Leaked source code of windows server 2003
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

3934 lines
252 KiB

  1. PROTECT_FILE_ENTRY EntFiles[] =
  2. {
  3. {L"wAcGenral.dll", L"%systemroot%\\AppPatch\\AcGenral.dll", NULL},
  4. {L"wAcLayers.dll", L"%systemroot%\\AppPatch\\AcLayers.dll", NULL},
  5. {L"wAcSpecfc.dll", L"%systemroot%\\AppPatch\\AcSpecfc.dll", NULL},
  6. {L"wAcXtrnal.dll", L"%systemroot%\\AppPatch\\AcXtrnal.dll", NULL},
  7. {NULL, L"%systemroot%\\system32\\admwprox.dll", L"iis.inf"},
  8. {NULL, L"%systemroot%\\system32\\inetsrv\\adsiis.dll", L"iis.inf"},
  9. {NULL, L"%systemroot%\\system32\\ahui.exe", NULL},
  10. {L"wahui.exe", L"%systemroot%\\SysWOW64\\ahui.exe", NULL},
  11. {NULL, L"%systemroot%\\system32\\apphelp.dll", NULL},
  12. {L"wapphelp.dll", L"%systemroot%\\SysWOW64\\apphelp.dll", NULL},
  13. {L"wapphelp.sdb", L"%systemroot%\\AppPatch\\apphelp.sdb", NULL},
  14. {NULL, L"%systemroot%\\help\\apps.chm", NULL},
  15. {NULL, L"%systemroot%\\system32\\asycfilt.dll", NULL},
  16. {L"wasycfilt.dll", L"%systemroot%\\SysWOW64\\asycfilt.dll", NULL},
  17. {NULL, L"%systemroot%\\system32\\atmlib.dll", NULL},
  18. {L"watmlib.dll", L"%systemroot%\\SysWOW64\\atmlib.dll", NULL},
  19. {NULL, L"%systemroot%\\system32\\inetsrv\\CertMap.ocx", L"iis.inf"},
  20. {NULL, L"%systemroot%\\system32\\inetsrv\\CertWiz.ocx", L"iis.inf"},
  21. {NULL, L"%systemroot%\\system32\\cfgmgr32.dll", NULL},
  22. {L"wcfgmgr32.dll", L"%systemroot%\\SysWOW64\\cfgmgr32.dll", NULL},
  23. {NULL, L"%systemroot%\\system32\\inetsrv\\Cnfgprts.ocx", L"iis.inf"},
  24. {NULL, L"%systemroot%\\system32\\inetsrv\\coadmin.dll", L"iis.inf"},
  25. {NULL, L"%systemroot%\\system32\\comctl32.dll", NULL},
  26. {L"wcomctl32.dll", L"%systemroot%\\SysWOW64\\comctl32.dll", NULL},
  27. {NULL, L"%systemroot%\\system32\\comdlg32.dll", NULL},
  28. {L"wcomdlg32.dll", L"%systemroot%\\SysWOW64\\comdlg32.dll", NULL},
  29. {NULL, L"%systemroot%\\system32\\compatUI.dll", NULL},
  30. {L"wcompatUI.dll", L"%systemroot%\\SysWOW64\\compatUI.dll", NULL},
  31. {NULL, L"%systemroot%\\system32\\crypt32.dll", NULL},
  32. {L"wcrypt32.dll", L"%systemroot%\\SysWOW64\\crypt32.dll", NULL},
  33. {NULL, L"%systemroot%\\system32\\cryptdlg.dll", NULL},
  34. {L"wcryptdlg.dll", L"%systemroot%\\SysWOW64\\cryptdlg.dll", NULL},
  35. {NULL, L"%systemroot%\\system32\\cryptdll.dll", NULL},
  36. {L"wcryptdll.dll", L"%systemroot%\\SysWOW64\\cryptdll.dll", NULL},
  37. {NULL, L"%systemroot%\\system32\\cryptext.dll", NULL},
  38. {L"wcryptext.dll", L"%systemroot%\\SysWOW64\\cryptext.dll", NULL},
  39. {NULL, L"%systemroot%\\system32\\cryptnet.dll", NULL},
  40. {L"wcryptnet.dll", L"%systemroot%\\SysWOW64\\cryptnet.dll", NULL},
  41. {NULL, L"%systemroot%\\system32\\cryptsvc.dll", NULL},
  42. {L"wcryptsvc.dll", L"%systemroot%\\SysWOW64\\cryptsvc.dll", NULL},
  43. {NULL, L"%systemroot%\\system32\\cryptui.dll", NULL},
  44. {L"wcryptui.dll", L"%systemroot%\\SysWOW64\\cryptui.dll", NULL},
  45. {NULL, L"%systemroot%\\system32\\dispex.dll", NULL},
  46. {L"wdispex.dll", L"%systemroot%\\SysWOW64\\dispex.dll", NULL},
  47. {NULL, L"%systemroot%\\fonts\\dosapp.fon", NULL},
  48. {NULL, L"%systemroot%\\AppPatch\\ia64\\drvmain.sdb", NULL},
  49. {L"wdrvmain.sdb", L"%systemroot%\\AppPatch\\drvmain.sdb", NULL},
  50. {NULL, L"%systemroot%\\system32\\dssenh.dll", NULL},
  51. {L"wdssenh.dll", L"%systemroot%\\SysWOW64\\dssenh.dll", NULL},
  52. {NULL, L"%systemroot%\\system32\\drivers\\fastfat.sys", NULL},
  53. {NULL, L"%systemroot%\\fonts\\framd.ttf", NULL},
  54. {NULL, L"%systemroot%\\fonts\\framdit.ttf", NULL},
  55. {NULL, L"%systemroot%\\system32\\inetsrv\\iisext.dll", L"iis.inf"},
  56. {NULL, L"%systemroot%\\system32\\iismap.dll", L"iis.inf"},
  57. {NULL, L"%systemroot%\\system32\\iisreset.exe", L"iis.inf"},
  58. {NULL, L"%systemroot%\\system32\\iisrstap.dll", L"iis.inf"},
  59. {NULL, L"%systemroot%\\system32\\inetsrv\\iisrstas.exe", L"iis.inf"},
  60. {NULL, L"%systemroot%\\system32\\iisRtl.dll", L"iis.inf"},
  61. {NULL, L"%systemroot%\\system32\\inetsrv\\iisui.dll", L"iis.inf"},
  62. {NULL, L"%systemroot%\\system32\\imeshare.dll", NULL},
  63. {L"wimeshare.dll", L"%systemroot%\\SysWOW64\\imeshare.dll", NULL},
  64. {NULL, L"%systemroot%\\system32\\inetsrv\\inetmgr.dll", L"iis.inf"},
  65. {NULL, L"%systemroot%\\system32\\inetsrv\\inetmgr.exe", L"iis.inf"},
  66. {NULL, L"%systemroot%\\system32\\infoadmn.dll", L"iis.inf"},
  67. {NULL, L"%systemroot%\\system32\\drivers\\ipsec.sys", NULL},
  68. {NULL, L"%systemroot%\\system32\\inetsrv\\isatq.dll", L"iis.inf"},
  69. {NULL, L"%systemroot%\\system32\\itircl.dll", NULL},
  70. {L"witircl.dll", L"%systemroot%\\SysWOW64\\itircl.dll", NULL},
  71. {NULL, L"%systemroot%\\system32\\itss.dll", NULL},
  72. {L"witss.dll", L"%systemroot%\\SysWOW64\\itss.dll", NULL},
  73. {NULL, L"%systemroot%\\system32\\jscript.dll", NULL},
  74. {L"wjscript.dll", L"%systemroot%\\SysWOW64\\jscript.dll", NULL},
  75. {NULL, L"%systemroot%\\system32\\jsproxy.dll", NULL},
  76. {L"wjsproxy.dll", L"%systemroot%\\SysWOW64\\jsproxy.dll", NULL},
  77. {NULL, L"%systemroot%\\system32\\kernel32.dll", NULL},
  78. {L"wkernel32.dll", L"%systemroot%\\SysWOW64\\kernel32.dll", NULL},
  79. {NULL, L"%systemroot%\\system32\\inetsrv\\logui.ocx", L"iis.inf"},
  80. {NULL, L"%systemroot%\\system32\\lsasrv.dll", NULL},
  81. {NULL, L"%systemroot%\\fonts\\marlett.ttf", NULL},
  82. {L"wmfc40.dll", L"%systemroot%\\SysWOW64\\mfc40.dll", NULL},
  83. {L"wmfc40u.dll", L"%systemroot%\\SysWOW64\\mfc40u.dll", NULL},
  84. {NULL, L"%systemroot%\\system32\\mfc42.dll", NULL},
  85. {L"wmfc42.dll", L"%systemroot%\\SysWOW64\\mfc42.dll", NULL},
  86. {NULL, L"%systemroot%\\system32\\mfc42u.dll", NULL},
  87. {L"wmfc42u.dll", L"%systemroot%\\SysWOW64\\mfc42u.dll", NULL},
  88. {NULL, L"%systemroot%\\system32\\mfcsubs.dll", NULL},
  89. {L"wmfcsubs.dll", L"%systemroot%\\SysWOW64\\mfcsubs.dll", NULL},
  90. {NULL, L"%systemroot%\\fonts\\micross.ttf", NULL},
  91. {NULL, L"%systemroot%\\fonts\\modern.fon", NULL},
  92. {L"wmsimain.sdb", L"%systemroot%\\AppPatch\\msimain.sdb", NULL},
  93. {NULL, L"%systemroot%\\system32\\mssip32.dll", NULL},
  94. {L"wmssip32.dll", L"%systemroot%\\SysWOW64\\mssip32.dll", NULL},
  95. {NULL, L"%systemroot%\\system32\\msvcrt.dll", NULL},
  96. {L"wmsvcrt.dll", L"%systemroot%\\SysWOW64\\msvcrt.dll", NULL},
  97. {L"wmsvcrt40.dll", L"%systemroot%\\SysWOW64\\msvcrt40.dll", NULL},
  98. {NULL, L"%systemroot%\\system32\\drivers\\ndiswan.sys", NULL},
  99. {NULL, L"%systemroot%\\system32\\netapi32.dll", NULL},
  100. {L"wnetapi32.dll", L"%systemroot%\\SysWOW64\\netapi32.dll", NULL},
  101. {NULL, L"%systemroot%\\system32\\inetsrv\\nntpadm.dll", L"ins.inf"},
  102. {NULL, L"%systemroot%\\system32\\inetsrv\\nntpsnap.dll", L"ins.inf"},
  103. {NULL, L"%systemroot%\\system32\\ntdll.dll", NULL},
  104. {L"wntdll.dll", L"%systemroot%\\SysWOW64\\ntdll.dll", NULL},
  105. {NULL, L"%systemroot%\\system32\\drivers\\ntfs.sys", NULL},
  106. {L"ntkrnlmp.exe", L"%systemroot%\\system32\\ntoskrnl.exe", NULL},
  107. {NULL, L"%systemroot%\\system32\\ocmanage.dll", NULL},
  108. {L"wocmanage.dll", L"%systemroot%\\SysWOW64\\ocmanage.dll", NULL},
  109. {NULL, L"%systemroot%\\system32\\odbccp32.dll", NULL},
  110. {L"wodbccp32.dll", L"%systemroot%\\SysWOW64\\odbccp32.dll", NULL},
  111. {L"wodtext32.dll", L"%systemroot%\\SysWOW64\\odtext32.dll", NULL},
  112. {NULL, L"%systemroot%\\system32\\ole32.dll", NULL},
  113. {L"wole32.dll", L"%systemroot%\\SysWOW64\\ole32.dll", NULL},
  114. {NULL, L"%systemroot%\\system32\\oleaut32.dll", NULL},
  115. {L"woleaut32.dll", L"%systemroot%\\SysWOW64\\oleaut32.dll", NULL},
  116. {L"wolepro32.dll", L"%systemroot%\\SysWOW64\\olepro32.dll", NULL},
  117. {NULL, L"%systemroot%\\system32\\riched20.dll", NULL},
  118. {L"wriched20.dll", L"%systemroot%\\SysWOW64\\riched20.dll", NULL},
  119. {NULL, L"%systemroot%\\system32\\riched32.dll", NULL},
  120. {L"wriched32.dll", L"%systemroot%\\SysWOW64\\riched32.dll", NULL},
  121. {NULL, L"%systemroot%\\system32\\rsaenh.dll", NULL},
  122. {L"wrsaenh.dll", L"%systemroot%\\SysWOW64\\rsaenh.dll", NULL},
  123. {NULL, L"%systemroot%\\system32\\samlib.dll", NULL},
  124. {L"wsamlib.dll", L"%systemroot%\\SysWOW64\\samlib.dll", NULL},
  125. {NULL, L"%systemroot%\\system32\\samsrv.dll", NULL},
  126. {NULL, L"%systemroot%\\system32\\schannel.dll", NULL},
  127. {L"wschannel.dll", L"%systemroot%\\SysWOW64\\schannel.dll", NULL},
  128. {NULL, L"%systemroot%\\fonts\\script.fon", NULL},
  129. {NULL, L"%systemroot%\\system32\\scrobj.dll", NULL},
  130. {L"wscrobj.dll", L"%systemroot%\\SysWOW64\\scrobj.dll", NULL},
  131. {NULL, L"%systemroot%\\system32\\scrrun.dll", NULL},
  132. {L"wscrrun.dll", L"%systemroot%\\SysWOW64\\scrrun.dll", NULL},
  133. {NULL, L"%systemroot%\\system32\\sdbinst.exe", NULL},
  134. {L"wsdbinst.exe", L"%systemroot%\\SysWOW64\\sdbinst.exe", NULL},
  135. {NULL, L"%systemroot%\\system32\\setupapi.dll", NULL},
  136. {L"wsetupapi.dll", L"%systemroot%\\SysWOW64\\setupapi.dll", NULL},
  137. {NULL, L"%systemroot%\\system32\\sfc.dll", NULL},
  138. {L"wsfc.dll", L"%systemroot%\\SysWOW64\\sfc.dll", NULL},
  139. {NULL, L"%systemroot%\\system32\\sfc.exe", NULL},
  140. {L"wsfc.exe", L"%systemroot%\\SysWOW64\\sfc.exe", NULL},
  141. {NULL, L"%systemroot%\\system32\\sfcfiles.dll", NULL},
  142. {L"wsfcfiles.dll", L"%systemroot%\\SysWOW64\\sfcfiles.dll", NULL},
  143. {NULL, L"%systemroot%\\system32\\shimeng.dll", NULL},
  144. {L"wshimeng.dll", L"%systemroot%\\SysWOW64\\shimeng.dll", NULL},
  145. {NULL, L"%systemroot%\\system32\\slayerxp.dll", NULL},
  146. {L"wslayerxp.dll", L"%systemroot%\\SysWOW64\\slayerxp.dll", NULL},
  147. {NULL, L"%systemroot%\\system32\\inetsrv\\smtpadm.dll", L"ims.inf"},
  148. {NULL, L"%systemroot%\\system32\\inetsrv\\smtpsnap.dll", L"ims.inf"},
  149. {NULL, L"%systemroot%\\system32\\staxmem.dll", L"iis.inf"},
  150. {NULL, L"%systemroot%\\system32\\stdole2.tlb", NULL},
  151. {L"wstdole2.tlb", L"%systemroot%\\SysWOW64\\stdole2.tlb", NULL},
  152. {NULL, L"%systemroot%\\AppPatch\\ia64\\sysmain.sdb", NULL},
  153. {L"wsysmain.sdb", L"%systemroot%\\AppPatch\\sysmain.sdb", NULL},
  154. {NULL, L"%systemroot%\\system32\\sysocmgr.exe", NULL},
  155. {L"wsysocmgr.exe", L"%systemroot%\\SysWOW64\\sysocmgr.exe", NULL},
  156. {NULL, L"%systemroot%\\fonts\\tahoma.ttf", NULL},
  157. {NULL, L"%systemroot%\\fonts\\tahomabd.ttf", NULL},
  158. {NULL, L"%systemroot%\\twunk_16.exe", NULL},
  159. {NULL, L"%systemroot%\\twunk_32.exe", NULL},
  160. {NULL, L"%systemroot%\\system32\\umpnpmgr.dll", NULL},
  161. {NULL, L"%systemroot%\\system32\\url.dll", NULL},
  162. {L"wurl.dll", L"%systemroot%\\SysWOW64\\url.dll", NULL},
  163. {NULL, L"%systemroot%\\system32\\urlmon.dll", NULL},
  164. {L"wurlmon.dll", L"%systemroot%\\SysWOW64\\urlmon.dll", NULL},
  165. {NULL, L"%systemroot%\\system32\\vbscript.dll", NULL},
  166. {L"wvbscript.dll", L"%systemroot%\\SysWOW64\\vbscript.dll", NULL},
  167. {NULL, L"%systemroot%\\fonts\\vgaoem.fon", NULL},
  168. {NULL, L"%systemroot%\\system32\\wamregps.dll", L"iis.inf"},
  169. {NULL, L"%systemroot%\\system32\\wininet.dll", NULL},
  170. {L"wwininet.dll", L"%systemroot%\\SysWOW64\\wininet.dll", NULL},
  171. {NULL, L"%systemroot%\\system32\\winlogon.exe", NULL},
  172. {NULL, L"%systemroot%\\system32\\wintrust.dll", NULL},
  173. {L"wwintrust.dll", L"%systemroot%\\SysWOW64\\wintrust.dll", NULL},
  174. {L"wasfsipc.dll", L"%systemroot%\\SysWOW64\\asfsipc.dll", NULL},
  175. {L"wdao360.dll", L"%commonprogramfiles(x86)%\\Microsoft Shared\\DAO\\dao360.dll", NULL},
  176. {L"wdrmclien.dll", L"%systemroot%\\SysWOW64\\drmclien.dll", NULL},
  177. {L"wdrmstor.dll", L"%systemroot%\\SysWOW64\\drmstor.dll", NULL},
  178. {NULL, L"%systemroot%\\system32\\ds32gt.dll", NULL},
  179. {L"wds32gt.dll", L"%systemroot%\\SysWOW64\\ds32gt.dll", NULL},
  180. {L"wdxmasf.dll", L"%systemroot%\\SysWOW64\\dxmasf.dll", NULL},
  181. {NULL, L"%systemroot%\\system32\\expsrv.dll", NULL},
  182. {L"wexpsrv.dll", L"%systemroot%\\SysWOW64\\expsrv.dll", NULL},
  183. {L"wlaprxy.dll", L"%systemroot%\\SysWOW64\\laprxy.dll", NULL},
  184. {L"wlogagent.exe", L"%systemroot%\\SysWOW64\\logagent.exe", NULL},
  185. {L"wmpg4ds32.ax", L"%systemroot%\\SysWOW64\\mpg4ds32.ax", NULL},
  186. {NULL, L"%commonprogramfiles%\\System\\msadc\\msadce.dll", NULL},
  187. {L"wmsadce.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msadce.dll", NULL},
  188. {NULL, L"%commonprogramfiles%\\System\\msadc\\msadcer.dll", NULL},
  189. {L"wmsadcer.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msadcer.dll", NULL},
  190. {NULL, L"%commonprogramfiles%\\System\\msadc\\msadcf.dll", NULL},
  191. {L"wmsadcf.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msadcf.dll", NULL},
  192. {NULL, L"%commonprogramfiles%\\System\\msadc\\msadcfr.dll", NULL},
  193. {L"wmsadcfr.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msadcfr.dll", NULL},
  194. {NULL, L"%commonprogramfiles%\\System\\msadc\\msadco.dll", NULL},
  195. {L"wmsadco.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msadco.dll", NULL},
  196. {NULL, L"%commonprogramfiles%\\System\\msadc\\msadcor.dll", NULL},
  197. {L"wmsadcor.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msadcor.dll", NULL},
  198. {NULL, L"%commonprogramfiles%\\System\\msadc\\msadcs.dll", NULL},
  199. {L"wmsadcs.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msadcs.dll", NULL},
  200. {NULL, L"%commonprogramfiles%\\System\\msadc\\msadds.dll", NULL},
  201. {L"wmsadds.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msadds.dll", NULL},
  202. {L"wmsadds32.ax", L"%systemroot%\\SysWOW64\\msadds32.ax", NULL},
  203. {NULL, L"%commonprogramfiles%\\System\\msadc\\msaddsr.dll", NULL},
  204. {L"wmsaddsr.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msaddsr.dll", NULL},
  205. {NULL, L"%commonprogramfiles%\\System\\ado\\msader15.dll", NULL},
  206. {L"wmsader15.dll", L"%commonprogramfiles(x86)%\\System\\ado\\msader15.dll", NULL},
  207. {NULL, L"%commonprogramfiles%\\System\\ado\\msado15.dll", NULL},
  208. {L"wmsado15.dll", L"%commonprogramfiles(x86)%\\System\\ado\\msado15.dll", NULL},
  209. {NULL, L"%commonprogramfiles%\\System\\ado\\msado20.tlb", NULL},
  210. {L"wmsado20.tlb", L"%commonprogramfiles(x86)%\\System\\ado\\msado20.tlb", NULL},
  211. {NULL, L"%commonprogramfiles%\\System\\ado\\msado21.tlb", NULL},
  212. {L"wmsado21.tlb", L"%commonprogramfiles(x86)%\\System\\ado\\msado21.tlb", NULL},
  213. {NULL, L"%commonprogramfiles%\\System\\ado\\msadomd.dll", NULL},
  214. {L"wmsadomd.dll", L"%commonprogramfiles(x86)%\\System\\ado\\msadomd.dll", NULL},
  215. {NULL, L"%commonprogramfiles%\\System\\ado\\msador15.dll", NULL},
  216. {L"wmsador15.dll", L"%commonprogramfiles(x86)%\\System\\ado\\msador15.dll", NULL},
  217. {NULL, L"%commonprogramfiles%\\System\\ado\\msadox.dll", NULL},
  218. {L"wmsadox.dll", L"%commonprogramfiles(x86)%\\System\\ado\\msadox.dll", NULL},
  219. {NULL, L"%commonprogramfiles%\\System\\ado\\msadrh15.dll", NULL},
  220. {L"wmsadrh15.dll", L"%commonprogramfiles(x86)%\\System\\ado\\msadrh15.dll", NULL},
  221. {L"wmscpxl32.dLL", L"%systemroot%\\SysWOW64\\mscpxl32.dLL", NULL},
  222. {L"wmsdadc.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdadc.dll", NULL},
  223. {L"wmsdaenum.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdaenum.dll", NULL},
  224. {L"wmsdaer.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdaer.dll", NULL},
  225. {L"wmsdaora.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdaora.dll", NULL},
  226. {NULL, L"%commonprogramfiles%\\System\\Ole DB\\msdaosp.dll", NULL},
  227. {L"wmsdaosp.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdaosp.dll", NULL},
  228. {NULL, L"%commonprogramfiles%\\System\\msadc\\msdaprsr.dll", NULL},
  229. {L"wmsdaprsr.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msdaprsr.dll", NULL},
  230. {NULL, L"%commonprogramfiles%\\System\\msadc\\msdaprst.dll", NULL},
  231. {L"wmsdaprst.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msdaprst.dll", NULL},
  232. {NULL, L"%commonprogramfiles%\\System\\Ole DB\\msdaps.dll", NULL},
  233. {L"wmsdaps.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdaps.dll", NULL},
  234. {NULL, L"%commonprogramfiles%\\System\\msadc\\msdarem.dll", NULL},
  235. {L"wmsdarem.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msdarem.dll", NULL},
  236. {NULL, L"%commonprogramfiles%\\System\\msadc\\msdaremr.dll", NULL},
  237. {L"wmsdaremr.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msdaremr.dll", NULL},
  238. {L"wmsdasc.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdasc.dll", NULL},
  239. {L"wmsdasql.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdasql.dll", NULL},
  240. {L"wmsdasqlr.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdasqlr.dll", NULL},
  241. {NULL, L"%systemroot%\\system32\\msdatsrc.tlb", NULL},
  242. {L"wmsdatsrc.tlb", L"%systemroot%\\SysWOW64\\msdatsrc.tlb", NULL},
  243. {L"wmsdatt.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdatt.dll", NULL},
  244. {L"wmsdaurl.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdaurl.dll", NULL},
  245. {NULL, L"%commonprogramfiles%\\System\\msadc\\msdfmap.dll", NULL},
  246. {L"wmsdfmap.dll", L"%commonprogramfiles(x86)%\\System\\msadc\\msdfmap.dll", NULL},
  247. {L"wmsdxm.ocx", L"%systemroot%\\SysWOW64\\msdxm.ocx", NULL},
  248. {L"wmsdxmlc.dll", L"%systemroot%\\SysWOW64\\msdxmlc.dll", NULL},
  249. {L"wmsexch40.dll", L"%systemroot%\\SysWOW64\\msexch40.dll", NULL},
  250. {L"wmsexcl40.dll", L"%systemroot%\\SysWOW64\\msexcl40.dll", NULL},
  251. {L"wmsjet40.dll", L"%systemroot%\\SysWOW64\\msjet40.dll", NULL},
  252. {L"wmsjint40.dll", L"%systemroot%\\SysWOW64\\msjint40.dll", NULL},
  253. {L"wmsjro.dll", L"%commonprogramfiles(x86)%\\System\\ado\\msjro.dll", NULL},
  254. {L"wmsjter40.dll", L"%systemroot%\\SysWOW64\\msjter40.dll", NULL},
  255. {L"wmsjtes40.dll", L"%systemroot%\\SysWOW64\\msjtes40.dll", NULL},
  256. {L"wmsltus40.dll", L"%systemroot%\\SysWOW64\\msltus40.dll", NULL},
  257. {L"wmsorcl32.dll", L"%systemroot%\\SysWOW64\\msorcl32.dll", NULL},
  258. {L"wmspbde40.dll", L"%systemroot%\\SysWOW64\\mspbde40.dll", NULL},
  259. {L"wmsrd2x40.dll", L"%systemroot%\\SysWOW64\\msrd2x40.dll", NULL},
  260. {L"wmsrd3x40.dll", L"%systemroot%\\SysWOW64\\msrd3x40.dll", NULL},
  261. {L"wmsrepl40.dll", L"%systemroot%\\SysWOW64\\msrepl40.dll", NULL},
  262. {L"wmstext40.dll", L"%systemroot%\\SysWOW64\\mstext40.dll", NULL},
  263. {L"wmswdat10.dll", L"%systemroot%\\SysWOW64\\mswdat10.dll", NULL},
  264. {L"wmswstr10.dll", L"%systemroot%\\SysWOW64\\mswstr10.dll", NULL},
  265. {NULL, L"%commonprogramfiles%\\System\\Ole DB\\msxactps.dll", NULL},
  266. {L"wmsxactps.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msxactps.dll", NULL},
  267. {L"wmsxbde40.dll", L"%systemroot%\\SysWOW64\\msxbde40.dll", NULL},
  268. {NULL, L"%systemroot%\\system32\\odbc32.dll", NULL},
  269. {L"wodbc32.dll", L"%systemroot%\\SysWOW64\\odbc32.dll", NULL},
  270. {NULL, L"%systemroot%\\system32\\odbc32gt.dll", NULL},
  271. {L"wodbc32gt.dll", L"%systemroot%\\SysWOW64\\odbc32gt.dll", NULL},
  272. {NULL, L"%systemroot%\\system32\\odbcad32.exe", NULL},
  273. {L"wodbcad32.exe", L"%systemroot%\\SysWOW64\\odbcad32.exe", NULL},
  274. {NULL, L"%systemroot%\\system32\\odbcconf.dll", NULL},
  275. {L"wodbcconf.dll", L"%systemroot%\\SysWOW64\\odbcconf.dll", NULL},
  276. {NULL, L"%systemroot%\\system32\\odbcconf.exe", NULL},
  277. {L"wodbcconf.exe", L"%systemroot%\\SysWOW64\\odbcconf.exe", NULL},
  278. {NULL, L"%systemroot%\\system32\\odbcconf.rsp", NULL},
  279. {L"wodbcconf.rsp", L"%systemroot%\\SysWOW64\\odbcconf.rsp", NULL},
  280. {NULL, L"%systemroot%\\system32\\odbccp32.cpl", NULL},
  281. {L"wodbccp32.cpl", L"%systemroot%\\SysWOW64\\odbccp32.cpl", NULL},
  282. {NULL, L"%systemroot%\\system32\\odbccr32.dll", NULL},
  283. {L"wodbccr32.dll", L"%systemroot%\\SysWOW64\\odbccr32.dll", NULL},
  284. {NULL, L"%systemroot%\\system32\\odbccu32.dll", NULL},
  285. {L"wodbccu32.dll", L"%systemroot%\\SysWOW64\\odbccu32.dll", NULL},
  286. {NULL, L"%systemroot%\\system32\\odbcint.dll", NULL},
  287. {L"wodbcint.dll", L"%systemroot%\\SysWOW64\\odbcint.dll", NULL},
  288. {L"wodbcji32.dll", L"%systemroot%\\SysWOW64\\odbcji32.dll", NULL},
  289. {L"wodbcjt32.dll", L"%systemroot%\\SysWOW64\\odbcjt32.dll", NULL},
  290. {NULL, L"%systemroot%\\system32\\odbctrac.dll", NULL},
  291. {L"wodbctrac.dll", L"%systemroot%\\SysWOW64\\odbctrac.dll", NULL},
  292. {L"woddbse32.dll", L"%systemroot%\\SysWOW64\\oddbse32.dll", NULL},
  293. {L"wodexl32.dll", L"%systemroot%\\SysWOW64\\odexl32.dll", NULL},
  294. {L"wodfox32.dll", L"%systemroot%\\SysWOW64\\odfox32.dll", NULL},
  295. {L"wodpdx32.dll", L"%systemroot%\\SysWOW64\\odpdx32.dll", NULL},
  296. {NULL, L"%commonprogramfiles%\\System\\Ole DB\\oledb32.dll", NULL},
  297. {L"woledb32.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\oledb32.dll", NULL},
  298. {NULL, L"%commonprogramfiles%\\System\\Ole DB\\oledb32r.dll", NULL},
  299. {L"woledb32r.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\oledb32r.dll", NULL},
  300. {L"wstrmdll.dll", L"%systemroot%\\SysWOW64\\strmdll.dll", NULL},
  301. {NULL, L"%systemroot%\\system32\\vbajet32.dll", NULL},
  302. {L"wvbajet32.dll", L"%systemroot%\\SysWOW64\\vbajet32.dll", NULL},
  303. {NULL, L"%systemroot%\\system32\\drivers\\1394bus.sys", NULL},
  304. {NULL, L"%systemroot%\\system32\\drivers\\4mmdat.sys", NULL},
  305. {NULL, L"%systemroot%\\system32\\6to4svc.dll", NULL},
  306. {L"w6to4svc.dll", L"%systemroot%\\SysWOW64\\6to4svc.dll", NULL},
  307. {L"w_isdel.exe", L"%systemroot%\\SysWOW64\\InstallShield\\_isdel.exe", NULL},
  308. {L"w_setup.dll", L"%systemroot%\\SysWOW64\\InstallShield\\_setup.dll", NULL},
  309. {NULL, L"%systemroot%\\system32\\aaaamon.dll", NULL},
  310. {L"waaaamon.dll", L"%systemroot%\\SysWOW64\\aaaamon.dll", NULL},
  311. {NULL, L"%systemroot%\\system32\\access.cpl", NULL},
  312. {NULL, L"%systemroot%\\system32\\acctres.dll", NULL},
  313. {NULL, L"%systemroot%\\system32\\accwiz.exe", NULL},
  314. {NULL, L"%systemroot%\\AppPatch\\ia64\\AcGen64.dll", NULL},
  315. {NULL, L"%systemroot%\\Application Compatibility Scripts\\aciniupd.exe", NULL},
  316. {NULL, L"%systemroot%\\system32\\acledit.dll", NULL},
  317. {L"wacledit.dll", L"%systemroot%\\SysWOW64\\acledit.dll", NULL},
  318. {L"wAcLua.dll", L"%systemroot%\\AppPatch\\AcLua.dll", NULL},
  319. {NULL, L"%systemroot%\\system32\\aclui.dll", NULL},
  320. {L"waclui.dll", L"%systemroot%\\SysWOW64\\aclui.dll", NULL},
  321. {NULL, L"%systemroot%\\system32\\drivers\\acpi.sys", NULL},
  322. {NULL, L"%systemroot%\\system32\\drivers\\acpiec.sys", NULL},
  323. {NULL, L"%systemroot%\\Application Compatibility Scripts\\acregl.exe", NULL},
  324. {NULL, L"%systemroot%\\Application Compatibility Scripts\\acsr.exe", NULL},
  325. {NULL, L"%systemroot%\\system32\\activeds.dll", NULL},
  326. {L"wactiveds.dll", L"%systemroot%\\SysWOW64\\activeds.dll", NULL},
  327. {NULL, L"%systemroot%\\system32\\activeds.tlb", NULL},
  328. {L"wactiveds.tlb", L"%systemroot%\\SysWOW64\\activeds.tlb", NULL},
  329. {NULL, L"%systemroot%\\system32\\actmovie.exe", NULL},
  330. {L"wactmovie.exe", L"%systemroot%\\SysWOW64\\actmovie.exe", NULL},
  331. {NULL, L"%systemroot%\\system32\\actxprxy.dll", NULL},
  332. {L"wactxprxy.dll", L"%systemroot%\\SysWOW64\\actxprxy.dll", NULL},
  333. {NULL, L"%systemroot%\\system32\\administration\\addusr.exe", NULL},
  334. {NULL, L"%systemroot%\\system32\\drivers\\adicsc.sys", NULL},
  335. {NULL, L"%systemroot%\\system32\\drivers\\adicvls.sys", NULL},
  336. {NULL, L"%systemroot%\\system32\\admparse.dll", NULL},
  337. {L"wadmparse.dll", L"%systemroot%\\SysWOW64\\admparse.dll", NULL},
  338. {NULL, L"%systemroot%\\system32\\adprop.dll", NULL},
  339. {L"wadprop.dll", L"%systemroot%\\SysWOW64\\adprop.dll", NULL},
  340. {NULL, L"%systemroot%\\system32\\adptif.dll", NULL},
  341. {L"wadptif.dll", L"%systemroot%\\SysWOW64\\adptif.dll", NULL},
  342. {NULL, L"%systemroot%\\system32\\drivers\\adptsf50.sys", NULL},
  343. {NULL, L"%systemroot%\\system32\\drivers\\adpu160m.sys", NULL},
  344. {NULL, L"%systemroot%\\system32\\drivers\\adpu320.sys", NULL},
  345. {NULL, L"%systemroot%\\system32\\inetsrv\\ADROT.dll", L"iis.inf"},
  346. {NULL, L"%systemroot%\\system32\\adsiisex.dll", L"ims.inf"},
  347. {NULL, L"%systemroot%\\system32\\adsldp.dll", NULL},
  348. {L"wadsldp.dll", L"%systemroot%\\SysWOW64\\adsldp.dll", NULL},
  349. {NULL, L"%systemroot%\\system32\\adsldpc.dll", NULL},
  350. {L"wadsldpc.dll", L"%systemroot%\\SysWOW64\\adsldpc.dll", NULL},
  351. {NULL, L"%systemroot%\\system32\\adsmsext.dll", NULL},
  352. {L"wadsmsext.dll", L"%systemroot%\\SysWOW64\\adsmsext.dll", NULL},
  353. {NULL, L"%systemroot%\\system32\\adsnt.dll", NULL},
  354. {L"wadsnt.dll", L"%systemroot%\\SysWOW64\\adsnt.dll", NULL},
  355. {NULL, L"%systemroot%\\system32\\advapi32.dll", NULL},
  356. {L"wadvapi32.dll", L"%systemroot%\\SysWOW64\\advapi32.dll", NULL},
  357. {NULL, L"%systemroot%\\system32\\advpack.dll", NULL},
  358. {L"wadvpack.dll", L"%systemroot%\\SysWOW64\\advpack.dll", NULL},
  359. {NULL, L"%systemroot%\\system32\\drivers\\aec.sys", NULL},
  360. {NULL, L"%systemroot%\\system32\\drivers\\afcnt.sys", NULL},
  361. {NULL, L"%systemroot%\\system32\\drivers\\afd.sys", NULL},
  362. {NULL, L"%systemroot%\\msagent64\\agentanm.dll", NULL},
  363. {L"wagentanm.dll", L"%systemroot%\\msagent\\agentanm.dll", NULL},
  364. {NULL, L"%systemroot%\\msagent64\\agentctl.dll", NULL},
  365. {L"wagentctl.dll", L"%systemroot%\\msagent\\agentctl.dll", NULL},
  366. {NULL, L"%systemroot%\\msagent64\\agentdp2.dll", NULL},
  367. {L"wagentdp2.dll", L"%systemroot%\\msagent\\agentdp2.dll", NULL},
  368. {NULL, L"%systemroot%\\msagent64\\agentdpv.dll", NULL},
  369. {L"wagentdpv.dll", L"%systemroot%\\msagent\\agentdpv.dll", NULL},
  370. {NULL, L"%systemroot%\\msagent64\\agentmpx.dll", NULL},
  371. {L"wagentmpx.dll", L"%systemroot%\\msagent\\agentmpx.dll", NULL},
  372. {NULL, L"%systemroot%\\msagent64\\agentpsh.dll", NULL},
  373. {L"wagentpsh.dll", L"%systemroot%\\msagent\\agentpsh.dll", NULL},
  374. {NULL, L"%systemroot%\\msagent64\\agentsr.dll", NULL},
  375. {L"wagentsr.dll", L"%systemroot%\\msagent\\agentsr.dll", NULL},
  376. {NULL, L"%systemroot%\\msagent64\\agentsvr.exe", NULL},
  377. {L"wagentsvr.exe", L"%systemroot%\\msagent\\agentsvr.exe", NULL},
  378. {NULL, L"%systemroot%\\system32\\drivers\\agp460.sys", NULL},
  379. {NULL, L"%systemroot%\\msagent\\intl\\agt0401.dll", L"intl.inf"},
  380. {L"wagt0401.dll", L"%systemroot%\\msagent\\intl\\agt0401.dll", L"intl.inf"},
  381. {NULL, L"%systemroot%\\msagent\\intl\\agt0404.dll", L"intl.inf"},
  382. {L"wagt0404.dll", L"%systemroot%\\msagent\\intl\\agt0404.dll", L"intl.inf"},
  383. {NULL, L"%systemroot%\\msagent\\intl\\agt0405.dll", NULL},
  384. {L"wagt0405.dll", L"%systemroot%\\msagent\\intl\\agt0405.dll", NULL},
  385. {NULL, L"%systemroot%\\msagent\\intl\\agt0406.dll", NULL},
  386. {L"wagt0406.dll", L"%systemroot%\\msagent\\intl\\agt0406.dll", NULL},
  387. {NULL, L"%systemroot%\\msagent\\intl\\agt0407.dll", NULL},
  388. {L"wagt0407.dll", L"%systemroot%\\msagent\\intl\\agt0407.dll", NULL},
  389. {NULL, L"%systemroot%\\msagent\\intl\\agt0408.dll", NULL},
  390. {L"wagt0408.dll", L"%systemroot%\\msagent\\intl\\agt0408.dll", NULL},
  391. {NULL, L"%systemroot%\\msagent64\\intl\\agt0409.dll", NULL},
  392. {L"wagt0409.dll", L"%systemroot%\\msagent\\intl\\agt0409.dll", NULL},
  393. {NULL, L"%systemroot%\\msagent\\intl\\agt040b.dll", NULL},
  394. {L"wagt040b.dll", L"%systemroot%\\msagent\\intl\\agt040b.dll", NULL},
  395. {NULL, L"%systemroot%\\msagent\\intl\\agt040c.dll", NULL},
  396. {L"wagt040c.dll", L"%systemroot%\\msagent\\intl\\agt040c.dll", NULL},
  397. {NULL, L"%systemroot%\\msagent\\intl\\agt040d.dll", L"intl.inf"},
  398. {L"wagt040d.dll", L"%systemroot%\\msagent\\intl\\agt040d.dll", L"intl.inf"},
  399. {NULL, L"%systemroot%\\msagent\\intl\\agt040e.dll", NULL},
  400. {L"wagt040e.dll", L"%systemroot%\\msagent\\intl\\agt040e.dll", NULL},
  401. {NULL, L"%systemroot%\\msagent\\intl\\agt0410.dll", NULL},
  402. {L"wagt0410.dll", L"%systemroot%\\msagent\\intl\\agt0410.dll", NULL},
  403. {NULL, L"%systemroot%\\msagent\\intl\\agt0411.dll", L"intl.inf"},
  404. {L"wagt0411.dll", L"%systemroot%\\msagent\\intl\\agt0411.dll", L"intl.inf"},
  405. {NULL, L"%systemroot%\\msagent\\intl\\agt0412.dll", L"intl.inf"},
  406. {L"wagt0412.dll", L"%systemroot%\\msagent\\intl\\agt0412.dll", L"intl.inf"},
  407. {NULL, L"%systemroot%\\msagent\\intl\\agt0413.dll", NULL},
  408. {L"wagt0413.dll", L"%systemroot%\\msagent\\intl\\agt0413.dll", NULL},
  409. {NULL, L"%systemroot%\\msagent\\intl\\agt0414.dll", NULL},
  410. {L"wagt0414.dll", L"%systemroot%\\msagent\\intl\\agt0414.dll", NULL},
  411. {NULL, L"%systemroot%\\msagent\\intl\\agt0415.dll", NULL},
  412. {L"wagt0415.dll", L"%systemroot%\\msagent\\intl\\agt0415.dll", NULL},
  413. {NULL, L"%systemroot%\\msagent\\intl\\agt0416.dll", NULL},
  414. {L"wagt0416.dll", L"%systemroot%\\msagent\\intl\\agt0416.dll", NULL},
  415. {NULL, L"%systemroot%\\msagent\\intl\\agt0419.dll", NULL},
  416. {L"wagt0419.dll", L"%systemroot%\\msagent\\intl\\agt0419.dll", NULL},
  417. {NULL, L"%systemroot%\\msagent\\intl\\agt041d.dll", NULL},
  418. {L"wagt041d.dll", L"%systemroot%\\msagent\\intl\\agt041d.dll", NULL},
  419. {NULL, L"%systemroot%\\msagent\\intl\\agt041f.dll", NULL},
  420. {L"wagt041f.dll", L"%systemroot%\\msagent\\intl\\agt041f.dll", NULL},
  421. {NULL, L"%systemroot%\\msagent\\intl\\agt0804.dll", L"intl.inf"},
  422. {L"wagt0804.dll", L"%systemroot%\\msagent\\intl\\agt0804.dll", L"intl.inf"},
  423. {NULL, L"%systemroot%\\msagent\\intl\\agt0816.dll", NULL},
  424. {L"wagt0816.dll", L"%systemroot%\\msagent\\intl\\agt0816.dll", NULL},
  425. {NULL, L"%systemroot%\\msagent\\intl\\agt0c0a.dll", NULL},
  426. {L"wagt0c0a.dll", L"%systemroot%\\msagent\\intl\\agt0c0a.dll", NULL},
  427. {NULL, L"%systemroot%\\msagent64\\agtctl15.tlb", NULL},
  428. {L"wagtctl15.tlb", L"%systemroot%\\msagent\\agtctl15.tlb", NULL},
  429. {NULL, L"%systemroot%\\msagent64\\agtintl.dll", NULL},
  430. {L"wagtintl.dll", L"%systemroot%\\msagent\\agtintl.dll", NULL},
  431. {NULL, L"%systemroot%\\system32\\drivers\\aic78u2.sys", NULL},
  432. {NULL, L"%systemroot%\\system32\\drivers\\aic78xx.sys", NULL},
  433. {NULL, L"%systemroot%\\system32\\alg.exe", NULL},
  434. {L"walg.exe", L"%systemroot%\\SysWOW64\\alg.exe", NULL},
  435. {NULL, L"%systemroot%\\system32\\drivers\\aliide.sys", NULL},
  436. {NULL, L"%systemroot%\\system32\\alrsvc.dll", NULL},
  437. {NULL, L"%systemroot%\\system32\\amstream.dll", NULL},
  438. {L"wamstream.dll", L"%systemroot%\\SysWOW64\\amstream.dll", NULL},
  439. {NULL, L"%systemroot%\\system32\\apcups.dll", NULL},
  440. {L"wapcups.dll", L"%systemroot%\\SysWOW64\\apcups.dll", NULL},
  441. {L"wappend.exe", L"%systemroot%\\SysWOW64\\append.exe", NULL},
  442. {NULL, L"%systemroot%\\system32\\appmgmts.dll", NULL},
  443. {L"wappmgmts.dll", L"%systemroot%\\SysWOW64\\appmgmts.dll", NULL},
  444. {NULL, L"%systemroot%\\system32\\appmgr.dll", NULL},
  445. {L"wappmgr.dll", L"%systemroot%\\SysWOW64\\appmgr.dll", NULL},
  446. {NULL, L"%systemroot%\\system32\\appwiz.cpl", NULL},
  447. {L"wappwiz.cpl", L"%systemroot%\\SysWOW64\\appwiz.cpl", NULL},
  448. {NULL, L"%systemroot%\\system32\\inetsrv\\aqadmin.dll", L"ims.inf"},
  449. {NULL, L"%systemroot%\\system32\\inetsrv\\aqueue.dll", L"ims.inf"},
  450. {NULL, L"%systemroot%\\system32\\arp.exe", NULL},
  451. {L"warp.exe", L"%systemroot%\\SysWOW64\\arp.exe", NULL},
  452. {NULL, L"%systemroot%\\system32\\drivers\\arp1394.sys", NULL},
  453. {NULL, L"%systemroot%\\system32\\asctrls.ocx", NULL},
  454. {L"wasctrls.ocx", L"%systemroot%\\SysWOW64\\asctrls.ocx", NULL},
  455. {L"wasferror.dll", L"%systemroot%\\SysWOW64\\asferror.dll", NULL},
  456. {NULL, L"%systemroot%\\system32\\inetsrv\\asp.dll", L"iis.inf"},
  457. {NULL, L"%systemroot%\\system32\\aspperf.dll", L"iis.inf"},
  458. {NULL, L"%systemroot%\\system32\\asr_fmt.exe", NULL},
  459. {NULL, L"%systemroot%\\system32\\asr_ldm.exe", NULL},
  460. {NULL, L"%systemroot%\\system32\\asr_pfu.exe", NULL},
  461. {L"wasr_pfu.exe", L"%systemroot%\\SysWOW64\\asr_pfu.exe", NULL},
  462. {NULL, L"%systemroot%\\system32\\drivers\\asyncmac.sys", NULL},
  463. {NULL, L"%systemroot%\\system32\\at.exe", NULL},
  464. {L"wat.exe", L"%systemroot%\\SysWOW64\\at.exe", NULL},
  465. {L"bhp001.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\atalk.dll", NULL},
  466. {NULL, L"%systemroot%\\system32\\drivers\\atapi.sys", NULL},
  467. {NULL, L"%systemroot%\\system32\\ati2draa.dll", NULL},
  468. {NULL, L"%systemroot%\\system32\\ati2drad.dll", NULL},
  469. {NULL, L"%systemroot%\\system32\\ati2dvag.dll", NULL},
  470. {NULL, L"%systemroot%\\system32\\drivers\\ati2mpaa.sys", NULL},
  471. {NULL, L"%systemroot%\\system32\\drivers\\ati2mpad.sys", NULL},
  472. {NULL, L"%systemroot%\\system32\\drivers\\ati2mtag.sys", NULL},
  473. {NULL, L"%systemroot%\\system32\\ati3d1ag.dll", NULL},
  474. {NULL, L"%systemroot%\\system32\\ati3d2ag.dll", NULL},
  475. {NULL, L"%systemroot%\\system32\\atidrae.dll", NULL},
  476. {NULL, L"%systemroot%\\system32\\drivers\\atimpae.sys", NULL},
  477. {NULL, L"%systemroot%\\system32\\atiraged.dll", NULL},
  478. {NULL, L"%systemroot%\\system32\\drivers\\atiragem.sys", NULL},
  479. {NULL, L"%systemroot%\\system32\\atkctrs.dll", NULL},
  480. {L"watkctrs.dll", L"%systemroot%\\SysWOW64\\atkctrs.dll", NULL},
  481. {NULL, L"%systemroot%\\system32\\atl.dll", NULL},
  482. {L"watl.dll", L"%systemroot%\\SysWOW64\\atl.dll", NULL},
  483. {NULL, L"%systemroot%\\system32\\drivers\\atlmc.sys", NULL},
  484. {NULL, L"%systemroot%\\system32\\atmadm.exe", NULL},
  485. {L"watmadm.exe", L"%systemroot%\\SysWOW64\\atmadm.exe", NULL},
  486. {L"bhp024.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\ATMARP.DLL", NULL},
  487. {NULL, L"%systemroot%\\system32\\drivers\\atmarpc.sys", NULL},
  488. {NULL, L"%systemroot%\\system32\\drivers\\atmarps.sys", NULL},
  489. {NULL, L"%systemroot%\\system32\\drivers\\atmepvc.sys", NULL},
  490. {NULL, L"%systemroot%\\system32\\atmfd.dll", NULL},
  491. {NULL, L"%systemroot%\\system32\\drivers\\atmlane.sys", NULL},
  492. {NULL, L"%systemroot%\\system32\\atmpvcno.dll", NULL},
  493. {L"watmpvcno.dll", L"%systemroot%\\SysWOW64\\atmpvcno.dll", NULL},
  494. {NULL, L"%systemroot%\\system32\\drivers\\atmuni.sys", NULL},
  495. {NULL, L"%systemroot%\\system32\\atrace.dll", NULL},
  496. {NULL, L"%systemroot%\\system32\\attrib.exe", NULL},
  497. {L"wattrib.exe", L"%systemroot%\\SysWOW64\\attrib.exe", NULL},
  498. {NULL, L"%systemroot%\\system32\\administration\\au_accnt.dll", NULL},
  499. {NULL, L"%systemroot%\\system32\\audiosrv.dll", NULL},
  500. {L"waudiosrv.dll", L"%systemroot%\\SysWOW64\\audiosrv.dll", NULL},
  501. {NULL, L"%systemroot%\\system32\\drivers\\audstub.sys", NULL},
  502. {NULL, L"%systemroot%\\system32\\authz.dll", NULL},
  503. {L"wauthz.dll", L"%systemroot%\\SysWOW64\\authz.dll", NULL},
  504. {NULL, L"%systemroot%\\system32\\autochk.exe", NULL},
  505. {L"wautochk.exe", L"%systemroot%\\SysWOW64\\autochk.exe", NULL},
  506. {NULL, L"%systemroot%\\system32\\autoconv.exe", NULL},
  507. {L"wautoconv.exe", L"%systemroot%\\SysWOW64\\autoconv.exe", NULL},
  508. {NULL, L"%systemroot%\\system32\\autodisc.dll", NULL},
  509. {L"wautodisc.dll", L"%systemroot%\\SysWOW64\\autodisc.dll", NULL},
  510. {NULL, L"%systemroot%\\system32\\autofmt.exe", NULL},
  511. {L"wautofmt.exe", L"%systemroot%\\SysWOW64\\autofmt.exe", NULL},
  512. {NULL, L"%systemroot%\\system32\\autolfn.exe", NULL},
  513. {L"wautolfn.exe", L"%systemroot%\\SysWOW64\\autolfn.exe", NULL},
  514. {NULL, L"%systemroot%\\system32\\avicap.dll", NULL},
  515. {L"wavicap.dll", L"%systemroot%\\SysWOW64\\avicap.dll", NULL},
  516. {NULL, L"%systemroot%\\system32\\avicap32.dll", NULL},
  517. {L"wavicap32.dll", L"%systemroot%\\SysWOW64\\avicap32.dll", NULL},
  518. {NULL, L"%systemroot%\\system32\\avifil32.dll", NULL},
  519. {L"wavifil32.dll", L"%systemroot%\\SysWOW64\\avifil32.dll", NULL},
  520. {NULL, L"%systemroot%\\system32\\avifile.dll", NULL},
  521. {L"wavifile.dll", L"%systemroot%\\SysWOW64\\avifile.dll", NULL},
  522. {NULL, L"%systemroot%\\system32\\avmcoins.dll", NULL},
  523. {L"wavmcoxp.dll", L"%systemroot%\\SysWOW64\\avmcoxp.dll", NULL},
  524. {NULL, L"%systemroot%\\system32\\avmen64.dll", NULL},
  525. {NULL, L"%systemroot%\\system32\\drivers\\avmwan.sys", NULL},
  526. {NULL, L"%systemroot%\\system32\\azroles.dll", NULL},
  527. {L"wazroles.dll", L"%systemroot%\\SysWOW64\\azroles.dll", NULL},
  528. {NULL, L"%systemroot%\\system32\\azroleui.dll", NULL},
  529. {L"wazroleui.dll", L"%systemroot%\\SysWOW64\\azroleui.dll", NULL},
  530. {NULL, L"%systemroot%\\system32\\drivers\\b1cbase.sys", NULL},
  531. {NULL, L"%systemroot%\\system32\\drivers\\b57xp64.sys", NULL},
  532. {NULL, L"%systemroot%\\system32\\drivers\\b5820w2k.sys", NULL},
  533. {NULL, L"%systemroot%\\system32\\administration\\backsnap.dll", NULL},
  534. {NULL, L"%systemroot%\\system32\\basesrv.dll", NULL},
  535. {NULL, L"%systemroot%\\system32\\batmeter.dll", NULL},
  536. {L"wbatmeter.dll", L"%systemroot%\\SysWOW64\\batmeter.dll", NULL},
  537. {NULL, L"%systemroot%\\system32\\batt.dll", NULL},
  538. {L"wbatt.dll", L"%systemroot%\\SysWOW64\\batt.dll", NULL},
  539. {NULL, L"%systemroot%\\system32\\drivers\\battc.sys", NULL},
  540. {NULL, L"%systemroot%\\system32\\bcmmodex.dll", NULL},
  541. {NULL, L"%systemroot%\\system32\\bdaplgin.ax", NULL},
  542. {L"wbdaplgin.ax", L"%systemroot%\\SysWOW64\\bdaplgin.ax", NULL},
  543. {NULL, L"%systemroot%\\system32\\drivers\\beep.sys", NULL},
  544. {NULL, L"%systemroot%\\system32\\NETMON\\bhsupp.dll", NULL},
  545. {NULL, L"%systemroot%\\system32\\bidispl.dll", NULL},
  546. {L"wbidispl.dll", L"%systemroot%\\SysWOW64\\bidispl.dll", NULL},
  547. {NULL, L"%systemroot%\\system32\\big5.nls", NULL},
  548. {NULL, L"%systemroot%\\system32\\binlsvc.dll", NULL},
  549. {L"wbinlsvc.dll", L"%systemroot%\\SysWOW64\\binlsvc.dll", NULL},
  550. {NULL, L"%systemroot%\\system32\\Setup\\bitsoc.dll", NULL},
  551. {NULL, L"%systemroot%\\system32\\bitsprx2.dll", NULL},
  552. {L"wblackbox.dll", L"%systemroot%\\SysWOW64\\blackbox.dll", NULL},
  553. {NULL, L"%systemroot%\\help\\bnts.dll", NULL},
  554. {NULL, L"%systemroot%\\system32\\administration\\bomsnap.dll", NULL},
  555. {L"bhp002.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\BONE.DLL", NULL},
  556. {NULL, L"%systemroot%\\system32\\bootcfg.exe", NULL},
  557. {NULL, L"%systemroot%\\system32\\bootvid.dll", NULL},
  558. {NULL, L"%systemroot%\\system32\\bopomofo.nls", NULL},
  559. {NULL, L"%systemroot%\\system32\\drivers\\breecemc.sys", NULL},
  560. {NULL, L"%systemroot%\\system32\\inetsrv\\browscap.dll", L"iis.inf"},
  561. {NULL, L"%systemroot%\\system32\\browselc.dll", NULL},
  562. {L"wbrowselc.dll", L"%systemroot%\\SysWOW64\\browselc.dll", NULL},
  563. {L"bhp003.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\browser.dll", NULL},
  564. {NULL, L"%systemroot%\\system32\\browser.dll", NULL},
  565. {L"wbrowser.dll", L"%systemroot%\\SysWOW64\\browser.dll", NULL},
  566. {NULL, L"%systemroot%\\system32\\browseui.dll", NULL},
  567. {L"wbrowseui.dll", L"%systemroot%\\SysWOW64\\browseui.dll", NULL},
  568. {L"wbrowsewm.dll", L"%systemroot%\\SysWOW64\\browsewm.dll", NULL},
  569. {NULL, L"%systemroot%\\PCHealth\\HelpCtr\\Binaries\\brpinfo.dll", NULL},
  570. {NULL, L"%systemroot%\\system32\\btpagnt.dll", NULL},
  571. {L"wbtpagnt.dll", L"%systemroot%\\SysWOW64\\btpagnt.dll", NULL},
  572. {NULL, L"%systemroot%\\system32\\drivers\\bulltlp3.sys", NULL},
  573. {NULL, L"%systemroot%\\system32\\c_037.nls", NULL},
  574. {L"wc_037.nls", L"%systemroot%\\SysWOW64\\c_037.nls", NULL},
  575. {NULL, L"%systemroot%\\system32\\c_10000.nls", NULL},
  576. {L"wc_10000.nls", L"%systemroot%\\SysWOW64\\c_10000.nls", NULL},
  577. {NULL, L"%systemroot%\\system32\\c_10001.nls", NULL},
  578. {NULL, L"%systemroot%\\system32\\c_10002.nls", NULL},
  579. {NULL, L"%systemroot%\\system32\\c_10003.nls", NULL},
  580. {NULL, L"%systemroot%\\system32\\c_10004.nls", NULL},
  581. {NULL, L"%systemroot%\\system32\\c_10005.nls", NULL},
  582. {NULL, L"%systemroot%\\system32\\c_10006.nls", NULL},
  583. {L"wc_10006.nls", L"%systemroot%\\SysWOW64\\c_10006.nls", NULL},
  584. {NULL, L"%systemroot%\\system32\\c_10007.nls", NULL},
  585. {L"wc_10007.nls", L"%systemroot%\\SysWOW64\\c_10007.nls", NULL},
  586. {NULL, L"%systemroot%\\system32\\c_10008.nls", NULL},
  587. {NULL, L"%systemroot%\\system32\\c_10010.nls", NULL},
  588. {L"wc_10010.nls", L"%systemroot%\\SysWOW64\\c_10010.nls", NULL},
  589. {NULL, L"%systemroot%\\system32\\c_10017.nls", NULL},
  590. {L"wc_10017.nls", L"%systemroot%\\SysWOW64\\c_10017.nls", NULL},
  591. {NULL, L"%systemroot%\\system32\\c_10021.nls", NULL},
  592. {NULL, L"%systemroot%\\system32\\c_10029.nls", NULL},
  593. {L"wc_10029.nls", L"%systemroot%\\SysWOW64\\c_10029.nls", NULL},
  594. {NULL, L"%systemroot%\\system32\\c_10079.nls", NULL},
  595. {L"wc_10079.nls", L"%systemroot%\\SysWOW64\\c_10079.nls", NULL},
  596. {NULL, L"%systemroot%\\system32\\c_10081.nls", NULL},
  597. {L"wc_10081.nls", L"%systemroot%\\SysWOW64\\c_10081.nls", NULL},
  598. {NULL, L"%systemroot%\\system32\\c_10082.nls", NULL},
  599. {L"wc_10082.nls", L"%systemroot%\\SysWOW64\\c_10082.nls", NULL},
  600. {NULL, L"%systemroot%\\system32\\c_1026.nls", NULL},
  601. {L"wc_1026.nls", L"%systemroot%\\SysWOW64\\c_1026.nls", NULL},
  602. {NULL, L"%systemroot%\\system32\\c_1047.nls", NULL},
  603. {NULL, L"%systemroot%\\system32\\c_1140.nls", NULL},
  604. {NULL, L"%systemroot%\\system32\\c_1141.nls", NULL},
  605. {NULL, L"%systemroot%\\system32\\c_1142.nls", NULL},
  606. {NULL, L"%systemroot%\\system32\\c_1143.nls", NULL},
  607. {NULL, L"%systemroot%\\system32\\c_1144.nls", NULL},
  608. {NULL, L"%systemroot%\\system32\\c_1145.nls", NULL},
  609. {NULL, L"%systemroot%\\system32\\c_1146.nls", NULL},
  610. {NULL, L"%systemroot%\\system32\\c_1147.nls", NULL},
  611. {NULL, L"%systemroot%\\system32\\c_1148.nls", NULL},
  612. {NULL, L"%systemroot%\\system32\\c_1149.nls", NULL},
  613. {NULL, L"%systemroot%\\system32\\c_1250.nls", NULL},
  614. {L"wc_1250.nls", L"%systemroot%\\SysWOW64\\c_1250.nls", NULL},
  615. {NULL, L"%systemroot%\\system32\\c_1251.nls", NULL},
  616. {L"wc_1251.nls", L"%systemroot%\\SysWOW64\\c_1251.nls", NULL},
  617. {NULL, L"%systemroot%\\system32\\c_1252.nls", NULL},
  618. {L"wc_1252.nls", L"%systemroot%\\SysWOW64\\c_1252.nls", NULL},
  619. {NULL, L"%systemroot%\\system32\\c_1253.nls", NULL},
  620. {L"wc_1253.nls", L"%systemroot%\\SysWOW64\\c_1253.nls", NULL},
  621. {NULL, L"%systemroot%\\system32\\c_1254.nls", NULL},
  622. {L"wc_1254.nls", L"%systemroot%\\SysWOW64\\c_1254.nls", NULL},
  623. {NULL, L"%systemroot%\\system32\\c_1255.nls", NULL},
  624. {L"wc_1255.nls", L"%systemroot%\\SysWOW64\\c_1255.nls", NULL},
  625. {NULL, L"%systemroot%\\system32\\c_1256.nls", NULL},
  626. {L"wc_1256.nls", L"%systemroot%\\SysWOW64\\c_1256.nls", NULL},
  627. {NULL, L"%systemroot%\\system32\\c_1257.nls", NULL},
  628. {L"wc_1257.nls", L"%systemroot%\\SysWOW64\\c_1257.nls", NULL},
  629. {NULL, L"%systemroot%\\system32\\c_1258.nls", NULL},
  630. {L"wc_1258.nls", L"%systemroot%\\SysWOW64\\c_1258.nls", NULL},
  631. {NULL, L"%systemroot%\\system32\\c_1361.nls", NULL},
  632. {NULL, L"%systemroot%\\system32\\c_20000.nls", NULL},
  633. {NULL, L"%systemroot%\\system32\\c_20001.nls", NULL},
  634. {NULL, L"%systemroot%\\system32\\c_20002.nls", NULL},
  635. {NULL, L"%systemroot%\\system32\\c_20003.nls", NULL},
  636. {NULL, L"%systemroot%\\system32\\c_20004.nls", NULL},
  637. {NULL, L"%systemroot%\\system32\\c_20005.nls", NULL},
  638. {NULL, L"%systemroot%\\system32\\c_20105.nls", NULL},
  639. {NULL, L"%systemroot%\\system32\\c_20106.nls", NULL},
  640. {NULL, L"%systemroot%\\system32\\c_20107.nls", NULL},
  641. {NULL, L"%systemroot%\\system32\\c_20108.nls", NULL},
  642. {NULL, L"%systemroot%\\system32\\c_20127.nls", NULL},
  643. {NULL, L"%systemroot%\\system32\\c_20261.nls", NULL},
  644. {L"wc_20261.nls", L"%systemroot%\\SysWOW64\\c_20261.nls", NULL},
  645. {NULL, L"%systemroot%\\system32\\c_20269.nls", NULL},
  646. {NULL, L"%systemroot%\\system32\\c_20273.nls", NULL},
  647. {NULL, L"%systemroot%\\system32\\c_20277.nls", NULL},
  648. {NULL, L"%systemroot%\\system32\\c_20278.nls", NULL},
  649. {NULL, L"%systemroot%\\system32\\c_20280.nls", NULL},
  650. {NULL, L"%systemroot%\\system32\\c_20284.nls", NULL},
  651. {NULL, L"%systemroot%\\system32\\c_20285.nls", NULL},
  652. {NULL, L"%systemroot%\\system32\\c_20290.nls", NULL},
  653. {NULL, L"%systemroot%\\system32\\c_20297.nls", NULL},
  654. {NULL, L"%systemroot%\\system32\\c_20420.nls", NULL},
  655. {NULL, L"%systemroot%\\system32\\c_20423.nls", NULL},
  656. {NULL, L"%systemroot%\\system32\\c_20424.nls", NULL},
  657. {NULL, L"%systemroot%\\system32\\c_20833.nls", NULL},
  658. {NULL, L"%systemroot%\\system32\\c_20838.nls", NULL},
  659. {NULL, L"%systemroot%\\system32\\c_20866.nls", NULL},
  660. {L"wc_20866.nls", L"%systemroot%\\SysWOW64\\c_20866.nls", NULL},
  661. {NULL, L"%systemroot%\\system32\\c_20871.nls", NULL},
  662. {NULL, L"%systemroot%\\system32\\c_20880.nls", NULL},
  663. {NULL, L"%systemroot%\\system32\\c_20905.nls", NULL},
  664. {L"wc_20905.nls", L"%systemroot%\\SysWOW64\\c_20905.nls", NULL},
  665. {NULL, L"%systemroot%\\system32\\c_20924.nls", NULL},
  666. {NULL, L"%systemroot%\\system32\\c_20932.nls", NULL},
  667. {NULL, L"%systemroot%\\system32\\c_20936.nls", NULL},
  668. {NULL, L"%systemroot%\\system32\\c_20949.nls", NULL},
  669. {NULL, L"%systemroot%\\system32\\c_21025.nls", NULL},
  670. {NULL, L"%systemroot%\\system32\\c_21027.nls", NULL},
  671. {NULL, L"%systemroot%\\system32\\c_21866.nls", NULL},
  672. {L"wc_21866.nls", L"%systemroot%\\SysWOW64\\c_21866.nls", NULL},
  673. {NULL, L"%systemroot%\\system32\\c_28591.nls", NULL},
  674. {L"wc_28591.nls", L"%systemroot%\\SysWOW64\\c_28591.nls", NULL},
  675. {NULL, L"%systemroot%\\system32\\c_28592.nls", NULL},
  676. {L"wc_28592.nls", L"%systemroot%\\SysWOW64\\c_28592.nls", NULL},
  677. {NULL, L"%systemroot%\\system32\\c_28593.nls", NULL},
  678. {L"wc_28593.nls", L"%systemroot%\\SysWOW64\\c_28593.nls", NULL},
  679. {NULL, L"%systemroot%\\system32\\C_28594.NLS", NULL},
  680. {NULL, L"%systemroot%\\system32\\C_28595.NLS", NULL},
  681. {NULL, L"%systemroot%\\system32\\C_28596.NLS", NULL},
  682. {NULL, L"%systemroot%\\system32\\C_28597.NLS", NULL},
  683. {NULL, L"%systemroot%\\system32\\c_28598.nls", NULL},
  684. {L"wc_28598.nls", L"%systemroot%\\SysWOW64\\c_28598.nls", NULL},
  685. {NULL, L"%systemroot%\\system32\\c_28599.nls", NULL},
  686. {NULL, L"%systemroot%\\system32\\c_28603.nls", NULL},
  687. {NULL, L"%systemroot%\\system32\\c_28605.nls", NULL},
  688. {L"wc_28605.nls", L"%systemroot%\\SysWOW64\\c_28605.nls", NULL},
  689. {NULL, L"%systemroot%\\system32\\c_437.nls", NULL},
  690. {L"wc_437.nls", L"%systemroot%\\SysWOW64\\c_437.nls", NULL},
  691. {NULL, L"%systemroot%\\system32\\c_500.nls", NULL},
  692. {L"wc_500.nls", L"%systemroot%\\SysWOW64\\c_500.nls", NULL},
  693. {NULL, L"%systemroot%\\system32\\c_708.nls", NULL},
  694. {NULL, L"%systemroot%\\system32\\c_720.nls", NULL},
  695. {L"wc_720.nls", L"%systemroot%\\SysWOW64\\c_720.nls", NULL},
  696. {NULL, L"%systemroot%\\system32\\c_737.nls", NULL},
  697. {L"wc_737.nls", L"%systemroot%\\SysWOW64\\c_737.nls", NULL},
  698. {NULL, L"%systemroot%\\system32\\c_775.nls", NULL},
  699. {L"wc_775.nls", L"%systemroot%\\SysWOW64\\c_775.nls", NULL},
  700. {NULL, L"%systemroot%\\system32\\c_850.nls", NULL},
  701. {L"wc_850.nls", L"%systemroot%\\SysWOW64\\c_850.nls", NULL},
  702. {NULL, L"%systemroot%\\system32\\c_852.nls", NULL},
  703. {L"wc_852.nls", L"%systemroot%\\SysWOW64\\c_852.nls", NULL},
  704. {NULL, L"%systemroot%\\system32\\c_855.nls", NULL},
  705. {L"wc_855.nls", L"%systemroot%\\SysWOW64\\c_855.nls", NULL},
  706. {NULL, L"%systemroot%\\system32\\c_857.nls", NULL},
  707. {L"wc_857.nls", L"%systemroot%\\SysWOW64\\c_857.nls", NULL},
  708. {NULL, L"%systemroot%\\system32\\c_858.nls", NULL},
  709. {NULL, L"%systemroot%\\system32\\c_860.nls", NULL},
  710. {L"wc_860.nls", L"%systemroot%\\SysWOW64\\c_860.nls", NULL},
  711. {NULL, L"%systemroot%\\system32\\c_861.nls", NULL},
  712. {L"wc_861.nls", L"%systemroot%\\SysWOW64\\c_861.nls", NULL},
  713. {NULL, L"%systemroot%\\system32\\c_862.nls", NULL},
  714. {NULL, L"%systemroot%\\system32\\c_863.nls", NULL},
  715. {L"wc_863.nls", L"%systemroot%\\SysWOW64\\c_863.nls", NULL},
  716. {NULL, L"%systemroot%\\system32\\c_864.nls", NULL},
  717. {NULL, L"%systemroot%\\system32\\c_865.nls", NULL},
  718. {L"wc_865.nls", L"%systemroot%\\SysWOW64\\c_865.nls", NULL},
  719. {NULL, L"%systemroot%\\system32\\c_866.nls", NULL},
  720. {L"wc_866.nls", L"%systemroot%\\SysWOW64\\c_866.nls", NULL},
  721. {NULL, L"%systemroot%\\system32\\c_869.nls", NULL},
  722. {L"wc_869.nls", L"%systemroot%\\SysWOW64\\c_869.nls", NULL},
  723. {NULL, L"%systemroot%\\system32\\c_870.nls", NULL},
  724. {NULL, L"%systemroot%\\system32\\c_874.nls", NULL},
  725. {L"wc_874.nls", L"%systemroot%\\SysWOW64\\c_874.nls", NULL},
  726. {NULL, L"%systemroot%\\system32\\c_875.nls", NULL},
  727. {L"wc_875.nls", L"%systemroot%\\SysWOW64\\c_875.nls", NULL},
  728. {NULL, L"%systemroot%\\system32\\c_932.nls", NULL},
  729. {L"wc_932.nls", L"%systemroot%\\SysWOW64\\c_932.nls", NULL},
  730. {NULL, L"%systemroot%\\system32\\c_936.nls", NULL},
  731. {L"wc_936.nls", L"%systemroot%\\SysWOW64\\c_936.nls", NULL},
  732. {NULL, L"%systemroot%\\system32\\c_949.nls", NULL},
  733. {L"wc_949.nls", L"%systemroot%\\SysWOW64\\c_949.nls", NULL},
  734. {NULL, L"%systemroot%\\system32\\c_950.nls", NULL},
  735. {L"wc_950.nls", L"%systemroot%\\SysWOW64\\c_950.nls", NULL},
  736. {L"wc_eucdb.dll", L"%systemroot%\\SysWOW64\\c_eucdb.dll", NULL},
  737. {NULL, L"%systemroot%\\system32\\c_g18030.dll", NULL},
  738. {L"wc_g18030.dll", L"%systemroot%\\SysWOW64\\c_g18030.dll", NULL},
  739. {NULL, L"%systemroot%\\system32\\c_is2022.dll", NULL},
  740. {L"wc_is2022.dll", L"%systemroot%\\SysWOW64\\c_is2022.dll", NULL},
  741. {NULL, L"%systemroot%\\system32\\c_iscii.dll", NULL},
  742. {L"wc_iscii.dll", L"%systemroot%\\SysWOW64\\c_iscii.dll", NULL},
  743. {L"wc_snadb.dll", L"%systemroot%\\SysWOW64\\c_snadb.dll", NULL},
  744. {NULL, L"%systemroot%\\system32\\cabinet.dll", NULL},
  745. {L"wcabinet.dll", L"%systemroot%\\SysWOW64\\cabinet.dll", NULL},
  746. {NULL, L"%systemroot%\\system32\\cabview.dll", NULL},
  747. {L"wcabview.dll", L"%systemroot%\\SysWOW64\\cabview.dll", NULL},
  748. {NULL, L"%systemroot%\\system32\\cacls.exe", NULL},
  749. {L"wcacls.exe", L"%systemroot%\\SysWOW64\\cacls.exe", NULL},
  750. {NULL, L"%systemroot%\\system32\\calc.exe", NULL},
  751. {NULL, L"%systemroot%\\system32\\camocx.dll", NULL},
  752. {L"wcamocx.dll", L"%systemroot%\\SysWOW64\\camocx.dll", NULL},
  753. {NULL, L"%systemroot%\\system32\\capesnpn.dll", NULL},
  754. {L"wcapesnpn.dll", L"%systemroot%\\SysWOW64\\capesnpn.dll", NULL},
  755. {L"diapi2.sys", L"%systemroot%\\system32\\drivers\\disdn\\capi20.sys", NULL},
  756. {L"avmc2064.dll", L"%systemroot%\\SysWOW64\\capi2064.dll", NULL},
  757. {L"diapi264.dll", L"%systemroot%\\system32\\capi2064.dll", NULL},
  758. {L"diapi2NT.dll", L"%systemroot%\\SysWOW64\\capi20NT.dll", NULL},
  759. {NULL, L"%systemroot%\\system32\\cards.dll", NULL},
  760. {L"wcards.dll", L"%systemroot%\\SysWOW64\\cards.dll", NULL},
  761. {NULL, L"%systemroot%\\system32\\catsrv.dll", NULL},
  762. {NULL, L"%systemroot%\\system32\\catsrvps.dll", NULL},
  763. {NULL, L"%systemroot%\\system32\\catsrvut.dll", NULL},
  764. {NULL, L"%systemroot%\\system32\\drivers\\cbidf2k.sys", NULL},
  765. {NULL, L"%systemroot%\\system32\\drivers\\CCDECODE.sys", NULL},
  766. {NULL, L"%systemroot%\\system32\\ccfapi32.dll", NULL},
  767. {L"wccfapi32.dll", L"%systemroot%\\SysWOW64\\ccfapi32.dll", NULL},
  768. {NULL, L"%systemroot%\\system32\\ccfgnt.dll", NULL},
  769. {L"wccfgnt.dll", L"%systemroot%\\SysWOW64\\ccfgnt.dll", NULL},
  770. {NULL, L"%systemroot%\\system32\\drivers\\cdfs.sys", NULL},
  771. {NULL, L"%systemroot%\\system32\\cdfview.dll", NULL},
  772. {L"wcdfview.dll", L"%systemroot%\\SysWOW64\\cdfview.dll", NULL},
  773. {NULL, L"%systemroot%\\system32\\cdm.dll", NULL},
  774. {NULL, L"%systemroot%\\system32\\cdosys.dll", NULL},
  775. {L"wcdosys.dll", L"%systemroot%\\SysWOW64\\cdosys.dll", NULL},
  776. {NULL, L"%systemroot%\\system32\\drivers\\cdrom.sys", NULL},
  777. {NULL, L"%systemroot%\\system32\\certadm.dll", NULL},
  778. {L"wcertadm.dll", L"%systemroot%\\SysWOW64\\certadm.dll", NULL},
  779. {NULL, L"%systemroot%\\system32\\certcli.dll", NULL},
  780. {L"wcertcli.dll", L"%systemroot%\\SysWOW64\\certcli.dll", NULL},
  781. {NULL, L"%systemroot%\\system32\\certdb.dll", NULL},
  782. {NULL, L"%systemroot%\\system32\\certenc.dll", NULL},
  783. {NULL, L"%systemroot%\\system32\\certmgr.dll", NULL},
  784. {L"wcertmgr.dll", L"%systemroot%\\SysWOW64\\certmgr.dll", NULL},
  785. {NULL, L"%systemroot%\\system32\\certmmc.dll", NULL},
  786. {L"wcertmmc.dll", L"%systemroot%\\SysWOW64\\certmmc.dll", NULL},
  787. {NULL, L"%systemroot%\\system32\\inetsrv\\certobj.dll", L"iis.inf"},
  788. {NULL, L"%systemroot%\\system32\\Setup\\certocm.dll", NULL},
  789. {NULL, L"%systemroot%\\system32\\certpdef.dll", NULL},
  790. {L"wcertpdef.dll", L"%systemroot%\\SysWOW64\\certpdef.dll", NULL},
  791. {NULL, L"%systemroot%\\system32\\certreq.exe", NULL},
  792. {L"wcertreq.exe", L"%systemroot%\\SysWOW64\\certreq.exe", NULL},
  793. {NULL, L"%systemroot%\\system32\\certsrv.exe", NULL},
  794. {NULL, L"%systemroot%\\system32\\certtmpl.dll", NULL},
  795. {L"wcerttmpl.dll", L"%systemroot%\\SysWOW64\\certtmpl.dll", NULL},
  796. {NULL, L"%systemroot%\\system32\\certutil.exe", NULL},
  797. {L"wcertutil.exe", L"%systemroot%\\SysWOW64\\certutil.exe", NULL},
  798. {NULL, L"%systemroot%\\system32\\certxds.dll", NULL},
  799. {L"wcertxds.dll", L"%systemroot%\\SysWOW64\\certxds.dll", NULL},
  800. {L"wcewmdm.dll", L"%systemroot%\\SysWOW64\\cewmdm.dll", NULL},
  801. {NULL, L"%systemroot%\\system32\\cfgbkend.dll", NULL},
  802. {NULL, L"%systemroot%\\system32\\chajei.ime", L"intl.inf"},
  803. {NULL, L"%systemroot%\\system32\\change.exe", NULL},
  804. {NULL, L"%systemroot%\\system32\\drivers\\changer.sys", NULL},
  805. {NULL, L"%systemroot%\\system32\\charmap.exe", NULL},
  806. {NULL, L"%systemroot%\\system32\\chglogon.exe", NULL},
  807. {NULL, L"%systemroot%\\system32\\chgport.exe", NULL},
  808. {NULL, L"%systemroot%\\system32\\chgusr.exe", NULL},
  809. {NULL, L"%systemroot%\\system32\\chkdsk.exe", NULL},
  810. {L"wchkdsk.exe", L"%systemroot%\\SysWOW64\\chkdsk.exe", NULL},
  811. {NULL, L"%systemroot%\\system32\\chkntfs.exe", NULL},
  812. {L"wchkntfs.exe", L"%systemroot%\\SysWOW64\\chkntfs.exe", NULL},
  813. {NULL, L"%systemroot%\\system32\\choice.exe", NULL},
  814. {L"wchoice.exe", L"%systemroot%\\SysWOW64\\choice.exe", NULL},
  815. {NULL, L"%systemroot%\\system32\\chsbrkr.dll", L"intl.inf"},
  816. {NULL, L"%systemroot%\\system32\\chtbrkr.dll", L"intl.inf"},
  817. {NULL, L"%systemroot%\\ime\\CHTIME\\Applets\\CHTSKDIC.DIC", L"intl.inf"},
  818. {L"wCHTSKDIC.DIC", L"%systemroot%\\ime (x86)\\CHTIME\\APPLETS\\CHTSKDIC.DIC", L"intl.inf"},
  819. {NULL, L"%systemroot%\\ime\\CHTIME\\Applets\\CHTSKDIC.DLL", L"intl.inf"},
  820. {L"wCHTSKDIC.DLL", L"%systemroot%\\ime (x86)\\CHTIME\\APPLETS\\CHTSKDIC.DLL", L"intl.inf"},
  821. {NULL, L"%systemroot%\\ime\\CHTIME\\Applets\\CHTSKF.DLL", L"intl.inf"},
  822. {L"wCHTSKF.DLL", L"%systemroot%\\ime (x86)\\CHTIME\\APPLETS\\CHTSKF.DLL", L"intl.inf"},
  823. {NULL, L"%systemroot%\\system32\\ciadmin.dll", NULL},
  824. {L"wciadmin.dll", L"%systemroot%\\SysWOW64\\ciadmin.dll", NULL},
  825. {NULL, L"%systemroot%\\system32\\cic.dll", NULL},
  826. {L"wcic.dll", L"%systemroot%\\SysWOW64\\cic.dll", NULL},
  827. {NULL, L"%systemroot%\\system32\\cidaemon.exe", NULL},
  828. {L"wcidaemon.exe", L"%systemroot%\\SysWOW64\\cidaemon.exe", NULL},
  829. {NULL, L"%systemroot%\\system32\\wbem\\cimwin32.dll", NULL},
  830. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTIME.DLL", L"intl.inf"},
  831. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTLGB.IMD", L"intl.inf"},
  832. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTLGD.IMD", L"intl.inf"},
  833. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTLGIE.IMD", L"intl.inf"},
  834. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTLGL.IMD", L"intl.inf"},
  835. {NULL, L"%systemroot%\\system32\\CINTLGNT.IME", L"intl.inf"},
  836. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTLGS.IMD", L"intl.inf"},
  837. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTLGSI.IMD", L"intl.inf"},
  838. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTLGU.IMD", L"intl.inf"},
  839. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTLGUC.IMD", L"intl.inf"},
  840. {NULL, L"%systemroot%\\system32\\IME\\CINTLGNT\\CINTSETP.EXE", L"intl.inf"},
  841. {NULL, L"%systemroot%\\system32\\ciodm.dll", NULL},
  842. {L"wciodm.dll", L"%systemroot%\\SysWOW64\\ciodm.dll", NULL},
  843. {NULL, L"%systemroot%\\system32\\cipher.exe", NULL},
  844. {L"wcipher.exe", L"%systemroot%\\SysWOW64\\cipher.exe", NULL},
  845. {NULL, L"%systemroot%\\system32\\cisvc.exe", NULL},
  846. {L"wcisvc.exe", L"%systemroot%\\SysWOW64\\cisvc.exe", NULL},
  847. {NULL, L"%systemroot%\\system32\\ckcnv.exe", NULL},
  848. {L"wckcnv.exe", L"%systemroot%\\SysWOW64\\ckcnv.exe", NULL},
  849. {NULL, L"%systemroot%\\Cluster\\ClAdmWiz.dll", NULL},
  850. {NULL, L"%systemroot%\\system32\\drivers\\classpnp.sys", NULL},
  851. {NULL, L"%systemroot%\\system32\\clb.dll", NULL},
  852. {L"wclb.dll", L"%systemroot%\\SysWOW64\\clb.dll", NULL},
  853. {NULL, L"%systemroot%\\system32\\clbcatex.dll", NULL},
  854. {NULL, L"%systemroot%\\system32\\clbcatq.dll", NULL},
  855. {NULL, L"%systemroot%\\Cluster\\ClCfgSrv.dll", NULL},
  856. {NULL, L"%systemroot%\\system32\\cleanmgr.exe", NULL},
  857. {L"wcleanmgr.exe", L"%systemroot%\\SysWOW64\\cleanmgr.exe", NULL},
  858. {NULL, L"%systemroot%\\system32\\cleanri.exe", NULL},
  859. {NULL, L"%systemroot%\\system32\\clip.exe", NULL},
  860. {L"wclip.exe", L"%systemroot%\\SysWOW64\\clip.exe", NULL},
  861. {NULL, L"%systemroot%\\system32\\clipbrd.exe", NULL},
  862. {NULL, L"%systemroot%\\system32\\clipsrv.exe", NULL},
  863. {L"wclipsrv.exe", L"%systemroot%\\SysWOW64\\clipsrv.exe", NULL},
  864. {NULL, L"%systemroot%\\Cluster\\ClNetRes.dll", NULL},
  865. {NULL, L"%systemroot%\\Cluster\\ClNetREx.dll", NULL},
  866. {NULL, L"%systemroot%\\Cluster\\CluAdmEx.dll", NULL},
  867. {NULL, L"%systemroot%\\Cluster\\CluAdmin.exe", NULL},
  868. {NULL, L"%systemroot%\\Cluster\\CluAdMMC.dll", NULL},
  869. {NULL, L"%systemroot%\\system32\\clusapi.dll", NULL},
  870. {L"wclusapi.dll", L"%systemroot%\\SysWOW64\\clusapi.dll", NULL},
  871. {NULL, L"%systemroot%\\system32\\drivers\\clusdisk.sys", NULL},
  872. {L"IIS_clusftp.vbs", L"%systemroot%\\system32\\inetsrv\\clusftp.vbs", L"iis.inf"},
  873. {NULL, L"%systemroot%\\system32\\drivers\\ClusNet.sys", NULL},
  874. {NULL, L"%systemroot%\\system32\\Setup\\clusocm.dll", NULL},
  875. {NULL, L"%systemroot%\\Cluster\\ClusRes.dll", NULL},
  876. {NULL, L"%systemroot%\\system32\\ClusSprt.dll", NULL},
  877. {NULL, L"%systemroot%\\Cluster\\ClusSvc.exe", NULL},
  878. {NULL, L"%systemroot%\\system32\\cluster.exe", NULL},
  879. {L"wcluster.exe", L"%systemroot%\\SysWOW64\\cluster.exe", NULL},
  880. {L"IIS_clusweb.vbs", L"%systemroot%\\system32\\inetsrv\\clusweb.vbs", L"iis.inf"},
  881. {NULL, L"%systemroot%\\system32\\wbem\\ClusWMI.dll", NULL},
  882. {NULL, L"%systemroot%\\system32\\drivers\\cmbp0wdm.sys", NULL},
  883. {NULL, L"%systemroot%\\system32\\cmcfg32.dll", NULL},
  884. {L"wcmcfg32.dll", L"%systemroot%\\SysWOW64\\cmcfg32.dll", NULL},
  885. {NULL, L"%systemroot%\\system32\\cmd.exe", NULL},
  886. {L"wcmd.exe", L"%systemroot%\\SysWOW64\\cmd.exe", NULL},
  887. {L"evtgprov.dll", L"%systemroot%\\system32\\wbem\\CmdEvTgProv.dll", NULL},
  888. {L"wevtgprov.dll", L"%systemroot%\\SysWOW64\\wbem\\CmdEvTgProv.dll", NULL},
  889. {NULL, L"%systemroot%\\system32\\cmdial32.dll", NULL},
  890. {L"wcmdial32.dll", L"%systemroot%\\SysWOW64\\cmdial32.dll", NULL},
  891. {NULL, L"%systemroot%\\system32\\drivers\\cmdide.sys", NULL},
  892. {NULL, L"%systemroot%\\system32\\cmdkey.exe", NULL},
  893. {L"wcmdkey.exe", L"%systemroot%\\SysWOW64\\cmdkey.exe", NULL},
  894. {NULL, L"%systemroot%\\system32\\cmdl32.exe", NULL},
  895. {L"wcmdl32.exe", L"%systemroot%\\SysWOW64\\cmdl32.exe", NULL},
  896. {NULL, L"%systemroot%\\system32\\cmmon32.exe", NULL},
  897. {L"wcmmon32.exe", L"%systemroot%\\SysWOW64\\cmmon32.exe", NULL},
  898. {NULL, L"%systemroot%\\system32\\cmpbk32.dll", NULL},
  899. {L"wcmpbk32.dll", L"%systemroot%\\SysWOW64\\cmpbk32.dll", NULL},
  900. {NULL, L"%systemroot%\\system32\\cmprops.dll", NULL},
  901. {NULL, L"%systemroot%\\system32\\cmstp.exe", NULL},
  902. {L"wcmstp.exe", L"%systemroot%\\SysWOW64\\cmstp.exe", NULL},
  903. {NULL, L"%systemroot%\\system32\\cmutil.dll", NULL},
  904. {L"wcmutil.dll", L"%systemroot%\\SysWOW64\\cmutil.dll", NULL},
  905. {NULL, L"%systemroot%\\system32\\cnbjmon.dll", NULL},
  906. {L"wcnbjmon.dll", L"%systemroot%\\SysWOW64\\cnbjmon.dll", NULL},
  907. {NULL, L"%systemroot%\\system32\\cnetcfg.dll", NULL},
  908. {L"wcnetcfg.dll", L"%systemroot%\\SysWOW64\\cnetcfg.dll", NULL},
  909. {NULL, L"%systemroot%\\system32\\cnvfat.dll", NULL},
  910. {L"wcnvfat.dll", L"%systemroot%\\SysWOW64\\cnvfat.dll", NULL},
  911. {NULL, L"%systemroot%\\system32\\colbact.dll", NULL},
  912. {NULL, L"%systemroot%\\system32\\comaddin.dll", NULL},
  913. {NULL, L"%systemroot%\\system32\\Com\\comadmin.dll", NULL},
  914. {NULL, L"%systemroot%\\system32\\comcat.dll", NULL},
  915. {L"wcomcat.dll", L"%systemroot%\\SysWOW64\\comcat.dll", NULL},
  916. {NULL, L"%systemroot%\\system32\\comclust.exe", NULL},
  917. {L"wcommdlg.dll", L"%systemroot%\\SysWOW64\\commdlg.dll", NULL},
  918. {NULL, L"%systemroot%\\system32\\comp.exe", NULL},
  919. {L"wcomp.exe", L"%systemroot%\\SysWOW64\\comp.exe", NULL},
  920. {NULL, L"%systemroot%\\system32\\compact.exe", NULL},
  921. {L"wcompact.exe", L"%systemroot%\\SysWOW64\\compact.exe", NULL},
  922. {NULL, L"%systemroot%\\system32\\drivers\\compbatt.sys", NULL},
  923. {L"wcompobj.dll", L"%systemroot%\\SysWOW64\\compobj.dll", NULL},
  924. {NULL, L"%systemroot%\\system32\\compstui.dll", NULL},
  925. {L"wcompstui.dll", L"%systemroot%\\SysWOW64\\compstui.dll", NULL},
  926. {NULL, L"%systemroot%\\system32\\comrepl.dll", NULL},
  927. {NULL, L"%systemroot%\\system32\\Com\\comrepl.exe", NULL},
  928. {NULL, L"%systemroot%\\system32\\Com\\comrereg.exe", NULL},
  929. {NULL, L"%systemroot%\\system32\\comres.dll", NULL},
  930. {L"wcomres.dll", L"%systemroot%\\SysWOW64\\comres.dll", NULL},
  931. {NULL, L"%systemroot%\\system32\\Setup\\comsetup.dll", NULL},
  932. {NULL, L"%systemroot%\\system32\\comsnap.dll", NULL},
  933. {NULL, L"%systemroot%\\system32\\comsvcs.dll", NULL},
  934. {NULL, L"%systemroot%\\system32\\comuid.dll", NULL},
  935. {NULL, L"%systemroot%\\system32\\confmsp.dll", NULL},
  936. {L"wconfmsp.dll", L"%systemroot%\\SysWOW64\\confmsp.dll", NULL},
  937. {NULL, L"%systemroot%\\system32\\conime.exe", NULL},
  938. {L"wconime.exe", L"%systemroot%\\SysWOW64\\conime.exe", NULL},
  939. {NULL, L"%systemroot%\\system32\\console.dll", NULL},
  940. {L"wconsole.dll", L"%systemroot%\\SysWOW64\\console.dll", NULL},
  941. {NULL, L"%systemroot%\\system32\\control.exe", NULL},
  942. {L"wcontrol.exe", L"%systemroot%\\SysWOW64\\control.exe", NULL},
  943. {NULL, L"%systemroot%\\system32\\inetsrv\\ContRot.dll", L"iis.inf"},
  944. {NULL, L"%systemroot%\\system32\\convert.exe", NULL},
  945. {L"wconvert.exe", L"%systemroot%\\SysWOW64\\convert.exe", NULL},
  946. {NULL, L"%systemroot%\\system32\\convlog.exe", L"iis.inf"},
  947. {NULL, L"%systemroot%\\system32\\convmsg.dll", NULL},
  948. {L"wconvmsg.dll", L"%systemroot%\\SysWOW64\\convmsg.dll", NULL},
  949. {NULL, L"%systemroot%\\system32\\corpol.dll", NULL},
  950. {L"wcorpol.dll", L"%systemroot%\\SysWOW64\\corpol.dll", NULL},
  951. {NULL, L"%systemroot%\\ime\\IMJP8_1\\cplexe.exe", L"intl.inf"},
  952. {L"wcplexe.exe", L"%systemroot%\\ime (x86)\\IMJP8_1\\cplexe.exe", L"intl.inf"},
  953. {NULL, L"%systemroot%\\system32\\drivers\\cpqarry2.sys", NULL},
  954. {NULL, L"%systemroot%\\system32\\drivers\\cpqcissm.sys", NULL},
  955. {NULL, L"%systemroot%\\system32\\drivers\\cpqfcalm.sys", NULL},
  956. {NULL, L"%systemroot%\\system32\\cprofile.exe", NULL},
  957. {NULL, L"%systemroot%\\system32\\drivers\\crcdisk.sys", NULL},
  958. {NULL, L"%systemroot%\\system32\\credui.dll", NULL},
  959. {L"wcredui.dll", L"%systemroot%\\SysWOW64\\credui.dll", NULL},
  960. {L"wcrtdll.dll", L"%systemroot%\\SysWOW64\\crtdll.dll", NULL},
  961. {NULL, L"%systemroot%\\system32\\csamsp.dll", NULL},
  962. {NULL, L"%systemroot%\\system32\\cscdll.dll", NULL},
  963. {L"wcscdll.dll", L"%systemroot%\\SysWOW64\\cscdll.dll", NULL},
  964. {NULL, L"%systemroot%\\system32\\cscript.exe", NULL},
  965. {L"wcscript.exe", L"%systemroot%\\SysWOW64\\cscript.exe", NULL},
  966. {NULL, L"%systemroot%\\system32\\cscui.dll", NULL},
  967. {L"wcscui.dll", L"%systemroot%\\SysWOW64\\cscui.dll", NULL},
  968. {NULL, L"%systemroot%\\system32\\csrsrv.dll", NULL},
  969. {NULL, L"%systemroot%\\system32\\csrss.exe", NULL},
  970. {NULL, L"%systemroot%\\system32\\csseqchk.dll", NULL},
  971. {L"wcsseqchk.dll", L"%systemroot%\\SysWOW64\\csseqchk.dll", NULL},
  972. {NULL, L"%systemroot%\\system32\\csvde.exe", NULL},
  973. {NULL, L"%systemroot%\\system32\\ctfmon.exe", NULL},
  974. {L"wctfmon.exe", L"%systemroot%\\SysWOW64\\ctfmon.exe", NULL},
  975. {L"wctl3d32.dll", L"%systemroot%\\SysWOW64\\ctl3d32.dll", NULL},
  976. {L"wctl3dv2.dll", L"%systemroot%\\SysWOW64\\ctl3dv2.dll", NULL},
  977. {NULL, L"%systemroot%\\system32\\ctype.nls", NULL},
  978. {L"wctype.nls", L"%systemroot%\\SysWOW64\\ctype.nls", NULL},
  979. {NULL, L"%systemroot%\\system32\\drivers\\cwrwdm.sys", NULL},
  980. {NULL, L"%systemroot%\\system32\\drivers\\cyclad-z.sys", NULL},
  981. {NULL, L"%systemroot%\\system32\\drivers\\cyclom-y.sys", NULL},
  982. {NULL, L"%systemroot%\\system32\\cys.exe", NULL},
  983. {NULL, L"%systemroot%\\system32\\cyycoins.dll", NULL},
  984. {L"wcyycoins.dll", L"%systemroot%\\SysWOW64\\cyycoins.dll", NULL},
  985. {NULL, L"%systemroot%\\system32\\drivers\\cyyport.sys", NULL},
  986. {NULL, L"%systemroot%\\system32\\cyyports.dll", NULL},
  987. {L"wcyyports.dll", L"%systemroot%\\SysWOW64\\cyyports.dll", NULL},
  988. {NULL, L"%systemroot%\\system32\\cyzcoins.dll", NULL},
  989. {L"wcyzcoins.dll", L"%systemroot%\\SysWOW64\\cyzcoins.dll", NULL},
  990. {NULL, L"%systemroot%\\system32\\drivers\\cyzport.sys", NULL},
  991. {NULL, L"%systemroot%\\system32\\cyzports.dll", NULL},
  992. {L"wcyzports.dll", L"%systemroot%\\SysWOW64\\cyzports.dll", NULL},
  993. {NULL, L"%systemroot%\\system32\\d3d8.dll", NULL},
  994. {L"wd3d8.dll", L"%systemroot%\\SysWOW64\\d3d8.dll", NULL},
  995. {NULL, L"%systemroot%\\system32\\d3d8thk.dll", NULL},
  996. {L"wd3d8thk.dll", L"%systemroot%\\SysWOW64\\d3d8thk.dll", NULL},
  997. {NULL, L"%systemroot%\\system32\\d3dim.dll", NULL},
  998. {L"wd3dim.dll", L"%systemroot%\\SysWOW64\\d3dim.dll", NULL},
  999. {NULL, L"%systemroot%\\system32\\d3dim700.dll", NULL},
  1000. {L"wd3dim700.dll", L"%systemroot%\\SysWOW64\\d3dim700.dll", NULL},
  1001. {NULL, L"%systemroot%\\system32\\d3dpmesh.dll", NULL},
  1002. {L"wd3dpmesh.dll", L"%systemroot%\\SysWOW64\\d3dpmesh.dll", NULL},
  1003. {L"wd3dramp.dll", L"%systemroot%\\SysWOW64\\d3dramp.dll", NULL},
  1004. {NULL, L"%systemroot%\\system32\\d3drm.dll", NULL},
  1005. {L"wd3drm.dll", L"%systemroot%\\SysWOW64\\d3drm.dll", NULL},
  1006. {NULL, L"%systemroot%\\system32\\d3dxof.dll", NULL},
  1007. {L"wd3dxof.dll", L"%systemroot%\\SysWOW64\\d3dxof.dll", NULL},
  1008. {NULL, L"%systemroot%\\system32\\drivers\\dac2w2k.sys", NULL},
  1009. {L"wdanim.dll", L"%systemroot%\\SysWOW64\\danim.dll", NULL},
  1010. {NULL, L"%systemroot%\\system32\\dataclen.dll", NULL},
  1011. {L"wdataclen.dll", L"%systemroot%\\SysWOW64\\dataclen.dll", NULL},
  1012. {L"wdatime.dll", L"%systemroot%\\SysWOW64\\datime.dll", NULL},
  1013. {NULL, L"%systemroot%\\system32\\inetsrv\\davcdata.exe", L"iis.inf"},
  1014. {NULL, L"%systemroot%\\system32\\davclnt.dll", NULL},
  1015. {L"wdavclnt.dll", L"%systemroot%\\SysWOW64\\davclnt.dll", NULL},
  1016. {L"wdaxctle.ocx", L"%systemroot%\\SysWOW64\\daxctle.ocx", NULL},
  1017. {NULL, L"%systemroot%\\system32\\dayi.ime", L"intl.inf"},
  1018. {NULL, L"%systemroot%\\system32\\dbgeng.dll", NULL},
  1019. {L"wdbgeng.dll", L"%systemroot%\\SysWOW64\\dbgeng.dll", NULL},
  1020. {NULL, L"%systemroot%\\system32\\dbghelp.dll", NULL},
  1021. {L"wdbghelp.dll", L"%systemroot%\\SysWOW64\\dbghelp.dll", NULL},
  1022. {NULL, L"%systemroot%\\system32\\dcgpofix.exe", NULL},
  1023. {L"wdcgpofix.exe", L"%systemroot%\\SysWOW64\\dcgpofix.exe", NULL},
  1024. {NULL, L"%systemroot%\\system32\\dciman32.dll", NULL},
  1025. {L"wdciman32.dll", L"%systemroot%\\SysWOW64\\dciman32.dll", NULL},
  1026. {NULL, L"%systemroot%\\system32\\dcomcnfg.exe", NULL},
  1027. {NULL, L"%systemroot%\\system32\\dcphelp.exe", NULL},
  1028. {L"wdcphelp.exe", L"%systemroot%\\SysWOW64\\dcphelp.exe", NULL},
  1029. {NULL, L"%systemroot%\\system32\\dcpromo.dll", NULL},
  1030. {L"wdcpromo.dll", L"%systemroot%\\SysWOW64\\dcpromo.dll", NULL},
  1031. {NULL, L"%systemroot%\\system32\\dcpromo.exe", NULL},
  1032. {L"wddeml.dll", L"%systemroot%\\SysWOW64\\ddeml.dll", NULL},
  1033. {L"wddeshare.exe", L"%systemroot%\\SysWOW64\\ddeshare.exe", NULL},
  1034. {NULL, L"%systemroot%\\system32\\ddraw.dll", NULL},
  1035. {L"wddraw.dll", L"%systemroot%\\SysWOW64\\ddraw.dll", NULL},
  1036. {NULL, L"%systemroot%\\system32\\ddrawex.dll", NULL},
  1037. {L"wddrawex.dll", L"%systemroot%\\SysWOW64\\ddrawex.dll", NULL},
  1038. {NULL, L"%systemroot%\\system32\\inetsrv\\ddrop.dll", L"ins.inf"},
  1039. {NULL, L"%systemroot%\\system32\\drivers\\ddsmc.sys", NULL},
  1040. {NULL, L"%systemroot%\\Cluster\\DebugEx.dll", NULL},
  1041. {NULL, L"%systemroot%\\system32\\decem.dll", NULL},
  1042. {NULL, L"%systemroot%\\system32\\defrag.exe", NULL},
  1043. {NULL, L"%systemroot%\\system32\\desk.cpl", NULL},
  1044. {L"wdesk.cpl", L"%systemroot%\\SysWOW64\\desk.cpl", NULL},
  1045. {NULL, L"%systemroot%\\system32\\deskadp.dll", NULL},
  1046. {L"wdeskadp.dll", L"%systemroot%\\SysWOW64\\deskadp.dll", NULL},
  1047. {NULL, L"%systemroot%\\system32\\deskmon.dll", NULL},
  1048. {L"wdeskmon.dll", L"%systemroot%\\SysWOW64\\deskmon.dll", NULL},
  1049. {NULL, L"%systemroot%\\system32\\deskperf.dll", NULL},
  1050. {L"wdeskperf.dll", L"%systemroot%\\SysWOW64\\deskperf.dll", NULL},
  1051. {NULL, L"%systemroot%\\system32\\devenum.dll", NULL},
  1052. {L"wdevenum.dll", L"%systemroot%\\SysWOW64\\devenum.dll", NULL},
  1053. {NULL, L"%systemroot%\\system32\\devmgr.dll", NULL},
  1054. {NULL, L"%systemroot%\\system32\\dfrgfat.exe", NULL},
  1055. {NULL, L"%systemroot%\\system32\\dfrgifc.exe", NULL},
  1056. {NULL, L"%systemroot%\\system32\\dfrgifps.dll", NULL},
  1057. {NULL, L"%systemroot%\\system32\\dfrgntfs.exe", NULL},
  1058. {NULL, L"%systemroot%\\system32\\dfrgres.dll", NULL},
  1059. {NULL, L"%systemroot%\\system32\\dfrgsnap.dll", NULL},
  1060. {NULL, L"%systemroot%\\system32\\dfrgui.dll", NULL},
  1061. {NULL, L"%systemroot%\\system32\\drivers\\dfs.sys", NULL},
  1062. {NULL, L"%systemroot%\\system32\\dfscmd.exe", NULL},
  1063. {L"wdfscmd.exe", L"%systemroot%\\SysWOW64\\dfscmd.exe", NULL},
  1064. {NULL, L"%systemroot%\\system32\\dfscore.dll", NULL},
  1065. {NULL, L"%systemroot%\\system32\\dfsgui.dll", NULL},
  1066. {NULL, L"%systemroot%\\system32\\dfsinit.exe", NULL},
  1067. {L"wdfsinit.exe", L"%systemroot%\\SysWOW64\\dfsinit.exe", NULL},
  1068. {NULL, L"%systemroot%\\system32\\dfssetup.dll", NULL},
  1069. {L"wdfssetup.dll", L"%systemroot%\\SysWOW64\\dfssetup.dll", NULL},
  1070. {NULL, L"%systemroot%\\system32\\dfsshlex.dll", NULL},
  1071. {NULL, L"%systemroot%\\system32\\dfssvc.exe", NULL},
  1072. {L"wdfssvc.exe", L"%systemroot%\\SysWOW64\\dfssvc.exe", NULL},
  1073. {L"wdgconfig.dll", L"%systemroot%\\SysWOW64\\dgconfig.dll", NULL},
  1074. {NULL, L"%systemroot%\\system32\\dgnet.dll", NULL},
  1075. {L"wdgsetup.dll", L"%systemroot%\\SysWOW64\\dgsetup.dll", NULL},
  1076. {NULL, L"%systemroot%\\system32\\dhcpcsvc.dll", NULL},
  1077. {L"wdhcpcsvc.dll", L"%systemroot%\\SysWOW64\\dhcpcsvc.dll", NULL},
  1078. {NULL, L"%systemroot%\\system32\\dhcpmib.dll", NULL},
  1079. {L"wdhcpmib.dll", L"%systemroot%\\SysWOW64\\dhcpmib.dll", NULL},
  1080. {NULL, L"%systemroot%\\system32\\dhcpmon.dll", NULL},
  1081. {L"wdhcpmon.dll", L"%systemroot%\\SysWOW64\\dhcpmon.dll", NULL},
  1082. {NULL, L"%systemroot%\\system32\\dhcpsapi.dll", NULL},
  1083. {L"wdhcpsapi.dll", L"%systemroot%\\SysWOW64\\dhcpsapi.dll", NULL},
  1084. {NULL, L"%systemroot%\\system32\\dhcpsnap.dll", NULL},
  1085. {L"wdhcpsnap.dll", L"%systemroot%\\SysWOW64\\dhcpsnap.dll", NULL},
  1086. {NULL, L"%systemroot%\\system32\\dhcpssvc.dll", NULL},
  1087. {L"wdhcpssvc.dll", L"%systemroot%\\SysWOW64\\dhcpssvc.dll", NULL},
  1088. {NULL, L"%systemroot%\\system32\\dhcpwiz.exe", NULL},
  1089. {L"wDHTMLED.OCX", L"%commonprogramfiles(x86)%\\Microsoft Shared\\Triedit\\DHTMLED.OCX", NULL},
  1090. {NULL, L"%systemroot%\\system32\\diactfrm.dll", NULL},
  1091. {L"wdiactfrm.dll", L"%systemroot%\\SysWOW64\\diactfrm.dll", NULL},
  1092. {NULL, L"%systemroot%\\dialer.exe", NULL},
  1093. {NULL, L"%systemroot%\\system32\\diantz.exe", NULL},
  1094. {L"wdiantz.exe", L"%systemroot%\\SysWOW64\\diantz.exe", NULL},
  1095. {NULL, L"%systemroot%\\system32\\digest.dll", NULL},
  1096. {L"wwdigest.dll", L"%systemroot%\\SysWOW64\\digest.dll", NULL},
  1097. {L"wdigiinf.dll", L"%systemroot%\\SysWOW64\\digiinf.dll", NULL},
  1098. {NULL, L"%systemroot%\\system32\\digirlpt.dll", NULL},
  1099. {L"wdigirlpt.dll", L"%systemroot%\\SysWOW64\\digirlpt.dll", NULL},
  1100. {NULL, L"%systemroot%\\system32\\drivers\\digirlpt.sys", NULL},
  1101. {NULL, L"%systemroot%\\system32\\drivers\\disdn\\dimaint.sys", NULL},
  1102. {NULL, L"%systemroot%\\system32\\dimap.dll", NULL},
  1103. {L"wdimap.dll", L"%systemroot%\\SysWOW64\\dimap.dll", NULL},
  1104. {NULL, L"%systemroot%\\system32\\dinput.dll", NULL},
  1105. {L"wdinput.dll", L"%systemroot%\\SysWOW64\\dinput.dll", NULL},
  1106. {NULL, L"%systemroot%\\system32\\dinput8.dll", NULL},
  1107. {L"wdinput8.dll", L"%systemroot%\\SysWOW64\\dinput8.dll", NULL},
  1108. {NULL, L"%commonprogramfiles%\\System\\directdb.dll", NULL},
  1109. {L"wdirectdb.dll", L"%commonprogramfiles(x86)%\\System\\directdb.dll", NULL},
  1110. {NULL, L"%systemroot%\\system32\\drivers\\disk.sys", NULL},
  1111. {NULL, L"%systemroot%\\system32\\diskcopy.dll", NULL},
  1112. {L"wdiskcopy.dll", L"%systemroot%\\SysWOW64\\diskcopy.dll", NULL},
  1113. {NULL, L"%systemroot%\\system32\\drivers\\diskdump.sys", NULL},
  1114. {NULL, L"%systemroot%\\system32\\diskpart.exe", NULL},
  1115. {NULL, L"%systemroot%\\system32\\diskperf.exe", NULL},
  1116. {L"wdiskperf.exe", L"%systemroot%\\SysWOW64\\diskperf.exe", NULL},
  1117. {NULL, L"%systemroot%\\system32\\disrvci.dll", NULL},
  1118. {L"wdisrvci.dll", L"%systemroot%\\SysWOW64\\disrvci.dll", NULL},
  1119. {NULL, L"%systemroot%\\system32\\disrvpp.dll", NULL},
  1120. {NULL, L"%systemroot%\\system32\\disrvsu.dll", NULL},
  1121. {NULL, L"%systemroot%\\system32\\ditrace.exe", NULL},
  1122. {NULL, L"%systemroot%\\system32\\drivers\\disdn\\diwansrv.sys", NULL},
  1123. {NULL, L"%systemroot%\\system32\\dllhost.exe", NULL},
  1124. {L"wdllhost.exe", L"%systemroot%\\SysWOW64\\dllhost.exe", NULL},
  1125. {NULL, L"%systemroot%\\system32\\dllhst3g.exe", NULL},
  1126. {L"wdllhst3g.exe", L"%systemroot%\\SysWOW64\\dllhst3g.exe", NULL},
  1127. {NULL, L"%systemroot%\\system32\\drivers\\dlttape.sys", NULL},
  1128. {NULL, L"%systemroot%\\system32\\dmadmin.exe", NULL},
  1129. {NULL, L"%systemroot%\\system32\\drivers\\dmboot.sys", NULL},
  1130. {NULL, L"%systemroot%\\system32\\dmconfig.dll", NULL},
  1131. {NULL, L"%systemroot%\\system32\\dmdlgs.dll", NULL},
  1132. {NULL, L"%systemroot%\\system32\\dmdskmgr.dll", NULL},
  1133. {NULL, L"%systemroot%\\system32\\dmdskres.dll", NULL},
  1134. {NULL, L"%systemroot%\\system32\\dmintf.dll", NULL},
  1135. {NULL, L"%systemroot%\\system32\\drivers\\dmio.sys", NULL},
  1136. {NULL, L"%systemroot%\\system32\\dmivcitf.dll", NULL},
  1137. {NULL, L"%systemroot%\\system32\\drivers\\dmload.sys", NULL},
  1138. {NULL, L"%systemroot%\\system32\\dmocx.dll", NULL},
  1139. {L"wdmocx.dll", L"%systemroot%\\SysWOW64\\dmocx.dll", NULL},
  1140. {NULL, L"%systemroot%\\system32\\dmremote.exe", NULL},
  1141. {NULL, L"%systemroot%\\system32\\dmserver.dll", NULL},
  1142. {NULL, L"%systemroot%\\system32\\dmutil.dll", NULL},
  1143. {NULL, L"%systemroot%\\system32\\dmvdsitf.dll", NULL},
  1144. {NULL, L"%systemroot%\\system32\\dmview.ocx", NULL},
  1145. {NULL, L"%systemroot%\\system32\\dns.exe", NULL},
  1146. {L"wdns.exe", L"%systemroot%\\SysWOW64\\dns.exe", NULL},
  1147. {NULL, L"%systemroot%\\system32\\dnsapi.dll", NULL},
  1148. {L"wdnsapi.dll", L"%systemroot%\\SysWOW64\\dnsapi.dll", NULL},
  1149. {NULL, L"%systemroot%\\system32\\dnsmgr.dll", NULL},
  1150. {L"wdnsmgr.dll", L"%systemroot%\\SysWOW64\\dnsmgr.dll", NULL},
  1151. {NULL, L"%systemroot%\\system32\\dnsperf.dll", NULL},
  1152. {L"wdnsperf.dll", L"%systemroot%\\SysWOW64\\dnsperf.dll", NULL},
  1153. {NULL, L"%systemroot%\\system32\\wbem\\dnsprov.dll", NULL},
  1154. {L"wdnsprov.dll", L"%systemroot%\\SysWOW64\\wbem\\dnsprov.dll", NULL},
  1155. {NULL, L"%systemroot%\\system32\\dnsrslvr.dll", NULL},
  1156. {L"wdnsrslvr.dll", L"%systemroot%\\SysWOW64\\dnsrslvr.dll", NULL},
  1157. {NULL, L"%systemroot%\\system32\\dnswiz.exe", NULL},
  1158. {NULL, L"%systemroot%\\system32\\docprop.dll", NULL},
  1159. {L"wdocprop.dll", L"%systemroot%\\SysWOW64\\docprop.dll", NULL},
  1160. {NULL, L"%systemroot%\\system32\\docprop2.dll", NULL},
  1161. {L"wdocprop2.dll", L"%systemroot%\\SysWOW64\\docprop2.dll", NULL},
  1162. {NULL, L"%systemroot%\\system32\\domadmin.dll", NULL},
  1163. {L"wdomadmin.dll", L"%systemroot%\\SysWOW64\\domadmin.dll", NULL},
  1164. {NULL, L"%systemroot%\\system32\\doskey.exe", NULL},
  1165. {L"wdoskey.exe", L"%systemroot%\\SysWOW64\\doskey.exe", NULL},
  1166. {NULL, L"%systemroot%\\system32\\drivers\\Dot4.sys", NULL},
  1167. {NULL, L"%systemroot%\\system32\\drivers\\Dot4Prt.sys", NULL},
  1168. {NULL, L"%systemroot%\\system32\\drivers\\Dot4Scan.sys", NULL},
  1169. {NULL, L"%systemroot%\\system32\\drivers\\Dot4usb.sys", NULL},
  1170. {L"wdplaysvr.exe", L"%systemroot%\\SysWOW64\\dplaysvr.exe", NULL},
  1171. {L"wdplayx.dll", L"%systemroot%\\SysWOW64\\dplayx.dll", NULL},
  1172. {L"wdpmodemx.dll", L"%systemroot%\\SysWOW64\\dpmodemx.dll", NULL},
  1173. {NULL, L"%systemroot%\\system32\\dpnaddr.dll", NULL},
  1174. {L"wdpnaddr.dll", L"%systemroot%\\SysWOW64\\dpnaddr.dll", NULL},
  1175. {NULL, L"%systemroot%\\system32\\dpnet.dll", NULL},
  1176. {L"wdpnet.dll", L"%systemroot%\\SysWOW64\\dpnet.dll", NULL},
  1177. {NULL, L"%systemroot%\\system32\\dpnhpast.dll", NULL},
  1178. {L"wdpnhpast.dll", L"%systemroot%\\SysWOW64\\dpnhpast.dll", NULL},
  1179. {NULL, L"%systemroot%\\system32\\dpnhupnp.dll", NULL},
  1180. {L"wdpnhupnp.dll", L"%systemroot%\\SysWOW64\\dpnhupnp.dll", NULL},
  1181. {NULL, L"%systemroot%\\system32\\dpnlobby.dll", NULL},
  1182. {L"wdpnlobby.dll", L"%systemroot%\\SysWOW64\\dpnlobby.dll", NULL},
  1183. {NULL, L"%systemroot%\\system32\\dpnsvr.exe", NULL},
  1184. {L"wdpnsvr.exe", L"%systemroot%\\SysWOW64\\dpnsvr.exe", NULL},
  1185. {NULL, L"%systemroot%\\system32\\drivers\\dpti2o.sys", NULL},
  1186. {NULL, L"%systemroot%\\system32\\dpvacm.dll", NULL},
  1187. {L"wdpvacm.dll", L"%systemroot%\\SysWOW64\\dpvacm.dll", NULL},
  1188. {NULL, L"%systemroot%\\system32\\dpvoice.dll", NULL},
  1189. {L"wdpvoice.dll", L"%systemroot%\\SysWOW64\\dpvoice.dll", NULL},
  1190. {NULL, L"%systemroot%\\system32\\dpvsetup.exe", NULL},
  1191. {L"wdpvsetup.exe", L"%systemroot%\\SysWOW64\\dpvsetup.exe", NULL},
  1192. {NULL, L"%systemroot%\\system32\\dpvvox.dll", NULL},
  1193. {L"wdpvvox.dll", L"%systemroot%\\SysWOW64\\dpvvox.dll", NULL},
  1194. {L"wdpwsockx.dll", L"%systemroot%\\SysWOW64\\dpwsockx.dll", NULL},
  1195. {L"drvqry.exe", L"%systemroot%\\system32\\driverquery.exe", NULL},
  1196. {L"wdrvqry.exe", L"%systemroot%\\SysWOW64\\driverquery.exe", NULL},
  1197. {L"wdrmv2clt.dll", L"%systemroot%\\SysWOW64\\drmv2clt.dll", NULL},
  1198. {NULL, L"%systemroot%\\system32\\drprov.dll", NULL},
  1199. {L"wdrprov.dll", L"%systemroot%\\SysWOW64\\drprov.dll", NULL},
  1200. {NULL, L"%systemroot%\\system32\\drwtsn32.exe", NULL},
  1201. {L"wdrwtsn32.exe", L"%systemroot%\\SysWOW64\\drwtsn32.exe", NULL},
  1202. {NULL, L"%systemroot%\\system32\\dsadd.exe", NULL},
  1203. {NULL, L"%systemroot%\\system32\\dsadmin.dll", NULL},
  1204. {L"wdsadmin.dll", L"%systemroot%\\SysWOW64\\dsadmin.dll", NULL},
  1205. {NULL, L"%systemroot%\\system32\\dsauth.dll", NULL},
  1206. {L"wdsauth.dll", L"%systemroot%\\SysWOW64\\dsauth.dll", NULL},
  1207. {NULL, L"%systemroot%\\system32\\dsdmo.dll", NULL},
  1208. {L"wdsdmo.dll", L"%systemroot%\\SysWOW64\\dsdmo.dll", NULL},
  1209. {NULL, L"%systemroot%\\system32\\dsdmoprp.dll", NULL},
  1210. {L"wdsdmoprp.dll", L"%systemroot%\\SysWOW64\\dsdmoprp.dll", NULL},
  1211. {NULL, L"%systemroot%\\system32\\dsget.exe", NULL},
  1212. {NULL, L"%systemroot%\\system32\\dskquota.dll", NULL},
  1213. {L"wdskquota.dll", L"%systemroot%\\SysWOW64\\dskquota.dll", NULL},
  1214. {NULL, L"%systemroot%\\system32\\dskquoui.dll", NULL},
  1215. {L"wdskquoui.dll", L"%systemroot%\\SysWOW64\\dskquoui.dll", NULL},
  1216. {NULL, L"%systemroot%\\system32\\dsmod.exe", NULL},
  1217. {NULL, L"%systemroot%\\system32\\dsmove.exe", NULL},
  1218. {NULL, L"%systemroot%\\system32\\dsound.dll", NULL},
  1219. {L"wdsound.dll", L"%systemroot%\\SysWOW64\\dsound.dll", NULL},
  1220. {NULL, L"%systemroot%\\system32\\dsound3d.dll", NULL},
  1221. {L"wdsound3d.dll", L"%systemroot%\\SysWOW64\\dsound3d.dll", NULL},
  1222. {NULL, L"%systemroot%\\system32\\dsprop.dll", NULL},
  1223. {L"wdsprop.dll", L"%systemroot%\\SysWOW64\\dsprop.dll", NULL},
  1224. {NULL, L"%systemroot%\\system32\\wbem\\dsprov.dll", NULL},
  1225. {NULL, L"%systemroot%\\system32\\dsquery.dll", NULL},
  1226. {L"wdsquery.dll", L"%systemroot%\\SysWOW64\\dsquery.dll", NULL},
  1227. {NULL, L"%systemroot%\\system32\\dsquery.exe", NULL},
  1228. {NULL, L"%systemroot%\\system32\\dsrestor.dll", NULL},
  1229. {L"wdsrestor.dll", L"%systemroot%\\SysWOW64\\dsrestor.dll", NULL},
  1230. {NULL, L"%systemroot%\\system32\\dsrevt.dll", NULL},
  1231. {L"wdsrevt.dll", L"%systemroot%\\SysWOW64\\dsrevt.dll", NULL},
  1232. {NULL, L"%systemroot%\\system32\\dsrm.exe", NULL},
  1233. {NULL, L"%systemroot%\\system32\\dssec.dll", NULL},
  1234. {L"wdssec.dll", L"%systemroot%\\SysWOW64\\dssec.dll", NULL},
  1235. {NULL, L"%systemroot%\\system32\\dsuiext.dll", NULL},
  1236. {L"wdsuiext.dll", L"%systemroot%\\SysWOW64\\dsuiext.dll", NULL},
  1237. {NULL, L"%systemroot%\\system32\\dsuiwiz.dll", NULL},
  1238. {L"wdsuiwiz.dll", L"%systemroot%\\SysWOW64\\dsuiwiz.dll", NULL},
  1239. {NULL, L"%systemroot%\\system32\\dumprep.exe", NULL},
  1240. {L"wdumprep.exe", L"%systemroot%\\SysWOW64\\dumprep.exe", NULL},
  1241. {NULL, L"%systemroot%\\system32\\duser.dll", NULL},
  1242. {L"wduser.dll", L"%systemroot%\\SysWOW64\\duser.dll", NULL},
  1243. {NULL, L"%systemroot%\\system32\\dvdplay.exe", NULL},
  1244. {L"wdvdplay.exe", L"%systemroot%\\SysWOW64\\dvdplay.exe", NULL},
  1245. {L"wdvdupgrd.exe", L"%systemroot%\\SysWOW64\\dvdupgrd.exe", NULL},
  1246. {L"dwil1033.dll", L"%systemroot%\\system32\\1033\\dwintl.dll", NULL},
  1247. {L"wdwil1033.dll", L"%systemroot%\\SysWOW64\\1033\\dwintl.dll", NULL},
  1248. {NULL, L"%systemroot%\\system32\\dwwin.exe", NULL},
  1249. {L"wdwwin.exe", L"%systemroot%\\SysWOW64\\dwwin.exe", NULL},
  1250. {L"wdx7vb.dll", L"%systemroot%\\SysWOW64\\dx7vb.dll", NULL},
  1251. {L"wdx8vb.dll", L"%systemroot%\\SysWOW64\\dx8vb.dll", NULL},
  1252. {NULL, L"%systemroot%\\system32\\drivers\\dxapi.sys", NULL},
  1253. {NULL, L"%systemroot%\\system32\\dxdiag.exe", NULL},
  1254. {L"wdxdiag.exe", L"%systemroot%\\SysWOW64\\dxdiag.exe", NULL},
  1255. {NULL, L"%systemroot%\\system32\\drivers\\dxg.sys", NULL},
  1256. {NULL, L"%systemroot%\\system32\\drivers\\dxgthk.sys", NULL},
  1257. {NULL, L"%systemroot%\\system32\\dxmrtp.dll", NULL},
  1258. {L"wdxmrtp.dll", L"%systemroot%\\SysWOW64\\dxmrtp.dll", NULL},
  1259. {NULL, L"%systemroot%\\system32\\dxtmsft.dll", NULL},
  1260. {L"wdxtmsft.dll", L"%systemroot%\\SysWOW64\\dxtmsft.dll", NULL},
  1261. {NULL, L"%systemroot%\\system32\\dxtrans.dll", NULL},
  1262. {L"wdxtrans.dll", L"%systemroot%\\SysWOW64\\dxtrans.dll", NULL},
  1263. {NULL, L"%systemroot%\\system32\\drivers\\e1000645.sys", NULL},
  1264. {NULL, L"%systemroot%\\system32\\drivers\\e100b645.sys", NULL},
  1265. {L"wedb500.dll", L"%systemroot%\\SysWOW64\\edb500.dll", NULL},
  1266. {NULL, L"%systemroot%\\system32\\efsadu.dll", NULL},
  1267. {L"wefsadu.dll", L"%systemroot%\\SysWOW64\\efsadu.dll", NULL},
  1268. {NULL, L"%systemroot%\\system32\\drivers\\el98xn5.sys", NULL},
  1269. {NULL, L"%systemroot%\\system32\\drivers\\elmsmc.sys", NULL},
  1270. {NULL, L"%systemroot%\\system32\\els.dll", NULL},
  1271. {L"wels.dll", L"%systemroot%\\SysWOW64\\els.dll", NULL},
  1272. {NULL, L"%systemroot%\\system32\\drivers\\enum1394.sys", NULL},
  1273. {NULL, L"%systemroot%\\system32\\ersvc.dll", NULL},
  1274. {NULL, L"%systemroot%\\system32\\es.dll", NULL},
  1275. {L"wes.dll", L"%systemroot%\\SysWOW64\\es.dll", NULL},
  1276. {NULL, L"%systemroot%\\system32\\esent.dll", NULL},
  1277. {NULL, L"%systemroot%\\system32\\esentprf.dll", NULL},
  1278. {NULL, L"%systemroot%\\system32\\esentutl.exe", NULL},
  1279. {NULL, L"%systemroot%\\system32\\wbem\\esscli.dll", NULL},
  1280. {NULL, L"%systemroot%\\system32\\eudcedit.exe", NULL},
  1281. {L"weudcedit.exe", L"%systemroot%\\SysWOW64\\eudcedit.exe", NULL},
  1282. {NULL, L"%systemroot%\\system32\\eventcls.dll", NULL},
  1283. {L"evcreate.exe", L"%systemroot%\\system32\\eventcreate.exe", NULL},
  1284. {L"wevcreate.exe", L"%systemroot%\\SysWOW64\\eventcreate.exe", NULL},
  1285. {NULL, L"%systemroot%\\system32\\eventlog.dll", NULL},
  1286. {L"evtquery.vbs", L"%systemroot%\\system32\\eventquery.vbs", NULL},
  1287. {L"evtrig.exe", L"%systemroot%\\system32\\eventtriggers.exe", NULL},
  1288. {L"wevtrig.exe", L"%systemroot%\\SysWOW64\\eventtriggers.exe", NULL},
  1289. {NULL, L"%systemroot%\\system32\\eventvwr.exe", NULL},
  1290. {L"weventvwr.exe", L"%systemroot%\\SysWOW64\\eventvwr.exe", NULL},
  1291. {NULL, L"%systemroot%\\system32\\evntagnt.dll", NULL},
  1292. {NULL, L"%systemroot%\\system32\\evntcmd.exe", NULL},
  1293. {NULL, L"%systemroot%\\system32\\wbem\\evntrprv.dll", NULL},
  1294. {L"wevntrprv.dll", L"%systemroot%\\SysWOW64\\wbem\\evntrprv.dll", NULL},
  1295. {NULL, L"%systemroot%\\system32\\evntwin.exe", NULL},
  1296. {NULL, L"%systemroot%\\system32\\drivers\\exabyte2.sys", NULL},
  1297. {NULL, L"%systemroot%\\system32\\drivers\\examc.sys", NULL},
  1298. {NULL, L"%systemroot%\\system32\\expand.exe", NULL},
  1299. {L"wexpand.exe", L"%systemroot%\\SysWOW64\\expand.exe", NULL},
  1300. {NULL, L"%systemroot%\\explorer.exe", NULL},
  1301. {L"wexplorer.exe", L"%systemroot%\\SysWOW64\\explorer.exe", NULL},
  1302. {NULL, L"%systemroot%\\system32\\exstrace.dll", L"iis.inf"},
  1303. {NULL, L"%systemroot%\\system32\\extrac32.exe", NULL},
  1304. {L"wextrac32.exe", L"%systemroot%\\SysWOW64\\extrac32.exe", NULL},
  1305. {NULL, L"%systemroot%\\system32\\f3ahvoas.dll", NULL},
  1306. {L"wf3ahvoas.dll", L"%systemroot%\\SysWOW64\\f3ahvoas.dll", NULL},
  1307. {NULL, L"%systemroot%\\system32\\wbem\\fastprox.dll", NULL},
  1308. {NULL, L"%systemroot%\\system32\\faultrep.dll", NULL},
  1309. {L"wfaultrep.dll", L"%systemroot%\\SysWOW64\\faultrep.dll", NULL},
  1310. {NULL, L"%systemroot%\\system32\\fc.exe", NULL},
  1311. {L"wfc.exe", L"%systemroot%\\SysWOW64\\fc.exe", NULL},
  1312. {NULL, L"%systemroot%\\system32\\fcachdll.dll", L"ims.inf"},
  1313. {NULL, L"%systemroot%\\system32\\drivers\\fdc.sys", NULL},
  1314. {NULL, L"%systemroot%\\system32\\fde.dll", NULL},
  1315. {L"wfde.dll", L"%systemroot%\\SysWOW64\\fde.dll", NULL},
  1316. {NULL, L"%systemroot%\\system32\\fdeploy.dll", NULL},
  1317. {L"wfdeploy.dll", L"%systemroot%\\SysWOW64\\fdeploy.dll", NULL},
  1318. {NULL, L"%systemroot%\\system32\\feclient.dll", NULL},
  1319. {L"wfeclient.dll", L"%systemroot%\\SysWOW64\\feclient.dll", NULL},
  1320. {NULL, L"%systemroot%\\system32\\filemgmt.dll", NULL},
  1321. {NULL, L"%systemroot%\\system32\\find.exe", NULL},
  1322. {L"wfind.exe", L"%systemroot%\\SysWOW64\\find.exe", NULL},
  1323. {NULL, L"%systemroot%\\system32\\findstr.exe", NULL},
  1324. {L"wfindstr.exe", L"%systemroot%\\SysWOW64\\findstr.exe", NULL},
  1325. {NULL, L"%systemroot%\\system32\\finger.exe", NULL},
  1326. {L"wfinger.exe", L"%systemroot%\\SysWOW64\\finger.exe", NULL},
  1327. {NULL, L"%systemroot%\\system32\\drivers\\fips.sys", NULL},
  1328. {NULL, L"%systemroot%\\system32\\fixmapi.exe", NULL},
  1329. {L"wfixmapi.exe", L"%systemroot%\\SysWOW64\\fixmapi.exe", NULL},
  1330. {NULL, L"%systemroot%\\system32\\flattemp.exe", NULL},
  1331. {NULL, L"%systemroot%\\system32\\drivers\\flpydisk.sys", NULL},
  1332. {NULL, L"%systemroot%\\system32\\fmifs.dll", NULL},
  1333. {L"wfmifs.dll", L"%systemroot%\\SysWOW64\\fmifs.dll", NULL},
  1334. {NULL, L"%systemroot%\\system32\\fontext.dll", NULL},
  1335. {L"wfontext.dll", L"%systemroot%\\SysWOW64\\fontext.dll", NULL},
  1336. {NULL, L"%systemroot%\\system32\\fontsub.dll", NULL},
  1337. {L"wfontsub.dll", L"%systemroot%\\SysWOW64\\fontsub.dll", NULL},
  1338. {NULL, L"%systemroot%\\system32\\fontview.exe", NULL},
  1339. {L"wfontview.exe", L"%systemroot%\\SysWOW64\\fontview.exe", NULL},
  1340. {NULL, L"%systemroot%\\system32\\forfiles.exe", NULL},
  1341. {L"wforfiles.exe", L"%systemroot%\\SysWOW64\\forfiles.exe", NULL},
  1342. {NULL, L"%systemroot%\\system32\\Setup\\fp50ext.dll", NULL},
  1343. {L"bhp004.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\FRAME.DLL", NULL},
  1344. {NULL, L"%systemroot%\\system32\\framebuf.dll", NULL},
  1345. {NULL, L"%systemroot%\\system32\\wbem\\framedyn.dll", NULL},
  1346. {NULL, L"%systemroot%\\system32\\freedisk.exe", NULL},
  1347. {L"wfreedisk.exe", L"%systemroot%\\SysWOW64\\freedisk.exe", NULL},
  1348. {NULL, L"%systemroot%\\system32\\drivers\\fs_rec.sys", NULL},
  1349. {NULL, L"%systemroot%\\system32\\fsutil.exe", NULL},
  1350. {L"wfsutil.exe", L"%systemroot%\\SysWOW64\\fsutil.exe", NULL},
  1351. {NULL, L"%systemroot%\\system32\\drivers\\ftdisk.sys", NULL},
  1352. {NULL, L"%systemroot%\\system32\\ftp.exe", NULL},
  1353. {L"wftp.exe", L"%systemroot%\\SysWOW64\\ftp.exe", NULL},
  1354. {NULL, L"%systemroot%\\system32\\ftpctrs2.dll", L"iis.inf"},
  1355. {NULL, L"%systemroot%\\system32\\inetsrv\\ftpmib.dll", L"iis.inf"},
  1356. {NULL, L"%systemroot%\\system32\\inetsrv\\ftpsvc2.dll", L"iis.inf"},
  1357. {L"wftsrch.dll", L"%systemroot%\\SysWOW64\\ftsrch.dll", NULL},
  1358. {NULL, L"%systemroot%\\system32\\wbem\\fwdprov.dll", NULL},
  1359. {NULL, L"%systemroot%\\system32\\G200d.dll", NULL},
  1360. {NULL, L"%systemroot%\\system32\\drivers\\G200m.sys", NULL},
  1361. {NULL, L"%systemroot%\\system32\\G400d.dll", NULL},
  1362. {NULL, L"%systemroot%\\system32\\drivers\\G400m.sys", NULL},
  1363. {NULL, L"%systemroot%\\system32\\g711codc.ax", NULL},
  1364. {L"wg711codc.ax", L"%systemroot%\\SysWOW64\\g711codc.ax", NULL},
  1365. {NULL, L"%systemroot%\\system32\\gcdef.dll", NULL},
  1366. {L"wgcdef.dll", L"%systemroot%\\SysWOW64\\gcdef.dll", NULL},
  1367. {L"wgdi.exe", L"%systemroot%\\SysWOW64\\gdi.exe", NULL},
  1368. {NULL, L"%systemroot%\\system32\\gdi32.dll", NULL},
  1369. {L"wgdi32.dll", L"%systemroot%\\SysWOW64\\gdi32.dll", NULL},
  1370. {NULL, L"%systemroot%\\system32\\geo.nls", NULL},
  1371. {L"wgeo.nls", L"%systemroot%\\SysWOW64\\geo.nls", NULL},
  1372. {NULL, L"%systemroot%\\system32\\getmac.exe", NULL},
  1373. {L"wgetmac.exe", L"%systemroot%\\SysWOW64\\getmac.exe", NULL},
  1374. {NULL, L"%systemroot%\\system32\\gettype.exe", NULL},
  1375. {L"wgettype.exe", L"%systemroot%\\SysWOW64\\gettype.exe", NULL},
  1376. {NULL, L"%systemroot%\\system32\\getuname.dll", NULL},
  1377. {NULL, L"%systemroot%\\system32\\glmf32.dll", NULL},
  1378. {L"wglmf32.dll", L"%systemroot%\\SysWOW64\\glmf32.dll", NULL},
  1379. {NULL, L"%systemroot%\\system32\\glu32.dll", NULL},
  1380. {L"wglu32.dll", L"%systemroot%\\SysWOW64\\glu32.dll", NULL},
  1381. {NULL, L"%systemroot%\\system32\\drivers\\gm.dls", NULL},
  1382. {NULL, L"%systemroot%\\system32\\gpedit.dll", NULL},
  1383. {L"wgpedit.dll", L"%systemroot%\\SysWOW64\\gpedit.dll", NULL},
  1384. {NULL, L"%systemroot%\\system32\\gpkcsp.dll", NULL},
  1385. {L"wgpkcsp.dll", L"%systemroot%\\SysWOW64\\gpkcsp.dll", NULL},
  1386. {NULL, L"%systemroot%\\system32\\gpkrsrc.dll", NULL},
  1387. {L"wgpkrsrc.dll", L"%systemroot%\\SysWOW64\\gpkrsrc.dll", NULL},
  1388. {NULL, L"%systemroot%\\system32\\drivers\\gpr400.sys", NULL},
  1389. {L"gprslt.exe", L"%systemroot%\\system32\\gpresult.exe", NULL},
  1390. {L"wgprslt.exe", L"%systemroot%\\SysWOW64\\gpresult.exe", NULL},
  1391. {NULL, L"%systemroot%\\system32\\gptext.dll", NULL},
  1392. {L"wgptext.dll", L"%systemroot%\\SysWOW64\\gptext.dll", NULL},
  1393. {NULL, L"%systemroot%\\system32\\gpupdate.exe", NULL},
  1394. {L"wgpupdate.exe", L"%systemroot%\\SysWOW64\\gpupdate.exe", NULL},
  1395. {NULL, L"%systemroot%\\system32\\grovel.exe", NULL},
  1396. {NULL, L"%systemroot%\\system32\\grovmsg.dll", NULL},
  1397. {NULL, L"%systemroot%\\system32\\grpconv.exe", NULL},
  1398. {L"wgrpconv.exe", L"%systemroot%\\SysWOW64\\grpconv.exe", NULL},
  1399. {NULL, L"%systemroot%\\system32\\drivers\\grserial.sys", NULL},
  1400. {NULL, L"%systemroot%\\system32\\inetsrv\\gzip.dll", L"iis.inf"},
  1401. {NULL, L"%systemroot%\\system32\\h323.tsp", NULL},
  1402. {L"wh323.tsp", L"%systemroot%\\SysWOW64\\h323.tsp", NULL},
  1403. {NULL, L"%systemroot%\\system32\\h323msp.dll", NULL},
  1404. {L"wh323msp.dll", L"%systemroot%\\SysWOW64\\h323msp.dll", NULL},
  1405. {NULL, L"%systemroot%\\PCHealth\\HelpCtr\\Binaries\\HCAppRes.dll", NULL},
  1406. {NULL, L"%systemroot%\\system32\\hccoin.dll", NULL},
  1407. {L"whccoin.dll", L"%systemroot%\\SysWOW64\\hccoin.dll", NULL},
  1408. {NULL, L"%systemroot%\\system32\\hdwwiz.cpl", NULL},
  1409. {NULL, L"%systemroot%\\system32\\help.exe", NULL},
  1410. {L"whelp.exe", L"%systemroot%\\SysWOW64\\help.exe", NULL},
  1411. {NULL, L"%systemroot%\\PCHealth\\HelpCtr\\Binaries\\HelpCtr.exe", NULL},
  1412. {NULL, L"%systemroot%\\PCHealth\\HelpCtr\\Binaries\\HelpHost.exe", NULL},
  1413. {NULL, L"%systemroot%\\PCHealth\\HelpCtr\\Binaries\\HelpSvc.exe", NULL},
  1414. {NULL, L"%systemroot%\\system32\\NETMON\\hexedit.dll", NULL},
  1415. {NULL, L"%systemroot%\\hh.exe", NULL},
  1416. {L"whh.exe", L"%systemroot%\\SysWOW64\\hh.exe", NULL},
  1417. {NULL, L"%systemroot%\\system32\\hhctrl.ocx", NULL},
  1418. {L"whhctrl.ocx", L"%systemroot%\\SysWOW64\\hhctrl.ocx", NULL},
  1419. {NULL, L"%systemroot%\\system32\\mui\\0009\\hhctrlui.dll", NULL},
  1420. {NULL, L"%systemroot%\\system32\\hhsetup.dll", NULL},
  1421. {L"whhsetup.dll", L"%systemroot%\\SysWOW64\\hhsetup.dll", NULL},
  1422. {NULL, L"%systemroot%\\system32\\hid.dll", NULL},
  1423. {L"whid.dll", L"%systemroot%\\SysWOW64\\hid.dll", NULL},
  1424. {NULL, L"%systemroot%\\system32\\drivers\\hidbatt.sys", NULL},
  1425. {NULL, L"%systemroot%\\system32\\drivers\\hidclass.sys", NULL},
  1426. {NULL, L"%systemroot%\\system32\\drivers\\hidgame.sys", NULL},
  1427. {NULL, L"%systemroot%\\system32\\drivers\\hidir.sys", NULL},
  1428. {NULL, L"%systemroot%\\system32\\drivers\\hidparse.sys", NULL},
  1429. {NULL, L"%systemroot%\\system32\\hidphone.tsp", NULL},
  1430. {L"whidphone.tsp", L"%systemroot%\\SysWOW64\\hidphone.tsp", NULL},
  1431. {NULL, L"%systemroot%\\system32\\hidserv.dll", NULL},
  1432. {L"whidserv.dll", L"%systemroot%\\SysWOW64\\hidserv.dll", NULL},
  1433. {NULL, L"%systemroot%\\system32\\drivers\\hidusb.sys", NULL},
  1434. {NULL, L"%systemroot%\\system32\\hlink.dll", NULL},
  1435. {L"whlink.dll", L"%systemroot%\\SysWOW64\\hlink.dll", NULL},
  1436. {NULL, L"%ProgramFiles%\\Internet Explorer\\HMMAPI.DLL", NULL},
  1437. {NULL, L"%systemroot%\\system32\\hnetcfg.dll", NULL},
  1438. {L"whnetcfg.dll", L"%systemroot%\\SysWOW64\\hnetcfg.dll", NULL},
  1439. {L"whnetmon.dll", L"%systemroot%\\SysWOW64\\hnetmon.dll", NULL},
  1440. {NULL, L"%systemroot%\\system32\\hostmib.dll", NULL},
  1441. {NULL, L"%systemroot%\\system32\\hostname.exe", NULL},
  1442. {L"whostname.exe", L"%systemroot%\\SysWOW64\\hostname.exe", NULL},
  1443. {NULL, L"%systemroot%\\system32\\hotplug.dll", NULL},
  1444. {NULL, L"%systemroot%\\system32\\drivers\\hpmc.sys", NULL},
  1445. {NULL, L"%systemroot%\\system32\\drivers\\hpn.sys", NULL},
  1446. {NULL, L"%systemroot%\\system32\\drivers\\hpt4qic.sys", NULL},
  1447. {NULL, L"%ProgramFiles%\\Windows NT\\htrn_jis.dll", NULL},
  1448. {NULL, L"%systemroot%\\system32\\drivers\\http.sys", NULL},
  1449. {NULL, L"%systemroot%\\system32\\httpapi.dll", NULL},
  1450. {L"whttpapi.dll", L"%systemroot%\\SysWOW64\\httpapi.dll", NULL},
  1451. {NULL, L"%systemroot%\\system32\\inetsrv\\httpext.dll", L"iis.inf"},
  1452. {NULL, L"%systemroot%\\system32\\inetsrv\\httpmib.dll", L"iis.inf"},
  1453. {NULL, L"%systemroot%\\system32\\inetsrv\\httpodbc.dll", L"iis.inf"},
  1454. {NULL, L"%systemroot%\\system32\\htui.dll", NULL},
  1455. {L"whtui.dll", L"%systemroot%\\SysWOW64\\htui.dll", NULL},
  1456. {NULL, L"%systemroot%\\system32\\drivers\\i8042prt.sys", NULL},
  1457. {NULL, L"%systemroot%\\system32\\IA32Exec.bin", NULL},
  1458. {NULL, L"%systemroot%\\system32\\ias.dll", NULL},
  1459. {L"wias.dll", L"%systemroot%\\SysWOW64\\ias.dll", NULL},
  1460. {NULL, L"%systemroot%\\system32\\iasacct.dll", NULL},
  1461. {L"wiasacct.dll", L"%systemroot%\\SysWOW64\\iasacct.dll", NULL},
  1462. {NULL, L"%systemroot%\\system32\\iasads.dll", NULL},
  1463. {L"wiasads.dll", L"%systemroot%\\SysWOW64\\iasads.dll", NULL},
  1464. {NULL, L"%systemroot%\\system32\\iashlpr.dll", NULL},
  1465. {L"wiashlpr.dll", L"%systemroot%\\SysWOW64\\iashlpr.dll", NULL},
  1466. {NULL, L"%systemroot%\\system32\\iasmmc.dll", NULL},
  1467. {L"wiasmmc.dll", L"%systemroot%\\SysWOW64\\iasmmc.dll", NULL},
  1468. {NULL, L"%systemroot%\\system32\\iasnap.dll", NULL},
  1469. {L"wiasnap.dll", L"%systemroot%\\SysWOW64\\iasnap.dll", NULL},
  1470. {NULL, L"%systemroot%\\system32\\iasperf.dll", NULL},
  1471. {L"wiasperf.dll", L"%systemroot%\\SysWOW64\\iasperf.dll", NULL},
  1472. {NULL, L"%systemroot%\\system32\\iaspolcy.dll", NULL},
  1473. {L"wiaspolcy.dll", L"%systemroot%\\SysWOW64\\iaspolcy.dll", NULL},
  1474. {NULL, L"%systemroot%\\system32\\iasrad.dll", NULL},
  1475. {L"wiasrad.dll", L"%systemroot%\\SysWOW64\\iasrad.dll", NULL},
  1476. {L"wiasrecst.dll", L"%systemroot%\\SysWOW64\\iasrecst.dll", NULL},
  1477. {NULL, L"%systemroot%\\system32\\iassam.dll", NULL},
  1478. {L"wiassam.dll", L"%systemroot%\\SysWOW64\\iassam.dll", NULL},
  1479. {NULL, L"%systemroot%\\system32\\iassdo.dll", NULL},
  1480. {L"wiassdo.dll", L"%systemroot%\\SysWOW64\\iassdo.dll", NULL},
  1481. {NULL, L"%systemroot%\\system32\\iassvcs.dll", NULL},
  1482. {L"wiassvcs.dll", L"%systemroot%\\SysWOW64\\iassvcs.dll", NULL},
  1483. {L"wibmsgnet.dll", L"%systemroot%\\SysWOW64\\ibmsgnet.dll", NULL},
  1484. {NULL, L"%systemroot%\\system32\\icaapi.dll", NULL},
  1485. {NULL, L"%systemroot%\\system32\\icfgnt5.dll", NULL},
  1486. {NULL, L"%systemroot%\\system32\\icm32.dll", NULL},
  1487. {L"wicm32.dll", L"%systemroot%\\SysWOW64\\icm32.dll", NULL},
  1488. {NULL, L"%systemroot%\\system32\\icmp.dll", NULL},
  1489. {L"wicmp.dll", L"%systemroot%\\SysWOW64\\icmp.dll", NULL},
  1490. {NULL, L"%systemroot%\\system32\\icmui.dll", NULL},
  1491. {L"wicmui.dll", L"%systemroot%\\SysWOW64\\icmui.dll", NULL},
  1492. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\icwconn.dll", NULL},
  1493. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\icwconn1.exe", NULL},
  1494. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\icwconn2.exe", NULL},
  1495. {NULL, L"%systemroot%\\system32\\icwdial.dll", NULL},
  1496. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\icwdl.dll", NULL},
  1497. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\icwhelp.dll", NULL},
  1498. {NULL, L"%systemroot%\\system32\\icwphbk.dll", NULL},
  1499. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\icwres.dll", NULL},
  1500. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\icwrmind.exe", NULL},
  1501. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\icwtutor.exe", NULL},
  1502. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\icwutil.dll", NULL},
  1503. {NULL, L"%systemroot%\\system32\\idq.dll", NULL},
  1504. {L"widq.dll", L"%systemroot%\\SysWOW64\\idq.dll", NULL},
  1505. {NULL, L"%systemroot%\\system32\\idwlog.exe", NULL},
  1506. {L"widwlog.exe", L"%systemroot%\\SysWOW64\\idwlog.exe", NULL},
  1507. {NULL, L"%systemroot%\\system32\\ie4uinit.exe", NULL},
  1508. {L"wie4uinit.exe", L"%systemroot%\\SysWOW64\\ie4uinit.exe", NULL},
  1509. {NULL, L"%systemroot%\\system32\\ieakeng.dll", NULL},
  1510. {L"wieakeng.dll", L"%systemroot%\\SysWOW64\\ieakeng.dll", NULL},
  1511. {NULL, L"%systemroot%\\system32\\ieaksie.dll", NULL},
  1512. {L"wieaksie.dll", L"%systemroot%\\SysWOW64\\ieaksie.dll", NULL},
  1513. {NULL, L"%systemroot%\\system32\\ieakui.dll", NULL},
  1514. {L"wieakui.dll", L"%systemroot%\\SysWOW64\\ieakui.dll", NULL},
  1515. {NULL, L"%systemroot%\\system32\\iedkcs32.dll", NULL},
  1516. {L"wiedkcs32.dll", L"%systemroot%\\SysWOW64\\iedkcs32.dll", NULL},
  1517. {NULL, L"%commonprogramfiles%\\Microsoft Shared\\MSInfo\\IEINFO5.OCX", NULL},
  1518. {L"wIEINFO5.OCX", L"%commonprogramfiles(x86)%\\Microsoft Shared\\MSInfo\\IEINFO5.OCX", NULL},
  1519. {NULL, L"%systemroot%\\system32\\iepeers.dll", NULL},
  1520. {L"wiepeers.dll", L"%systemroot%\\SysWOW64\\iepeers.dll", NULL},
  1521. {NULL, L"%systemroot%\\system32\\iernonce.dll", NULL},
  1522. {L"wiernonce.dll", L"%systemroot%\\SysWOW64\\iernonce.dll", NULL},
  1523. {NULL, L"%systemroot%\\system32\\iesetup.dll", NULL},
  1524. {L"wiesetup.dll", L"%systemroot%\\SysWOW64\\iesetup.dll", NULL},
  1525. {NULL, L"%ProgramFiles%\\Internet Explorer\\IEXPLORE.EXE", NULL},
  1526. {NULL, L"%systemroot%\\system32\\iexpress.exe", NULL},
  1527. {L"wiexpress.exe", L"%systemroot%\\SysWOW64\\iexpress.exe", NULL},
  1528. {NULL, L"%systemroot%\\system32\\ifmon.dll", NULL},
  1529. {L"wifmon.dll", L"%systemroot%\\SysWOW64\\ifmon.dll", NULL},
  1530. {NULL, L"%systemroot%\\system32\\ifsutil.dll", NULL},
  1531. {L"wifsutil.dll", L"%systemroot%\\SysWOW64\\ifsutil.dll", NULL},
  1532. {NULL, L"%systemroot%\\system32\\igmpagnt.dll", NULL},
  1533. {L"wigmpagnt.dll", L"%systemroot%\\SysWOW64\\igmpagnt.dll", NULL},
  1534. {NULL, L"%systemroot%\\system32\\igmpv2.dll", NULL},
  1535. {L"wigmpv2.dll", L"%systemroot%\\SysWOW64\\igmpv2.dll", NULL},
  1536. {NULL, L"%systemroot%\\system32\\Setup\\iis.dll", NULL},
  1537. {L"IIS_iis_switch.vbs", L"%systemroot%\\system32\\inetsrv\\iis_switch.vbs", L"iis.inf"},
  1538. {NULL, L"%systemroot%\\system32\\inetsrv\\iisadmin.dll", L"iis.inf"},
  1539. {NULL, L"%systemroot%\\system32\\iisapp.vbs", L"iis.inf"},
  1540. {NULL, L"%systemroot%\\system32\\iisback.vbs", L"iis.inf"},
  1541. {NULL, L"%systemroot%\\system32\\inetsrv\\iiscfg.dll", L"iis.inf"},
  1542. {NULL, L"%systemroot%\\system32\\inetsrv\\iisclex4.dll", L"iis.inf"},
  1543. {NULL, L"%systemroot%\\system32\\IIsCnfg.vbs", L"iis.inf"},
  1544. {NULL, L"%systemroot%\\system32\\iisext.vbs", L"iis.inf"},
  1545. {NULL, L"%systemroot%\\system32\\IIsFtp.vbs", L"iis.inf"},
  1546. {NULL, L"%systemroot%\\system32\\IIsFtpdr.vbs", L"iis.inf"},
  1547. {NULL, L"%systemroot%\\system32\\inetsrv\\iislog.dll", L"iis.inf"},
  1548. {NULL, L"%systemroot%\\system32\\iismui.dll", L"iis.inf"},
  1549. {NULL, L"%systemroot%\\system32\\inetsrv\\iisres.dll", L"iis.inf"},
  1550. {NULL, L"%systemroot%\\system32\\iissuba.dll", NULL},
  1551. {L"wiissuba.dll", L"%systemroot%\\SysWOW64\\iissuba.dll", NULL},
  1552. {NULL, L"%systemroot%\\system32\\inetsrv\\iisuiobj.dll", L"iis.inf"},
  1553. {NULL, L"%systemroot%\\system32\\inetsrv\\iisutil.dll", L"iis.inf"},
  1554. {NULL, L"%systemroot%\\system32\\iisvdir.vbs", L"iis.inf"},
  1555. {NULL, L"%systemroot%\\system32\\inetsrv\\iisw3adm.dll", L"iis.inf"},
  1556. {NULL, L"%systemroot%\\system32\\iisweb.vbs", L"iis.inf"},
  1557. {NULL, L"%systemroot%\\system32\\inetsrv\\iiswmi.dll", L"iis.inf"},
  1558. {NULL, L"%systemroot%\\system32\\imadmui.dll", NULL},
  1559. {L"wimadmui.dll", L"%systemroot%\\SysWOW64\\imadmui.dll", NULL},
  1560. {NULL, L"%systemroot%\\system32\\imagehlp.dll", NULL},
  1561. {L"wimagehlp.dll", L"%systemroot%\\SysWOW64\\imagehlp.dll", NULL},
  1562. {NULL, L"%systemroot%\\system32\\imapi.exe", NULL},
  1563. {NULL, L"%systemroot%\\system32\\drivers\\imapi.sys", NULL},
  1564. {NULL, L"%systemroot%\\ime\\IMKR6_1\\Dicts\\imekr.lex", L"intl.inf"},
  1565. {NULL, L"%systemroot%\\system32\\imekr61.ime", L"intl.inf"},
  1566. {NULL, L"%systemroot%\\ime\\IMKR6_1\\imekrcic.dll", L"intl.inf"},
  1567. {L"wimekrcic.dll", L"%systemroot%\\ime (x86)\\IMKR6_1\\imekrcic.dll", L"intl.inf"},
  1568. {NULL, L"%systemroot%\\ime\\IMKR6_1\\imekrmig.exe", L"intl.inf"},
  1569. {NULL, L"%systemroot%\\ime\\SHARED\\imepadsm.dll", L"intl.inf"},
  1570. {L"wimepadsm.dll", L"%systemroot%\\ime (x86)\\SHARED\\imepadsm.dll", L"intl.inf"},
  1571. {NULL, L"%systemroot%\\ime\\SHARED\\imepadsv.exe", L"intl.inf"},
  1572. {L"wimepadsv.exe", L"%systemroot%\\ime (x86)\\SHARED\\imepadsv.exe", L"intl.inf"},
  1573. {NULL, L"%systemroot%\\system32\\imgutil.dll", NULL},
  1574. {L"wimgutil.dll", L"%systemroot%\\SysWOW64\\imgutil.dll", NULL},
  1575. {NULL, L"%systemroot%\\system32\\imjp81.ime", L"intl.inf"},
  1576. {NULL, L"%systemroot%\\system32\\imjp81k.dll", L"intl.inf"},
  1577. {NULL, L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjpcd.dic", L"intl.inf"},
  1578. {L"wimjpcd.dic", L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjpcd.dic", L"intl.inf"},
  1579. {NULL, L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjpch.dic", L"intl.inf"},
  1580. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjpcic.dll", L"intl.inf"},
  1581. {L"wimjpcic.dll", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjpcic.dll", L"intl.inf"},
  1582. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjpcus.dll", L"intl.inf"},
  1583. {L"wimjpcus.dll", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjpcus.dll", L"intl.inf"},
  1584. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjpdadm.exe", L"intl.inf"},
  1585. {L"wimjpdadm.exe", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjpdadm.exe", L"intl.inf"},
  1586. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjpdct.dll", L"intl.inf"},
  1587. {L"wimjpdct.dll", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjpdct.dll", L"intl.inf"},
  1588. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjpdct.exe", L"intl.inf"},
  1589. {L"wimjpdct.exe", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjpdct.exe", L"intl.inf"},
  1590. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjpdsvr.exe", L"intl.inf"},
  1591. {L"wimjpdsvr.exe", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjpdsvr.exe", L"intl.inf"},
  1592. {NULL, L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjpgn.grm", L"intl.inf"},
  1593. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjpinst.exe", L"intl.inf"},
  1594. {L"wimjpinst.exe", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjpinst.exe", L"intl.inf"},
  1595. {NULL, L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjpln.dic", L"intl.inf"},
  1596. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjpmig.exe", L"intl.inf"},
  1597. {L"wimjpmig.exe", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjpmig.exe", L"intl.inf"},
  1598. {NULL, L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjpnm.dic", L"intl.inf"},
  1599. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjprw.exe", L"intl.inf"},
  1600. {L"wimjprw.exe", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjprw.exe", L"intl.inf"},
  1601. {NULL, L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjpsb.dic", L"intl.inf"},
  1602. {NULL, L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjpst.dic", L"intl.inf"},
  1603. {NULL, L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjptk.dic", L"intl.inf"},
  1604. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjpuex.exe", L"intl.inf"},
  1605. {L"wimjpuex.exe", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjpuex.exe", L"intl.inf"},
  1606. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjputy.exe", L"intl.inf"},
  1607. {L"wimjputy.exe", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjputy.exe", L"intl.inf"},
  1608. {NULL, L"%systemroot%\\ime\\IMJP8_1\\imjputyc.dll", L"intl.inf"},
  1609. {L"wimjputyc.dll", L"%systemroot%\\ime (x86)\\IMJP8_1\\imjputyc.dll", L"intl.inf"},
  1610. {NULL, L"%systemroot%\\ime (x86)\\IMJP8_1\\DICTS\\imjpzp.dic", L"intl.inf"},
  1611. {NULL, L"%systemroot%\\ime\\IMKR6_1\\imkrinst.exe", L"intl.inf"},
  1612. {NULL, L"%systemroot%\\ime\\SHARED\\imlang.dll", L"intl.inf"},
  1613. {L"wimlang.dll", L"%systemroot%\\ime (x86)\\SHARED\\imlang.dll", L"intl.inf"},
  1614. {NULL, L"%systemroot%\\system32\\imm32.dll", NULL},
  1615. {L"wimm32.dll", L"%systemroot%\\SysWOW64\\imm32.dll", NULL},
  1616. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\IMSCINST.EXE", L"intl.inf"},
  1617. {NULL, L"%systemroot%\\system32\\Setup\\imsinsnt.dll", NULL},
  1618. {NULL, L"%systemroot%\\ime\\IMJP8_1\\APPLETS\\imskdic.dll", L"intl.inf"},
  1619. {L"wimskdic.dll", L"%systemroot%\\ime (x86)\\IMJP8_1\\APPLETS\\imskdic.dll", L"intl.inf"},
  1620. {NULL, L"%systemroot%\\ime\\IMJP8_1\\APPLETS\\imskf.dll", L"intl.inf"},
  1621. {L"wimskf.dll", L"%systemroot%\\ime (x86)\\IMJP8_1\\APPLETS\\imskf.dll", L"intl.inf"},
  1622. {NULL, L"%systemroot%\\system32\\inetcfg.dll", NULL},
  1623. {NULL, L"%systemroot%\\system32\\inetcomm.dll", NULL},
  1624. {NULL, L"%systemroot%\\system32\\inetcpl.cpl", NULL},
  1625. {L"winetcpl.cpl", L"%systemroot%\\SysWOW64\\inetcpl.cpl", NULL},
  1626. {NULL, L"%systemroot%\\system32\\inetcplc.dll", NULL},
  1627. {L"winetcplc.dll", L"%systemroot%\\SysWOW64\\inetcplc.dll", NULL},
  1628. {NULL, L"%systemroot%\\system32\\inetsrv\\inetinfo.exe", L"iis.inf"},
  1629. {NULL, L"%systemroot%\\system32\\inetmib1.dll", NULL},
  1630. {L"winetmib1.dll", L"%systemroot%\\SysWOW64\\inetmib1.dll", NULL},
  1631. {NULL, L"%systemroot%\\system32\\inetpp.dll", NULL},
  1632. {L"winetpp.dll", L"%systemroot%\\SysWOW64\\inetpp.dll", NULL},
  1633. {NULL, L"%systemroot%\\system32\\inetppui.dll", NULL},
  1634. {L"winetppui.dll", L"%systemroot%\\SysWOW64\\inetppui.dll", NULL},
  1635. {NULL, L"%systemroot%\\system32\\inetres.dll", NULL},
  1636. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\inetwiz.exe", NULL},
  1637. {NULL, L"%systemroot%\\system32\\inetsrv\\infocomm.dll", L"iis.inf"},
  1638. {NULL, L"%systemroot%\\system32\\infoctrs.dll", L"iis.inf"},
  1639. {NULL, L"%systemroot%\\system32\\infosoft.dll", NULL},
  1640. {L"winfosoft.dll", L"%systemroot%\\SysWOW64\\infosoft.dll", NULL},
  1641. {NULL, L"%systemroot%\\system32\\initpki.dll", NULL},
  1642. {L"winitpki.dll", L"%systemroot%\\SysWOW64\\initpki.dll", NULL},
  1643. {NULL, L"%systemroot%\\system32\\input.dll", NULL},
  1644. {L"winput.dll", L"%systemroot%\\SysWOW64\\input.dll", NULL},
  1645. {NULL, L"%systemroot%\\system32\\inseng.dll", NULL},
  1646. {L"winseng.dll", L"%systemroot%\\SysWOW64\\inseng.dll", NULL},
  1647. {NULL, L"%systemroot%\\system32\\clients\\tsclient\\win32\\instmsia.exe", NULL},
  1648. {NULL, L"%systemroot%\\system32\\clients\\tsclient\\win32\\instmsiw.exe", NULL},
  1649. {NULL, L"%systemroot%\\system32\\drivers\\intelide.sys", NULL},
  1650. {NULL, L"%systemroot%\\system32\\intl.cpl", NULL},
  1651. {L"wintl.cpl", L"%systemroot%\\SysWOW64\\intl.cpl", NULL},
  1652. {NULL, L"%systemroot%\\system32\\inuse.exe", NULL},
  1653. {L"winuse.exe", L"%systemroot%\\SysWOW64\\inuse.exe", NULL},
  1654. {NULL, L"%systemroot%\\system32\\iologmsg.dll", NULL},
  1655. {L"wiologmsg.dll", L"%systemroot%\\SysWOW64\\iologmsg.dll", NULL},
  1656. {NULL, L"%systemroot%\\system32\\ipbootp.dll", NULL},
  1657. {L"wipbootp.dll", L"%systemroot%\\SysWOW64\\ipbootp.dll", NULL},
  1658. {NULL, L"%systemroot%\\system32\\ipconf.tsp", NULL},
  1659. {L"wipconf.tsp", L"%systemroot%\\SysWOW64\\ipconf.tsp", NULL},
  1660. {NULL, L"%systemroot%\\system32\\ipconfig.exe", NULL},
  1661. {L"wipconfig.exe", L"%systemroot%\\SysWOW64\\ipconfig.exe", NULL},
  1662. {NULL, L"%systemroot%\\system32\\drivers\\ipfltdrv.sys", NULL},
  1663. {NULL, L"%systemroot%\\system32\\iphlpapi.dll", NULL},
  1664. {L"wiphlpapi.dll", L"%systemroot%\\SysWOW64\\iphlpapi.dll", NULL},
  1665. {NULL, L"%systemroot%\\system32\\ipmontr.dll", NULL},
  1666. {L"wipmontr.dll", L"%systemroot%\\SysWOW64\\ipmontr.dll", NULL},
  1667. {NULL, L"%systemroot%\\system32\\drivers\\ipnat.sys", NULL},
  1668. {NULL, L"%systemroot%\\system32\\ipnathlp.dll", NULL},
  1669. {L"wipnathlp.dll", L"%systemroot%\\SysWOW64\\ipnathlp.dll", NULL},
  1670. {NULL, L"%systemroot%\\system32\\ippromon.dll", NULL},
  1671. {L"wippromon.dll", L"%systemroot%\\SysWOW64\\ippromon.dll", NULL},
  1672. {NULL, L"%systemroot%\\system32\\iprip.dll", NULL},
  1673. {L"wiprip.dll", L"%systemroot%\\SysWOW64\\iprip.dll", NULL},
  1674. {NULL, L"%systemroot%\\system32\\iprip2.dll", NULL},
  1675. {L"wiprip2.dll", L"%systemroot%\\SysWOW64\\iprip2.dll", NULL},
  1676. {NULL, L"%systemroot%\\system32\\iprop.dll", NULL},
  1677. {L"wiprop.dll", L"%systemroot%\\SysWOW64\\iprop.dll", NULL},
  1678. {NULL, L"%systemroot%\\system32\\iprtprio.dll", NULL},
  1679. {L"wiprtprio.dll", L"%systemroot%\\SysWOW64\\iprtprio.dll", NULL},
  1680. {NULL, L"%systemroot%\\system32\\iprtrmgr.dll", NULL},
  1681. {L"wiprtrmgr.dll", L"%systemroot%\\SysWOW64\\iprtrmgr.dll", NULL},
  1682. {NULL, L"%systemroot%\\system32\\ipsec6.exe", NULL},
  1683. {L"wipsec6.exe", L"%systemroot%\\SysWOW64\\ipsec6.exe", NULL},
  1684. {NULL, L"%systemroot%\\system32\\ipsecsnp.dll", NULL},
  1685. {L"wipsecsnp.dll", L"%systemroot%\\SysWOW64\\ipsecsnp.dll", NULL},
  1686. {NULL, L"%systemroot%\\system32\\ipsecsvc.dll", NULL},
  1687. {L"wipsecsvc.dll", L"%systemroot%\\SysWOW64\\ipsecsvc.dll", NULL},
  1688. {NULL, L"%systemroot%\\system32\\ipsink.ax", NULL},
  1689. {L"wipsink.ax", L"%systemroot%\\SysWOW64\\ipsink.ax", NULL},
  1690. {NULL, L"%systemroot%\\system32\\ipsmsnap.dll", NULL},
  1691. {L"wipsmsnap.dll", L"%systemroot%\\SysWOW64\\ipsmsnap.dll", NULL},
  1692. {NULL, L"%systemroot%\\system32\\ipsnap.dll", NULL},
  1693. {L"wipsnap.dll", L"%systemroot%\\SysWOW64\\ipsnap.dll", NULL},
  1694. {NULL, L"%systemroot%\\system32\\ipv6mon.dll", NULL},
  1695. {L"wipv6mon.dll", L"%systemroot%\\SysWOW64\\ipv6mon.dll", NULL},
  1696. {L"bhp005.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\IPX.DLL", NULL},
  1697. {L"wipxroute.exe", L"%systemroot%\\SysWOW64\\ipxroute.exe", NULL},
  1698. {L"wipxsap.dll", L"%systemroot%\\SysWOW64\\ipxsap.dll", NULL},
  1699. {NULL, L"%systemroot%\\system32\\drivers\\irbus.sys", NULL},
  1700. {NULL, L"%systemroot%\\system32\\inetsrv\\isapips.dll", L"iis.inf"},
  1701. {NULL, L"%systemroot%\\system32\\drivers\\isapnp.sys", NULL},
  1702. {NULL, L"%systemroot%\\system32\\inetsrv\\iscomlog.dll", L"iis.inf"},
  1703. {NULL, L"%systemroot%\\system32\\isign32.dll", NULL},
  1704. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\isignup.exe", NULL},
  1705. {NULL, L"%systemroot%\\system32\\ismip.dll", NULL},
  1706. {L"wismip.dll", L"%systemroot%\\SysWOW64\\ismip.dll", NULL},
  1707. {NULL, L"%systemroot%\\system32\\ismserv.exe", NULL},
  1708. {L"wismserv.exe", L"%systemroot%\\SysWOW64\\ismserv.exe", NULL},
  1709. {NULL, L"%systemroot%\\system32\\ismsink.dll", NULL},
  1710. {L"wismsink.dll", L"%systemroot%\\SysWOW64\\ismsink.dll", NULL},
  1711. {NULL, L"%systemroot%\\system32\\ismsmtp.dll", NULL},
  1712. {L"wismsmtp.dll", L"%systemroot%\\SysWOW64\\ismsmtp.dll", NULL},
  1713. {NULL, L"%systemroot%\\system32\\inetsrv\\isrpc.dll", L"ins.inf"},
  1714. {NULL, L"%systemroot%\\system32\\iuctl.dll", NULL},
  1715. {NULL, L"%systemroot%\\system32\\iuengine.dll", NULL},
  1716. {NULL, L"%systemroot%\\system32\\ixsso.dll", NULL},
  1717. {L"wixsso.dll", L"%systemroot%\\SysWOW64\\ixsso.dll", NULL},
  1718. {L"wiyuv_32.dll", L"%systemroot%\\SysWOW64\\iyuv_32.dll", NULL},
  1719. {NULL, L"%systemroot%\\system32\\jet.dll", NULL},
  1720. {L"wjet.dll", L"%systemroot%\\SysWOW64\\jet.dll", NULL},
  1721. {NULL, L"%systemroot%\\system32\\jet500.dll", NULL},
  1722. {L"wjet500.dll", L"%systemroot%\\SysWOW64\\jet500.dll", NULL},
  1723. {NULL, L"%systemroot%\\system32\\jetconv.exe", NULL},
  1724. {L"wjetconv.exe", L"%systemroot%\\SysWOW64\\jetconv.exe", NULL},
  1725. {NULL, L"%systemroot%\\system32\\jetpack.exe", NULL},
  1726. {L"wjetpack.exe", L"%systemroot%\\SysWOW64\\jetpack.exe", NULL},
  1727. {L"wjgaw400.dll", L"%systemroot%\\SysWOW64\\jgaw400.dll", NULL},
  1728. {L"wjgdw400.dll", L"%systemroot%\\SysWOW64\\jgdw400.dll", NULL},
  1729. {L"wjgmd400.dll", L"%systemroot%\\SysWOW64\\jgmd400.dll", NULL},
  1730. {L"wjgpl400.dll", L"%systemroot%\\SysWOW64\\jgpl400.dll", NULL},
  1731. {L"wjgsd400.dll", L"%systemroot%\\SysWOW64\\jgsd400.dll", NULL},
  1732. {L"wjgsh400.dll", L"%systemroot%\\SysWOW64\\jgsh400.dll", NULL},
  1733. {L"wjobexec.dll", L"%systemroot%\\SysWOW64\\jobexec.dll", NULL},
  1734. {NULL, L"%systemroot%\\system32\\joy.cpl", NULL},
  1735. {L"wjoy.cpl", L"%systemroot%\\SysWOW64\\joy.cpl", NULL},
  1736. {NULL, L"%systemroot%\\system32\\drivers\\jvcmc.sys", NULL},
  1737. {NULL, L"%systemroot%\\system32\\kbd101.dll", NULL},
  1738. {L"wkbd101.dll", L"%systemroot%\\SysWOW64\\kbd101.dll", NULL},
  1739. {NULL, L"%systemroot%\\system32\\kbd101a.dll", NULL},
  1740. {L"wkbd101a.dll", L"%systemroot%\\SysWOW64\\kbd101a.dll", NULL},
  1741. {NULL, L"%systemroot%\\system32\\kbd101b.dll", NULL},
  1742. {L"wkbd101b.dll", L"%systemroot%\\SysWOW64\\kbd101b.dll", NULL},
  1743. {NULL, L"%systemroot%\\system32\\kbd101c.dll", NULL},
  1744. {L"wkbd101c.dll", L"%systemroot%\\SysWOW64\\kbd101c.dll", NULL},
  1745. {NULL, L"%systemroot%\\system32\\kbd103.dll", NULL},
  1746. {L"wkbd103.dll", L"%systemroot%\\SysWOW64\\kbd103.dll", NULL},
  1747. {NULL, L"%systemroot%\\system32\\kbd106.dll", NULL},
  1748. {L"wkbd106.dll", L"%systemroot%\\SysWOW64\\kbd106.dll", NULL},
  1749. {NULL, L"%systemroot%\\system32\\kbd106n.dll", NULL},
  1750. {L"wkbd106n.dll", L"%systemroot%\\SysWOW64\\kbd106n.dll", NULL},
  1751. {NULL, L"%systemroot%\\system32\\kbda1.dll", L"intl.inf"},
  1752. {NULL, L"%systemroot%\\system32\\kbda1.dll", NULL},
  1753. {L"wkbda1.dll", L"%systemroot%\\SysWOW64\\kbda1.dll", NULL},
  1754. {NULL, L"%systemroot%\\system32\\kbda2.dll", L"intl.inf"},
  1755. {NULL, L"%systemroot%\\system32\\kbda2.dll", NULL},
  1756. {L"wkbda2.dll", L"%systemroot%\\SysWOW64\\kbda2.dll", NULL},
  1757. {NULL, L"%systemroot%\\system32\\kbda3.dll", L"intl.inf"},
  1758. {NULL, L"%systemroot%\\system32\\kbda3.dll", NULL},
  1759. {L"wkbda3.dll", L"%systemroot%\\SysWOW64\\kbda3.dll", NULL},
  1760. {NULL, L"%systemroot%\\system32\\kbdal.dll", NULL},
  1761. {L"wkbdal.dll", L"%systemroot%\\SysWOW64\\kbdal.dll", NULL},
  1762. {NULL, L"%systemroot%\\system32\\kbdarme.dll", NULL},
  1763. {L"wkbdarme.dll", L"%systemroot%\\SysWOW64\\kbdarme.dll", NULL},
  1764. {NULL, L"%systemroot%\\system32\\kbdarmw.dll", NULL},
  1765. {L"wkbdarmw.dll", L"%systemroot%\\SysWOW64\\kbdarmw.dll", NULL},
  1766. {NULL, L"%systemroot%\\system32\\kbdax2.dll", NULL},
  1767. {L"wkbdax2.dll", L"%systemroot%\\SysWOW64\\kbdax2.dll", NULL},
  1768. {NULL, L"%systemroot%\\system32\\kbdaze.dll", NULL},
  1769. {L"wkbdaze.dll", L"%systemroot%\\SysWOW64\\kbdaze.dll", NULL},
  1770. {NULL, L"%systemroot%\\system32\\kbdazel.dll", NULL},
  1771. {L"wkbdazel.dll", L"%systemroot%\\SysWOW64\\kbdazel.dll", NULL},
  1772. {NULL, L"%systemroot%\\system32\\kbdbe.dll", NULL},
  1773. {L"wkbdbe.dll", L"%systemroot%\\SysWOW64\\kbdbe.dll", NULL},
  1774. {NULL, L"%systemroot%\\system32\\kbdbene.dll", NULL},
  1775. {L"wkbdbene.dll", L"%systemroot%\\SysWOW64\\kbdbene.dll", NULL},
  1776. {NULL, L"%systemroot%\\system32\\kbdblr.dll", NULL},
  1777. {L"wkbdblr.dll", L"%systemroot%\\SysWOW64\\kbdblr.dll", NULL},
  1778. {NULL, L"%systemroot%\\system32\\kbdbr.dll", NULL},
  1779. {L"wkbdbr.dll", L"%systemroot%\\SysWOW64\\kbdbr.dll", NULL},
  1780. {NULL, L"%systemroot%\\system32\\kbdbu.dll", NULL},
  1781. {L"wkbdbu.dll", L"%systemroot%\\SysWOW64\\kbdbu.dll", NULL},
  1782. {NULL, L"%systemroot%\\system32\\kbdca.dll", NULL},
  1783. {L"wkbdca.dll", L"%systemroot%\\SysWOW64\\kbdca.dll", NULL},
  1784. {NULL, L"%systemroot%\\system32\\kbdcan.dll", NULL},
  1785. {L"wkbdcan.dll", L"%systemroot%\\SysWOW64\\kbdcan.dll", NULL},
  1786. {NULL, L"%systemroot%\\system32\\drivers\\kbdclass.sys", NULL},
  1787. {NULL, L"%systemroot%\\system32\\kbdcr.dll", NULL},
  1788. {L"wkbdcr.dll", L"%systemroot%\\SysWOW64\\kbdcr.dll", NULL},
  1789. {NULL, L"%systemroot%\\system32\\kbdcz.dll", NULL},
  1790. {L"wkbdcz.dll", L"%systemroot%\\SysWOW64\\kbdcz.dll", NULL},
  1791. {NULL, L"%systemroot%\\system32\\kbdcz1.dll", NULL},
  1792. {L"wkbdcz1.dll", L"%systemroot%\\SysWOW64\\kbdcz1.dll", NULL},
  1793. {NULL, L"%systemroot%\\system32\\kbdcz2.dll", NULL},
  1794. {L"wkbdcz2.dll", L"%systemroot%\\SysWOW64\\kbdcz2.dll", NULL},
  1795. {NULL, L"%systemroot%\\system32\\kbdda.dll", NULL},
  1796. {L"wkbdda.dll", L"%systemroot%\\SysWOW64\\kbdda.dll", NULL},
  1797. {NULL, L"%systemroot%\\system32\\kbddiv1.dll", L"intl.inf"},
  1798. {NULL, L"%systemroot%\\system32\\kbddiv1.dll", NULL},
  1799. {L"wkbddiv1.dll", L"%systemroot%\\SysWOW64\\kbddiv1.dll", NULL},
  1800. {NULL, L"%systemroot%\\system32\\kbddiv2.dll", L"intl.inf"},
  1801. {NULL, L"%systemroot%\\system32\\kbddiv2.dll", NULL},
  1802. {L"wkbddiv2.dll", L"%systemroot%\\SysWOW64\\kbddiv2.dll", NULL},
  1803. {NULL, L"%systemroot%\\system32\\kbddv.dll", NULL},
  1804. {L"wkbddv.dll", L"%systemroot%\\SysWOW64\\kbddv.dll", NULL},
  1805. {NULL, L"%systemroot%\\system32\\kbdes.dll", NULL},
  1806. {L"wkbdes.dll", L"%systemroot%\\SysWOW64\\kbdes.dll", NULL},
  1807. {NULL, L"%systemroot%\\system32\\kbdest.dll", NULL},
  1808. {L"wkbdest.dll", L"%systemroot%\\SysWOW64\\kbdest.dll", NULL},
  1809. {NULL, L"%systemroot%\\system32\\kbdfa.dll", L"intl.inf"},
  1810. {NULL, L"%systemroot%\\system32\\kbdfa.dll", NULL},
  1811. {L"wkbdfa.dll", L"%systemroot%\\SysWOW64\\kbdfa.dll", NULL},
  1812. {NULL, L"%systemroot%\\system32\\kbdfc.dll", NULL},
  1813. {L"wkbdfc.dll", L"%systemroot%\\SysWOW64\\kbdfc.dll", NULL},
  1814. {NULL, L"%systemroot%\\system32\\kbdfi.dll", NULL},
  1815. {L"wkbdfi.dll", L"%systemroot%\\SysWOW64\\kbdfi.dll", NULL},
  1816. {NULL, L"%systemroot%\\system32\\kbdfo.dll", NULL},
  1817. {L"wkbdfo.dll", L"%systemroot%\\SysWOW64\\kbdfo.dll", NULL},
  1818. {NULL, L"%systemroot%\\system32\\kbdfr.dll", NULL},
  1819. {L"wkbdfr.dll", L"%systemroot%\\SysWOW64\\kbdfr.dll", NULL},
  1820. {NULL, L"%systemroot%\\system32\\kbdgae.dll", NULL},
  1821. {L"wkbdgae.dll", L"%systemroot%\\SysWOW64\\kbdgae.dll", NULL},
  1822. {NULL, L"%systemroot%\\system32\\kbdgeo.dll", NULL},
  1823. {L"wkbdgeo.dll", L"%systemroot%\\SysWOW64\\kbdgeo.dll", NULL},
  1824. {NULL, L"%systemroot%\\system32\\kbdgkl.dll", NULL},
  1825. {L"wkbdgkl.dll", L"%systemroot%\\SysWOW64\\kbdgkl.dll", NULL},
  1826. {NULL, L"%systemroot%\\system32\\kbdgr.dll", NULL},
  1827. {L"wkbdgr.dll", L"%systemroot%\\SysWOW64\\kbdgr.dll", NULL},
  1828. {NULL, L"%systemroot%\\system32\\kbdgr1.dll", NULL},
  1829. {L"wkbdgr1.dll", L"%systemroot%\\SysWOW64\\kbdgr1.dll", NULL},
  1830. {NULL, L"%systemroot%\\system32\\kbdhe.dll", NULL},
  1831. {L"wkbdhe.dll", L"%systemroot%\\SysWOW64\\kbdhe.dll", NULL},
  1832. {NULL, L"%systemroot%\\system32\\kbdhe220.dll", NULL},
  1833. {L"wkbdhe220.dll", L"%systemroot%\\SysWOW64\\kbdhe220.dll", NULL},
  1834. {NULL, L"%systemroot%\\system32\\kbdhe319.dll", NULL},
  1835. {L"wkbdhe319.dll", L"%systemroot%\\SysWOW64\\kbdhe319.dll", NULL},
  1836. {NULL, L"%systemroot%\\system32\\kbdheb.dll", L"intl.inf"},
  1837. {NULL, L"%systemroot%\\system32\\kbdheb.dll", NULL},
  1838. {L"wkbdheb.dll", L"%systemroot%\\SysWOW64\\kbdheb.dll", NULL},
  1839. {NULL, L"%systemroot%\\system32\\kbdhela2.dll", NULL},
  1840. {L"wkbdhela2.dll", L"%systemroot%\\SysWOW64\\kbdhela2.dll", NULL},
  1841. {NULL, L"%systemroot%\\system32\\kbdhela3.dll", NULL},
  1842. {L"wkbdhela3.dll", L"%systemroot%\\SysWOW64\\kbdhela3.dll", NULL},
  1843. {NULL, L"%systemroot%\\system32\\kbdhept.dll", NULL},
  1844. {L"wkbdhept.dll", L"%systemroot%\\SysWOW64\\kbdhept.dll", NULL},
  1845. {NULL, L"%systemroot%\\system32\\drivers\\kbdhid.sys", NULL},
  1846. {NULL, L"%systemroot%\\system32\\kbdhu.dll", NULL},
  1847. {L"wkbdhu.dll", L"%systemroot%\\SysWOW64\\kbdhu.dll", NULL},
  1848. {NULL, L"%systemroot%\\system32\\kbdhu1.dll", NULL},
  1849. {L"wkbdhu1.dll", L"%systemroot%\\SysWOW64\\kbdhu1.dll", NULL},
  1850. {NULL, L"%systemroot%\\system32\\kbdibm02.dll", NULL},
  1851. {L"wkbdibm02.dll", L"%systemroot%\\SysWOW64\\kbdibm02.dll", NULL},
  1852. {NULL, L"%systemroot%\\system32\\kbdic.dll", NULL},
  1853. {L"wkbdic.dll", L"%systemroot%\\SysWOW64\\kbdic.dll", NULL},
  1854. {NULL, L"%systemroot%\\system32\\kbdindev.dll", L"intl.inf"},
  1855. {NULL, L"%systemroot%\\system32\\kbdindev.dll", NULL},
  1856. {L"wkbdindev.dll", L"%systemroot%\\SysWOW64\\kbdindev.dll", NULL},
  1857. {NULL, L"%systemroot%\\system32\\kbdinguj.dll", L"intl.inf"},
  1858. {NULL, L"%systemroot%\\system32\\kbdinguj.dll", NULL},
  1859. {L"wkbdinguj.dll", L"%systemroot%\\SysWOW64\\kbdinguj.dll", NULL},
  1860. {NULL, L"%systemroot%\\system32\\kbdinhin.dll", L"intl.inf"},
  1861. {NULL, L"%systemroot%\\system32\\kbdinhin.dll", NULL},
  1862. {L"wkbdinhin.dll", L"%systemroot%\\SysWOW64\\kbdinhin.dll", NULL},
  1863. {NULL, L"%systemroot%\\system32\\kbdinkan.dll", L"intl.inf"},
  1864. {NULL, L"%systemroot%\\system32\\kbdinkan.dll", NULL},
  1865. {L"wkbdinkan.dll", L"%systemroot%\\SysWOW64\\kbdinkan.dll", NULL},
  1866. {NULL, L"%systemroot%\\system32\\kbdinmar.dll", L"intl.inf"},
  1867. {NULL, L"%systemroot%\\system32\\kbdinmar.dll", NULL},
  1868. {L"wkbdinmar.dll", L"%systemroot%\\SysWOW64\\kbdinmar.dll", NULL},
  1869. {NULL, L"%systemroot%\\system32\\kbdinpun.dll", L"intl.inf"},
  1870. {NULL, L"%systemroot%\\system32\\kbdinpun.dll", NULL},
  1871. {L"wkbdinpun.dll", L"%systemroot%\\SysWOW64\\kbdinpun.dll", NULL},
  1872. {NULL, L"%systemroot%\\system32\\kbdintam.dll", L"intl.inf"},
  1873. {NULL, L"%systemroot%\\system32\\kbdintam.dll", NULL},
  1874. {L"wkbdintam.dll", L"%systemroot%\\SysWOW64\\kbdintam.dll", NULL},
  1875. {NULL, L"%systemroot%\\system32\\kbdintel.dll", L"intl.inf"},
  1876. {NULL, L"%systemroot%\\system32\\kbdintel.dll", NULL},
  1877. {L"wkbdintel.dll", L"%systemroot%\\SysWOW64\\kbdintel.dll", NULL},
  1878. {NULL, L"%systemroot%\\system32\\kbdir.dll", NULL},
  1879. {L"wkbdir.dll", L"%systemroot%\\SysWOW64\\kbdir.dll", NULL},
  1880. {NULL, L"%systemroot%\\system32\\kbdit.dll", NULL},
  1881. {L"wkbdit.dll", L"%systemroot%\\SysWOW64\\kbdit.dll", NULL},
  1882. {NULL, L"%systemroot%\\system32\\kbdit142.dll", NULL},
  1883. {L"wkbdit142.dll", L"%systemroot%\\SysWOW64\\kbdit142.dll", NULL},
  1884. {NULL, L"%systemroot%\\system32\\kbdjpn.dll", NULL},
  1885. {L"wkbdjpn.dll", L"%systemroot%\\SysWOW64\\kbdjpn.dll", NULL},
  1886. {NULL, L"%systemroot%\\system32\\kbdkaz.dll", NULL},
  1887. {L"wkbdkaz.dll", L"%systemroot%\\SysWOW64\\kbdkaz.dll", NULL},
  1888. {NULL, L"%systemroot%\\system32\\kbdkor.dll", NULL},
  1889. {L"wkbdkor.dll", L"%systemroot%\\SysWOW64\\kbdkor.dll", NULL},
  1890. {NULL, L"%systemroot%\\system32\\kbdkyr.dll", NULL},
  1891. {L"wkbdkyr.dll", L"%systemroot%\\SysWOW64\\kbdkyr.dll", NULL},
  1892. {NULL, L"%systemroot%\\system32\\kbdla.dll", NULL},
  1893. {L"wkbdla.dll", L"%systemroot%\\SysWOW64\\kbdla.dll", NULL},
  1894. {NULL, L"%systemroot%\\system32\\kbdlk41a.dll", NULL},
  1895. {L"wkbdlk41a.dll", L"%systemroot%\\SysWOW64\\kbdlk41a.dll", NULL},
  1896. {NULL, L"%systemroot%\\system32\\kbdlk41j.dll", NULL},
  1897. {L"wkbdlk41j.dll", L"%systemroot%\\SysWOW64\\kbdlk41j.dll", NULL},
  1898. {NULL, L"%systemroot%\\system32\\kbdlt.dll", NULL},
  1899. {L"wkbdlt.dll", L"%systemroot%\\SysWOW64\\kbdlt.dll", NULL},
  1900. {NULL, L"%systemroot%\\system32\\kbdlt1.dll", NULL},
  1901. {L"wkbdlt1.dll", L"%systemroot%\\SysWOW64\\kbdlt1.dll", NULL},
  1902. {NULL, L"%systemroot%\\system32\\kbdlv.dll", NULL},
  1903. {L"wkbdlv.dll", L"%systemroot%\\SysWOW64\\kbdlv.dll", NULL},
  1904. {NULL, L"%systemroot%\\system32\\kbdlv1.dll", NULL},
  1905. {L"wkbdlv1.dll", L"%systemroot%\\SysWOW64\\kbdlv1.dll", NULL},
  1906. {NULL, L"%systemroot%\\system32\\kbdmac.dll", NULL},
  1907. {L"wkbdmac.dll", L"%systemroot%\\SysWOW64\\kbdmac.dll", NULL},
  1908. {NULL, L"%systemroot%\\system32\\kbdmon.dll", NULL},
  1909. {L"wkbdmon.dll", L"%systemroot%\\SysWOW64\\kbdmon.dll", NULL},
  1910. {NULL, L"%systemroot%\\system32\\kbdne.dll", NULL},
  1911. {L"wkbdne.dll", L"%systemroot%\\SysWOW64\\kbdne.dll", NULL},
  1912. {NULL, L"%systemroot%\\system32\\kbdnec.dll", NULL},
  1913. {L"wkbdnec.dll", L"%systemroot%\\SysWOW64\\kbdnec.dll", NULL},
  1914. {NULL, L"%systemroot%\\system32\\kbdnec95.dll", NULL},
  1915. {L"wkbdnec95.dll", L"%systemroot%\\SysWOW64\\kbdnec95.dll", NULL},
  1916. {NULL, L"%systemroot%\\system32\\kbdnecat.dll", NULL},
  1917. {L"wkbdnecat.dll", L"%systemroot%\\SysWOW64\\kbdnecat.dll", NULL},
  1918. {NULL, L"%systemroot%\\system32\\kbdnecnt.dll", NULL},
  1919. {L"wkbdnecnt.dll", L"%systemroot%\\SysWOW64\\kbdnecnt.dll", NULL},
  1920. {NULL, L"%systemroot%\\system32\\kbdno.dll", NULL},
  1921. {L"wkbdno.dll", L"%systemroot%\\SysWOW64\\kbdno.dll", NULL},
  1922. {NULL, L"%systemroot%\\system32\\kbdpl.dll", NULL},
  1923. {L"wkbdpl.dll", L"%systemroot%\\SysWOW64\\kbdpl.dll", NULL},
  1924. {NULL, L"%systemroot%\\system32\\kbdpl1.dll", NULL},
  1925. {L"wkbdpl1.dll", L"%systemroot%\\SysWOW64\\kbdpl1.dll", NULL},
  1926. {NULL, L"%systemroot%\\system32\\kbdpo.dll", NULL},
  1927. {L"wkbdpo.dll", L"%systemroot%\\SysWOW64\\kbdpo.dll", NULL},
  1928. {NULL, L"%systemroot%\\system32\\kbdro.dll", NULL},
  1929. {L"wkbdro.dll", L"%systemroot%\\SysWOW64\\kbdro.dll", NULL},
  1930. {NULL, L"%systemroot%\\system32\\kbdru.dll", NULL},
  1931. {L"wkbdru.dll", L"%systemroot%\\SysWOW64\\kbdru.dll", NULL},
  1932. {NULL, L"%systemroot%\\system32\\kbdru1.dll", NULL},
  1933. {L"wkbdru1.dll", L"%systemroot%\\SysWOW64\\kbdru1.dll", NULL},
  1934. {NULL, L"%systemroot%\\system32\\kbdsf.dll", NULL},
  1935. {L"wkbdsf.dll", L"%systemroot%\\SysWOW64\\kbdsf.dll", NULL},
  1936. {NULL, L"%systemroot%\\system32\\kbdsg.dll", NULL},
  1937. {L"wkbdsg.dll", L"%systemroot%\\SysWOW64\\kbdsg.dll", NULL},
  1938. {NULL, L"%systemroot%\\system32\\kbdsl.dll", NULL},
  1939. {L"wkbdsl.dll", L"%systemroot%\\SysWOW64\\kbdsl.dll", NULL},
  1940. {NULL, L"%systemroot%\\system32\\kbdsl1.dll", NULL},
  1941. {L"wkbdsl1.dll", L"%systemroot%\\SysWOW64\\kbdsl1.dll", NULL},
  1942. {NULL, L"%systemroot%\\system32\\kbdsp.dll", NULL},
  1943. {L"wkbdsp.dll", L"%systemroot%\\SysWOW64\\kbdsp.dll", NULL},
  1944. {NULL, L"%systemroot%\\system32\\kbdsw.dll", NULL},
  1945. {L"wkbdsw.dll", L"%systemroot%\\SysWOW64\\kbdsw.dll", NULL},
  1946. {NULL, L"%systemroot%\\system32\\kbdsyr1.dll", L"intl.inf"},
  1947. {NULL, L"%systemroot%\\system32\\kbdsyr1.dll", NULL},
  1948. {L"wkbdsyr1.dll", L"%systemroot%\\SysWOW64\\kbdsyr1.dll", NULL},
  1949. {NULL, L"%systemroot%\\system32\\kbdsyr2.dll", L"intl.inf"},
  1950. {NULL, L"%systemroot%\\system32\\kbdsyr2.dll", NULL},
  1951. {L"wkbdsyr2.dll", L"%systemroot%\\SysWOW64\\kbdsyr2.dll", NULL},
  1952. {NULL, L"%systemroot%\\system32\\kbdtat.dll", NULL},
  1953. {L"wkbdtat.dll", L"%systemroot%\\SysWOW64\\kbdtat.dll", NULL},
  1954. {NULL, L"%systemroot%\\system32\\kbdth0.dll", L"intl.inf"},
  1955. {NULL, L"%systemroot%\\system32\\kbdth0.dll", NULL},
  1956. {L"wkbdth0.dll", L"%systemroot%\\SysWOW64\\kbdth0.dll", NULL},
  1957. {NULL, L"%systemroot%\\system32\\kbdth1.dll", L"intl.inf"},
  1958. {NULL, L"%systemroot%\\system32\\kbdth1.dll", NULL},
  1959. {L"wkbdth1.dll", L"%systemroot%\\SysWOW64\\kbdth1.dll", NULL},
  1960. {NULL, L"%systemroot%\\system32\\kbdth2.dll", L"intl.inf"},
  1961. {NULL, L"%systemroot%\\system32\\kbdth2.dll", NULL},
  1962. {L"wkbdth2.dll", L"%systemroot%\\SysWOW64\\kbdth2.dll", NULL},
  1963. {NULL, L"%systemroot%\\system32\\kbdth3.dll", L"intl.inf"},
  1964. {NULL, L"%systemroot%\\system32\\kbdth3.dll", NULL},
  1965. {L"wkbdth3.dll", L"%systemroot%\\SysWOW64\\kbdth3.dll", NULL},
  1966. {NULL, L"%systemroot%\\system32\\kbdtuf.dll", NULL},
  1967. {L"wkbdtuf.dll", L"%systemroot%\\SysWOW64\\kbdtuf.dll", NULL},
  1968. {NULL, L"%systemroot%\\system32\\kbdtuq.dll", NULL},
  1969. {L"wkbdtuq.dll", L"%systemroot%\\SysWOW64\\kbdtuq.dll", NULL},
  1970. {NULL, L"%systemroot%\\system32\\kbduk.dll", NULL},
  1971. {L"wkbduk.dll", L"%systemroot%\\SysWOW64\\kbduk.dll", NULL},
  1972. {NULL, L"%systemroot%\\system32\\kbdur.dll", NULL},
  1973. {L"wkbdur.dll", L"%systemroot%\\SysWOW64\\kbdur.dll", NULL},
  1974. {NULL, L"%systemroot%\\system32\\kbdurdu.dll", L"intl.inf"},
  1975. {NULL, L"%systemroot%\\system32\\kbdurdu.dll", NULL},
  1976. {L"wkbdurdu.dll", L"%systemroot%\\SysWOW64\\kbdurdu.dll", NULL},
  1977. {NULL, L"%systemroot%\\system32\\kbdus.dll", NULL},
  1978. {L"wkbdus.dll", L"%systemroot%\\SysWOW64\\kbdus.dll", NULL},
  1979. {NULL, L"%systemroot%\\system32\\kbdusa.dll", NULL},
  1980. {NULL, L"%systemroot%\\system32\\kbdusl.dll", NULL},
  1981. {L"wkbdusl.dll", L"%systemroot%\\SysWOW64\\kbdusl.dll", NULL},
  1982. {NULL, L"%systemroot%\\system32\\kbdusr.dll", NULL},
  1983. {L"wkbdusr.dll", L"%systemroot%\\SysWOW64\\kbdusr.dll", NULL},
  1984. {NULL, L"%systemroot%\\system32\\kbdusx.dll", NULL},
  1985. {L"wkbdusx.dll", L"%systemroot%\\SysWOW64\\kbdusx.dll", NULL},
  1986. {NULL, L"%systemroot%\\system32\\kbduzb.dll", NULL},
  1987. {L"wkbduzb.dll", L"%systemroot%\\SysWOW64\\kbduzb.dll", NULL},
  1988. {NULL, L"%systemroot%\\system32\\kbdvntc.dll", NULL},
  1989. {L"wkbdvntc.dll", L"%systemroot%\\SysWOW64\\kbdvntc.dll", NULL},
  1990. {NULL, L"%systemroot%\\system32\\kbdycc.dll", NULL},
  1991. {L"wkbdycc.dll", L"%systemroot%\\SysWOW64\\kbdycc.dll", NULL},
  1992. {NULL, L"%systemroot%\\system32\\kbdycl.dll", NULL},
  1993. {L"wkbdycl.dll", L"%systemroot%\\SysWOW64\\kbdycl.dll", NULL},
  1994. {NULL, L"%systemroot%\\system32\\kd1394.dll", NULL},
  1995. {NULL, L"%systemroot%\\system32\\kdcom.dll", NULL},
  1996. {NULL, L"%systemroot%\\system32\\kdcsvc.dll", NULL},
  1997. {NULL, L"%systemroot%\\system32\\kerberos.dll", NULL},
  1998. {L"wkerberos.dll", L"%systemroot%\\SysWOW64\\kerberos.dll", NULL},
  1999. {NULL, L"%systemroot%\\system32\\NETMON\\PARSERS\\kerbprsr.dll", NULL},
  2000. {L"wkeyboard.drv", L"%systemroot%\\SysWOW64\\keyboard.drv", NULL},
  2001. {NULL, L"%systemroot%\\system32\\keymgr.cpl", NULL},
  2002. {L"wkeymgr.cpl", L"%systemroot%\\SysWOW64\\keymgr.cpl", NULL},
  2003. {NULL, L"%systemroot%\\system32\\keymgr.dll", NULL},
  2004. {L"wkeymgr.dll", L"%systemroot%\\SysWOW64\\keymgr.dll", NULL},
  2005. {NULL, L"%systemroot%\\system32\\kmddsp.tsp", NULL},
  2006. {L"wkmddsp.tsp", L"%systemroot%\\SysWOW64\\kmddsp.tsp", NULL},
  2007. {NULL, L"%systemroot%\\system32\\drivers\\kmixer.sys", NULL},
  2008. {NULL, L"%systemroot%\\system32\\korwbrkr.dll", L"intl.inf"},
  2009. {NULL, L"%systemroot%\\system32\\korwbrkr.lex", L"intl.inf"},
  2010. {NULL, L"%systemroot%\\system32\\wbem\\krnlprov.dll", NULL},
  2011. {NULL, L"%systemroot%\\system32\\drivers\\ks.sys", NULL},
  2012. {NULL, L"%systemroot%\\system32\\ksc.nls", NULL},
  2013. {L"wksc.nls", L"%systemroot%\\SysWOW64\\ksc.nls", NULL},
  2014. {NULL, L"%systemroot%\\system32\\drivers\\ksecdd.sys", NULL},
  2015. {NULL, L"%systemroot%\\system32\\ksproxy.ax", NULL},
  2016. {NULL, L"%systemroot%\\system32\\kstvtune.ax", NULL},
  2017. {NULL, L"%systemroot%\\system32\\ksuser.dll", NULL},
  2018. {NULL, L"%systemroot%\\system32\\ksxbar.ax", NULL},
  2019. {NULL, L"%systemroot%\\system32\\l_except.nls", NULL},
  2020. {L"wl_except.nls", L"%systemroot%\\SysWOW64\\l_except.nls", NULL},
  2021. {NULL, L"%systemroot%\\system32\\l_intl.nls", NULL},
  2022. {L"wl_intl.nls", L"%systemroot%\\SysWOW64\\l_intl.nls", NULL},
  2023. {NULL, L"%systemroot%\\system32\\label.exe", NULL},
  2024. {L"wlabel.exe", L"%systemroot%\\SysWOW64\\label.exe", NULL},
  2025. {L"bhp023.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\LANE.DLL", NULL},
  2026. {NULL, L"%systemroot%\\system32\\langwrbk.dll", NULL},
  2027. {L"wlangwrbk.dll", L"%systemroot%\\SysWOW64\\langwrbk.dll", NULL},
  2028. {NULL, L"%systemroot%\\system32\\lcwiz.exe", NULL},
  2029. {L"wlcwiz.exe", L"%systemroot%\\SysWOW64\\lcwiz.exe", NULL},
  2030. {L"bhp025.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\LDAP.DLL", NULL},
  2031. {NULL, L"%systemroot%\\system32\\ldifde.exe", NULL},
  2032. {NULL, L"%systemroot%\\system32\\drivers\\libxprmc.sys", NULL},
  2033. {NULL, L"%systemroot%\\system32\\liccpa.cpl", NULL},
  2034. {L"wliccpa.cpl", L"%systemroot%\\SysWOW64\\liccpa.cpl", NULL},
  2035. {NULL, L"%systemroot%\\system32\\Setup\\licenoc.dll", NULL},
  2036. {NULL, L"%systemroot%\\system32\\licmgr.exe", NULL},
  2037. {NULL, L"%systemroot%\\system32\\licmgr10.dll", NULL},
  2038. {L"wlicmgr10.dll", L"%systemroot%\\SysWOW64\\licmgr10.dll", NULL},
  2039. {NULL, L"%systemroot%\\system32\\linkinfo.dll", NULL},
  2040. {L"wlinkinfo.dll", L"%systemroot%\\SysWOW64\\linkinfo.dll", NULL},
  2041. {NULL, L"%systemroot%\\system32\\drivers\\LIT220P.SYS", NULL},
  2042. {L"bhp006.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\LLC.DLL", NULL},
  2043. {NULL, L"%systemroot%\\system32\\llsmgr.exe", NULL},
  2044. {L"wllsmgr.exe", L"%systemroot%\\SysWOW64\\llsmgr.exe", NULL},
  2045. {NULL, L"%systemroot%\\system32\\llsrpc.dll", NULL},
  2046. {L"wllsrpc.dll", L"%systemroot%\\SysWOW64\\llsrpc.dll", NULL},
  2047. {NULL, L"%systemroot%\\system32\\llssrv.exe", NULL},
  2048. {L"wllssrv.exe", L"%systemroot%\\SysWOW64\\llssrv.exe", NULL},
  2049. {NULL, L"%systemroot%\\system32\\lmhsvc.dll", NULL},
  2050. {L"wlmhsvc.dll", L"%systemroot%\\SysWOW64\\lmhsvc.dll", NULL},
  2051. {NULL, L"%systemroot%\\system32\\lmmib2.dll", NULL},
  2052. {L"wlmmib2.dll", L"%systemroot%\\SysWOW64\\lmmib2.dll", NULL},
  2053. {L"wlmrt.dll", L"%systemroot%\\SysWOW64\\lmrt.dll", NULL},
  2054. {L"wlnkstub.exe", L"%systemroot%\\SysWOW64\\lnkstub.exe", NULL},
  2055. {NULL, L"%systemroot%\\system32\\loadperf.dll", NULL},
  2056. {L"wloadperf.dll", L"%systemroot%\\SysWOW64\\loadperf.dll", NULL},
  2057. {NULL, L"%systemroot%\\system32\\locale.nls", NULL},
  2058. {L"wlocale.nls", L"%systemroot%\\SysWOW64\\locale.nls", NULL},
  2059. {NULL, L"%systemroot%\\system32\\localsec.dll", NULL},
  2060. {L"wlocalsec.dll", L"%systemroot%\\SysWOW64\\localsec.dll", NULL},
  2061. {NULL, L"%systemroot%\\system32\\localspl.dll", NULL},
  2062. {NULL, L"%systemroot%\\system32\\localui.dll", NULL},
  2063. {L"wlocalui.dll", L"%systemroot%\\SysWOW64\\localui.dll", NULL},
  2064. {NULL, L"%systemroot%\\system32\\locator.exe", NULL},
  2065. {L"wlocator.exe", L"%systemroot%\\SysWOW64\\locator.exe", NULL},
  2066. {NULL, L"%systemroot%\\system32\\lodctr.exe", NULL},
  2067. {L"wlodctr.exe", L"%systemroot%\\SysWOW64\\lodctr.exe", NULL},
  2068. {NULL, L"%systemroot%\\system32\\loghours.dll", NULL},
  2069. {L"wloghours.dll", L"%systemroot%\\SysWOW64\\loghours.dll", NULL},
  2070. {NULL, L"%systemroot%\\system32\\logman.exe", NULL},
  2071. {L"wlogman.exe", L"%systemroot%\\SysWOW64\\logman.exe", NULL},
  2072. {NULL, L"%systemroot%\\system32\\logoff.exe", NULL},
  2073. {L"bhp019.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\LOGON.DLL", NULL},
  2074. {NULL, L"%systemroot%\\system32\\logon.scr", NULL},
  2075. {NULL, L"%systemroot%\\system32\\logonui.exe", NULL},
  2076. {L"wlogonui.exe", L"%systemroot%\\SysWOW64\\logonui.exe", NULL},
  2077. {NULL, L"%systemroot%\\system32\\inetsrv\\logscrpt.dll", L"iis.inf"},
  2078. {NULL, L"%systemroot%\\system32\\inetsrv\\lonsint.dll", L"iis.inf"},
  2079. {NULL, L"%systemroot%\\system32\\drivers\\loop.sys", NULL},
  2080. {NULL, L"%systemroot%\\system32\\drivers\\lp6nds35.sys", NULL},
  2081. {NULL, L"%systemroot%\\system32\\lpdsvc.dll", NULL},
  2082. {L"wlpdsvc.dll", L"%systemroot%\\SysWOW64\\lpdsvc.dll", NULL},
  2083. {NULL, L"%systemroot%\\system32\\lpk.dll", NULL},
  2084. {L"wlpk.dll", L"%systemroot%\\SysWOW64\\lpk.dll", NULL},
  2085. {NULL, L"%systemroot%\\system32\\lpq.exe", NULL},
  2086. {L"wlpq.exe", L"%systemroot%\\SysWOW64\\lpq.exe", NULL},
  2087. {NULL, L"%systemroot%\\system32\\lpr.exe", NULL},
  2088. {L"wlpr.exe", L"%systemroot%\\SysWOW64\\lpr.exe", NULL},
  2089. {NULL, L"%systemroot%\\system32\\lprhelp.dll", NULL},
  2090. {L"wlprhelp.dll", L"%systemroot%\\SysWOW64\\lprhelp.dll", NULL},
  2091. {NULL, L"%systemroot%\\system32\\lprmon.dll", NULL},
  2092. {L"wlprmon.dll", L"%systemroot%\\SysWOW64\\lprmon.dll", NULL},
  2093. {NULL, L"%systemroot%\\system32\\lprmonui.dll", NULL},
  2094. {L"wlprmonui.dll", L"%systemroot%\\SysWOW64\\lprmonui.dll", NULL},
  2095. {NULL, L"%systemroot%\\system32\\lrwizdll.dll", NULL},
  2096. {L"bhp020.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\LSARPC.DLL", NULL},
  2097. {NULL, L"%systemroot%\\system32\\lsass.exe", NULL},
  2098. {NULL, L"%systemroot%\\system32\\lserver.exe", NULL},
  2099. {NULL, L"%systemroot%\\system32\\drivers\\ltotape.sys", NULL},
  2100. {NULL, L"%commonprogramfiles%\\SpeechEngines\\Microsoft\\Lexicon\\1033\\ltts1033.lxa", NULL},
  2101. {NULL, L"%systemroot%\\system32\\lz32.dll", NULL},
  2102. {L"wlz32.dll", L"%systemroot%\\SysWOW64\\lz32.dll", NULL},
  2103. {L"wlzexpand.dll", L"%systemroot%\\SysWOW64\\lzexpand.dll", NULL},
  2104. {NULL, L"%systemroot%\\system32\\drivers\\m4mc.sys", NULL},
  2105. {L"bhp007.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\MAC.DLL", NULL},
  2106. {NULL, L"%systemroot%\\system32\\macfile.exe", NULL},
  2107. {L"wmacfile.exe", L"%systemroot%\\SysWOW64\\macfile.exe", NULL},
  2108. {NULL, L"%systemroot%\\system32\\mag_hook.dll", NULL},
  2109. {L"wmag_hook.dll", L"%systemroot%\\SysWOW64\\mag_hook.dll", NULL},
  2110. {NULL, L"%systemroot%\\system32\\magnify.exe", NULL},
  2111. {L"wmagnify.exe", L"%systemroot%\\SysWOW64\\magnify.exe", NULL},
  2112. {NULL, L"%systemroot%\\system32\\inetsrv\\mailmsg.dll", L"ims.inf"},
  2113. {NULL, L"%systemroot%\\system32\\main.cpl", NULL},
  2114. {L"wmain.cpl", L"%systemroot%\\SysWOW64\\main.cpl", NULL},
  2115. {NULL, L"%systemroot%\\system32\\makecab.exe", NULL},
  2116. {L"wmakecab.exe", L"%systemroot%\\SysWOW64\\makecab.exe", NULL},
  2117. {NULL, L"%systemroot%\\system32\\drivers\\mammoth.sys", NULL},
  2118. {NULL, L"%systemroot%\\system32\\NETMON\\PARSERS\\mcast.dll", NULL},
  2119. {NULL, L"%systemroot%\\system32\\mcastmib.dll", NULL},
  2120. {L"wmcastmib.dll", L"%systemroot%\\SysWOW64\\mcastmib.dll", NULL},
  2121. {NULL, L"%systemroot%\\system32\\drivers\\mcd.sys", NULL},
  2122. {NULL, L"%systemroot%\\system32\\mcd32.dll", NULL},
  2123. {L"wmcd32.dll", L"%systemroot%\\SysWOW64\\mcd32.dll", NULL},
  2124. {NULL, L"%systemroot%\\system32\\mcdsrv32.dll", NULL},
  2125. {NULL, L"%systemroot%\\system32\\mchgrcoi.dll", NULL},
  2126. {L"wmchgrcoi.dll", L"%systemroot%\\SysWOW64\\mchgrcoi.dll", NULL},
  2127. {NULL, L"%systemroot%\\system32\\mciavi.drv", NULL},
  2128. {L"wmciavi.drv", L"%systemroot%\\SysWOW64\\mciavi.drv", NULL},
  2129. {NULL, L"%systemroot%\\system32\\mciavi32.dll", NULL},
  2130. {L"wmciavi32.dll", L"%systemroot%\\SysWOW64\\mciavi32.dll", NULL},
  2131. {NULL, L"%systemroot%\\system32\\mcicda.dll", NULL},
  2132. {L"wmcicda.dll", L"%systemroot%\\SysWOW64\\mcicda.dll", NULL},
  2133. {L"wmciole16.dll", L"%systemroot%\\SysWOW64\\mciole16.dll", NULL},
  2134. {NULL, L"%systemroot%\\system32\\mciole32.dll", NULL},
  2135. {L"wmciole32.dll", L"%systemroot%\\SysWOW64\\mciole32.dll", NULL},
  2136. {NULL, L"%systemroot%\\system32\\mciqtz32.dll", NULL},
  2137. {L"wmciqtz32.dll", L"%systemroot%\\SysWOW64\\mciqtz32.dll", NULL},
  2138. {NULL, L"%systemroot%\\system32\\mciseq.dll", NULL},
  2139. {L"wmciseq.dll", L"%systemroot%\\SysWOW64\\mciseq.dll", NULL},
  2140. {NULL, L"%systemroot%\\system32\\mciseq.drv", NULL},
  2141. {L"wmciseq.drv", L"%systemroot%\\SysWOW64\\mciseq.drv", NULL},
  2142. {NULL, L"%systemroot%\\system32\\mciwave.dll", NULL},
  2143. {L"wmciwave.dll", L"%systemroot%\\SysWOW64\\mciwave.dll", NULL},
  2144. {NULL, L"%systemroot%\\system32\\mciwave.drv", NULL},
  2145. {L"wmciwave.drv", L"%systemroot%\\SysWOW64\\mciwave.drv", NULL},
  2146. {NULL, L"%systemroot%\\system32\\mdhcp.dll", NULL},
  2147. {L"wmdhcp.dll", L"%systemroot%\\SysWOW64\\mdhcp.dll", NULL},
  2148. {NULL, L"%systemroot%\\system32\\mdminst.dll", NULL},
  2149. {L"wmdminst.dll", L"%systemroot%\\SysWOW64\\mdminst.dll", NULL},
  2150. {L"wmdwmdmsp.dll", L"%systemroot%\\SysWOW64\\mdwmdmsp.dll", NULL},
  2151. {NULL, L"%systemroot%\\system32\\drivers\\memcard.sys", NULL},
  2152. {NULL, L"%systemroot%\\system32\\inetsrv\\metadata.dll", L"iis.inf"},
  2153. {NULL, L"%systemroot%\\system32\\drivers\\mf.sys", NULL},
  2154. {NULL, L"%systemroot%\\system32\\mf3216.dll", NULL},
  2155. {L"wmf3216.dll", L"%systemroot%\\SysWOW64\\mf3216.dll", NULL},
  2156. {NULL, L"%systemroot%\\system32\\mfc42.dll", NULL},
  2157. {NULL, L"%systemroot%\\system32\\mfc42u.dll", NULL},
  2158. {NULL, L"%systemroot%\\system32\\mgmtapi.dll", NULL},
  2159. {L"wmgmtapi.dll", L"%systemroot%\\SysWOW64\\mgmtapi.dll", NULL},
  2160. {NULL, L"%systemroot%\\system32\\midimap.dll", NULL},
  2161. {L"wmidimap.dll", L"%systemroot%\\SysWOW64\\midimap.dll", NULL},
  2162. {L"wmigisol.exe", L"%systemroot%\\SysWOW64\\migisol.exe", NULL},
  2163. {NULL, L"%systemroot%\\system32\\miglibnt.dll", NULL},
  2164. {L"wmiglibnt.dll", L"%systemroot%\\SysWOW64\\miglibnt.dll", NULL},
  2165. {L"wmigpwd.exe", L"%systemroot%\\SysWOW64\\migpwd.exe", NULL},
  2166. {NULL, L"%systemroot%\\system32\\Com\\migregdb.exe", NULL},
  2167. {NULL, L"%systemroot%\\system32\\mimefilt.dll", NULL},
  2168. {L"wmimefilt.dll", L"%systemroot%\\SysWOW64\\mimefilt.dll", NULL},
  2169. {L"wmindex.dll", L"%systemroot%\\SysWOW64\\mindex.dll", NULL},
  2170. {NULL, L"%systemroot%\\system32\\drivers\\miniqic.sys", NULL},
  2171. {NULL, L"%systemroot%\\system32\\mlang.dat", NULL},
  2172. {L"wmlang.dat", L"%systemroot%\\SysWOW64\\mlang.dat", NULL},
  2173. {NULL, L"%systemroot%\\system32\\mlang.dll", NULL},
  2174. {L"wmlang.dll", L"%systemroot%\\SysWOW64\\mlang.dll", NULL},
  2175. {NULL, L"%systemroot%\\system32\\mll_hp.dll", NULL},
  2176. {L"wmll_hp.dll", L"%systemroot%\\SysWOW64\\mll_hp.dll", NULL},
  2177. {NULL, L"%systemroot%\\system32\\mll_mtf.dll", NULL},
  2178. {L"wmll_mtf.dll", L"%systemroot%\\SysWOW64\\mll_mtf.dll", NULL},
  2179. {NULL, L"%systemroot%\\system32\\mll_qic.dll", NULL},
  2180. {L"wmll_qic.dll", L"%systemroot%\\SysWOW64\\mll_qic.dll", NULL},
  2181. {NULL, L"%systemroot%\\system32\\mmc.exe", NULL},
  2182. {L"wmmc.exe", L"%systemroot%\\SysWOW64\\mmc.exe", NULL},
  2183. {NULL, L"%systemroot%\\system32\\mmcbase.dll", NULL},
  2184. {L"wmmcbase.dll", L"%systemroot%\\SysWOW64\\mmcbase.dll", NULL},
  2185. {NULL, L"%systemroot%\\system32\\mmcndmgr.dll", NULL},
  2186. {L"wmmcndmgr.dll", L"%systemroot%\\SysWOW64\\mmcndmgr.dll", NULL},
  2187. {NULL, L"%systemroot%\\system32\\mmcshext.dll", NULL},
  2188. {L"wmmcshext.dll", L"%systemroot%\\SysWOW64\\mmcshext.dll", NULL},
  2189. {NULL, L"%systemroot%\\system32\\mmfutil.dll", NULL},
  2190. {NULL, L"%systemroot%\\system32\\mmsys.cpl", NULL},
  2191. {L"wmmsys.cpl", L"%systemroot%\\SysWOW64\\mmsys.cpl", NULL},
  2192. {L"wmmsystem.dll", L"%systemroot%\\SysWOW64\\mmsystem.dll", NULL},
  2193. {L"wmmutilse.dll", L"%systemroot%\\SysWOW64\\mmutilse.dll", NULL},
  2194. {NULL, L"%systemroot%\\system32\\mobsync.dll", NULL},
  2195. {L"wmobsync.dll", L"%systemroot%\\SysWOW64\\mobsync.dll", NULL},
  2196. {NULL, L"%systemroot%\\system32\\mobsync.exe", NULL},
  2197. {L"wmobsync.exe", L"%systemroot%\\SysWOW64\\mobsync.exe", NULL},
  2198. {NULL, L"%systemroot%\\system32\\drivers\\modem.sys", NULL},
  2199. {NULL, L"%systemroot%\\system32\\drivers\\MODEMCSA.sys", NULL},
  2200. {NULL, L"%systemroot%\\system32\\modemui.dll", NULL},
  2201. {L"wmodemui.dll", L"%systemroot%\\SysWOW64\\modemui.dll", NULL},
  2202. {NULL, L"%systemroot%\\system32\\modex.dll", NULL},
  2203. {NULL, L"%systemroot%\\system32\\wbem\\mofcomp.exe", NULL},
  2204. {NULL, L"%systemroot%\\system32\\wbem\\mofd.dll", NULL},
  2205. {NULL, L"%systemroot%\\system32\\moricons.dll", NULL},
  2206. {L"wmoricons.dll", L"%systemroot%\\SysWOW64\\moricons.dll", NULL},
  2207. {NULL, L"%systemroot%\\system32\\drivers\\mouclass.sys", NULL},
  2208. {NULL, L"%systemroot%\\system32\\drivers\\mouhid.sys", NULL},
  2209. {NULL, L"%systemroot%\\system32\\drivers\\mountmgr.sys", NULL},
  2210. {NULL, L"%systemroot%\\system32\\mountvol.exe", NULL},
  2211. {L"wmountvol.exe", L"%systemroot%\\SysWOW64\\mountvol.exe", NULL},
  2212. {NULL, L"%systemroot%\\system32\\mpg2splt.ax", NULL},
  2213. {L"wmpg2splt.ax", L"%systemroot%\\SysWOW64\\mpg2splt.ax", NULL},
  2214. {L"wmpg4dmod.dll", L"%systemroot%\\SysWOW64\\mpg4dmod.dll", NULL},
  2215. {NULL, L"%systemroot%\\system32\\mplay32.exe", NULL},
  2216. {NULL, L"%systemroot%\\system32\\mpnotify.exe", NULL},
  2217. {L"wmpnotify.exe", L"%systemroot%\\SysWOW64\\mpnotify.exe", NULL},
  2218. {NULL, L"%systemroot%\\system32\\mpr.dll", NULL},
  2219. {L"wmpr.dll", L"%systemroot%\\SysWOW64\\mpr.dll", NULL},
  2220. {NULL, L"%systemroot%\\system32\\mprapi.dll", NULL},
  2221. {L"wmprapi.dll", L"%systemroot%\\SysWOW64\\mprapi.dll", NULL},
  2222. {NULL, L"%systemroot%\\system32\\mprddm.dll", NULL},
  2223. {L"wmprddm.dll", L"%systemroot%\\SysWOW64\\mprddm.dll", NULL},
  2224. {NULL, L"%systemroot%\\system32\\mprdim.dll", NULL},
  2225. {L"wmprdim.dll", L"%systemroot%\\SysWOW64\\mprdim.dll", NULL},
  2226. {NULL, L"%systemroot%\\system32\\mprmsg.dll", NULL},
  2227. {L"wmprmsg.dll", L"%systemroot%\\SysWOW64\\mprmsg.dll", NULL},
  2228. {NULL, L"%systemroot%\\system32\\mprsnap.dll", NULL},
  2229. {L"wmprsnap.dll", L"%systemroot%\\SysWOW64\\mprsnap.dll", NULL},
  2230. {NULL, L"%systemroot%\\system32\\mprui.dll", NULL},
  2231. {L"wmprui.dll", L"%systemroot%\\SysWOW64\\mprui.dll", NULL},
  2232. {NULL, L"%systemroot%\\system32\\drivers\\mqac.sys", NULL},
  2233. {NULL, L"%systemroot%\\system32\\mqad.dll", NULL},
  2234. {L"wmqad.dll", L"%systemroot%\\SysWOW64\\mqad.dll", NULL},
  2235. {NULL, L"%systemroot%\\system32\\mqads.dll", NULL},
  2236. {NULL, L"%systemroot%\\system32\\mqbkup.exe", NULL},
  2237. {NULL, L"%systemroot%\\system32\\mqcertui.dll", NULL},
  2238. {NULL, L"%systemroot%\\Cluster\\MQClus.dll", NULL},
  2239. {NULL, L"%systemroot%\\system32\\mqdscli.dll", NULL},
  2240. {L"wmqdscli.dll", L"%systemroot%\\SysWOW64\\mqdscli.dll", NULL},
  2241. {NULL, L"%systemroot%\\system32\\mqdssrv.dll", NULL},
  2242. {NULL, L"%systemroot%\\system32\\mqdssvc.exe", NULL},
  2243. {NULL, L"%systemroot%\\system32\\mqgentr.dll", NULL},
  2244. {NULL, L"%systemroot%\\system32\\mqise.dll", NULL},
  2245. {NULL, L"%systemroot%\\system32\\mqlogmgr.dll", NULL},
  2246. {NULL, L"%systemroot%\\system32\\mqoa.dll", NULL},
  2247. {L"wmqoa.dll", L"%systemroot%\\SysWOW64\\mqoa.dll", NULL},
  2248. {NULL, L"%systemroot%\\system32\\mqoa10.tlb", NULL},
  2249. {NULL, L"%systemroot%\\system32\\mqoa20.tlb", NULL},
  2250. {NULL, L"%systemroot%\\system32\\mqperf.dll", NULL},
  2251. {L"wmqperf.dll", L"%systemroot%\\SysWOW64\\mqperf.dll", NULL},
  2252. {NULL, L"%systemroot%\\system32\\mqqm.dll", NULL},
  2253. {NULL, L"%systemroot%\\system32\\mqrt.dll", NULL},
  2254. {L"wmqrt.dll", L"%systemroot%\\SysWOW64\\mqrt.dll", NULL},
  2255. {NULL, L"%systemroot%\\system32\\mqrtdep.dll", NULL},
  2256. {NULL, L"%systemroot%\\system32\\mqsec.dll", NULL},
  2257. {L"wmqsec.dll", L"%systemroot%\\SysWOW64\\mqsec.dll", NULL},
  2258. {NULL, L"%systemroot%\\system32\\mqsnap.dll", NULL},
  2259. {NULL, L"%systemroot%\\system32\\mqsvc.exe", NULL},
  2260. {NULL, L"%systemroot%\\system32\\mqtgclus.dll", NULL},
  2261. {NULL, L"%systemroot%\\system32\\mqtgsvc.exe", NULL},
  2262. {NULL, L"%systemroot%\\system32\\mqtrig.dll", NULL},
  2263. {NULL, L"%systemroot%\\system32\\mqupgrd.dll", NULL},
  2264. {NULL, L"%systemroot%\\system32\\mqutil.dll", NULL},
  2265. {L"wmqutil.dll", L"%systemroot%\\SysWOW64\\mqutil.dll", NULL},
  2266. {NULL, L"%systemroot%\\system32\\drivers\\mraid35x.sys", NULL},
  2267. {NULL, L"%systemroot%\\system32\\mrinfo.exe", NULL},
  2268. {L"wmrinfo.exe", L"%systemroot%\\SysWOW64\\mrinfo.exe", NULL},
  2269. {NULL, L"%systemroot%\\system32\\drivers\\mrxdav.sys", NULL},
  2270. {NULL, L"%systemroot%\\system32\\drivers\\mrxsmb.sys", NULL},
  2271. {NULL, L"%systemroot%\\system32\\msaatext.dll", NULL},
  2272. {L"wmsaatext.dll", L"%systemroot%\\SysWOW64\\msaatext.dll", NULL},
  2273. {NULL, L"%systemroot%\\system32\\msacm.dll", NULL},
  2274. {L"wmsacm.dll", L"%systemroot%\\SysWOW64\\msacm.dll", NULL},
  2275. {NULL, L"%systemroot%\\system32\\msacm32.dll", NULL},
  2276. {L"wmsacm32.dll", L"%systemroot%\\SysWOW64\\msacm32.dll", NULL},
  2277. {NULL, L"%commonprogramfiles%\\System\\ado\\msado25.tlb", NULL},
  2278. {L"wmsado25.tlb", L"%commonprogramfiles(x86)%\\System\\ado\\msado25.tlb", NULL},
  2279. {NULL, L"%commonprogramfiles%\\System\\ado\\msado26.tlb", NULL},
  2280. {L"wmsado26.tlb", L"%commonprogramfiles(x86)%\\System\\ado\\msado26.tlb", NULL},
  2281. {NULL, L"%systemroot%\\system32\\msafd.dll", NULL},
  2282. {L"wmsafd.dll", L"%systemroot%\\SysWOW64\\msafd.dll", NULL},
  2283. {L"wmsapsspc.dll", L"%systemroot%\\SysWOW64\\msapsspc.dll", NULL},
  2284. {NULL, L"%systemroot%\\system32\\msasn1.dll", NULL},
  2285. {L"wmsasn1.dll", L"%systemroot%\\SysWOW64\\msasn1.dll", NULL},
  2286. {NULL, L"%systemroot%\\system32\\msaudite.dll", NULL},
  2287. {L"wmsaudite.dll", L"%systemroot%\\SysWOW64\\msaudite.dll", NULL},
  2288. {NULL, L"%systemroot%\\ime\\mscandui.dll", NULL},
  2289. {L"wmscandui.dll", L"%systemroot%\\ime (x86)\\mscandui.dll", NULL},
  2290. {NULL, L"%systemroot%\\system32\\mscat32.dll", NULL},
  2291. {L"wmscat32.dll", L"%systemroot%\\SysWOW64\\mscat32.dll", NULL},
  2292. {NULL, L"%systemroot%\\system32\\msclus.dll", NULL},
  2293. {L"wmsclus.dll", L"%systemroot%\\SysWOW64\\msclus.dll", NULL},
  2294. {NULL, L"%systemroot%\\system32\\mscms.dll", NULL},
  2295. {L"wmscms.dll", L"%systemroot%\\SysWOW64\\mscms.dll", NULL},
  2296. {NULL, L"%systemroot%\\PCHealth\\HelpCtr\\Binaries\\msconfig.exe", NULL},
  2297. {L"wmscpx32r.dLL", L"%systemroot%\\SysWOW64\\mscpx32r.dLL", NULL},
  2298. {NULL, L"%systemroot%\\system32\\MSCTF.dll", NULL},
  2299. {L"wMSCTF.dll", L"%systemroot%\\SysWOW64\\MSCTF.dll", NULL},
  2300. {NULL, L"%systemroot%\\system32\\MSCTFIME.IME", NULL},
  2301. {L"wMSCTFIME.IME", L"%systemroot%\\SysWOW64\\MSCTFIME.IME", NULL},
  2302. {NULL, L"%systemroot%\\system32\\MSCTFP.dll", NULL},
  2303. {L"wMSCTFP.dll", L"%systemroot%\\SysWOW64\\MSCTFP.dll", NULL},
  2304. {L"wmsdaorar.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdaorar.dll", NULL},
  2305. {NULL, L"%systemroot%\\system32\\msdart.dll", NULL},
  2306. {L"wmsdart.dll", L"%systemroot%\\SysWOW64\\msdart.dll", NULL},
  2307. {NULL, L"%commonprogramfiles%\\System\\Ole DB\\msdatl3.dll", NULL},
  2308. {L"wmsdatl3.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\msdatl3.dll", NULL},
  2309. {NULL, L"%systemroot%\\system32\\msdmo.dll", NULL},
  2310. {L"wmsdmo.dll", L"%systemroot%\\SysWOW64\\msdmo.dll", NULL},
  2311. {NULL, L"%systemroot%\\system32\\msdtc.exe", NULL},
  2312. {NULL, L"%systemroot%\\system32\\msdtclog.dll", NULL},
  2313. {NULL, L"%systemroot%\\system32\\msdtcprx.dll", NULL},
  2314. {NULL, L"%systemroot%\\system32\\Setup\\msdtcstp.dll", NULL},
  2315. {NULL, L"%systemroot%\\system32\\msdtctm.dll", NULL},
  2316. {NULL, L"%systemroot%\\system32\\msdtcuiu.dll", NULL},
  2317. {NULL, L"%systemroot%\\system32\\msdvbnp.ax", NULL},
  2318. {L"wmsdvbnp.ax", L"%systemroot%\\SysWOW64\\msdvbnp.ax", NULL},
  2319. {NULL, L"%systemroot%\\system32\\msenc64.dll", NULL},
  2320. {NULL, L"%systemroot%\\system32\\drivers\\msfs.sys", NULL},
  2321. {NULL, L"%systemroot%\\system32\\msftedit.dll", NULL},
  2322. {L"wmsftedit.dll", L"%systemroot%\\SysWOW64\\msftedit.dll", NULL},
  2323. {NULL, L"%systemroot%\\system32\\msg.exe", NULL},
  2324. {NULL, L"%systemroot%\\system32\\msgina.dll", NULL},
  2325. {L"wmsgina.dll", L"%systemroot%\\SysWOW64\\msgina.dll", NULL},
  2326. {NULL, L"%systemroot%\\system32\\drivers\\msgpc.sys", NULL},
  2327. {NULL, L"%systemroot%\\system32\\msgsvc.dll", NULL},
  2328. {NULL, L"%systemroot%\\system32\\mshta.exe", NULL},
  2329. {L"wmshta.exe", L"%systemroot%\\SysWOW64\\mshta.exe", NULL},
  2330. {NULL, L"%systemroot%\\system32\\mshtml.dll", NULL},
  2331. {L"wmshtml.dll", L"%systemroot%\\SysWOW64\\mshtml.dll", NULL},
  2332. {NULL, L"%systemroot%\\system32\\mshtml.tlb", NULL},
  2333. {L"wmshtml.tlb", L"%systemroot%\\SysWOW64\\mshtml.tlb", NULL},
  2334. {NULL, L"%systemroot%\\system32\\mshtmled.dll", NULL},
  2335. {L"wmshtmled.dll", L"%systemroot%\\SysWOW64\\mshtmled.dll", NULL},
  2336. {NULL, L"%systemroot%\\system32\\mshtmler.dll", NULL},
  2337. {L"wmshtmler.dll", L"%systemroot%\\SysWOW64\\mshtmler.dll", NULL},
  2338. {NULL, L"%systemroot%\\system32\\msi.dll", NULL},
  2339. {L"wmsi.dll", L"%systemroot%\\SysWOW64\\msi.dll", NULL},
  2340. {NULL, L"%systemroot%\\system32\\msident.dll", NULL},
  2341. {L"wmsident.dll", L"%systemroot%\\SysWOW64\\msident.dll", NULL},
  2342. {NULL, L"%systemroot%\\system32\\msidle.dll", NULL},
  2343. {L"wmsidle.dll", L"%systemroot%\\SysWOW64\\msidle.dll", NULL},
  2344. {NULL, L"%systemroot%\\system32\\msidntld.dll", NULL},
  2345. {L"wmsidntld.dll", L"%systemroot%\\SysWOW64\\msidntld.dll", NULL},
  2346. {NULL, L"%systemroot%\\system32\\msieftp.dll", NULL},
  2347. {L"wmsieftp.dll", L"%systemroot%\\SysWOW64\\msieftp.dll", NULL},
  2348. {NULL, L"%systemroot%\\system32\\msiexec.exe", NULL},
  2349. {L"wmsiexec.exe", L"%systemroot%\\SysWOW64\\msiexec.exe", NULL},
  2350. {NULL, L"%systemroot%\\system32\\msihnd.dll", NULL},
  2351. {L"wmsihnd.dll", L"%systemroot%\\SysWOW64\\msihnd.dll", NULL},
  2352. {NULL, L"%systemroot%\\system32\\msimg32.dll", NULL},
  2353. {L"wmsimg32.dll", L"%systemroot%\\SysWOW64\\msimg32.dll", NULL},
  2354. {NULL, L"%ProgramFiles%\\Outlook Express\\msimn.exe", NULL},
  2355. {NULL, L"%systemroot%\\system32\\msimsg.dll", NULL},
  2356. {L"wmsimsg.dll", L"%systemroot%\\SysWOW64\\msimsg.dll", NULL},
  2357. {NULL, L"%systemroot%\\system32\\MSIMTF.dll", NULL},
  2358. {L"wMSIMTF.dll", L"%systemroot%\\SysWOW64\\MSIMTF.dll", NULL},
  2359. {NULL, L"%systemroot%\\PCHealth\\HelpCtr\\Binaries\\msinfo.dll", NULL},
  2360. {NULL, L"%commonprogramfiles%\\Microsoft Shared\\MSInfo\\msinfo32.exe", NULL},
  2361. {L"wmsinfo32.exe", L"%commonprogramfiles(x86)%\\Microsoft Shared\\MSInfo\\msinfo32.exe", NULL},
  2362. {NULL, L"%systemroot%\\system32\\wbem\\msiprov.dll", NULL},
  2363. {NULL, L"%systemroot%\\system32\\msir3jp.dll", L"intl.inf"},
  2364. {NULL, L"%systemroot%\\system32\\msir3jp.lex", L"intl.inf"},
  2365. {NULL, L"%systemroot%\\system32\\msiregmv.exe", NULL},
  2366. {L"wmsiregmv.exe", L"%systemroot%\\SysWOW64\\msiregmv.exe", NULL},
  2367. {L"wmsisam11.dll", L"%systemroot%\\SysWOW64\\msisam11.dll", NULL},
  2368. {NULL, L"%systemroot%\\system32\\msisip.dll", NULL},
  2369. {L"wmsisip.dll", L"%systemroot%\\SysWOW64\\msisip.dll", NULL},
  2370. {L"wmsjetol1.dll", L"%systemroot%\\SysWOW64\\msjetoledb40.dll", NULL},
  2371. {NULL, L"%systemroot%\\system32\\drivers\\mskssrv.sys", NULL},
  2372. {NULL, L"%systemroot%\\system32\\mslbui.dll", NULL},
  2373. {L"wmslbui.dll", L"%systemroot%\\SysWOW64\\mslbui.dll", NULL},
  2374. {NULL, L"%systemroot%\\system32\\msls31.dll", NULL},
  2375. {L"wmsls31.dll", L"%systemroot%\\SysWOW64\\msls31.dll", NULL},
  2376. {NULL, L"%systemroot%\\msagent64\\mslwvtts.dll", NULL},
  2377. {L"wmslwvtts.dll", L"%systemroot%\\msagent\\mslwvtts.dll", NULL},
  2378. {NULL, L"%systemroot%\\system32\\drivers\\msmpu401.sys", NULL},
  2379. {NULL, L"%systemroot%\\system32\\Setup\\msmqocm.dll", NULL},
  2380. {L"wmsnetobj.dll", L"%systemroot%\\SysWOW64\\msnetobj.dll", NULL},
  2381. {L"wmsnsspc.dll", L"%systemroot%\\SysWOW64\\msnsspc.dll", NULL},
  2382. {NULL, L"%systemroot%\\system32\\msobjs.dll", NULL},
  2383. {L"wmsobjs.dll", L"%systemroot%\\SysWOW64\\msobjs.dll", NULL},
  2384. {NULL, L"%ProgramFiles%\\Outlook Express\\msoe.dll", NULL},
  2385. {NULL, L"%systemroot%\\system32\\msoeacct.dll", NULL},
  2386. {NULL, L"%ProgramFiles%\\Outlook Express\\msoeres.dll", NULL},
  2387. {NULL, L"%systemroot%\\system32\\msoert2.dll", NULL},
  2388. {L"wmsorc32r.dll", L"%systemroot%\\SysWOW64\\msorc32r.dll", NULL},
  2389. {NULL, L"%systemroot%\\system32\\mspaint.exe", NULL},
  2390. {NULL, L"%systemroot%\\system32\\mspatcha.dll", NULL},
  2391. {L"wmspatcha.dll", L"%systemroot%\\SysWOW64\\mspatcha.dll", NULL},
  2392. {NULL, L"%systemroot%\\system32\\drivers\\mspclock.sys", NULL},
  2393. {L"wmspmsp.dll", L"%systemroot%\\SysWOW64\\mspmsp.dll", NULL},
  2394. {L"wmspmspsv.dll", L"%systemroot%\\SysWOW64\\mspmspsv.dll", NULL},
  2395. {NULL, L"%systemroot%\\system32\\msports.dll", NULL},
  2396. {L"wmsports.dll", L"%systemroot%\\SysWOW64\\msports.dll", NULL},
  2397. {NULL, L"%systemroot%\\system32\\msppalrt.dll", NULL},
  2398. {NULL, L"%systemroot%\\system32\\msppcnfg.exe", NULL},
  2399. {NULL, L"%systemroot%\\system32\\msppcntr.dll", NULL},
  2400. {NULL, L"%systemroot%\\system32\\mspplkrh.dll", NULL},
  2401. {NULL, L"%systemroot%\\system32\\msppmalr.dll", NULL},
  2402. {NULL, L"%systemroot%\\system32\\msppmd5.dll", NULL},
  2403. {NULL, L"%systemroot%\\system32\\msppmgr.dll", NULL},
  2404. {NULL, L"%systemroot%\\system32\\msppnxus.dll", NULL},
  2405. {NULL, L"%systemroot%\\system32\\drivers\\mspqm.sys", NULL},
  2406. {NULL, L"%systemroot%\\system32\\msprivs.dll", NULL},
  2407. {L"wmsprivs.dll", L"%systemroot%\\SysWOW64\\msprivs.dll", NULL},
  2408. {L"wmsr2c.dll", L"%systemroot%\\SysWOW64\\msr2c.dll", NULL},
  2409. {L"wmsr2cenu.dll", L"%systemroot%\\SysWOW64\\msr2cenu.dll", NULL},
  2410. {NULL, L"%systemroot%\\system32\\msratelc.dll", NULL},
  2411. {L"wmsratelc.dll", L"%systemroot%\\SysWOW64\\msratelc.dll", NULL},
  2412. {NULL, L"%systemroot%\\system32\\msrating.dll", NULL},
  2413. {L"wmsrating.dll", L"%systemroot%\\SysWOW64\\msrating.dll", NULL},
  2414. {NULL, L"%systemroot%\\system32\\msrle32.dll", NULL},
  2415. {L"wmsrle32.dll", L"%systemroot%\\SysWOW64\\msrle32.dll", NULL},
  2416. {L"bhp008.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\MSRPC.DLL", NULL},
  2417. {L"wmssap.dll", L"%systemroot%\\SysWOW64\\mssap.dll", NULL},
  2418. {L"wmsscds32.ax", L"%systemroot%\\SysWOW64\\msscds32.ax", NULL},
  2419. {L"wmsscp.dll", L"%systemroot%\\SysWOW64\\msscp.dll", NULL},
  2420. {L"wmsscript.ocx", L"%systemroot%\\SysWOW64\\msscript.ocx", NULL},
  2421. {NULL, L"%systemroot%\\system32\\mssign32.dll", NULL},
  2422. {L"wmssign32.dll", L"%systemroot%\\SysWOW64\\mssign32.dll", NULL},
  2423. {L"wmssoap1.dll", L"%commonprogramfiles(x86)%\\MSSoap\\Binaries\\mssoap1.dll", NULL},
  2424. {L"wmssoapr.dll", L"%commonprogramfiles(x86)%\\MSSoap\\Binaries\\Resources\\1033\\mssoapr.dll", NULL},
  2425. {NULL, L"%systemroot%\\system32\\msswch.dll", NULL},
  2426. {L"wmsswch.dll", L"%systemroot%\\SysWOW64\\msswch.dll", NULL},
  2427. {NULL, L"%systemroot%\\system32\\msswchx.exe", NULL},
  2428. {L"wmsswchx.exe", L"%systemroot%\\SysWOW64\\msswchx.exe", NULL},
  2429. {NULL, L"%systemroot%\\system32\\mstask.dll", NULL},
  2430. {NULL, L"%systemroot%\\system32\\drivers\\MSTEE.sys", NULL},
  2431. {NULL, L"%systemroot%\\system32\\mstime.dll", NULL},
  2432. {L"wmstime.dll", L"%systemroot%\\SysWOW64\\mstime.dll", NULL},
  2433. {NULL, L"%systemroot%\\system32\\mstinit.exe", NULL},
  2434. {NULL, L"%systemroot%\\system32\\mstlsapi.dll", NULL},
  2435. {L"wmstlsapi.dll", L"%systemroot%\\SysWOW64\\mstlsapi.dll", NULL},
  2436. {NULL, L"%systemroot%\\system32\\mstsc.exe", NULL},
  2437. {NULL, L"%systemroot%\\system32\\mstscax.dll", NULL},
  2438. {NULL, L"%systemroot%\\system32\\mstsmhst.dll", NULL},
  2439. {NULL, L"%systemroot%\\system32\\mstsmmc.dll", NULL},
  2440. {L"wmsuni11.dll", L"%systemroot%\\SysWOW64\\msuni11.dll", NULL},
  2441. {NULL, L"%systemroot%\\system32\\msutb.dll", NULL},
  2442. {L"wmsutb.dll", L"%systemroot%\\SysWOW64\\msutb.dll", NULL},
  2443. {NULL, L"%systemroot%\\system32\\msv1_0.dll", NULL},
  2444. {L"wmsv1_0.dll", L"%systemroot%\\SysWOW64\\msv1_0.dll", NULL},
  2445. {NULL, L"%systemroot%\\system32\\msvcirt.dll", NULL},
  2446. {L"wmsvcirt.dll", L"%systemroot%\\SysWOW64\\msvcirt.dll", NULL},
  2447. {L"wmsvcp50.dll", L"%systemroot%\\SysWOW64\\msvcp50.dll", NULL},
  2448. {NULL, L"%systemroot%\\system32\\msvcp60.dll", NULL},
  2449. {L"wmsvcp60.dll", L"%systemroot%\\SysWOW64\\msvcp60.dll", NULL},
  2450. {L"wmsvcrt20.dll", L"%systemroot%\\SysWOW64\\msvcrt20.dll", NULL},
  2451. {NULL, L"%systemroot%\\system32\\msvfw32.dll", NULL},
  2452. {L"wmsvfw32.dll", L"%systemroot%\\SysWOW64\\msvfw32.dll", NULL},
  2453. {NULL, L"%systemroot%\\system32\\msvidc32.dll", NULL},
  2454. {L"wmsvidc32.dll", L"%systemroot%\\SysWOW64\\msvidc32.dll", NULL},
  2455. {NULL, L"%systemroot%\\system32\\msvidctl.dll", NULL},
  2456. {L"wmsvidctl.dll", L"%systemroot%\\SysWOW64\\msvidctl.dll", NULL},
  2457. {NULL, L"%systemroot%\\system32\\msvideo.dll", NULL},
  2458. {L"wmsvideo.dll", L"%systemroot%\\SysWOW64\\msvideo.dll", NULL},
  2459. {NULL, L"%systemroot%\\system32\\msw3prt.dll", NULL},
  2460. {L"wmsw3prt.dll", L"%systemroot%\\SysWOW64\\msw3prt.dll", NULL},
  2461. {L"wmswebdvd.dll", L"%systemroot%\\SysWOW64\\mswebdvd.dll", NULL},
  2462. {L"wmswmdm.dll", L"%systemroot%\\SysWOW64\\mswmdm.dll", NULL},
  2463. {NULL, L"%systemroot%\\system32\\mswsock.dll", NULL},
  2464. {L"wmswsock.dll", L"%systemroot%\\SysWOW64\\mswsock.dll", NULL},
  2465. {L"wmsxml.dll", L"%systemroot%\\SysWOW64\\msxml.dll", NULL},
  2466. {L"wmsxml2.dll", L"%systemroot%\\SysWOW64\\msxml2.dll", NULL},
  2467. {L"wmsxml2r.dll", L"%systemroot%\\SysWOW64\\msxml2r.dll", NULL},
  2468. {NULL, L"%systemroot%\\system32\\msxml3.dll", NULL},
  2469. {L"wmsxml3.dll", L"%systemroot%\\SysWOW64\\msxml3.dll", NULL},
  2470. {NULL, L"%systemroot%\\system32\\msxml3r.dll", NULL},
  2471. {L"wmsxml3r.dll", L"%systemroot%\\SysWOW64\\msxml3r.dll", NULL},
  2472. {L"wmsxmlr.dll", L"%systemroot%\\SysWOW64\\msxmlr.dll", NULL},
  2473. {NULL, L"%systemroot%\\system32\\msxs64.dll", NULL},
  2474. {L"wmsyuv.dll", L"%systemroot%\\SysWOW64\\msyuv.dll", NULL},
  2475. {NULL, L"%systemroot%\\system32\\Com\\mtsadmin.tlb", NULL},
  2476. {NULL, L"%systemroot%\\system32\\mtstocom.exe", NULL},
  2477. {L"wmtstocom.exe", L"%systemroot%\\SysWOW64\\mtstocom.exe", NULL},
  2478. {NULL, L"%systemroot%\\system32\\mtxclu.dll", NULL},
  2479. {L"wmtxclu.dll", L"%systemroot%\\SysWOW64\\mtxclu.dll", NULL},
  2480. {NULL, L"%systemroot%\\system32\\mtxdm.dll", NULL},
  2481. {NULL, L"%systemroot%\\system32\\mtxex.dll", NULL},
  2482. {NULL, L"%systemroot%\\system32\\mtxoci.dll", NULL},
  2483. {NULL, L"%systemroot%\\mui\\muisetup.exe", NULL},
  2484. {NULL, L"%systemroot%\\system32\\drivers\\mup.sys", NULL},
  2485. {L"wmxicfg.dll", L"%systemroot%\\SysWOW64\\mxicfg.dll", NULL},
  2486. {L"wmxport.dll", L"%systemroot%\\SysWOW64\\mxport.dll", NULL},
  2487. {NULL, L"%systemroot%\\system32\\mycomput.dll", NULL},
  2488. {L"wmycomput.dll", L"%systemroot%\\SysWOW64\\mycomput.dll", NULL},
  2489. {NULL, L"%systemroot%\\system32\\mydocs.dll", NULL},
  2490. {L"wmydocs.dll", L"%systemroot%\\SysWOW64\\mydocs.dll", NULL},
  2491. {NULL, L"%systemroot%\\system32\\mys.dll", NULL},
  2492. {NULL, L"%systemroot%\\system32\\drivers\\n1000645.sys", NULL},
  2493. {NULL, L"%systemroot%\\system32\\drivers\\n100645.sys", NULL},
  2494. {NULL, L"%systemroot%\\system32\\napmmc.dll", NULL},
  2495. {L"wnapmmc.dll", L"%systemroot%\\SysWOW64\\napmmc.dll", NULL},
  2496. {NULL, L"%systemroot%\\system32\\narrator.exe", NULL},
  2497. {L"wnarrator.exe", L"%systemroot%\\SysWOW64\\narrator.exe", NULL},
  2498. {NULL, L"%systemroot%\\system32\\narrhook.dll", NULL},
  2499. {L"wnarrhook.dll", L"%systemroot%\\SysWOW64\\narrhook.dll", NULL},
  2500. {NULL, L"%systemroot%\\system32\\nbtstat.exe", NULL},
  2501. {L"wnbtstat.exe", L"%systemroot%\\SysWOW64\\nbtstat.exe", NULL},
  2502. {NULL, L"%systemroot%\\system32\\ncobjapi.dll", NULL},
  2503. {L"wncobjapi.dll", L"%systemroot%\\SysWOW64\\ncobjapi.dll", NULL},
  2504. {L"bhp009.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\NCP.DLL", NULL},
  2505. {NULL, L"%systemroot%\\system32\\ncpa.cpl", NULL},
  2506. {L"wncpa.cpl", L"%systemroot%\\SysWOW64\\ncpa.cpl", NULL},
  2507. {NULL, L"%systemroot%\\system32\\wbem\\ncprov.dll", NULL},
  2508. {NULL, L"%systemroot%\\system32\\nddeapi.dll", NULL},
  2509. {L"wnddeapi.dll", L"%systemroot%\\SysWOW64\\nddeapi.dll", NULL},
  2510. {NULL, L"%systemroot%\\system32\\nddeapir.exe", NULL},
  2511. {L"wnddeapir.exe", L"%systemroot%\\SysWOW64\\nddeapir.exe", NULL},
  2512. {NULL, L"%systemroot%\\system32\\nddenb32.dll", NULL},
  2513. {L"wnddenb32.dll", L"%systemroot%\\SysWOW64\\nddenb32.dll", NULL},
  2514. {NULL, L"%systemroot%\\system32\\drivers\\ndis.sys", NULL},
  2515. {NULL, L"%systemroot%\\system32\\npp\\ndisnpp.dll", NULL},
  2516. {NULL, L"%systemroot%\\system32\\drivers\\ndistapi.sys", NULL},
  2517. {NULL, L"%systemroot%\\system32\\drivers\\ndisuio.sys", NULL},
  2518. {NULL, L"%systemroot%\\system32\\drivers\\ndproxy.sys", NULL},
  2519. {NULL, L"%systemroot%\\system32\\ndptsp.tsp", NULL},
  2520. {L"wndptsp.tsp", L"%systemroot%\\SysWOW64\\ndptsp.tsp", NULL},
  2521. {NULL, L"%systemroot%\\system32\\drivers\\ne2000.sys", NULL},
  2522. {NULL, L"%systemroot%\\system32\\net.exe", NULL},
  2523. {L"wnet.exe", L"%systemroot%\\SysWOW64\\net.exe", NULL},
  2524. {NULL, L"%systemroot%\\system32\\net1.exe", NULL},
  2525. {L"wnet1.exe", L"%systemroot%\\SysWOW64\\net1.exe", NULL},
  2526. {L"wnetapi.dll", L"%systemroot%\\SysWOW64\\netapi.dll", NULL},
  2527. {L"bhp010.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\NETBIOS.DLL", NULL},
  2528. {NULL, L"%systemroot%\\system32\\drivers\\netbios.sys", NULL},
  2529. {NULL, L"%systemroot%\\system32\\drivers\\netbt.sys", NULL},
  2530. {NULL, L"%systemroot%\\system32\\netcfgx.dll", NULL},
  2531. {L"wnetcfgx.dll", L"%systemroot%\\SysWOW64\\netcfgx.dll", NULL},
  2532. {NULL, L"%systemroot%\\system32\\netdde.exe", NULL},
  2533. {L"wnetdde.exe", L"%systemroot%\\SysWOW64\\netdde.exe", NULL},
  2534. {NULL, L"%systemroot%\\system32\\netevent.dll", NULL},
  2535. {L"wnetevent.dll", L"%systemroot%\\SysWOW64\\netevent.dll", NULL},
  2536. {NULL, L"%systemroot%\\system32\\neth.dll", NULL},
  2537. {L"wneth.dll", L"%systemroot%\\SysWOW64\\neth.dll", NULL},
  2538. {NULL, L"%systemroot%\\system32\\netid.dll", NULL},
  2539. {L"wnetid.dll", L"%systemroot%\\SysWOW64\\netid.dll", NULL},
  2540. {L"bhp011.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\netlogon.dll", NULL},
  2541. {NULL, L"%systemroot%\\system32\\netlogon.dll", NULL},
  2542. {L"wnetlogon.dll", L"%systemroot%\\SysWOW64\\netlogon.dll", NULL},
  2543. {NULL, L"%systemroot%\\system32\\netman.dll", NULL},
  2544. {NULL, L"%systemroot%\\system32\\NETMON\\netmon.exe", NULL},
  2545. {NULL, L"%systemroot%\\system32\\netmsg.dll", NULL},
  2546. {L"wnetmsg.dll", L"%systemroot%\\SysWOW64\\netmsg.dll", NULL},
  2547. {NULL, L"%systemroot%\\system32\\Setup\\netoc.dll", NULL},
  2548. {NULL, L"%systemroot%\\system32\\netplwiz.dll", NULL},
  2549. {L"wnetplwiz.dll", L"%systemroot%\\SysWOW64\\netplwiz.dll", NULL},
  2550. {NULL, L"%systemroot%\\system32\\netrap.dll", NULL},
  2551. {L"wnetrap.dll", L"%systemroot%\\SysWOW64\\netrap.dll", NULL},
  2552. {NULL, L"%systemroot%\\system32\\netsh.exe", NULL},
  2553. {L"wnetsh.exe", L"%systemroot%\\SysWOW64\\netsh.exe", NULL},
  2554. {NULL, L"%systemroot%\\system32\\netshell.dll", NULL},
  2555. {L"wnetshell.dll", L"%systemroot%\\SysWOW64\\netshell.dll", NULL},
  2556. {NULL, L"%systemroot%\\system32\\netstat.exe", NULL},
  2557. {L"wnetstat.exe", L"%systemroot%\\SysWOW64\\netstat.exe", NULL},
  2558. {NULL, L"%systemroot%\\system32\\netui0.dll", NULL},
  2559. {L"wnetui0.dll", L"%systemroot%\\SysWOW64\\netui0.dll", NULL},
  2560. {NULL, L"%systemroot%\\system32\\netui1.dll", NULL},
  2561. {L"wnetui1.dll", L"%systemroot%\\SysWOW64\\netui1.dll", NULL},
  2562. {NULL, L"%systemroot%\\system32\\netui2.dll", NULL},
  2563. {L"wnetui2.dll", L"%systemroot%\\SysWOW64\\netui2.dll", NULL},
  2564. {NULL, L"%systemroot%\\system32\\newdev.dll", NULL},
  2565. {L"wnewdev.dll", L"%systemroot%\\SysWOW64\\newdev.dll", NULL},
  2566. {NULL, L"%systemroot%\\system32\\inetsrv\\NEXTLINK.dll", L"iis.inf"},
  2567. {NULL, L"%systemroot%\\system32\\drivers\\nfrd960.sys", NULL},
  2568. {NULL, L"%systemroot%\\system32\\drivers\\nic1394.sys", NULL},
  2569. {NULL, L"%systemroot%\\system32\\nlb.exe", NULL},
  2570. {L"wnlb.exe", L"%systemroot%\\SysWOW64\\nlb.exe", NULL},
  2571. {NULL, L"%systemroot%\\system32\\nlbmgr.exe", NULL},
  2572. {L"wnlbmgr.exe", L"%systemroot%\\SysWOW64\\nlbmgr.exe", NULL},
  2573. {NULL, L"%systemroot%\\system32\\wbem\\nlbmprov.dll", NULL},
  2574. {L"wnlbmprov.dll", L"%systemroot%\\SysWOW64\\wbem\\nlbmprov.dll", NULL},
  2575. {NULL, L"%systemroot%\\system32\\nlhtml.dll", NULL},
  2576. {L"wnlhtml.dll", L"%systemroot%\\SysWOW64\\nlhtml.dll", NULL},
  2577. {NULL, L"%systemroot%\\system32\\NETMON\\nmapi.dll", NULL},
  2578. {NULL, L"%systemroot%\\system32\\drivers\\nmnt.sys", NULL},
  2579. {NULL, L"%systemroot%\\system32\\nmsupp.dll", NULL},
  2580. {NULL, L"%systemroot%\\system32\\nntpapi.dll", L"ins.inf"},
  2581. {NULL, L"%systemroot%\\system32\\nntpctrs.dll", L"ins.inf"},
  2582. {NULL, L"%systemroot%\\system32\\inetsrv\\nntpfs.dll", L"ins.inf"},
  2583. {NULL, L"%systemroot%\\system32\\inetsrv\\nntpsvc.dll", L"ins.inf"},
  2584. {NULL, L"%systemroot%\\system32\\notepad.exe", NULL},
  2585. {L"wnotepad.exe", L"%systemroot%\\SysWOW64\\notepad.exe", NULL},
  2586. {NULL, L"%systemroot%\\system32\\drivers\\npfs.sys", NULL},
  2587. {NULL, L"%systemroot%\\system32\\npp\\nppagent.exe", NULL},
  2588. {NULL, L"%systemroot%\\system32\\npptools.dll", NULL},
  2589. {L"wnpptools.dll", L"%systemroot%\\SysWOW64\\npptools.dll", NULL},
  2590. {NULL, L"%systemroot%\\system32\\nshipsec.dll", NULL},
  2591. {L"wnshipsec.dll", L"%systemroot%\\SysWOW64\\nshipsec.dll", NULL},
  2592. {NULL, L"%systemroot%\\system32\\nslookup.exe", NULL},
  2593. {L"wnslookup.exe", L"%systemroot%\\SysWOW64\\nslookup.exe", NULL},
  2594. {NULL, L"%systemroot%\\system32\\drivers\\nsmmc.sys", NULL},
  2595. {NULL, L"%systemroot%\\system32\\ntbackup.exe", NULL},
  2596. {NULL, L"%systemroot%\\system32\\ntdsa.dll", NULL},
  2597. {NULL, L"%systemroot%\\system32\\ntdsapi.dll", NULL},
  2598. {L"wntdsapi.dll", L"%systemroot%\\SysWOW64\\ntdsapi.dll", NULL},
  2599. {NULL, L"%systemroot%\\system32\\ntdsatq.dll", NULL},
  2600. {NULL, L"%systemroot%\\system32\\ntdsbcli.dll", NULL},
  2601. {L"wntdsbcli.dll", L"%systemroot%\\SysWOW64\\ntdsbcli.dll", NULL},
  2602. {NULL, L"%systemroot%\\system32\\ntdsbmsg.dll", NULL},
  2603. {L"wntdsbmsg.dll", L"%systemroot%\\SysWOW64\\ntdsbmsg.dll", NULL},
  2604. {NULL, L"%systemroot%\\system32\\ntdsbsrv.dll", NULL},
  2605. {L"wntdsbsrv.dll", L"%systemroot%\\SysWOW64\\ntdsbsrv.dll", NULL},
  2606. {NULL, L"%systemroot%\\system32\\ntdsetup.dll", NULL},
  2607. {L"wntdsetup.dll", L"%systemroot%\\SysWOW64\\ntdsetup.dll", NULL},
  2608. {NULL, L"%systemroot%\\system32\\ntdskcc.dll", NULL},
  2609. {L"wntdskcc.dll", L"%systemroot%\\SysWOW64\\ntdskcc.dll", NULL},
  2610. {NULL, L"%systemroot%\\system32\\ntdsmsg.dll", NULL},
  2611. {L"wntdsmsg.dll", L"%systemroot%\\SysWOW64\\ntdsmsg.dll", NULL},
  2612. {NULL, L"%systemroot%\\system32\\ntdsperf.dll", NULL},
  2613. {L"wntdsperf.dll", L"%systemroot%\\SysWOW64\\ntdsperf.dll", NULL},
  2614. {NULL, L"%systemroot%\\system32\\ntdsutil.exe", NULL},
  2615. {L"wntdsutil.exe", L"%systemroot%\\SysWOW64\\ntdsutil.exe", NULL},
  2616. {NULL, L"%systemroot%\\system32\\wbem\\ntevt.dll", NULL},
  2617. {NULL, L"%systemroot%\\system32\\ntfrs.exe", NULL},
  2618. {L"wntfrs.exe", L"%systemroot%\\SysWOW64\\ntfrs.exe", NULL},
  2619. {NULL, L"%systemroot%\\system32\\ntfrsapi.dll", NULL},
  2620. {L"wntfrsapi.dll", L"%systemroot%\\SysWOW64\\ntfrsapi.dll", NULL},
  2621. {NULL, L"%systemroot%\\system32\\ntfrsprf.dll", NULL},
  2622. {L"wntfrsprf.dll", L"%systemroot%\\SysWOW64\\ntfrsprf.dll", NULL},
  2623. {NULL, L"%systemroot%\\system32\\ntfrsres.dll", NULL},
  2624. {L"wntfrsres.dll", L"%systemroot%\\SysWOW64\\ntfrsres.dll", NULL},
  2625. {NULL, L"%systemroot%\\system32\\inetsrv\\ntfsdrv.dll", L"ims.inf"},
  2626. {NULL, L"%systemroot%\\system32\\ntlanman.dll", NULL},
  2627. {L"wntlanman.dll", L"%systemroot%\\SysWOW64\\ntlanman.dll", NULL},
  2628. {NULL, L"%systemroot%\\system32\\ntlanui.dll", NULL},
  2629. {L"wntlanui.dll", L"%systemroot%\\SysWOW64\\ntlanui.dll", NULL},
  2630. {NULL, L"%systemroot%\\system32\\ntlanui2.dll", NULL},
  2631. {L"wntlanui2.dll", L"%systemroot%\\SysWOW64\\ntlanui2.dll", NULL},
  2632. {NULL, L"%systemroot%\\system32\\ntlsapi.dll", NULL},
  2633. {L"wntlsapi.dll", L"%systemroot%\\SysWOW64\\ntlsapi.dll", NULL},
  2634. {NULL, L"%systemroot%\\system32\\ntmarta.dll", NULL},
  2635. {L"wntmarta.dll", L"%systemroot%\\SysWOW64\\ntmarta.dll", NULL},
  2636. {NULL, L"%systemroot%\\system32\\ntmsapi.dll", NULL},
  2637. {L"wntmsapi.dll", L"%systemroot%\\SysWOW64\\ntmsapi.dll", NULL},
  2638. {NULL, L"%systemroot%\\system32\\ntmsdba.dll", NULL},
  2639. {NULL, L"%systemroot%\\system32\\ntmsevt.dll", NULL},
  2640. {NULL, L"%systemroot%\\system32\\ntmsmgr.dll", NULL},
  2641. {NULL, L"%systemroot%\\system32\\ntmssvc.dll", NULL},
  2642. {NULL, L"%systemroot%\\system32\\Setup\\ntoc.dll", NULL},
  2643. {NULL, L"%systemroot%\\system32\\ntprint.dll", NULL},
  2644. {L"wntprint.dll", L"%systemroot%\\SysWOW64\\ntprint.dll", NULL},
  2645. {NULL, L"%systemroot%\\system32\\ntsd.exe", NULL},
  2646. {L"wntsd.exe", L"%systemroot%\\SysWOW64\\ntsd.exe", NULL},
  2647. {NULL, L"%systemroot%\\system32\\ntshrui.dll", NULL},
  2648. {L"wntshrui.dll", L"%systemroot%\\SysWOW64\\ntshrui.dll", NULL},
  2649. {NULL, L"%systemroot%\\system32\\ntvdm64.dll", NULL},
  2650. {L"wntvdm64.dll", L"%systemroot%\\SysWOW64\\ntvdm64.dll", NULL},
  2651. {NULL, L"%systemroot%\\system32\\drivers\\null.sys", NULL},
  2652. {NULL, L"%systemroot%\\system32\\oakley.dll", NULL},
  2653. {L"woakley.dll", L"%systemroot%\\SysWOW64\\oakley.dll", NULL},
  2654. {NULL, L"%systemroot%\\system32\\objsel.dll", NULL},
  2655. {L"wobjsel.dll", L"%systemroot%\\SysWOW64\\objsel.dll", NULL},
  2656. {NULL, L"%systemroot%\\system32\\occache.dll", NULL},
  2657. {L"woccache.dll", L"%systemroot%\\SysWOW64\\occache.dll", NULL},
  2658. {NULL, L"%systemroot%\\system32\\Setup\\ocgen.dll", NULL},
  2659. {L"wodbc16gt.dll", L"%systemroot%\\SysWOW64\\odbc16gt.dll", NULL},
  2660. {L"wodbcp32r.dll", L"%systemroot%\\SysWOW64\\odbcp32r.dll", NULL},
  2661. {NULL, L"%ProgramFiles%\\Outlook Express\\oeimport.dll", NULL},
  2662. {NULL, L"%ProgramFiles%\\Outlook Express\\oemig50.exe", NULL},
  2663. {NULL, L"%ProgramFiles%\\Outlook Express\\oemiglib.dll", NULL},
  2664. {NULL, L"%systemroot%\\system32\\offfilt.dll", NULL},
  2665. {L"wofffilt.dll", L"%systemroot%\\SysWOW64\\offfilt.dll", NULL},
  2666. {NULL, L"%systemroot%\\system32\\drivers\\ohci1394.sys", NULL},
  2667. {L"wole2.dll", L"%systemroot%\\SysWOW64\\ole2.dll", NULL},
  2668. {NULL, L"%systemroot%\\system32\\oleacc.dll", NULL},
  2669. {L"woleacc.dll", L"%systemroot%\\SysWOW64\\oleacc.dll", NULL},
  2670. {NULL, L"%systemroot%\\system32\\oleaccrc.dll", NULL},
  2671. {L"woleaccrc.dll", L"%systemroot%\\SysWOW64\\oleaccrc.dll", NULL},
  2672. {NULL, L"%systemroot%\\system32\\olecli32.dll", NULL},
  2673. {L"wolecli32.dll", L"%systemroot%\\SysWOW64\\olecli32.dll", NULL},
  2674. {NULL, L"%systemroot%\\system32\\olecnv32.dll", NULL},
  2675. {L"wolecnv32.dll", L"%systemroot%\\SysWOW64\\olecnv32.dll", NULL},
  2676. {NULL, L"%systemroot%\\system32\\oledlg.dll", NULL},
  2677. {L"woledlg.dll", L"%systemroot%\\SysWOW64\\oledlg.dll", NULL},
  2678. {NULL, L"%systemroot%\\system32\\oleprn.dll", NULL},
  2679. {L"woleprn.dll", L"%systemroot%\\SysWOW64\\oleprn.dll", NULL},
  2680. {NULL, L"%systemroot%\\system32\\olesvr32.dll", NULL},
  2681. {L"wolesvr32.dll", L"%systemroot%\\SysWOW64\\olesvr32.dll", NULL},
  2682. {L"wolethk32.dll", L"%systemroot%\\SysWOW64\\olethk32.dll", NULL},
  2683. {L"opnfiles.exe", L"%systemroot%\\system32\\openfiles.exe", NULL},
  2684. {NULL, L"%systemroot%\\system32\\opengl32.dll", NULL},
  2685. {L"wopengl32.dll", L"%systemroot%\\SysWOW64\\opengl32.dll", NULL},
  2686. {NULL, L"%systemroot%\\system32\\drivers\\oprghdlr.sys", NULL},
  2687. {NULL, L"%systemroot%\\system32\\RemInst\\oschc_i.exe", NULL},
  2688. {NULL, L"%systemroot%\\system32\\osk.exe", NULL},
  2689. {L"wosk.exe", L"%systemroot%\\SysWOW64\\osk.exe", NULL},
  2690. {L"wospf.dll", L"%systemroot%\\SysWOW64\\ospf.dll", NULL},
  2691. {NULL, L"%systemroot%\\system32\\ospfagnt.dll", NULL},
  2692. {L"wospfagnt.dll", L"%systemroot%\\SysWOW64\\ospfagnt.dll", NULL},
  2693. {L"wospfmib.dll", L"%systemroot%\\SysWOW64\\ospfmib.dll", NULL},
  2694. {NULL, L"%systemroot%\\system32\\osuninst.dll", NULL},
  2695. {L"wosuninst.dll", L"%systemroot%\\SysWOW64\\osuninst.dll", NULL},
  2696. {NULL, L"%systemroot%\\system32\\POP3Server\\P3Admin.dll", NULL},
  2697. {NULL, L"%systemroot%\\system32\\POP3Server\\P3Store.dll", NULL},
  2698. {NULL, L"%systemroot%\\system32\\packager.exe", NULL},
  2699. {L"wpackager.exe", L"%systemroot%\\SysWOW64\\packager.exe", NULL},
  2700. {NULL, L"%systemroot%\\ime\\SHARED\\RES\\PADRS404.DLL", L"intl.inf"},
  2701. {L"wPADRS404.DLL", L"%systemroot%\\ime (x86)\\SHARED\\RES\\PADRS404.DLL", L"intl.inf"},
  2702. {NULL, L"%systemroot%\\ime\\SHARED\\RES\\padrs411.dll", L"intl.inf"},
  2703. {L"wpadrs411.dll", L"%systemroot%\\ime (x86)\\SHARED\\RES\\padrs411.dll", L"intl.inf"},
  2704. {NULL, L"%systemroot%\\ime\\SHARED\\RES\\padrs412.dll", L"intl.inf"},
  2705. {L"wpadrs412.dll", L"%systemroot%\\ime (x86)\\SHARED\\RES\\padrs412.dll", L"intl.inf"},
  2706. {NULL, L"%systemroot%\\ime\\SHARED\\RES\\padrs804.dll", L"intl.inf"},
  2707. {L"wpadrs804.dll", L"%systemroot%\\ime (x86)\\SHARED\\RES\\padrs804.dll", L"intl.inf"},
  2708. {L"pagefile.vbs", L"%systemroot%\\system32\\pagefileconfig.vbs", NULL},
  2709. {NULL, L"%systemroot%\\system32\\panmap.dll", NULL},
  2710. {L"wpanmap.dll", L"%systemroot%\\SysWOW64\\panmap.dll", NULL},
  2711. {L"wpaqsp.dll", L"%systemroot%\\SysWOW64\\paqsp.dll", NULL},
  2712. {NULL, L"%systemroot%\\system32\\NETMON\\parser.dll", NULL},
  2713. {NULL, L"%systemroot%\\system32\\drivers\\partmgr.sys", NULL},
  2714. {NULL, L"%systemroot%\\system32\\pathping.exe", NULL},
  2715. {L"wpathping.exe", L"%systemroot%\\SysWOW64\\pathping.exe", NULL},
  2716. {NULL, L"%systemroot%\\system32\\pautoenr.dll", NULL},
  2717. {L"wpautoenr.dll", L"%systemroot%\\SysWOW64\\pautoenr.dll", NULL},
  2718. {NULL, L"%systemroot%\\system32\\Setup\\pbsnetoc.exe", NULL},
  2719. {NULL, L"%systemroot%\\PCHealth\\HelpCtr\\Binaries\\pchshell.dll", NULL},
  2720. {NULL, L"%systemroot%\\PCHealth\\HelpCtr\\Binaries\\pchsvc.dll", NULL},
  2721. {NULL, L"%systemroot%\\system32\\drivers\\pci.sys", NULL},
  2722. {NULL, L"%systemroot%\\system32\\drivers\\pciide.sys", NULL},
  2723. {NULL, L"%systemroot%\\system32\\drivers\\pciidex.sys", NULL},
  2724. {NULL, L"%systemroot%\\system32\\drivers\\pcmcia.sys", NULL},
  2725. {NULL, L"%systemroot%\\system32\\pdh.dll", NULL},
  2726. {L"wpdh.dll", L"%systemroot%\\SysWOW64\\pdh.dll", NULL},
  2727. {L"wpentnt.exe", L"%systemroot%\\SysWOW64\\pentnt.exe", NULL},
  2728. {NULL, L"%systemroot%\\system32\\perfctrs.dll", NULL},
  2729. {L"wperfctrs.dll", L"%systemroot%\\SysWOW64\\perfctrs.dll", NULL},
  2730. {NULL, L"%systemroot%\\system32\\perfdisk.dll", NULL},
  2731. {L"wperfdisk.dll", L"%systemroot%\\SysWOW64\\perfdisk.dll", NULL},
  2732. {NULL, L"%systemroot%\\system32\\perfmon.exe", NULL},
  2733. {L"wperfmon.exe", L"%systemroot%\\SysWOW64\\perfmon.exe", NULL},
  2734. {NULL, L"%systemroot%\\system32\\perfnet.dll", NULL},
  2735. {L"wperfnet.dll", L"%systemroot%\\SysWOW64\\perfnet.dll", NULL},
  2736. {NULL, L"%systemroot%\\system32\\perfos.dll", NULL},
  2737. {L"wperfos.dll", L"%systemroot%\\SysWOW64\\perfos.dll", NULL},
  2738. {NULL, L"%systemroot%\\system32\\perfproc.dll", NULL},
  2739. {L"wperfproc.dll", L"%systemroot%\\SysWOW64\\perfproc.dll", NULL},
  2740. {NULL, L"%systemroot%\\system32\\perfts.dll", NULL},
  2741. {L"wperfts.dll", L"%systemroot%\\SysWOW64\\perfts.dll", NULL},
  2742. {NULL, L"%systemroot%\\system32\\drivers\\perm2.sys", NULL},
  2743. {NULL, L"%systemroot%\\system32\\perm2dll.dll", NULL},
  2744. {NULL, L"%systemroot%\\system32\\drivers\\perm3.sys", NULL},
  2745. {NULL, L"%systemroot%\\system32\\perm3dd.dll", NULL},
  2746. {L"bhp046.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\pgmparser.dll", NULL},
  2747. {NULL, L"%systemroot%\\system32\\phon.ime", L"intl.inf"},
  2748. {NULL, L"%systemroot%\\system32\\photowiz.dll", NULL},
  2749. {L"wphotowiz.dll", L"%systemroot%\\SysWOW64\\photowiz.dll", NULL},
  2750. {NULL, L"%systemroot%\\system32\\pid.dll", NULL},
  2751. {L"wpid.dll", L"%systemroot%\\SysWOW64\\pid.dll", NULL},
  2752. {NULL, L"%systemroot%\\system32\\pidgen.dll", NULL},
  2753. {L"wpidgen.dll", L"%systemroot%\\SysWOW64\\pidgen.dll", NULL},
  2754. {NULL, L"%systemroot%\\system32\\pifmgr.dll", NULL},
  2755. {L"wpifmgr.dll", L"%systemroot%\\SysWOW64\\pifmgr.dll", NULL},
  2756. {NULL, L"%systemroot%\\system32\\ping.exe", NULL},
  2757. {L"wping.exe", L"%systemroot%\\SysWOW64\\ping.exe", NULL},
  2758. {NULL, L"%systemroot%\\ime\\CHSIME\\APPLETS\\PINTLCSA.DLL", L"intl.inf"},
  2759. {L"wPINTLCSA.DLL", L"%systemroot%\\ime (x86)\\CHSIME\\APPLETS\\PINTLCSA.DLL", L"intl.inf"},
  2760. {NULL, L"%systemroot%\\ime\\CHSIME\\APPLETS\\PINTLCSD.DIC", L"intl.inf"},
  2761. {L"wPINTLCSD.DIC", L"%systemroot%\\ime (x86)\\CHSIME\\APPLETS\\PINTLCSD.DIC", L"intl.inf"},
  2762. {NULL, L"%systemroot%\\ime\\CHSIME\\APPLETS\\PINTLCSD.DLL", L"intl.inf"},
  2763. {L"wPINTLCSD.DLL", L"%systemroot%\\ime (x86)\\CHSIME\\APPLETS\\PINTLCSD.DLL", L"intl.inf"},
  2764. {NULL, L"%systemroot%\\ime\\CHSIME\\APPLETS\\PINTLCSK.DIC", L"intl.inf"},
  2765. {L"wPINTLCSK.DIC", L"%systemroot%\\ime (x86)\\CHSIME\\APPLETS\\PINTLCSK.DIC", L"intl.inf"},
  2766. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\PINTLGC.IMD", L"intl.inf"},
  2767. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\PINTLGD.IMD", L"intl.inf"},
  2768. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\PINTLGDX.IMD", L"intl.inf"},
  2769. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\PINTLGI.IMD", L"intl.inf"},
  2770. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\PINTLGIX.IMD", L"intl.inf"},
  2771. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\PINTLGL.IMD", L"intl.inf"},
  2772. {NULL, L"%systemroot%\\system32\\PINTLGNT.IME", L"intl.inf"},
  2773. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\PINTLGR.IMD", L"intl.inf"},
  2774. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\PINTLGS.IMD", L"intl.inf"},
  2775. {NULL, L"%systemroot%\\system32\\IME\\PINTLGNT\\PINTLPHR.EXE", L"intl.inf"},
  2776. {NULL, L"%systemroot%\\system32\\pjlmon.dll", NULL},
  2777. {L"wpjlmon.dll", L"%systemroot%\\SysWOW64\\pjlmon.dll", NULL},
  2778. {NULL, L"%systemroot%\\system32\\drivers\\plasmc.sys", NULL},
  2779. {NULL, L"%systemroot%\\system32\\plugin.ocx", NULL},
  2780. {L"wplugin.ocx", L"%systemroot%\\SysWOW64\\plugin.ocx", NULL},
  2781. {L"wpmspl.dll", L"%systemroot%\\SysWOW64\\pmspl.dll", NULL},
  2782. {NULL, L"%systemroot%\\system32\\pngfilt.dll", NULL},
  2783. {L"wpngfilt.dll", L"%systemroot%\\SysWOW64\\pngfilt.dll", NULL},
  2784. {NULL, L"%systemroot%\\system32\\drivers\\pnrmc.sys", NULL},
  2785. {NULL, L"%systemroot%\\system32\\wbem\\policman.dll", NULL},
  2786. {NULL, L"%systemroot%\\system32\\polstore.dll", NULL},
  2787. {L"wpolstore.dll", L"%systemroot%\\SysWOW64\\polstore.dll", NULL},
  2788. {NULL, L"%systemroot%\\system32\\POP3Server\\Pop3Auth.dll", NULL},
  2789. {NULL, L"%systemroot%\\system32\\POP3Server\\Pop3evt.dll", NULL},
  2790. {NULL, L"%systemroot%\\system32\\Setup\\pop3oc.dll", NULL},
  2791. {NULL, L"%systemroot%\\system32\\POP3Server\\pop3perf.dll", NULL},
  2792. {NULL, L"%systemroot%\\system32\\POP3Server\\pop3snap.dll", NULL},
  2793. {NULL, L"%systemroot%\\system32\\POP3Server\\POP3Svc.exe", NULL},
  2794. {NULL, L"%systemroot%\\system32\\drivers\\portcls.sys", NULL},
  2795. {NULL, L"%systemroot%\\system32\\powercfg.cpl", NULL},
  2796. {L"wpowercfg.cpl", L"%systemroot%\\SysWOW64\\powercfg.cpl", NULL},
  2797. {NULL, L"%systemroot%\\system32\\powercfg.exe", NULL},
  2798. {L"wpowercfg.exe", L"%systemroot%\\SysWOW64\\powercfg.exe", NULL},
  2799. {NULL, L"%systemroot%\\system32\\drivers\\powerfil.sys", NULL},
  2800. {NULL, L"%systemroot%\\system32\\powrprof.dll", NULL},
  2801. {L"wpowrprof.dll", L"%systemroot%\\SysWOW64\\powrprof.dll", NULL},
  2802. {L"bhp012.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\PPP.DLL", NULL},
  2803. {L"nmpppoe.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\PPPOE.dll", NULL},
  2804. {NULL, L"%systemroot%\\system32\\prc.nls", NULL},
  2805. {NULL, L"%systemroot%\\system32\\prcp.nls", NULL},
  2806. {NULL, L"%systemroot%\\system32\\prflbmsg.dll", NULL},
  2807. {L"wprflbmsg.dll", L"%systemroot%\\SysWOW64\\prflbmsg.dll", NULL},
  2808. {NULL, L"%systemroot%\\system32\\print.exe", NULL},
  2809. {L"wprint.exe", L"%systemroot%\\SysWOW64\\print.exe", NULL},
  2810. {NULL, L"%systemroot%\\system32\\printui.dll", NULL},
  2811. {L"wprintui.dll", L"%systemroot%\\SysWOW64\\printui.dll", NULL},
  2812. {NULL, L"%systemroot%\\system32\\prncnfg.vbs", NULL},
  2813. {NULL, L"%systemroot%\\system32\\prndrvr.vbs", NULL},
  2814. {NULL, L"%systemroot%\\system32\\prnjobs.vbs", NULL},
  2815. {NULL, L"%systemroot%\\system32\\prnmngr.vbs", NULL},
  2816. {NULL, L"%systemroot%\\system32\\prnport.vbs", NULL},
  2817. {NULL, L"%systemroot%\\system32\\prnqctl.vbs", NULL},
  2818. {NULL, L"%systemroot%\\system32\\drivers\\processr.sys", NULL},
  2819. {L"wproctexe.ocx", L"%systemroot%\\SysWOW64\\proctexe.ocx", NULL},
  2820. {NULL, L"%systemroot%\\system32\\profmap.dll", NULL},
  2821. {L"wprofmap.dll", L"%systemroot%\\SysWOW64\\profmap.dll", NULL},
  2822. {NULL, L"%systemroot%\\system32\\progman.exe", NULL},
  2823. {L"wprogman.exe", L"%systemroot%\\SysWOW64\\progman.exe", NULL},
  2824. {NULL, L"%systemroot%\\system32\\proquota.exe", NULL},
  2825. {L"wproquota.exe", L"%systemroot%\\SysWOW64\\proquota.exe", NULL},
  2826. {NULL, L"%systemroot%\\system32\\wbem\\provthrd.dll", NULL},
  2827. {NULL, L"%systemroot%\\system32\\proxycfg.exe", NULL},
  2828. {L"wproxycfg.exe", L"%systemroot%\\SysWOW64\\proxycfg.exe", NULL},
  2829. {NULL, L"%systemroot%\\system32\\psapi.dll", NULL},
  2830. {L"wpsapi.dll", L"%systemroot%\\SysWOW64\\psapi.dll", NULL},
  2831. {NULL, L"%systemroot%\\system32\\psbase.dll", NULL},
  2832. {L"wpsbase.dll", L"%systemroot%\\SysWOW64\\psbase.dll", NULL},
  2833. {NULL, L"%systemroot%\\system32\\pschdprf.dll", NULL},
  2834. {L"wpschdprf.dll", L"%systemroot%\\SysWOW64\\pschdprf.dll", NULL},
  2835. {NULL, L"%systemroot%\\system32\\drivers\\psched.sys", NULL},
  2836. {NULL, L"%systemroot%\\system32\\drivers\\pscr.sys", NULL},
  2837. {L"wpsisdecd.dll", L"%systemroot%\\SysWOW64\\psisdecd.dll", NULL},
  2838. {L"wpsisrndr.ax", L"%systemroot%\\SysWOW64\\psisrndr.ax", NULL},
  2839. {NULL, L"%systemroot%\\system32\\psnppagn.dll", NULL},
  2840. {L"wpsnppagn.dll", L"%systemroot%\\SysWOW64\\psnppagn.dll", NULL},
  2841. {NULL, L"%systemroot%\\system32\\pstorec.dll", NULL},
  2842. {L"wpstorec.dll", L"%systemroot%\\SysWOW64\\pstorec.dll", NULL},
  2843. {NULL, L"%systemroot%\\system32\\pstorsvc.dll", NULL},
  2844. {L"wpstorsvc.dll", L"%systemroot%\\SysWOW64\\pstorsvc.dll", NULL},
  2845. {NULL, L"%systemroot%\\system32\\drivers\\ptilink.sys", NULL},
  2846. {NULL, L"%systemroot%\\system32\\drivers\\ptpusd.dll", NULL},
  2847. {NULL, L"%systemroot%\\system32\\pubprn.vbs", NULL},
  2848. {NULL, L"%systemroot%\\system32\\pwdssp.dll", NULL},
  2849. {L"wpwdssp.dll", L"%systemroot%\\SysWOW64\\pwdssp.dll", NULL},
  2850. {NULL, L"%systemroot%\\system32\\qappsrv.exe", NULL},
  2851. {NULL, L"%systemroot%\\system32\\qasf.dll", NULL},
  2852. {L"wqasf.dll", L"%systemroot%\\SysWOW64\\qasf.dll", NULL},
  2853. {NULL, L"%systemroot%\\system32\\qcap.dll", NULL},
  2854. {L"wqcap.dll", L"%systemroot%\\SysWOW64\\qcap.dll", NULL},
  2855. {NULL, L"%systemroot%\\system32\\qdv.dll", NULL},
  2856. {L"wqdv.dll", L"%systemroot%\\SysWOW64\\qdv.dll", NULL},
  2857. {NULL, L"%systemroot%\\system32\\qdvd.dll", NULL},
  2858. {L"wqdvd.dll", L"%systemroot%\\SysWOW64\\qdvd.dll", NULL},
  2859. {NULL, L"%systemroot%\\system32\\qedit.dll", NULL},
  2860. {L"wqedit.dll", L"%systemroot%\\SysWOW64\\qedit.dll", NULL},
  2861. {NULL, L"%systemroot%\\system32\\qedwipes.dll", NULL},
  2862. {L"wqedwipes.dll", L"%systemroot%\\SysWOW64\\qedwipes.dll", NULL},
  2863. {NULL, L"%systemroot%\\system32\\drivers\\qic157.sys", NULL},
  2864. {NULL, L"%systemroot%\\system32\\drivers\\ql1080.sys", NULL},
  2865. {NULL, L"%systemroot%\\system32\\drivers\\ql10wnt.sys", NULL},
  2866. {NULL, L"%systemroot%\\system32\\drivers\\ql12160.sys", NULL},
  2867. {NULL, L"%systemroot%\\system32\\drivers\\ql1240.sys", NULL},
  2868. {NULL, L"%systemroot%\\system32\\drivers\\ql1280.sys", NULL},
  2869. {NULL, L"%systemroot%\\system32\\drivers\\ql2100.sys", NULL},
  2870. {NULL, L"%systemroot%\\system32\\drivers\\ql2200.sys", NULL},
  2871. {NULL, L"%systemroot%\\system32\\drivers\\ql2300.sys", NULL},
  2872. {NULL, L"%systemroot%\\system32\\drivers\\qlstrmc.sys", NULL},
  2873. {NULL, L"%systemroot%\\system32\\qmgr.dll", NULL},
  2874. {NULL, L"%systemroot%\\system32\\qmgrprxy.dll", NULL},
  2875. {NULL, L"%systemroot%\\system32\\drivers\\qntmmc.sys", NULL},
  2876. {NULL, L"%systemroot%\\system32\\qosname.dll", NULL},
  2877. {L"wqosname.dll", L"%systemroot%\\SysWOW64\\qosname.dll", NULL},
  2878. {NULL, L"%systemroot%\\system32\\qprocess.exe", NULL},
  2879. {NULL, L"%systemroot%\\system32\\quartz.dll", NULL},
  2880. {L"wquartz.dll", L"%systemroot%\\SysWOW64\\quartz.dll", NULL},
  2881. {NULL, L"%systemroot%\\system32\\query.dll", NULL},
  2882. {L"wquery.dll", L"%systemroot%\\SysWOW64\\query.dll", NULL},
  2883. {NULL, L"%systemroot%\\system32\\query.exe", NULL},
  2884. {NULL, L"%systemroot%\\system32\\quick.ime", L"intl.inf"},
  2885. {NULL, L"%systemroot%\\system32\\quser.exe", NULL},
  2886. {NULL, L"%systemroot%\\system32\\qwinsta.exe", NULL},
  2887. {NULL, L"%commonprogramfiles%\\SpeechEngines\\Microsoft\\Lexicon\\1033\\r1033tts.lxa", NULL},
  2888. {NULL, L"%systemroot%\\system32\\racpldlg.dll", NULL},
  2889. {NULL, L"%systemroot%\\system32\\drivers\\ramdisk.sys", NULL},
  2890. {NULL, L"%systemroot%\\system32\\drivers\\rasacd.sys", NULL},
  2891. {NULL, L"%systemroot%\\system32\\rasadhlp.dll", NULL},
  2892. {L"wrasadhlp.dll", L"%systemroot%\\SysWOW64\\rasadhlp.dll", NULL},
  2893. {NULL, L"%systemroot%\\system32\\rasapi32.dll", NULL},
  2894. {L"wrasapi32.dll", L"%systemroot%\\SysWOW64\\rasapi32.dll", NULL},
  2895. {NULL, L"%systemroot%\\system32\\rasauto.dll", NULL},
  2896. {L"wrasauto.dll", L"%systemroot%\\SysWOW64\\rasauto.dll", NULL},
  2897. {NULL, L"%systemroot%\\system32\\rasautou.exe", NULL},
  2898. {L"wrasautou.exe", L"%systemroot%\\SysWOW64\\rasautou.exe", NULL},
  2899. {NULL, L"%systemroot%\\system32\\raschap.dll", NULL},
  2900. {L"wraschap.dll", L"%systemroot%\\SysWOW64\\raschap.dll", NULL},
  2901. {NULL, L"%systemroot%\\system32\\rasctrs.dll", NULL},
  2902. {L"wrasctrs.dll", L"%systemroot%\\SysWOW64\\rasctrs.dll", NULL},
  2903. {NULL, L"%systemroot%\\system32\\rasdial.exe", NULL},
  2904. {L"wrasdial.exe", L"%systemroot%\\SysWOW64\\rasdial.exe", NULL},
  2905. {NULL, L"%systemroot%\\system32\\rasdlg.dll", NULL},
  2906. {L"wrasdlg.dll", L"%systemroot%\\SysWOW64\\rasdlg.dll", NULL},
  2907. {NULL, L"%systemroot%\\system32\\drivers\\rasl2tp.sys", NULL},
  2908. {NULL, L"%systemroot%\\system32\\rasman.dll", NULL},
  2909. {L"wrasman.dll", L"%systemroot%\\SysWOW64\\rasman.dll", NULL},
  2910. {NULL, L"%systemroot%\\system32\\rasmans.dll", NULL},
  2911. {L"wrasmans.dll", L"%systemroot%\\SysWOW64\\rasmans.dll", NULL},
  2912. {NULL, L"%systemroot%\\system32\\rasmontr.dll", NULL},
  2913. {L"wrasmontr.dll", L"%systemroot%\\SysWOW64\\rasmontr.dll", NULL},
  2914. {NULL, L"%systemroot%\\system32\\rasmxs.dll", NULL},
  2915. {L"wrasmxs.dll", L"%systemroot%\\SysWOW64\\rasmxs.dll", NULL},
  2916. {NULL, L"%systemroot%\\system32\\rasphone.exe", NULL},
  2917. {L"wrasphone.exe", L"%systemroot%\\SysWOW64\\rasphone.exe", NULL},
  2918. {NULL, L"%systemroot%\\system32\\rasppp.dll", NULL},
  2919. {L"wrasppp.dll", L"%systemroot%\\SysWOW64\\rasppp.dll", NULL},
  2920. {NULL, L"%systemroot%\\system32\\drivers\\raspppoe.sys", NULL},
  2921. {NULL, L"%systemroot%\\system32\\drivers\\raspptp.sys", NULL},
  2922. {NULL, L"%systemroot%\\system32\\drivers\\raspti.sys", NULL},
  2923. {NULL, L"%systemroot%\\system32\\rasrad.dll", NULL},
  2924. {L"wrasrad.dll", L"%systemroot%\\SysWOW64\\rasrad.dll", NULL},
  2925. {NULL, L"%systemroot%\\system32\\rassapi.dll", NULL},
  2926. {L"wrassapi.dll", L"%systemroot%\\SysWOW64\\rassapi.dll", NULL},
  2927. {NULL, L"%systemroot%\\system32\\rasser.dll", NULL},
  2928. {L"wrasser.dll", L"%systemroot%\\SysWOW64\\rasser.dll", NULL},
  2929. {NULL, L"%systemroot%\\system32\\rassfm.dll", NULL},
  2930. {L"wrassfm.dll", L"%systemroot%\\SysWOW64\\rassfm.dll", NULL},
  2931. {NULL, L"%systemroot%\\system32\\rastapi.dll", NULL},
  2932. {L"wrastapi.dll", L"%systemroot%\\SysWOW64\\rastapi.dll", NULL},
  2933. {NULL, L"%systemroot%\\system32\\rastls.dll", NULL},
  2934. {L"wrastls.dll", L"%systemroot%\\SysWOW64\\rastls.dll", NULL},
  2935. {NULL, L"%systemroot%\\system32\\rasuser.dll", NULL},
  2936. {L"wrasuser.dll", L"%systemroot%\\SysWOW64\\rasuser.dll", NULL},
  2937. {NULL, L"%systemroot%\\system32\\drivers\\rawwan.sys", NULL},
  2938. {NULL, L"%systemroot%\\system32\\RemInst\\rbfg.exe", NULL},
  2939. {NULL, L"%systemroot%\\system32\\inetsrv\\rcancel.vbs", L"ins.inf"},
  2940. {NULL, L"%systemroot%\\system32\\rcbdyctl.dll", NULL},
  2941. {L"wrcbdyctl.dll", L"%systemroot%\\SysWOW64\\rcbdyctl.dll", NULL},
  2942. {NULL, L"%systemroot%\\system32\\rcimlby.exe", NULL},
  2943. {L"wrcimlby.exe", L"%systemroot%\\SysWOW64\\rcimlby.exe", NULL},
  2944. {NULL, L"%systemroot%\\system32\\rcp.exe", NULL},
  2945. {L"wrcp.exe", L"%systemroot%\\SysWOW64\\rcp.exe", NULL},
  2946. {NULL, L"%systemroot%\\system32\\drivers\\rdbss.sys", NULL},
  2947. {NULL, L"%systemroot%\\system32\\rdchost.dll", NULL},
  2948. {NULL, L"%systemroot%\\system32\\drivers\\rdpcdd.sys", NULL},
  2949. {NULL, L"%systemroot%\\system32\\rdpcfgex.dll", NULL},
  2950. {NULL, L"%systemroot%\\system32\\rdpclip.exe", NULL},
  2951. {NULL, L"%systemroot%\\system32\\rdpdd.dll", NULL},
  2952. {NULL, L"%systemroot%\\system32\\drivers\\rdpdr.sys", NULL},
  2953. {NULL, L"%systemroot%\\system32\\rdpsnd.dll", NULL},
  2954. {L"wrdpsnd.dll", L"%systemroot%\\SysWOW64\\rdpsnd.dll", NULL},
  2955. {NULL, L"%systemroot%\\system32\\drivers\\rdpwd.sys", NULL},
  2956. {NULL, L"%systemroot%\\system32\\rdpwsx.dll", NULL},
  2957. {NULL, L"%systemroot%\\system32\\rdsaddin.exe", NULL},
  2958. {NULL, L"%systemroot%\\system32\\rdshost.exe", NULL},
  2959. {NULL, L"%systemroot%\\system32\\recover.exe", NULL},
  2960. {L"wrecover.exe", L"%systemroot%\\SysWOW64\\recover.exe", NULL},
  2961. {NULL, L"%systemroot%\\system32\\drivers\\redbook.sys", NULL},
  2962. {NULL, L"%systemroot%\\system32\\reg.exe", NULL},
  2963. {L"wreg.exe", L"%systemroot%\\SysWOW64\\reg.exe", NULL},
  2964. {NULL, L"%systemroot%\\system32\\regapi.dll", NULL},
  2965. {L"wregapi.dll", L"%systemroot%\\SysWOW64\\regapi.dll", NULL},
  2966. {NULL, L"%systemroot%\\regedit.exe", NULL},
  2967. {L"wregedit.exe", L"%systemroot%\\SysWOW64\\regedit.exe", NULL},
  2968. {NULL, L"%systemroot%\\system32\\regedt32.exe", NULL},
  2969. {L"wregedt32.exe", L"%systemroot%\\SysWOW64\\regedt32.exe", NULL},
  2970. {NULL, L"%systemroot%\\system32\\inetsrv\\regfilt.vbs", L"ins.inf"},
  2971. {NULL, L"%systemroot%\\system32\\regini.exe", NULL},
  2972. {NULL, L"%systemroot%\\system32\\regsvc.dll", NULL},
  2973. {L"wregsvc.dll", L"%systemroot%\\SysWOW64\\regsvc.dll", NULL},
  2974. {NULL, L"%systemroot%\\system32\\regsvr32.exe", NULL},
  2975. {L"wregsvr32.exe", L"%systemroot%\\SysWOW64\\regsvr32.exe", NULL},
  2976. {NULL, L"%systemroot%\\system32\\regtrace.exe", L"ims.inf"},
  2977. {NULL, L"%systemroot%\\system32\\regwiz.exe", NULL},
  2978. {L"wregwiz.exe", L"%systemroot%\\SysWOW64\\regwiz.exe", NULL},
  2979. {NULL, L"%systemroot%\\system32\\regwizc.dll", NULL},
  2980. {L"wregwizc.dll", L"%systemroot%\\SysWOW64\\regwizc.dll", NULL},
  2981. {NULL, L"%systemroot%\\system32\\relog.exe", NULL},
  2982. {L"wrelog.exe", L"%systemroot%\\SysWOW64\\relog.exe", NULL},
  2983. {NULL, L"%systemroot%\\system32\\remotepg.dll", NULL},
  2984. {NULL, L"%systemroot%\\system32\\remotesp.tsp", NULL},
  2985. {L"wremotesp.tsp", L"%systemroot%\\SysWOW64\\remotesp.tsp", NULL},
  2986. {NULL, L"%systemroot%\\system32\\remrras.exe", NULL},
  2987. {L"wremrras.exe", L"%systemroot%\\SysWOW64\\remrras.exe", NULL},
  2988. {NULL, L"%systemroot%\\system32\\rend.dll", NULL},
  2989. {L"wrend.dll", L"%systemroot%\\SysWOW64\\rend.dll", NULL},
  2990. {NULL, L"%systemroot%\\system32\\wbem\\repdrvfs.dll", NULL},
  2991. {NULL, L"%systemroot%\\system32\\replace.exe", NULL},
  2992. {L"wreplace.exe", L"%systemroot%\\SysWOW64\\replace.exe", NULL},
  2993. {NULL, L"%systemroot%\\system32\\replprov.dll", NULL},
  2994. {NULL, L"%systemroot%\\system32\\reset.exe", NULL},
  2995. {NULL, L"%systemroot%\\Cluster\\ResrcMon.exe", NULL},
  2996. {NULL, L"%systemroot%\\system32\\resutils.dll", NULL},
  2997. {L"wresutils.dll", L"%systemroot%\\SysWOW64\\resutils.dll", NULL},
  2998. {NULL, L"%systemroot%\\system32\\rexec.exe", NULL},
  2999. {L"wrexec.exe", L"%systemroot%\\SysWOW64\\rexec.exe", NULL},
  3000. {NULL, L"%systemroot%\\system32\\inetsrv\\rexpire.vbs", L"ins.inf"},
  3001. {NULL, L"%systemroot%\\system32\\inetsrv\\rfeed.vbs", L"ins.inf"},
  3002. {NULL, L"%systemroot%\\system32\\inetsrv\\rgroup.vbs", L"ins.inf"},
  3003. {NULL, L"%systemroot%\\system32\\rigpsnap.dll", NULL},
  3004. {L"wrigpsnap.dll", L"%systemroot%\\SysWOW64\\rigpsnap.dll", NULL},
  3005. {NULL, L"%systemroot%\\system32\\ripagnt.dll", NULL},
  3006. {L"wripagnt.dll", L"%systemroot%\\SysWOW64\\ripagnt.dll", NULL},
  3007. {NULL, L"%systemroot%\\system32\\RemInst\\riprep_i.exe", NULL},
  3008. {NULL, L"%systemroot%\\system32\\risetup.exe", NULL},
  3009. {NULL, L"%systemroot%\\system32\\drivers\\RMCast.sys", NULL},
  3010. {NULL, L"%systemroot%\\system32\\drivers\\rndismp.sys", NULL},
  3011. {NULL, L"%systemroot%\\system32\\rnr20.dll", NULL},
  3012. {L"wrnr20.dll", L"%systemroot%\\SysWOW64\\rnr20.dll", NULL},
  3013. {NULL, L"%systemroot%\\system32\\romanime.ime", L"intl.inf"},
  3014. {NULL, L"%systemroot%\\system32\\drivers\\rootmdm.sys", NULL},
  3015. {NULL, L"%systemroot%\\system32\\route.exe", NULL},
  3016. {L"wroute.exe", L"%systemroot%\\SysWOW64\\route.exe", NULL},
  3017. {NULL, L"%systemroot%\\system32\\routemon.exe", NULL},
  3018. {L"wroutemon.exe", L"%systemroot%\\SysWOW64\\routemon.exe", NULL},
  3019. {NULL, L"%systemroot%\\system32\\routetab.dll", NULL},
  3020. {L"wroutetab.dll", L"%systemroot%\\SysWOW64\\routetab.dll", NULL},
  3021. {NULL, L"%systemroot%\\system32\\rpcns4.dll", NULL},
  3022. {L"wrpcns4.dll", L"%systemroot%\\SysWOW64\\rpcns4.dll", NULL},
  3023. {NULL, L"%systemroot%\\system32\\rpcnsh.dll", NULL},
  3024. {L"wrpcnsh.dll", L"%systemroot%\\SysWOW64\\rpcnsh.dll", NULL},
  3025. {NULL, L"%systemroot%\\system32\\rpcproxy\\rpcproxy.dll", NULL},
  3026. {L"wrpcproxy.dll", L"%systemroot%\\SysWOW64\\rpcproxy.dll", NULL},
  3027. {NULL, L"%systemroot%\\system32\\inetsrv\\rpcref.dll", L"iis.inf"},
  3028. {NULL, L"%systemroot%\\system32\\rpcrt4.dll", NULL},
  3029. {L"wrpcrt4.dll", L"%systemroot%\\SysWOW64\\rpcrt4.dll", NULL},
  3030. {NULL, L"%systemroot%\\system32\\rpcss.dll", NULL},
  3031. {NULL, L"%systemroot%\\system32\\rrasprxy.dll", NULL},
  3032. {L"wrrasprxy.dll", L"%systemroot%\\SysWOW64\\rrasprxy.dll", NULL},
  3033. {NULL, L"%systemroot%\\system32\\rraswiz.exe", NULL},
  3034. {NULL, L"%systemroot%\\system32\\RsAdmin.dll", NULL},
  3035. {NULL, L"%systemroot%\\system32\\RsCli.dll", NULL},
  3036. {NULL, L"%systemroot%\\system32\\RsCommon.dll", NULL},
  3037. {NULL, L"%systemroot%\\system32\\RsConn.dll", NULL},
  3038. {NULL, L"%systemroot%\\system32\\RsEng.dll", NULL},
  3039. {NULL, L"%systemroot%\\system32\\RsEngPs.dll", NULL},
  3040. {NULL, L"%systemroot%\\system32\\inetsrv\\rsess.vbs", L"ins.inf"},
  3041. {NULL, L"%systemroot%\\system32\\drivers\\rsfilter.sys", NULL},
  3042. {NULL, L"%systemroot%\\system32\\RsFsa.dll", NULL},
  3043. {NULL, L"%systemroot%\\system32\\rsfsaps.dll", NULL},
  3044. {NULL, L"%systemroot%\\system32\\rsh.exe", NULL},
  3045. {L"wrsh.exe", L"%systemroot%\\SysWOW64\\rsh.exe", NULL},
  3046. {NULL, L"%systemroot%\\system32\\rshx32.dll", NULL},
  3047. {L"wrshx32.dll", L"%systemroot%\\SysWOW64\\rshx32.dll", NULL},
  3048. {NULL, L"%systemroot%\\system32\\RsIdb.dll", NULL},
  3049. {NULL, L"%systemroot%\\system32\\RsJob.dll", NULL},
  3050. {NULL, L"%systemroot%\\system32\\RsLaunch.exe", NULL},
  3051. {NULL, L"%systemroot%\\system32\\RsLnk.exe", NULL},
  3052. {NULL, L"%systemroot%\\system32\\rsm.exe", NULL},
  3053. {NULL, L"%systemroot%\\system32\\rsmmllsv.exe", NULL},
  3054. {NULL, L"%systemroot%\\system32\\RsMover.dll", NULL},
  3055. {NULL, L"%systemroot%\\system32\\rsmps.dll", NULL},
  3056. {NULL, L"%systemroot%\\system32\\rsmsink.exe", NULL},
  3057. {NULL, L"%systemroot%\\system32\\rsmui.exe", NULL},
  3058. {NULL, L"%systemroot%\\system32\\rsnotify.exe", NULL},
  3059. {NULL, L"%systemroot%\\system32\\rsopprov.exe", NULL},
  3060. {L"wrsopprov.exe", L"%systemroot%\\SysWOW64\\rsopprov.exe", NULL},
  3061. {NULL, L"%systemroot%\\system32\\Setup\\rsoptcom.dll", NULL},
  3062. {NULL, L"%systemroot%\\system32\\Rss.exe", NULL},
  3063. {NULL, L"%systemroot%\\system32\\RsServ.exe", NULL},
  3064. {NULL, L"%systemroot%\\system32\\RsServPs.dll", NULL},
  3065. {NULL, L"%systemroot%\\system32\\RsShell.dll", NULL},
  3066. {NULL, L"%systemroot%\\system32\\RsSub.dll", NULL},
  3067. {NULL, L"%systemroot%\\system32\\RsSubPs.dll", NULL},
  3068. {NULL, L"%systemroot%\\system32\\RsTask.dll", NULL},
  3069. {NULL, L"%systemroot%\\system32\\RsTore.exe", NULL},
  3070. {L"bhp022.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\RSVP.DLL", NULL},
  3071. {NULL, L"%systemroot%\\system32\\rtm.dll", NULL},
  3072. {L"wrtm.dll", L"%systemroot%\\SysWOW64\\rtm.dll", NULL},
  3073. {NULL, L"%systemroot%\\system32\\rtrfiltr.dll", NULL},
  3074. {L"wrtrfiltr.dll", L"%systemroot%\\SysWOW64\\rtrfiltr.dll", NULL},
  3075. {NULL, L"%systemroot%\\system32\\rtrupg.dll", NULL},
  3076. {L"wrtrupg.dll", L"%systemroot%\\SysWOW64\\rtrupg.dll", NULL},
  3077. {NULL, L"%systemroot%\\system32\\rtutils.dll", NULL},
  3078. {L"wrtutils.dll", L"%systemroot%\\SysWOW64\\rtutils.dll", NULL},
  3079. {NULL, L"%systemroot%\\system32\\runas.exe", NULL},
  3080. {L"wrunas.exe", L"%systemroot%\\SysWOW64\\runas.exe", NULL},
  3081. {NULL, L"%systemroot%\\system32\\rundll32.exe", NULL},
  3082. {L"wrundll32.exe", L"%systemroot%\\SysWOW64\\rundll32.exe", NULL},
  3083. {NULL, L"%systemroot%\\system32\\runonce.exe", NULL},
  3084. {L"wrunonce.exe", L"%systemroot%\\SysWOW64\\runonce.exe", NULL},
  3085. {NULL, L"%systemroot%\\system32\\rwinsta.exe", NULL},
  3086. {NULL, L"%systemroot%\\system32\\rwnh.dll", L"ims.inf"},
  3087. {NULL, L"%systemroot%\\system32\\drivers\\sacdrv.sys", NULL},
  3088. {NULL, L"%systemroot%\\system32\\sacsess.exe", NULL},
  3089. {NULL, L"%systemroot%\\system32\\sacsvr.dll", NULL},
  3090. {NULL, L"%systemroot%\\system32\\safrcdlg.dll", NULL},
  3091. {NULL, L"%systemroot%\\system32\\safrdm.dll", NULL},
  3092. {NULL, L"%systemroot%\\system32\\safrslv.dll", NULL},
  3093. {L"wsainstal.dll", L"%systemroot%\\SysWOW64\\sainstall.dll", NULL},
  3094. {NULL, L"%commonprogramfiles%\\SpeechEngines\\Microsoft\\TTS\\1033\\sam.sdf", NULL},
  3095. {NULL, L"%commonprogramfiles%\\SpeechEngines\\Microsoft\\TTS\\1033\\sam.spd", NULL},
  3096. {NULL, L"%commonprogramfiles%\\Microsoft Shared\\Speech\\sapi.cpl", NULL},
  3097. {NULL, L"%commonprogramfiles%\\Microsoft Shared\\Speech\\sapi.dll", NULL},
  3098. {NULL, L"%commonprogramfiles%\\Microsoft Shared\\Speech\\sapisvr.exe", NULL},
  3099. {NULL, L"%systemroot%\\system32\\drivers\\saport.sys", NULL},
  3100. {NULL, L"%systemroot%\\system32\\savedump.exe", NULL},
  3101. {L"wsavedump.exe", L"%systemroot%\\SysWOW64\\savedump.exe", NULL},
  3102. {NULL, L"%systemroot%\\system32\\drivers\\sbp2port.sys", NULL},
  3103. {NULL, L"%systemroot%\\system32\\sc.exe", NULL},
  3104. {L"wsc.exe", L"%systemroot%\\SysWOW64\\sc.exe", NULL},
  3105. {NULL, L"%systemroot%\\system32\\scarddlg.dll", NULL},
  3106. {L"wscarddlg.dll", L"%systemroot%\\SysWOW64\\scarddlg.dll", NULL},
  3107. {NULL, L"%systemroot%\\system32\\scardsvr.exe", NULL},
  3108. {L"wscardsvr.exe", L"%systemroot%\\SysWOW64\\scardsvr.exe", NULL},
  3109. {NULL, L"%systemroot%\\system32\\sccbase.dll", NULL},
  3110. {L"wsccbase.dll", L"%systemroot%\\SysWOW64\\sccbase.dll", NULL},
  3111. {NULL, L"%systemroot%\\system32\\drivers\\sccmn50m.sys", NULL},
  3112. {NULL, L"%systemroot%\\system32\\drivers\\sccmusbm.sys", NULL},
  3113. {NULL, L"%systemroot%\\system32\\sccsccp.dll", NULL},
  3114. {L"wsccsccp.dll", L"%systemroot%\\SysWOW64\\sccsccp.dll", NULL},
  3115. {NULL, L"%systemroot%\\system32\\scecli.dll", NULL},
  3116. {L"wscecli.dll", L"%systemroot%\\SysWOW64\\scecli.dll", NULL},
  3117. {NULL, L"%systemroot%\\system32\\scesrv.dll", NULL},
  3118. {NULL, L"%systemroot%\\system32\\schedsvc.dll", NULL},
  3119. {NULL, L"%systemroot%\\system32\\schmmgmt.dll", NULL},
  3120. {L"wschmmgmt.dll", L"%systemroot%\\SysWOW64\\schmmgmt.dll", NULL},
  3121. {L"sctasks.exe", L"%systemroot%\\system32\\schtasks.exe", NULL},
  3122. {L"wsctasks.exe", L"%systemroot%\\SysWOW64\\schtasks.exe", NULL},
  3123. {NULL, L"%systemroot%\\system32\\schupgr.exe", NULL},
  3124. {L"wschupgr.exe", L"%systemroot%\\SysWOW64\\schupgr.exe", NULL},
  3125. {NULL, L"%systemroot%\\system32\\sclgntfy.dll", NULL},
  3126. {L"wsclgntfy.dll", L"%systemroot%\\SysWOW64\\sclgntfy.dll", NULL},
  3127. {NULL, L"%systemroot%\\system32\\drivers\\scmstcs.sys", NULL},
  3128. {NULL, L"%systemroot%\\system32\\drivers\\SCR111.sys", NULL},
  3129. {NULL, L"%systemroot%\\system32\\wbem\\scrcons.exe", NULL},
  3130. {NULL, L"%systemroot%\\system32\\scrdenrl.dll", NULL},
  3131. {L"scrdia64.dll", L"%systemroot%\\system32\\CertSrv\\CertControl\\ia64\\scrdenrl.dll", NULL},
  3132. {L"scrdw2k.dll", L"%systemroot%\\system32\\CertSrv\\CertControl\\w2k\\scrdenrl.dll", NULL},
  3133. {L"scrdx86.dll", L"%systemroot%\\system32\\CertSrv\\CertControl\\x86\\scrdenrl.dll", NULL},
  3134. {NULL, L"%systemroot%\\system32\\scredir.dll", NULL},
  3135. {L"wscredir.dll", L"%systemroot%\\SysWOW64\\scredir.dll", NULL},
  3136. {NULL, L"%systemroot%\\system32\\inetsrv\\scripto.dll", L"ims.inf"},
  3137. {L"wscripto.dll", L"%systemroot%\\SysWOW64\\scripto.dll", NULL},
  3138. {NULL, L"%systemroot%\\system32\\scriptpw.dll", NULL},
  3139. {L"wscriptpw.dll", L"%systemroot%\\SysWOW64\\scriptpw.dll", NULL},
  3140. {NULL, L"%systemroot%\\system32\\scrnsave.scr", NULL},
  3141. {NULL, L"%systemroot%\\system32\\scrptutl.dll", NULL},
  3142. {L"wscrptutl.dll", L"%systemroot%\\SysWOW64\\scrptutl.dll", NULL},
  3143. {NULL, L"%systemroot%\\system32\\drivers\\scsiport.sys", NULL},
  3144. {NULL, L"%systemroot%\\system32\\drivers\\scsiprnt.sys", NULL},
  3145. {NULL, L"%systemroot%\\system32\\drivers\\scsiscan.sys", NULL},
  3146. {NULL, L"%systemroot%\\system32\\sdpblb.dll", NULL},
  3147. {L"wsdpblb.dll", L"%systemroot%\\SysWOW64\\sdpblb.dll", NULL},
  3148. {NULL, L"%systemroot%\\system32\\drivers\\seaddsmc.sys", NULL},
  3149. {NULL, L"%systemroot%\\system32\\secedit.exe", NULL},
  3150. {L"wsecedit.exe", L"%systemroot%\\SysWOW64\\secedit.exe", NULL},
  3151. {NULL, L"%systemroot%\\system32\\seclogon.dll", NULL},
  3152. {L"wseclogon.dll", L"%systemroot%\\SysWOW64\\seclogon.dll", NULL},
  3153. {NULL, L"%systemroot%\\system32\\secur32.dll", NULL},
  3154. {L"wsecur32.dll", L"%systemroot%\\SysWOW64\\secur32.dll", NULL},
  3155. {NULL, L"%systemroot%\\system32\\security.dll", NULL},
  3156. {L"wsecurity.dll", L"%systemroot%\\SysWOW64\\security.dll", NULL},
  3157. {NULL, L"%systemroot%\\system32\\sendcmsg.dll", NULL},
  3158. {L"wsendcmsg.dll", L"%systemroot%\\SysWOW64\\sendcmsg.dll", NULL},
  3159. {NULL, L"%systemroot%\\system32\\sendmail.dll", NULL},
  3160. {L"wsendmail.dll", L"%systemroot%\\SysWOW64\\sendmail.dll", NULL},
  3161. {NULL, L"%systemroot%\\system32\\sens.dll", NULL},
  3162. {L"wsens.dll", L"%systemroot%\\SysWOW64\\sens.dll", NULL},
  3163. {NULL, L"%systemroot%\\system32\\sensapi.dll", NULL},
  3164. {L"wsensapi.dll", L"%systemroot%\\SysWOW64\\sensapi.dll", NULL},
  3165. {NULL, L"%systemroot%\\system32\\senscfg.dll", NULL},
  3166. {L"wsenscfg.dll", L"%systemroot%\\SysWOW64\\senscfg.dll", NULL},
  3167. {NULL, L"%systemroot%\\system32\\inetsrv\\seo.dll", L"ims.inf"},
  3168. {NULL, L"%systemroot%\\system32\\inetsrv\\seos.dll", L"ims.inf"},
  3169. {NULL, L"%systemroot%\\system32\\drivers\\serenum.sys", NULL},
  3170. {NULL, L"%systemroot%\\system32\\drivers\\serial.sys", NULL},
  3171. {NULL, L"%systemroot%\\system32\\serialui.dll", NULL},
  3172. {L"wserialui.dll", L"%systemroot%\\SysWOW64\\serialui.dll", NULL},
  3173. {NULL, L"%systemroot%\\system32\\drivers\\sermouse.sys", NULL},
  3174. {NULL, L"%systemroot%\\system32\\drivers\\serscan.sys", NULL},
  3175. {NULL, L"%systemroot%\\system32\\servdeps.dll", NULL},
  3176. {NULL, L"%systemroot%\\system32\\services.exe", NULL},
  3177. {NULL, L"%systemroot%\\system32\\serwvdrv.dll", NULL},
  3178. {L"wserwvdrv.dll", L"%systemroot%\\SysWOW64\\serwvdrv.dll", NULL},
  3179. {NULL, L"%systemroot%\\system32\\sessmgr.exe", NULL},
  3180. {NULL, L"%systemroot%\\system32\\sethc.exe", NULL},
  3181. {L"wsethc.exe", L"%systemroot%\\SysWOW64\\sethc.exe", NULL},
  3182. {NULL, L"%systemroot%\\system32\\RemInst\\setpcl_i.exe", NULL},
  3183. {NULL, L"%systemroot%\\system32\\setup.exe", NULL},
  3184. {L"tscmsi02.w32", L"%systemroot%\\system32\\clients\\tsclient\\win32\\setup.exe", NULL},
  3185. {L"wisetup.exe", L"%systemroot%\\SysWOW64\\InstallShield\\setup.exe", NULL},
  3186. {L"wsetup.exe", L"%systemroot%\\SysWOW64\\setup.exe", NULL},
  3187. {L"wsetup16.exe", L"%systemroot%\\SysWOW64\\setup16.exe", NULL},
  3188. {NULL, L"%ProgramFiles%\\Outlook Express\\setup50.exe", NULL},
  3189. {NULL, L"%systemroot%\\system32\\Setup\\setupqry.dll", NULL},
  3190. {NULL, L"%systemroot%\\system32\\setx.exe", NULL},
  3191. {L"wsetx.exe", L"%systemroot%\\SysWOW64\\setx.exe", NULL},
  3192. {NULL, L"%systemroot%\\system32\\sfc_os.dll", NULL},
  3193. {L"wsfc_os.dll", L"%systemroot%\\SysWOW64\\sfc_os.dll", NULL},
  3194. {NULL, L"%systemroot%\\system32\\drivers\\sfloppy.sys", NULL},
  3195. {NULL, L"%systemroot%\\system32\\sfmapi.dll", NULL},
  3196. {L"wsfmapi.dll", L"%systemroot%\\SysWOW64\\sfmapi.dll", NULL},
  3197. {NULL, L"%systemroot%\\system32\\drivers\\sfmatalk.sys", NULL},
  3198. {NULL, L"%systemroot%\\system32\\sfmatmsg.dll", NULL},
  3199. {L"wsfmatmsg.dll", L"%systemroot%\\SysWOW64\\sfmatmsg.dll", NULL},
  3200. {NULL, L"%systemroot%\\system32\\sfmctrs.dll", NULL},
  3201. {L"wsfmctrs.dll", L"%systemroot%\\SysWOW64\\sfmctrs.dll", NULL},
  3202. {L"wsfmmon.dll", L"%systemroot%\\SysWOW64\\sfmmon.dll", NULL},
  3203. {NULL, L"%systemroot%\\system32\\sfmmsg.dll", NULL},
  3204. {L"wsfmmsg.dll", L"%systemroot%\\SysWOW64\\sfmmsg.dll", NULL},
  3205. {L"wsfmprint.exe", L"%systemroot%\\SysWOW64\\sfmprint.exe", NULL},
  3206. {L"wsfmpsdib.dll", L"%systemroot%\\SysWOW64\\sfmpsdib.dll", NULL},
  3207. {L"wsfmpsexe.exe", L"%systemroot%\\SysWOW64\\sfmpsexe.exe", NULL},
  3208. {L"wsfmpsfnt.dll", L"%systemroot%\\SysWOW64\\sfmpsfnt.dll", NULL},
  3209. {NULL, L"%systemroot%\\system32\\drivers\\sfmsrv.sys", NULL},
  3210. {NULL, L"%systemroot%\\system32\\sfmsvc.exe", NULL},
  3211. {L"wsfmsvc.exe", L"%systemroot%\\SysWOW64\\sfmsvc.exe", NULL},
  3212. {NULL, L"%systemroot%\\system32\\sfmwshat.dll", NULL},
  3213. {L"wsfmwshat.dll", L"%systemroot%\\SysWOW64\\sfmwshat.dll", NULL},
  3214. {NULL, L"%systemroot%\\system32\\shadow.exe", NULL},
  3215. {NULL, L"%systemroot%\\system32\\shdoclc.dll", NULL},
  3216. {L"wshdoclc.dll", L"%systemroot%\\SysWOW64\\shdoclc.dll", NULL},
  3217. {NULL, L"%systemroot%\\system32\\shdocvw.dll", NULL},
  3218. {L"wshdocvw.dll", L"%systemroot%\\SysWOW64\\shdocvw.dll", NULL},
  3219. {NULL, L"%systemroot%\\system32\\shell32.dll", NULL},
  3220. {L"wshell32.dll", L"%systemroot%\\SysWOW64\\shell32.dll", NULL},
  3221. {L"class_ss.dll", L"%systemroot%\\system32\\shellstyle.dll", NULL},
  3222. {L"wclass_ss.dll", L"%systemroot%\\SysWOW64\\shellstyle.dll", NULL},
  3223. {NULL, L"%systemroot%\\system32\\shfolder.dll", NULL},
  3224. {L"wshfolder.dll", L"%systemroot%\\SysWOW64\\shfolder.dll", NULL},
  3225. {NULL, L"%systemroot%\\system32\\shgina.dll", NULL},
  3226. {NULL, L"%systemroot%\\system32\\shimgvw.dll", NULL},
  3227. {L"wshimgvw.dll", L"%systemroot%\\SysWOW64\\shimgvw.dll", NULL},
  3228. {NULL, L"%systemroot%\\system32\\shlwapi.dll", NULL},
  3229. {L"wshlwapi.dll", L"%systemroot%\\SysWOW64\\shlwapi.dll", NULL},
  3230. {NULL, L"%systemroot%\\system32\\shmedia.dll", NULL},
  3231. {L"wshmedia.dll", L"%systemroot%\\SysWOW64\\shmedia.dll", NULL},
  3232. {NULL, L"%systemroot%\\system32\\shmgrate.exe", NULL},
  3233. {L"wshmgrate.exe", L"%systemroot%\\SysWOW64\\shmgrate.exe", NULL},
  3234. {NULL, L"%systemroot%\\system32\\shrpubw.exe", NULL},
  3235. {NULL, L"%systemroot%\\system32\\shscrap.dll", NULL},
  3236. {L"wshscrap.dll", L"%systemroot%\\SysWOW64\\shscrap.dll", NULL},
  3237. {NULL, L"%systemroot%\\system32\\shsvcs.dll", NULL},
  3238. {L"wshsvcs.dll", L"%systemroot%\\SysWOW64\\shsvcs.dll", NULL},
  3239. {NULL, L"%systemroot%\\system32\\shutdown.exe", NULL},
  3240. {NULL, L"%systemroot%\\system32\\sigtab.dll", NULL},
  3241. {L"wsigtab.dll", L"%systemroot%\\SysWOW64\\sigtab.dll", NULL},
  3242. {NULL, L"%systemroot%\\system32\\sigverif.exe", NULL},
  3243. {L"wsigverif.exe", L"%systemroot%\\SysWOW64\\sigverif.exe", NULL},
  3244. {L"wsimpdata.tlb", L"%systemroot%\\SysWOW64\\simpdata.tlb", NULL},
  3245. {NULL, L"%systemroot%\\system32\\simptcp.dll", NULL},
  3246. {L"wsimptcp.dll", L"%systemroot%\\SysWOW64\\simptcp.dll", NULL},
  3247. {NULL, L"%systemroot%\\system32\\drivers\\sis.sys", NULL},
  3248. {NULL, L"%systemroot%\\system32\\sisbkup.dll", NULL},
  3249. {L"wsisbkup.dll", L"%systemroot%\\SysWOW64\\sisbkup.dll", NULL},
  3250. {NULL, L"%systemroot%\\system32\\skdll.dll", NULL},
  3251. {L"wskdll.dll", L"%systemroot%\\SysWOW64\\skdll.dll", NULL},
  3252. {NULL, L"%systemroot%\\system32\\skeys.exe", NULL},
  3253. {L"wskeys.exe", L"%systemroot%\\SysWOW64\\skeys.exe", NULL},
  3254. {NULL, L"%systemroot%\\system32\\slbcsp.dll", NULL},
  3255. {L"wslbcsp.dll", L"%systemroot%\\SysWOW64\\slbcsp.dll", NULL},
  3256. {NULL, L"%systemroot%\\system32\\slbiop.dll", NULL},
  3257. {L"wslbiop.dll", L"%systemroot%\\SysWOW64\\slbiop.dll", NULL},
  3258. {NULL, L"%systemroot%\\system32\\slbrccsp.dll", NULL},
  3259. {L"wslbrccsp.dll", L"%systemroot%\\SysWOW64\\slbrccsp.dll", NULL},
  3260. {NULL, L"%systemroot%\\system32\\NETMON\\slbs.dll", NULL},
  3261. {L"bhp013.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\SMB.DLL", NULL},
  3262. {NULL, L"%systemroot%\\system32\\drivers\\smb.sys", NULL},
  3263. {NULL, L"%systemroot%\\system32\\drivers\\smclib.sys", NULL},
  3264. {NULL, L"%systemroot%\\system32\\smcyscom.dll", NULL},
  3265. {L"wsmcyscom.dll", L"%systemroot%\\SysWOW64\\smcyscom.dll", NULL},
  3266. {NULL, L"%systemroot%\\system32\\wbem\\SNMP\\smi2smir.exe", NULL},
  3267. {NULL, L"%systemroot%\\system32\\wbem\\SNMP\\smierrsm.dll", NULL},
  3268. {NULL, L"%systemroot%\\system32\\wbem\\SNMP\\smierrsy.dll", NULL},
  3269. {NULL, L"%systemroot%\\system32\\wbem\\SNMP\\smimsgif.dll", NULL},
  3270. {NULL, L"%systemroot%\\system32\\smlogcfg.dll", NULL},
  3271. {L"wsmlogcfg.dll", L"%systemroot%\\SysWOW64\\smlogcfg.dll", NULL},
  3272. {NULL, L"%systemroot%\\system32\\smlogsvc.exe", NULL},
  3273. {L"wsmlogsvc.exe", L"%systemroot%\\SysWOW64\\smlogsvc.exe", NULL},
  3274. {NULL, L"%systemroot%\\system32\\smss.exe", NULL},
  3275. {L"wsmss.exe", L"%systemroot%\\SysWOW64\\smss.exe", NULL},
  3276. {NULL, L"%systemroot%\\system32\\smtpapi.dll", L"ims.inf"},
  3277. {NULL, L"%systemroot%\\system32\\wbem\\smtpcons.dll", NULL},
  3278. {NULL, L"%systemroot%\\system32\\smtpctrs.dll", L"ims.inf"},
  3279. {NULL, L"%systemroot%\\system32\\inetsrv\\smtpsvc.dll", L"ims.inf"},
  3280. {NULL, L"%systemroot%\\system32\\snapshot.dll", NULL},
  3281. {NULL, L"%systemroot%\\system32\\sndrec32.exe", NULL},
  3282. {NULL, L"%systemroot%\\system32\\sndvol32.exe", NULL},
  3283. {NULL, L"%systemroot%\\help\\sniffpol.dll", NULL},
  3284. {L"bhp014.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\SNMP.DLL", NULL},
  3285. {NULL, L"%systemroot%\\system32\\snmp.exe", NULL},
  3286. {L"wsnmp.exe", L"%systemroot%\\SysWOW64\\snmp.exe", NULL},
  3287. {NULL, L"%systemroot%\\system32\\snmpapi.dll", NULL},
  3288. {L"wsnmpapi.dll", L"%systemroot%\\SysWOW64\\snmpapi.dll", NULL},
  3289. {NULL, L"%systemroot%\\system32\\wbem\\snmpcl.dll", NULL},
  3290. {NULL, L"%systemroot%\\system32\\wbem\\snmpincl.dll", NULL},
  3291. {NULL, L"%systemroot%\\system32\\snmpmib.dll", NULL},
  3292. {NULL, L"%systemroot%\\system32\\wbem\\snmpsmir.dll", NULL},
  3293. {NULL, L"%systemroot%\\system32\\snmpsnap.dll", NULL},
  3294. {L"wsnmpsnap.dll", L"%systemroot%\\SysWOW64\\snmpsnap.dll", NULL},
  3295. {NULL, L"%systemroot%\\system32\\wbem\\snmpstup.dll", NULL},
  3296. {NULL, L"%systemroot%\\system32\\wbem\\snmpthrd.dll", NULL},
  3297. {NULL, L"%systemroot%\\system32\\snmptrap.exe", NULL},
  3298. {L"wsnmptrap.exe", L"%systemroot%\\SysWOW64\\snmptrap.exe", NULL},
  3299. {NULL, L"%systemroot%\\system32\\snprfdll.dll", L"ims.inf"},
  3300. {NULL, L"%systemroot%\\system32\\drivers\\snyaitmc.sys", NULL},
  3301. {NULL, L"%systemroot%\\ime\\SOFTKBD.DLL", NULL},
  3302. {L"wSOFTKBD.DLL", L"%systemroot%\\ime (x86)\\SOFTKBD.DLL", NULL},
  3303. {NULL, L"%systemroot%\\ime\\IMJP8_1\\APPLETS\\softkey.dll", L"intl.inf"},
  3304. {L"wsoftkey.dll", L"%systemroot%\\ime (x86)\\IMJP8_1\\APPLETS\\softkey.dll", L"intl.inf"},
  3305. {NULL, L"%systemroot%\\system32\\softpub.dll", NULL},
  3306. {L"wsoftpub.dll", L"%systemroot%\\SysWOW64\\softpub.dll", NULL},
  3307. {NULL, L"%systemroot%\\system32\\drivers\\sonyait.sys", NULL},
  3308. {NULL, L"%systemroot%\\system32\\drivers\\sonydcam.sys", NULL},
  3309. {NULL, L"%systemroot%\\system32\\drivers\\sonymc.sys", NULL},
  3310. {NULL, L"%systemroot%\\system32\\sort.exe", NULL},
  3311. {L"wsort.exe", L"%systemroot%\\SysWOW64\\sort.exe", NULL},
  3312. {NULL, L"%systemroot%\\system32\\sortkey.nls", NULL},
  3313. {L"wsortkey.nls", L"%systemroot%\\SysWOW64\\sortkey.nls", NULL},
  3314. {NULL, L"%systemroot%\\system32\\sorttbls.nls", NULL},
  3315. {L"wsorttbls.nls", L"%systemroot%\\SysWOW64\\sorttbls.nls", NULL},
  3316. {L"wsound.drv", L"%systemroot%\\SysWOW64\\sound.drv", NULL},
  3317. {NULL, L"%commonprogramfiles%\\SpeechEngines\\Microsoft\\spcommon.dll", NULL},
  3318. {NULL, L"%commonprogramfiles%\\Microsoft Shared\\Speech\\1033\\spcplui.dll", NULL},
  3319. {NULL, L"%systemroot%\\system32\\drivers\\spctramc.sys", NULL},
  3320. {NULL, L"%systemroot%\\ime\\spgrmr.dll", NULL},
  3321. {L"wspgrmr.dll", L"%systemroot%\\ime (x86)\\spgrmr.dll", NULL},
  3322. {NULL, L"%systemroot%\\system32\\drivers\\splitter.sys", NULL},
  3323. {NULL, L"%systemroot%\\splwow64.exe", NULL},
  3324. {L"wspnike.dll", L"%systemroot%\\SysWOW64\\spnike.dll", NULL},
  3325. {NULL, L"%systemroot%\\system32\\spoolss.dll", NULL},
  3326. {NULL, L"%systemroot%\\system32\\spoolsv.exe", NULL},
  3327. {NULL, L"%systemroot%\\system32\\sprestrt.exe", NULL},
  3328. {L"wsprestrt.exe", L"%systemroot%\\SysWOW64\\sprestrt.exe", NULL},
  3329. {L"wsprio600.dll", L"%systemroot%\\SysWOW64\\sprio600.dll", NULL},
  3330. {L"wsprio800.dll", L"%systemroot%\\SysWOW64\\sprio800.dll", NULL},
  3331. {NULL, L"%systemroot%\\ime\\SPTIP.dll", NULL},
  3332. {L"wSPTIP.dll", L"%systemroot%\\ime (x86)\\SPTIP.dll", NULL},
  3333. {NULL, L"%commonprogramfiles%\\SpeechEngines\\Microsoft\\TTS\\1033\\spttseng.dll", NULL},
  3334. {L"wSpxupchk.dll", L"%systemroot%\\SysWOW64\\Spxupchk.dll", NULL},
  3335. {NULL, L"%commonprogramfiles%\\System\\Ole DB\\sqlxmlx.dll", NULL},
  3336. {L"wsqlxmlx.dll", L"%commonprogramfiles(x86)%\\System\\Ole DB\\sqlxmlx.dll", NULL},
  3337. {L"srgb.icm", L"%systemroot%\\system32\\spool\\drivers\\color\\sRGB Color Space Profile.icm", NULL},
  3338. {NULL, L"%systemroot%\\system32\\drivers\\srv.sys", NULL},
  3339. {NULL, L"%systemroot%\\system32\\srvsvc.dll", NULL},
  3340. {NULL, L"%systemroot%\\system32\\inetsrv\\ssinc.dll", L"iis.inf"},
  3341. {NULL, L"%systemroot%\\system32\\ssmarque.scr", NULL},
  3342. {NULL, L"%systemroot%\\help\\sstub.dll", NULL},
  3343. {NULL, L"%systemroot%\\system32\\stclient.dll", NULL},
  3344. {NULL, L"%systemroot%\\system32\\drivers\\stcusb.sys", NULL},
  3345. {NULL, L"%systemroot%\\system32\\stdole32.tlb", NULL},
  3346. {L"wstdole32.tlb", L"%systemroot%\\SysWOW64\\stdole32.tlb", NULL},
  3347. {NULL, L"%systemroot%\\system32\\wbem\\stdprov.dll", NULL},
  3348. {NULL, L"%systemroot%\\system32\\sti.dll", NULL},
  3349. {L"wsti.dll", L"%systemroot%\\SysWOW64\\sti.dll", NULL},
  3350. {NULL, L"%systemroot%\\system32\\sti_ci.dll", NULL},
  3351. {L"wsti_ci.dll", L"%systemroot%\\SysWOW64\\sti_ci.dll", NULL},
  3352. {L"wstlncoin.dll", L"%systemroot%\\SysWOW64\\stlncoin.dll", NULL},
  3353. {NULL, L"%systemroot%\\system32\\stobject.dll", NULL},
  3354. {L"wstobject.dll", L"%systemroot%\\SysWOW64\\stobject.dll", NULL},
  3355. {L"wstorage.dll", L"%systemroot%\\SysWOW64\\storage.dll", NULL},
  3356. {NULL, L"%systemroot%\\system32\\drivers\\storport.sys", NULL},
  3357. {NULL, L"%systemroot%\\system32\\storprop.dll", NULL},
  3358. {NULL, L"%systemroot%\\system32\\storprov.dll", NULL},
  3359. {L"wstorprov.dll", L"%systemroot%\\SysWOW64\\storprov.dll", NULL},
  3360. {NULL, L"%systemroot%\\system32\\drivers\\stream.sys", NULL},
  3361. {NULL, L"%systemroot%\\system32\\streamci.dll", NULL},
  3362. {L"wstreamci.dll", L"%systemroot%\\SysWOW64\\streamci.dll", NULL},
  3363. {NULL, L"%systemroot%\\system32\\strmfilt.dll", NULL},
  3364. {L"wstrmfilt.dll", L"%systemroot%\\SysWOW64\\strmfilt.dll", NULL},
  3365. {NULL, L"%systemroot%\\system32\\subst.exe", NULL},
  3366. {L"wsubst.exe", L"%systemroot%\\SysWOW64\\subst.exe", NULL},
  3367. {NULL, L"%systemroot%\\system32\\inetsrv\\svcext.dll", L"iis.inf"},
  3368. {NULL, L"%systemroot%\\system32\\svchost.exe", NULL},
  3369. {L"wsvchost.exe", L"%systemroot%\\SysWOW64\\svchost.exe", NULL},
  3370. {NULL, L"%systemroot%\\system32\\svcpack.dll", NULL},
  3371. {L"wsvcpack.dll", L"%systemroot%\\SysWOW64\\svcpack.dll", NULL},
  3372. {NULL, L"%systemroot%\\system32\\drivers\\swdisp.sys", NULL},
  3373. {NULL, L"%systemroot%\\system32\\drivers\\swenum.sys", NULL},
  3374. {NULL, L"%systemroot%\\system32\\drivers\\swkeypad.sys", NULL},
  3375. {NULL, L"%systemroot%\\system32\\drivers\\swmidi.sys", NULL},
  3376. {NULL, L"%systemroot%\\system32\\drivers\\swnvram.sys", NULL},
  3377. {NULL, L"%systemroot%\\system32\\swprv.dll", NULL},
  3378. {NULL, L"%systemroot%\\system32\\sxs.dll", NULL},
  3379. {L"wsxs.dll", L"%systemroot%\\SysWOW64\\sxs.dll", NULL},
  3380. {NULL, L"%systemroot%\\system32\\drivers\\sym_hi.sys", NULL},
  3381. {NULL, L"%systemroot%\\system32\\drivers\\sym_u3.sys", NULL},
  3382. {NULL, L"%systemroot%\\system32\\drivers\\symc8xx.sys", NULL},
  3383. {NULL, L"%systemroot%\\system32\\drivers\\symmpi.sys", NULL},
  3384. {NULL, L"%systemroot%\\system32\\syncapp.exe", NULL},
  3385. {L"wsyncapp.exe", L"%systemroot%\\SysWOW64\\syncapp.exe", NULL},
  3386. {NULL, L"%systemroot%\\system32\\synceng.dll", NULL},
  3387. {L"wsynceng.dll", L"%systemroot%\\SysWOW64\\synceng.dll", NULL},
  3388. {NULL, L"%systemroot%\\system32\\syncui.dll", NULL},
  3389. {L"wsyncui.dll", L"%systemroot%\\SysWOW64\\syncui.dll", NULL},
  3390. {NULL, L"%systemroot%\\system32\\drivers\\sysaudio.sys", NULL},
  3391. {NULL, L"%systemroot%\\system32\\sysdm.cpl", NULL},
  3392. {L"wsysdm.cpl", L"%systemroot%\\SysWOW64\\sysdm.cpl", NULL},
  3393. {L"wsysedit.exe", L"%systemroot%\\SysWOW64\\sysedit.exe", NULL},
  3394. {NULL, L"%systemroot%\\system32\\sysinv.dll", NULL},
  3395. {L"wsysinv.dll", L"%systemroot%\\SysWOW64\\sysinv.dll", NULL},
  3396. {NULL, L"%systemroot%\\system32\\syskey.exe", NULL},
  3397. {L"wsyskey.exe", L"%systemroot%\\SysWOW64\\syskey.exe", NULL},
  3398. {NULL, L"%systemroot%\\system32\\sysmon.ocx", NULL},
  3399. {L"wsysmon.ocx", L"%systemroot%\\SysWOW64\\sysmon.ocx", NULL},
  3400. {NULL, L"%systemroot%\\system32\\syssetup.dll", NULL},
  3401. {L"wsyssetup.dll", L"%systemroot%\\SysWOW64\\syssetup.dll", NULL},
  3402. {L"sysinfo.exe", L"%systemroot%\\system32\\systeminfo.exe", NULL},
  3403. {L"wsysinfo.exe", L"%systemroot%\\SysWOW64\\systeminfo.exe", NULL},
  3404. {NULL, L"%systemroot%\\system32\\systray.exe", NULL},
  3405. {L"wsystray.exe", L"%systemroot%\\SysWOW64\\systray.exe", NULL},
  3406. {NULL, L"%systemroot%\\system32\\t2embed.dll", NULL},
  3407. {L"wt2embed.dll", L"%systemroot%\\SysWOW64\\t2embed.dll", NULL},
  3408. {NULL, L"%systemroot%\\system32\\takeown.exe", NULL},
  3409. {L"wtakeown.exe", L"%systemroot%\\SysWOW64\\takeown.exe", NULL},
  3410. {NULL, L"%systemroot%\\system32\\drivers\\tandqic.sys", NULL},
  3411. {NULL, L"%systemroot%\\system32\\drivers\\tape.sys", NULL},
  3412. {L"wtapi.dll", L"%systemroot%\\SysWOW64\\tapi.dll", NULL},
  3413. {NULL, L"%systemroot%\\system32\\tapi3.dll", NULL},
  3414. {L"wtapi3.dll", L"%systemroot%\\SysWOW64\\tapi3.dll", NULL},
  3415. {NULL, L"%systemroot%\\system32\\tapi32.dll", NULL},
  3416. {L"wtapi32.dll", L"%systemroot%\\SysWOW64\\tapi32.dll", NULL},
  3417. {NULL, L"%systemroot%\\system32\\tapicfg.exe", NULL},
  3418. {L"wtapicfg.exe", L"%systemroot%\\SysWOW64\\tapicfg.exe", NULL},
  3419. {NULL, L"%systemroot%\\system32\\tapiperf.dll", NULL},
  3420. {L"wtapiperf.dll", L"%systemroot%\\SysWOW64\\tapiperf.dll", NULL},
  3421. {NULL, L"%systemroot%\\system32\\tapisnap.dll", NULL},
  3422. {L"wtapisnap.dll", L"%systemroot%\\SysWOW64\\tapisnap.dll", NULL},
  3423. {NULL, L"%systemroot%\\system32\\tapisrv.dll", NULL},
  3424. {L"wtapisrv.dll", L"%systemroot%\\SysWOW64\\tapisrv.dll", NULL},
  3425. {NULL, L"%systemroot%\\system32\\tapiui.dll", NULL},
  3426. {L"wtapiui.dll", L"%systemroot%\\SysWOW64\\tapiui.dll", NULL},
  3427. {NULL, L"%systemroot%\\system32\\taskkill.exe", NULL},
  3428. {L"wtaskkill.exe", L"%systemroot%\\SysWOW64\\taskkill.exe", NULL},
  3429. {NULL, L"%systemroot%\\system32\\tasklist.exe", NULL},
  3430. {L"wtasklist.exe", L"%systemroot%\\SysWOW64\\tasklist.exe", NULL},
  3431. {NULL, L"%systemroot%\\system32\\taskmgr.exe", NULL},
  3432. {L"wtaskmgr.exe", L"%systemroot%\\SysWOW64\\taskmgr.exe", NULL},
  3433. {NULL, L"%systemroot%\\system32\\drivers\\tbatm155.sys", NULL},
  3434. {NULL, L"%systemroot%\\system32\\tcmsetup.exe", NULL},
  3435. {L"wtcmsetup.exe", L"%systemroot%\\SysWOW64\\tcmsetup.exe", NULL},
  3436. {L"bhp015.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\TCPIP.DLL", NULL},
  3437. {NULL, L"%systemroot%\\system32\\drivers\\tcpip.sys", NULL},
  3438. {NULL, L"%systemroot%\\system32\\drivers\\tcpip6.sys", NULL},
  3439. {NULL, L"%systemroot%\\system32\\tcpmib.dll", NULL},
  3440. {L"wtcpmib.dll", L"%systemroot%\\SysWOW64\\tcpmib.dll", NULL},
  3441. {NULL, L"%systemroot%\\system32\\tcpmon.dll", NULL},
  3442. {L"wtcpmon.dll", L"%systemroot%\\SysWOW64\\tcpmon.dll", NULL},
  3443. {NULL, L"%systemroot%\\system32\\tcpmonui.dll", NULL},
  3444. {L"wtcpmonui.dll", L"%systemroot%\\SysWOW64\\tcpmonui.dll", NULL},
  3445. {NULL, L"%systemroot%\\system32\\tcpsvcs.exe", NULL},
  3446. {L"wtcpsvcs.exe", L"%systemroot%\\SysWOW64\\tcpsvcs.exe", NULL},
  3447. {NULL, L"%systemroot%\\system32\\tdc.ocx", NULL},
  3448. {L"wtdc.ocx", L"%systemroot%\\SysWOW64\\tdc.ocx", NULL},
  3449. {NULL, L"%systemroot%\\system32\\drivers\\tdi.sys", NULL},
  3450. {NULL, L"%systemroot%\\system32\\drivers\\tdpipe.sys", NULL},
  3451. {NULL, L"%systemroot%\\system32\\drivers\\tdtcp.sys", NULL},
  3452. {NULL, L"%systemroot%\\system32\\telephon.cpl", NULL},
  3453. {L"wtelephon.cpl", L"%systemroot%\\SysWOW64\\telephon.cpl", NULL},
  3454. {NULL, L"%systemroot%\\system32\\telnet.exe", NULL},
  3455. {NULL, L"%systemroot%\\system32\\drivers\\termdd.sys", NULL},
  3456. {NULL, L"%systemroot%\\system32\\termmgr.dll", NULL},
  3457. {L"wtermmgr.dll", L"%systemroot%\\SysWOW64\\termmgr.dll", NULL},
  3458. {NULL, L"%systemroot%\\system32\\termsrv.dll", NULL},
  3459. {NULL, L"%systemroot%\\system32\\drivers\\tffsport.sys", NULL},
  3460. {NULL, L"%systemroot%\\system32\\tftp.exe", NULL},
  3461. {L"wtftp.exe", L"%systemroot%\\SysWOW64\\tftp.exe", NULL},
  3462. {NULL, L"%systemroot%\\system32\\tftpd.exe", NULL},
  3463. {NULL, L"%systemroot%\\system32\\Thawbrkr.dll", L"intl.inf"},
  3464. {NULL, L"%systemroot%\\system32\\themeui.dll", NULL},
  3465. {L"wthemeui.dll", L"%systemroot%\\SysWOW64\\themeui.dll", NULL},
  3466. {NULL, L"%systemroot%\\system32\\timedate.cpl", NULL},
  3467. {L"wtimedate.cpl", L"%systemroot%\\SysWOW64\\timedate.cpl", NULL},
  3468. {NULL, L"%systemroot%\\system32\\timeout.exe", NULL},
  3469. {L"wtimeout.exe", L"%systemroot%\\SysWOW64\\timeout.exe", NULL},
  3470. {L"wtimer.drv", L"%systemroot%\\SysWOW64\\timer.drv", NULL},
  3471. {NULL, L"%systemroot%\\system32\\IME\\TINTLGNT\\TINTLGC.IMD", L"intl.inf"},
  3472. {NULL, L"%systemroot%\\system32\\IME\\TINTLGNT\\TINTLGL.IMD", L"intl.inf"},
  3473. {NULL, L"%systemroot%\\system32\\TINTLGNT.IME", L"intl.inf"},
  3474. {NULL, L"%systemroot%\\system32\\IME\\TINTLGNT\\TINTLGS.IMD", L"intl.inf"},
  3475. {NULL, L"%systemroot%\\system32\\IME\\TINTLGNT\\TINTLPHR.EXE", L"intl.inf"},
  3476. {NULL, L"%systemroot%\\system32\\IME\\TINTLGNT\\TINTSETP.EXE", L"intl.inf"},
  3477. {NULL, L"%systemroot%\\system32\\tlntadmn.exe", NULL},
  3478. {NULL, L"%systemroot%\\system32\\tlntsess.exe", NULL},
  3479. {NULL, L"%systemroot%\\system32\\tlntsvr.exe", NULL},
  3480. {NULL, L"%systemroot%\\system32\\tlntsvrp.dll", NULL},
  3481. {NULL, L"%systemroot%\\system32\\tls236.dll", NULL},
  3482. {NULL, L"%systemroot%\\system32\\wbem\\tmplprov.dll", NULL},
  3483. {NULL, L"%systemroot%\\system32\\drivers\\toside.sys", NULL},
  3484. {NULL, L"%systemroot%\\system32\\tracerpt.exe", NULL},
  3485. {L"wtracerpt.exe", L"%systemroot%\\SysWOW64\\tracerpt.exe", NULL},
  3486. {NULL, L"%systemroot%\\system32\\tracert.exe", NULL},
  3487. {L"wtracert.exe", L"%systemroot%\\SysWOW64\\tracert.exe", NULL},
  3488. {NULL, L"%systemroot%\\system32\\traffic.dll", NULL},
  3489. {L"wtraffic.dll", L"%systemroot%\\SysWOW64\\traffic.dll", NULL},
  3490. {L"bhp016.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\TRAIL.DLL", NULL},
  3491. {NULL, L"%ProgramFiles%\\Internet Explorer\\Connection Wizard\\trialoc.dll", NULL},
  3492. {L"wTRIEDIT.DLL", L"%commonprogramfiles(x86)%\\Microsoft Shared\\Triedit\\TRIEDIT.DLL", NULL},
  3493. {NULL, L"%systemroot%\\system32\\trksvr.dll", NULL},
  3494. {L"wtrksvr.dll", L"%systemroot%\\SysWOW64\\trksvr.dll", NULL},
  3495. {NULL, L"%systemroot%\\system32\\trkwks.dll", NULL},
  3496. {L"wtrkwks.dll", L"%systemroot%\\SysWOW64\\trkwks.dll", NULL},
  3497. {NULL, L"%systemroot%\\system32\\wbem\\trnsprov.dll", NULL},
  3498. {NULL, L"%systemroot%\\system32\\wbem\\AdStatus\\trustmon.dll", NULL},
  3499. {NULL, L"%systemroot%\\system32\\tsadmin.exe", NULL},
  3500. {NULL, L"%systemroot%\\system32\\tsappcmp.dll", NULL},
  3501. {L"wtsappcmp.dll", L"%systemroot%\\SysWOW64\\tsappcmp.dll", NULL},
  3502. {L"wtsbyuv.dll", L"%systemroot%\\SysWOW64\\tsbyuv.dll", NULL},
  3503. {NULL, L"%systemroot%\\system32\\tscc.dll", NULL},
  3504. {NULL, L"%systemroot%\\system32\\tscfgwmi.dll", NULL},
  3505. {NULL, L"%systemroot%\\system32\\tscon.exe", NULL},
  3506. {NULL, L"%systemroot%\\system32\\tscupgrd.exe", NULL},
  3507. {NULL, L"%systemroot%\\system32\\tsd32.dll", NULL},
  3508. {L"wtsd32.dll", L"%systemroot%\\SysWOW64\\tsd32.dll", NULL},
  3509. {NULL, L"%systemroot%\\system32\\tsddd.dll", NULL},
  3510. {L"wtsddd.dll", L"%systemroot%\\SysWOW64\\tsddd.dll", NULL},
  3511. {NULL, L"%systemroot%\\system32\\tsdiscon.exe", NULL},
  3512. {NULL, L"%systemroot%\\system32\\tsec.dll", NULL},
  3513. {L"wtsec.dll", L"%systemroot%\\SysWOW64\\tsec.dll", NULL},
  3514. {NULL, L"%systemroot%\\system32\\tsecimp.exe", NULL},
  3515. {L"wtsecimp.exe", L"%systemroot%\\SysWOW64\\tsecimp.exe", NULL},
  3516. {NULL, L"%systemroot%\\help\\tshoot.dll", NULL},
  3517. {NULL, L"%systemroot%\\system32\\tskill.exe", NULL},
  3518. {NULL, L"%systemroot%\\system32\\Setup\\tsoc.dll", NULL},
  3519. {NULL, L"%systemroot%\\system32\\tsprof.exe", NULL},
  3520. {NULL, L"%systemroot%\\system32\\tssdis.exe", NULL},
  3521. {NULL, L"%systemroot%\\system32\\tssdjet.dll", NULL},
  3522. {NULL, L"%systemroot%\\system32\\tsshutdn.exe", NULL},
  3523. {NULL, L"%systemroot%\\system32\\tsuserex.dll", NULL},
  3524. {L"wtsuserex.dll", L"%systemroot%\\SysWOW64\\tsuserex.dll", NULL},
  3525. {NULL, L"%systemroot%\\system32\\drivers\\tunmp.sys", NULL},
  3526. {NULL, L"%systemroot%\\twain.dll", NULL},
  3527. {L"wtwain_32.dll", L"%systemroot%\\twain_32.dll", NULL},
  3528. {NULL, L"%systemroot%\\system32\\twext.dll", NULL},
  3529. {L"wtwext.dll", L"%systemroot%\\SysWOW64\\twext.dll", NULL},
  3530. {NULL, L"%systemroot%\\system32\\txflog.dll", NULL},
  3531. {L"wtxflog.dll", L"%systemroot%\\SysWOW64\\txflog.dll", NULL},
  3532. {NULL, L"%systemroot%\\system32\\typeperf.exe", NULL},
  3533. {L"wtypeperf.exe", L"%systemroot%\\SysWOW64\\typeperf.exe", NULL},
  3534. {NULL, L"%systemroot%\\system32\\drivers\\udfs.sys", NULL},
  3535. {NULL, L"%systemroot%\\system32\\ufat.dll", NULL},
  3536. {L"wufat.dll", L"%systemroot%\\SysWOW64\\ufat.dll", NULL},
  3537. {NULL, L"%systemroot%\\system32\\inetsrv\\uihelper.dll", L"iis.inf"},
  3538. {NULL, L"%systemroot%\\system32\\ulib.dll", NULL},
  3539. {L"wulib.dll", L"%systemroot%\\SysWOW64\\ulib.dll", NULL},
  3540. {NULL, L"%systemroot%\\system32\\umandlg.dll", NULL},
  3541. {L"wumandlg.dll", L"%systemroot%\\SysWOW64\\umandlg.dll", NULL},
  3542. {NULL, L"%systemroot%\\system32\\umdmxfrm.dll", NULL},
  3543. {L"wumdmxfrm.dll", L"%systemroot%\\SysWOW64\\umdmxfrm.dll", NULL},
  3544. {NULL, L"%systemroot%\\system32\\unicdime.ime", L"intl.inf"},
  3545. {NULL, L"%systemroot%\\system32\\unicode.nls", NULL},
  3546. {L"wunicode.nls", L"%systemroot%\\SysWOW64\\unicode.nls", NULL},
  3547. {NULL, L"%systemroot%\\system32\\uniime.dll", L"intl.inf"},
  3548. {NULL, L"%systemroot%\\system32\\unimdm.tsp", NULL},
  3549. {L"wunimdm.tsp", L"%systemroot%\\SysWOW64\\unimdm.tsp", NULL},
  3550. {NULL, L"%systemroot%\\system32\\unimdmat.dll", NULL},
  3551. {L"wunimdmat.dll", L"%systemroot%\\SysWOW64\\unimdmat.dll", NULL},
  3552. {NULL, L"%systemroot%\\system32\\uniplat.dll", NULL},
  3553. {L"wuniplat.dll", L"%systemroot%\\SysWOW64\\uniplat.dll", NULL},
  3554. {NULL, L"%systemroot%\\system32\\unlodctr.exe", NULL},
  3555. {L"wunlodctr.exe", L"%systemroot%\\SysWOW64\\unlodctr.exe", NULL},
  3556. {NULL, L"%systemroot%\\system32\\wbem\\unsecapp.exe", NULL},
  3557. {NULL, L"%systemroot%\\system32\\untfs.dll", NULL},
  3558. {L"wuntfs.dll", L"%systemroot%\\SysWOW64\\untfs.dll", NULL},
  3559. {NULL, L"%systemroot%\\system32\\wbem\\updprov.dll", NULL},
  3560. {NULL, L"%systemroot%\\system32\\upg351db.exe", NULL},
  3561. {L"wupg351db.exe", L"%systemroot%\\SysWOW64\\upg351db.exe", NULL},
  3562. {NULL, L"%systemroot%\\PCHealth\\UploadLB\\Binaries\\UploadM.exe", NULL},
  3563. {L"bhp045.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\upnpparser.dll", NULL},
  3564. {NULL, L"%systemroot%\\system32\\ups.exe", NULL},
  3565. {L"wups.exe", L"%systemroot%\\SysWOW64\\ups.exe", NULL},
  3566. {NULL, L"%systemroot%\\system32\\ureg.dll", NULL},
  3567. {L"wureg.dll", L"%systemroot%\\SysWOW64\\ureg.dll", NULL},
  3568. {NULL, L"%systemroot%\\system32\\inetsrv\\urlauth.dll", L"iis.inf"},
  3569. {NULL, L"%systemroot%\\system32\\drivers\\usb8023.sys", NULL},
  3570. {NULL, L"%systemroot%\\system32\\drivers\\USBAUDIO.sys", NULL},
  3571. {NULL, L"%systemroot%\\system32\\drivers\\usbcamd.sys", NULL},
  3572. {NULL, L"%systemroot%\\system32\\drivers\\usbcamd2.sys", NULL},
  3573. {NULL, L"%systemroot%\\system32\\drivers\\usbccgp.sys", NULL},
  3574. {NULL, L"%systemroot%\\system32\\drivers\\usbd.sys", NULL},
  3575. {NULL, L"%systemroot%\\system32\\drivers\\usbehci.sys", NULL},
  3576. {NULL, L"%systemroot%\\system32\\drivers\\usbhub.sys", NULL},
  3577. {NULL, L"%systemroot%\\system32\\usbmon.dll", NULL},
  3578. {L"wusbmon.dll", L"%systemroot%\\SysWOW64\\usbmon.dll", NULL},
  3579. {NULL, L"%systemroot%\\system32\\drivers\\usbohci.sys", NULL},
  3580. {NULL, L"%systemroot%\\system32\\drivers\\usbport.sys", NULL},
  3581. {NULL, L"%systemroot%\\system32\\drivers\\usbprint.sys", NULL},
  3582. {NULL, L"%systemroot%\\system32\\drivers\\usbscan.sys", NULL},
  3583. {NULL, L"%systemroot%\\system32\\drivers\\usbser.sys", NULL},
  3584. {NULL, L"%systemroot%\\system32\\drivers\\usbstor.sys", NULL},
  3585. {NULL, L"%systemroot%\\system32\\drivers\\usbuhci.sys", NULL},
  3586. {NULL, L"%systemroot%\\system32\\usbui.dll", NULL},
  3587. {L"wusbui.dll", L"%systemroot%\\SysWOW64\\usbui.dll", NULL},
  3588. {L"wuser.exe", L"%systemroot%\\SysWOW64\\user.exe", NULL},
  3589. {NULL, L"%systemroot%\\system32\\user32.dll", NULL},
  3590. {L"wuser32.dll", L"%systemroot%\\SysWOW64\\user32.dll", NULL},
  3591. {NULL, L"%systemroot%\\system32\\userenv.dll", NULL},
  3592. {L"wuserenv.dll", L"%systemroot%\\SysWOW64\\userenv.dll", NULL},
  3593. {NULL, L"%systemroot%\\system32\\userinit.exe", NULL},
  3594. {L"wuserinit.exe", L"%systemroot%\\SysWOW64\\userinit.exe", NULL},
  3595. {NULL, L"%systemroot%\\system32\\usp10.dll", NULL},
  3596. {L"wusp10.dll", L"%systemroot%\\SysWOW64\\usp10.dll", NULL},
  3597. {NULL, L"%systemroot%\\system32\\utildll.dll", NULL},
  3598. {L"wutildll.dll", L"%systemroot%\\SysWOW64\\utildll.dll", NULL},
  3599. {NULL, L"%systemroot%\\system32\\utilman.exe", NULL},
  3600. {L"wutilman.exe", L"%systemroot%\\SysWOW64\\utilman.exe", NULL},
  3601. {NULL, L"%systemroot%\\system32\\uxtheme.dll", NULL},
  3602. {L"wuxtheme.dll", L"%systemroot%\\SysWOW64\\uxtheme.dll", NULL},
  3603. {NULL, L"%systemroot%\\system32\\vbisurf.ax", NULL},
  3604. {L"wvbisurf.ax", L"%systemroot%\\SysWOW64\\vbisurf.ax", NULL},
  3605. {L"wvdmdbg.dll", L"%systemroot%\\SysWOW64\\vdmdbg.dll", NULL},
  3606. {NULL, L"%systemroot%\\system32\\drivers\\vdmindvd.sys", NULL},
  3607. {NULL, L"%systemroot%\\system32\\vds.exe", NULL},
  3608. {NULL, L"%systemroot%\\system32\\vds_ps.dll", NULL},
  3609. {NULL, L"%systemroot%\\system32\\vdsbas.dll", NULL},
  3610. {NULL, L"%systemroot%\\system32\\vdsdyndr.dll", NULL},
  3611. {NULL, L"%systemroot%\\system32\\vdsldr.exe", NULL},
  3612. {NULL, L"%systemroot%\\system32\\vdsutil.dll", NULL},
  3613. {NULL, L"%systemroot%\\system32\\wbem\\vdswmi.dll", NULL},
  3614. {NULL, L"%systemroot%\\system32\\verifier.dll", NULL},
  3615. {L"wverifier.dll", L"%systemroot%\\SysWOW64\\verifier.dll", NULL},
  3616. {NULL, L"%systemroot%\\system32\\verifier.exe", NULL},
  3617. {L"wverifier.exe", L"%systemroot%\\SysWOW64\\verifier.exe", NULL},
  3618. {NULL, L"%systemroot%\\system32\\version.dll", NULL},
  3619. {L"wversion.dll", L"%systemroot%\\SysWOW64\\version.dll", NULL},
  3620. {NULL, L"%systemroot%\\system32\\vga.dll", NULL},
  3621. {NULL, L"%systemroot%\\system32\\drivers\\vga.sys", NULL},
  3622. {NULL, L"%systemroot%\\system32\\drivers\\vgapnp.sys", NULL},
  3623. {NULL, L"%commonprogramfiles%\\Microsoft Shared\\VGX\\vgx.dll", NULL},
  3624. {L"wvgx.dll", L"%commonprogramfiles(x86)%\\Microsoft Shared\\VGX\\vgx.dll", NULL},
  3625. {NULL, L"%systemroot%\\system32\\drivers\\viaide.sys", NULL},
  3626. {NULL, L"%systemroot%\\system32\\drivers\\videoprt.sys", NULL},
  3627. {NULL, L"%systemroot%\\system32\\wbem\\viewprov.dll", NULL},
  3628. {L"bhp017.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\VINES.DLL", NULL},
  3629. {NULL, L"%systemroot%\\system32\\drivers\\volsnap.sys", NULL},
  3630. {NULL, L"%systemroot%\\system32\\vss_ddu.dll", NULL},
  3631. {L"wvss_ddu.dll", L"%systemroot%\\SysWOW64\\vss_ddu.dll", NULL},
  3632. {NULL, L"%systemroot%\\system32\\vss_ps.dll", NULL},
  3633. {L"wvss_ps.dll", L"%systemroot%\\SysWOW64\\vss_ps.dll", NULL},
  3634. {NULL, L"%systemroot%\\system32\\vssadmin.exe", NULL},
  3635. {NULL, L"%systemroot%\\system32\\vssapi.dll", NULL},
  3636. {L"wvssapi.dll", L"%systemroot%\\SysWOW64\\vssapi.dll", NULL},
  3637. {NULL, L"%systemroot%\\system32\\vssddups.dll", NULL},
  3638. {L"wvssddups.dll", L"%systemroot%\\SysWOW64\\vssddups.dll", NULL},
  3639. {NULL, L"%systemroot%\\system32\\vssui.dll", NULL},
  3640. {NULL, L"%systemroot%\\system32\\vssvc.exe", NULL},
  3641. {NULL, L"%systemroot%\\system32\\wbem\\vsswmi.dll", NULL},
  3642. {L"wvwipxspx.dll", L"%systemroot%\\SysWOW64\\vwipxspx.dll", NULL},
  3643. {L"wvwipxspx.exe", L"%systemroot%\\SysWOW64\\vwipxspx.exe", NULL},
  3644. {NULL, L"%systemroot%\\system32\\w32time.dll", NULL},
  3645. {L"ww32time.dll", L"%systemroot%\\SysWOW64\\w32time.dll", NULL},
  3646. {NULL, L"%systemroot%\\system32\\w32tm.exe", NULL},
  3647. {L"ww32tm.exe", L"%systemroot%\\SysWOW64\\w32tm.exe", NULL},
  3648. {NULL, L"%systemroot%\\system32\\w32topl.dll", NULL},
  3649. {L"ww32topl.dll", L"%systemroot%\\SysWOW64\\w32topl.dll", NULL},
  3650. {NULL, L"%systemroot%\\system32\\inetsrv\\w3cache.dll", L"iis.inf"},
  3651. {NULL, L"%systemroot%\\system32\\inetsrv\\w3comlog.dll", L"iis.inf"},
  3652. {NULL, L"%systemroot%\\system32\\inetsrv\\w3core.dll", L"iis.inf"},
  3653. {NULL, L"%systemroot%\\system32\\inetsrv\\w3ctrlps.dll", L"iis.inf"},
  3654. {NULL, L"%systemroot%\\system32\\inetsrv\\w3ctrs.dll", L"iis.inf"},
  3655. {NULL, L"%systemroot%\\system32\\inetsrv\\w3dt.dll", L"iis.inf"},
  3656. {NULL, L"%systemroot%\\system32\\inetsrv\\w3ext.dll", L"iis.inf"},
  3657. {NULL, L"%systemroot%\\system32\\inetsrv\\w3isapi.dll", L"iis.inf"},
  3658. {NULL, L"%systemroot%\\system32\\w3ssl.dll", NULL},
  3659. {L"ww3ssl.dll", L"%systemroot%\\SysWOW64\\w3ssl.dll", NULL},
  3660. {NULL, L"%systemroot%\\system32\\inetsrv\\w3tp.dll", L"iis.inf"},
  3661. {NULL, L"%systemroot%\\system32\\inetsrv\\w3wp.exe", L"iis.inf"},
  3662. {NULL, L"%systemroot%\\system32\\w64cpuex.dll", NULL},
  3663. {L"ww95upgnt.dll", L"%systemroot%\\SysWOW64\\w95upgnt.dll", NULL},
  3664. {NULL, L"%ProgramFiles%\\Outlook Express\\wab.exe", NULL},
  3665. {NULL, L"%commonprogramfiles%\\System\\wab32.dll", NULL},
  3666. {L"wwab32.dll", L"%commonprogramfiles(x86)%\\System\\wab32.dll", NULL},
  3667. {NULL, L"%commonprogramfiles%\\System\\wab32res.dll", NULL},
  3668. {L"wwab32res.dll", L"%commonprogramfiles(x86)%\\System\\wab32res.dll", NULL},
  3669. {NULL, L"%ProgramFiles%\\Outlook Express\\wabfind.dll", NULL},
  3670. {NULL, L"%ProgramFiles%\\Outlook Express\\wabimp.dll", NULL},
  3671. {NULL, L"%ProgramFiles%\\Outlook Express\\wabmig.exe", NULL},
  3672. {NULL, L"%systemroot%\\system32\\waitfor.exe", NULL},
  3673. {L"wwaitfor.exe", L"%systemroot%\\SysWOW64\\waitfor.exe", NULL},
  3674. {NULL, L"%systemroot%\\system32\\inetsrv\\wam.dll", L"iis.inf"},
  3675. {NULL, L"%systemroot%\\system32\\inetsrv\\wamps.dll", L"iis.inf"},
  3676. {NULL, L"%systemroot%\\system32\\inetsrv\\wamreg.dll", L"iis.inf"},
  3677. {NULL, L"%systemroot%\\system32\\drivers\\wanarp.sys", NULL},
  3678. {NULL, L"%systemroot%\\system32\\drivers\\watchdog.sys", NULL},
  3679. {NULL, L"%systemroot%\\system32\\wavemsp.dll", NULL},
  3680. {L"wwavemsp.dll", L"%systemroot%\\SysWOW64\\wavemsp.dll", NULL},
  3681. {NULL, L"%systemroot%\\system32\\wbem\\wbemcntl.dll", NULL},
  3682. {NULL, L"%systemroot%\\system32\\wbem\\wbemcomn.dll", NULL},
  3683. {L"wwbemcomn.dll", L"%systemroot%\\SysWOW64\\wbem\\wbemcomn.dll", NULL},
  3684. {NULL, L"%systemroot%\\system32\\wbem\\wbemcons.dll", NULL},
  3685. {NULL, L"%systemroot%\\system32\\wbem\\wbemcore.dll", NULL},
  3686. {NULL, L"%systemroot%\\system32\\wbem\\wbemdisp.dll", NULL},
  3687. {NULL, L"%systemroot%\\system32\\wbem\\wbemdisp.tlb", NULL},
  3688. {NULL, L"%systemroot%\\system32\\wbem\\wbemess.dll", NULL},
  3689. {NULL, L"%systemroot%\\system32\\wbem\\wbemperf.dll", NULL},
  3690. {L"wwbemperf.dll", L"%systemroot%\\SysWOW64\\wbem\\wbemperf.dll", NULL},
  3691. {NULL, L"%systemroot%\\system32\\wbem\\wbemprox.dll", NULL},
  3692. {NULL, L"%systemroot%\\system32\\wbem\\wbemsvc.dll", NULL},
  3693. {NULL, L"%systemroot%\\system32\\wbem\\wbemtest.exe", NULL},
  3694. {NULL, L"%systemroot%\\system32\\wbem\\wbemupgd.dll", NULL},
  3695. {L"wwbemupgd.dll", L"%systemroot%\\SysWOW64\\wbem\\wbemupgd.dll", NULL},
  3696. {NULL, L"%systemroot%\\system32\\drivers\\wd.sys", NULL},
  3697. {NULL, L"%systemroot%\\system32\\wdigest.dll", NULL},
  3698. {L"wwwdigest.dll", L"%systemroot%\\SysWOW64\\wdigest.dll", NULL},
  3699. {NULL, L"%systemroot%\\system32\\wdmaud.drv", NULL},
  3700. {L"wwdmaud.drv", L"%systemroot%\\SysWOW64\\wdmaud.drv", NULL},
  3701. {NULL, L"%systemroot%\\system32\\drivers\\wdmaud.sys", NULL},
  3702. {NULL, L"%systemroot%\\system32\\webcheck.dll", NULL},
  3703. {L"wwebcheck.dll", L"%systemroot%\\SysWOW64\\webcheck.dll", NULL},
  3704. {NULL, L"%systemroot%\\system32\\webclnt.dll", NULL},
  3705. {L"wwebclnt.dll", L"%systemroot%\\SysWOW64\\webclnt.dll", NULL},
  3706. {NULL, L"%systemroot%\\system32\\webhits.dll", NULL},
  3707. {L"wwebhits.dll", L"%systemroot%\\SysWOW64\\webhits.dll", NULL},
  3708. {NULL, L"%systemroot%\\system32\\webvw.dll", NULL},
  3709. {L"wwebvw.dll", L"%systemroot%\\SysWOW64\\webvw.dll", NULL},
  3710. {NULL, L"%systemroot%\\system32\\wextract.exe", NULL},
  3711. {L"wwextract.exe", L"%systemroot%\\SysWOW64\\wextract.exe", NULL},
  3712. {NULL, L"%systemroot%\\system32\\where.exe", NULL},
  3713. {L"wwhere.exe", L"%systemroot%\\SysWOW64\\where.exe", NULL},
  3714. {NULL, L"%systemroot%\\system32\\whoami.exe", NULL},
  3715. {L"wwhoami.exe", L"%systemroot%\\SysWOW64\\whoami.exe", NULL},
  3716. {NULL, L"%systemroot%\\system32\\wiaacmgr.exe", NULL},
  3717. {NULL, L"%systemroot%\\system32\\wiadefui.dll", NULL},
  3718. {L"wwiadefui.dll", L"%systemroot%\\SysWOW64\\wiadefui.dll", NULL},
  3719. {L"wwiadss.dll", L"%systemroot%\\SysWOW64\\wiadss.dll", NULL},
  3720. {NULL, L"%systemroot%\\system32\\wiafbdrv.dll", NULL},
  3721. {NULL, L"%systemroot%\\system32\\wiarpc.dll", NULL},
  3722. {L"wwiarpc.dll", L"%systemroot%\\SysWOW64\\wiarpc.dll", NULL},
  3723. {NULL, L"%systemroot%\\system32\\wiascr.dll", NULL},
  3724. {L"wwiascr.dll", L"%systemroot%\\SysWOW64\\wiascr.dll", NULL},
  3725. {NULL, L"%systemroot%\\system32\\wiaservc.dll", NULL},
  3726. {L"wwiaservc.dll", L"%systemroot%\\SysWOW64\\wiaservc.dll", NULL},
  3727. {NULL, L"%systemroot%\\system32\\wiasf.ax", NULL},
  3728. {L"wwiasf.ax", L"%systemroot%\\SysWOW64\\wiasf.ax", NULL},
  3729. {NULL, L"%systemroot%\\system32\\wiashext.dll", NULL},
  3730. {L"wwiashext.dll", L"%systemroot%\\SysWOW64\\wiashext.dll", NULL},
  3731. {NULL, L"%systemroot%\\system32\\wiavideo.dll", NULL},
  3732. {L"wwiavideo.dll", L"%systemroot%\\SysWOW64\\wiavideo.dll", NULL},
  3733. {L"wwifeman.dll", L"%systemroot%\\SysWOW64\\wifeman.dll", NULL},
  3734. {NULL, L"%systemroot%\\system32\\win32k.sys", NULL},
  3735. {NULL, L"%systemroot%\\system32\\win32spl.dll", NULL},
  3736. {NULL, L"%systemroot%\\system32\\winar30.ime", L"intl.inf"},
  3737. {NULL, L"%systemroot%\\system32\\winbrand.dll", NULL},
  3738. {L"wwinbrand.dll", L"%systemroot%\\SysWOW64\\winbrand.dll", NULL},
  3739. {NULL, L"%systemroot%\\system32\\winchat.exe", NULL},
  3740. {L"wwinfax.dll", L"%systemroot%\\SysWOW64\\winfax.dll", NULL},
  3741. {NULL, L"%systemroot%\\system32\\wingb.ime", L"intl.inf"},
  3742. {L"wwinhlp32.exe", L"%systemroot%\\winhlp32.exe", NULL},
  3743. {L"wwinhstb.exe", L"%systemroot%\\SysWOW64\\winhlp32.exe", NULL},
  3744. {NULL, L"%systemroot%\\system32\\winime.ime", L"intl.inf"},
  3745. {NULL, L"%systemroot%\\system32\\winipsec.dll", NULL},
  3746. {L"wwinipsec.dll", L"%systemroot%\\SysWOW64\\winipsec.dll", NULL},
  3747. {NULL, L"%systemroot%\\system32\\wbem\\winmgmt.exe", NULL},
  3748. {NULL, L"%systemroot%\\system32\\wbem\\winmgmtr.dll", NULL},
  3749. {NULL, L"%systemroot%\\system32\\winmm.dll", NULL},
  3750. {L"wwinmm.dll", L"%systemroot%\\SysWOW64\\winmm.dll", NULL},
  3751. {NULL, L"%systemroot%\\system32\\winmsd.exe", NULL},
  3752. {L"wwinmsd.exe", L"%systemroot%\\SysWOW64\\winmsd.exe", NULL},
  3753. {L"wwinnls.dll", L"%systemroot%\\SysWOW64\\winnls.dll", NULL},
  3754. {NULL, L"%systemroot%\\system32\\winntbbu.dll", NULL},
  3755. {L"wwinntbbu.dll", L"%systemroot%\\SysWOW64\\winntbbu.dll", NULL},
  3756. {NULL, L"%systemroot%\\system32\\winpop.exe", NULL},
  3757. {NULL, L"%systemroot%\\system32\\winpy.ime", L"intl.inf"},
  3758. {NULL, L"%systemroot%\\system32\\winrnr.dll", NULL},
  3759. {L"wwinrnr.dll", L"%systemroot%\\SysWOW64\\winrnr.dll", NULL},
  3760. {NULL, L"%systemroot%\\system32\\wins.exe", NULL},
  3761. {L"wwins.exe", L"%systemroot%\\SysWOW64\\wins.exe", NULL},
  3762. {NULL, L"%systemroot%\\system32\\winscard.dll", NULL},
  3763. {L"wwinscard.dll", L"%systemroot%\\SysWOW64\\winscard.dll", NULL},
  3764. {NULL, L"%systemroot%\\system32\\winsctrs.dll", NULL},
  3765. {L"wwinsctrs.dll", L"%systemroot%\\SysWOW64\\winsctrs.dll", NULL},
  3766. {NULL, L"%systemroot%\\system32\\winsevnt.dll", NULL},
  3767. {L"wwinsevnt.dll", L"%systemroot%\\SysWOW64\\winsevnt.dll", NULL},
  3768. {NULL, L"%systemroot%\\system32\\winsmib.dll", NULL},
  3769. {L"wwinsmib.dll", L"%systemroot%\\SysWOW64\\winsmib.dll", NULL},
  3770. {NULL, L"%systemroot%\\system32\\winsmon.dll", NULL},
  3771. {L"wwinsmon.dll", L"%systemroot%\\SysWOW64\\winsmon.dll", NULL},
  3772. {L"wwinsock.dll", L"%systemroot%\\SysWOW64\\winsock.dll", NULL},
  3773. {NULL, L"%systemroot%\\system32\\winsp.ime", L"intl.inf"},
  3774. {L"bhp021.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\WINSPL.DLL", NULL},
  3775. {NULL, L"%systemroot%\\system32\\winspool.drv", NULL},
  3776. {L"wwinspool.drv", L"%systemroot%\\SysWOW64\\winspool.drv", NULL},
  3777. {L"wwinspool.exe", L"%systemroot%\\SysWOW64\\winspool.exe", NULL},
  3778. {NULL, L"%systemroot%\\system32\\winsrpc.dll", NULL},
  3779. {L"wwinsrpc.dll", L"%systemroot%\\SysWOW64\\winsrpc.dll", NULL},
  3780. {NULL, L"%systemroot%\\system32\\winsrv.dll", NULL},
  3781. {NULL, L"%systemroot%\\system32\\winssnap.dll", NULL},
  3782. {L"wwinssnap.dll", L"%systemroot%\\SysWOW64\\winssnap.dll", NULL},
  3783. {NULL, L"%systemroot%\\system32\\winsta.dll", NULL},
  3784. {L"wwinsta.dll", L"%systemroot%\\SysWOW64\\winsta.dll", NULL},
  3785. {NULL, L"%systemroot%\\system32\\winver.exe", NULL},
  3786. {L"wwinver.exe", L"%systemroot%\\SysWOW64\\winver.exe", NULL},
  3787. {NULL, L"%systemroot%\\system32\\winzm.ime", L"intl.inf"},
  3788. {L"wwisc10.dll", L"%commonprogramfiles(x86)%\\MSSoap\\Binaries\\wisc10.dll", NULL},
  3789. {NULL, L"%systemroot%\\system32\\administration\\wizchain.dll", NULL},
  3790. {NULL, L"%systemroot%\\system32\\wkssvc.dll", NULL},
  3791. {NULL, L"%systemroot%\\system32\\wlanmon.dll", NULL},
  3792. {L"wwlanmon.dll", L"%systemroot%\\SysWOW64\\wlanmon.dll", NULL},
  3793. {NULL, L"%systemroot%\\system32\\wlbs.exe", NULL},
  3794. {L"wwlbs.exe", L"%systemroot%\\SysWOW64\\wlbs.exe", NULL},
  3795. {NULL, L"%systemroot%\\system32\\drivers\\wlbs.sys", NULL},
  3796. {NULL, L"%systemroot%\\system32\\wlbsctrl.dll", NULL},
  3797. {L"wwlbsctrl.dll", L"%systemroot%\\SysWOW64\\wlbsctrl.dll", NULL},
  3798. {NULL, L"%systemroot%\\system32\\wbem\\wlbsprov.dll", NULL},
  3799. {L"wwlbsprov.dll", L"%systemroot%\\SysWOW64\\wbem\\wlbsprov.dll", NULL},
  3800. {NULL, L"%systemroot%\\system32\\wldap32.dll", NULL},
  3801. {L"wwldap32.dll", L"%systemroot%\\SysWOW64\\wldap32.dll", NULL},
  3802. {NULL, L"%systemroot%\\system32\\wlnotify.dll", NULL},
  3803. {NULL, L"%systemroot%\\system32\\wlsnp.dll", NULL},
  3804. {L"wwlsnp.dll", L"%systemroot%\\SysWOW64\\wlsnp.dll", NULL},
  3805. {NULL, L"%systemroot%\\system32\\wlstore.dll", NULL},
  3806. {L"wwlstore.dll", L"%systemroot%\\SysWOW64\\wlstore.dll", NULL},
  3807. {L"wwmadmod.dll", L"%systemroot%\\SysWOW64\\wmadmod.dll", NULL},
  3808. {L"wwmadmoe.dll", L"%systemroot%\\SysWOW64\\wmadmoe.dll", NULL},
  3809. {L"wwmasf.dll", L"%systemroot%\\SysWOW64\\wmasf.dll", NULL},
  3810. {L"wwmdmlog.dll", L"%systemroot%\\SysWOW64\\wmdmlog.dll", NULL},
  3811. {L"wwmdmps.dll", L"%systemroot%\\SysWOW64\\wmdmps.dll", NULL},
  3812. {L"wwmerrenu.dll", L"%systemroot%\\SysWOW64\\wmerrenu.dll", NULL},
  3813. {NULL, L"%systemroot%\\system32\\wmi.dll", NULL},
  3814. {L"wwmi.dll", L"%systemroot%\\SysWOW64\\wmi.dll", NULL},
  3815. {NULL, L"%systemroot%\\system32\\wbem\\xml\\wmi2xml.dll", NULL},
  3816. {NULL, L"%systemroot%\\system32\\wbem\\wmiadap.exe", NULL},
  3817. {NULL, L"%systemroot%\\system32\\wbem\\wmiapres.dll", NULL},
  3818. {NULL, L"%systemroot%\\system32\\wbem\\wmiaprpl.dll", NULL},
  3819. {NULL, L"%systemroot%\\system32\\wbem\\wmiapsrv.exe", NULL},
  3820. {NULL, L"%systemroot%\\system32\\wbem\\wmic.exe", NULL},
  3821. {NULL, L"%systemroot%\\system32\\wbem\\wmicookr.dll", NULL},
  3822. {NULL, L"%systemroot%\\system32\\wbem\\wmidcprv.dll", NULL},
  3823. {L"wwmidx.ocx", L"%systemroot%\\SysWOW64\\wmidx.ocx", NULL},
  3824. {NULL, L"%systemroot%\\system32\\drivers\\wmilib.sys", NULL},
  3825. {NULL, L"%systemroot%\\system32\\wbem\\wmimsg.dll", NULL},
  3826. {NULL, L"%systemroot%\\system32\\wbem\\wmipcima.dll", NULL},
  3827. {NULL, L"%systemroot%\\system32\\wbem\\wmipdfs.dll", NULL},
  3828. {NULL, L"%systemroot%\\system32\\wbem\\wmipdskq.dll", NULL},
  3829. {NULL, L"%systemroot%\\system32\\wbem\\wmipicmp.dll", NULL},
  3830. {NULL, L"%systemroot%\\system32\\wbem\\wmipiprt.dll", NULL},
  3831. {NULL, L"%systemroot%\\system32\\wbem\\wmipjobj.dll", NULL},
  3832. {NULL, L"%systemroot%\\system32\\wmiprop.dll", NULL},
  3833. {L"wwmiprop.dll", L"%systemroot%\\SysWOW64\\wmiprop.dll", NULL},
  3834. {NULL, L"%systemroot%\\system32\\wbem\\wmiprov.dll", NULL},
  3835. {NULL, L"%systemroot%\\system32\\wbem\\wmiprvsd.dll", NULL},
  3836. {NULL, L"%systemroot%\\system32\\wbem\\wmiprvse.exe", NULL},
  3837. {NULL, L"%systemroot%\\system32\\wbem\\wmipsess.dll", NULL},
  3838. {NULL, L"%systemroot%\\system32\\wmiscmgr.dll", NULL},
  3839. {L"wwmiscmgr.dll", L"%systemroot%\\SysWOW64\\wmiscmgr.dll", NULL},
  3840. {NULL, L"%systemroot%\\system32\\wbem\\wmisvc.dll", NULL},
  3841. {NULL, L"%systemroot%\\system32\\wbem\\wmitimep.dll", NULL},
  3842. {NULL, L"%systemroot%\\system32\\wbem\\wmiutils.dll", NULL},
  3843. {L"wwmnetmgr.dll", L"%systemroot%\\SysWOW64\\wmnetmgr.dll", NULL},
  3844. {L"wwmp.ocx", L"%systemroot%\\SysWOW64\\wmp.ocx", NULL},
  3845. {L"wwmpcd.dll", L"%systemroot%\\SysWOW64\\wmpcd.dll", NULL},
  3846. {L"wwmpcore.dll", L"%systemroot%\\SysWOW64\\wmpcore.dll", NULL},
  3847. {L"wwmploc.dll", L"%systemroot%\\SysWOW64\\wmploc.dll", NULL},
  3848. {L"wwmpshell.dll", L"%systemroot%\\SysWOW64\\wmpshell.dll", NULL},
  3849. {L"wwmpstub.exe", L"%systemroot%\\SysWOW64\\wmpstub.exe", NULL},
  3850. {L"wwmpui.dll", L"%systemroot%\\SysWOW64\\wmpui.dll", NULL},
  3851. {L"wwmsdmod.dll", L"%systemroot%\\SysWOW64\\wmsdmod.dll", NULL},
  3852. {L"wwmsdmoe.dll", L"%systemroot%\\SysWOW64\\wmsdmoe.dll", NULL},
  3853. {L"wwmstream.dll", L"%systemroot%\\SysWOW64\\wmstream.dll", NULL},
  3854. {L"wwmv8dmod.dll", L"%systemroot%\\SysWOW64\\wmv8dmod.dll", NULL},
  3855. {L"wwmv8ds32.ax", L"%systemroot%\\SysWOW64\\wmv8ds32.ax", NULL},
  3856. {L"wwmvcore.dll", L"%systemroot%\\SysWOW64\\wmvcore.dll", NULL},
  3857. {L"wwmvdmod.dll", L"%systemroot%\\SysWOW64\\wmvdmod.dll", NULL},
  3858. {L"wwmvdmoe.dll", L"%systemroot%\\SysWOW64\\wmvdmoe.dll", NULL},
  3859. {L"wwmvds32.ax", L"%systemroot%\\SysWOW64\\wmvds32.ax", NULL},
  3860. {NULL, L"%ProgramFiles%\\Windows NT\\Accessories\\wordpad.exe", NULL},
  3861. {NULL, L"%systemroot%\\system32\\wow64.dll", NULL},
  3862. {NULL, L"%systemroot%\\system32\\wow64cpu.dll", NULL},
  3863. {NULL, L"%systemroot%\\system32\\wow64win.dll", NULL},
  3864. {L"wwowexec.exe", L"%systemroot%\\SysWOW64\\wowexec.exe", NULL},
  3865. {L"wwowfax.dll", L"%systemroot%\\SysWOW64\\wowfax.dll", NULL},
  3866. {L"wwowfaxui.dll", L"%systemroot%\\SysWOW64\\wowfaxui.dll", NULL},
  3867. {NULL, L"%systemroot%\\system32\\wowIA32X.dll", NULL},
  3868. {L"wwowreg32.exe", L"%systemroot%\\SysWOW64\\wowreg32.exe", NULL},
  3869. {NULL, L"%systemroot%\\system32\\wpnpinst.exe", NULL},
  3870. {L"wwpnpinst.exe", L"%systemroot%\\SysWOW64\\wpnpinst.exe", NULL},
  3871. {NULL, L"%systemroot%\\system32\\write.exe", NULL},
  3872. {NULL, L"%systemroot%\\system32\\ws2_32.dll", NULL},
  3873. {L"wws2_32.dll", L"%systemroot%\\SysWOW64\\ws2_32.dll", NULL},
  3874. {NULL, L"%systemroot%\\system32\\ws2help.dll", NULL},
  3875. {L"wws2help.dll", L"%systemroot%\\SysWOW64\\ws2help.dll", NULL},
  3876. {NULL, L"%systemroot%\\system32\\drivers\\ws2ifsl.sys", NULL},
  3877. {NULL, L"%systemroot%\\system32\\wscript.exe", NULL},
  3878. {L"wwscript.exe", L"%systemroot%\\SysWOW64\\wscript.exe", NULL},
  3879. {NULL, L"%systemroot%\\system32\\wsecedit.dll", NULL},
  3880. {L"wwsecedit.dll", L"%systemroot%\\SysWOW64\\wsecedit.dll", NULL},
  3881. {NULL, L"%systemroot%\\system32\\wshatm.dll", NULL},
  3882. {L"wwshatm.dll", L"%systemroot%\\SysWOW64\\wshatm.dll", NULL},
  3883. {NULL, L"%systemroot%\\Cluster\\WSHClus.dll", NULL},
  3884. {NULL, L"%systemroot%\\system32\\wshcon.dll", NULL},
  3885. {L"wwshcon.dll", L"%systemroot%\\SysWOW64\\wshcon.dll", NULL},
  3886. {NULL, L"%systemroot%\\system32\\wshext.dll", NULL},
  3887. {L"wwshext.dll", L"%systemroot%\\SysWOW64\\wshext.dll", NULL},
  3888. {NULL, L"%systemroot%\\system32\\wship6.dll", NULL},
  3889. {L"wwship6.dll", L"%systemroot%\\SysWOW64\\wship6.dll", NULL},
  3890. {L"wwshisn.dll", L"%systemroot%\\SysWOW64\\wshisn.dll", NULL},
  3891. {NULL, L"%systemroot%\\system32\\wshnetbs.dll", NULL},
  3892. {L"wwshnetbs.dll", L"%systemroot%\\SysWOW64\\wshnetbs.dll", NULL},
  3893. {NULL, L"%systemroot%\\system32\\wshom.ocx", NULL},
  3894. {L"wwshom.ocx", L"%systemroot%\\SysWOW64\\wshom.ocx", NULL},
  3895. {NULL, L"%systemroot%\\system32\\wshqos.dll", NULL},
  3896. {L"wwshqos.dll", L"%systemroot%\\SysWOW64\\wshqos.dll", NULL},
  3897. {NULL, L"%systemroot%\\system32\\WshRm.dll", NULL},
  3898. {L"wWshRm.dll", L"%systemroot%\\SysWOW64\\WshRm.dll", NULL},
  3899. {NULL, L"%systemroot%\\system32\\wshtcpip.dll", NULL},
  3900. {L"wwshtcpip.dll", L"%systemroot%\\SysWOW64\\wshtcpip.dll", NULL},
  3901. {NULL, L"%systemroot%\\system32\\wsnmp32.dll", NULL},
  3902. {L"wwsnmp32.dll", L"%systemroot%\\SysWOW64\\wsnmp32.dll", NULL},
  3903. {NULL, L"%systemroot%\\system32\\wsock32.dll", NULL},
  3904. {L"wwsock32.dll", L"%systemroot%\\SysWOW64\\wsock32.dll", NULL},
  3905. {L"wwstdecod.dll", L"%systemroot%\\SysWOW64\\wstdecod.dll", NULL},
  3906. {NULL, L"%systemroot%\\system32\\wtsapi32.dll", NULL},
  3907. {L"wwtsapi32.dll", L"%systemroot%\\SysWOW64\\wtsapi32.dll", NULL},
  3908. {NULL, L"%systemroot%\\system32\\wuauclt.exe", NULL},
  3909. {NULL, L"%systemroot%\\system32\\wuaueng.dll", NULL},
  3910. {NULL, L"%systemroot%\\system32\\wuauserv.dll", NULL},
  3911. {NULL, L"%systemroot%\\system32\\wupdmgr.exe", NULL},
  3912. {L"wwupdmgr.exe", L"%systemroot%\\SysWOW64\\wupdmgr.exe", NULL},
  3913. {L"wwzcdlg.dll", L"%systemroot%\\SysWOW64\\wzcdlg.dll", NULL},
  3914. {NULL, L"%systemroot%\\system32\\wzcdlg.dll", NULL},
  3915. {L"wwzcsapi.dll", L"%systemroot%\\SysWOW64\\wzcsapi.dll", NULL},
  3916. {NULL, L"%systemroot%\\system32\\wzcsapi.dll", NULL},
  3917. {NULL, L"%systemroot%\\system32\\wzcsvc.dll", NULL},
  3918. {L"wxactsrv.dll", L"%systemroot%\\SysWOW64\\xactsrv.dll", NULL},
  3919. {NULL, L"%systemroot%\\system32\\xactsrv.dll", NULL},
  3920. {L"wxcopy.exe", L"%systemroot%\\SysWOW64\\xcopy.exe", NULL},
  3921. {NULL, L"%systemroot%\\system32\\xcopy.exe", NULL},
  3922. {L"wxenroll.dll", L"%systemroot%\\SysWOW64\\xenroll.dll", NULL},
  3923. {L"xenria64.dll", L"%systemroot%\\system32\\CertSrv\\CertControl\\ia64\\xenroll.dll", NULL},
  3924. {NULL, L"%systemroot%\\system32\\xenroll.dll", NULL},
  3925. {L"xenrx86.dll", L"%systemroot%\\system32\\CertSrv\\CertControl\\x86\\xenroll.dll", NULL},
  3926. {NULL, L"%systemroot%\\system32\\xjis.nls", NULL},
  3927. {NULL, L"%systemroot%\\system32\\xlog.exe", NULL},
  3928. {L"bhp018.dll", L"%systemroot%\\system32\\NETMON\\PARSERS\\XNS.DLL", NULL},
  3929. {NULL, L"%systemroot%\\system32\\xolehlp.dll", NULL},
  3930. {L"wzipfldr.dll", L"%systemroot%\\SysWOW64\\zipfldr.dll", NULL},
  3931. };
  3932. #define CountEntFiles (sizeof(EntFiles)/sizeof(EntFiles[0]))