I was doing a test on a 100% vulnerable host and it returned "No" with `Message 02 00 0005` I saw in the comments you had `// 0xC000 02 05 - STATUS_INSUFF_SERVER_RESOURCES - vulnerable` so was wondering if your check values are swapped.