MZ@ !L!This program cannot be run in DOS mode. $웵gȵgȵghOȴgȵgghIȾghMȰghLȻghHȴghQȥghKȴghNȴgRichgPEdR"  n>P[I`|XxP@Xz.textumn `.data r@.pdatat@@.idataf z@@.rsrc @@.reloc@B5 L  !XR%WbW0ЂaADVAPI32.dllOLEAUT32.dllole32.dllFProcessIDParentProcessIDSessionIDSidProcessNameWin32_ProcessStartTraceExitStatusWin32_ProcessStopTraceStackBaseStackLimitUserStackBaseUserStackLimitStartAddrWin32StartAddrThreadIDWaitModeWin32_ThreadStartTraceWin32_ThreadStopTraceImageBaseImageSizeFileNameWin32_ModuleLoadTraceAdmin_PS_Providerselect * from Win32_ProcessStartTraceselect * from Win32_ProcessStopTraceselect * from Win32_ThreadStartTraceselect * from Win32_ThreadStopTraceselect * from Win32_ModuleLoadTrace p ,"{+B/rݑO 4321`# 4322`#d555(F[EnaO555'd555(@}c9ZJ55t5':|9905kM.npZvlwCGf8: ::~fCܓY+LY_>ӟk^JHHjZQ=zBfE~dbad allocationa.=vauthz.dllAuthzInitializeContextFromTokenAuthzInitializeResourceManagerAuthzInitializeContextFromSidAuthzAccessCheckAuthzFreeContextAuthzFreeResourceManagerQPQ_RPPP__4RQPQO,OPPP\M@7@J6]Ǩ&api-ms-win-core-processsecurity-l1-1-0.dllAPI-MS-Win-Core-ProcessThreads-L1-1-0.dlladvapi32.dllOpenThreadTokenAPI-MS-Win-Security-Base-L1-1-0.dllAddAccessAllowedAceAllocateAndInitializeSidCheckTokenMembershipInitializeAclInitializeSecurityDescriptorIsValidAclIsValidSecurityDescriptorSetSecurityDescriptorDaclSetSecurityDescriptorGroupSetSecurityDescriptorOwner<5IkQO "0s ps0"rr "rr("lrtr "8r@r "rr0"qq0" xp p "t t "Xv`v "v v "uu0"@SH0HD$ h7HHD$@HtH`H`HHHK3uc@HcHHcPHcXHc`3H5hHu _HHP%_H NH0[O>HxH_H3HD$hHgHL$`A A D$`HD$PfD$d~2ucn_H̀H ]_HV_H;t(At"yrD 6_HILs m"H%Yg%_H M=HL$hH3<HxH Md=@SH 3@=DًH [H%~HL$SH HHH~H\$0HH [H H%n~H(Hy(t A(X~H(HL$SH0HD$ HH'fHL$HuH%eHL$H ~HHHHHPH(}HKxHtHPHKPL CDB:HK y(t A(}H0[@SH HYxHHL$XH;tHHxHtHPHt HHPHL$hE33HP3H [HHXHpHxL` UAVAWHHHL%(L59HSxH=NL=_H5`LMLmHPLeLuH}L}Hu@HSxHkHLMLqLeLuHEH}L}HuD$ HSxHqH=HEHwHHEH}LMHEHLHEHLeHEHH}HEHD$ HEAHSxHLMLLeH}D$ HSxHHEH HHEHLMLLeD$ HEL$I[ Is(I{0Mc83IA_A^]H\$Hl$VWAWH0H\ZH3H$ HHL=3LI׉3[HMǃL+HHtAft fHHuHuHf)HLIHǃ@ǃǃǃ [t LHl$@D$8Hl$0H `A3HD$(pD$ ZHHL$`3A?AHHL$`H$L|$hD$|ZLwLHHD$P3HD$(3ɉl$ qyH Huy N3H$ H36L$0I[(Ik0IA__^H\$WH Hu#E3HE3AQYu9t3H\$0H _HWH@H@HXHhHp HHH`HHHtHPHd$XHLD$XHH3H~HxxH\$XHtcHHtHPH'LHcH {LH|$ E3AQHAR8H|x'HN>؅xHN @HL$XHtHPH\$PHl$`Ht$hH@_HHXHpHxLp UHhHHWH3HE?HME3H,X=wHH `Hu3)t w8H ^H3ewH_HtLM'AHЅu HE/HM7A A HD$PDuDu7fE;*tiH_H}/Hu'Hu3)t Sw8H ^H+vHn_HtLEHHЅtD9uAEHM/wHM'uvWVu H^%HM?H33L$I[IsI{ Ms(I]H\$Hl$Ht$WH HAHH;ZHA H;QHy(f97u@8q*w HHDvH;uUHH7LHvH;u H?HLHvH;uHLHvH;uHGH\$0Hl$8Ht$@H _HWATAUAVAWH@H@HXHhHp HH\H(HHpE3EALg`AUEuDwt-fD;oTs&AHGXf;PtfAHf;OTrLxhA;G*ɃDqMHHfE9,FuIuuL\$@I[8Ik@IA_A^A\_^HL$WH0HD$ H\$HHHYHt=Ku2Ht-H Ht ?H#HKHt HcHHgH\$HH0_HHXHhHpHx AVH03HHAHiHuTH^xHcHLHt`AL33ɉ|$(f(HD$ ^I΅tGB?IHMH;HuHuHHl$HHt$PH|$XHH\$@H0A^ùjf^ȁNK̹@@WH0HD$ H\$HHt$PHHHHtH#HKHt HcHH'HHD$@Ht-H`@HA>HHuHt 3HHH\$HHt$PH0_H\$WH HHHtYHK4YHH [@SH HH 3AWHHuXY HXH 7H7H;t'At!yrHIL4 A  HH*WHCHtH HWHCHtH HVHCHtH HeVHCHtH HVHC HuH HVHC(HXH HVHC0H% H [HHHWH0H@HXHpHHHHIHHtHCPP0H{PHtHHt.VH:HK`HtoWHKXHt`WHKVH=HHKHt HHP@tH HH\$HHt$PH0_HWHH@HXHhHp H4H3HD$xH39Y@t3HQHL$`9_@H9_P8 HHtD3HHHwPHu_VHȻVH5H 5H;[AQyGV ALHI)HyrHwPHtH9t HTH H_P VHȋUH4H 4H;t$Atyr DL)HIHOHH9u'HGPHL$(H\$ L *L3ҋPt[\$pfD$tHG`H9u!HD$PA A HL$pt&HGXH9u3HD$PE3EA@HL$puT؁Nw@HL$`SHL$xH3L$I[Ik Is(I_H\$VWAVHPI MHH؅IHW`H$3!$HHD$@3eTuHWXHTTtDŽ$LWPLGHH$HD$0H$E3HD$(HD$@H֋HD$ ARuS N( HHt.H$cHcH HCH{ H HHP3IHuQHGPH$P(SHȋSH ,2H%2H;tnAthyrb AEHHP3JdSHQSH 1H1H;t$AtyrDHILH\$pHPA^_^HL$WH0HD$ H\$HHHHHA L@PHIAP(HK HPHkHHKHt HHP@tH< HH\$HH0_HHXHhHp WH3IHDB(HHI13HL$PDB \$pHU3H\$@H$H|$XHD$hHE D$PH\$`LPPHD$PHD$8\$0LD$pE33H\$(Ht$ AR uP N3L$I[Ik Is(I_H(LAHqHMt IHIPH(̸A@SH YuHt LSAP(H [H\$WH I HIH;ٿHu HBH;ѿtHH;uHBH;u HPH3@H\$0H _H(LAHiHMt IHIPH(@SH YuHt LSAP H [H\$WH I HIH; Hu HBH;tHH;uHBH;u HPH3@H\$0H _H\$WH HHًHHIHt HHP@tHgHH\$0H _H\$WH HKHًHHIHt HHP@tHHH\$0H _@SH 3H94ueDCH 3MH4HuFDCH 3MH4Hu'DCH *3MH4HuM؋H [@SH 3H9a5uFDCH 3H8HT$UH0HHH0]HXHXHpH@HH@H@H@UH@CH@HöH`H@@UH HHHHUPEP=csmuHMPiE0E0E0H ]@UH HHHHUpEp=csmuHMpE8E8E8H ]@UH HH0HHU`E`=csmuHM`EHEHEHH ]@UH HH HH=csmuHdE$E$E$H ]@UH HHHHU(E(=csmuHM(E4E4E4H ]@UH HHHHU@E@=csmuHM@ELELELH ]@UH HH(HHUXEX=csmuHMXhEhEhEhH ]@UH HH8HHUxEx=csmuHMx DžH ]@UH Hꃽhw H ]@UH H} uLMxDEpHUhHM`H ]@UH HHM8HM(HE(HHM0HE08csmt E E 2H ]@UH H7H ]@UH H} uLMpDE$HUXHMPOH ]@UH HH3Ɂ8H ]H qH%r1H(H HtHPH(H(H eHtr2H(H(H xH(ËCHH HHH H 20d!!!  20d8"C"&hC"2PB R0fQhahhhhhhhh"""""""##&#@#20" ""t"d"4"P' TL4KF p `f   4 2pd T 4 rpfi''(- td4PfdT42p$ $d T4r pf)ix++-d 4Rpf;i--/4RpfpMi//0d T 4RpfH_i00<1  4 2p R0f qi1*22 t dT424 rpfiiiiii jj4J4p4u444555(5b d T 4 2p d T 4 Rpf86j888 "fHjP;j;q; "fx^j; R0fPtj;;;% %!td4 f(jju8`jH4<m<<<<<a=j  RPf(r04Rpfjj ?I?`?u??R0 T4r p`fj@AAA4 Rpfj|A t d T 4Rd 4 Rpf` kBUCC  R0fk'kL m {  fh d T 42pt 4R P$4 p`Pfp  20d 4 Rpf9kEk@JkJJJ.dT4 pxgz[kKVK M  4 p`4 Rpfmk,OSOnO dT4p tdT4d42 p t T 424/(p`d [\k\=\W\kW\w\\'l\\\{l\\\l\]],m]<]V]mV]]]m][]1nbp`0d7^W^Zn 4 rp`d^^n^20d^+_nd 4 Rpd__n    4 2pdbb0ob  4 2PaW0zHzyV8 :pz:z`H{P|{|{|{{{{ ||{ 8|&|ProcessTraceEnableTraceExCloseTraceStopTraceWStartTraceWQueryTraceWOpenTraceWCoRevertToSelfCoImpersonateClientR }|}}667$7-}=}O}a}krnlprov.dllDllCanUnloadNowDllGetClassObjectDllRegisterServerDllUnregisterServer2-+] fY/(e p6L78@7@75 Ȁ .?AVexception@@.?AVbad_alloc@std@@.?AV_com_error@@dddde!e6d3eeeyfe E `pL v !v!"p("Q"8ph""`p"Z#hp`##q#% q%l'tp>>hu>?q ??pu?@`p@O@uX@@q@sAu|AAvAB(vBC@vCDr D@DxvHD0Fv8FGvGHwHHwH:Jq@JK$wKSMlw\M&Ow,OOwOPwPP`pPPqP_Q\qhQQ`pQQqQ+R\q4R{R\qRR\qRRSqXSSqS|TxTT\qTVU\q\UU xUTV x\VV xVVqWUW\q\WWhuW+X0x4XXhuXY`p YJ[8xP[[ x[]Px^a^xh^^$y^>_LyD_[_`pd__ly_`q`ayaa\qbby$ccyHddyEeeyeqfyffsfg`p gogqxghs&hKhXpahhXpiiXpjjXukkXpk'lXp'l{lXp{llXpl,mXp,mmXpmmXpm1nXp1nTnXpZnnXpnnXpnnXpn!oXp0oPoXploo`poo`poo`p9 jVB$اȧʨb0$ :zFfPB80ܥƥfF<4(\ĩ֦֩,J Z8Т~ڨ@t09 jVB$اȧʨb0$ :zFfPB80ܥƥfF<4(\ĩ֦֩,J _purecallMfreemalloc ??0exception@@QEAA@AEBQEBDH@Z ??0exception@@QEAA@AEBV0@@Z??1exception@@UEAA@XZ2?what@exception@@UEBAPEBDXZ_callnewhL_CxxThrowExceptionV_XcptFilter_amsg_exit~_inittermX__C_specific_handler0?terminate@@YAXXZ_lockB_unlock|__dllonexit_onexitmsvcrt.dll??1type_info@@UEAA@XZATL.DLLRtlFreeSidRtlCompareMemoryRtlCaptureContext]RtlLookupFunctionEntryiRtlVirtualUnwindntdll.dllWaitForSingleObjectGetCurrentThreadPInitializeCriticalSectionQInitializeCriticalSectionAndSpinCountLeaveCriticalSectionVGetLastError)EnterCriticalSectionDeleteCriticalSectionCloseHandleCreateThreadDisableThreadLibraryCallsLocalFree_SleepUnhandledExceptionFilterPSetUnhandledExceptionFilterGetCurrentProcessnTerminateProcess0QueryPerformanceCounterGetCurrentProcessIdGetCurrentThreadIdGetSystemTimeAsFileTimeGetTickCountKERNEL32.dll?BreakOnDbgAndRenterLoop@@YAKXZ?_ThrowMemoryException_@@YAXXZ?Write@CMemoryLog@@QEAAXJ@Z?GetMemLogObject@@YAPEAVCMemoryLog@@XZwbemcomn.dllSetLastErrorFreeLibraryLoadLibraryExWGetProcAddressQEtwTraceMessageHRtlLengthSidhRtlEqualSidDelayLoadFailureHookResolveDelayLoadedAPIlstrlenAMultiByteToWideChar\__CxxFrameHandler3memsetR00HB`xe     H`|REGISTRYTYPELIBMUI|4VS_VERSION_INFO@%@%?StringFileInfo040904B0LCompanyNameMicrosoft Corporation0FileDescriptionWMIr)FileVersion6.3.9600.16384 (winblue_rtm.130821-1623): InternalNamekrnlprov.dll.LegalCopyright Microsoft Corporation. All rights reserved.B OriginalFilenamekrnlprov.dllj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.16384DVarFileInfo$Translation HKCR { Krnlprov.KernelTraceProvider.1 = s 'KernelTraceProvider Class' { CLSID = s '{9877D8A7-FDA1-43F9-AEEA-F90747EA66B0}' } Krnlprov.KernelTraceProvider = s 'KernelTraceProvider Class' { CLSID = s '{9877D8A7-FDA1-43F9-AEEA-F90747EA66B0}' CurVer = s 'Krnlprov.KernelTraceProvider.1' } NoRemove CLSID { ForceRemove {9877D8A7-FDA1-43F9-AEEA-F90747EA66B0} = s 'KernelTraceProvider Class' { ProgID = s 'Krnlprov.KernelTraceProvider.1' VersionIndependentProgID = s 'Krnlprov.KernelTraceProvider' InprocServer32 = s '%MODULE%' { val ThreadingModel = s 'Free' } 'TypeLib' = s '{6B100E1A-1385-4D1F-A02E-6E705A76BB6C}' } } } MSFT CC d,X L|@ 8x h%B #B 08 #B xX(#Bt#BP`xH0kM.npZvlwCGf[EnaOd0FFx|sMK.$sMK.$,sMK.$d`H/stdole2.tlbWWWDlD4hXx <0 @<8`Xp t |XL KRNLPROVLibW8ZKernelTraceProviderWd8bIWbemEventProviderWW8dIWbemObjectSinkW,8qIWbemClassObject8IWbemQualifierSetWWWBGetWwszNameWlFlagsWWpValMplFlavorPutWblFlavorWxDeleteWW GetNames_TpNamesWWBeginEnumeration Next@7pstrName7yEndEnumerationWW,@GetQualifierSetW ~ppQualSetWWWpTypeWWWTypeYwszQualifierName pQualifierValWWW +lEnumFlagsWWZstrNameW,GetPropertyQualifierSetW pwszPropertyW,CloneWWWppCopyWW, nGetObjectTextWWWpstrObjectTextWW,*SpawnDerivedClassWWWX _DppNewClassWW, jxSpawnInstanceWWW ppNewInstanceWWW, ?CompareToWWW 0 pCompareToWW,YGetPropertyOriginWWW pstrClassNameWWW, rInheritsFrom  strAncestorW, GetMethodWWW, *ppInSignatureWWWCppOutSignatureWW, zPutMethodWWW 'pInSignature ?gpOutSignatureWWW, 1DeleteMethod,l7BeginMethodEnumerationWW, NextMethodWW,IpEndMethodEnumeration,GetMethodQualifierSetWWWt fhwszMethodWWW,/qGetMethodOriginW` CwszMethodNameWWWvIndicate lObjectCount lapObjArrayWW SetStatusWWWJVhResultW~strParam pObjParamWWWd ProvideEventsWWWpSinkWWWkrnlprov 1.0 Type LibraryWKernelTraceProvider ClassW @ @ `@(0,@HX00\ `h`Lx0d PH |   H4``0$T 8T H(| $0D H8  <X$@D XTH  pP4 0Xd 8$ `T  P0 h\   0 pd  P@0 xd  Pt0 \  H0\  $D H PDP`H HH$D $D XH  PDP`4 0d `80\  ````````` ` ` ` ` ``````````` 0Dl X,|<x$x,P@p$lD\\H < l $(D 00d X$8D H@  H4 ``````` 0DlHDWts]iqX(NÈ1EE0 REGISTRYTYPELIBMUIMUIen-US (@`xȥХإ (0HPX`hpxȦЦئ (08@HPX (08@HPX`hpx808@H`hpȠР8`hpxȡ