Edit C:\Windows\System32\werdiagcontroller.dll
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ??|??/??/??/??/??/1f%/??/1f /??/1f#/??/1f$/??/1f=/??/1f'/??/1f"/??/Rich??/ PE d? /?R ? " t " P= ? ? }2 ` ? ? ? < ? 0 ? ? 4 ; ? ? ? @ .text ? t `.data ? ? x @ ?.pdata ? z @ @.idata l ? ~ @ @.rsrc 0 ? ? @ @.reloc ? ? ? @ B ? ? /?R . ?; ?/ ? ? @? ? ADVAPI32.dll G u i d L e v e l F l a g s C i r c u l a r S i z e WERDIAG: Verifier.dll loaded. Enabling Autoverifier. WERDIAG: ProcessStartupSettingsUpdate failed. NTSTATUS: %08X WERDIAG: FDR will be enabled WERDIAG: Stopping Autoverifier WERDIAG: Stopping FDR WERDIAG: AutoVerifier: Failed getting current user registry path. NTSTATUS: %08X WERDIAG: AutoVerifier: Path is: %S S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ P l u g i n s \ A u t o v e r i f i e r WERDIAG: AutoVerifier: Subkey is: %S WERDIAG: AutoVerifier: could not open settings key. NTSTATUS: %08X A u t o v e r i f i e r E n a b l e d WERDIAG: AutoVerifier: could not read enabled flag. NTSTATUS: %08X WERDIAG: AutoVerifier: Enabled flag: %u \ R e g i s t r y \ M a c h i n e \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g WERDIAG: Failed opening registry key. NTSTATUS: %08X E r r o r P o r t WERDIAG: PluginsNtGetRegStringValue failed. NTSTATUS: %08X WERDIAG: SignalStartWerSvc failed NTSTATUS: %08X WERDIAG: NtQuerySysInfo(ErrorPortTimeouts) failed. NTSTATUS: %08X WERDIAG: WaitForWerSvc failed %08X. NTSTATUS: %08X WERDIAG: WaitForWerSvc timed out, failing the call with NTSTATUS: %08X WERDIAG: RtlAllocateAndInitializeSid failed. NTSTATUS: %08X WERDIAG: NtAlpcConnectPort failed. NTSTATUS: %08X WERDIAG: NtAlpcConnectPort timed out, failing the call with NTSTATUS %08X WERDIAG: NtAlpcSendWaitReceivePort failed. NTSTATUS: %08X WERDIAG: Service returned failure status. NTSTATUS: %08X WERDIAG: Failed getting current user registry path. NTSTATUS: %08X S o f t w a r e \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ I m a g e F i l e E x e c u t i o n O p t i o n s WERDIAG: Handle to registry key is null WERDIAG: Failed getting process name. NTSTATUS: %08X A u t o v e r i f i e r A u t o V e r i f i e r C o u n t WERDIAG: Failed reading key value. NTSTATUS: %08X WERDIAG: Failed writing registry value. NTSTATUS: %08X O r i g i n a l B u c k e t A u t o V e r i f i e r T i m e D u r a t i o n WERDIAG: Failed creating timer thread. NTSTATUS: %08X WERDIAG: Failed deleting autovefier enabled flag. NTSTATUS: %08X WERDIAG: Failed writing key value \ R e g i s t r y \ M a c h i n e \ S Y S T E M \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ S e s s i o n M a n a g e r I m a g e E x e c u t i o n O p t i o n s WERDIAG: Not disabling HKCU IFEO look-up because its statically enabled. WERDIAG: Thread failed to wait for the specified time; Disabling autoverifier. NTSTATUS: %08X v e r i f i e r . d l l WERDIAG: Failed obtaining verifier.dll handle. NTSTATUS: %08X VerifierForceNormalHeap WERDIAG: Failed obtaining VerifierForceNormalHeap function address. NTSTATUS: %08X WERDIAG: Failed switching to normal heap mode. NTSTATUS: %08X WERDIAG: Verifier switched to light mode \ K e r n e l O b j e c t s \ S y s t e m E r r o r P o r t R e a d y u?: ??n? ?????WERDIAG: Invalid params WERDIAG: Arithmetic overflow WERDIAG: OOM WERDIAG: Failed creating FDR thread. NTSTATUS: %08X WERDIAG: GetTraceLoggerHandle failed WERDIAG: GetTraceEnableLevel failed WERDIAG: GetTraceEnableFlags failed WERDIAG: Internal provider enabled for Level %u, Flags %lu WERDIAG: Tracing disabled for internal provider WERDIAG: Provider not registered. RegisterTraceGuids failed with %d WERDIAG: Internal provider: FDR did not start yet; Message lost WERDIAG: Failed determining string length. HRESULT: %08X WERDIAG: Memory allocation for event failed. WERDIAG: Internal provider failed to log message. Win32 error: %08X WERDIAG: Internal log message WERDIAG: Failed reading the session settings of updating the process ID. HRESULT: %08X WERDIAG: Failed parsing settings string. HRESULT: %08X WERDIAG: Failed to enable logging. HRESULT: %08X F D R s t a r t e d WERDIAG: Failed enabling trace provider. Win32 error: %08X F D R T r a c i n g S e s s i o n WERDIAG: Invalid arguments: Log path cannot be null WERDIAG: Unable to allocate %d bytes for properties structure. WERDIAG: Failed copying string buffer. HRESULT: %08X WERDIAG: StartTrace failed for the internal provider. Win32 error: %08X WERDIAG: Failed enabling internal trace provider. Win32 error: %08X WERDIAG: Invalid args: The pair string cannot be null WERDIAG: Failed obtaining string length. HRESULT: %08X WERDIAG: Invalid format: expected '='. WERDIAG: Invalid args WERDIAG: Failed getting string length. HRESULT: %08X WERDIAG: Failed copying string. HRESULT: %08X WERDIAG: Invalid arguments: Buffer or separator character cannot be null WERDIAG: Invalid arguments: String buffer cannot be null WERDIAG: Failed obtaining the length of the input string. HRESULT: %08X WERDIAG: Out of resources allocating memory for string buffer WERDIAG: Failed making a copy of the original settings string. HRESULT: %08X WERDIAG: Failed copying characters to pair buffer. HRESULT: %08X WERDIAG: Invalid argument: settins string cannot be NULL WERDIAG: Failed extracting next token from settings string. HRESULT: %08X WERDIAG: Failed extracting next pair from the current token. HRESULT: %08X WERDIAG: Error parsing current pair; Ignoring pair and continuing parsing. HRESULT: %08X WERDIAG: Failed updating settings; Parsing continues. HRESULT: %08X WERDIAG: Log file size was not specified; Logging will not be enabled WERDIAG: Failed reading session settings, cannot delete log file. HRESULT: %08X % s _ % d WERDIAG: Failed appending process ID to log file name. HRESULT: %08X WERDIAG: Failed deleting file. NTSTATUS: %08X WERDIAG: Session settings and/or FDR layer were not deleted successfuly. HRESULT: %08X S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ P l u g i n s \ F D R \ C u r r e n t S e s s i o n A p p P a t h WERDIAG: Failed reading string value from registry. NTSTATUS: %08X S o f t w a r e \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ A p p C o m p a t F l a g s \ L a y e r s F D R WERDIAG: UtilRemoveAppCompatLayerFromList failed. HRESULT: %08X WERDIAG: PluginsNtSetRegStringValue failed. NTSTATUS: %08X WERDIAG: Failed opening session registry key. NTSTATUS: %08X WERDIAG: Invalid arguments; pointer to string buffer cannot be null S e s s i o n S e t t i n g s WERDIAG: Failed reading FDR settings value from registry. NTSTATUS: %08X L o g P a t h WERDIAG: Failed reading log file path value from registry. NTSTATUS: %08X WERDIAG: Get current process ID failed P r o c I D WERDIAG: Failed writing process ID to registry. NTSTATUS: %08X WERDIAG: StartFDR failed 0x%x F D R _ F L U S H _ M E S S A G E % s - % d WERDIAG: Failed concatenating strings. HRESULT: %08X WERDIAG: Failed creating event. Win32 error: %08X WERDIAG: Failed setting event. Win32 error: %08X WERDIAG: Flushing done, done signal sent WERDIAG: Unexpected event response or failed waiting for event ??? DF???+f??9?K????gWERDIAG: AppRecorder: Failed creating AppRecorder thread. NTSTATUS: %08X L o c a l \ { D F 2 B 7 F C A - C 5 B 0 - 4 6 3 8 - A 4 A D - 5 9 F 7 F 7 6 C E 5 4 0 } WERDIAG: AppRecorder: ProcessStartupSettingsUpdate failed. HRESULT: %08X % d - A p p R e c o r d e r E n a b l e d WERDIAG: AppRecorder: Failed creating apprecorder event name string. HRESULT: %08X WERDIAG: AppRecorder: Failed creating event. Win32 error: %08X WERDIAG: AppRecorder: Failed to get temp folder path. Win32 error: %08X W E R WERDIAG: AppRecorder: Failed to get temp file name. Win32 error: %08X . A p p R e c o r d e r D a t a . x m l WERDIAG: AppRecorder: Failed to create temp file name. HRESULT: %08X WERDIAG: AppRecorder: Failed to create apprecorder temp file. Win32 error: %08X WERDIAG: AppRecorder: Failed to register the log file with WER. HRESULT: %08X WERDIAG: AppRecorder: Failed to get system folder path. Win32 error: %08X \ p s r . e x e WERDIAG: AppRecorder: Failed to create UAR executable image path. HRESULT: %08X % s / s t a r t / o u t p u t % s / g u i 0 / r e c o r d p i d % d / s t o p e v e n t % s / s c 0 / n o a r c 1 / w a i t o n p i d 1 WERDIAG: AppRecorder: Failed to create UAR process command line. HRESULT: %08X WERDIAG: AppRecorder: Failed to create UAR process. Win32 error: %08X WERDIAG: AppRecorder: Failed getting current user registry path. NTSTATUS: %08X S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ P l u g i n s \ A p p R e c o r d e r WERDIAG: AppRecorder: AppRecorder settings key is not present. NTSTATUS: %08X A p p R e c o r d e r E n a b l e d WERDIAG: AppRecorder: AppRecorder enabled flag is not present. NTSTATUS: %08X A p p R e c o r d e r C o u n t WERDIAG: AppRecorder: Failed to get current process name. Win32 error: %08X WERDIAG: AppRecorder: Failed to open App Recorder layer key. NTSTATUS: %08X WERDIAG: AppRecorder: Failed to get application appcompat layers. NTSTATUS: %08X A p p R e c o r d e r WERDIAG: AppRecorder: Failed to update application appcompat layers. NTSTATUS: %08X WERDIAG: AppRecorder: Failed to update App Recorder run count. NTSTATUS: %08X WERDIAG: Invalid parameters WERDIAG: SizeTAdd failed. NTSTATUS: %08X WERDIAG: Arithmetic operation failed. NTSTATUS: %08X WERDIAG: Insufficient resources % s \ % s WERDIAG: Key: %S WERDIAG: Out of resources allocating memory for key information structure WERDIAG: Failed extracting registry value %S. NTSTATUS: %08X WERDIAG: Failed writing to value %S. NTSTATUS: %08X WERDIAG: Failed writing to value %S. NTSTATUS %08X WERDIAG: NtQueryInformationProcess failed. NTSTATUS: %08X WERDIAG: Invalid size returned. NTSTATUS: %08X WERDIAG: Registry value %S is not of type string WERDIAG: Failed determining string buffer length. HRESULT: %08X WERDIAG: Failed with integer overflow ? ? ? ? RSDS??????!r?? WerDiagController.pdb H?(?? ?? ? ?Y ?u ? ?? ?/ ? ? ?? ??? ?=? tL?? ?L?d??? ?yu ? ?yL????D?3?? ?Yu ?? ? ?? L?????? ?-u ?%fY ?! ??uc?=TY u3L????? ? ?? H? D[ H?tF?? H?%1[ ?6?=Y u-L?g??? ? ?? ? ??u H? ? I?? H?(????H?$H?$WH? I??H??uE3?3??u ?= ] u? ?< ?? L??H?H?$0H?$8H? _????????$UVAVH?H?@3?3?????(f????E???? ? ?y L????? L??????? ?? L? ??L????? ? ?? L??3??H?(H????A?H?$ ?3 ?yL?~??? ?$H?(L? H?????5 ? ?yL????D?3?Ps ? D9u L????? AD???1s H?(H?t?? H9u?H??? H??3?? ?H?$pH?@A^^]?????H?H?L?L? UH????H?p H?? H3??` E3?3?????H??E?????E?$E3?3??L?$`L?$hL??L?$pD?@f?D L??D???$ ?1 H???? ?y L????D?3?? ?=r ? H??L?$`H?????/8 ??y L????? L??? v??E3??A??$ ?oq ?x0D9e?*D?$0H? I??E3?3?3??$(L?$ ?Iq ?AI?3??HH? &??E3?3??HH?P?*q ?uA??? ?E??D?L????? E3??$xE?A?s?? ??y L????? Hc\$xH?i??L? H?????? ?? H ? 0 H?L?D?L? L?(?lp ??x7????u Hi???H???????E?3?Cp H???wp ??yD?L?G??? ? uA? ??e??A?? H?$`H?0? p H?$pE3??$PD?$HD?$@D?$8D?$0E?H?@A?D?$(D?$ ?? ??y L?M??? ?$|???0 L???D?????????HcD$|Hi???H???$p?H??E????0H?$PL?$HL?$@L?$8L?$0H?$(H?$hE3?D$ ?o ??y L????? = uA? ????A?? A? H?`3???< H?? E?3?E`Px?? ?D?? ?< H?$hH?$8H???$0H?$(H?? L?`E3? ?? PxH?$ L??Wn ??x4= t-D? E?y L????3?? ?? ? ? A??L????D?3?? ?? L9d$`teH? %` L?$`3??0?? H?$pH?t ?=m L?$pH?$hH?t ? n L?$hH??H?t?? ?H?` H3??6 L?$p I?I?M? M?(I?]?????$USWAVH?$??? E3?3?? ^T 3?? L?L?L?wL?'H?/fD?H??!f?%L?fD?5R L?5T ?: H??`m ??y L???D?3?? ?? ? L? E3??A?H?(??H?$ ?, H??? m ?y D?L?????L?M?u L????3?? ?=m ? ?D fD95sQ u?1 ??y L????????L?H?H?KQ E3? H?$ ?, ??yD??L?H?wH???E3? H?$ ?9, ??x??wL?gH?x???. ??y L????????g?v&H?wD??H?J???/ ??y L???????H?wL?H?????2 ?xbL?H? ? ? L+??H???H?tA?f?t f?H?H????u H?A? ?fD?1?ZR E??1CVAI?IR H?wL?oH?b???- ??y L??????o?t}Hi?ig?H?'E3??$HH?? H? T H?$@H?? E3??$8H?C 3??$0H??L?$(L?$ L?5? ?)j ??yL???D?3?? ?Lk ?<?w4H?w?j H??? ? ?yL???D?3?? ?k A?L9uteH? %` L?3??0??i H?H?t?? H?H?t?? H?wH?t?rj ?H?? A^_[]????H?$USWH?H?@3?3????0H?(f????E???} ? j ??y L?????-L??3??0A?H????H?$ ?) ??y L????D?3?? ?)j ? H?0H?Y??E3?A- ??yL?D??3?? ?? ?E3??(H?O??A?E3??$ ?) ?x6H?(L? H?????+ ?x 9} tL????? ? ?? ?????H?(H?t?6i H?0H?t?'i H9}?H??i H??3?? ?H?@_[]?????H?$UVWH?H?@3?3??3?????E???????E???? ? ?yL?t??D?3??? H????H??vh L?(L??3?3?? ??y L????3??QH????H??? H?(L?0H??3?{g ??y L?????H?(H???U03????L???D??_h ?L?F???Ph ??H?$`H?@_^]????@SVWH?` H?>F H3??$P H?,??I?A?H+??\N L?$@H??$0A? H?$ ?~f 3???jf ?? ??N?? H?$0 t?+???$@1CVAt? ??H??A????I;?? ??AG??@??t/L?$DL+?+??H?tA?f?t f?H?H????uH?? ???tf?3? ?H?$P H3??/ H?` _^[????H?$H?$H?$WATAUAVAWH? E3??H?L?E?A?H?? H??H??D9,Au??? ?;?? ?????H?;?? eH? %` D?3??0D??~e H?H?H?u L?D??3?? ?of ? ?? M?3???3 ?f?? ? D??;?E?AE??f93t??fD9+t f?7A?H?H????A? H??? ?u H??? f?uI;? v fD9k?H??f?tH?f?H??E?f?u?fD?/A??9L?[??3?? ???? L?M?teH? %` 3??0?? L?.??L????3?? ?ie ? ?H?$PH?$XH?$`H? A_A^A]A\_????L?SH?`I? I?? 3?????3????E3????? H? I???? I?? 3????? ??y L????D?3?? ?? ? ?3???`[????@SH?0?t??? H?%M L?^??? I??C H?? H??uL????3?? ?jd ?H??? ??u L?????H? ? ?? 3?? ?u L?????L????D??$ ?d 3??0[?????H?H?H? H?WH? 3?9-SL uL?:??3?? ?? ?! ???H? ???f9)t H?H????? eH? %` H+?3??0H?$8f?f??D??qb H?H?u L?R???L?3???0 L?$8f? ?, H?4H???????? N?E ?G?0 ?0 H? ? H??? ?tL? ??D?3?? ?? L?P??3?? ?? eH? %` L?H?03?? ?L?b??A? ?3?? ?? H?$0H?$@H?$H3?? _??????$H?$H?$WH?03?3?H?91vb?Hk? ?+ uOH? D?+?+ L?? H?$ L?? 3????+ ?tL????D?3?? ?b ???;;r??$@H?$H?H?$P?%@ ?H?0_?????H?$H?$H?$ WATAUAVAWH?0E3?? L?L?L?H?u L?}??? ?? ? ?? ???I?A??fD9 t H?H????u ? ?I??H?H+??$`?y D?L????3?? ?Ga ? H?L????A?fE9t I?H????u ? ?I??H+???I=L?$E 3??,LeH? %` H?0D?D??? H?H?uD?L????????M?3???- H?$`?/?, ? A?$x?(M?5???p?@?tx H?GA??D H??G<?0? ??y L????D?3?? ?Q` ? H????L?H???> ?t L????D?3?? ? ` ?@ ??H?L? ???A? ??H?$ ??> ??t3L????D?3?? ?? ?? ??N?@ ??I?? I??'??3?H? %` L?3??0?? ?H?$hH?$pH?$xH?0A_A^A]A\_?????$H?$H?$WATAUAVAWH? E3??L?H?? M?? L?$pM?? A???H?A?A?fD9!t H?H???W ?H?u?I??I?H+?? L?K???? ?= I??? H?H?u L?a???; H?I+??H???? H;?? H?t I?L?E?fE9 t I?H????u)I?D?E?y&L?H??3?? ?k^ ?@ ?? I?H+?????A? ?I;???;A? A?I+?? ??I?B?2f?t fA?I?I????uI?A?fE?&?xKH??I;???6? A?L+?H??H?A??f?t f?H?H????uH?A?fD?'?yL????D?3?? ?? ?A??L?I??3?? ?? ???L????3?? ?j] ? ?H?$PH?$XH?$`H? A_A^A]A\_??????$UVWATAUAVAWH?0E3???L?M?u L?L??3?? ?] ? ?? H?H?u L?v??????A??fD9 t H?H???W ?H?u?I??H?H+??H??$? y L?m??D?3?? ?? ?/ eH? %` H?E 3??0L?H?$? ?X[ H?H?u L?q??3?? ?L\ ? ?? L?$? M?H?M?I?? ??yD?L?p??? ?H??[ eH? %` M?H?0H?3?+??$ H?H???uQ?? eH? %` L?$? H?0E3?3??.?? I?H?? L?I?H?? ??yD?? ?? I?u8E3??.A?eH? %` L?3??0?qZ ?H?$pH?0A_A^A]A\_^]??$? E3??.H;?ReH? %` H+?3??0L?] ?Z I?H?tXL?$ H?H?I?? ??yD?L????? H?????eH? %` L??3??0?? H?I?H?u L????3?? ?? ? ?? ???H????A?H??G??QH???v??A?H?t-L?H+?+??:H?tA?f?t f?H?H????u H?? ?fD?)? H?tfD?(????D?L????3?? ? Z ??????H?$H?$H?$WH?0H?H?r??I?H?I??? 3??33??$ H?f?$ H?$"?$*f?$.?BY H?$ H??? ?H?3??H??? ?uH??? ??H?!??H??pY ?uH??sX ??$H???H??NY ?uH??QX H?$`?H?$@H?$HH?$P3??0_????H?$UVWATAUAVAWH?$??? H? 7 H3??3??L?H???3?????]?]??% M?u L????3?? ?? ? ?? I9 t?H? %` 3?? H?0?rW L?H?u L????3?? ?fX ? ?? eH? %` 3?? H?0?1W L?H?u L?J??3?? ?%X ? ?? H??? I9 ? L??; I??????? 3?9]?? D?H??3???$ H?t eH? %` L??3??0?? H??????, ?????? H??3??tPM?H?L?$ ????y L?C???&H?????I?I?H?$ ????yL?{??D?3??6W H9]?????M?E?E??~?E?M??/H???H? f?u H?0f?u?H??8u ?????r??A?Hk? B?9???9 ??B?9?B?9?B?9? B?9 ?B?9 A?I9 ??????6A??L? ??D?3??tV H??,L????D?3??ZV ?L????3??GV ?@ ?3?H?teH? %` L??3??0?2U H9}?eH? %` L??3??0?U eH? %` M?3??0?? M?teH? %` M?3??0?? ?H?H3?( H?$? H?? A_A^A]A\_^]?????H?$H?$ H?$UWAVH?H?pE3???3??(D??j" 3?D????E???? L?0A?? L? H?0? ??y!L???D?3?? ? U ? ? ? eH? %` 3??0A? ?? H?H?u L????3?? ?? ? ?? eH?%0 L? L?????@? ?$ H?? ??yD?L????? H???? T H????3?3?? H??????E?0 L??E? L????vS H???? ?y L????D?3?? ? T ?? ?yD?L????3?? ?? ?A?L9u teH? %` L? 3??0?? L9u0teH? %` L?03??0?? H?teH? %` L?3??0?? L?$p?I?(I?8I?A^_]????H?$USVWAVAWH?H?XE3?3????8fD????E????L?PE?L?@A?L?H?? L???8H?M??A?E3??$ ? ??y L????7 H?8L?PH????? H?P??? H?? H?8?}R L??3??8A?H????H?$ ?! ??x??8L?@H?? ??y L?R??D?3?? ?zR L?@? L?@M?tH?HM?I????H?H??L????3?? ?=R ? ??yL????D?3?? ? R ?H?t$fD9?t H?8L?H?? ??y$L?????'H????}Q H?8H??Q A??L????D?3?? ?? ? ?y!L9}8t*H????8Q H?8H??? H?8H?t?3Q H?t!eH? %` L?P3??0?uP L?@H?HM?t eH? %` L?@3??0?OP H?HH?teH? %` L?H3??0?-P ?H?XA_A^_^[]?????I?I?WH?@3?3?I???$0I??D$:f?$>I??|P L?$8H?$PH????E3? H?$ ?% ??y L????D?3?? ?? ? ? H?$P?KO ?H?$PH?t?!P ?H?$XH?@_??????$H?$H?$UWAVH?H?@3?3??H?L? fD????E????? M?? H??? L??? H? ??A?E3??$ ? ??y L?R??? H? H????L?? ??y L?????H? H????L?? ??y L?????eH?%0 D?@E?uL? ??3?? ?kO ?@ ??6H? H?)??? ??y L?/??D?3?? ?7O ? ?A?H? H?t?? ??L????3?? ?O ? ?H?$hH?$pH?@A^_]????H?H?H?H?UH?X???H?? H??, H3??? H?$@ H?$H H?? H?? H?$`3?? ? L?$HH?$@? ??H?$H??yL????? ? H?$@H?$`?=??3???L?"??? ? H?$X H?? H????H?$PH?? L????H?$8H?$0 H?$( H?$PH? ;??A? H?$ ?r, ? ?tL????D?3??? H?$`H??????yL????3????? ????3??teH? %` L?$H3??0?? H?$@ teH? %` L?$@3??0?dL ?yL?q??D?3??<M ? eH?%0 eH? %` 3??0?@A? ? L H?H?uL???3??? ? ??5 L? .??L?O??? H??$ ? ??yL?A??D?3??? ? L?E3?3?3?'K H?H?u?!K L?B????$`3??H??D??9 u??? I?????? ??(= u\H?$`???3?????????? H??? ?u???? ?u4?? L????D?3??? ?@ ??&L?G??3??? ?L???3??? 3?H? %` L?3??0?? ?H?? H3? L?$? I?I?I? I?]?????$L?$ SUVWH?(3???H?H=???? ?G??x5H??L?$hH?H???bJ ?xH?;?uf?,^?f?,^? ??H?tf?.?H?(_^][?????H?$3???A???I;??A? ?EG??x>D?H?t*L+?+??H?tA?f?t f?H?H????uH?A? ??H?tf?H?$A?????@SH?`H?$p H?$P 3??$X? ?t{H?$PE3?3??$HH?$p3??$@H?$8 H?a H?$0H?$( H?$ H???? ??y L????D?3?? ? J ? ?3??$pH?t?? ?H?`[?????H?H?H?H?UAVAWH????H?@ H??' H3??0 3??$x3??`??$p? 3?????3? H?$PH?$XH?$`f? f??? f? f?? ?? H??1 L? H??D?3?3?? H?u ?@ ??! ?: A? ?yL?u??D?3????H eH?%0 A? L????D?@H? A??????yL????D?3???? ? L? E3?3?3?*G H?H?u4?$G L????3??A??H ? G ?? ??N?d H? A??? ?u?? L????? L??? ??H? E3?? ?u?? L????? H??]F L?6??H?? ? ??y L?K??? ? H?$0H???E3? @?$(? ?$ ?F H??u?6F L?W???6 H??1F H??? ??? ??y L????? H?? A??? ?u?? L????? L????H?? I?? ??y L??????LE H??KE H? L?? H?$0?$(H???)??H? I?H?$ ?????yL????D?3???? ? H?$PH? H?? H?$HH?$pE3??$@H?$8H?$0E3?t$(?$ph ?$ ?? ?u1?? L????D?3???VF ?? ?? ??N?,H?$PH?t ?? H?$PH?$XH?t ?? H?$X?H?t ?y H??? ?H?0 H3?Y L?$@ I? I?(I?0I?A_A^]??????$UVWH?H?@3?3?H????(f????E???BE ?y L????L??3??(A?H?_??H?$ ?? ?y L????? H?(L? H????> ?yL?7??D?3?? ?/E ?9u D??(H?t?? H9}?H??? H??3?? ?H?$pH?@_^]?????H?H?H?H?UATAUAVAWH?H??H?? H??" H3??? E3?3??$PA?L?$0L?$@D?$8fD?$PH?$RH?$H?$Zf?$^A?@ ?fD?$p?D ?y L????? L?$XH?$0H?-??E3? H?$ ? ?y L????? H?$0L?$8H?Z??? ?y L????? D?$8H?$0A?? ?? H?$pA? 3?? ?u9?VB L?7??3??? ?? ?9B D?A? ??DN?U L?$XE3??$@A?H????H?$ ? ?y L?.??? H?$@L?$HH?$p? ?y!L?Z??D?3?? ?2C H?$H? H?$HH??H??D9,su?? ? A?D????l??A? H? C?? ?u0?t??? C?B ?t? D?? C?B ?ufF9,{t ??;?F????? D?;?fD?,K?.+???D??? H? K? D??? H?H?SM?? H?$pfD9+? H?$`?? H?$@H?$`?yA E?H?$0H?t?? H?$@H?t?? H?teH? %` L?$H3??0?A L9l$XtH?$P?? H?$P3?xA A?H?? H3?6 L?$? I?0I?8I?@I?A_A^A]A\]??$@L?? ?????L???? H????A??? ??7???L?Y??D?3?? ?aA ? ???????H?$H?$3?H??L?H=??? ?D?DG??L?E?x)I?D?M?tf99t H?H????tM?L+?D?L?E?xQI?K? CD?I+?5H?I+????L?+??t? f?tf?I???H????u H?A? ?f?9H?$H?$A???????$H?$H?$UATAUAVAWH?H?p3??E3??L?D?fD???H??E????? H?PH?? L?M?? ???I??fD9 t H?H????? L?I?L+??fD9 t H?H????? H+??I;??2 H?H;?? ? H?H?H?? eH? %` L?H?0??> H?H?u L?K??3?? ?~? ? ?$ H?L?R??M?H?H?L?$ ?????y%L????D?3?? ?:? ?? ?? H?H???> L??? ??? ? ?? H?? H?? H?????H???0 L????E? ??> ??y[L?;??D?3?? ??> ?A???,??A??!A??????A??? ?L????D?3?? ?q> ? 3??teH? %` L?3??0?`= ??L?}??3?? ?8> ? ??$pI?0I?8I?@I?A_A^A]A\]?????L?I?I?VWAVH?@3?3??f?$0I????$:f?$>H??$hH?? H?? I???(?O= eH? %` D?H?03??< H?H?uL????3?? ??= ? ?rH?$hH?$0L?H?$(A? H??$ ?:= ??x?u ? ?A??L????L?3?? ?$ ?!= eH? %` L?3??0?< ??L?6??3?? ??< ? ??$`H?$pH?@A^_^?????L?I?I?E?WH?@3?3??f?$0I????$:f?$>H?t\H?tWI??$< D?H?$`D?$(H?$0E3??H?$ ?X< ??y L???L?3?? ?$ ?G< ????L?p??3?? ?+< ? ??$PH?$XH?@_?????I?I?I?WH?@3?3??f?$0I????$:f?$>H?H?tqH?tlH?tgI??\; H??H??9,Cu?E H?$0A? ?$(E3??H?$ ??; ??y L?c??L?3?? ?$ ?o; ????L????3?? ?S; ? ??$PH?$XH?$`H?@_?????H?$WH?` H?4 H3??$P H?$23?3?? f?$0? L?$0?+A? H??H?$ ??: ??y L????? ? f9D$0v? ?? ??D???$0H?$8H?f?<H?$0H?$8H?L?A?%I?A? f?/f?-w?H? H?r L;???H? ? I?? ?=???y"?L????? ?D?3?? ?!: ???H?$P H3?s H?$p H?` _?????$UVWAVAWH?H?@E3?3??H?H?fD????E????HD?8H?? H?? H??79 eH? %` 3??0A? ?t8 H?H?u L????3?? ?h9 ? ?? H?8H???H?$(A? H??$ ? 9 ??y L????L?3?? ?$ ?9 ? ?t!L????L?3?? ? ??8 ? H? H?t+???H?A??fD9:t H?H????uI?? H+? H?H? ??y D?L?g???H?H;?? ? H?HH?H?uueH? %` L?H?0?Y7 I?H?uL?r??3?? ?M8 ? ?UH?HL?H??/????y"D?L?/??3?? ?8 ?? ?? A??L???3?? ??7 ? ?H? %` L?3??0??6 ??L???3?? ??7 ? ??$pH?@A_A^_^]?????ff ? H; ? uH?f???u???& ???H?(?u? ? H?(??????$H?? H? ? ?" H?? H?$HE3??$PH?$H? H?$@H?$@ tAH?$8 H?$XH?$0H?$`H?$(H?E H?$ L?$@L?$HH?$P3?? ?"H?$? H? H?$? H?H?? H?? H?h H?$? H?i ?? ?9 ?C ? Hk? H? ; H? ? Hk? H? c H?h? Hk?H? V H?hH? ????/ ? ??????? H?? ??????(H?= tH?2?-?+ H9? u H? ? ? H?? H?H?? H?(?????H?$H?H?$ ?H?$H? H?$? H ?? H?$H?H?H??H3D$ H?????? H#??$ H?H?$ H?8 tH?$ H?2?-?+ H9uH?$ H?3?-?+ H?H?????%?4 ????%?4 ????%?4 ????%?4 ????%?4 ???H?[ ? ???H?$H?$L?$L?$ H?hfD$ fL$0fT$@f\$PH?H? ? ? foD$ foL$0foT$@fo\$PH?$pH?$xL?$? L?$? H?h? ??????? ???????H?? ???????H?? ???????H?? ????????H?? ?-??????H?? ?????????8?$( L?d??H?$ H?L? H? ???? H?8????%?1 ????%L2 ????H?(M?8H?I?? ? H?(????@SH? E?H?L?A??? L?tA?McP?L?c?#?c??H??HK?t ?????3??H? [???????% 3 ????% 3 ????? ? B d T 2 p 4 r ?`P3 "?"?"t?"4?"?P L~ ` ?p0P rp0P 4 rp`P L p`0 L~ P d T 4 2????p ?0 R0 d T 4 2p d T 4 Rp d T 4 R????p 4 R?? ? ?p`P* 4 ?? ? ?p`P L~ ? d 4 ??pP ? ? ? p`0P 4 r p d 4 r?pP/ t8 d7 46 4 P L~ ? Bp ` P 0 4 ?03 "tn"dm"4l"h??P L~ 0 4 rp`P7 &tZ &dY &4X &R ????P L~ ? t 4 t d 4 ?????P T 4 r? p ` d 4 rp d T 4 rp 4N L p L~ P 4 r ? ?p`P " ? b 20 ` ? `? ? ? P? h? ~? ? ? ? ? GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW TraceEvent EnableTrace StartTraceW ?R f? H? T? `? ? \g ? |? ? ? WerDiagController.dll QueryOriginalBucket StartAppRecorder StartFDR 2?-?+ ? ???P X? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? < I= ? P= ?= ?= ?> ?> ? ? 5G D <G ? T ? ? ` ? ? p ? ? ? ? )M ? 0M ? ? ? PO ? XO ? ? P jR ? pR ? ? ? ? ? ? ? ? ? C\ ? L\ a^ 4? h^ ? H? ? ? \? ? ? h? c Zf |? `f ? ? ? Ug ? \g ?g ? h l ? l ? ? m ? ? ? Tq ? \q ? $? ? u @? u ? T? ? ? d? ? ? x? ? =z ? tz ? ? ? ? ? ? '| ? 0| ? ? } ? ? ? ,~ ? L~ i~ ? p~ ? ? (? ? ? ? ? n? \? N? @? ,? ? ? ? ? ? ? ? ? @? d? r? ? ? ? ? ? ? ? ? ? V? 2? :? H? h? x? ? ? :? &? ? ? ? ? ? ? n? V? >? ? ? ? ? ? ? ? ? ? ? ? ? &? p? X? b? ? ? ? X? ? ? (? ? ? ? ? n? \? N? @? ,? ? ? ? ? ? ? ? ? @? d? r? ? ? ? ? ? ? ? ? ? V? 2? :? H? h? x? ? ? :? &? ? ? ? ? ? ? n? V? >? ? ? ? ? ? ? ? ? ? ? ? ? &? p? X? b? f LdrDisableThreadCalloutsForDll " DbgPrintEx ANtTerminateProcess ?RtlCaptureContext ]RtlLookupFunctionEntry iRtlVirtualUnwind 8RtlUnhandledExceptionFilter ? NtClose ?RtlFormatCurrentUserKeyPath ?RtlFreeUnicodeString ?RtlInitUnicodeString ? EtwEventWriteNoRegistration ?ZwUpdateWnfStateData 5ZwQueryWnfStateNameInformation ?NtQuerySystemInformation ZNtWaitForSingleObject xNtOpenEvent ?RtlAllocateAndInitializeSid ? NtAlpcConnectPort ? NtAlpcSendWaitReceivePort ?RtlFreeHeap ?RtlFreeSid RtlCreateUserThread 'NtDeleteKey "NtDelayExecution p LdrGetDllHandle ?RtlInitAnsiString x LdrGetProcedureAddress ?RtlAllocateHeap _wcsnicmp fwcschr ?RtlGUIDFromString _wcsicmp _wtoi ?_vsnwprintf JRtlDosPathNameToNtPathName_U &NtDeleteFile *NtDeleteValueKey !isspace 6memmove ntdll.dll CloseHandle VReadProcessMemory VGetLastError ? CreateEventW ?WaitForSingleObject ?SetEvent ?OpenEventW ?GetTempPathW ?GetTempFileNameW DeleteFileW ? CreateFileW ?WerRegisterFile ?GetSystemDirectoryW ?GetProcessId GetCurrentProcess ? CreateProcessW iGetModuleFileNameW KERNEL32.dll }NtOpenKey ?NtQueryValueKey 3NtSetValueKey ?NtQueryInformationProcess DelayLoadFailureHook ?ResolveDelayLoadedAPI 4memcpy 8memset ? 0 ? H `? ? ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? . S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n \ F i l e D e s c r i p t i o n W E R D i a g n o s t i c C o n t r o l l e r r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) T I n t e r n a l N a m e W E R D i a g n o s t i c C o n t r o l l e r ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . T O r i g i n a l F i l e n a m e W E R D i a g C o n t r o l l e r . d l l j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? ??? 0 x?? ? ????????
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de