Hacked By AnonymousFox
| Current Path : C:/Windows/System32/ |
|
|
| Current File : C:/Windows/System32/werdiagcontroller.dll |
MZ @ !L!This program cannot be run in DOS mode.
$ \W222ɡ212623ñ23222;2202Rich2 PE L X? !
l " pq
\ @A y h 0 p9 T .text
j l `.data p @ .idata r @ @.rsrc 0 @ @.reloc @ B H 4 9 u `o F F @I I S `S 0e `o pq t w @w G u i d L e v e l F l a g s C i r c u l a r S i z e u: AWERDIAG: Verifier.dll loaded. Enabling Autoverifier.
WERDIAG: ProcessStartupSettingsUpdate failed. NTSTATUS: %08X
WERDIAG: FDR will be enabled
WERDIAG: Stopping Autoverifier
WERDIAG: Stopping FDR
WERDIAG: AutoVerifier: Failed getting current user registry path. NTSTATUS: %08X
WERDIAG: AutoVerifier: Path is: %S
S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ P l u g i n s \ A u t o v e r i f i e r WERDIAG: AutoVerifier: Subkey is: %S
WERDIAG: AutoVerifier: could not open settings key. NTSTATUS: %08X
A u t o v e r i f i e r E n a b l e d WERDIAG: AutoVerifier: could not read enabled flag. NTSTATUS: %08X
WERDIAG: AutoVerifier: Enabled flag: %u
\ R e g i s t r y \ M a c h i n e \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g WERDIAG: Failed opening registry key. NTSTATUS: %08X
E r r o r P o r t WERDIAG: PluginsNtGetRegStringValue failed. NTSTATUS: %08X
WERDIAG: SignalStartWerSvc failed NTSTATUS: %08X
WERDIAG: NtQuerySysInfo(ErrorPortTimeouts) failed. NTSTATUS: %08X
WERDIAG: WaitForWerSvc failed. NTSTATUS: %08X
WERDIAG: WaitForWerSvc timed out, failing the call with NTSTATUS: %08X
WERDIAG: RtlAllocateAndInitializeSid failed. NTSTATUS: %08X
WERDIAG: NtAlpcConnectPort failed. NTSTATUS: %08X
WERDIAG: NtAlpcConnectPort timed out, failing the call with NTSTATUS %08X
WERDIAG: NtAlpcSendWaitReceivePort failed. NTSTATUS: %08X
WERDIAG: Service returned failure status. NTSTATUS: %08X
WERDIAG: Failed getting current user registry path. NTSTATUS: %08X
S o f t w a r e \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ I m a g e F i l e E x e c u t i o n O p t i o n s WERDIAG: Handle to registry key is null
WERDIAG: Failed getting process name. NTSTATUS: %08X
A u t o v e r i f i e r A u t o V e r i f i e r C o u n t WERDIAG: Failed reading key value. NTSTATUS: %08X
WERDIAG: Failed writing registry value. NTSTATUS: %08X
O r i g i n a l B u c k e t A u t o V e r i f i e r T i m e D u r a t i o n WERDIAG: Failed creating timer thread. NTSTATUS: %08X
WERDIAG: Failed deleting autovefier enabled flag. NTSTATUS: %08X
WERDIAG: Failed writing key value
\ R e g i s t r y \ M a c h i n e \ S Y S T E M \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ S e s s i o n M a n a g e r I m a g e E x e c u t i o n O p t i o n s WERDIAG: Not disabling HKCU IFEO look-up because its statically enabled.
WERDIAG: Thread failed to wait for the specified time; Disabling autoverifier. NTSTATUS: %08X
v e r i f i e r . d l l WERDIAG: Failed obtaining verifier.dll handle. NTSTATUS: %08X
VerifierForceNormalHeap WERDIAG: Failed obtaining VerifierForceNormalHeap function address. NTSTATUS: %08X
WERDIAG: Failed switching to normal heap mode. NTSTATUS: %08X
WERDIAG: Verifier switched to light mode
\ K e r n e l O b j e c t s \ S y s t e m E r r o r P o r t R e a d y nT DWERDIAG: AppRecorder: Failed creating AppRecorder thread. NTSTATUS: %08X
L o c a l \ { D F 2 B 7 F C A - C 5 B 0 - 4 6 3 8 - A 4 A D - 5 9 F 7 F 7 6 C E 5 4 0 } WERDIAG: AppRecorder: ProcessStartupSettingsUpdate failed. HRESULT: %08X
% d - A p p R e c o r d e r E n a b l e d WERDIAG: AppRecorder: Failed creating apprecorder event name string. HRESULT: %08X
WERDIAG: AppRecorder: Failed creating event. Win32 error: %08X
WERDIAG: AppRecorder: Failed to get temp folder path. Win32 error: %08X
W E R WERDIAG: AppRecorder: Failed to get temp file name. Win32 error: %08X
. A p p R e c o r d e r D a t a . x m l WERDIAG: AppRecorder: Failed to create temp file name. HRESULT: %08X
WERDIAG: AppRecorder: Failed to create apprecorder temp file. Win32 error: %08X
WERDIAG: AppRecorder: Failed to register the log file with WER. HRESULT: %08X
WERDIAG: AppRecorder: Failed to get system folder path. Win32 error: %08X
\ p s r . e x e WERDIAG: AppRecorder: Failed to create UAR executable image path. HRESULT: %08X
% s / s t a r t / o u t p u t % s / g u i 0 / r e c o r d p i d % d / s t o p e v e n t % s / s c 0 / n o a r c 1 / w a i t o n p i d 1 WERDIAG: AppRecorder: Failed to create UAR process command line. HRESULT: %08X
WERDIAG: AppRecorder: Failed to create UAR process. Win32 error: %08X
WERDIAG: AppRecorder: Failed getting current user registry path. NTSTATUS: %08X
S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ P l u g i n s \ A p p R e c o r d e r WERDIAG: AppRecorder: AppRecorder settings key is not present. NTSTATUS: %08X
A p p R e c o r d e r E n a b l e d WERDIAG: AppRecorder: AppRecorder enabled flag is not present. NTSTATUS: %08X
A p p R e c o r d e r C o u n t WERDIAG: AppRecorder: Failed to get current process name. Win32 error: %08X
S o f t w a r e \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ A p p C o m p a t F l a g s \ L a y e r s WERDIAG: AppRecorder: Failed to open App Recorder layer key. NTSTATUS: %08X
WERDIAG: AppRecorder: Failed to get application appcompat layers. NTSTATUS: %08X
A p p R e c o r d e r WERDIAG: AppRecorder: Failed to update application appcompat layers. NTSTATUS: %08X
WERDIAG: AppRecorder: Failed to update App Recorder run count. NTSTATUS: %08X
WERDIAG: Invalid params
WERDIAG: Failed creating FDR thread. NTSTATUS: %08X
WERDIAG: GetTraceLoggerHandle failed
WERDIAG: GetTraceEnableLevel failed
WERDIAG: GetTraceEnableFlags failed
WERDIAG: Internal provider enabled for Level %u, Flags %lu
WERDIAG: Tracing disabled for internal provider
WERDIAG: Provider not registered. RegisterTraceGuids failed with %d
WERDIAG: Internal provider: FDR did not start yet; Message lost
WERDIAG: Failed determining string length. HRESULT: %08X
WERDIAG: Memory allocation for event failed.
WERDIAG: Internal provider failed to log message. Win32 error: %08X
WERDIAG: Internal log message
WERDIAG: Failed reading the session settings of updating the process ID. HRESULT: %08X
WERDIAG: Failed parsing settings string. HRESULT: %08X
WERDIAG: Failed to enable logging. HRESULT: %08X
F D R s t a r t e d WERDIAG: Failed enabling trace provider. Win32 error: %08X
F D R T r a c i n g S e s s i o n WERDIAG: Invalid arguments: Log path cannot be null
WERDIAG: Unable to allocate %d bytes for properties structure.
WERDIAG: Failed copying string buffer. HRESULT: %08X
WERDIAG: StartTrace failed for the internal provider. Win32 error: %08X
WERDIAG: Failed enabling internal trace provider. Win32 error: %08X
WERDIAG: Invalid args: The pair string cannot be null
WERDIAG: Failed obtaining string length. HRESULT: %08X
WERDIAG: Invalid format: expected '='.
WERDIAG: Invalid args
WERDIAG: Failed getting string length. HRESULT: %08X
WERDIAG: Failed copying string. HRESULT: %08X
WERDIAG: Invalid arguments: Buffer or separator character cannot be null
WERDIAG: Invalid arguments: String buffer cannot be null
WERDIAG: Failed obtaining the length of the input string. HRESULT: %08X
WERDIAG: Out of resources allocating memory for string buffer
WERDIAG: Failed making a copy of the original settings string. HRESULT: %08X
WERDIAG: Failed copying characters to pair buffer. HRESULT: %08X
WERDIAG: Invalid argument: GUID structure cannot be null
WERDIAG: Invalid argument: settins string cannot be NULL
WERDIAG: Failed extracting next token from settings string. HRESULT: %08X
WERDIAG: Failed extracting next pair from the current token. HRESULT: %08X
WERDIAG: Error parsing current pair; Ignoring pair and continuing parsing. HRESULT: %08X
WERDIAG: Failed updating settings; Parsing continues. HRESULT: %08X
WERDIAG: Log file size was not specified; Logging will not be enabled
WERDIAG: Failed reading session settings, cannot delete log file. HRESULT: %08X
% s _ % d WERDIAG: Failed appending process ID to log file name. HRESULT: %08X
WERDIAG: Failed deleting file. NTSTATUS: %08X
WERDIAG: Session settings and/or FDR layer were not deleted successfuly. HRESULT: %08X
S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ W i n d o w s E r r o r R e p o r t i n g \ P l u g i n s \ F D R \ C u r r e n t S e s s i o n A p p P a t h WERDIAG: Failed reading string value from registry. NTSTATUS: %08X
WERDIAG: UtilRemoveAppCompatLayerFromList failed. HRESULT: %08X
WERDIAG: Failed opening session registry key. NTSTATUS: %08X
WERDIAG: Invalid arguments; pointer to string buffer cannot be null
S e s s i o n S e t t i n g s WERDIAG: Failed reading FDR settings value from registry. NTSTATUS: %08X
L o g P a t h WERDIAG: Failed reading log file path value from registry. NTSTATUS: %08X
WERDIAG: Get current process ID failed
P r o c I D WERDIAG: Failed writing process ID to registry. NTSTATUS: %08X
WERDIAG: StartFDR failed 0x%x
F D R _ F L U S H _ M E S S A G E % s - % d WERDIAG: Failed concatenating strings. HRESULT: %08X
WERDIAG: Failed creating event. Win32 error: %08X
WERDIAG: Failed setting event. Win32 error: %08X
WERDIAG: Flushing done, done signal sent
WERDIAG: Unexpected event response or failed waiting for event
DFԓ@+f9vKtdgWERDIAG: Invalid parameters
WERDIAG: SizeTAdd failed. NTSTATUS: %08X
WERDIAG: Arithmetic operation failed. NTSTATUS: %08X
WERDIAG: Insufficient resources
% s \ % s WERDIAG: Key: %S
WERDIAG: Out of resources allocating memory for key information structure
WERDIAG: Failed extracting registry value %S. NTSTATUS: %08X
WERDIAG: Failed writing to value %S. NTSTATUS: %08X
WERDIAG: Failed writing to value %S. NTSTATUS %08X
WERDIAG: NtQueryInformationProcess failed. NTSTATUS: %08X
WERDIAG: Invalid size returned. NTSTATUS: %08X
WERDIAG: Registry value %S is not of type string
WERDIAG: Failed determining string buffer length. HRESULT: %08X
WERDIAG: Failed with integer overflow
X? . 9 - X?
: . X? w RSDS{m`K֚:& WerDiagController.pdb GCTL .rdata$brc .CRT$XCA .CRT$XCZ .CRT$XIA .CRT$XIAA .CRT$XIZ @ .gfids ( .rdata 9 .rdata$sxdata 9 .rdata$zzzdbg ; < .text$mn x .xdata$x y .edata 0 .data$brc 0 .data @ .bss .idata$5 .00cfg T .idata$2 ܒ .idata$3 .idata$4 t 2 .idata$6 ` .rsrc$01 ` .rsrc$02 UV3FW; Qx p u V x 0 ȡp
t
t =x tD hH j W< t yPh j W< 5p h jh < %x % luZ95x u.h jh < tBP % 2=t u)h jh < YYo# u M _^] UV3F} uj Vj 9u u= uuVuI7 5 uU M^] U SV3ۍEWP]]] y Ph S uhl jh < Wh jh < E3ɋAPSuL* yPhH 묋MEPE]P ]J, yPh 녃}u3FVh jh < 9]t u 9]tEP SEP _^[]ËU, 4 3ʼnES3fE VWPS3ɉS( A ] `) P yVh Sh < ~ P . y
Vh j % yVh< 3WjPjs y Vhp y Vh uS Ph SP PWWWWWWWjjEP( y Vh0 { Dž tꉅ #3WPPPP h PPPP, y Vhp uS Ph h P j PC8 @ h Dž PhDž8 Pj P8 DžPhh W3WPPW Ph 0 x3 t+9} h0 Wh < Vh Wh < td0 S3Sp4 3ۃ t 8 t t ( M_^3[2 ]ËUDS33VWh Sh ]]]]]ĉ]]]f 6 EP yVhp Sh < Q E3PSu亸 A% EP yVh 뿋Eu hL Sh < f9 u) y Vhx {EM QPS ^% xE Pu SA% uMEPE]P ]A' y Vh }v,MEPG]P ]' y Vh$ MEP\ ) ]xF +tft fuu3ft
1CVAMEȃe | e PEP& yVh j h < } vQjhig3Vu4 EPh h h F VVVVVj 5 | yVh 딃w1u@ u@ h yPh j h < 3td0 Sj p4 } t u } t u } t u _^[]ËU VW3EP}}}}} yVhp Wh < E PWujY# yVh ɋMEPW }}% yh, Wh < YE3PWWP A" x;MEPE}P }$ x 9}th jh < 9}t u 9}t u 9}tEP WEP _^]̋U SVWu3W}}}}D yPhX WS< h EP EPEPWWH yVh WS< ah EPL EPWEPuP yVh0 uuj yVh h WS< _^[] ̋U 4 3ʼnEE M- Vu WR WRPQ8 u ~B
89t+)1CVAt
UPg
M_3^, ] Ut+E VW+t<ft f9Nu_^uҁ3f ] U3tv
x QuQ t3f] U0VWjFXjHfE3XfEEE E؍EPh EE P}ԉ}܉}}$ x6tƹEUFE#VWu u _^]ËU 4 3ʼnESVWjE3PSj@ W x9]tSSSSSSW xF3}SSEPh8 uFM3;_3%?^ [O+ ]̋U W3}}} tRVEPEPWhI WWWWWj| y VhH Wh < 9}t u( ^_]̋U
4 3ĉ$
SVWjD3ۍD$$SP. 3|$ V33f$ Wh fD$tf$ f$ f$ d VjWWl u
@ yPh WS< d p $ hD h P yVhp WS< x $ PWWWl u9 Ph Wh < 6 ( $ Ph u9 Ph Wh < D$hPWhT $ P u Ph` 먍D$hP h L$l yVh Wh < ` Wh jWjh @$ P u Ph( 6P( jjD$pP yVh 딾 $x VP u Ph h ! ֍$| y Vh8! G$ PL PH PD$pP$ Ph! $ h P y Vh8" D$D$ D PD$$PWWWWWW$ P$ PT u Ph" 49|$tt$( |$9|$tt$( |$t yS( $
_^[3@' ]ËUVW3EP}}} yPh" Wh < QE3PWu(# A yPh# MEPE}P$ } yPh0$ 맃}u3F9}t u 9}tEP WEP _^]ËUL 4 3ʼnESV3@ W3fP yPh" Wh < n (# PW yPh# ËPP$ x yPh0$ 덋 @ h PW0 u9 Ph$ Wh < ہ $ PWjY y Ph% P y Ph% Wh < > 3ҋOff;u+ jXj h$& PĐ uC9tD0P̐ Yt$0P̐ Yu13f9 0t#O@;w^뀋ɍB#ȍB ;r3fN6+t}P}PPNP( 3f9> PP PT ߃ t t td0 VWp4 tP WP M_^3[&# ]ËPV [Ph@& QHP$ _ #Ph& Ut+E VW+t<ft f9Nu_^uҁ3fz ] USVW3W tvxBt
f98tu+ǁ#xQu+Q yM_^[] UE V3t=vW x7S]3WxEPuWSȐ x;wu
z 3f{_[ tM3f^]̋U VW3EPE}PWh0e WWWWWj}}| y Vh' Wh < _^]̋UEt h' P u uh<' j h < ^SRP uhd' 5 5 uh' j h < PPh' j h < [3] UQQVW( E6 P3@ WW8xEPjh6 Wh`S } tPh(( Wh < _^]ËUQ SVWuhp( j h < EL* P yPh( j h < EE6 d0 Wj pX uh( Wj S# E{f36 C, E PC4hL* PC C0 s# S5 5 tPh ) j V< hh) j V< d0 Sj p4 _^3[] USV3W]h SW]( , $ " ]E]MPEP ]yVh) j h < ?EP yVh) ՋS yVh* QQ 3td0 Sj p4 } tud0 j p4 _^[]ËUQS3V3EW9v[{ uG$ G P7wj 3GtQhd* j h < FE@ E;r_@ ^[]ËUSVW3E ;{9}u h* Wh < W MEPX yVh( Wh < j E* P* xҋE E E=MAPEd0 WpX }u uh + P뛋uVj W MEx 2zB, 6 uB( }JlB@Bpx @bD B<B0 URB yVh@+ j h < }Wh* S t Phx+ j h < @ Os3h6 jjj t)Vh+ j h < ~ x 봋M3d0 Wj p4 _^[] UQ} W } VEP yVhH, j h < j=W YYu h, Ph < W S+Ct|9EtwEP* y Ph, j h < @ buM V*
xM SW
yVh, j h < 3h, j h < W [^h, j h < W _] U} Wu h(- j h < W uht- VEP9
yVh- j h < ESE PEd0 j pX u h- Ph < E7EP yVh@. j h < A uS YY7+EMpd0 uuk3Vp4 ud0 V7pX M u h- Vh < USR Vh. Vj p4 ' } E;sV+ƉEE Pd0 j pX ȉu h- j tEUPBr y Vh, uv06Pd0 j pX M tuS
A3d0 Sj p4 [^_] U 4 3ʼnEVWэujY}} u!Efufu3| u@rk zjYuM_3^ ] UQQ3EE9E uh. Ph < W uEP u EP\
] Uh uА YYu
uu oh uА YYuu Ԑ YMAIh uА YYuu Ԑ YMA#h$ uА YYuu Ԑ YM3] U<4 3ʼnESVu3WMԍ}j3uĉU܉U؉UYu h/ Rh < W ) 39>uh/ Wd0 h WpX E̅u h- Wh < d0 h WpX Eȅu h- Wh < z ]9>( E؋Pj;y } }3}}૫3td0 SWp4 }܍EPj,M. ]܅tGuȋˋ}VWyPh/ MԍEPEPVWyPhP0 j h < } v ujY}ԋ}ԋuă> t!3Vh/ Wh < ]܃BEЅt G32VhP/ Wh < 3h0 Wh < @ td0 SWp4 } tud0 Wp4 ud0 Wp4 EȅtPd0 Wp4 ƋM_^3[ ] U8SVWjY3}3}߉}}} E}PE}PMV y"Vh0 Wh < } d0 h WpX uh- Wh < d }p Wh41 h S`yVh@1 j h < SEP j j EPu` EE 3ɉEԍẺMPE@ M܉Md EEP Ey Ph1 j h < u y Vh1 d3td0 Wj p4 } tud0 j p4 td0 Sj p4 _^[] U S3ۍEVW]P]]}] E2 PSujY y Vh MEP2
}xttpu E$ PSujYl xMEPZ
yVh 6h& S S< W Vh3 j S< 3 Vh2 Sh < } } t'WEP EPuT } t u td0 WSp4 } tud
0 Sq4 _^[]ËUVW3EP}}} E2 PWu b y VhL3 Wh < u@ 9}t u _^]ËU S3VW]9]u h3 Sh < W u V E2 PSvjY y Vh Sh < M3 W yVh3 uMD4 z yVhX4 d @ uh4 Sh < @ +M]QM4 P]$ y Vh4 [9]t u _^[] ̋U< 4 3ĉ$8 SVWL$XyVh 5 j h < e d 3h Sp d0 pX u h- Sh < ! Vh@5 hd5 h WyVhp5 Sh < WSSSl u% Ph5 Sh < @ L$ÅtT$09u@ u% HP%= uEL$83ɅIw QVh uVp u) Ph5 sh@6 Sh < @ h6 Sh < d0 WSp4 $D _^[3
]ËU3tvW x } vW u uQ t3f] Ut)E Vu+Wt<ft f9Nu_^uҁ3fz ] U3tvW xhuQ t3f] UUS3ۅt:VWf9tu%W t t+:_^W yt[] U0SV3MډuuuuW E 09u; MEPYy$VhH, j h < EP$xˋEE;E H;r; jY r d0 Vj pX u h$7 Ph < SuhH7 VW^y$Vhp5 j h < WEP 3:Ph6 Ph6 j h < SEP u컖 hT7 jS< E EԍEE؍EE PuE@ uuuh yVh j S< 3td0 Wj p4 h6 Vh <
_^[] UQSVW3}څu h6 Wh <
ESu 8 d0 jWpX uhh7 Ph < TEPjWju Vl xu M3G VSh7 j h < d0 Wj p4 _^[] UVWuh6 Qh <
AWu jEPjj u Vp yVWh7 j h < 3_^] UQSVWthutaWu e Qff;Eu+M PVj3Pu Sp 3yVWh,8 Ph < h6 j h <
_^[] U 4 3ʼnEVW V3WP} WVPj+jt yVh`8 Wh < f;v
Vh8 3ҋfHF\t/t :t;wR yP h, gM_3^b ]ËUSV3ۋW]]]] WEP d0 h SpX u hh7 Ph < = EPh SjEPVl y VWh7 j h < {t Wh8 j h < UMQK y$Vh 9 j h < Ex;rod0 Wj pX ȋEuh- Qh < QW tQC PQ?y Vh, m3hD9 j h < d0 Sj p4 h6 Sh <
_^[] UV3ƅt1t
f91tu+ЁW #W Ut x2^] h ć Yu@Ã 3ËU} SVW @ d H3ۣ@ ȇ d ]PʉU33G;t h x U3u}=̇ t
j Y\ ć Eth5 u;r:Mt Uć
;uE9Mt͋MEP 3 Y ć Gȇ ̇ 9] 3 3G9} d 3ۉ]ȇ PU;t h x U3u}9 ̇ j[t j 5h h =̇ A YYt3Xh h Y ̇ } Yu3=Ї t&hЇ Ytu5Ї Su @ _^[] ̋U} u ] Ucsm9Eu
u P YY]3]j,hx E 3uE w0 } u=@ uu9 E t =ԇ tNE } u
D uu u E M EQPIYYËe3uu} E uu uE M EQPYYËe3uu} E uu ujE M EQPYYËe3uu} } E VVu!M EQP}YYËe3uE VVu]M EQPNYYËe3u=ԇ t4E VVu M EQPYYËe3uE t E uu uE M EQPYYËe3uu=ԇ tG=D t>E uu u E M EQPyYYËe3uuE E } w
0 ËUVu3;u s Wu>t
׃;u r_^];
4 u U} ue 3@] % % ̋UE3SVWH<AYt} p ;r H;r
B(;r3_^[]̋UjhXy hw d PSVW4 1E3PEd eE h z tTE- Ph Pt:@$ ЃEMd
Y_^[]ËE 3Ɂ8 ËeE3Md
Y_^[]̋UMMZ f9u A<8PE u f9Hu ]3]ËUe e 4 VWN@ ;tudEP E3EED 1E@ 1E 3EM3EEP\ E3E3E;t54 uO@ȉ
4 _8 ^]% hw d5 D$l$l$+SVW4 1E3PeuEEEEd ËMd
Y__^[]Q̋Uuuu uht h4 M ] Uj u h L PP ]ËU$ H
D @ < 58 =4 f` f
T f 0 f, f%( f-$ X E L EP E\ P T H L X jXk ǀ\ jX
4 \ jX
8 \ jXk
4 LjX
8 Lh ]% ̋D$L$ ȋL$ u D$ S؋D$d$؋D$[ %ؐ %ܐ % 2t ,r @r or r r r r s 's ;s es ys s s s t u u X? y y y y F @I S y y z WerDiagController.dll QueryOriginalBucket StartAppRecorder StartFDR , N@D x h L ʗ ؗ V d ܔ Ԕ " < 4 b x L ̙ t ޖ Ж
( @ X v ̚ $ @ N r ԛ . > J \ l \ @w h x Е 0 L \ 0 @ p H l Ɩ $ ̘ ( ( 8 T d 2 R r ڙ x h L ʗ ؗ V d ܔ Ԕ " < 4 b x L ̙ t ޖ Ж
( @ X v ̚ $ @ N r ԛ . > J \ l \ o _XcptFilter _amsg_exit free malloc _initterm msvcrt.dll j_except_handler4_common - Sleep QueryPerformanceCounter
GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess M TerminateProcess api-ms-win-core-synch-l1-2-0.dll api-ms-win-core-libraryloader-l1-2-0.dll api-ms-win-core-profile-l1-1-0.dll api-ms-win-core-processthreads-l1-1-0.dll api-ms-win-core-sysinfo-l1-1-0.dll api-ms-win-core-errorhandling-l1-1-0.dll o LdrDisableThreadCalloutsForDll # DbgPrintEx ntdll.dll _vsnwprintf _wcsnicmp isspace pwcschr
_wcsicmp _wtoi WerRegisterFile api-ms-win-core-windowserrorreporting-l1-1-0.dll CloseHandle ReadProcessMemory GetLastError OpenEventW CreateEventW > GetTempPathW < GetTempFileNameW DeleteFileW CreateFileW GetSystemDirectoryW GetProcessId CreateProcessW GetModuleFileNameW GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW TraceEvent StartTraceW 6 WaitForSingleObject ) SetEvent api-ms-win-core-handle-l1-1-0.dll api-ms-win-core-memory-l1-1-0.dll api-ms-win-core-synch-l1-1-0.dll api-ms-win-core-file-l1-2-0.dll api-ms-win-core-file-l1-1-0.dll api-ms-win-eventing-classicprovider-l1-1-0.dll api-ms-win-eventing-controller-l1-1-0.dll EnableTrace api-ms-win-eventing-legacy-l1-1-0.dll NtClose RtlFormatCurrentUserKeyPath RtlFreeUnicodeString GRtlInitUnicodeString B EtwEventWriteNoRegistration TZwUpdateWnfStateData ZwQueryWnfStateNameInformation NtQuerySystemInformation NtWaitForSingleObject NtOpenEvent RtlAllocateAndInitializeSid NtAlpcConnectPort NtAlpcSendWaitReceivePort RtlFreeHeap RtlFreeSid JRtlCreateUserThread ENtDeleteKey @NtDelayExecution z LdrGetDllHandle <RtlInitAnsiString LdrGetProcedureAddress HNtDeleteValueKey RtlAllocateHeap RtlGUIDFromString RtlDosPathNameToNtPathName_U DNtDeleteFile NtOpenKey NtQueryValueKey bNtSetValueKey NtQueryInformationProcess memcpy memmove
memset 0 H ` 4 V S _ V E R S I O N _ I N F O
"cE
"cE? & S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n \ F i l e D e s c r i p t i o n W E R D i a g n o s t i c C o n t r o l l e r l & F i l e V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 8 0 2 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) T I n t e r n a l N a m e W E R D i a g n o s t i c C o n t r o l l e r . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . T O r i g i n a l F i l e n a m e W E R D i a g C o n t r o l l e r . d l l j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 8 0 2 D V a r F i l e I n f o $ T r a n s l a t i o n 00D0H0P0X00 0 | ;; << <%<+<;<I<[<d<m<<<<<<<<<<<<< =4=I=~=========>> >0>?>J>c>>>>>>?*?@?L?h????? @ x J0V0p00 1+1=1I1c1|1111122!2-2D2V2`2n2z222222 3,3@3Q3b3333334 44 4$4*464F4O4^4k44444444 5"515G5S5e55555555 6.666>6H6X6d6l6v6666666667727<7?8h88888889 9h9u9999992:E:g:o:::::::::; ;$;0;9;\;j;t;z;;;;;;;;;<<&<0<6<@<Z<m<t<<<<<< ==)=a=k=w========
>X>b>n>>>>>>?
?? ?(?K?e????? P D 0$00001#191G111123,383D3w3|3333333333333344.4H4N4W4a4m4444444445 565W5]5c5r5{5555
6666S6t66666B7N7s777778P8]8h8o8y8888888/9<9M9Z9f99999::#:0:U:b:z:::::: ;;(;T;i;w;;;;;; <B<q<<=
=$=1=F=O=g=p=========> >7>O>[>g>>>> ?;?Y?f??????? ` L 0(0;0S000001 171D1W1h111111122N2V2o2222222223303=3L3a3{33333334&4=4E4^4j4444444445?5`5m555555555666{666666666r8888 9#999F9b9q9~99999999:$:0:\:h:::::::: ;*;6;J;^;k;x;;;;;<<3<e<q<}<<<=V=k=v======= >>C>S>_>>>>>>>g?l?q?????? p 0010:0@0a0i0p0v0|0000000
11 1/171J1V1^11111 2!2E3]3333:4b44445 5/5M5a5g5646C6L6U6j6666666"7'7L7U7`7g7y7777777777777777777 8
88$848:8E8K8W8g8p888888889999 9 9(9,94989@9D9L9P9l9p9 0 1
Hacked By AnonymousFox1.0, Coded By AnonymousFox