403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Windows/System32/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/Windows/System32//werdiagcontroller.dll
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$��\W��2��2��2�ɡ��2��1��2��6��2��3ñ2��3��2��2��2��;��2�����2��0��2Rich��2PEL0E��!
l"pq�


�|�@A�y���h�0��p9T���.text
jl `.data��p@�.idata��r@@.rsrc0��@@.reloc���@BH����4��9���u`oF�F@I�IS`S0e`opq�tw@wGuidLevelFlagsCircularSizeu��:�AWERDIAG: Verifier.dll loaded. Enabling Autoverifier.
WERDIAG: ProcessStartupSettingsUpdate failed. NTSTATUS: %08X
WERDIAG: FDR will be enabled
WERDIAG: Stopping Autoverifier
WERDIAG: Stopping FDR
WERDIAG: AutoVerifier: Failed getting current user registry path. NTSTATUS: %08X
WERDIAG: AutoVerifier: Path is: %S
Software\Microsoft\Windows\Windows Error Reporting\Plugins\AutoverifierWERDIAG: AutoVerifier: Subkey is: %S
WERDIAG: AutoVerifier: could not open settings key. NTSTATUS: %08X
AutoverifierEnabledWERDIAG: AutoVerifier: could not read enabled flag. NTSTATUS: %08X
WERDIAG: AutoVerifier: Enabled flag: %u
\Registry\Machine\Software\Microsoft\Windows\Windows Error ReportingWERDIAG: Failed opening registry key. NTSTATUS: %08X
ErrorPortWERDIAG: PluginsNtGetRegStringValue failed. NTSTATUS: %08X
WERDIAG: SignalStartWerSvc failed NTSTATUS: %08X
WERDIAG: NtQuerySysInfo(ErrorPortTimeouts) failed. NTSTATUS: %08X
WERDIAG: WaitForWerSvc failed. NTSTATUS: %08X
WERDIAG: WaitForWerSvc timed out, failing the call with NTSTATUS: %08X
WERDIAG: RtlAllocateAndInitializeSid failed. NTSTATUS: %08X
WERDIAG: NtAlpcConnectPort failed. NTSTATUS: %08X
WERDIAG: NtAlpcConnectPort timed out, failing the call with NTSTATUS %08X
WERDIAG: NtAlpcSendWaitReceivePort failed. NTSTATUS: %08X
WERDIAG: Service returned failure status. NTSTATUS: %08X
WERDIAG: Failed getting current user registry path. NTSTATUS: %08X
Software\Microsoft\Windows NT\CurrentVersion\Image File Execution OptionsWERDIAG: Handle to registry key is null
WERDIAG: Failed getting process name. NTSTATUS: %08X
AutoverifierAutoVerifierCountWERDIAG: Failed reading key value. NTSTATUS: %08X
WERDIAG: Failed writing registry value. NTSTATUS: %08X
OriginalBucketAutoVerifierTimeDurationWERDIAG: Failed creating timer thread. NTSTATUS: %08X
WERDIAG: Failed deleting autovefier enabled flag. NTSTATUS: %08X
WERDIAG: Failed writing key value
\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session ManagerImageExecutionOptionsWERDIAG: Not disabling HKCU IFEO look-up because its statically enabled.
WERDIAG: Thread failed to wait for the specified time; Disabling autoverifier. NTSTATUS: %08X
verifier.dllWERDIAG: Failed obtaining verifier.dll handle. NTSTATUS: %08X
VerifierForceNormalHeapWERDIAG: Failed obtaining VerifierForceNormalHeap function address. NTSTATUS: %08X
WERDIAG: Failed switching to normal heap mode. NTSTATUS: %08X
WERDIAG: Verifier switched to light mode
\KernelObjects\SystemErrorPortReady��n�T�D������WERDIAG: AppRecorder: Failed creating AppRecorder thread. NTSTATUS: %08X
Local\{DF2B7FCA-C5B0-4638-A4AD-59F7F76CE540}WERDIAG: AppRecorder: ProcessStartupSettingsUpdate failed. HRESULT: %08X
%d-AppRecorderEnabledWERDIAG: AppRecorder: Failed creating apprecorder event name string. HRESULT: %08X
WERDIAG: AppRecorder: Failed creating event. Win32 error: %08X
WERDIAG: AppRecorder: Failed to get temp folder path. Win32 error: %08X
WERWERDIAG: AppRecorder: Failed to get temp file name. Win32 error: %08X
.AppRecorderData.xmlWERDIAG: AppRecorder: Failed to create temp file name. HRESULT: %08X
WERDIAG: AppRecorder: Failed to create apprecorder temp file. Win32 error: %08X
WERDIAG: AppRecorder: Failed to register the log file with WER. HRESULT: %08X
WERDIAG: AppRecorder: Failed to get system folder path. Win32 error: %08X
\psr.exeWERDIAG: AppRecorder: Failed to create UAR executable image path. HRESULT: %08X
%s /start /output %s /gui 0 /recordpid %d /stopevent %s /sc 0 /noarc 1 /waitonpid 1WERDIAG: AppRecorder: Failed to create UAR process command line. HRESULT: %08X
WERDIAG: AppRecorder: Failed to create UAR process. Win32 error: %08X
WERDIAG: AppRecorder: Failed getting current user registry path. NTSTATUS: %08X
Software\Microsoft\Windows\Windows Error Reporting\Plugins\AppRecorderWERDIAG: AppRecorder: AppRecorder settings key is not present. NTSTATUS: %08X
AppRecorderEnabledWERDIAG: AppRecorder: AppRecorder enabled flag is not present. NTSTATUS: %08X
AppRecorderCountWERDIAG: AppRecorder: Failed to get current process name. Win32 error: %08X
Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\LayersWERDIAG: AppRecorder: Failed to open App Recorder layer key. NTSTATUS: %08X
WERDIAG: AppRecorder: Failed to get application appcompat layers. NTSTATUS: %08X
AppRecorderWERDIAG: AppRecorder: Failed to update application appcompat layers. NTSTATUS: %08X
WERDIAG: AppRecorder: Failed to update App Recorder run count. NTSTATUS: %08X
WERDIAG: Invalid params
WERDIAG: Failed creating FDR thread. NTSTATUS: %08X
WERDIAG: GetTraceLoggerHandle failed
WERDIAG: GetTraceEnableLevel failed
WERDIAG: GetTraceEnableFlags failed
WERDIAG: Internal provider enabled for Level %u, Flags %lu
WERDIAG: Tracing disabled for internal provider
WERDIAG: Provider not registered. RegisterTraceGuids failed with %d
WERDIAG: Internal provider: FDR did not start yet; Message lost
WERDIAG: Failed determining string length. HRESULT: %08X
WERDIAG: Memory allocation for event failed.
WERDIAG: Internal provider failed to log message. Win32 error: %08X
WERDIAG: Internal log message
WERDIAG: Failed reading the session settings of updating the process ID. HRESULT: %08X
WERDIAG: Failed parsing settings string. HRESULT: %08X
WERDIAG: Failed to enable logging. HRESULT: %08X
FDR startedWERDIAG: Failed enabling trace provider. Win32 error: %08X
FDR Tracing SessionWERDIAG: Invalid arguments: Log path cannot be null
WERDIAG: Unable to allocate %d bytes for properties structure.
WERDIAG: Failed copying string buffer. HRESULT: %08X
WERDIAG: StartTrace failed for the internal provider. Win32 error: %08X
WERDIAG: Failed enabling internal trace provider. Win32 error: %08X
WERDIAG: Invalid args: The pair string cannot be null
WERDIAG: Failed obtaining string length. HRESULT: %08X
WERDIAG: Invalid format: expected '='.
WERDIAG: Invalid args
WERDIAG: Failed getting string length. HRESULT: %08X
WERDIAG: Failed copying string. HRESULT: %08X
WERDIAG: Invalid arguments: Buffer or separator character cannot be null
WERDIAG: Invalid arguments: String buffer cannot be null
WERDIAG: Failed obtaining the length of the input string. HRESULT: %08X
WERDIAG: Out of resources allocating memory for string buffer
WERDIAG: Failed making a copy of the original settings string. HRESULT: %08X
WERDIAG: Failed copying characters to pair buffer. HRESULT: %08X
WERDIAG: Invalid argument: GUID structure cannot be null
WERDIAG: Invalid argument: settins string cannot be NULL
WERDIAG: Failed extracting next token from settings string. HRESULT: %08X
WERDIAG: Failed extracting next pair from the current token. HRESULT: %08X
WERDIAG: Error parsing current pair; Ignoring pair and continuing parsing. HRESULT: %08X
WERDIAG: Failed updating settings; Parsing continues. HRESULT: %08X
WERDIAG: Log file size was not specified; Logging will not be enabled
WERDIAG: Failed reading session settings, cannot delete log file. HRESULT: %08X
%s_%dWERDIAG: Failed appending process ID to log file name. HRESULT: %08X
WERDIAG: Failed deleting file. NTSTATUS: %08X
WERDIAG: Session settings and/or FDR layer were not deleted successfuly. HRESULT: %08X
Software\Microsoft\Windows\Windows Error Reporting\Plugins\FDR\CurrentSessionAppPathWERDIAG: Failed reading string value from registry. NTSTATUS: %08X
WERDIAG: UtilRemoveAppCompatLayerFromList failed. HRESULT: %08X
WERDIAG: Failed opening session registry key. NTSTATUS: %08X
WERDIAG: Invalid arguments; pointer to string buffer cannot be null
SessionSettingsWERDIAG: Failed reading FDR settings value from registry. NTSTATUS: %08X
LogPathWERDIAG: Failed reading log file path value from registry. NTSTATUS: %08X
WERDIAG: Get current process ID failed
ProcIDWERDIAG: Failed writing process ID to registry. NTSTATUS: %08X
WERDIAG: StartFDR failed 0x%x
FDR_FLUSH_MESSAGE%s-%dWERDIAG: Failed concatenating strings. HRESULT: %08X
WERDIAG: Failed creating event. Win32 error: %08X
WERDIAG: Failed setting event. Win32 error: %08X
WERDIAG: Flushing done, done signal sent
WERDIAG: Unexpected event response or failed waiting for event
����DF�ԓ@��+f���9�vK�t���dgWERDIAG: Invalid parameters
WERDIAG: SizeTAdd failed. NTSTATUS: %08X
WERDIAG: Arithmetic operation failed. NTSTATUS: %08X
WERDIAG: Insufficient resources
%s\%sWERDIAG: Key: %S
WERDIAG: Out of resources allocating memory for key information structure
WERDIAG: Failed extracting registry value %S. NTSTATUS: %08X
WERDIAG: Failed writing to value %S. NTSTATUS: %08X
WERDIAG: Failed writing to value %S. NTSTATUS %08X
WERDIAG: NtQueryInformationProcess failed. NTSTATUS: %08X
WERDIAG: Invalid size returned. NTSTATUS: %08X
WERDIAG: Registry value %S is not of type string
WERDIAG: Failed determining string buffer length. HRESULT: %08X
WERDIAG: Failed with integer overflow
0E�.�9�-0E�
�:.0E�wRSDS�8�iS�`�|���E�WerDiagController.pdbGCTL�.rdata$brc�.CRT$XCA�.CRT$XCZ�.CRT$XIA�.CRT$XIAA�.CRT$XIZ�@.gfids�(.rdata�9.rdata$sxdata�9.rdata$zzzdbg�;�<.text$mn�x�.xdata$x�y�.edata�0.data$brc0�.data@��.bss��.idata$5��.00cfg��T.idata$2ܒ.idata$3��.idata$4t�2.idata$6�`.rsrc$01`��.rsrc$02��U���V3�FW;���Q�x��p���u�V�x��0�ȡp��
t���
t��=x�tD����hHj��W�<����t��yPh�jW�<����5p������h�jh��<��%x����%�l��uZ95x�u.h�jh��<��������tBP���%���2�=t�u)hjh��<�YY�o#���u	�M��_��^��]���U��V3�F�}ujVj�9uu�=��u�uV�u�I7�5���u�U�M���^]���U���SV3ۍE�WP��]��]�]����yPhS��u�hljh��<���Wh jh��<��� �E�3ɋ�APS�u��L*��yPhH묋M��E�P�E��]�P���]��J,��yPh�녃}�u3�FVh�jh��<���9]�t	�u���9]�t�E�P��S�E�P��_��^[��]Ë�U���,�4�3ʼnE�S3�f�E�VW����������PS3ɉ����S�(�����A������]������������������`)���P����yVh�Sh��<����~����������P���.�������y
Vhj�%�	��yVh<��3�����WjPjs����yVhp���������yVh�����u�S�P��h��S����P�������PWWWWWWWjj�E�P�(���yVh0�{������Dž���������������������t�����ꉅ��������������������#�3�WPPPP�����hP����P����P�����P�,���yVhp�����u�S�P��h�����hP�� ���jP�C8��@������hDž ���PhDž8����P������jP�8��Dž����Ph�h����������W3�WP������PW�� ���Ph������0���x3��t+9�����}������h0Wh��<�����������Vh�Wh��<�����td�0S3�S�p�4��3ۃ����t������8�����������t�����������������t������(��M���_^3�[�2��]Ë�U���DS3�3�VWhSh���]��]�]��]��]ĉ]�]�]�f��������6���E�P����yVhpSh��<����Q�E�3�PS�u亸A��%��E�P����yVh�뿋E���uhLSh��<�������f9��u�)��yVhx�{����E��M�QPS��^%��x��E���P�u�S�A%���u����M��E�P�E�]�P���]��A'��yVh������}�v,�M��E�P�G��]�P���]���'��yVh$�����M��E�P�\��)�]�xF�����+�����t�f��tf�����u��u��3�f���t
���1CVA�M��Eȃe��|�e�P�E�P�&��yVh�jh��<�����}�vQj�h�ig�3�V�u��4����E�Ph��h��hFVVVVVj�����5���|���yVh�딃�w1�u��@��u�@��h��yPh�jh��<���3���td�0Sj�p�4��}�t	�u����}�t	�u���}�t	�u���_��^[��]Ë�U��� VW3��E�P�}��}��}�}�}����yVhpWh��<�����E���PW�u�jY�#��yVh��ɋM��E�PW���}�}���%��yh,Wh��<����Y�E�3�PWW�PA�"��x;�M��E�P�E�}�P���}��$��x9}�thjh��<���������9}�t	�u���9}�t	�u���9}�t�E�P��W�E�P��_��^��]�������������̋�U��� SVW�u3�W�}�}�}�}�D�����yPhXWS�<���h��E�P���E�P�E�PWW�H���yVh�WS�<����ah�E�P�L��E�PW�E�P�u��P���yVh0��u��u��j�����֋�yVh��h�WS�<�����_��^[��]���������������̋�U����4�3ʼnE��E����M-V�u��WR�������WRPQ�8���u����~B��
��89��t�+��)������1CVAt�
���U������P���g
�M�_3�^��,��]���U���t+�EVW����+���t�<f��tf�9��N��u�_^��u����ҁ��3�f����]���U��3���t�����v�
���xQ�uQ����	��t3�f�]���U���0VWjFXjHf�E�3�Xf�E���E��E���E؍E�Ph�E��E�P�}ԉ}܉}�}�$���x6���t�ƹ�����E�U�F�E���#�VW�u�� ��u������_^��]Ë�U����4�3ʼnE�SVWj�E�3�PSj�@��W����x9]�tSSSSSSW����xF3��}�SS����E�Ph8����uF�M�3�;�_�3�%���?^��[�O+��]�����������̋�U���W3��}��}�}�����tRV�E�P�E�PWh�IWWWWWj��|���yVhHWh��<��������9}�t	�u��(���^_��]������������̋�U����
�4�3ĉ�$�
SVWjD3ۍD$$SP��.3��|$������V��3�3�f��$�Whf�D$tf��$�f��$�f��$��d�����VjWW�l���u
�@��������yPh�WS�<���d��p ��$�hDhP������yVhpWS�<����x��$�PWWW�l��؅�u9��Ph�Wh��<��������6������(��$�Ph� ���u9��PhWh��<�����������������D$hPWhT��$�P����u��Ph`먍D$hP��h���L$l���yVh�Wh��<����`Wh�jWjh@��$�P�����u��Ph( �6���P�(�jj�D$pP�����yVh� 딾��$xVP�����u��Ph� ���h !�֍�$|����yVh8!�G�����$�P�L�P�H�P�D$pP��$�Ph�!��$�hP�������yVh8"����D$�D$ DP�D$$PWWWWWW��$�P��$�P�T���u��Ph�"�4���9|$t�t$�(��|$9|$t�t$�(��|$����t��yS�(���$�
��_^[3��@'��]Ë�U���VW3��E�P���}��}�}����yPh�"Wh��<����Q�E�3�PW�u�(#A���yPh�#�΋M��E�P�E��}�P�$�}����yPh0$맃}�u3�F9}�t	�u���9}�t�E�P��W�E�P��_��^��]Ë�U���L�4�3ʼnE�SV3��@�W3�f������������������P����������������������yPh�"Wh��<����n�����(#PW���������yPh�#�Ë��������P���������P��$������x��yPh0$덋������������@�h���PW�0���u9��Ph�$Wh��<������؅����ہ���������$PW�����jY���yPh�%�����������P������y Ph�%Wh��<��������>����3ҋ��Of���f;�u�+������jX��������j����h$&P�Đ����uC9���t�����D0�P�̐Y��t$�����0P�̐Y��u1����3�f90t#�����O�����@����;�w^����뀋������ɍB�#ȍB;�r3�f�N�6+���t�}��P������}��P�������P�NP�(��3�f9>�����P������P��������P�����T��߃���t����������t��������td�0VW�p�4������t�����P��W�����P���M���_^3�[�&#��]Ë��������PV�����������������[���Ph@&����������������Q����HP��$������_���#���Ph�&�����U���t+�EVW����+���t�<f��tf�9��N��u�_^��u����ҁ��3�f���z�]���U��SVW3��W�����t�����v��xB���t
f98t����u����+ǁ�����#���xQ�u+�Q�y�M�����_��^[]���U��EV3���t=���v�W���x7S�]3�W�x��EP�uWS�Ȑ����x;�wu
��z�3�f�{_[���t�M3�f���^]�������������̋�U���VW3��E�P�E��}�PWh0eWWWWWj��}�}��|���yVh'Wh��<��������_��^��]���̋�U��E��t����h�'������P� �u������������uh<'jh��<����^SRP����؄�uhd'��5���5�������uh�'jh��<����P��Ph�'jh��<���[3�]���U��QQVW��(�E��6P3��@�WW�8�x�E�Pjh�6Wh`S�}������tPh((Wh��<������_��^��]Ë�U��Q�����SVWuhp(jh��<�����E��L*P���yPh�(jh��<������E��E6��d�0��Wj�p�X��؅�uh�(�WjS�#�E��{f�3��6�C,�E�P�C4hL*�P���C�C0�s#��S�5���5���������tPh )jV�<���hh)jV�<���d�0Sj�p�4�_^3�[��]���U���SV3�W���]�h SW�]���(��,�� ��$��"���]�E�]�M�P�E�P��]���yVh�)jh��<����?�E���P���yVh�)�Ջ�����S������yVh*�QQ� ���3���td�0Sj�p�4��}�t�u�d�0j�p�4�_��^[��]Ë�U��QS��3�V3��E�W9v[�{�uG��$�G� P�7�wj�����3������G��tQhd*jh��<���F�E�@���E�;r���_���@���^[��]Ë�U���S��VW3��E� �;�{9}uh�*Wh��<����W���M�E�P�X��yVh�(Wh��<����j�E�*P�*��xҋE�E�E���=�M�AP�E�d�0W�p�X����}�u�u�h+P뛋u�VjW�� �׋M�E�x���2�z�B,��6�u�B(�����}�Jl��B@�Bpx�@�bD�B<�B0�U��R�B��yVh@+jh��<����}Wh�*S�����tPhx+jh��<����@��O�s�3h�6jjj�����t)Vh�+jh��<�����~�������x봋M����3�d�0Wj�p�4���_^[��]���U��Q�}W����}�V�E�P���yVhH,jh��<�����j=W����YY��uh�,Ph��<����W��S��+���C��t|9E�tw�E���P���*��yPh�,jh��<����@��b�u��M�V�*
��x�M��SW�
��yVh�,jh��<����3��h�,jh��<����W�[��^�h,jh��<����W�_��]���U����}W��uh(-jh��<����W�����uht-��V�E�P�9
��yVh�-jh��<������E�S�EP�E�d�0j�p�X��؅�uh�-Ph��<�������E���7�E��P���yVh@.jh��<����A�uS��YY�7��+���E�M�pd�0�u��uk3�V�p�4��u�d�0V�7�p�X��M���uh�-Vh��<��������U���S�R������Vh�.�V���j�p�4��'�}����E�;�sV+ƉE�EPd�0j�p�X��ȉ��uh�-j�t����E�U�PB�r��yVh�,����u�v0�6Pd�0j�p�X��M���t��u�֋�S�
�A���3�d�0Sj�p�4�[��^_��]���U��� �4�3ʼnE�VW�эujY�}��}�u!�E�f��u��f��u3��|�u@��r��k�zjY�u����M�_3�^���]���U��QQ3��E��E�9Euh�.Ph��<����W���u�E�P���u�E�P�\�
��]���U��h�u�АYY��u
�u�u����oh�u�АYY��u�u�ԐY�M�A�Ih�u�АYY��u�u�ԐY�M�A�#h$�u�АYY��u�u�ԐY�M�3�]���U���<�4�3ʼnE�SV�u3�W�Mԍ}�j3��uĉU܉U؉U�Y�uh/Rh��<����W��)3�9>uh/W��d�0hW�p�X��E̅�uh�-Wh��<�������d�0hW�p�X��Eȅ�uh�-Wh��<������z�]�9>�(�E؋�Pj;�y��������}����}�3��}�}૫��3���td�0SW�p�4��}܍E�Pj,�M��.��������]܅�tG�uȋˋ}�VW������yPh�/��MԍE�P�E�PVW�����yPhP0jh��<����}��v������u�jY���}ԋ�����}ԋuă>t!3�����Vh�/Wh��<��]܃��B�EЅ�t �G3����2VhP/Wh��<����3�h�0Wh��<����@���td�0SW�p�4��}�t�u�d�0W�p�4��u�d�0W�p�4��Eȅ�tPd�0W�p�4��ƋM�_^3�[���]���U���8SVWjY3��}��3��}�߉}�}��}���E�}�P�E��}�P�M��V��y"Vh�0Wh��<�����}���d�0hW�p�X��؅�uh�-Wh��<������d��}��p Wh41hS�`�����yVh@1jh��<����S�E�P��jj�E�P�u�`��E��E�3ɉEԍẺM�P�E�@�M܉M�d��E��E�P���E���yPh�1jh��<��u�������yVh�1�d���3���td�0Wj�p�4��}�t�u�d�0j�p�4���td�0Sj�p�4�_��^[��]���U���S3ۍE�VW���]�P�]�]�}�]����E��2PS�u�jY���yVh���M��E�P��2�
�}��xt��tp�u����E���$PS�u�jY�l��x��M��E�P���Z
��yVh�6h�&S��S�<����W�Vh3jS�<���3��Vh�2Sh��<�����}�}�t'W�E�P���E�P�u��T��}�t	�u�����td�0WS�p�4��}�t�u�d�
0S�q�4�_��^[��]Ë�U���VW3��E�P�}��}�}����E��2PW�u���b��yVhL3Wh��<�������u��@���9}�t	�u���_��^��]Ë�U���S3�VW���]�9]uh�3Sh��<����W����uV���E��2PS�vjY����y Vh�Sh��<�������M���3W���yVh�3��u�M��D4�z��yVhX4�d��@ ��uh�4Sh��<����@��+�M�]�Q�M���4P�]��$��yVh�4�[�����9]�t	�u�����_^[��]��������������̋�U����<�4�3ĉ�$8SVW�L$�X��yVh 5jh��<����ed�3�hS�p d�0�p�X�����uh�-Sh��<������!Vh@5hd5hW�������yVhp5Sh��<�����WSSS�l���u%��Ph�5Sh��<����@���L$�Å�t�T$09u@����u���%�HP�%=uE�L$�8�3Ʌ���I��w����QV�h���u�V�p���u)��Ph�5�s���h@6Sh��<��@��h6Sh��<����d�0WS�p�4���$D��_^[3��
��]Ë�U��3���t�����v�W���x�}���v�W���u�uQ��	��t3�f�]���U���t)�EV�u+�W��t�<f��tf�9��N��u�_^��u����ҁ��3�f���z�]���U��3���t�����v�W���xh����uQ����	��t3�f�]���U��US3ۅ�t:VW������f9t����u����%���W���t��t+��:��_^��W���y��t�[]���U���0SV3��M�ډu�u�u��u�W�������E�����09u�;�M�E�P�Y�����y$VhH,jh��<����������E��P�$�����xˋE�E�;E����H;�r�����;���j��Y������r	�����d�0Vj�p�X�����uh$7Ph��<�������S�u��hH7VW�^������y$Vhp5jh��<���������W�E�P��3��:��Ph�6���Ph�6jh���<����S�E�P���u컖hT7jS�<��E���EԍE�E؍E��E�P�u��E�@�u�u�u�h���yVh�jS�<����3���td�0Wj�p�4����h�6Vh��<����
�_^[��]���U��QSVW��3��}��څ�uh�6Wh��<����
���ES�u�8��d�0jW�p�X�����uhh7Ph��<�������T�E�PjWj�uV�l���x�u�M3��G��VSh�7jh��<���d�0Wj�p�4���_^[��]���U��V��W����uh�6Qh��<����
��AW�u��j�EPjj�uV�p���yVWh�7jh��<����3���_^]���U��QSV��W����th�u��taW�u���e��΍Qf���f;E�u�+���MPVj3�P�uS�p���3���yVWh,8Ph��<��������h�6jh��<����
�_^[��]���U����4�3ʼnE�VW�����V3�WP�}������WVPj+j��t���yVh`8Wh��<���������f;�v
��Vh�8����3ҋ�����f�H����������F������\t��/t��:t��;�w�R���������y��P���h�,�g������M���_3�^�b��]Ë�U���SV3ۋ�W���]�]�]�]���������W�E�P��d�0hS�p�X��؅�uhh7Ph��<�������=�E�PhSj�E�PV�l���yVWh�7jh��<������{t Wh�8jh����<������U��M�Q�K���y$Vh9jh��<����������E�x;�rod�0Wj�p�X��ȋE���uh�-Qh��<�����Q����������W���tQ�C��PQ�?���yVh�,�m���3��hD9jh��<������d�0Sj�p�4����h�6Sh��<����
�_^[��]���U��V3��ƅ�t1�����t
f91t����u����+Ё����W����#���W��U��t��x����2��^]�������������h����ć���Y��u@à 3�Ë�U����}SVW���@����dH3ۣ@��ȇd��]�P�ʉU�3���3�G�;�th��x��U�3�������u���}�=̇t
j�Y�\�ć�E���th�5�����u���;�r:��M��t�����U�ć�
��;�u�E�9M�t͋‰M����E����P��3����Y�ćG�ȇ�̇9]���3����3�G9}��d�3ۉ]�ȇ�P�U��;�th��x��U�3�������u���}�9̇j[t	j���5h�h��=̇�AYY��t3��Xh�h��Y�̇�}�Yu3���=Їt&hЇ��Y��t�u�5Ї��S�u�����@���_^[��]���̋�U��}u�]� ��U��csm�9Eu
�uP�	YY]�3�]�j,h�x��E�3��u��E��w�0��}u�=@�u�u��9�E��t	�����=ԇ��tN�E��}u
�D��u�u�u�����׉E���M���E�QP�I���YYËe�3��u�u��}����E��u�u�u�����E���M���E�QP����YYËe�3��u�u��}����E��u�u�u�j���E���M���E�QP����YYËe�3��u�u��}���}����E�VV�u�!����M���E�QP�}���YYËe�3��u��E�VV�u�]�����M���E�QP�N���YYËe�3��u��=ԇ��t4�E�VV�u��������M���E�QP����YYËe�3��u��E��t	�����E��u�u�u�����E���M���E�QP����YYËe�3��u�u��=ԇ��tG�=D�t>�E��u�u�u�����׉E���M���E�QP�y���YYËe�3��u�u��E�������E����}w
�0������U��V�u3�;usW��u�>��t
�����׃�;ur�_^]�������������;
4�u�����U��}u�e3�@]��%���%�������������̋�U��E3�SVW�H<��A�Y�����t�}�p;�r	�H�;�r
B��(;�r�3�_^[]�����������̋�U��j�hXyhwd�P��SVW�4�1E�3�P�E�d��e��E�h�z����tT�E-Ph�P�������t:�@$���Ѓ��E������M�d�
Y_^[��]ËE�3Ɂ8�����Ëe��E�����3��M�d�
Y_^[��]����̋�U��M�MZf9u�A<��8PEu�f9Hu�]�3�]Ë�U����e��e��4�VW�N�@����;�t��ud�E�P����E�3E�E��D�1E��@�1E����3E��M�3��E��E�P�\��E�3E�3E���;�t�54�u�O�@��ȉ
4���_�8�^��]�%����hwd�5�D$�l$�l$+�SVW�4�1E�3�P�e�u��E��E������E��E�d�ËM�d�
Y__^[��]Q���������������̋�U��u�u�u�uh�th4��M��]���������������U��j���u��h	��L�P�P�]Ë�U���$�H��
D��@��<��58��=4�f�`�f�
T�f�0�f�,�f�%(�f�-$���X��E�L��E�P��E�\����������P��T��H�	��L��X�jXk�ǀ\�jX���
4���\�jX��
8���\�jXk��
4��L�jX���
8��L�h������]�%�������������̋D$�L$ȋL$u	�D$���S��؋D$�d$؋D$���[��%ؐ�%ܐ�%���������������2t,r@ror�r�r�r�rs's;sesys�s�s�st������������u�u0E��y�y�y�y�F@IS�y�yzWerDiagController.dllQueryOriginalBucketStartAppRecorderStartFDR,������N�@���Dx�h�L���ʗؗ��V��d�����������ܔ��������Ԕ"��<��4���b�x�L���̙t�ޖЖ���
�������������������
�(�@�X�v�����̚���$�@�N���r���������ԛ����.�>�J�\�l���\�@w������h���x� �Е0�L���\�0��@�p�H����l���Ɩ���$����̘(�(��8�T��d��2� ��R����r�����������ڙ��x�h�L���ʗؗ��V��d�����������ܔ��������Ԕ"��<��4���b�x�L���̙t�ޖЖ���
�������������������
�(�@�X�v�����̚���$�@�N���r���������ԛ����.�>�J�\�l���\�o_XcptFilter_amsg_exit�free�malloc�_inittermmsvcrt.dllj_except_handler4_common-SleepQueryPerformanceCounter
GetCurrentProcessIdGetCurrentThreadIdGetSystemTimeAsFileTimeGetTickCountUnhandledExceptionFilterSetUnhandledExceptionFilterGetCurrentProcessMTerminateProcessapi-ms-win-core-synch-l1-2-0.dllapi-ms-win-core-libraryloader-l1-2-0.dllapi-ms-win-core-profile-l1-1-0.dllapi-ms-win-core-processthreads-l1-1-0.dllapi-ms-win-core-sysinfo-l1-1-0.dllapi-ms-win-core-errorhandling-l1-1-0.dlloLdrDisableThreadCalloutsForDll#DbgPrintExntdll.dll�_vsnwprintf_wcsnicmp�isspacepwcschr
_wcsicmp�_wtoiWerRegisterFileapi-ms-win-core-windowserrorreporting-l1-1-0.dllCloseHandleReadProcessMemoryGetLastErrorOpenEventWCreateEventW>GetTempPathW<GetTempFileNameW	DeleteFileWCreateFileWGetSystemDirectoryWGetProcessIdCreateProcessWGetModuleFileNameWGetTraceLoggerHandleGetTraceEnableLevelGetTraceEnableFlagsRegisterTraceGuidsWTraceEventStartTraceW6WaitForSingleObject)SetEventapi-ms-win-core-handle-l1-1-0.dllapi-ms-win-core-memory-l1-1-0.dllapi-ms-win-core-synch-l1-1-0.dllapi-ms-win-core-file-l1-2-0.dllapi-ms-win-core-file-l1-1-0.dllapi-ms-win-eventing-classicprovider-l1-1-0.dllapi-ms-win-eventing-controller-l1-1-0.dllEnableTraceapi-ms-win-eventing-legacy-l1-1-0.dllNtClose�RtlFormatCurrentUserKeyPath�RtlFreeUnicodeStringIRtlInitUnicodeStringBEtwEventWriteNoRegistrationWZwUpdateWnfStateData�ZwQueryWnfStateNameInformation�NtQuerySystemInformation�NtWaitForSingleObject�NtOpenEvent�RtlAllocateAndInitializeSid�NtAlpcConnectPort�NtAlpcSendWaitReceivePort�RtlFreeHeap�RtlFreeSidKRtlCreateUserThreadENtDeleteKey@NtDelayExecutionzLdrGetDllHandle>RtlInitAnsiString�LdrGetProcedureAddressHNtDeleteValueKey�RtlAllocateHeap�RtlGUIDFromString�RtlDosPathNameToNtPathName_UDNtDeleteFile�NtOpenKey�NtQueryValueKeycNtSetValueKey�NtQueryInformationProcess	memcpymemmove
memset�0�	H`���4VS_VERSION_INFO��
-cE
-cE?,StringFileInfo040904B0LCompanyNameMicrosoft Corporation\FileDescriptionWER Diagnostic Controllern'FileVersion10.0.17763.5933 (WinBuild.160101.0800)TInternalNameWER Diagnostic Controller�.LegalCopyright� Microsoft Corporation. All rights reserved.TOriginalFilenameWERDiagController.dllj%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.17763.5933DVarFileInfo$Translation	�00D0H0P0X0�00|�;�;<<<%<+<;<I<[<d<m<<�<�<�<�<�<�<�<�<�<�<�<	=4=I=~=�=�=�=�=�=�=�=�=>>>0>?>J>c>�>�>�>�>�>?*?@?L?h?�?�?�?�?@xJ0V0p0�01+1=1I1c1|1�1�1�1�122!2-2D2V2`2n2z2�2�2�2�2�23,3@3Q3b3�3�3�3�3�34444$4*464F4O4^4k4�4�4�4�4�4�4�4	5"515G5S5e5�5�5�5�5�5�5�56.666>6H6X6d6l6v6�6�6�6�6�6�6�6�67727<7?8h8�8�8�8�8�8�899h9u9�9�9�9�9�92:E:g:o:�:�:�:�:�:�:�:�:;;$;0;9;\;j;t;z;�;�;�;�;�;�;�;�;<<&<0<6<@<Z<m<t<�<�<�<�<�<==)=a=k=w=�=�=�=�=�=�=�=
>X>b>n>�>�>�>�>�>?
???(?K?e?�?�?�?�?PD0$0�0�0�01#191G1�1�1�1�23,383D3w3|3�3�3�3�3�3�3�3�3�3�3�3�3�344.4H4N4W4a4m4�4�4�4�4�4�4�4�45565W5]5c5r5{5�5�5�5
6666S6t6�6�6�6�6B7N7s77�7�7�78P8]8h8o8y8�8�8�8�8�8�8/9<9M9Z9f9�9�9�9�9::#:0:U:b:z:�:�:�:�:�:	;;(;T;i;w;�;�;�;�;�; <B<q<�<=
=$=1=F=O=g=p==�=�=�=�=�=�=�=>>7>O>[>g>�>�>�>?;?Y?f?�?�?�?�?�?�?`L0(0;0S0�0�0�0�01171D1W1h1�1�1�1�1�1�122N2V2o2�2�2�2�2�2�2�2�23303=3L3a3{3�3�3�3�3�3�34&4=4E4^4j4�4�4�4�4�4�4�4�45?5`5m5�5�5�5�5�5�5�5�5666{6�6�6�6�6�6�6�6�6r88�8�89#999F9b9q9~9�9�9�9�9�9�9�9:$:0:\:h:�:�:�:�:�:�:�:;*;6;J;^;k;x;�;�;�;�;<<3<e<q<}<�<�<=V=k=v=�=�=�=�=�=�=	>>C>S>_>�>�>�>�>�>�>g?l?q?�?�?�?�?�?p�0010:0@0a0i0p0v0|0�0�0�0�0�0�0
111/171J1V1^1�1�1�1�12!2E3]3�3�3�3:4b4�4�4�455/5M5a5g5646C6L6U6j66�6�6�6�6�6"7'7L7U7`7g7y77�7�7�7�7�7�7�7�7�7�7�7�7�7�7�7�7�78
88$848:8E8K8W8g8p88�8�8�8�8�8�899999 9(9,94989@9D9L9P9l9p9�0��1

Youez - 2016 - github.com/yon3zu
LinuXploit