MZ@ !L!This program cannot be run in DOS mode. $zU>4>4>4>4`4?;4:949:4>?4,&4=?48?4Rich>4PEd Q=R"  di`5 ܔ<( H jX!(п8.text3 h.rdata88:@H.data@.pdataH @HPAGEa;0< `PAGEMSG%p> `.edata5  D@@INITzP .rsrc(`@B.reloc(f@BH\$Hl$Ht$WH@3AIl$0H;teH$(9s/H$@2Hk@H\$PHl$XHt$`H@_Í,wHHH\$0H|$ 3HWH ~DEt$HHH9t HA;rHH|H ?\FH\$0HH|$ t3H(ø4H(ÐH\$WH 3vHWH D:Et&H8HH9t HA;r HH|H H\$0HH _ÐH 3ۅx3H [ñ4 H؋̐H(Ht3H(ÐHHHD$pHD$8LL$0LD$(E3T$ LAPH  HHÐH\$WH HHH6WLAHH2H\$0H _ÐffH; IuHfuHS9BHJÐH%UH; EDHrHA8UÐLH2HB8UÐH HYHHtIxHtH3H [ø @̐HqHt HP8HtHÐHQHt HP@HtHÐLH+IOsXMItDH HIHAuItf HIȈAuIffffffHrpكtL+BoAIMII vIo oL H fAfIIuOffffffffffffft IȈHufHr D @HuHo oL ffIH@oD oL fAfIuIIs $MIyIIOsOMItHD HIHuItfD HIȈuIffffffHwtHtL+HoD@HMII vIoD oL H fAf IuTffffffffffffftHɊ IȈufHwH D @uHoD oL fAfIH@oD o fAf uIIs $MI~HIr,IIIGs`MIIITIuItDATIufffffffffffffffffffffكtL+HHMIMIItIJ IILOAHHQHQHQHQ HQ(HQ0HQ8H@IuIt ATIuÐH\$Hl$ VWAVH03HDH8uXH;I 9=u#H\$`Hl$hH0A^_^Ld$PL|$XH \D5L6DDEIH;0tD;WH ZDLDAtD;wdA9=Dt A;uEt|H ˲ͲL|$XLd$P̸A@H@AH @IIIDIDIDIDlAHE;ttH 'gH V@"H DLDE;sAH @I;4usAAr̋̐HAKsecH%wH HL$0HD$8H;Hu9HL$03nt#HL$0H; rN3=-rH [H;tH'tHT$0H6@HtHLD$8HT$0AHԱ̐HpHH3HD$hH3HL$X3HD$`HL$HHD$PHL$8HHD$HHCHD$PH&HD$X3HD$`HwHMHD$HHD$(HD$XHD$ LL$8E3APH IHHD$@D$0؁ttHL$hH3rHp[yLSHpHH3HD$hHIc3ICI!CICIKHHD$HHCHD$P#H:HD$XGHD$`HHLHD$HHD$(HD$XHD$ LL$8E3APH 3]HHD$@D$0؁ttHL$hH3Hp[y̐H\$Ht$WH@IHHhMhhAZhLAMunLHH D$0D$(d$ LL$PdH\$@Hl$PHt$XH0_ÐHAE3HSH\$WH LOH3HM*DH Ht4$H;s4HH9C"DHHCHG3H\$0H _H9SuC D̐LSVWATAUAVAWHHH3H$MELLH$8H$@HD$hH$HHD$`H$XH$H$`Ic3IC!D$pHD$xIxI!CICIK%H<H$FH$H$HHE΋$0D$pH|$xH$H`HC>HL$XH$HD$PHL$`HL$@HL$hHL$8HD$pHD$0Ll$(Dd$ MMH$H$b$H$xH$HH$HC3H$H3$HA_A^A]A\_^[ÐLHH$ICH$ICd$`H$ICH$ICH$ICH$IC$D$8MKMCE3ISLAPH #HĈÐHHtHHtHÐHHt H@xHtHÐLMt MRHMtIÐHHt LP(MtIÐHaHtLMtIÐH=HtLMtIÐVWATHXEAHH{Z@u~H;obZL|$PE3@XZH$HH;L$L$H [ Y;ZL5NHII@3L$L$H$L|$PHXA\_^[É̸ ̹̐H\$WH0Hd$HًH\$PMH;>YAKseZӹmHD$HHXAE3HdXHD$HH\$@H0_ÐH\$Ht$H|$ AVH0L3wXAKsec֍OHHD$HHtjHJ]WS,HCL0H pHK0HD$ LE3H ν@H\$Hx"H\$@Ht$PH|$XH0A^ÿa]HKH9tH\$Hy?]̐H\$HL$WH HHT$H=t!,_DD$HEE_3HH\$8H _ÐH`HH HL$ 3HD$ HL$8HL$PHL$XLD$0H˺D$00D$H@HD$@ÝH`[ÐLHXH$ICH$ICMKECLISH E33HXÐHHXHhHpHx AVH L^H WT3߅H5HȋHH9 \=;rՋ y;L=HLt{DXLHZEMAD;:N D3w5H ÚŚH\$0Hl$8Ht$@H|$HH A^DH5l̐HHXWH@3LHMȍWL@Hx xHL$0؅[<H\$PH@_ÐVWH eH<%@HHHAH;;jHH;;HL$X;HL$XE33HL$Xt;H@LL$PHLD$HH#q;L$H=[ 3H _^[ÐDisconnectRpcConnectionCallback: RpcAsyncCompleteCall failed: 0x%lx DisconnectRpcConnectionCallback: Async call failed: 0x%lx, LSA handle %p DisconnectRpcConnectionAsync: RpcAsyncInitializeHandle failed: 0x%lx  @@@@@@D SspipProcessSecurityContext: Too many input buffers: %lu SspipProcessSecurityContext: Null input buffers passed SspipProcessSecurityContext: Too many output buffers: %lu SspipProcessSecurityContext: Null output buffers passed SspipProcessSecurityContext: Failed RPC call: 0x%lx SspipProcessSecurityContext: Output buffers count too large: %lu vs %lu SspipProcessSecurityContext: Output buffer %lu too small: %lu vs %lu SspipProcessSecurityContext: Replaced context handle %p:%p SspipProcessSecurityContext: Failed API call: 0x%lx SspipProcessSecurityContext: Extra buffers with NULL input SspipProcessSecurityContext: Extra buffers count too large: %lu vs %lu SspipProcessSecurityContext: InputBuffer %lu changed: %lu, %p, %lu \Device\CNGLoadCngExtension: Failed to open CNG device: 0x%x LoadCngExtension: IoBuildDeviceIoControlRequest(IOCTL_KSEC_GET_BCRYPT_EXTENSION) failed LoadCngExtension: IoCallDriver(IOCTL_KSEC_GET_BCRYPT_EXTENSION) failed 0x%x LoadCngExtension: IoBuildDeviceIoControlRequest(IOCTL_KSEC_GET_SSL_EXTENSION) failed LoadCngExtension: IoCallDriver(IOCTL_KSEC_GET_SSL_EXTENSION) failed 0x%x LoadCngExtension: IoBuildDeviceIoControlRequest(IOCTL_KSEC_GET_DEVICECONTROL_EXTENSION) failed LoadCngExtension: IoCallDriver(IOCTL_KSEC_GET_DEVICECONTROL_EXTENSION) failed 0x%x No extension to handle Shutdown notification[%d] Mem free : 0x%p Failed to init security interface: 0x%x Invalid Credential Format: 0x%x (SCH_CRED_FORMAT_CERT_CONTEXT with credz not allowed) Unknown Credential Format: 0x%x \SECURITY\LSA_AUTHENTICATION_INITIALIZEDKSec: Failed to open event, %x KSec: Connection failed, postponing KsecFastIoDeviceControl: Control 0x%lx from process 0x%p denied KsecIoctlAllocPool: Bad params: 0x%p 0x%p, %lu KsecIoctlAllocPool: Output buffer too small: %lu KsecIoctlAllocPool: Failed pool alloc: size %lu; package 0x%lx KsecIoctlAllocPool: KsecInsertValidAddress failed: 0x%lx [%d] Mem alloc : 0x%p; size %lu KsecIoctlFreePool: Bad params: 0x%p, %lu KsecIoctlFreePool: Bad address passed: 0x%p; package %lu KsecIoctlCopyPool: Bad params: 0x%p, %lu KsecIoctlCopyPool: Bad address passed: 0x%p; size 0x%lx; package %lu [%d] Mem copy(%lu): 0x%p, 0x%p, %lu [%d] Failed mem copy(%lu): 0x%lx: 0x%p, 0x%p, %lu KsecIoctlDupLsaHandle: Bad params: 0x%p, 0x%p, %lu KsecIoctlDupLsaHandle: Output buffer too small: %lu [%d] Failed handle 0x%lx dup: 0x%lx [%d] Handle dup : 0x%lx -> 0x%lx KsecInsertValidAddress: Cannot get size for a pool range KsecInsertValidAddress: Failed to query VM at 0x%p: 0x%lx KsecInsertValidAddress: Queried VM is not private: 0x%lx Range added : 0x%p <-> 0x%p; %lu [count = %lu] KsecRemoveValidAddressCommon: Required address not found: 0x%p KsecRemoveValidAddressCommon: Not removing readonly address 0x%p Not removing readonly address at sanity check 0x%p Range deleted : 0x%p <-> 0x%p; %lu [count = %lu] KsecValidateAddress: Range not found: 0x%p <-> 0x%p; %lu KsecValidateAddress: Range not writable: 0x%p <-> 0x%p; %lu Range validated : 0x%p <-> 0x%p; %lu [Req: 0x%p <-> 0x%p; %lu] KsecIoctlClientCallback: Bad params: 0x%p 0x%p, %lu KsecIoctlClientCallback: Output buffer too small: %lu KSecHandleCallback: No extension to handle callback KsecIoctlAllocVm: Bad params: 0x%p 0x%p, %lu KsecIoctlAllocVm: Output buffer too small: %lu KsecIoctlAllocVm: ObReferenceObjectByHandle for 0x%p failed: 0x%lx KsecIoctlAllocVm: process 0x%p is not a protected process KsecIoctlAllocVm: ObOpenObjectByPointer for 0x%p failed: 0x%lx KsecIoctlAllocVm: ZwAllocateVirtualMemory for 0x%p failed: 0x%lx KsecIoctlAllocVm: KsecInsertValidVm for 0x%p/0x%p failed: 0x%lx KsecIoctlFreeVm: Bad params: 0x%p, %lu KsecIoctlFreeVm: ObReferenceObjectByHandle for 0x%p failed: 0x%lx KsecIoctlFreeVm: KsecRemoveValidVm 0x%p (0x%p) failed: 0x%lx KsecIoctlFreeVm: ZwFreeVirtualMemory 0x%p (0x%p) failed: 0x%lx KsecIoctlCopyVm: Bad params: 0x%p, %lu KsecIoctlCopyVm: ObReferenceObjectByHandle 0x%p failed: 0x%lx KsecIoctlCopyVm: KsecFindValidVm 0x%p/0x%p (%u bytes) failed KsecIoctlCopyVm: KsecCopyVirtualMemory 0x%p/0x%p -> 0x%p/0x%p failed: 0x%lx KsecIoctlInsertProtectedProcessAddress: Bad params: 0x%p, %lu KsecIoctlRemoveProtectedProcessAddress: Bad params: 0x%p, %lu HHXHpHxLH UATAUAVAWHHPI ILH--=-=-,-HHJLBHRE^(HEIF AHMLEHUD]HHEA-@uH DDAE#s-DQHAAHg-3{I EEW-G E;W-3SH AEG-B A;Y3+EEB);(-3J;-3HHH -MHxHEЉE܉s4CHCt4AH{E,IDHE,A 7HMEC t4AH{E,IDHE,A 7HMEC0t,AH{(EubIDHnEuTA7HEHC@Ed,K43L\$PI[0Is8I{@IA_A^A]A\]oAF똃̐HLH L@HPUSVWATAUAVAWHhH3MMHHEgDH}DH}H}}H}H}H}H}H}}H}Hd-H:I8MtI9=S-L=YLq3H9Mt9N@EAF,B#0I9t0AN MHH#EFIHM3I9Nt2AN MI$HEFIVHM3H9Mt9I9N t3AN( MLHEHEF(IV HM0Lu3M,4Hu3I6H}׋}gHu3MupMu5HUH5HEHu[HUH5HEHuOHuTaHĈA_A^A]A\_^[]3 '11IHHH̐H(%= tO;5[;6 ;m7t t--t/t6H(úb a  ̐H\$WH ASeTIHWHHtLG3H9HH\$0H _ÐHHXHhHpHx ATAVAWH I "ILHH=&A0;uH[DK,A'DuAA;u"O@AA;&D3DAACE#B A;&3pACE;&3KAC(Et4;&3&HEHt&A4$HuAF,CF H;Hn,t:+ƉFACD{,;&HDHUACD{,'&HCFH{t;+ƉFACD{, &HSDH ACD{,%HC(FH{ t7+ƉFAC(D{,HS DHAC(D{,urHC,F ?uG@F(H8%3H\$@Hl$HHt$PH|$XH A_A^A\#J#g#A#rA#̐H 3L=U#A=uyHr/HE9H@w%A,tD9IwD9IwD9I(w H [ ̐H\$LD$HL$UVWATAUAVAWH03HMDLMȋDDLT$ HtHHf9iu;c"MtLIfC9\uuD;G"MtLIfC9xuD;,"M "DEHCAVM>AOM8ABMuAH4EHH$HH!D3HH$HT$p0HH@HHHqHHt(iHHHpHD@MrHAH4FMt,Dq HIHpHHD@ MAHA H4FH$Ht)Dy0HHHp(HD@0M HA0H4FM!HA4H\$xH0A_A^A]A\_^]D̐H\$LL$ UVWATAUAVAWHHpH3IMHDHUHUHUHUHUHUDHUHzf9H\qy3HteIHf9_uP ]HEHODHHMH]\Hy3Ht fHxHHtf9tHf9 LuHE@MHD$(HEXHMHHD$ LmHHMHt~MuJHME3HuHMMuAMuFHEH$H$HpA_A^A]A\_^]{I' II ̐HT$HL$USVWATAUAVAWHHXH3MMHUHUHUDHUHUHUXDHU`HUMtAMtAHt#LMLEHUHu؅ HEPHt"LMXLEHUH]Lu؅AIHH]Є!HUAH!MtA$LeXMtHME3I~!AE3HtHܼHEHtH˼HEHtH躼MtI譼HEHtH蜼MtI菼Mu)H;"HXA_A^A]A\_^[]LeXxIY̐H\$WH@HHHL$0AnxHL$ H`xHT$ HL$0DEvH\$PH@_ÐH9HtLMtIÐHHtHHtHÐHHXHhHpHx ATAVAWH 9MLH^.AdR.Q(C.DALE-D;A .(AKsecD4A7wHH-3HDBPUHoPCt1H{t*GHHH+HGDCHSD޼CHC(T-C8G8C+.3H\$@Ht$HH|$PH0A^ÐH\$HL$VAVAWH@HE3H%1 1HzH9)0DAQHI0HCD9{@0H LH3L:LLt$xHt$pH;&.0DCHIQDH\$`Ht$pLt$xEM0=M0AH\$hH@A_A^^ÐH\$Hl$Ht$WAVAWH@EHHH;\0rAH Ar 3ۋӅ0LIH;8r\H;hwVEtH @A9\ 09A 0H AqqH\$`Hl$hHt$pH@A_A^_AH;r0̐HQHt LPXMtIÐH1Ht LP0MtIÐHHtHHtHÐH\$Hl$Ht$WAVAWH HHpL=AIApAE3HHAIϋA;tpp33L%L K9tuDKpX3̐LI[IsUWAVHH`MHH4M44A3HHqIcH LHEE33IC"qH]3Hp3HE E3E3HD$0HpD$(HHL$ HoHˋo3GHM HeLMHUE3D$(HED$ o3DOLEHM d$ H;؅t3HEIHE@3L\$`I[(Is0IA^_]ÐH\$Hl$Ht$WATAUAVAWH AILM<LM;3unH NknADHI]A;u 3;X3H=߱DD$pL ԱN,NdJlN|FD H ݲnnH\$PHl$XHt$`H A_A^A]A\_þ̐LI[Ik WATAUAVAWH@3HH3 3HoH I[LICE33ICnH$D29_3L5ίLLoL5mH CmGHHADH͉D$pA;tfD$pMMIIHD$ g2H llH$mHߋL\$@I[8IkHIA_A^A]A\_9up2"̐H\$Ht$WH@L\$pE3HK<LT$hI;rUJH;rLHmHH;w=H;w8Mt HD$hHHD$0DT$(L\$ mDAH\$PHt$XH@_ø̐H\$ELHLL;rDDH E;/23Et&HH;YuL;r L;YwH\$H(A;rރ̐LMtMMtIÐH(3HH(ÐH1Ht L@ MtIÐLI[UVWH0HHM3D3HzlIcH LICE33ICTlHl$`2H$kHSHHT$PHH2Hd$hLD$hHT$PAH`k2HGl3H\$XH0_^]ÐH\$H|$ UHl$HHbHM'3H}olLMgLEoHM'Kj؅0HM7E33:jHUgHEHD$@HE7E3HD$8Hʮ@|$0E3@9D$(HD$ jH]0HMgHi=[0r0HM7E33iHUgHEHD$@HE7E3HD$8HH@|$0E3D9D$(HD$ iH20HMgHzi=)0@0HM7E33FiHUgHEHD$@HE7E3HD$8Hƭ@|$0E3H9D$(HD$ iH/HMgHi=00HMoHthL$I[ I{(I]ÐH(H%XAKsec jHHt(3AH&%3H(ø̐H H%ҬKsec0DùiHH/DúPiH 3HHTHO/A0萲%Q%F%;%03APH+Z% 3H [ÐH\$WH HH 'HHH\$0H _&'̐ffH+Ir"tf: u,HIuMIuMt: u HIuH3ÐIt7HH; u[HAH;D uLHAH;D u=HAH;D u.H IuIMItHH; uHIuIHHHH HHH;ÐE3LɅt\r HH9tKrR$,@uHAy8IA;w0tDAAIDIuA@;u 3AD>Ð)%gH(MA8HIH(ÐH AHLDLAtA@McPLHcL#IcJHCHHKAt HLL3IH [\̐HHXHhHpHx AVH MQ8HMAHIHHIILCVD[DUAA#AfDDEtLMHHH\$0Hl$8Ht$@H|$HH A^Ð%Rf3ÐUH@HHfH@]ÐUH`HHefH`]ÐUH0HHIfH0]ÐUH0HH-fH0]ÐUHHHfHİ]UH0HHeH0]ÐUH0HHeH0]ÐUH HHeH ]ÐAEt XAJD;EuB3ÐBDMAÐHL$XH$HL$Pd$HHL$`HL$@HL$hHL$8HL$pHL$0Ll$(Dd$ MMH$3PLD$HHT$X3Pp̸@ԨLD$HHT$X3P bA A] MtE tHHEHHEHCD̽D9= tDH D9=tH* D9=tDHC չD9=tH_e 鱹t؅H$  H$PH$(PH$H$L$H$HD$xH$xHD$pH$8HD$hH$HD$`H$HD$XH$HD$PLl$HH$HD$@$(D$8\$0H$HD$(H$HD$ L$L$H$3ARL$L$L$鸷=cDHc)y=<tEMHQAHFA 9 rDHL֧鄷=t1EMHH$B ȉL$ F EH`#A sL$xM L$MCADEPH`FL$+DH%uEHQEDH*IMBD$(JDHD$ FLDHDH=$v.AHH$HLHt HAD;$rH$Hɶ̸HHCHGH;IHKHWPЅxH H̸" =t+H(D=աtH< ~̐HL$05D̿5spAKsecHHU_HHtNL3HxDݟHIHH ϟ3]H5-6hHM f9ngHP.3ɅuH2'3ɅMtIHfA9L]uفwaHrDII+D;sf9 u AHArAtH-u`LEHU@H(L}3Ʌt8 MMm LLLS}@tL ]E@3HHEHuDDDIAtDCHDM|HMLEHU@'3ۅ}@HELpfA>,AFIAF 3ff;f9CHCH+}}u HC H+x}HK3LHEHSDCHH辢38HR,Lh3LHEHuwLAN MAHEHu LEFAVHMIDMIH\LZHtzIHHHf9xuv  }LHEHuLmLuCIDHM¡\IYLHtfIANH5rMtIMtI?HHLer MIEHLHfE9|uu3IHI/H!̐HfA9DuLHD$ ; HD$ A@HHHp8HDB@IMʠAf0DIAD;DYDQ IA@;A;AHA@ ;A;AH,A@(;oA;fCA;YA;PEt`D;=A@$"KDHE;fD;f;D@D@D;@E;E̋G$uCOpHHEHtbGAD$tDHwGA$ EAAAKIEHH{8ڝHK8H_轛Hc8PHHt 覛H'HOHt 蔛HgHO H*}Hg HUPHMHM&rhMAHtHHtyI+Hy̐ QI3}HE;}|F$uu3Mt 9~usf9~,um9~ t'JHHV DFHH轛9~LNxI$HtkVDFHH茛 DLHEHt4HFft2VDHMNH}HϺ\fH aHV DFHH}3Hf9~u,f9~u&K HUoHHHtH@@@@H[LEHULm3H3HfA9D}u }qHMoHH]DIHM耚V N,;ƒʉUg'3LHAfAF$AG9NuAG9N uAoIHA+AGF fAG VDF HF HHA+AGF,ffAGV(DF,H˙}g3L}}Mt I讗HuLEHUhLmt,L}LewLu HfA9t]uv9 ]IHu qDIUHM%OI3HtAVL!3&INHtAVM 3H9Et(IN HtAV(LE HEHEׅJV@HN8LE 3ɋ؅HEHEH]o4N@ M3LHEH_DF@HV8HM@3Df@3MHEHHHtLIfB9 xuDHEwHHtHHf9 puLMMtHHfA9 QuѿHUD;;;A 7 M{LHEHHȅt(H<HEwHLHMߺ\HfHHEoEHMZH}wHEHHEHt =3HHEo3HHt %HEoH8EN HuoHHHtH@@@@H L}LewLu}gHuHEoHHt譔HEo3HI $Ht 薔I$$M-IH!wI&LEHU,Lmt rH3HfA9t}u }HMoHH:DIHMHu׿HtsL}F} DED; AHHEHfEfBAfD)pJHJfDBBH蘕DE3DƉuAT$ AP;ƒʉUg:LHfAAF,AGI9vuAGI96uAoHUE3IwHt!HA+AGEDfAG HEt!HUEA+HMAGfEgݔ}gL}}Mt I’LuLEHU|LmtLewLuHfE9t]uvރ ]@LuIH)LewH]oI$Ht f90H;Ht+Ht HH3I $HI4$HH LEHU=K}cH Ht躑H3I $Ht 詑I4$Hu\HKH3LHtIfHHf9Lpu;n u0I$H_DIVHMAHu3HHf9 Xu;v Lu}gQ ]HMoHHtHDHMHu}g{3IIǐtMH3H诐iMH3HH蔐d6d;8 ;ftZ tR   `    #t@4^_taG j  `! V;gtGjTk;tr5t(t   3t"[ $ 3;tui]j~ A$BHЅyȁ   4 <t 뜺? F t[|lt/P ^W T̅"H{=t]E3HLH{0G(HHH+HG0DC(HS0IJz=]t H/ ̐HwH9-H$@"^GHDLȹ;H@o0tDL$xLD$pHD$0HHD$ @+/LH@08H@#1$e=AtHE #=tL DCHD$ 麗L DCHT$ H镗=ˉtT$ MLH( ĩ=tHEf#Q sH HDAKseZ=UtDKDH=*tHD3HDDCHյLϹD$ =׈tT$ MLH ̐HL$H3D3ALL$PHT$HE3HD$(D$ Ex 3wH;=v$D9=OtHDLL$0AHHL|$(HD$ E؅y'D9=tHDLǹDD$d ̐AHH;\L;TL;\A9=A}DH9=&}HɤHM7E3E33H|$ }9]9=|vH9=|tVH.CHM7E3E33H|$ 59]9=|.HZU9=|tH_HM7E3E33H|$ 8]9=P|HDù̐8H%|̃= |tLHDȹ={tnLD$PHL͹t$ O={_LCHLϹD$ {=={tDLH/U ̃=c{tHzD-3̐H\$Ht$UWATAVAWHH03AMLLE]DD+AvAt 3fEE]LEHIIEHLEHI3Ã?3EH3%3؉]AvJLEHItrEH 3%3؉]Av"LEHIZtJEH3%3؉]HUEI~;+H\$`Ht$hH0A_A^A\_]3̐HLH;r3HI#t<-t./~9~@~ڃZ~ Aw͍AAAAA?A>ÐH(Hd$@LD$@HT$8t3HL$@A{H(ÐH\$UVWATAUAVAWHH ME3EEEHu W7DSt_tt=uH LHtHHfD9AuEHt艣AD~A. LmADb:LrKËFHH@@HHMXHEXatett!ulHUHHMXA^DEHI$FHMXHAHH fAHMXHMXI!EIW IVAHMXHEX3IufH\$`H A_A^A]A\_^]ÐH\$UVWATAUAVAWHH0E3MLEDmXDm@Ht\IIfF9,QuIvHf9@uBfy@u;J4QHAHMHHEWtA~t5WM,$MtIxH\$xH0A_A^A]A\_^]HML MHL+fA9uIHI|H HMB UwHHuLE@HMAHLLxk_DM@AIAHL;GE>HMMHD L{, fF,?B U HHrLEXHMAHLLxDMXAIAHL;EHMMHM>fF,;6nHL@DKHMHLl`H9uVAM4$`̐H\$Hl$Ht$WATAUAVAWH E3MIHHAEE)HuHu HuAAHuHt\1HIIfF9luuAv B u舱HHu EHHMx\H0Ht HHfD(fHH#fML#Ht fHH#Ht fHH#AHH޹tAIH̹tAAHtHvHl$XHt$`H\$PH A_A^A]A\_ÐH\$Ht$H|$UHH@33IfuHEEfEI0r QfUfUHMHUHMA/؅x.MBHHuDEHUHRwH9ut HM`/聯H\$PHt$XH|$`H@]ÐH 399fy0fz0rDAEt Bu EujBucN HIQH+QuIQ H+Q HuCAQf;Qu8EQEt Au Eu#AuD‹HK DًH [ÐH 3Hu3H83ËH [ÐHHXHhHp HPWATAUAVAWH HHE3E33ͱ؅x-AA;G$puX HD$XH MtIMtIHtHH\$PHl$`Ht$hH A_A^A]A\_鿭OHD$xfD\$0HT$0Ht fD9XHGLL$(LD$ LD$pMHHHHXHhHpHx AVH IALDуoStmtSt9t|HA HHhH+ HHRH HH<HHH&HHHHHHHHH tntTt:tHHHPHvHH`H`HHHJHHqH4HH[HHHXE?:!tmtSt9t HHHHHHHHHHHHHxHHHbHH t\tEt.turH7HHHaH$HH@NHHH8;HHH0(HHH(HHH3Ht/Ht;wDHI`d3#Ht >A薭H\$0Hl$8Ht$@H|$HH A^ÐA;r#AHI;wA;rA3ED^3DًEtL _MAM9t5I A;rD_Et*L _IQL9tH A;rËHJÐH\$Hl$Ht$ WH HH `HH=1__D@D;r~AsuAйAKsecH#HHtUH-^Ht!D^HHIb3H ^H^H ^HtH<3} v2_#;u3ȋ#;tUHH= wHT$@Hј؅x2 A^HD$@H;sH <^H<uHVlΛ(>Lj̜.BZvڝ&>LbzԞ$6JbkKSEC@X8Y3@YJHNegotiate KSecDDKse0Kse1Kse2Kse3Kse4Kse5Kse6Kse7Kse8Kse9]+H`0R3qq7I6`|XR[(P@p@p0@ 8r PP (0!cp@<Dp04p@<Dpp@n0,(p@ EPH (pAA8D X!hA@,hp p@     (P 0h8i@jH(P0Xk`pA!C!!A(4!8@ p@ ( pA@np@0 4X8 (  ( (H0I8P @0 H` P0X`h(p(Px08P9pA!!`A A!A ,AP, A0 1!p!1!00@ p@ ( pA@J0p@0 ( 4@ (pAQV WX!1!d!05x!p!0!0@J0p@@ ( DP (pAQ !0!1!5 xdd!t!p@ (p@ (    pA18(!p0!dd@,(p@  ( 0 ` pA01!@, p@  @A P ( 0 8@ HPPPXP`hPpx pA50C!5X0!7A@!Ap|1!!A 000@n8\(p@   (P()0pA02P5BnLNR"\ \ \0000A)[ \)T[0A \[(UU[@6\[\[[@ 6\[ \[ [0Ad0AX\@ [R[6[!L\[6[4\[!L\[6[b \ \0A\0AP+ )0V"W0X66[%\@6[\\[[0AR+ )0 \[ @66[%\%\6@[0Ab0[L[% %\% %\8L66\[0A&0A([@6\[$[LL\[p[L\[[L\[6@[! L\[@\[@ [ \ \ \B \0 Lq[0Ab \H82xF A HP!P! (p0H08@D ApH08@ A"pH00@,$G G&H .P! Hp(Hh0@hF Ef n v H  ( 0H8 H@ HHAP!Xp`H 0@D A n pH0@G G nX   (H0H8 @( H PAX `Ah\ApP!x!P!pH 0@D A  n pH00@E C n H! (p(H 00@E C n H! p(H (0@F A n  Dp H (0@F Eb n  p H 0@F Er n H H  ( 0 8H@ HPP!PP!X P!`hP!p xpH 80@X"G G n AA  (p0@0`ȭ2OR`J)< ]+H`(]+H`/ÿ(8Gaqj 0d T 4 rpBpP"<>">>?T@T@@@AAB$BDTHJxJJJKGHL$(=# MxHt HL$ #HL$0H3fH@[ÐH\$WH ILlHHD$HM;H BH;3IHKLD$HPxH HHL$HHOH\$0H _ÐHXH$HD$HH$HD$@H$HD$8H$HD$0$D$(DL$ ME3=HXÐSVWATAUAVAWHl$HHH3HEHELuw3HD$P3LHHL$`MLAMHD$*D$2fD$6HD$:D$BfD$FAfDL$ HT$XHcf|$(f|$8HH|$HD|$$fEM@Mts@8I~3HtYAFHf;LGuJDHM3 LD$$HT$HHMH}EfHt$H3Dd$$ID$H3HHD$XHt@8wAKsecHӹpLHD$@Hf\$:H\$`IDHS=HIF/fHMDEEIUH AEHHH3HEA8HIHL9,-D9--H HIHڋD$dI\ADrs;5KuqEt-IHLMtH vAHIuE3H D=VAPD-_ь=HډHwA̐\SECURITY\LSA_AUTHENTICATION_INITIALIZEDEntered AddCredential Principal = %wZ PackageName = %wZ AddCredentials API Ret = %x GetUserInfo GetUserInfo scRet = %x EnumeratePackages Enumerate scRet = %x QueryPackageInfo QueryPackageInfo scRet = %x EnumLogonSession EnumLogonSession scRet = %x GetLogonSessionData GetLogonSessionData scRet = %x LookupAccountName LookupWellKnownSid LookupWellKnownSid scRet = %x GetBinding(%x) GetBinding scRet = %x FindPackage FindPackage scRet = %x lsasspirpcCallSPM: KsecCallRpcSPM failed: 0x%lx No extension to handle IOCTL 0x%lx Assigning package %ws index %d Could not find builtin package %ws Could not find deferred package %ws Possibly invalid handle passed to DeleteUserModeContext (incomplete? %lx) H\$ UVWAVAWHl$HHH3HEE3HMHA_HM3DD}f9 HHL$pHD$pLD$@HL$0HD$PD$@0L|$HD$X@L|$`L|$hxcHL$0E3HL$0zftHWHMDALL$8HML3Lt$ !A=aDHMH3H$XHA_A^_^]ÐH\$Ht$WHIHHfLBHL$XDȺȇ3ۉD$T\XLL$ HT$ AHΉ\$HHD$ BL$PID$LL$I[IsI_ÐHHXHpHxUATAUAVAWHH E3LHEL* D9-"PHL$ 3A*D'HD$ 0XHD$HfDl$PLl$XD$`H]D;HWHMEHD$hH]IA+ tHD$ f+f\$"f(f\$ LD$ HT$ EuFT$LxڅxHD$pID9-_L$ I[0Is8I{@IA_A^A]A\]HO%o̐`uI ÐH 3Ð3ÐHHXHpHx UHH HH@H`3HL$ 3A95HD$ HD$Hft$PHt$XLD$ HT$ H|$`xx|$LxpHL$hHT$hHH ÃP((I)(A )K(I0)C (A@)K0(IP)C@(A`)KP(IpH)C`H)KHu()95uTL$ I[IsI{(I]Ð=5HLǹy&#AHeHDǹN&H9&WHOAA:A&HsDù%bH9 HH9HH9HÐHHXHpHx UATAUAVAWHH HH`E3L E1D9-vHL$ 3A~D?HD$ 0XHD$HfDl$PLl$XD$`H]D;HWHMEHD$hH]IA+ tHD$ f+f\$"f(f\$ LD$ HT$ GEuEx\$Lx HD$pI$D9-L$ I[0Is8I{HIA_A^A]A\]HOzk̐LiH%-37COt uH%H9uH ø8ø ÐHHXHhHpHx 33LH95HH=E3HtAEAIO KDKLKTKK|KtKlIHHHMuL#D(3H\$Hl$Ht$H|$ ÐÐI3ÐUH0HHH0]ÐUH0HHH0]Ð3C0Hk8 3k0GHC8Otk0HC8HC3@f@H(Hhk0HC8Otk0HC8HC39k0HC8d^3k0Hk8PC0Hk8-AA$f9-HDƹ!̸̐H!WHOAA=AHDùX!T$L̐̾ 3AHDBCpH$h̐H 0HDù }̐ =tHfD f o0_,H HL$ HKHL$(3̐2 ( ={tLCHD 3̸ y} HҿHLMDM@D9-HHMDM@H H$HHL H$HT$0HxfHHL9,uYD9-{t$H*H[LLDM@5HHH H HL$dHlL*D9-"t!HѾHRLDM@;5|E3H AQE3Ll$ J{Ⱦ%g̐H}RHM}BHELD$(Aɺ D$(HD$0{D$(HH3 AAEHHYHE&IvID$HcHD$PHf9XD$8Lt$@EIWHAHHCf9|$ t+:fDD$(HT$0HHD$(HHC/fH^@fEEIUHH_AEHHf;Ww,EfT$ HL$0HMHT$ fD$"HL$(Hp»#A$fD/L$0I[0Is8I{@IA_A^A]A\]ÐHHXHpHxUATAUAVAWHH MELFE3D9-AutHKTHL$ 3A肹LD$ HT$ HD$ (PHD$HfDl$PLl$X\$`I|$LD9-"tH DNjxRH\$hH(H=wH\ Hu -HoA;wDHI訵#MtA6L$ I[0Is8I{@IA_A^A]A\]ÐH0HL$@HL$@O\؉D$ ؅yH|$@tHL$@o؋H0[ÐUH HHoH ]ÐUH HHoH ]ÐHxELMMu Hu D$XH$$HL$PHLD$XHEHH$HD$HH$HL$@HD$8H$LEHD$0H$IHD$(DT$ $HxÐSH@H@H3HD$0Hd$ Hd$(HHu HT$ x HL$ HVCHL$0H3襲H@[Ð{JLLMuH H;s IIJH`X ÐLI[IsWH@HH=`IIHICICuVLL$(LD$0CQx?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[ksecdd.sysAcceptSecurityContextAcquireCredentialsHandleWAddCredentialsWApplyControlTokenBCryptCloseAlgorithmProviderBCryptCreateHashBCryptDecryptBCryptDeriveKeyBCryptDeriveKeyCapiBCryptDeriveKeyPBKDF2BCryptDestroyHashBCryptDestroyKeyBCryptDestroySecretBCryptDuplicateHashBCryptDuplicateKeyBCryptEncryptBCryptEnumAlgorithmsBCryptEnumProvidersBCryptExportKeyBCryptFinalizeKeyPairBCryptFinishHashBCryptFreeBufferBCryptGenRandomBCryptGenerateKeyPairBCryptGenerateSymmetricKeyBCryptGetFipsAlgorithmModeBCryptGetPropertyBCryptHashDataBCryptImportKeyBCryptImportKeyPairBCryptKeyDerivationBCryptOpenAlgorithmProviderBCryptRegisterConfigChangeNotifyBCryptResolveProvidersBCryptSecretAgreementBCryptSetPropertyBCryptSignHashBCryptUnregisterConfigChangeNotifyBCryptVerifySignatureCompleteAuthTokenCredMarshalTargetInfoDeleteSecurityContextEnumerateSecurityPackagesWExportSecurityContextFreeContextBufferFreeCredentialsHandleGetSecurityUserInfoImpersonateSecurityContextImportSecurityContextWInitSecurityInterfaceWInitializeSecurityContextWKSecRegisterSecurityProviderKSecValidateBufferLsaEnumerateLogonSessionsLsaGetLogonSessionDataMakeSignatureMapSecurityErrorQueryContextAttributesWQueryCredentialsAttributesWQuerySecurityContextTokenQuerySecurityPackageInfoWRevertSecurityContextSealMessageSecLookupAccountNameSecLookupAccountSidSecLookupWellKnownSidSecMakeSPNSecMakeSPNExSecMakeSPNEx2SecSetPagingModeSetCredentialsAttributesWSslDecryptPacketSslEncryptPacketSslExportKeySslFreeObjectSslGetServerIdentitySslImportKeySslLookupCipherSuiteInfoSslOpenProviderSspiCompareAuthIdentitiesSspiCopyAuthIdentitySspiEncodeAuthIdentityAsStringsSspiEncodeStringsAsAuthIdentitySspiFreeAuthIdentitySspiLocalFreeSspiMarshalAuthIdentitySspiUnmarshalAuthIdentitySspiValidateAuthIdentitySspiZeroAuthIdentitySystemPrngUnsealMessageVerifySignature\Device\KsecDDHHtH2-+H;t HHù)H\$Ht$UWAVHH`HH ΂E3@565L5D5h>H iE3։5FL5GD5HB>H E330>Ha>LEHFfEHG@H @H ELuHEH}?؅H 3>؅(؅HM =؅D9533L\$`I[(Is0IA^_]ÐThe driver failed to install the authentication callback table: 0x%x Failed to enable process-notify routine: 0x%x Failed to load CNG extension: 0x%x Failed to enable IRP_MJ_SHUTDOWN: 0x%x Security device driver loaded D95tHDHM VlΛ(>Lj̜.BZvڝ&>LbzԞ$6JbPsGetCurrentThreadIdExFreePoolWithTagRtlNtStatusToDosErrorNoTebRtlAnsiStringToUnicodeStringRtlFreeUnicodeStringv wcschr|RtlEqualUnicodeStringnKeDelayExecutionThreaduKeEnterCriticalRegionzExAcquirePushLockExclusiveExExReleasePushLockExclusiveExKeLeaveCriticalRegion{ExAcquirePushLockSharedExExReleasePushLockSharedExExTryConvertPushLockSharedToExclusiveExPsGetProcessSecurityPort~IoGetDeviceObjectPointerKeInitializeEvent$IoBuildDeviceIoControlRequest7IofCallDriver1KeWaitForSingleObjectNObfDereferenceObject9ObOpenObjectByPointer=IoCreateDeviceMmUserProbeAddressPsGetCurrentProcessPsSetCreateProcessNotifyRoutineIoRegisterShutdownNotification ExUnregisterExtensionUIoDeleteDeviceJObSetSecurityObjectByPointerMmMapLockedPagesSpecifyCache8IofCompleteRequestIoGetRequestorProcessPObfReferenceObjectIoIs32bitProcesssZwFreeVirtualMemoryPsLookupProcessByProcessId0ZwAllocateVirtualMemoryPsIsProtectedProcessRtlMapSecurityErrorToNtStatusSeExportsxExAcquireFastMutexExReleaseFastMutexKeSetEventMmUnlockPagableImageSectionMmLockPagableDataSectionPsImpersonateClientSeTokenImpersonationLevelNtDuplicateObjectPsGetThreadProcessIdRtlIntegerToUnicodeString{MmHighestUserAddressgMmCopyVirtualMemorygZwDuplicateObjectZwQueryVirtualMemory>ObReferenceObjectByHandlePsProcessType\ strcpy_sUDbgPrintEx, _vsnprintf_sPsGetProcessIdKRtlCopyUnicodeStringHRtlCopySidRtlLengthSidExAllocatePoolWithTagb strncpy_sHZwClose ZwWaitForSingleObjectZwOpenEventExRegisterExtensionRtlInitUnicodeString __C_specific_handlerw wcscmpNdrClientCall37RpcBindingBind9RpcBindingCreateW6RpcAsyncInitializeHandle4RpcAsyncCompleteCallBRpcSsDestroyClientContext:RpcBindingFree?RpcBindingUnbindI_RpcExceptionFilterNdr64AsyncClientCall0 H`4VS_VERSION_INFO@%@%?"StringFileInfo040904B0LCompanyNameMicrosoft Corporation~+FileDescriptionKernel Security Support Provider Interfacer)FileVersion6.3.9600.16408 (winblue_gdr.130920-1803)6 InternalNameksecdd.sys.LegalCopyright Microsoft Corporation. All rights reserved.> OriginalFilenameksecdd.sysj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.16408DVarFileInfo$Translation  ȢТآȣУ@HPXȤ (08@Hpإ `pЦ 0P`pЧ 0@P`p @P` 0@P`pЪ @XhxЫ8Hhxج`pЭ Hh(H 0Xxؠ(С@`ТPУ 0@P`pȤ (8hХ 8XhЦP`pا(08@P8P` (08@HPX`pxСء(08@HPX`hpxX!0!E *H !60!210  `He0\ +7N0L0 +70 010  `He 0=*Ahttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  |qQyn9>\` QfG=*hwLb{Ǻz4KbzJ7-W|=ܸZij:ni!7ށugӓW^)9-Es[zFX^gl5?$5 uVx,Јߺ~,c#!xlX6+̤-@EΊ\k>p* j_Gc 26*pZBYqKW~!<ŹE ŕ]b֠c uw}=EWo3wbY~10001 0 UUS10U Washington10URedmond10U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113$ hs$0  `He0 *H  1  +70 +7 10  +70/ *H  1" ãYYB{\ ;S'6J0R +7 1D0B$"Microsoft Windowshttp://www.microsoft.com0  *H w ~0 CڒF|GXn0v 'B Q֣Szp*Wa] V֏2&P?2(L [hYvf4d8`8= 6|2'_$_"V4;:,{pm>k&1bS {ǹXO595FI]Yk!ƚЎĜ=|-u$8_{:ȵ}?2w衂I0E +71501 *H "010  `He0< *H  +'0# +Y 010  `He A_IP:>aRR"Eg20130921105654.73Z001 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:B8EC-30A4-71441%0#UMicrosoft Time-Stamp Service0q0Y a *0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 100701213655Z 250701214655Z0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0  *H 0  w: iktTե |hK,_av>f+[S'1A |a0Y0D`TC M8Bݓs0W&E GͿ$`2X`FXG2tag_TϓLĦ]an(aF'$gr!KdPb]w=WuBM@Q>gfD~Knʱz* 1N5xhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0  *H  Q ?q=!o1Wm0fjxǨ%kTW+QDS`v@@A\\^5$VKtBȯ7}Z?yJR8/ye٩kzoK0D$"<Y)p2J'U/3b_W@ΙfjbJ &9Jqc{!mÜ<}jxm8ؔƥ B"8 %d~cY%z.9Wvqa˚Gͧ};q ]t"aڰPo1:eGxHr~akow˧ 9؂r*T9[ Uzs;-3.)/T'!ȬN(ۖBAM*f0ӻt2Kc{/!YD@a}=]+ _http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U00U% 0 +0  *H  'db!B2XLaipk sO^|qr_z{..F*JqfYO0  *H  gU}DjP$=9}V^ ^v$rd`i/mN܃!zMjI":ّ ܺgüuu~-#Sc ;vN6\e t`U"I׭*;>|ἬRФS*m G+gnUd 8p"50J[ۺ