Edit C:\Windows\System32\lsass.exe
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ Z v lb% lb% lb%?% lb%??% lb%??%lb% lc%Elb%??%lb%??% lb%??%lb%??% lb%??% lb%Rich lb% PE d? _?R ? " d * \= @ ? ? `? ? LS ? X? T ? ? ? ? ?# ? ? ? 8 ? ? ? X .text ? d `.data ? ? h @ ?.pdata ? ? j @ @.idata 4 ? p @ @.rsrc ? ? @ @.reloc ? ? ? @ B ?????????$ ???????? H?t H? H?tH?? ???????????%? ?????????????H?$H?$WH?0 H?wo H3??$ H?$ ? ? ?? 3??$ L?3????H? ? L?$ L?3?#? ?x??$$ ??f?u?(?$ H?(u (?$0 H?$ )D$ )L$0??$@ ?D$@H?t5H?$ H?$ ?= ?????$$ ?$Hf????????????????ff ? H; ? uH?f???u???N ??%? ????????????????@ H?@n H3??$ I?A?? ?P ?$p ? ?O A?0H?$8 ?$$ f?$"f?(?$Hf?$ E?t H?$LE?????H? ? L?$ H?$ ?? ???O H??O ?$H?H?$8 H?$ H3????H?@ ^??????H?ys H?t H?(H?tH?? ??????????L?H?h3?D$0 I?????????????? % ? O H?$? I???$? I??? H?h??%? ???????H?h?$? ?$HL?$@D?$8H?$0?$(H? _s H?$PE3?3?3??$ ?/? H?h???????? H?t L?HM?u3?I????????????H?Yr H??N H?0H??3N H???????????)r H?t L?M?tI?? ??@? @ ? @ \ p i p e \ l s a s s n c a c n _ n p ???l s a p o l i c y l o o k u p n c a l r p c L S A _ R P C _ S E R V E R _ A C T I V E ??\ D e v i c e \ K s e c D D ?L S A _ S U B S Y S T E M _ I N I T I A L I Z E D ??\ S y s t e m 3 2 ??S y s t e m R o o t ?P a t h ???????\ S E C U R I T Y \ L S A _ A U T H E N T I C A T I O N _ I N I T I A L I Z E D ?LSA InitializeLsaExtension ?ueryLsaInterface ???????S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ L s a E x t e n s i o n C o n f i g \ L s a S r v ?E x t e n s i o n s ?E x t e n s i o n ??????S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ L s a E x t e n s i o n C o n f i g \ I n t e r f a c e s ?\ S e L s a C o m m a n d P o r t ??\ S e R m C o m m a n d P o r t ??? ???? ???? > j ? N??C `3 @ h @ ???! 83 @ ! 83 @ ! ?! @ ! ?! @ ? p? ??! @ ?3 @ ? @ ?( @ . @ ? @ @* @ ! & @ ? @ % @ ?+ @ ? @ p- @ ?# @ C ` @ ? @ ???? ? @ @ ?! @ ????5 ` @ ? ? ? ? ! - @ ! ?% @ pI ??F H! @ ? @ C * @ ?- @ ??@ ?( q ? @ ?- @ ? / @ # @ ? ? @ ? ?$ @ D @ C ?' @ H) @ ?? ?? ? @ ! ? @ ?? A x( @ ? ! 83 @ ? - @ 5 H% @ ? ? @ ? ? ! ?% @ ????! X3 @ ! ` @ ! ? @ ! ' @ pI ?? ?? ????5 ?) @ ? ? ? ? C ? @ P- @ ? P 5 0 ? + @ ? ?% @ 5 ? ?' @ ? ????5 X @ ? ? 5 ? @' @ ? ?" @ ? @ ?4 @ - @ ?/ @ [ @( @ ? @ @ 0 ? ? ???? ? < D p? * @ ? @ ? ?4 @ ?4 @ ?4 @ ?4 @ ?4 @ ?4 @ ??????1 H ? ! ?- @ ? ! P @ ? ( ! x$ @ ? @ ! 83 @ ? 5 ( @ ? ? 5 ? ?* @ ? ??C ?. @ ? @ 2 ?% @ ?. @ ??F ? @ p+ @ 5 p/ @ ? ? Q ? @ x @ x @ x @ ???? ` )?-XF?'?U?? ]?? ?? +H` ? @ ? @ ?. @ 5 h @ ? ?3 @ ? ? ????]?? ?? +H` ? @ ?+ @ ? @ ?/ @ 3qq?7I????6 H @ p @ pI ??????5 ?- @ ? ?$ @ ? ? C ?% @ h @ ?? ?? ? 5 H ? 0 @ ? ! 04 @ ?4 @ 5 @ P5 @ ? @ @ ? @ ! ? @ F @ ?- @ @ @ @ @ @ @ d ??A ? @ H @ C ?( @ ( @ " C ?$ @ @ 5 ' @ ? ?& @ ? ? A ? @ A) @ ? P C (! @ @ @ ????5 ? @ ? ? 0 ! X% @ ??1 ? ! 0 @ ? ! 83 @ ? ????????1 ? ! H @ ? ! ?! @ ? ???? " @ 0' @ ?4 @ ?4 @ ?4 @ ?4 @ @ ?4 @ ?? ??????@ ?@ T ( pH @ @ ?* @ ? 0& @ ?. @ X $ @ ? ( ` @ ? 0 ?. @ ? 8 ??? F ?& @ @ ! @ 5 0 ? @ ? ? ? p? ?? ???????? ? , pH ? @ ? @ ? ?- @ ? B) @ ? ? @ 1 ? ! ? @ ? ! 83 @ ? 1 0 ? ! ? @ ? ! ?& @ ? H3 @ ? ?? H ( 1 \ @ F ? H ? p H 0? 8 @ D ? p H @ 0H P $ G ? ?X H ( H 0 p 8 H H 0H X $ G ?? ? ? ? 4X( H 0 H 8 p @ H ( 1 \ G LH T p H 0H * E FH Jp ???? @ d ??1 ? ! 83 @ ? 3qq?7I????6 ??! ( @ C ? @ ` @ ?$ @ ???? ??????@ ?H \ ( pH $ @ ? @ ? h) @ ?! @ ? 0$ @ ( @ X ( @) @ ? 0 ?' @ ? 8 0* @ ? @ ! ? @ ???? ! P" @ ???? 0 ?! @ ? @ @ 0# @ ???? ! 83 @ %\ ? [ @6\[ ? [ L ?\[ ? [ ?L ?\[ ] [ ?[( @6666\[ ? ? ? ? >[0 @66@66\[\ f? ? ? 0? 0? 0I 0 ? P 6[ \?! ???? L ?\[ L ?@6\[ ? N U U [ @6\[ ? L ?6[ ?! ???? L ?\[ @6@[ ? 4 ? P @L ?\[! ???? L ?\[ L ?@6\[ ?\0I ? ? ! ) ???? L B?\[ r? 4 ? ? @6[ .?! ???? L ?\[ L ?@6\[ ?\%\ + & 0 0 N ` ? ?? U U [ @6\[ ? ? [ ?L ?\[0 L ?L ?6@[ ? L ?L ?\[? ! ???? L ?\[ L ?@6\[ ? + & ?? [0I + & H 0 ( ?? L ?6[ ? [ L ?[H L ?L ?L ?L ?6[ ? ??2 ?3 @ 2 x& @ ???? A ?! @ ?$ @ ? ????@ ?( D q @ ?) @ : @ ? X @ ? @ ? Q H 8 @ ? @ ?$ @ ???? ????H?iQ H?t H?PH?tH????%.m ???????H?9Q H?t H? H?tH?? ???????????? Q H?t H?8H?tH???%? ??????????? H?t H?H?tH?? ??????????H?? H?t L?M?tI?? ??????????H?(H? ? ?? H?XP L?? H?RP H?CP H?\P H?]P H?NP ??-? 3?3?? ?xL?9J ? 3??(? H?(????????? ? H?H??/ H? ? H?$0H?$@?Rk H? ? ??Ck H? |O ?4k H? uO ?%k ?KP? H?H??& ?(H?(A? H?$8?j ??? L? FO H?(? A? ?? ??? L? O H?(? A? ?? ??? L? ? H?(? A? ?ei ??xiL? ? H?(? A? ?Ci ??xG? H??Gj ??x3L?(E3?H??_i ??xL?? H??? ???. H?$8H??? H?tH??; H?$@?H?$0H? ]?? ????????????$H?$H?$ WH?@H?5H H3??$83?D$ f?$$ ??$( f?$, ?$0 f?$4 3?+i ?? H?H??1 H?$ A?H?L?$P?? 3????h ?? ?? ?? L?H??01 H?$(A?H??? 3???? ???? ?? H?H??0 H?$ A?H??jh 3???? ?? ?ph ?? H?H??0 H?$ A?H??,h 3???Ih ? H?? ?5h ? ? ? h ?? H?H??0 H?$0A?H??? 3???? ? H?? ?? H?=bL ? L?5mL H?5FL 3?? UL H?-FL L?$PH?$8H3????H?$XH?$`H?$hH?@_????????H?$H?$H?$UH?$ ??H?? H?F H3??? H????H??? 3?H?? H?$XH? ? E3??H?$h?$X0 H?$`?$pH?$xH???$ @ ?? ???/ H????H??E? f???=f H?$8H?$@H?$0L???$(H???$HE3??$ ?Nf ???/ 9t$@?/ H?$HH? ? H???? ?? ?? ???/ H????? ? H?$(A?3??$ ?? ?? ???/ H? ? ?? ???/ H?$PL?4??E3??$(3?3?|$ ?? H??/ H??? ??H?? H3????L?$? I?I?I? I?]??????????$H?$WH?@ H?GD H3??$0 H? ??H?= ???5 ??H?$ H? ??A? ?? ?t;? +?? r/?=? ?H?L H?L(?L0?/ H?$ H? ????yf H?$0 H3?1??L?$@ I?I?I?_?????3??%? ??????%? ???????H?$ UH?H? H?hC H? H?2?-?+ H;?? H??~f H?H??f ?H1E?f ?H1E?Pf ?H?H1E?@f H??H3EH3?? H??? ? H? H?????? H3E H3EH#??3?-?+ H;?D??? H?$HH?H?? H? ]??????(? ???H?(? ??????H?(?$0 I? I? I?H?? H? t I?????t ? H?(??$8H?$0???H?? H? 0 ???H?$8?$0L?$H? ???\b ??? @ ????????H?$H?$WH? H? ? H?5? H?H;?H?(H??? ?tH?H;??3??$0H?$8H? _??$8H?H?$0H? _???????H?$H?$H?$WH? ?H 3???H???* H? mG ??? ?? H?? ?8? H?? H?0?H?H? ? H?? H?H?H9ubH?H?? H?u$H? G ?b ?H?$0H?$8H?$@H? _??H?H? H?H?H9u H?H??? ?? ?? ?)? ?)?????????$H?hH????H?$ ?? 3??$ H?$8H?$PH?$XH?$? L?$0? ?$00 ?$H@ H?$@?*a ??) H?$? H?h???????H?$H?$VWAVH? L?3?H??\?? H?? H????H?H?$PH?? H?$PH?? H?$P??? H?? H? ? H?H?H9?+( H?8E3?3??H?=gE ?? H?H??( H????H?H?0?? H?H??( H????H?H?H?aa 3??P????? ( ?8 3??tI?>H?$H?H?$@H? A^_^?X<?u 9X8u?O H?t?_<3??? ?????????$H?$H?$WH? H?3???X? H?H??( H?H? H?<?8H??H??9,Cu??? f??f?"? H?(H??( D?"H?H????H?H?>H?H? ?H?$0H?$8H?$@H? _????????eH? %` ? H?0H?%? ?????????????@H?$hH?$`H?$83??b??A? E3?? ?H?$0H?$`?$PH?$ ??? ???1$ H?$`H?$PL?$XH?$(H????E3??$ ?? ???$$ D?$XA??$ A??$ ?$P??$ ? ???H?H?? H?$`H?$PL?$XH?$(H? ??E3??$ ?J_ ???$ ?$PH?H?f?G?D$PH?f?G??f9;t!3?????f9;t H?f9;u??f9;u??$`H?$8H?$hH?t?? H?u H?$0??%$ ?H?@^? ???? ????eH?%` L?3??0H?%W] ?????????????? H????? ?? ? H?? ?? ?? H? j( ? ^ A?3???I\ eH?%` ??! A? L?$0H??A?2?$0 ?-] ???! A? L?$8H??A??$8 ?] ??? ????????? ??????? ??????2 ?? ?????? ????? ? ?? ? ??? H? A ?? ??xq???H?H?? H??? ?? H??? ?# ? ??? ? ? E3?? 0??A?3?? H?? H??r] ??*] ? ??????????H?$WH? H? ?@ H?=8@ H;?%?8u? ?SH?? ?8 H?H;???$0H? _??????????H?(A? ? A??? ??? E3?? ??A?3?? H?? H??? 3??(????????????? H? ??H?$P?Z 3??$PL?$`L?$pH? ?? ? ?\$(H?$? ?$p0 H?$x?$? H?$? H?$? ?$ ?? ?? H? ?? ?$H H??8 H?$@?$8H?$`H?$0E3?3?3?D$( ?9 H?$ ?NY ?? H? W? D?L?$? H?$`?$? ?$ ) ?5Z ?? H?? [????????????$ WH?0H?3??$HH? H?H?$(H?$ ?$HH????L?$PH?E3?? ?? ?$H?? ???= ? H?$@???H?H?ttH?$HL?$PH?(??H?$(E3??H?$ ?2Z ??u-?$PuU?$H???= wL??f9<CuCH?H?????H????H?$@?H?$XH?0_??$@H?$X? H?0_? ?? ??????????H?$UWATAVAWH?$??H?? H? 7 H3??? E3??H??3?? ?$dL L?$hD?$`E?L?$pD?$xf?$| ?&??A?$(???H?H?? A?$H??*X ???> ?bY L?$h? H??WY ?? D?$dH?$hH?$dL??A?$H?$ ?? ?? H? -< H?$( ?? H? < ??? ?Np?>??L?H?? H??E3???? ??? E?$?pI??? ??? L? ?; A?$A? I??2V ??? L? ?; A?$A? I?? V ???1 L??A?$A? I??? ??? E3???H??V ?? H?$pH?$xE3??$PD?$HD?$@D?$8D?$0E3?D?$(D?$ ?? ??? E?$H?? ?? ??? L?$pA?$H??3?D$( ?$ ?aU ??xiL??3?H??9U ??xQL?$`3??D?$`?FV ?=# ?? ?$`???H?H?? L?$`H?H??V ??xI?7H?$( H?$hH?t?? I????H?? ???H?? H3????H?$0 H?? A_A^A\_]? ?? ??? ?? ?? ?????????t?t?u H??9 3?H??9 3?H?g: 3?? ??????3 ?3?????????$ UH?$??? H??3 H3??GH???$? E3?????A? E3?? ?H?$ L???????? ???. H???$8L?$0H?$? L???3??$(H?$? A??? L?$ ?oU ?= ? ?? D? H?3?? ?????&# wSH?????A? E3??$ ? U ?? H?????-???? H???H?? ?? H???t ?? L?????$8L?$0??????L?$(?? L?$ ?? ?= ?4???A?H?$? H?$? H???t ?|T L???$? ?? ?H?GH3?J??H?$? H?? ]?????H?$WH? H?P?H?H?$0 H?t,H?$0????L?$0M?t?H?? ??H?$8H? _?? ??$8H? _??????????H?$ VH?@3??$PH?$PH?$X??????" H?$`H?$PL???? H? #??L??? ?=? u?H?????? H?$X? ??? H?$XL????H? ??L?? ?zR ??? H?$8H? ??D?1H?$0H? L??E3?3?D$( ?$ ? ?1R H???'???? 3??$`H?$hH?@^???????H?$H?$H?$ UH?$??0 H? 0 H3?? 3??$pH?H???$`H?????$hE3?????3??????H?H?$xH?$pH?H?$pH?$`H?$P?$H?$@?$8?$0?$(?$ H????H?$xH?$hH??u??? ???? ???? ???? f????E? ??? @??E? ?????E? ?f????E? f? @?? f?@?? ??? ??? H?$`D? H???$P?$H?$@?$8?$0E3??$(?$ ?ZP ???# H?$hD?H???$P?$H?$@?$8?$0E3??$(?$ ?P ??? H??? H???$P?$H?$@?$8?$0A? ??$(?$ ?? ??? H??D?H???$P?$H?$@?$8?$0E3??$(?$ ?? ??xiH?$xA? D?H?$P?$H?$@?$8?$0H????$(?$ ?\O ??x)H??VH??3?3??$ ?N ??xH???H?$pH?t?-N H?$`H?t? N H?$hH?t? N H???t?? H??H?t?? H?$xH?t?? ?H? H3????L?$0 I?I? I?(I?]??????$VH? H? 3 H?53 H;?1H?$0?8u? ?SH??? ?8 H?H;???$0H?$8H? ^?? _?R ? tS ?S ? ? L ? ? ? ? lsass.exe LsaGetInterface LsaRegisterExtension LsaRegisterInterface ?????H?$H?$WH? 3?H??H?? H?:??2 ?? H? )2 ??)M ?? H?t+H?0H?t"H?H? 2 ? M ?H?$0H?$8H? _?% ???????????H?y1 H?r1 H;? 9Ht H? H;??3??????????3?????????????/?????????? ? @ ?= @ ??Error printing message: Bad ComponentName ???rror printing message LsapRPCInit: failed to build pipe SD: 0x%lx ??sapRPCInit: RpcServerUseProtseqEpW failed: 0x%lx ???sapLookupRpcInit: LsapMakeLowBoxRpcSD failed %#x ???sapRPCInit: RpcServerUseProtseqEp failed for ncalrpc: 0x%lx ?LsapRPCInit: RpcServerRegisterIf2 failed: 0x%lx ????AILED to open %ws, status %x ?AILED to send ioctl, status %x ????ailed to set IOCTL completion modes: 0x%lx ??ixupEnvironment: Setting PATH to %ws ?etKsecEvent: Could not open event %ws: %lu ??etKsecEvent: Failed to set ksec event: %lu ??ailed to init well known SIDs: 0x%x ?Failed to set Ksec security: 0x%x ???ailed to init LSA interface list: 0x%x ????ailed to init Lsass global states: 0x%x ???Failed to init RM: 0x%x ????ailed to load extensions: 0x%x ????etKsecEvent failed: 0x%lx ??Failed to start LPR server: 0x%lx ???sapLoadLsaExtension: Can't load library for %ws: %lu ?saInitializeExtension: Can't get init routine for %ws: %lu ??saInitializeExtension: Init routine for %ws failed: 0x%lx ??LsapLoadRequiredExtensions: RegOpenKeyEx for LSA key failed: %lu ???????LsapLoadRequiredExtensions: RegQueryValueEx for LSA key failed: %lu ??????sapLoadRequiredExtensions: Bad REG_SZ size for LSA extensions value ?????LsapLoadRequiredExtensions: Bad REG_MULTI_SZ size for LSA extensions value ??LsapLoadRequiredExtensions: Bad reg type %lu for LSA extensions value ?????sapLoadRequiredExtensions: RegQueryValueEx for LSA key failed with Size %lu: %lu ???sapLoadRequiredExtensions failed: 0x%x ????sapStartExtensions: Extension %ws failed to start: 0x%lx ???egEnumKeyEx failed at index %u: 0x%X ?gnore failure to open interface reg key %ws: 0x%X ??Ignore failure to load LSA extension from %ws: 0x%X ??gnore failure to load interface %ul from extension %ws: 0x%X ?sapLoadLsaInterfaces failed: 0x%X ??LsapBuildSD: Could not open %ws, %d ??ailed to set event SD: 0x%x ?LsapRmInitializeServer: NtCreatePort failed: 0x%lx ??LsapRmInitializeServer: NtConnectPort failed: 0x%lx ??sapRmInitializeServer: Server protocol mismatch ???LsapRmInitializeServer: NtListenPort failed: 0x%lx ??LsapRmInitializeServer: NtAcceptConnectPort failed: 0x%lx ???sapRmInitializeServer: NtCompleteConnectPort failed: 0x%lx ??sapRmInitializeServer: CreateThread failed: 0x%lx ??sapCallRm: Command sent from LSA to RM failed: 0x%lx ????????????? H?3?? H??? ?\C ? ??H? [H?%xC ????????????H?$H?? H? =! ? A H?(" H?$HE3??$PH?$H?? H?$@H?$@ tBH?$8 H?$XH?$0H?$`H?$(H?? H?$ L?$@L?$HH?$P3?? ?#H?Z! H? H??! H?I! H?H?>! H??! H? H?$? H? ! ?? ?? ?? ? Hk? H? ? H? ? Hk?H? ? H?\ H?? Hk?H? ? H?I H?? Hk? H? - H?h? Hk?H? H?hH? ?????????? ????H?(M?8H?I?? ? H?(??????? E?H?L?A??? L?tA?McP?L?c?#?c??H??HK?t ?????3??H? [???????? ??$p H?$LH?????????=?$ ???H?)??D?? ? ?p??? ???????? H?%? ?????L$0H?$? L?$HH?L?$? H?$8H?$PH?L?$@H?$0A?0 ?< 9 H?$X?$ ???H?h? ????? ?????? L?$@H??A?,?$@ ?$D ?? ? ????????? ????????=?# ???H????D?? ? ?????=?# ???H????D?? ? ?????=?# ???H????D?? ?# ?????=z# ???H???D?? ? ?D???=S# ?7??H? ??D?? ? ? ???=,# tO??> L????H????D?? ? ?,?= # t?\> H????? D?? H??g> ?=?" ? ????H????D?? ? ?????=?" ???H????D?? ?* ?r????= =? ???L?l??3? @??> H?????6?????= ?=F" ? ??%??H???D?? ? ? ???=" tL?(H?0??D?? ? ??@??< ?<???????@??< ?<????2= =? ???L?h??3? @?> H????????9 ?! ???L?$XH????D?? ? ?D??9 o! ?8??H????D?? ? ? ??9 I! ???H????D?? ? ?????=!! t!?}< L????H?o??D?? ? ? ?????=? ???H?k??D?? ? ??????D95? ???L?H?<??D?? ?? ????D95? ???L?H?I??D?? ? ?O??D95k ???L?(H?V??D?? ?$ ? ? ??D95< ???H????D?D?? ? ?J???= ???H?@??D?? ? ?U???9=? ???H????D?? ? ????=? ???9=? ???H???D?? ?; ?Y???$P?s#9=? tH?-??? ? ? ?-????$P???9=[ t??N??? ? ? ???9-8 ???D?$PH????D?? ? ????9= tH?P??? ? ? ????=? ???H????D?? ? ??????? ????95? tH????D?? ?8 ?????95? tH????D?? ? ???9 ?Y??95d tH????D?? ? ??6??95A tH????D?? ? H??/????79 ???95 tH????D?? ? ?? 9 ????? ?)?A9 ?=? ?tpH? ??D?L?? ? ??9 ?=? ?tFH?-??D?L?? ?- ?-?=? tH?K??D?L?? ? ?? 8 ?@????????? ?N???? ??I????? ?????? ??????? ? ??M?tI????H?tH????H?tH?????????H?? ???H????H?.? ?????]7 ?? 8 3??h??9=? ???H?A??D?? ?$ ?4??9=| ?(??H?S??D?? ? ???H?$H?}6 9=K ? ????H?U??? ? ????9=# ???H?j??D?? ? ????9=? ???H?|??D?? ? ????9=? ???H????D?? ? ?i??9=? ???H????D?? ?3 ?A????$ H???? ? ????????????L?I?M?M? H?X H?? H3??$0 ? 6 ? I?????t3??t? ??????L? H?$0? H?$p ?J4 ?t? ? L????3??4 ? H?? H??H??< u??$h ???D0:? 0 ??A? 0 H?$0A? ? H?+?+??$ ??3 ? f ?yL?C??3?4 ? L?$0?? 4 H?$P H?$H H?$0 H3????H?X ??% 5 ????????Q H?t H?@H?tH???? _?R " m a _?R5? ? ? UGP??SDS;@??F?G>?? lsass.pdb ? $ d? 4? ? p a H ` a ! 4G ? ? Pm ! ? ? Pm ? ? B 2P! t 4 6 6 ? ! d 6 ~6 ? ! 6 ~6 ? ! 6 6 ? ! t 4 6 6 ? # d T 4 rp a 8 ! ? ?7 +8 n ! ?7 +8 n 0 t` d_ 4^ \ P a ? $ dK 4J H p a 0 4 2P B d 4 2 p d T 4 2p ? T 4 2? p ` r`!- -t T 4 @B FB ? ! t @B FB ? ! @B FB ? ! t T 4 @B FB ? ! t @B FB ? 20 4 2p 0 d Rp! 4 ? H ? ! ? H ? ! 4 ? H ? ! 4 ? H ? - 4f ^ ? ? ?pP a ? ! de ? ? ? ! ? ? ? ! de ? ? ? 4 P a ? ! ? `L ? Lp ! t d ? ? lp ! ? ? lp ! `L ? Lp 4 2p 4 r`! t ? ? ? ! ? ? ? * t+ d* 4) & P a 4 2`! t ? S q ! ? S q ! 4G ? ? Pm ! ? ? Pm ! ? ? ! ? pT ? ! ? ? to ! t ? S q ! ? F |o ! F ?F ? ! ?F ? ? ! 6 6 ? ! t d 4 ? ? ? ! ? t d `L ? Lp ! `L ? Lp ! t T 4 @B FB ? ! @B FB ? ! ? H ? ! ? ? ? ! t ? h ?r ! @ `A ? ! ? ? ? ! de `i ki ? ! ?> ?? ? ! ?7 +8 n ! ? ? ? ? ! `A B ? ! ?? @ ? ! ?9 ?; \n ! ?; \< ? ( + a 0 ! t) 4* Pk ? Ls ! Pk ? Ls 2?-?+ ? ??? ? @ @ HL @ ? @ (m P (m P p (m p [ ,m p ? (m ? ? (m ? ? Pm ? \ lm \ ? ?m ? ? (m ? ? (m p ? p ? (m ? ? (m ? ? (m ?4 ?4 (m ?4 ?4 (m ?4 ?4 (m ?4 5 (m 5 P5 (m P5 ?5 (m ?5 6 ? 6 6 ? 6 ~6 ? ~6 o7 ? o7 ?7 ? ?7 ?7 ? ?7 ?7 ? ?7 +8 n +8 ?9 8n ?9 ?9 Ln ?9 ?; \n ?; \< ? \< `< (m `< p< (m p< ?< (m ?< \= ? \= t= ? t= ?= ? 0> ?> ? ?> ?? ? ?? @ ? @ `A ? `A B ? B @B (m @B FB ? FB ? o ? ? o ? ? 4o ? ? Do ? ? `o ? ? (m ? ? to ? F |o F ?F ? ?F ? ? ? H ? H ?H ? ?H ? ? ? ? ? ? ? ? ? ? ? ? ? p ? ? (p ? L 8p L HL (m HL `L (m `L ? Lp ? ? lp ? ? ?p ? N ? N @N ? @N ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? S q S >S (q >S IS <q ? pT ? pT ? (m ? ? (m ? ? (m ? ? (m D_ ? to ? ? Lq a 0a ? 0a ? to ? ? (m ? ? Tq ? ? hq ? b (m b ^b xq ^b sb ? sb ? ? ? ? ? ? ? ? ? e ? e ? ? ? ? ? ? ? ? ? ? r ? ? 4r ? ? Dr ? ? `r ? ? pr ? h ?r h ? ? ? `i ? `i ki ? ki {i ? |i ? ? ? ? ? ? ? ? ? ? s ? j s j $k ,s $k Pk <s Pk ? Ls ? |l ds |l ? |s ? ? (m ? ? (m ? *? 6? @? L? \? f? p? |? ? ? ? ? ? ? ? ? 6? F? T? t? ? ? ? ? ? ? ? ? (? B? R? j? ?? ? ? ? ? ? ? ? "? :? X? p? ? ? ? ? ? ? ? :? R? j? ? ? ? ? ? ? ? ? ? .? J? h? v? ? ? ? ? ? ? ? ? ? *? >? R? `? p? ? ? ? ? ? ? ? ? ? ? é ? ? ? @? (? |? `? ? p? ? ? d? ? ? 8? ? ? ? @? ? ? P? 0? ? h? X? ? ? p? h? á ? <? ? ? ? ? ? ? ? ? ? 0? ? ? H? api-ms-win-security-base-l1-2-0.dll api-ms-win-core-sysinfo-l1-2-1.dll api-ms-win-core-synch-l1-2-0.dll api-ms-win-core-profile-l1-1-0.dll api-ms-win-core-processthreads-l1-1-2.dll api-ms-win-core-processenvironment-l1-2-0.dll api-ms-win-core-heap-obsolete-l1-1-0.dll api-ms-win-core-registry-l1-1-0.dll api-ms-win-core-libraryloader-l1-2-0.dll api-ms-win-core-handle-l1-1-0.dll api-ms-win-core-errorhandling-l1-1-1.dll SspiSrv.dll RPCRT4.dll ntdll.dll api-ms-win-core-crt-l2-1-0.dll api-ms-win-core-crt-l1-1-0.dll ? *? 6? @? L? \? f? p? |? ? ? ? ? ? ? ? ? 6? F? T? t? ? ? ? ? ? ? ? ? (? B? R? j? ?? ? ? ? ? ? ? ? "? :? X? p? ? ? ? ? ? ? ? :? R? j? ? ? ? ? ? ? ? ? ? .? J? h? v? ? ? ? ? ? ? ? ? ? *? >? R? `? p? ? ? ? ? ? ? ? ? ? ` wcstol _wcsicmp S wcschr > strcpy_s _vsnprintf_s 3 memcpy 7 memset _initterm _initterm_e exit ?RtlAddAccessAllowedAce ?RtlCreateAndSetSD ?RtlSetSaclSecurityDescriptor " DbgPrintEx ?RtlAddMandatoryAce ?RtlSetProcessIsCritical -NtDeviceIoControlFile ?RtlCreateAcl ?RtlFreeSid ?RtlSetDaclSecurityDescriptor ?RtlInitUnicodeString iRtlVirtualUnwind ]RtlLookupFunctionEntry ?RtlCaptureContext aNtListenPort ? NtAcceptConnectPort ? NtClose ?NtRequestWaitReplyPort ? NtConnectPort ?NtReplyWaitReceivePort NtCreatePort ? NtCompleteConnectPort 'NtSetSecurityObject RtlInitializeSid ?RtlAllocateHeap xNtOpenEvent ?RtlFreeHeap FRtlLengthRequiredSid RtlSubAuthoritySid zRtlAcquireResourceShared ?RtlReleaseResource pRtlNtStatusToDosError yRtlAcquireResourceExclusive RtlInitializeResource ?RtlSetOwnerSecurityDescriptor RtlCreateSecurityDescriptor HRtlLengthSid zNtOpenFile ?RtlAllocateAndInitializeSid _RtlMakeSelfRelativeSD NtSetInformationProcess 8RtlUnhandledExceptionFilter NtSetInformationFile ?RpcServerRegisterIf3 ?RpcServerUseProtseqEpW A I_RpcMapWin32Status *NdrServerCall2 +NdrServerCallAll ?RpcServerListen SspiSrvClientCallback SspiSrvInitialize SetErrorMode GetLastError SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter CloseHandle LoadLibraryExW GetProcAddress RegOpenKeyExW ! RegQueryValueExW RegEnumKeyExW RegCloseKey LocalFree LocalAlloc SetEnvironmentVariableW GetEnvironmentVariableW GetCurrentProcess * OpenProcessToken ExitThread CreateThread GetCurrentProcessId GetCurrentThreadId ? TerminateProcess QueryPerformanceCounter ' SetEvent CreateEventW OpenEventW GetTickCount GetSystemTimeAsFileTime @ GetTokenInformation ? 8 ? P ? h ? ? ? `? ? ? ? <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <!-- Copyright (c) Microsoft Corporation --> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="5.1.0.0" processorArchitecture="amd64" name="Microsoft.Windows.Security.LocalSecurityAuthority" type="win32" /> <description>Local Security Authority Process</description> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false" /> </requestedPrivileges> </security> </trustInfo> </assembly> ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n j ! F i l e D e s c r i p t i o n L o c a l S e c u r i t y A u t h o r i t y P r o c e s s r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) 4 I n t e r n a l N a m e l s a s s . e x e ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . < O r i g i n a l F i l e n a m e l s a s s . e x e j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? ? ??????(?8???????è???????8????????(?0???????? ??? ??????(?8??????(??????????? ? ?????????? ? ??????????±?¤????????(???????????????? ?(?0?8??????????????? ?(????????(????? ?(??????????? ?? ?0???????????? ????????? ?0???????????(???? 0 $ @?????? ?? ?8???? P (?? ? ? ?(?0? ?# 0?#? *?? ?#?0?#?10 `?e 0?? +?7??0??0?i +?70?Y ?R?N???$f???`??81?40?0 +?71? ? ??ZHY?5u?"??OQwG?z<??. ?#??1@(1p ?z+?J?? w??4|? ?.T?$*? |?OX?#Jk??5??; $ Y??iMwn{'?'?????"S???4: 4 ?????a??#?vh?7??i? 0\ D ?l?<Cym?s??n???3?;;I{ T ?Q? ,?2?)yO??>????w? d 1??<t???#+o? I? ?r??(? h xw??a??+??>??F?G???;' j ??????a????<??"3? p ?0?^;???a)Q?Y?}???? ? ?;?7?365|`%y?????J????% ? ??=?BQ?$?*?;?vt?&+P?g?%j? ? 8?^o? ?_L??????0%?D? ? 010 `?e ??xo? ? ??tk???[?a?? ?0?0??3 ?!+?gC? 0 *?? 0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110 130313213410Z 140613213410Z0z1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1$0"UMicrosoft Windows Publisher0?"0 *?? ? 0? ? ?1n??,?6???n??$a? ???D???1 A?>R???. ?1[f,;!???h?k??s?O-?"??7?U?\QV?Tp?4w|???g ?x???A s?4??g[?<m?d?<?E?5????_???)??('? bV?"???:6?&a?h??}|??7??q?To??"?-} $.?$?w?3?{ D????< ??0??0+U %$0"+ +?7 +?7 0 U tb<:?g??s08(aU?0QU J0H?0D1 0 U MOPR1301U*34633+1f021918-3091-43eb-b610-6776aa4e4a2e0 U #0??)9??x??O?|U?0TU M0K0I???http://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a+U0S0Q+0?http://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0 U ?0 0 *?? ? ????h?O(?????4? *??kP?? ? ??? ? ???D??!{?.?????? }?u??;?55x??????????P?+ .P? G?(N?? ???+??={ ??-?/l??/??;F?j??3? ?!?sw?" G?~??Dg ??.?%D5U>?R???5??J??5?R???u???+P??U??d?0??0?? avV 0 *?? 0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 111019184142Z 261019185142Z0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110?"0 *?? ? 0? ? ? ??. ???? !?33?????? ???8??-|by???5 p????6u?1?p?7?F?([?#,?G??'???? ;S5|??'? ??# o??n?<A???]jM? %(\6?? ????['?'x0?* k"?`,? S?I?a?h sD]}?+???5]l +\??#?n?&?6??'?2;A?,???TN? ??ú?w?$? ?C0??0 +?7 0 U ?)9??x??O?|U?0 +?7 S u b C A0 U ?0U ?0?0 U #0??V??\bh?=?[???0VU O0M0K???http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0?>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0 *?? ? ?qQ???9>?<Rn+?s?h??4M?&?1F?y?8.Ek??(? ?? ?? 6fj?????@26v?Z???????TlP0X?|?????W?!s4Z???? ???~?? ???? rS???=1e????=??B??T ??? G??NA???*???!(??9_>?`?? ???Q?G??=?*hw?Lb{??z?4Kbz???7?-?| ?=?Z???:???!7??ug?W^)9?-??s[????X????5???$?5? u?V?x,??????~,c??#!?xl?6+???-??@?E??k>??* j?G?c 2??6 *pZ?YqKW???!<? ?????? ????b?c ?w}=?????o3??? Y~1??0??0?0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113 ?!+?gC? 0 `?e ??0 *?? 1 +?70 +?7 10 +?70/ *?? 1" ?? ??;?:??V[d ??? ?0Z +?7 1L0J?$?" M i c r o s o f t W i n d o w s?"? http://www.microsoft.com/windows0 *?? ? =??>?"?aH ?? ?y??E??\?\!?????9C???3 ?(?0?6? ? ?G ???)?!?;^?4i?~?#?????y =M?*?,M? ?8q?Oe?P????'?7@Z@??9??h/?????XaT??+O?u????h?N}?4??m Ii?j?????v?Ww? na?@?n:aP??y8J?S?e??????J0?F +?71?60?2 *?? ?#0? 10 `?e 0?= *?? ?,?(0?$ +? 010 `?e ??$? bD !.??? P)?9iNQ?Cf?20130822123254.629Z0?????0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:C0F4-3086-DEF81%0#U Microsoft Time-Stamp Service??0?q0?Y? a ?* 0 *?? 0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 100701213655Z 250701214655Z0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100?"0 *?? ? 0? ? ? ??: ???i?tT? ??|hK,_????>f+[?S'1 A? ? ?a0Y?0D??TC ??8???s0W&?E ????$`2X`F?G?2? tag??????]?n(????a??' $gr!?Kd?b?? =?u??M@Q??>g???~?K????z* 1?N??5? ??<?/D??d?? ????]^?O"M ??0??0 +?7 0 U ?:\?1?C{|F?3hZ?U0 +?7 S u b C A0 U ?0U ?0?0 U #0??V??\bh?=?[???0VU O0M0K???http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0?>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0?U ??0?0? +?7.0?0=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0 *?? ? ?Q ????=??!o???1???Wm0?????x??%??kTW+Q??S????@A?\?\?5?$VKt?????7}Z? ?yJ? ?8?/y?????? oK0D$"<???)????2J'??/??3?_?W@??f??jb?J ?&?9?Jqc?!m??<?}????? ?8??? ????B???"8 ?%???~cY%z.9Wv????????G????}??;q ?t?"a?P o?? ?1?:?Gx????~akow?? ?9????? ?? ???*T9?? U??;?-??3.)?/T'!???(??????AM??*?f0?t2K?{??/?!???<?q??U????0??M? ?O? 8/?X.? ?5? ' ?~5 ?6?_?t?0??0??3 (???<nf (0 *?? 0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100 130327201313Z 140627201313Z0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:C0F4-3086-DEF81%0#U Microsoft Time-Stamp Service0?"0 *?? ? 0? ? ?H?H?!?k?-?c???????1?f??gZ?"?gR??7E??3?s?!?}?/??????M V?/??_????2L? R??<it??h?U??g?D?3?s]?(?_R-D/?x?;/???;/???J?2 V?KZ?&' C`??@ `?A?s????U'?M?}l?#?|l?? Rx?P?:???'r!u ?0?0 U ????G????S?0 U #0??:\?1?C{|F?3hZ?U0VU O0M0K???http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0?>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U ?0 0U % 0 +0 *?? ? ?"?=d~K?&???N ?V?Z??A ?2??Ev?`$???T)??{???13?z;???<?????>? ?r ?1 E?H??E????? veY/?B?????Ip???!?`S~???? <??Qt??r??)?? ???LT?2??*nt?D???0y??: ???'???4?'7??"?H*??v0?^0????0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:C0F4-3086-DEF81%0#U Microsoft Time-Stamp Service?% 0 + ?? ?;fNe?S?? D??0???0?1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1 0 U MOPR1'0%U nCipher NTS ESN:B027-C6F8-1D881+0)U"Microsoft Time Source Master Clock0 *?? ?u?0"20130822113521Z20130823113521Z0t0: +? 1,0*0 ?u? 0 ?0 ?0 ?? 06 +? 1(0&0 +? ? 0 ?? 0 ? 0 *?? ? ?U+w?TZ?R??8??OH?p ?1???[??3??%???g?????_u(??i?7?y??X???%?t ? ??c?/w ?l?7J?spb?#9z???H?d???M??? ??|PV?U?X??????g?!;?k?_]G}?'^?.u?p??&???df?8?p/=??A?JS*'{?8?0?i?!??01??0??0?0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 (???<nf (0 `?e ?20 *?? 1 *?? 0/ *?? 1" ??*o5}wX ?T??<? #e7?n8t?0? *?? 1?0?0?0??? ?;fNe?S?? D0?0??0|1 0 UUS10U Washington10URedmond1 0 U Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 (???<nf (0???5H?| ????N0 *?? ? n???l??#<X???Q?5??p?,*Jt~}Y?/?????d? ?#?[???W?+?=???mp?O?9v?+?????W???P?Ja*r? ??>???V?? ,'?W??/-S????t? u?Zq? 5s,?D?4??v?&1A????.?? !(qKR?????3gq$?????7R????L/?s?
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de