MZ@ !L!This program cannot be run in DOS mode. $KS*****#*#*#*#*#*#*#*Rich*PEd R"  8@ ` D(  ]8c`.text NP h.rdata`T@H.dataj@.pdata l@HPAGE>@v `.edata @@INIT .rsrc@B.reloc @BH=pptckpD`pAL#ILEpqAeH %3IHH $IHI@8I@0I@(I@ I@IHqÐH=otcoDoAL#ILo9qAeH %3IHH $IHI@8I@0I@(I@ I@IH qÐH0=coH!=To!2H0[ÐSH0=oHc=oV2H0[ÐH=XotcSoDHoAL#IL-oYpAeH %3IHH $IHI@8I@0I@(I@ I@IH,pÐSH0=nH=n2H0[ÐSH0=nHs=nf2H0[ÐH=`ntc[nDPnAL#IL5nyoAeH %3IHH $IHI@8I@0I@(I@ I@IHLoÐ.oÐH0={mH=lm2H0[ÐH0=#mHz=mm2H0[ÐH=ltclDlAL#ILlinAeH %3IHH $IHI@8I@0I@(I@ I@IHk%UH-hkH qkE3E33HD$ I؅@=jt̐H(tIHI8 2H(ÐLH+IOsXMItDH HIHAuItf HIȈAuIffffffHrpكtL+BoAIMII vIo oL H fAfIIuOffffffffffffft IȈHufHr D @HuHo oL ffIH@oD oL fAfIuIIs $MIyIIOsOMItHD HIHuItfD HIȈuIffffffHwtHtL+HoD@HMII vIoD oL H fAf IuTffffffffffffftHɊ IȈufHwH D @uHoD oL fAfIH@oD o fAf uIIs $MI~H\$WH HHHHH\$0H _̐)H(MA8HIH(ÐH AHLDLAtA@McPLHcL#IcJHCHHKAt HLL3IH [|̐D$D$Ðcritical errorassertion failurenoncritical errorwarning messageevent messageexecution trace messagelow resource conditionDMM specific eventPresent token event *** Display Driver Model %s detected @%p. Break to debug, Ignore, ignore All (bia)? *** Added %p to ignore list - entry %u of %u...*** Can't add %p to ignore list - list is full at %u entries.*** Invalid response, please try again...\KernelObjects\SystemErrorPortReadyWERLIVEKERNELREPORTING:%u: ERROR Invalid params WERLIVEKERNELREPORTING:%u: ERROR ZwCreateKey failed with scode 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwOpenKey failed with scode 0x%x WERLIVEKERNELREPORTING:%u: ERROR NtAllocateVirtualMemory failed WERLIVEKERNELREPORTING:%u: ERROR RtlInitializeSid failed WERLIVEKERNELREPORTING:%u: ERROR Could not find \ in the keyname looking for Reportid WERLIVEKERNELREPORTING:%u: ERROR No report type can be detected WERLIVEKERNELREPORTING:%u: ERROR Could not find \ in the keyname looking for Report Type WERLIVEKERNELREPORTING:%u: ERROR ZwQueryKey failed while determining the size with 0x%x WERLIVEKERNELREPORTING:%u: ERROR OOM WERLIVEKERNELREPORTING:%u: ERROR ZwQueryKey failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR Live kernel queue size exceeded WERLIVEKERNELREPORTING:%u: ERROR Key key length exceeded WERLIVEKERNELREPORTING:%u: ERROR Key id length exceeded \Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\\LiveKernelReportsWERLIVEKERNELREPORTING:%u: ERROR ZwCreateKey failed with scode 0x%x for the root WERLIVEKERNELREPORTING:%u: ERROR ZwCreateKey failed with scode 0x%x for the report type WERLIVEKERNELREPORTING:%u: ERROR CheckSpaceAvailable returned no more space available WERLIVEKERNELREPORTING:%u: ERROR ZwCreateKey failed with scode 0x%x for the report id WERLIVEKERNELREPORTING:%u: ERROR Report id %S already exists BusyWERLIVEKERNELREPORTING:%u: ERROR WerpGetRegistryKey failed for the busy key 0x%x WERLIVEKERNELREPORTING:%u: ERROR ParseKeyName failed with 0x%x \WindowsErrorReportingServicePortWERLIVEKERNELREPORTING:%u: ERROR WerStartSystemErrorHandler failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwQuerySysInfo(ErrorPortTimeouts) failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR WerWaitForSystemErrorHandler failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR WerWaitForSystemErrorHandler timed out, failing the call with 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwAlpcConnectPort failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwAlpcConnectPort timed out, failing the call with 0x%x WERLIVEKERNELREPORTING:%u: ERROR StringCchCopy failed for key with 0x%x WERLIVEKERNELREPORTING:%u: ERROR StringCchCopy failed for id with 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwAlpcSendWaitReceivePort failed WERLIVEKERNELREPORTING:%u: ERROR Service returned failure WERLIVEKERNELREPORTING:%u: ERROR ZwDeleteKey failed with 0x%x H|$@7 ZuHfZ H eZHKH bZHCH_ZHCH\ZHC HYZHC(HVZHC0HSZHC8HPZ3DBHH YI3@χ5Z7=W38YJHKL G:3HL$ LJeY6@H=Y3HHH;Ct Hr 3HT$HH D@fD$H6D$HTHC0H;THC8H8T3DBHH S13@χT0=xQ38S2HKL W43HL$ LJe|S0@H=S3HHH;Ct Hr 3HT$HH tD@fD$Hs0D$HP H =PHKH :PHCH7PHCH4PHC H1PHC(H.PHC0H+PHC8H(P3DBHH O!3@χ P,=M38O"HKL '03HL$ LJelO,@H=O3HHH;Ct Hr 3HT$HH dD@fD$Hc,D$HHPt7HO`HWDHWPLG@HHOhH;HLE3HO(AH\$0Hl$8Ht$@H|$HH A^H%sH\$Hl$Ht$ HT$WH IHH~HHT$8H(.K8sK8eH %HT$8HHSPHSXHSDHK`#HT$8C@HH;HLЃ{<HT$8uLHKhE3HK(@H\$0Hl$@Ht$HH _ÐH\$Hl$Ht$ WH HH(pK8tkLt$0E3@uɉK8Ds8D9s8uGHKhUHHtK<u HS H/Ls@LsPLsXLs`LLs Lt$0HK(@H\$8Hl$@Ht$HH _H%̐H\$Ht$WH HH({<u{8t HKhCLT$XMt4HQLIHHu%AL3ҹ1 H [HL+ILIEH;wALH&HuALI HH+HH3A H [ÐR%]QR5u ]QUGPuRSDS(E6˯ watchdog.pdb`x 2@N^lx*FP^v(Bbx.>Nb(@P^|$FZjx0LZn Z.K ɂwb@Pp Au7 v3 '= F<!nT Du: AHz>/nB??????@@ @$@0@Y@0@@@@.AR0R0R0R0R0R0  4 RpT 4R p,B  4 2pB20" d"t((`e"t((`e" Jd"t**e"t**e" Kd"t,,e"t,,e"@jd"t..f"t..f" d"t00@f"t00@f"@d"t22xf"t22xf"@e",eb  * 4 2pRp"466f"466f"466fd 4R pRp"499`g"99`g"499`g4p";<g" d;<g";<g  4 Rp  4 2p"d?:?h"?:?h20"t??Hh"??Hh  4 2p dT42pd42 p   4 2p|f"20d42 p t dT42  d T42pd T42p"FF i"FF id42 p   4 2p 20 20202020 bb B b !d42 p  4 R`"tLLj"tLLj?$4 R0 4 p`P%pPP "4QRj"dRRj"RSj"čSUj"SUj"RSj"RRj"QRj d4 p`   4 pt dT2"4@YYxk"@YYxk T4 p ` @. 4 pc20 4(&P "^k20"t$l"$l"t$ld 4R p(B .d 4 r p  4 Rp  4 Rp  4 Rpt d T R"4P|l" P|l p`" dЫm"4E,m"TE]Lm"E]Lm"E,m"ЫmR0  4 Rp J 4 2`"tNm"Nm/ (!)!t(!d'!4&!$P  4 2p"l"3l"t$l"l"pPhl"P|l"Я`m"tNm"P|l"4n" dT4Ыm `P`"4\o"t\4o"\4o"\o"t4\o"4\od 4 R p"ȸo"ȸo''tR0 dT 4 p(  (4 d T R p(  (4 d T R p d T 4Rp 20 d T 4Rp2020!`P"ԥt4׾p"  ׾p 2020t T 4 r"d = q"= q"d = qR0t d T 42  4 2`"tq" q WR0"  42,p`PPr0"  t d r"t d r  4 r`"t ?Pr"?Pr  20  d T 4 Rp+@!0 4 @"t d r"r"t d rB   4 p pP0"44''d&X`s" X`s4 #tg#df#4e#`P ! 4 2pb"4s"4s"sd42 pd42 p^^XRMHC>,x (h tdT4^^XRMHC> ,x (h tdT42-+] f @@ @ @d@jd d Jd d Kdye@ e@e,e@e@k8eHeTe((`e(g*peg**e**e*o,eo,,e,,e,w.ew..e..f.0f00,f00@f02Pf22df22xf24f44f45f56f6X6fX66f66f68g88 g888g89Pg99`g9;hg;;|g;;g;<g<:<g:<=g= =g>?h?:?h:??h??4h??Hh??Ph??dh@Z@xh|@ Ah AAhAChCDhD$Eh$EEhEFiFF iF]G4i]GGHiGG\iG@Ipi@IlIilIIiIIiIIi,JpJipJJiJ KiKKiK$Li$LLjLLjL/M(j/MM@jMpNXjpNNhjNQxjQRjRRjRSjSUjU Wj WWkW#Wk#W`W k`WW0kWXDkX@Yhk@YYxkY+Zk+ZAZktZ[k[\k\]k^kl$l8,l8>@l>pTlpPhlP|llll3lP|l|lЫlЫmE,mE]Lm]`m tm ;m;pmp%m@mNmNmmЯ`m` ,n$0H E3E33ҋH|$ *H HH9 /9Xt HH9u@H 3H\$@H0_ÐfÐHl$Ht$H|$ AVH0IADHH H\$@؅x @LL$`LAH&H\$@Hl$HHt$PH|$XH0A^ÐLWATHHH3HD$`IsMkMsHHM{D(H MIDE3E33E2HD$ H=iH$HlH9H$EE { HtDC3IׄtUHKHT$0/H~tH H9HtDCIHL$0HHH9hH$H$H 3L|$pLt$xL$H$HtAIHL$`H3:hHĘA\_ÐH0H E3E33HD$ ALHD$@HD$@AD$(HD$ y؅x9ALHnAID$(HHD$ ̐UVAVAWHHxHH3HEDD33LEPhuĒEп8E)D^LEVHMxdHMHUE3H$Ω=#FED:HPAWdogH|$peHHu)H|$pH$HMH3^HxA_A^^]DE3HI]EHMHULljEC؅M9MBMMDDWI;stAIHA;r A;sB>,AHApA;s5EBEJD+A0ADD$ LA0IW}aW̸̐H\$Ht$WH0H 3E3E33H\$  tLt$@L5A;tb;rV TN;s DCCID+I I]$OA;u @t=Lt$@H 3H\$HHt$PH0_H%̐SH03y3H0[HH|$@E3ɋ8H E33H\$ -HH HH;t9xt HH H;uHXH 3H|$@HH0[ÐHtWdogH%ǥÐH\$Hl$Ht$WHP3IHDB(HL$(IY3LD$ HD$ 0H\$(D$8@H|$0HD$@HD$HcH\$`Hl$hHt$pHP_ÐHl$Ht$ WAVAWH03IDLH\$PI8H1չAWdogHHtEHD$`LE3HD$(AIωl$ D$`ޥl$`=t=#tx H>HHH\$PHl$XHt$hH0A_A^_ÐHl$Ht$ WAVAWH03ILLH\$PI8HiչAWdogHHtHHD$`LAHD$(IIωl$ D$`l$`=t=#tx H>HHH\$PHl$XHt$hH0A_A^_ÐH\$Hl$Ht$WH0HApHHtzDAWdDWHHȉ|$ 3H{8{@{DH{HH{P{XkHHLÉ{`CdC\H{hH@=HKp39HH\$@Hl$HHt$PH0_ÐSH HKu HH [ތH [H\$Hl$Ht$WH0HAHHtdDAWdSWHHȉ|$ 3H{8H{@HKh3H{PCHH{XH{`HvHHLWHH\$@Hl$HHt$PH0_ÐSH 3H豈7Ku HH [H [ÐH D$PHDA3AHQDIAHA HA0H,HK(H [H%<̐UVATAVAWH@H^H3H$H$MEHLHu H !H$8H$03L;L$(AADAWdog HHu HL$H3AH|$@@UHL$@ŢeH%H\$8H|$0HL$@E3E3H|$(H|$ t9HtIEtDHhLEL;HIAD D$ uWdogHJI3H$0H$8L$(H$H3UH@A_A^A\^]ÐSH HD u3Ht.HtH9HǃHH [a H [ÐSH HD u,Ht'HH9tHHH [ H [ÐHHHD$xHD$8D$0HD$(HD$pHD$ AHHD u*Ht%Ht :rABADBA@B 2ÐH\$Hl$H|$ AVH@IILD t3>Ht$PBwFAsFt>vv.H$HHt$PH\$XHl$`H|$hH@A^Á@uҺAWdogRHHtH$LLHD$8$ӈD$0HD$xIHD$(HD$pHD$ % HHtieH%3AHlRHHO8HG LODGHL$8HO(HHL$0HD$(HGHHD$ ßG@tH|3H̐SH0LHD HHEQ0DAIH;wiBw$AstwFH @u5H ߠA LK8I҉D$ 0tHˉC@H0[2H0[ÐH\$Hl$Ht$H|$ ATAVAWH 3LH ~L;LDAI3L;DD0 D;vuyHH HHpr\$`;vTyHH HHXrHMA;^t B<3uuAHLJDumpLJBlobLJ,H0 LJ AAGDÉAGI։AG HLJ( $ZR3H\$@Hl$HHt$PH|$XH A_A^A\ÐH\$VH H؅xCHH|$0u+HHLω؅y HdžH|$0yNHcHHNHH HMH\$8H ^ÐH03HHD$@fD$ HD$"D$*fD$.Hu H0[HT$@.x9HL$@/HL$ HHT$ AHHL$@H0[ÐH\$UVWHl$H`HH3HEPIHHHu 2Ht3AH=NHt3HDB@*NHHM3ANDW8fEt[LO@MtRAAxHcMQfA8\t IHy;}&HA~HMHAH+I;LBI/PHtLEк@HHn3HHMHD$PHD$0DC 3҉\$0H\$8HD$XH\$@D$H$\$`H\$h\$pH\$x]H]:MLD$@HUЍKE3H\$ ȘHL$8yHt3HT$0ff9HHEHHEHHEHHv?HH QHUA tL$0HHG H;HL$8rHL$8_ Hf< t;I0H誂LH/LD$8HLHL$833HMPH3$MH$H`_^]ÐH@HD t H@[Ht$PH|$XH3I3t *ttk?@8s0E3du^HK(3HT$ ft$ HD$"D$*fD$.@x(HD$(LL$0AHD$0HD$88HL$ -HALL$0HD$0HCHAHHD$8y;3HSHHL$ ft$ HD$"D$*fD$.HT$ E3@4tHt$PH|$X3H@[Ht$PH|$XH@[ÐH\$VH@AHD u|Htwts HD$8D$0;HD$(H|$PGIM HD$ HHtHH8DHLHω_@_HH|$PH\$XH@^3H\$XH@^ÐHt/SH HHI8Ht Wdog?WdogH1H [Ðrv w3ÐH\$Hl$Ht$WAVAWH0H$IMLHtBKDD;qSDHPSHHP Hx(>kH&[AWdog XHHt,AWdog:HHuWdogH43x3AHHHs8HCDZHD$pL;{HC HD$xLsHC($HkH C0HtLKHHHH\$PHl$XHt$`H0A_A^_ÐHXHzH3H$@HL$ 3AGHL$ D$ D$,H$@H3HHXÐH`HHD$pHHy8y@t{HT$pH[xkC@HL$pHD$@HD$8D$0HC8HD$(HD$PE3E33HD$ xHL$p؅xOH`[AH`[ø H`[ÐH\$ AVHPH^H3HD$@H=fAML$0T$4f\$8u fcv Ht$`AWdogH|$hHcHHHu E3HD$0HG HEfD;s}EO MtCIAf9tHHu IHu IH+x H IÅxuIJfAHL ωDD\ fD;rH [H$DE3H|$ sWdogHϋ+Ht$`H|$hHL$@H3FH\$xHPA^úWdogH ̐H( ݳu"H ܳHtHƳH(3H(ÐH\$WH3HH:Hpf9:u HHL$pD$hH|$`|$X|$PH|$HD$@"|$8HD$p|$0L$L$HD$(DŽ$0H$DŽ$@H|$ H$H$H$yH;H$H_ÐUWAVHHH3H$3LHH*f9pt H$0HHT$xHHL$pL$8HD$pL$H$HL$xL%$$$D$D$t$@D$8L$0T$(L3H0@MDDT$ {zH?HpH$:D$hHl$`l$Xl$PHl$HD$@"D$8H$l$0L$L$ID$(DŽ$0H$DŽ$@Hl$ H$H$H$Ky ƃd f0fpL$L$8H$0H$H37CHA^_][ÐH\$Ht$H|$ UAVAWH$HHjH3H3AxHAH9E3LLMAWIH%HL$xIFE3fAFHAL|$pL|$xEHEIxkHL$xHLD$pHUHEE,,dHL$xsH|$px0Ht+u%GA=wDH^HW HCYHkH^HHeHCHbHCH_HCH\HC HYHC(HVHC0TC8HfDQ3HM3AL|$pfD|$xHD$zEfEfD}j@3HMD}DB(W@3LHML˺L}HELt$ twy HUHL$xCD$hL|$`D|$XD|$PL|$HD$@D$8HD$xD$0LMLEHL$pD$(L|$ E0L}E@HEL}L}o؅x HL$p=5tH}uAߋHH3r@L$I[(Is0I{8IA_A^]ÐH\$WH HH G|H xiyHH\$0H _RyHH\$0H _ÐH8fyLIthHf8t[H0f:tNHT$(H\$0HpLgHHD$ uy3fH\$0H83H\$0H83fp H8Ð,3ÐH\$Ht$WH HIY;,A''*H\$0ȋHt$83H _ÐD…yمyAEtAAʅt D…uÐH`@HAH>@HAHr@H3HHHHHHHHHHHHHHAxHApHAhHA`HAXHAPHAHHA@HA8HA0HA(HA HAÐH\$Ht$WH HH H\$0DAAHt$8H _Ð~+ Yu,fnt^uxX3,fnÐW)f/vWu-)Y))^X)Yf/v\ )\)f/%s)ÐYÐHHXHhHpHx AVHH$)p)x؋HEAD)@D)HD)PD)XD)`D)l$0D)t$ fn3Y+D%-3A)fnDY:D_@tAY7D-EWfEn3H_`H_pA))EEXY EXD)DOhD)\DYAXAXYA^X\D5)3A\XAY^AYGPYA^\)D\HAYA^YH_xH_YAG AXD^D)EYA^DO(G0tD)D)D)3XYA^J3)03)\EXEXDXDXDXDE^EYDtEYD(t$ L$XA({E(CE(SD3I{(I[IkIs A(sE(KE([E(cE(kIA^ÐHHXHhHpHx AVHH$)p)x؋HEAD)@D)HD)XD)`D)hD)t$@D)|$0 fn3YW3)fnY=q@tYAƙA)$fntAY3EWH_xH_t D-E)D܇3DoXD)WD=D)3AYE)D$ AXD^XχAXD\%aD^EYDg83A^3A)bEXD)\D)EXA^EXEXDl$ EXDA^AY^D^E^Dg0E^EYDt DYW5 3H_`H_pD)AXDY^AX\)\WHY^Y?L$EXI[IkIs DYXE(CE(KE([E(kE(sG X3A^A({AYD(|$0Gh)A^E(cYA(sG(I{(IA^RZZ(@ȸp0<(lP>0dT@IlI8 `IIK`K(??(IJJP68  9@;(==P>p`?> J8XԺ@D\@$E|@E AFAG@':NYiw %=Tu.BTi}'>Udv 1Kk(?\1FSiw  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYwatchdog.sysDMgrAcquireGdiViewIdDMgrGetSmbiosInfoDMgrIsSetupRunningDMgrReleaseGdiViewIdDMgrWriteDeviceCountToRegistryGTF_FloatToIntegerGTF_FloatToRationalGTF_GetGCDGTF_InitWorksetGTF_NormalizeGTF_RoundGTF_SqrtGTF_SquareGTF_UsingPixelClockFrequency_Stage1GTF_UsingVerticalRefreshFrequency_Stage1SMgrGdiCalloutSMgrGetActiveSessionProcessSMgrGetNumberOfSessionsSMgrNotifySessionChangeSMgrRegisterGdiCalloutSMgrRegisterSessionChangeCalloutSMgrUnregisterSessionChangeCalloutVpInitializeWdAllocateDeferredWatchdogWdAllocateWatchdogWdAttachContextWdCompleteEventWdDbgCreateSnapshotWdDbgDestroySnapshotWdDbgReportCancelWdDbgReportCompleteWdDbgReportCreateWdDbgReportQueryInfoWdDbgReportRecreateWdDbgReportSecondaryDataWdDereferenceObjectWdDetachContextWdDiagGetEtwHandleWdDiagInitWdDiagIsTracingEnabledWdDiagNotifyUserWdDiagShutdownWdEnterMonitoredSectionWdExitMonitoredSectionWdFreeDeferredWatchdogWdFreeWatchdogWdGetDeviceObjectWdGetLastEventWdGetLowestDeviceObjectWdInitializeWdIsDebuggerPresentWdLogEvent5_WdAssertionWdLogEvent5_WdCriticalErrorWdLogEvent5_WdDmmEventWdLogEvent5_WdErrorWdLogEvent5_WdEventWdLogEvent5_WdLowResourceWdLogEvent5_WdPresentTokenEventWdLogEvent5_WdTraceWdLogEvent5_WdWarningWdLogGetEventOrderWdLogGetRecentEventsWdLogNewEntry5_WdAssertionWdLogNewEntry5_WdCriticalErrorWdLogNewEntry5_WdDmmEventWdLogNewEntry5_WdErrorWdLogNewEntry5_WdEventWdLogNewEntry5_WdLowResourceWdLogNewEntry5_WdPresentTokenEventWdLogNewEntry5_WdTraceWdLogNewEntry5_WdWarningWdMadeAnyProgressWdQueryDebugFlagWdReferenceObjectWdRegFreeInfoWdRegOpenSubkeyWdRegRetrieveSubkeyInfoWdRegRetrieveValueInfoWdResetDeferredWatchWdResetWatchWdResumeDeferredWatchWdResumeWatchWdStartDeferredWatchWdStartWatchWdStopDeferredWatchWdStopWatchWdSuspendDeferredWatchWdSuspendWatchWdpDbgReportCreateFromDumpWdpInterfaceReferenceNopHHtH2-+H;t HHӏù)3Ðl`ntoskrnl.exe`x 2@N^lx*FP^v(Bbx.>Nb(@P^|$FZjx0LZnExAllocatePoolWithTagKeInitializeMutexExFreePoolWithTag1KeWaitForSingleObjectKeReleaseMutex(RtlQueryRegistryValuesEx&IoWMIOpenBlock'IoWMIQueryAllData+ _vsnprintfRtlWriteRegistryValue3KfRaiseIrqlKeLowerIrqlbKeBugCheckExUDbgPrintExWDbgPromptDKdRefreshDebuggerNotPresent;KdDebuggerEnabled<KdDebuggerNotPresentnKeDelayExecutionThreadExInitializePagedLookasideListKeInitializeEventPsCreateSystemThread>ObReferenceObjectByHandleHZwCloseKeSetEventNObfDereferenceObjectExDeletePagedLookasideList!KeStackAttachProcess-KeUnstackDetachProcessExpInterlockedPopEntrySListKeResetEventExpInterlockedPushEntrySListExQueryDepthSListPsTerminateSystemThreadPsGetCurrentProcessSessionIdPsGetCurrentProcessZwOpenKeykZwEnumerateKeyZwQueryValueKeyKeQueryTimeIncrementKeInitializeDpcKeInitializeTimerExKeFlushQueuedDpcsSKeAcquireSpinLockRaiseToDpcKeReleaseSpinLockKeSetTimerExcKeCancelTimerKeRemoveQueueDpcQKeAcquireSpinLockAtDpcLevelKeQueryRuntimeThreadKeReleaseSpinLockFromDpcLevelKeInsertQueueDpcPObfReferenceObjectyIoGetDeviceAttachmentBaseRefRtlInitUnicodeStringqZwFlushKeyKeInitializeSpinLockRtlGetVersion ZwWriteFilePsLookupProcessByProcessIdRtlInitAnsiStringPsGetProcessImageFileNameRtlAnsiStringToUnicodeString2 _wcsnicmpRtlFreeUnicodeStringIoRaiseInformationalHardError*RtlCaptureContextdKeCapturePersistentThreadState8RtlCompareMemoryExRaiseStatuskEtwRegisternEtwUnregisteriEtwEventEnabledoEtwWrite- _vsnwprintf@IoCreateFileExSystemTimeToLocalTimeYRtlTimeToTimeFieldsZwOpenEventPRtlSubAuthoritySidRtlLengthRequiredSid@ZwAlpcSendWaitReceivePortTZwCreateKey3ZwAlpcConnectPortZwQuerySystemInformation ZwWaitForSingleObject ZwUpdateWnfStateDataZwQueryWnfStateNameInformationRtlInitializeSidaZwDeleteKeyZwQueryKey0 H`4VS_VERSION_INFO@%@%?StringFileInfo000004B0LCompanyNameMicrosoft CorporationHFileDescriptionWatchdog Driverr)FileVersion6.3.9600.16384 (winblue_rtm.130821-1623): InternalNamewatchdog.sys.LegalCopyright Microsoft Corporation. All rights reserved.B OriginalFilenamewatchdog.sysj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.16384DVarFileInfo$Translation` XpȣУأ