked For terminalserver, Original. Returning SubcompOff
hydraoc.cpp(297)OC_QUERY_STATE Done. Returning 2

hydraoc.cpp(188)Entering OC_CALC_DISK_SPACE
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(1029)Query Disk Space return: 1
hydraoc.cpp(196)OC_CALC_DISK_SPACE Done. Returning 0

hydraoc.cpp(188)Entering OC_CALC_DISK_SPACE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
subcomp.cpp(153)In OCMSubComp::OnCalcDiskSpace for TerminalServices
hydraoc.cpp(297)OC_CALC_DISK_SPACE Done. Returning 0

hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0

hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0

hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 4

hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0

hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0

hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0

hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0

hydraoc.cpp(188)Entering OC_WIZARD_CREATED
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_WIZARD_CREATED Done. Returning 0

hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(196)OC_QUERY_STATE Done. Returning 0

hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
hydraoc.cpp(704)Query State Asked For terminalserver, Current. Returning SubcompUseOcManagerDefault
hydraoc.cpp(297)OC_QUERY_STATE Done. Returning 0

pages.cpp(337)Populating WinStation list.
pages.cpp(355)Skipping Console winstation.
pages.cpp(359)Checking RDP-Tcp for custom security.
pages.cpp(401)RDP-Tcp does not have custom security: 2
pages.cpp(405)WinStation list populated.

hydraoc.cpp(188)Entering OC_QUEUE_FILE_OPS
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
subcomp.cpp(205)In OCMSubComp::OnQueueFiles for TerminalServices
hydraoc.cpp(297)OC_QUEUE_FILE_OPS Done. Returning 0

hydraoc.cpp(188)Entering OC_QUEUE_FILE_OPS
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(1044)Original=0, Current=0
hydraoc.cpp(196)OC_QUEUE_FILE_OPS Done. Returning 0

hydraoc.cpp(188)Entering OC_QUEUE_FILE_OPS
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
subcomp.cpp(205)In OCMSubComp::OnQueueFiles for TerminalServer
hydraoc.cpp(297)OC_QUEUE_FILE_OPS Done. Returning 0

hydraoc.cpp(188)Entering OC_QUERY_STEP_COUNT
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_QUERY_STEP_COUNT Done. Returning 26

hydraoc.cpp(188)Entering OC_QUERY_STEP_COUNT
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(196)OC_QUERY_STEP_COUNT Done. Returning 0

hydraoc.cpp(188)Entering OC_QUERY_STEP_COUNT
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
hydraoc.cpp(297)OC_QUERY_STEP_COUNT Done. Returning 26

hydraoc.cpp(188)Entering OC_ABOUT_TO_COMMIT_QUEUE
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_ABOUT_TO_COMMIT_QUEUE Done. Returning 0

hydraoc.cpp(188)Entering OC_ABOUT_TO_COMMIT_QUEUE
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(196)OC_ABOUT_TO_COMMIT_QUEUE Done. Returning 0

hydraoc.cpp(188)Entering OC_ABOUT_TO_COMMIT_QUEUE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
hydraoc.cpp(297)OC_ABOUT_TO_COMMIT_QUEUE Done. Returning 0

hydraoc.cpp(188)Entering OC_COMPLETE_INSTALLATION
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
subcomp.cpp(247)In OCMSubComp::OnCompleteInstall for TerminalServices
subcore.cpp(1265)Writing dwDenyConnect = 1
hydraoc.cpp(297)OC_COMPLETE_INSTALLATION Done. Returning 0

hydraoc.cpp(188)Entering OC_COMPLETE_INSTALLATION
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(1079)Orinal=0, Current=0
hydraoc.cpp(196)OC_COMPLETE_INSTALLATION Done. Returning 0

hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(196)OC_QUERY_STATE Done. Returning 0

hydraoc.cpp(188)Entering OC_COMPLETE_INSTALLATION
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
subcomp.cpp(247)In OCMSubComp::OnCompleteInstall for TerminalServer
subtoggle.cpp(198)Entering AfterCompleteInstall
state.cpp(1050)Current State ******************************
state.cpp(1065)New TS Mode = Personal TS
state.cpp(1075)New Permissions Mode = PERM_WIN2K
state.cpp(1084)New Connections Allowed = False
hydraoc.cpp(297)OC_COMPLETE_INSTALLATION Done. Returning 0

hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
hydraoc.cpp(704)Query State Asked For terminalserver, Final. Returning SubcompOff
hydraoc.cpp(297)OC_QUERY_STATE Done. Returning 2

hydraoc.cpp(188)Entering OC_CLEANUP
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_CLEANUP Done. Returning 0

logmsg.cpp(42)********Terminating Log

first aid returning from france (anyone have this gem in the TSOC log and others too?)

So there is fuel to to fire....I do not have questions as I too have not yet been judged by a "professional" who knew more thanb I either at Microsoft or elsewhere but I would sure like to meet one. The hacker knows more and all I want is one of you MS people to stop with the attitude and begin systematic decomposition of the matter.

johnny_socket · Joined: 31 Aug 2005 Posts: 3 Location: san jose

[svcpack.log]
6.453: ================================================================================
6.453: 2005/08/29 19:12:27.062 (local)
6.453: f:\e5b31f8426ceff41c6e210966ff4\i386\update\update.exe (version 5.5.1005.0)
6.469: Service Pack started with following command line:
6.578: Return Value From OnACPower = 1
6.594: OnACPower returned value( 0x1 ) which is Equal To 0x1
6.641: Condition succeeded for section OnACPower.Section in Line 1 of PreRequisite
6.641: SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\WindowsFeatures is not Present
6.641: First Condition in A6Block.Section Succeeded
6.641: Condition succeeded for section A6Block.Section in Line 2 of PreRequisite
16.188: DoInstallation: CleanPFR failed: 0x2
16.234: SetProductTypes: InfProductBuildType=BuildType.IP
16.266: SetAltOsLoaderPath: No section uses DirId 65701; done.
16.641: IncludeDirectoryIdFromInfSection: No DirId found for: DontRemoveOnUninst.DirId
16.688: DoInstallation: FetchSourceURL for f:\e5b31f8426ceff41c6e210966ff4\i386\update\update.inf failed
16.766: CreateUninstall = 0,Directory = C:\WINDOWS\$NtServicePackUninstall$
27.000: CheckRegistryValue: RegOpenKeyEx for SOFTWARE\Microsoft\Active Setup\Installed Components\{FDC11A6F-17D1-48f9-9EA3-9051954BAA24} KeyName failed :0x2
27.031: Conditional load of section WindowsMessenger.Condition succeeded
174.594: BuildCabinetManifest: update.url absent
174.641: Starting AnalyzeComponents
174.641: AnalyzePhaseZero used 0 ticks
174.641: No f:\e5b31f8426ceff41c6e210966ff4\i386\update\updtblk.inf file.
179.531: SetupVerifyInfFile failed with error 0x490 for oem22.inf of device DISPLAY\CRN0006\5&3375E9C5&4&11335578&01&00
186.422: SetupVerifyInfFile failed with error 0x490 for oem8.inf of device PCI\VEN_1412&DEV_1712&SUBSYS_D6321412&REV_02\4&3B90381F&0&58F0
188.031: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
188.031: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
188.047: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
188.047: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
188.047: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
188.047: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
189.922: Third Party Provider = Intel for PCI\VEN_8086&DEV_2560&SUBSYS_00000000&REV_02\3&61AAA01&0&00
190.219: Third Party Provider = Intel for PCI\VEN_8086&DEV_2561&SUBSYS_00000000&REV_02\3&61AAA01&0&08
190.422: C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT trusts inf c:\windows\inf\oem5.inf of device PCIIDE\IDECHANNEL\4&28AF23A7&0&0
190.656: C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT trusts inf c:\windows\inf\oem5.inf of device PCIIDE\IDECHANNEL\4&28AF23A7&0&1
191.125: Failed to query DriverPath of ROOT\LEGACY_AAKAH\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_AFD\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_ARP1394\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_ASPI32\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_ASUSHWIO\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_ATAPI\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_BEEP\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_BS_DEF\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_BS_LOAD\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_DMBOOT\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_DMLOAD\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_EIO\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_EMGICUSB\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_FIPS\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_GPC\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_HTTP\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_INTELIDE\0000 0x2
191.141: Failed to query DriverPath of ROOT\LEGACY_IP6FW\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_IPNAT\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_IPSEC\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_KERNELHOOKS\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_KSECDD\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_MCHINJDRV\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_MNMDD\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_MOUNTMGR\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_NBF\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_NDIS\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_NDISTAPI\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_NDISUIO\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_NDPROXY\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_NETBT\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_NULL\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_NVTVSND\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_PARPORT\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_PARTMGR\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_PARVDM\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_PCANDIS5\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_PCIIDE\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_RASACD\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_RDPCDD\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_RDPWD\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_SERIAL\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_SOCKETLOCK\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_TCPIP\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_TCPIP6\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_TDTCP\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_VGASAVE\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_VOLSNAP\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_WANARP\0000 0x2
191.156: Failed to query DriverPath of ROOT\LEGACY_WS2IFSL\0000 0x2
191.781: SetupVerifyInfFile failed with error 0x490 for oem8.inf of device ROOT\PCOUFFIN\0000
196.859: SetupVerifyInfFile failed with error 0x490 for emgicus5.inf of device USB\VID_086A&PID_0001\5&1A3D24E4&0&2
197.125: SetupVerifyInfFile failed with error 0x490 for emgicus5.inf of device USB\VID_086A&PID_0001\5&3AE78C2C&0&2
197.391: Failed to query DriverPath of USB\VID_08FF&PID_5731\5&38488C91&0&1 0x2
197.594: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
198.906: OEM file scan used 24265 ticks
263.328: c:\windows\system32\drivers\nv4_mini.sys is in the list of oem drivers...skipping copy!
263.828: c:\windows\system32\nv4_disp.dll is in the list of oem drivers...skipping copy!
371.625: AnalyzePhaseOne: used 196984 ticks
371.625: AnalyzeComponents: Hotpatch analysis disabled; skipping.
371.625: AnalyzeComponents: Hotpatching is disabled.
371.625: FindFirstFile c:\windows\$hf_mig$\*.*
371.703: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
371.719: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
371.969: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
372.188: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
372.875: Failed to open c:\windows\$hf_mig$\KB834707\update\updatebr.inf
372.875: Failed to open c:\windows\$hf_mig$\KB867282\update\updatebr.inf
372.891: Failed to open c:\windows\$hf_mig$\KB887472\update\updatebr.inf
372.938: Failed to open c:\windows\$hf_mig$\KB890047\update\updatebr.inf
373.047: AnalyzePhaseTwo used 0 ticks
373.047: AnalyzePhaseThree used 0 ticks
373.047: AnalyzePhaseFive used 0 ticks
377.984: AnalyzePhaseSix used 4937 ticks
379.750: AnalyzeComponents used 205109 ticks
379.750: Downloading 0 files
379.750: bPatchMode = FALSE
379.750: Inventory complete: ReturnStatus=0, 363062 ticks

379.766: Num Ticks for invent : 363078
380.766: Conditional load of section WM.Reg.Install.Condition succeeded
380.766: CheckRegistryValue: RegOpenKeyEx for SOFTWARE\Microsoft\Active Setup\Installed Components\{FDC11A6F-17D1-48f9-9EA3-9051954BAA24} KeyName failed :0x2
380.766: Conditional load of section RPCProtseq.Reg.Install.Condition succeeded
380.781: Allocation size of drive C: is 4096 bytes, free space = 10438823936 bytes
381.906: Drive C: free 9955MB req: 35MB w/uninstall 0MB
381.906: CabinetBuild complete
381.906: Num Ticks for Cabinet build : 2140
382.672: Starting process: f:\e5b31f8426ceff41c6e210966ff4\i386\\update\fixccs.exe
387.531: Return Code = 0
387.531: Starting process: f:\e5b31f8426ceff41c6e210966ff4\i386\\update\nv4prep.exe
387.656: Return Code = 0
387.656: Starting process: f:\e5b31f8426ceff41c6e210966ff4\i386\\root\cmpnents\mediactr\i386\MCPreIns.exe f:\e5b31f8426ceff41c6e210966ff4\i386\\root\cmpnents\mediactr\i386\ f:\e5b31f8426ceff41c6e210966ff4\i386\\ip\ f:\e5b31f8426ceff41c6e210966ff4\i386\\
388.516: Return Code = 0
388.516: Starting process: C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\apphelp.dll,ShimFlushCache
389.422: Return Code = 0
389.422: Starting process: f:\e5b31f8426ceff41c6e210966ff4\i386\\update\spnpinst.exe /snapshot
389.516: Return Code = 0
405.906: CheckRegistryValue: RegOpenKeyEx for SOFTWARE\Microsoft\Active Setup\Installed Components\{FDC11A6F-17D1-48f9-9EA3-9051954BAA24} KeyName failed :0x2
405.938: Conditional load of section WindowsMessenger.Condition succeeded
406.734: UpdateMonitoredList Succeeded
413.016: System Restore Point set.
413.625: PFE2: Per File Exceptions will not be used.
417.703: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmerrenu.cat with error 0x80092004
417.734: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\wmerrenu.cat with error 0x80092004
418.109: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat with error 0x80092004
418.188: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\ntprint.cat with error 0x80092004
428.297: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat with error 0x80092004
428.484: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\nt5.cat with error 0x80092004
439.813: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mstsweb.cat with error 0x80092004
439.828: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\mstsweb.cat with error 0x80092004
440.125: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn9.cat with error 0x80092004
440.156: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\msn9.cat with error 0x80092004
440.266: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat with error 0x80092004
440.297: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\msn7.cat with error 0x80092004
440.469: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msmsgs.cat with error 0x80092004
440.484: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\msmsgs.cat with error 0x80092004
440.578: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ims.cat with error 0x80092004
440.625: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\ims.cat with error 0x80092004
440.734: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\fp4.cat with error 0x80092004
440.766: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\fp4.cat with error 0x80092004
441.125: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\sp2.cat with error 0x80092004
441.266: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\sp2.cat with error 0x80092004
448.063: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\tabletpc.cat with error 0x80092004
448.109: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\tabletpc.cat with error 0x80092004
448.438: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5inf.cat with error 0x80092004
448.500: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\nt5inf.cat with error 0x80092004
449.250: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\netfx.cat with error 0x80092004
449.281: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\netfx.cat with error 0x80092004
449.516: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mediactr.cat with error 0x80092004
449.531: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\mediactr.cat with error 0x80092004
451.250: Copied file: C:\WINDOWS\system32\l3codeca.acm
451.859: Copied file: C:\WINDOWS\system32\asferror.dll
456.547: Copied file: C:\WINDOWS\INF\swflash.inf
466.609: Copied file: C:\Program Files\windows media player\sample playlists\plylst9.wpl
466.672: Copied file: C:\Program Files\windows media player\sample playlists\plylst8.wpl
466.688: Copied file: C:\Program Files\windows media player\sample playlists\plylst7.wpl
466.703: Copied file: C:\Program Files\windows media player\sample playlists\plylst6.wpl
466.719: Copied file: C:\Program Files\windows media player\sample playlists\plylst5.wpl
466.734: Copied file: C:\Program Files\windows media player\sample playlists\plylst4.wpl
466.766: Copied file: C:\Program Files\windows media player\sample playlists\plylst3.wpl
466.781: Copied file: C:\Program Files\windows media player\sample playlists\plylst2.wpl
466.797: Copied file: C:\Program Files\windows media player\sample playlists\plylst15.wpl
466.813: Copied file: C:\Program Files\windows media player\sample playlists\plylst14.wpl
466.828: Copied file: C:\Program Files\windows media player\sample playlists\plylst13.wpl
466.859: Copied file: C:\Program Files\windows media player\sample playlists\plylst12.wpl
466.875: Copied file: C:\Program Files\windows media player\sample playlists\plylst11.wpl
466.891: Copied file: C:\Program Files\windows media player\sample playlists\plylst10.wpl
466.906: Copied file: C:\Program Files\windows media player\sample playlists\plylst1.wpl
467.031: Copied file: C:\Program Files\windows media player\migrate.exe
467.328: Copied file: C:\WINDOWS\system32\ir50_qcx.dll
467.453: Copied file: C:\WINDOWS\system32\ir50_qc.dll
467.703: Copied file: C:\WINDOWS\INF\wuau.adm
468.438: Copied file: C:\WINDOWS\INF\nvts.inf
468.469: Copied file: C:\WINDOWS\INF\nvdm.inf
468.484: Copied file: C:\WINDOWS\INF\nvct.inf
468.516: Copied file: C:\WINDOWS\INF\nv4_disp.inf
468.906: Copied file: C:\WINDOWS\Help\wuauhelp.chm
469.188: Copied file: C:\WINDOWS\system32\inetsrv\smtpadm.dll
469.281: Copied file: C:\WINDOWS\system32\inetsrv\seo.dll
469.375: Copied file: C:\WINDOWS\system32\smtpapi.dll
469.438: Copied file: C:\WINDOWS\system32\rwnh.dll
469.906: Copied file: C:\Program Files\messenger\xpmsgr.chm
469.984: Copied file: C:\Program Files\messenger\type.wav
470.031: Copied file: C:\Program Files\messenger\online.wav
470.047: Copied file: C:\Program Files\messenger\newemail.wav
470.078: Copied file: C:\Program Files\messenger\newalert.wav
470.094: Copied file: C:\Program Files\messenger\msmsgs.exe
470.344: Copied file: C:\Program Files\messenger\msgslang.dll
470.391: Copied file: C:\Program Files\messenger\msgsc.dll
470.469: Copied file: C:\Program Files\messenger\logowin.gif
470.500: Copied file: C:\Program Files\messenger\custsat.dll
470.594: Copied file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\unidrvui.dll
470.703: Copied file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\unidrv.dll
470.813: Copied file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\pscript.ntf
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
473.266: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x2
473.266: Num Ticks for Copying files : 91360
478.875: DoRegistryUpdates:SetupInstallFromInfSection Failed for WMSection: 0x5
478.875: DoInstallation:DoRegistryUpdates failed
479.125: UnRegisterSpuninstForRecovery, failed to delete SpRecoverCmdLine value, error 0x2
479.125: DoInstallation: Failed to unregistering spuninst.exe for recovery.
479.125: Access is denied.
489.781: Message displayed to the user: Access is denied.
489.781: User Input: OK
489.797: Service Pack 2 installation did not complete.

Windows XP has been partially updated and may not work properly.
495.609: Message displayed to the user: Service Pack 2 installation did not complete.

Windows XP has been partially updated and may not work properly.
495.609: User Input: OK
495.609: Update.exe extended error code = 0x5
495.609: Update.exe return code was masked to 0x643 for MSI custom action compliance.
5.422: ================================================================================
5.438: 2005/08/29 22:02:29.656 (local)
5.454: f:\11a109865e3f371ce494\i386\update\update.exe (version 5.5.1005.0)
5.454: Service Pack started with following command line:
5.829: Return Value From OnACPower = 1
5.829: OnACPower returned value( 0x1 ) which is Equal To 0x1
5.844: Condition succeeded for section OnACPower.Section in Line 1 of PreRequisite
5.907: SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\WindowsFeatures is not Present
5.907: First Condition in A6Block.Section Succeeded
5.907: Condition succeeded for section A6Block.Section in Line 2 of PreRequisite
15.532: DoInstallation: CleanPFR failed: 0x2
15.610: SetProductTypes: InfProductBuildType=BuildType.IP
15.641: SetAltOsLoaderPath: No section uses DirId 65701; done.
15.985: IncludeDirectoryIdFromInfSection: No DirId found for: DontRemoveOnUninst.DirId
16.000: DoInstallation: FetchSourceURL for f:\11a109865e3f371ce494\i386\update\update.inf failed
17.016: CreateUninstall = 0,Directory = C:\WINDOWS\$NtServicePackUninstall$
26.282: CheckRegistryValue: RegOpenKeyEx for SOFTWARE\Microsoft\Active Setup\Installed Components\{FDC11A6F-17D1-48f9-9EA3-9051954BAA24} KeyName failed :0x2
26.313: Conditional load of section WindowsMessenger.Condition succeeded
174.297: BuildCabinetManifest: update.url absent
174.344: Starting AnalyzeComponents
174.344: AnalyzePhaseZero used 0 ticks
174.344: No f:\11a109865e3f371ce494\i386\update\updtblk.inf file.
179.219: SetupVerifyInfFile failed with error 0x490 for oem22.inf of device DISPLAY\CRN0006\5&3375E9C5&4&11335578&01&00
185.766: SetupVerifyInfFile failed with error 0x490 for oem8.inf of device PCI\VEN_1412&DEV_1712&SUBSYS_D6321412&REV_02\4&3B90381F&0&58F0
186.485: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
186.485: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
186.485: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
186.485: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
186.485: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
186.485: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
187.500: Third Party Provider = Intel for PCI\VEN_8086&DEV_2560&SUBSYS_00000000&REV_02\3&61AAA01&0&00
187.844: Third Party Provider = Intel for PCI\VEN_8086&DEV_2561&SUBSYS_00000000&REV_02\3&61AAA01&0&08
188.079: C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT trusts inf c:\windows\inf\oem5.inf of device PCIIDE\IDECHANNEL\4&28AF23A7&0&0
188.297: C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT trusts inf c:\windows\inf\oem5.inf of device PCIIDE\IDECHANNEL\4&28AF23A7&0&1
188.829: Failed to query DriverPath of ROOT\LEGACY_AAKAH\0000 0x2
188.829: Failed to query DriverPath of ROOT\LEGACY_AFD\0000 0x2
188.829: Failed to query DriverPath of ROOT\LEGACY_ARP1394\0000 0x2
188.829: Failed to query DriverPath of ROOT\LEGACY_ASPI32\0000 0x2
188.829: Failed to query DriverPath of ROOT\LEGACY_ASUSHWIO\0000 0x2
188.829: Failed to query DriverPath of ROOT\LEGACY_ATAPI\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_BEEP\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_BS_DEF\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_BS_LOAD\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_DMBOOT\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_DMLOAD\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_EIO\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_EMGICUSB\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_FIPS\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_GPC\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_HTTP\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_INTELIDE\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_IP6FW\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_IPNAT\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_IPSEC\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_KERNELHOOKS\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_KSECDD\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_MCHINJDRV\0000 0x2
188.844: Failed to query DriverPath of ROOT\LEGACY_MNMDD\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_MOUNTMGR\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_NBF\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_NDIS\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_NDISTAPI\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_NDISUIO\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_NDPROXY\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_NETBT\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_NULL\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_NVTVSND\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_PARPORT\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_PARTMGR\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_PARVDM\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_PCANDIS5\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_PCIIDE\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_RASACD\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_RDPCDD\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_RDPWD\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_SERIAL\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_SOCKETLOCK\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_TCPIP\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_TCPIP6\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_TDTCP\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_VGASAVE\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_VOLSNAP\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_WANARP\0000 0x2
188.860: Failed to query DriverPath of ROOT\LEGACY_WS2IFSL\0000 0x2
189.391: SetupVerifyInfFile failed with error 0x490 for oem8.inf of device ROOT\PCOUFFIN\0000
194.282: SetupVerifyInfFile failed with error 0x490 for emgicus5.inf of device USB\VID_086A&PID_0001\5&1A3D24E4&0&2
194.500: SetupVerifyInfFile failed with error 0x490 for emgicus5.inf of device USB\VID_086A&PID_0001\5&3AE78C2C&0&2
194.766: Failed to query DriverPath of USB\VID_08FF&PID_5731\5&38488C91&0&1 0x2
194.954: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
196.204: OEM file scan used 21860 ticks
254.797: c:\windows\system32\drivers\nv4_mini.sys is in the list of oem drivers...skipping copy!
255.172: c:\windows\system32\nv4_disp.dll is in the list of oem drivers...skipping copy!
361.250: AnalyzePhaseOne: used 186906 ticks
361.250: AnalyzeComponents: Hotpatch analysis disabled; skipping.
361.250: AnalyzeComponents: Hotpatching is disabled.
361.250: FindFirstFile c:\windows\$hf_mig$\*.*
361.297: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
361.297: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
361.516: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
361.719: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
362.297: Failed to open c:\windows\$hf_mig$\KB834707\update\updatebr.inf
362.297: Failed to open c:\windows\$hf_mig$\KB867282\update\updatebr.inf
362.313: Failed to open c:\windows\$hf_mig$\KB887472\update\updatebr.inf
362.375: Failed to open c:\windows\$hf_mig$\KB890047\update\updatebr.inf
362.469: AnalyzePhaseTwo used 15 ticks
362.469: AnalyzePhaseThree used 0 ticks
362.469: AnalyzePhaseFive used 0 ticks
367.329: AnalyzePhaseSix used 4860 ticks
369.063: AnalyzeComponents used 194719 ticks
369.063: Downloading 0 files
369.063: bPatchMode = FALSE
369.063: Inventory complete: ReturnStatus=0, 353063 ticks
369.079: Num Ticks for invent : 353079
370.172: Conditional load of section WM.Reg.Install.Condition succeeded
370.172: CheckRegistryValue: RegOpenKeyEx for SOFTWARE\Microsoft\Active Setup\Installed Components\{FDC11A6F-17D1-48f9-9EA3-9051954BAA24} KeyName failed :0x2
370.172: Conditional load of section RPCProtseq.Reg.Install.Condition succeeded
370.172: Allocation size of drive C: is 4096 bytes, free space = 10326347776 bytes
371.094: Drive C: free 9847MB req: 32MB w/uninstall 0MB
371.094: CabinetBuild complete
371.094: Num Ticks for Cabinet build : 2015
371.813: Starting process: f:\11a109865e3f371ce494\i386\\update\fixccs.exe
375.813: Return Code = 0
375.813: Starting process: f:\11a109865e3f371ce494\i386\\update\nv4prep.exe
375.969: Return Code = 0
375.969: Starting process: f:\11a109865e3f371ce494\i386\\root\cmpnents\mediactr\i386\MCPreIns.exe f:\11a109865e3f371ce494\i386\\root\cmpnents\mediactr\i386\ f:\11a109865e3f371ce494\i386\\ip\ f:\11a109865e3f371ce494\i386\\
376.704: Return Code = 0
376.704: Starting process: C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\apphelp.dll,ShimFlushCache
377.579: Return Code = 0
377.579: Starting process: f:\11a109865e3f371ce494\i386\\update\spnpinst.exe /snapshot
377.688: Return Code = 0
394.032: CheckRegistryValue: RegOpenKeyEx for SOFTWARE\Microsoft\Active Setup\Installed Components\{FDC11A6F-17D1-48f9-9EA3-9051954BAA24} KeyName failed :0x2
394.063: Conditional load of section WindowsMessenger.Condition succeeded
394.954: UpdateMonitoredList Succeeded
401.329: System Restore Point set.
401.844: PFE2: Per File Exceptions will not be used.
406.110: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmerrenu.cat with error 0x80092004
406.157: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\wmerrenu.cat with error 0x80092004
406.532: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat with error 0x80092004
406.625: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\ntprint.cat with error 0x80092004
414.735: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat with error 0x80092004
414.938: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\nt5.cat with error 0x80092004
426.579: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mstsweb.cat with error 0x80092004
426.750: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\mstsweb.cat with error 0x80092004
427.094: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn9.cat with error 0x80092004
427.141: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\msn9.cat with error 0x80092004
427.266: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat with error 0x80092004
427.313: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\msn7.cat with error 0x80092004
427.500: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msmsgs.cat with error 0x80092004
427.547: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\msmsgs.cat with error 0x80092004
427.657: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ims.cat with error 0x80092004
427.719: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\ims.cat with error 0x80092004
427.829: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\fp4.cat with error 0x80092004
427.891: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\fp4.cat with error 0x80092004
428.282: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\sp2.cat with error 0x80092004
428.407: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\sp2.cat with error 0x80092004
432.532: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\tabletpc.cat with error 0x80092004
432.579: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\tabletpc.cat with error 0x80092004
432.907: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5inf.cat with error 0x80092004
432.985: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\nt5inf.cat with error 0x80092004
434.766: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\netfx.cat with error 0x80092004
434.797: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\netfx.cat with error 0x80092004
435.047: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mediactr.cat with error 0x80092004
435.110: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\mediactr.cat with error 0x80092004
436.797: Copied file: C:\WINDOWS\system32\msvbvm60.dll
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
455.610: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x2
455.610: Num Ticks for Copying files : 84516
460.938: DoRegistryUpdates:SetupInstallFromInfSection Failed for WMSection: 0x5
460.938: DoInstallation:DoRegistryUpdates failed
461.485: UnRegisterSpuninstForRecovery, failed to delete SpRecoverCmdLine value, error 0x2
461.485: DoInstallation: Failed to unregistering spuninst.exe for recovery.
461.485: Access is denied.
486.329: Message displayed to the user: Access is denied.
486.329: User Input: OK
486.329: Service Pack 2 installation did not complete.

Windows XP has been partially updated and may not work properly.
489.297: Message displayed to the user: Service Pack 2 installation did not complete.

Windows XP has been partially updated and may not work properly.
489.297: User Input: OK
489.297: Update.exe extended error code = 0x5
489.297: Update.exe return code was masked to 0x643 for MSI custom action compliance.
3.828: ================================================================================
3.859: 2005/08/29 22:13:54.984 (local)
3.875: f:\3cdf2e353ae18857cd721c7033\i386\update\update.exe (version 5.5.1005.0)
3.875: Service Pack started with following command line:
3.968: Return Value From OnACPower = 1
3.968: OnACPower returned value( 0x1 ) which is Equal To 0x1
3.968: Condition succeeded for section OnACPower.Section in Line 1 of PreRequisite
3.968: SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\WindowsFeatures is not Present
3.968: First Condition in A6Block.Section Succeeded
3.968: Condition succeeded for section A6Block.Section in Line 2 of PreRequisite
8.515: DoInstallation: CleanPFR failed: 0x2
8.562: SetProductTypes: InfProductBuildType=BuildType.IP
8.593: SetAltOsLoaderPath: No section uses DirId 65701; done.
8.937: IncludeDirectoryIdFromInfSection: No DirId found for: DontRemoveOnUninst.DirId
9.031: DoInstallation: FetchSourceURL for f:\3cdf2e353ae18857cd721c7033\i386\update\update.inf failed
9.250: CreateUninstall = 0,Directory = C:\WINDOWS\$NtServicePackUninstall$
19.312: CheckRegistryValue: RegOpenKeyEx for SOFTWARE\Microsoft\Active Setup\Installed Components\{FDC11A6F-17D1-48f9-9EA3-9051954BAA24} KeyName failed :0x2
19.312: Conditional load of section WindowsMessenger.Condition succeeded
155.609: BuildCabinetManifest: update.url absent
155.656: Starting AnalyzeComponents
155.656: AnalyzePhaseZero used 0 ticks
155.656: No f:\3cdf2e353ae18857cd721c7033\i386\update\updtblk.inf file.
159.422: SetupVerifyInfFile failed with error 0x490 for oem22.inf of device DISPLAY\CRN0006\5&3375E9C5&4&11335578&01&00
166.265: SetupVerifyInfFile failed with error 0x490 for oem8.inf of device PCI\VEN_1412&DEV_1712&SUBSYS_D6321412&REV_02\4&3B90381F&0&58F0
166.906: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
166.906: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
166.906: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
166.906: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
166.906: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
166.906: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
167.781: Third Party Provider = Intel for PCI\VEN_8086&DEV_2560&SUBSYS_00000000&REV_02\3&61AAA01&0&00
168.140: Third Party Provider = Intel for PCI\VEN_8086&DEV_2561&SUBSYS_00000000&REV_02\3&61AAA01&0&08
168.375: C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT trusts inf c:\windows\inf\oem5.inf of device PCIIDE\IDECHANNEL\4&28AF23A7&0&0
168.593: C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT trusts inf c:\windows\inf\oem5.inf of device PCIIDE\IDECHANNEL\4&28AF23A7&0&1
169.031: Failed to query DriverPath of ROOT\LEGACY_AAKAH\0000 0x2
169.031: Failed to query DriverPath of ROOT\LEGACY_AFD\0000 0x2
169.031: Failed to query DriverPath of ROOT\LEGACY_ARP1394\0000 0x2
169.031: Failed to query DriverPath of ROOT\LEGACY_ASPI32\0000 0x2
169.031: Failed to query DriverPath of ROOT\LEGACY_ASUSHWIO\0000 0x2
169.031: Failed to query DriverPath of ROOT\LEGACY_ATAPI\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_BEEP\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_BS_DEF\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_BS_LOAD\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_DMBOOT\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_DMLOAD\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_EIO\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_EMGICUSB\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_FIPS\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_GPC\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_HTTP\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_INTELIDE\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_IP6FW\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_IPNAT\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_IPSEC\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_KERNELHOOKS\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_KSECDD\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_MCHINJDRV\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_MNMDD\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_MOUNTMGR\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_NBF\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_NDIS\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_NDISTAPI\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_NDISUIO\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_NDPROXY\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_NETBT\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_NULL\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_NVTVSND\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_PARPORT\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_PARTMGR\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_PARVDM\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_PCANDIS5\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_PCIIDE\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_RASACD\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_RDPCDD\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_RDPWD\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_SERIAL\0000 0x2
169.047: Failed to query DriverPath of ROOT\LEGACY_SOCKETLOCK\0000 0x2
169.062: Failed to query DriverPath of ROOT\LEGACY_TCPIP\0000 0x2
169.062: Failed to query DriverPath of ROOT\LEGACY_TCPIP6\0000 0x2
169.062: Failed to query DriverPath of ROOT\LEGACY_TDTCP\0000 0x2
169.062: Failed to query DriverPath of ROOT\LEGACY_VGASAVE\0000 0x2
169.062: Failed to query DriverPath of ROOT\LEGACY_VOLSNAP\0000 0x2
169.062: Failed to query DriverPath of ROOT\LEGACY_WANARP\0000 0x2
169.062: Failed to query DriverPath of ROOT\LEGACY_WS2IFSL\0000 0x2
169.515: SetupVerifyInfFile failed with error 0x490 for oem8.inf of device ROOT\PCOUFFIN\0000
173.953: SetupVerifyInfFile failed with error 0x490 for emgicus5.inf of device USB\VID_086A&PID_0001\5&1A3D24E4&0&2
174.187: SetupVerifyInfFile failed with error 0x490 for emgicus5.inf of device USB\VID_086A&PID_0001\5&3AE78C2C&0&2
174.468: Failed to query DriverPath of USB\VID_08FF&PID_5731\5&38488C91&0&1 0x2
174.625: SetupOpenInfFile in IsThirdPartyInf Failed with error 0x2
175.734: OEM file scan used 20078 ticks
234.890: c:\windows\system32\drivers\nv4_mini.sys is in the list of oem drivers...skipping copy!
235.218: c:\windows\system32\nv4_disp.dll is in the list of oem drivers...skipping copy!
339.953: AnalyzePhaseOne: used 184297 ticks
339.953: AnalyzeComponents: Hotpatch analysis disabled; skipping.
339.953: AnalyzeComponents: Hotpatching is disabled.
339.953: FindFirstFile c:\windows\$hf_mig$\*.*
339.968: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
339.968: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
340.062: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
340.156: Service Pack 2 Setup encountered an error: The update.ver file is not correct.
340.453: Failed to open c:\windows\$hf_mig$\KB834707\update\updatebr.inf
340.453: Failed to open c:\windows\$hf_mig$\KB867282\update\updatebr.inf
340.453: Failed to open c:\windows\$hf_mig$\KB887472\update\updatebr.inf
340.468: Failed to open c:\windows\$hf_mig$\KB890047\update\updatebr.inf
340.531: AnalyzePhaseTwo used 0 ticks
340.531: AnalyzePhaseThree used 0 ticks
340.531: AnalyzePhaseFive used 0 ticks
344.593: AnalyzePhaseSix used 4062 ticks
346.328: AnalyzeComponents used 190672 ticks
346.328: Downloading 0 files
346.328: bPatchMode = FALSE
346.328: Inventory complete: ReturnStatus=0, 337297 ticks
346.359: Num Ticks for invent : 337328
346.968: Conditional load of section WM.Reg.Install.Condition succeeded
346.968: CheckRegistryValue: RegOpenKeyEx for SOFTWARE\Microsoft\Active Setup\Installed Components\{FDC11A6F-17D1-48f9-9EA3-9051954BAA24} KeyName failed :0x2
346.968: Conditional load of section RPCProtseq.Reg.Install.Condition succeeded
346.968: Allocation size of drive C: is 4096 bytes, free space = 9790107648 bytes
347.843: Drive C: free 9336MB req: 32MB w/uninstall 0MB
347.843: CabinetBuild complete
347.843: Num Ticks for Cabinet build : 1484
348.515: Starting process: f:\3cdf2e353ae18857cd721c7033\i386\\update\fixccs.exe
352.062: Return Code = 0
352.062: Starting process: f:\3cdf2e353ae18857cd721c7033\i386\\update\nv4prep.exe
352.093: Return Code = 0
352.093: Starting process: f:\3cdf2e353ae18857cd721c7033\i386\\root\cmpnents\mediactr\i386\MCPreIns.exe f:\3cdf2e353ae18857cd721c7033\i386\\root\cmpnents\mediactr\i386\ f:\3cdf2e353ae18857cd721c7033\i386\\ip\ f:\3cdf2e353ae18857cd721c7033\i386\\
352.781: Return Code = 0
352.781: Starting process: C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\apphelp.dll,ShimFlushCache
353.562: Return Code = 0
353.562: Starting process: f:\3cdf2e353ae18857cd721c7033\i386\\update\spnpinst.exe /snapshot
353.687: Return Code = 0
370.093: CheckRegistryValue: RegOpenKeyEx for SOFTWARE\Microsoft\Active Setup\Installed Components\{FDC11A6F-17D1-48f9-9EA3-9051954BAA24} KeyName failed :0x2
370.109: Conditional load of section WindowsMessenger.Condition succeeded
370.531: UpdateMonitoredList Succeeded
373.500: System Restore Point set.
373.765: PFE2: Per File Exceptions will not be used.
376.328: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmerrenu.cat with error 0x80092004
376.359: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\wmerrenu.cat with error 0x80092004
376.672: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat with error 0x80092004
376.750: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\ntprint.cat with error 0x80092004
379.640: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat with error 0x80092004
379.843: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\nt5.cat with error 0x80092004
384.640: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mstsweb.cat with error 0x80092004
384.687: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\mstsweb.cat with error 0x80092004
384.953: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn9.cat with error 0x80092004
384.984: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\msn9.cat with error 0x80092004
385.093: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat with error 0x80092004
385.125: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\msn7.cat with error 0x80092004
385.265: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msmsgs.cat with error 0x80092004
385.281: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\msmsgs.cat with error 0x80092004
385.375: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ims.cat with error 0x80092004
385.406: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\ims.cat with error 0x80092004
385.468: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\fp4.cat with error 0x80092004
385.500: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\fp4.cat with error 0x80092004
385.734: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\sp2.cat with error 0x80092004
385.859: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\sp2.cat with error 0x80092004
388.375: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\tabletpc.cat with error 0x80092004
388.422: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\tabletpc.cat with error 0x80092004
388.672: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5inf.cat with error 0x80092004
388.797: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\nt5inf.cat with error 0x80092004
389.953: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\netfx.cat with error 0x80092004
390.140: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\netfx.cat with error 0x80092004
390.375: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mediactr.cat with error 0x80092004
390.406: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\mediactr.cat with error 0x80092004
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.015: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
410.031: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x2
410.031: Num Ticks for Copying files : 62188
415.312: DoRegistryUpdates:SetupInstallFromInfSection Failed for WMSection: 0x5
415.312: DoInstallation:DoRegistryUpdates failed
415.812: UnRegisterSpuninstForRecovery, failed to delete SpRecoverCmdLine value, error 0x2
415.812: DoInstallation: Failed to unregistering spuninst.exe for recovery.
415.812: Access is denied.
419.687: Message displayed to the user: Access is denied.
419.687: User Input: OK
419.687: Service Pack 2 installation did not complete.

Windows XP has been partially updated and may not work properly.
420.765: Message displayed to the user: Service Pack 2 installation did not complete.

Windows XP has been partially updated and may not work properly.
420.765: User Input: OK
420.765: Update.exe extended error code = 0x5
420.765: Update.exe return code was masked to 0x643 for MSI custom action compliance.

johnny_socket · Joined: 31 Aug 2005 Posts: 3 Location: san jose

Delete
NoRemove
ForceRemove
Val
WmiClosePerfData
WmiCollectPerfData
WmiOpenPerfData
Global\WmiApSrv
WmiApSrv
Global\MEMORYGuard_Writter
Global\MEMORYGuard_Reader
_simulated_%d
Last Help
Last Counter
First Help
First Counter
WMIApSrv
LocalService
AppID\{63A53A38-004F-489B-BD61-96B5EEFADC04}
RegServer
UnregServer
kill
Global\WmiAdapterKillHandle
WMIApRes.dll
Global\WmiAdapterUninit
Global\WmiAdapterInit
Global\WmiAdapterDataReady
WMIAdapter
RPCSS
WMI Performance Adapter
Frequency_PerfTime
Timestamp_PerfTime
Global\WmiReverseAdapterMemory
HELP=Shows if High Performance Classes are valid
HELP=Shows High Performance Classes
HELP=Number of WMI High Performance provider returned by WMI Adapter
NAME=HiPerf Validity
NAME=HiPerf Classes
NAME=WMI Objects
HiPerf_Validity
HiPerf_Classes
WMI_Objects
HELP
NAME
[text]
[languages]
[objects]
[info]
symbolfile=
drivername=
#define
SYSTEM\CurrentControlSet\Services\WmiApRpl\Performance
Performance Refreshed
Performance Refresh
Performance Data
SOFTWARE\Microsoft\WBEM\PROVIDERS\Performance
\Performance\
Installation Directory
SOFTWARE\Microsoft\Wbem
countertype
perfdetail
defaultscale
cooked
genericperfctr
generic
abstract
HiPerf
provider
select * from meta_class where __this isa "Win32_PerfRawData"
WQL
\\.\root\wmi
\\.\root\cimv2
Global\WMI_RevAdap_ACK
Global\WMI_RevAdap_Set
Global\RefreshRA_Mutex_Flag
Global\RefreshRA_Mutex_Lib
Global\RefreshRA_Mutex
WmiApRpl
PSAPI.DLL
Winmgmt.exe
xx %s
xx %s%s.ini
false
show
description
displayname
__CLASS
.ini
Describes all the counters supported via WMI Hi-Performance providers
Abstract:
Module Name:
Copyright (C) 2000 Microsoft Corporation
_new.ini
Include file for object and counters definitions.
_new.h
base
Software\Microsoft\WBEM\WDM
Software\Microsoft\WBEM\WDM\DREDGE
DREDGE
!This program cannot be run in DOS mode.
Rich
.text
`.data
.rsrc
msvcrt.dll
ADVAPI32.dll
KERNEL32.dll
NTDLL.DLL
USER32.dll
OLEAUT32.dll
ole32.dll
loadperf.dll
wbemcomn.dll
wxj
wSw
wCi
wea
wOP
wYK
wPH
MQN
Mvl
Mpo
BOw
AOw
MTw
<5IkQ
<5IkQ
<5IkQ
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
<5IkQ
<5IkQ
<5IkQ
fKg
QZN
lUJ
lrn
VX^QP
40eg m
i(ckC
A$|KL
zyt
^JHH
jZQ=
cii
NNG
Fkn
iGF
jNi
ZNQ{
Nl"c
XT[i
9XMw
qqQn
RSDS
WmiApSrv.pdb
FHtL
QSV
QQSVW
QQSV
QQSV
RPW
QQV
vCS3
QWQ
SVW3
SVW
Ijd
QQSV
RPW
PPPS
SQP
SQP
Php
PhX
SVW
SSSf
WWWP
WtI
QSV
Wte
QQSV
YtA
|=Sj@Sj
SSj
PhD
QSVW
SVW
SVW
khx
QPPS3
SVW3
VSSSSSSh
SVW
SVW
uEj
SVW
jdWP
jdWP
WWj
WWj
WWj
WWj
WWj
QQSVW
NXV
HHu`
tCWWh
QQV
8SVWh?
SVW
jnS
SSh
QWj
joS
SVW3
tCj
PPh
QQSVW
QSV
QSV
RSSP
RSh
RSP
QQSVW
QQSV
QQSV
QSV
SVW3
QQSVW
OxP
t6Ht(Hu5j
tP9u
QQSVW
QSV3
Wht
VhT
QSV
SVW
SSSh
WSP
DSVW3
FA;u
t#HuJ
RSS
W$RP
RSS
W$RP
tHj
QQSVW
BQR
uEP
9stt|
u3VV
u"VV
SVW3
$SVW3
uWP
u$SS
SVW
NHj
VPQ
NPP
uMV
jph
8MZu
XPVSS
t%Vhz
SVW
8csm
SVW
Yt%V
WWh?
WWSh
QQS
QPWW
SVW3
uxSSV
tTWS
VjWXt@
YVW
QSVW
QSVW
SVW
YYu
SVW3
VSSSSSSPQ
SSj
SSj
SSj
SSj
SVW3
VSSSSSSPQ
SSj
SSj
SSj
SSj
(SVW3
YtI
YtH
SVW
QQSVWj
VhE
FHX
lSVW3
SVW
tvj
t99>t5S
G;;Yr
QSV
QSV
QSV
4SVW3
QSVW
SVP
SVW
TSVW
SSSS
PSSSS
QSV
QSV3
SVW
QQS
tn9M
PWS
QVW
tK9u
tFV
|DSh
ALu
QQSVW
PVW
VWj
SVW
Yt'Wj
SVW
Yt'Wj
SVW
Yt'Wj
YYt&
PSVW
Ytf
Ptq
Stq
jdh
PVh
$SVW
tCj
Ytwj
jdh
SVW3
GLS
;GDs0
t*SP
t*SP
twSP
jdh
t*SP
t*SP
t*SP
t*SP
tcSP
tyS
jdh
SVW
SVW3
tESP
jdh
Wt,9u
VVV
VVV
RVRR
$SVW
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
f$af
VS_VERSION_INFO
StringFileInfo
CompanyName
Microsoft Corporation
FileDescription
WMI Performance Adapter Service
FileVersion
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
InternalName
WmiApSrv.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
WmiApSrv.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
VarFileInfo
Translation
WMIApSrv
WMI Performance AdapterCProvides performance library information from WMI HiPerf providers.
SuG
tCP
SVW3
,SVW3
F;u r
YVP
jdZ9E
QSW
tZV
SVW3
uUj
QSVW
QVWh(%
QVW
SVW3
BBFF
BBNu
PVW
QRVWP
QSVW
QSVW
SVW
uiV
SSh?
SShP&
WVS3
QSV
SVW
QSV
SWV
PSS
SSW
SVW
t)SSh
PSS
SSSS
WSS
WSS
SSh
WSS
YSS
SVW
VSWRPQ
t)SSh
PSS
QQh
PQQ
QQh
PQQ
QQh
PQQ
QSWPV
QQh
PQQ
SWPV
LSVW
SVW
uV9u
SVW
PVj
0SVW
PVj
QVh
PVV
} SWV
u?Wh
(SVW
uzW
VhD&
uUh
QSV
SVW
tHj
SVW
XSVW
t-WP
~SSV
t6SV
YYu
YYu
YYu
YYu
QVj
SVW
GGf
SVW
PWR
QSVW
FFf
tCf=#
FFf
FFf
u<FFf
FFf
HHt
YFFf
YYP
YYP
uYPS
PSS
QSSPh
tFV3
SVW
SVW
~hSW
SVW
SVW
hJy
hYy
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
memcpy
free
memset
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
msvcrt.dll
??1type_info@@UAE@XZ
__dllonexit
_onexit
_controlfp
?terminate@@YAXXZ
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
CopySid
GetLengthSid
IsValidSid
GetTokenInformation
OpenProcessToken
RegisterEventSourceW
DeregisterEventSource
CloseServiceHandle
QueryServiceStatus
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
SetEntriesInAclW
SetServiceStatus
RegisterServiceCtrlHandlerW
DeleteService
ControlService
StartServiceCtrlDispatcherW
ChangeServiceConfig2W
CreateServiceW
ADVAPI32.dll
CreateSemaphoreW
CloseHandle
LeaveCriticalSection
TryEnterCriticalSection
lstrlenW
lstrcatW
lstrcpyW
ReleaseSemaphore
WaitForSingleObject
SwitchToThread
GetCurrentProcess
InterlockedIncrement
GetLastError
InterlockedDecrement
InitializeCriticalSection
SetEvent
ResetEvent
EnterCriticalSection
LocalFree
LocalAlloc
lstrcmpiW
GetCommandLineW
CreateMutexW
CreateEventW
LoadLibraryW
DeleteCriticalSection
FreeLibrary
ReleaseMutex
InterlockedCompareExchange
GetModuleHandleW
GetModuleFileNameW
Sleep
WaitForMultipleObjects
UnmapViewOfFile
lstrcmpW
MapViewOfFile
CreateFileMappingW
FlushViewOfFile
GetExitCodeProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
KERNEL32.dll
wsprintfW
CharNextW
LoadStringW
USER32.dll
NtQueryObject
ntdll.dll
OLEAUT32.dll
CoCreateInstance
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoFreeUnusedLibraries
ole32.dll
RegQueryValueExW
RegOpenKeyW
wcsrchr
_wcsicmp
_CxxThrowException
_wtol
realloc
_vsnwprintf
_wtoi
wcslen
wcscmp
wcschr
RegEnumValueW
ExpandEnvironmentStringsW
GetProcAddress
OpenProcess
SetLastError
OpenEventW
GetSystemDefaultLCID
WideCharToMultiByte
WriteFile
CreateFileW
CreateDirectoryW
DeleteFileW
MoveFileExW
GetLocaleInfoW
GetVersionExW
atol
iswspace
CoSetProxyBlanket
UnloadPerfCounterTextStringsW
LoadPerfCounterTextStringsW
loadperf.dll
?Throttle@@YGJKKKKK@Z
wbemcomn.dll
wcscoll
mbstowcs
wcspbrk
wcsstr
_wcsupr
_wcslwr
_wcsrev
memmove
vswprintf
iswdigit
wcsspn
wcscspn
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegEnumKeyA
RegEnumKeyW
RegEnumValueA
RegOpenCurrentUser
GetVersionExA
MultiByteToWideChar
lstrlenA
FormatMessageA
FormatMessageW
WmiApSrv.exe
??0CHPtrArray@@QAE@XZ
??0CHString@@QAE@ABV0@@Z
??0CHString@@QAE@GH@Z
??0CHString@@QAE@PBD@Z
??0CHString@@QAE@PBE@Z
??0CHString@@QAE@PBG@Z
??0CHString@@QAE@PBGH@Z
??0CHString@@QAE@XZ
??0CHStringArray@@QAE@XZ
??0CRegistry@@QAE@ABV0@@Z
??0CRegistry@@QAE@XZ
??0CRegistrySearch@@QAE@ABV0@@Z
??0CRegistrySearch@@QAE@XZ
??1CHPtrArray@@QAE@XZ
??1CHString@@QAE@XZ
??1CHStringArray@@QAE@XZ
??1CRegistry@@QAE@XZ
??1CRegistrySearch@@QAE@XZ
??4CHPtrArray@@QAEAAV0@ABV0@@Z
??4CHString@@QAEABV0@ABV0@@Z
??4CHString@@QAEABV0@D@Z
??4CHString@@QAEABV0@G@Z
??4CHString@@QAEABV0@PAV0@@Z
??4CHString@@QAEABV0@PBD@Z
??4CHString@@QAEABV0@PBE@Z
??4CHString@@QAEABV0@PBG@Z
??4CHStringArray@@QAEAAV0@ABV0@@Z
??4CRegistry@@QAEAAV0@ABV0@@Z
??4CRegistrySearch@@QAEAAV0@ABV0@@Z
??ACHPtrArray@@QAEAAPAXH@Z
??ACHPtrArray@@QBEPAXH@Z
??ACHString@@QBEGH@Z
??ACHStringArray@@QAEAAVCHString@@H@Z
??ACHStringArray@@QBE?AVCHString@@H@Z
??BCHString@@QBEPBGXZ
??H@YG?AVCHString@@ABV0@0@Z
??H@YG?AVCHString@@ABV0@G@Z
??H@YG?AVCHString@@ABV0@PBG@Z
??H@YG?AVCHString@@GABV0@@Z
??H@YG?AVCHString@@PBGABV0@@Z
??YCHString@@QAEABV0@ABV0@@Z
??YCHString@@QAEABV0@D@Z
??YCHString@@QAEABV0@G@Z
??YCHString@@QAEABV0@PBG@Z
?Add@CHPtrArray@@QAEHPAX@Z
?Add@CHStringArray@@QAEHPBG@Z
?AllocBeforeWrite@CHString@@IAEXH@Z
?AllocBuffer@CHString@@IAEXH@Z
?AllocCopy@CHString@@IBEXAAV1@HHH@Z
?AllocSysString@CHString@@QBEPAGXZ
?Append@CHPtrArray@@QAEHABV1@@Z
?Append@CHStringArray@@QAEHABV1@@Z
?AssignCopy@CHString@@IAEXHPBG@Z
?CheckAndAddToList@CRegistrySearch@@AAEXPAVCRegistry@@VCHString@@1AAVCHPtrArray@@11H@Z
?Close@CRegistry@@QAEXXZ
?CloseSubKey@CRegistry@@AAEXXZ
?Collate@CHString@@QBEHPBG@Z
?Compare@CHString@@QBEHPBG@Z
?CompareNoCase@CHString@@QBEHPBG@Z
?ConcatCopy@CHString@@IAEXHPBGH0@Z
?ConcatInPlace@CHString@@IAEXHPBG@Z
?Copy@CHPtrArray@@QAEXABV1@@Z
?Copy@CHStringArray@@QAEXABV1@@Z
?CopyBeforeWrite@CHString@@IAEXXZ
?CreateOpen@CRegistry@@QAEJPAUHKEY__@@PBGPAGKKPAU_SECURITY_ATTRIBUTES@@PAK@Z
?DeleteCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBG@Z
?DeleteCurrentKeyValue@CRegistry@@QAEKPBG@Z
?DeleteKey@CRegistry@@QAEJPAVCHString@@@Z
?DeleteValue@CRegistry@@QAEJPBG@Z
?ElementAt@CHPtrArray@@QAEAAPAXH@Z
?ElementAt@CHStringArray@@QAEAAVCHString@@H@Z
?Empty@CHString@@QAEXXZ
?EnumerateAndGetValues@CRegistry@@QAEJAAKAAPAGAAPAE@Z
?Find@CHString@@QBEHG@Z
?Find@CHString@@QBEHPBG@Z
?FindOneOf@CHString@@QBEHPBG@Z
?Format@CHString@@QAAXIZZ
?Format@CHString@@QAAXPBGZZ
?FormatMessageW@CHString@@QAAXIZZ
?FormatMessageW@CHString@@QAAXPBGZZ
?FormatV@CHString@@QAEXPBGPAD@Z
?FreeExtra@CHPtrArray@@QAEXXZ
?FreeExtra@CHString@@QAEXXZ
?FreeExtra@CHStringArray@@QAEXXZ
?FreeSearchList@CRegistrySearch@@QAEHHAAVCHPtrArray@@@Z
?GetAllocLength@CHString@@QBEHXZ
?GetAt@CHPtrArray@@QBEPAXH@Z
?GetAt@CHString@@QBEGH@Z
?GetAt@CHStringArray@@QBE?AVCHString@@H@Z
?GetBuffer@CHString@@QAEPAGH@Z
?GetBufferSetLength@CHString@@QAEPAGH@Z
?GetClassNameW@CRegistry@@QAEPAGXZ
?GetCurrentBinaryKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGPAEPAK@Z
?GetCurrentBinaryKeyValue@CRegistry@@QAEKPBGAAVCHString@@@Z
?GetCurrentBinaryKeyValue@CRegistry@@QAEKPBGPAEPAK@Z
?GetCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGAAK@Z
?GetCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGAAVCHString@@@Z
?GetCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGAAVCHStringArray@@@Z
?GetCurrentKeyValue@CRegistry@@QAEKPBGAAK@Z
?GetCurrentKeyValue@CRegistry@@QAEKPBGAAVCHString@@@Z
?GetCurrentKeyValue@CRegistry@@QAEKPBGAAVCHStringArray@@@Z
?GetCurrentRawKeyValue@CRegistry@@AAEKPAUHKEY__@@PBGPAXPAK3@Z
?GetCurrentRawSubKeyValue@CRegistry@@AAEKPBGPAXPAK2@Z
?GetCurrentSubKeyCount@CRegistry@@QAEKXZ
?GetCurrentSubKeyName@CRegistry@@QAEKAAVCHString@@@Z
?GetCurrentSubKeyPath@CRegistry@@QAEKAAVCHString@@@Z
?GetCurrentSubKeyValue@CRegistry@@QAEKPBGAAK@Z
?GetCurrentSubKeyValue@CRegistry@@QAEKPBGAAVCHString@@@Z
?GetCurrentSubKeyValue@CRegistry@@QAEKPBGPAXPAK@Z
?GetData@CHPtrArray@@QAEPAPAXXZ
?GetData@CHPtrArray@@QBEPAPBXXZ
?GetData@CHString@@IBEPAUCHStringData@@XZ
?GetData@CHStringArray@@QAEPAVCHString@@XZ
?GetData@CHStringArray@@QBEPBVCHString@@XZ
?GetLength@CHString@@QBEHXZ
?GetLongestClassStringSize@CRegistry@@QAEKXZ
?GetLongestSubKeySize@CRegistry@@QAEKXZ
?GetLongestValueData@CRegistry@@QAEKXZ
?GetLongestValueName@CRegistry@@QAEKXZ
?GetPlatformID@CRegistry@@CGKXZ
?GetSize@CHPtrArray@@QBEHXZ
?GetSize@CHStringArray@@QBEHXZ
?GetUpperBound@CHPtrArray@@QBEHXZ
?GetUpperBound@CHStringArray@@QBEHXZ
?GetValueCount@CRegistry@@QAEKXZ
?GethKey@CRegistry@@QAEPAUHKEY__@@XZ
?Init@CHString@@IAEXXZ
?InsertAt@CHPtrArray@@QAEXHPAV1@@Z
?InsertAt@CHPtrArray@@QAEXHPAXH@Z
?InsertAt@CHStringArray@@QAEXHPAV1@@Z
?InsertAt@CHStringArray@@QAEXHPBGH@Z
?IsEmpty@CHString@@QBEHXZ
?Left@CHString@@QBE?AV1@H@Z
?LoadStringW@CHString@@IAEHIPAGI@Z
?LoadStringW@CHString@@QAEHI@Z
?LocateKeyByNameOrValueName@CRegistrySearch@@QAEHPAUHKEY__@@PBG1PAPBGKAAVCHString@@3@Z
?LockBuffer@CHString@@QAEPAGXZ
?MakeLower@CHString@@QAEXXZ
?MakeReverse@CHString@@QAEXXZ
?MakeUpper@CHString@@QAEXXZ
?Mid@CHString@@QBE?AV1@H@Z
?Mid@CHString@@QBE?AV1@HH@Z
?NextSubKey@CRegistry@@QAEKXZ
?Open@CRegistry@@QAEJPAUHKEY__@@PBGK@Z
?OpenAndEnumerateSubKeys@CRegistry@@QAEJPAUHKEY__@@PBGK@Z
?OpenCurrentUser@CRegistry@@QAEKPBGK@Z
?OpenLocalMachineKeyAndReadValue@CRegistry@@QAEJPBG0AAVCHString@@@Z
?OpenSubKey@CRegistry@@AAEKXZ
?PrepareToReOpen@CRegistry@@AAEXXZ
?Release@CHString@@IAEXXZ
?Release@CHString@@KGXPAUCHStringData@@@Z
?ReleaseBuffer@CHString@@QAEXH@Z
?RemoveAll@CHPtrArray@@QAEXXZ
?RemoveAll@CHStringArray@@QAEXXZ
?RemoveAt@CHPtrArray@@QAEXHH@Z
?RemoveAt@CHStringArray@@QAEXHH@Z
?ReverseFind@CHString@@QBEHG@Z
?RewindSubKeys@CRegistry@@QAEXXZ
?Right@CHString@@QBE?AV1@H@Z
?SafeStrlen@CHString@@KGHPBG@Z
?SearchAndBuildList@CRegistrySearch@@QAEHVCHString@@AAVCHPtrArray@@00HPAUHKEY__@@@Z
?SetAt@CHPtrArray@@QAEXHPAX@Z
?SetAt@CHString@@QAEXHG@Z
?SetAt@CHStringArray@@QAEXHPBG@Z
?SetAtGrow@CHPtrArray@@QAEXHPAX@Z
?SetAtGrow@CHStringArray@@QAEXHPBG@Z
?SetCHStringResourceHandle@@YGXPAUHINSTANCE__@@@Z
?SetCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGAAK@Z
?SetCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGAAVCHString@@@Z
?SetCurrentKeyValue@CRegistry@@QAEKPAUHKEY__@@PBGAAVCHStringArray@@@Z
?SetCurrentKeyValue@CRegistry@@QAEKPBGAAK@Z
?SetCurrentKeyValue@CRegistry@@QAEKPBGAAVCHString@@@Z
?SetCurrentKeyValue@CRegistry@@QAEKPBGAAVCHStringArray@@@Z
?SetCurrentKeyValueExpand@CRegistry@@QAEKPAUHKEY__@@PBGAAVCHString@@@Z
?SetDefaultValues@CRegistry@@AAEXXZ
?SetSize@CHPtrArray@@QAEXHH@Z
?SetSize@CHStringArray@@QAEXHH@Z
?SpanExcluding@CHString@@QBE?AV1@PBG@Z
?SpanIncluding@CHString@@QBE?AV1@PBG@Z
?TrimLeft@CHString@@QAEXXZ
?TrimRight@CHString@@QAEXXZ
?UnlockBuffer@CHString@@QAEXXZ
?myRegCreateKeyEx@CRegistry@@AAEJPAUHKEY__@@PBGKPAGKKPAU_SECURITY_ATTRIBUTES@@PAPAU2@PAK@Z
?myRegDeleteKey@CRegistry@@AAEJPAUHKEY__@@PBG@Z
?myRegDeleteValue@CRegistry@@AAEJPAUHKEY__@@PBG@Z
?myRegEnumKey@CRegistry@@AAEJPAUHKEY__@@KPAGK@Z
?myRegEnumValue@CRegistry@@AAEJPAUHKEY__@@KPAGPAK22PAE2@Z
?myRegOpenKeyEx@CRegistry@@AAEJPAUHKEY__@@PBGKKPAPAU2@@Z
?myRegQueryInfoKey@CRegistry@@AAEJPAUHKEY__@@PAGPAK22222222PAU_FILETIME@@@Z
?myRegQueryValueEx@CRegistry@@AAEJPAUHKEY__@@PBGPAK2PAE2@Z
?myRegSetValueEx@CRegistry@@AAEJPAUHKEY__@@PBGKKPBEK@Z
?s_dwPlatform@CRegistry@@0KA
.?AV?$__Wrapper@VWmiReverseGuard@@@@
.?AVWmiReverseGuard@@
.?AV?$__WrapperPtr@VWmiReverseGuard@@@@
.?AV?$WmiMemory@VWmiReverseGuard@@@@
.?AVCPerformanceEventLogBase@@
.?AV?$__HANDLE@PAX@@
.?AV?$__HANDLE@PAUSC_HANDLE__@@@@
.?AV__SmartHANDLE@@
.?AV__SmartServiceHANDLE@@
.?AV?$__Wrapper@U_SECURITY_ATTRIBUTES@@@@
.?AV?$__Wrapper@VWmiSecurity@@@@
.?AV?$__Wrapper@VCPerformanceEventLogBase@@@@
.?AV?$__Wrapper@VWmiAdapterStuff@@@@
.?AV?$__Wrapper@VWmiSecurityAttributes@@@@
.?AV?$__WrapperPtr@U_SECURITY_ATTRIBUTES@@@@
.?AV?$__WrapperPtr@VWmiSecurity@@@@
.?AV?$__WrapperPtr@VCPerformanceEventLogBase@@@@
.?AV?$__WrapperPtr@VWmiAdapterStuff@@@@
.?AV?$__WrapperPtr@VWmiSecurityAttributes@@@@
.?AVWmiPerformanceDataExt@@
.?AV?$__Wrapper@U_WMI_PERFORMANCE@@@@
.?AV?$__Wrapper@PAV?$WmiMemory@VWmiReverseGuard@@@@@@
.?AV?$__Wrapper@PAV?$WmiReverseMemoryExt@VWmiReverseGuard@@@@@@
.?AV?$__Wrapper@PAV?$WmiRefresherMember@UIWbemHiPerfEnum@@@@@@
.?AV?$__Wrapper@PAVWmiRefreshObject@@@@
.?AV?$__WrapperPtr@U_WMI_PERFORMANCE@@@@
.?AV?$__WrapperARRAY@PAV?$WmiMemory@VWmiReverseGuard@@@@@@
.?AV?$__WrapperARRAY@PAV?$WmiReverseMemoryExt@VWmiReverseGuard@@@@@@
.?AV?$__WrapperARRAY@PAVWmiRefreshObject@@@@
.?AV?$__WrapperARRAY@PAV?$WmiRefresherMember@UIWbemHiPerfEnum@@@@@@
.?AV?$WmiMemoryExt@V?$WmiMemory@VWmiReverseGuard@@@@@@
.?AV?$WmiMemoryExt@V?$WmiReverseMemoryExt@VWmiReverseGuard@@@@@@
.?AVWmiPerformanceData@@
.?AV?$WmiReverseMemory@X@@

.?AV?$WmiReverseMemoryExt@VWmiReverseGuard@@@@
.?AVCObjectGlobal@@
.?AVCL