Edit C:\Windows\System32\SessEnv.dll
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ 90T}Q|}Q|}Q|t)?5Q|??|Q|??|Q|}Q}?|??pQ|??lQ|??|Q|??7Q|??|Q|??|Q|Rich}Q| PE d? ?&R ? " ? ? ? ? ` ? ` ? n H @ 0 ? T' P < ` 8 PN ? H ` .text ? ? `.data ?9 ? ? @ ?.pdata T' ? ( ? @ @.idata / 0 ? @ @.rsrc 0 @ ? @ @.reloc b P ? @ B l?? ? ? ? ? ? ? ? ? 4? ? ? ? h?? ?&R $ ? ? ?&R O C ?? 0?? pdh.dll sqmapi.dll netjoin.dll ?? USERENV.dll OLEAUT32.dll CRYPT32.dll DSROLE.dll logoncli.dll netutils.dll api-ms-win-security-lsalookup-l2-1-1.dll AUTHZ.dll ncrypt.dll bcrypt.dll profapi.dll CRYPTSP.dll ADVAPI32.dll wN??]N?.?Q?WINSTA.dll NTDSAPI.dll WTSAPI32.dll SETUPAPI.dll ACTIVEDS.dll srvcli.dll CRYPTBASE.dll api-ms-win-shcore-stream-l1-1-0.dll u????C_?B`??3?O??$?%?kon|?@?? Y?G???B? ??b??T?E??(2??+?KK?%g???39??J??q?')??N!??&iSan XmlLite.dll VirtDisk.dll \ Service Not initialized yet SERVICE_CONTROL_TIMECHANGE Stopping/Shutting down service... SERVICE_CONTROL_SESSIONCHANGE s e s s i o n e n v IWLNotificationManager::GetInstanceOfNotificationManager ptrWLNotificationManager->Initialize failed: 0x%x in %s WLNotificationManager SessionEnv Subscriber %d failed to initialize: 0x%X ?? p>? ?? J?? J?? ?? ?? p>? ?? ? ? ? ? (? R? ?? ?? @X? ?? ?? ?[? ?U? l s m t e r m s r v s d c l i e n t w i n s t a t s r p c s e s s i o n m s g T S V I P C l i T S V I P S r v T e r m i n a l - S e r v i c e s - L S M T e r m i n a l - S e r v i c e s - R C M T e r m i n a l - S e r v i c e s - R P C - C l i e n t T e r m i n a l - S e r v i c e s - U n i f i e d - A P I s T e r m i n a l - S e r v i c e s - S e s s i o n E n v T e r m i n a l - S e r v i c e s - S e s s i o n M s g T e r m i n a l - S e r v i c e s - I P - V i r t u a l i z a t i o n CWPPLoggerConfig object @ %#x not initialized ControlTraceW(%S) returned %#x S Y S T E M \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ T e r m i n a l S e r v e r error %#x: RegOpenKeyEx(%S) failed D e b u g % s D e b u g C a p t u r e S t a c k T r a c e D e b u g % s F l a g s D e b u g F l a g s D e b u g % s L e v e l D e b u g L e v e l D e b u g % s T o D e b u g g e r D e b u g T o D e b u g g e r ERR: %s:%s J?? ?? ?? ?? ?? ?? S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ T e r m i n a l S e r v e r T S A p p C o m p a t Unable to read APPCOMPAT key: 0x%x StringCchCopy failed: 0x%x in %s S o f t w a r e \ P o l i c i e s \ M i c r o s o f t \ W i n d o w s N T \ T e r m i n a l S e r v i c e s S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ T e r m i n a l S e r v e r \ C l u s t e r S e t t i n g s \ \ $? UserEnvironment ?? p>? _? J?? J?? J?? J?? J?? J?? J?? ?(? ?? p>? _? ,?? @? ? ,?? ,?? ,?? ,?? ?(? ?? p>? _? ,?? ,?? ,?? ,?? ,?? ,?? ,?? ?(? CUserEnvironment::Initialize m_TempDirMap.Initialize failed: 0x%x in %s P e r S e s s i o n T e m p D i r F l a t T e m p D i r D e l e t e T e m p D i r s O n E x i t PerSessionTempDirItem % s \ P e r S e s s i o n T e m p D i r s ?5? /? D?? P?? ?? D3? H/? ?? ?/? ?8? J?? J?? J?? J?? |-? ?? p>? ?s? L.? ?? p>? ?s? 4-? CertManager ?? p>? _? ,?? ,?? ,?? ,?? ,?? ,?? ? ? ?? S e l f S i g n e d C e r t i f i c a t e GetHashFromTheRegistry failed: 0x%x in %s T e m p l a t e C e r t i f i c a t e S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ T e r m i n a l S e r v e r \ W i n S t a t i o n s Reg.OpenKey failed: 0x%x in %s S S L C e r t i f i c a t e S H A 1 H a s h CCertManager::UpdateCustomCertificate f M o n i t o r C e r t i f i c a t e pReg->OpenKey failed: 0x%x in %s CCertManager::GetHashFromTheRegistry pReg->ReadRegBinary failed: 0x%x in %s 1.3.6.1.5.5.7.3.1 CCertManager::GetSelfSignedCertStoreName S e l f S i g n e d C e r t S t o r e memory allocation failed: 0x%x in %s R e m o t e D e s k t o p Reg.ReadRegString failed: 0x%x in %s T E R M S R V CCertManager::GetCertRefreshInterval C e r t R e f r e s h I n t e r v a l Reg.ReadRegDWord failed: 0x%x in %s F l a g s CCertEnrollment::RenewTemplateInfo this->ReadCertTemplateName failed: 0x%x in %s this->FindTemplateInAD failed: 0x%x in %s CCertEnrollment::ReadCertTemplateName C e r t T e m p l a t e N a m e m_bstrTemplateName.Assign failed: 0x%x in %s O : S Y G : S Y D : ( A ; ; G A ; ; ; S Y ) ( A ; ; 0 x 0 0 0 2 ; ; ; S - 1 - 5 - 8 0 - 4 4 6 0 5 1 4 3 0 - 1 5 5 9 3 4 1 7 5 3 - 4 1 6 1 9 4 1 5 2 9 - 1 9 5 0 9 2 8 5 3 3 - 8 1 0 4 8 3 1 0 4 ) L o c a l \ T S C e r t i f i c a t e U p d a t e E v e n t p c???B?%4K$T e r m S e r v i c e U v h d E n a b l e d Profile Manager Not in TS App Server Mode; exiting Profile Monitor ?? ?? p>? _? ?? ? ,?? ,?? ,?? ,?? ,?? ?? ?? J?? J?? J?? J?? J?? J?? ?? ? ?? 0?? h?? ?? ?? ?? CConfigChange C C o n f i g C h a n g e m_TSMSI.OnSessionChange failed 0x%x m_TSVIP.OnSessionChange failed 0x%x CTSAppSrvComponents CTSAppSrvComponents::CTSAppSrvComponents m_Lock.Initialize failed: 0x%x in %s % S y s t e m R o o t % \ s y s t e m 3 2 \ T S M S I S r v . d l l m_TSMSI.Initialize failed 0x%x % S y s t e m R o o t % \ s y s t e m 3 2 \ T S V I P S r v . d l l m_TSVIP.Initialize failed 0x%x S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ T e r m i n a l S e r v e r \ T S A p p S r v S o f t w a r e \ P o l i c i e s \ M i c r o s o f t \ W i n d o w s N T \ T e r m i n a l S e r v i c e s \ T S A p p S r v J?? J?? J?? J?? J?? ?? ?? <?? J?? J?? ?? ?? p>? _? ,?? $ ? l ? ,?? ,?? `? ? ,?? ,?? ?? ?? $?? ?? ?? ?? ???H CConfigChangeNotify CConfigChangeNotify::CConfigChangeNotify NULL == this->m_Callback failed: 0x%x in %s Notify subscriber %ws CTSAPPSRVConfig CTSAPPSRVConfig::CTSAPPSRVConfig Lock.Initialize failed: 0x%x in %s CTSAPPSRVConfig::SetupWaitOnRegistry RegNotifyChangeKeyValue on Machine key failed: 0x%x in %s NotifySubscriber() takes %I64d ms OpenKey on machine failed 0x%08x Register Config Notification: %ws ?? p>? ?>? J?? J?? J?? J?? ?? ?? p>? ?>? p;? ?? ?? ?? x?? ?? p>? ?s? ?? VmSessionManager OS is not running in VM. Disable VmSessMgr. GetInstanceOfVmSessionManager vmSessMgr->Initialize failed: 0x%x in %s H?? ?? p>? _? ,?? ,?? ,?? ,?? ,?? ?? ,?? ?? @?? RDVG Helper GetHandleToRemoteFxVsc Failed, will try later GetHandleToRemoteFxVsc Failed, try # %d SetupDiGetClassDevsW returned an invalid handle, hr = ox%x SetupDiEnumDeviceInterfaces failed!, hr = 0x%x LocalAlloc for devInterfaceDetailData failed!, hr = 0x%x SetupDiGetDeviceInterfaceDetailW failed!, hr = 0x%x LocalAlloc for devicePath failed!, hr = 0x%x Checking to see if running on VM with RemoteFX Synth3dVsc.sys driver interface not found! Not running on VM with REmoteFX, hr = 0x%x ?? p>? _? ,?? ,?? ,?? ,?? ,?? ?? ? ,?? ?? ???N???? e s s E n v P r i v a t e R p c n c a l r p c \ p i p e \ S e s s E n v P u b l i c R p c n c a c n _ n p SessEnvRpc (?? ?? p>? _? ,?? ,?? ,?? ,?? ,?? ,?? ,?? ?? (?? ]???? +H` 0>