MZ@ !L!This program cannot be run in DOS mode. $rрϏめRichPEdg$]" v^0 Tz`AdtPP8 .textZuv `.rdata\EFz@@.data@.pdata@@.rsrc@@.relocP@BH(LƒfwE3E33H(LI[IkIsWH`IICIHICMKH$HICLHICH҄ICISHHLHD$@LL$PHHHD$8HHD$0HHD$(H\$ SHLHD$@LL$PHHHD$8HGHD$0HHD$(H\$ H LHD$@LL$PHAHHD$8HHD$0HlHD$(H\$ H!LHD$@LL$PHHHD$8HHD$0H-HD$(H\$ ~H$HD$@HHD$8HgHD$0HHD$(LL$PLH\$ H֋7H&LHD$@LL$PH`HHD$8H HD$0HHD$(H\$ Hy+LHD$@LL$PHHHD$8HHD$0HȃHD$(H\$ H/LHD$@LL$PHHHD$8HmHD$0HHD$(H\$ bH+4LHD$@LL$PHHHD$8HHD$0HzHD$(H\$ H6LHD$@LL$PH4HHD$8HHD$0HcHD$(H\$ HBHD$@HHD$8HLHD$0LL$PHQHHD$(H\$ HFNLHD$@LL$PHHHD$8H1HD$0HHD$(H\$ FHRLHD$@LL$PHSHHD$8HHD$0HHD$(H\$ HPLHD$@LL$PHHHD$8HHD$0HHD$(H\$ HTLHD$@LL$PHHHD$8HDHD$0HȂHD$(H\$ qtu:HA HJALHD$ H!}HD$PH\$pHl$xH$H`_H\$Ht$WH IIHaHD$hHt 88H\$8Ht$@H _H(}HrHcHuH 3H(H\$Hl$H|$ATAVAWH 3MLDeH%0HxH;tc{3H=uAtH-HtdH=LLHH;r7H9tHH9}H HsL;uL;tLHLHHB|HKHLVE H>3eH%0HxH;txz3H=ut _H=|L%|I;s#uH9t HU|HI;rcHM|H >|u HHqH9zt(H q|tHaMƺI{H\$@Hl$HH|$PH A_A^A\H\$Ht$WH IHuLNjHH\$0Ht$8H _HHX L@PHHVWAVHPLމ\$ ;w5u9u 3ۉ\$ B;L MtB;DƉL$Iz؉D$ 3ۉ\$ s$xL$pyL$I؉D$ 3ۉ\$ s$xL$p?L$IS؉D$ 3ۉ\$ s$xL$p;E33IhS$xL$p\$ E33I$xL$p\$ HdHt(E33Iy$xL$p\$ turL$I؉D$ 3ۉ\$ s$xL$pHHt4=Et+L$Idy؉D$ 3ۉ\$ s$x;w 6H$HPA^_^ffH; uHfuHH\$WH H;xtH* HH\$0H _@SH H3WvHVv@vHȺ H [H%$vHL$HH xHHD$HE3HT$PHL$HwHD$@H|$@tBHD$8HD$XHD$0HD$`HD$(HwHD$ LL$@LD$HHT$P3w#HHH@HHHH'HH$Ho isHkH kHHkH SHTHHkH 8HAHHkH %HLhHkH HLhH $sOHĈ%v%nvLcAHu L5oHMH^Htl3:MHHtYHt3du95uCu2uhHOlALxHD$ HvOf3Bu6Ht3Hkt$(AHD$ LxHufHwH\$PHl$XHt$`H|$hH@A^@UH$HHEH$HH3Hp3ۉ\$Pd]3DC`HMH\$X3HD$`HD$hdLHMMf]`HwHM#fPHM`d=4EhHU`HL$pj@HUHM @HLwHL$pAH\$(HE`HD$ AL?wHU3ctHUHL$pAcHHL$pAHL$pFHSwH w~cHD$XHD$HHEHD$@H\$8H\$0D$(D$ E3E3HT$p3FcHL$XHt);cHT$PHL$XkcHL$X0cH\$XHL$`Ht cH\$`L$PcHMHpH3H$HĀ]HHpq?He?@SVWAVHHDŽ$H8H3H$IEHHL$pT$@DD$HH\$xH`vdsHHL$`}>HuHL$Pk>HL$PdGHqvHL$PAH$HL$P bHLvHrHu9HVvHD$ DOGOTcHL$Pm>HL$`b>HvHD$ ALAIcHbH8uHL$` ?LD$`A@HcH xHL$P=HL$`=3HD$`HD$0H\$(H"vHD$ AZLuHqAIbHL$P=HL$`=W0H|$pt$@Dt$HH\$xHLEƋHH@kcH$H3BHA^_^[H`<=HP0=HT$UH@HHuHD$ AgLuHqAIaH[H@]@SH HsHauHXHH@HH [H%bH [H\$Hl$Ht$H|$ AVH@HL5RfIHL]uIAHEHMpHD$0H%fL$(HD$  a3HtHL5߮FHHHtHXH tHHH |HHH uHH8HtHH HH@X HX(HP0HXHXPHXXHtHe\$(AHD$ LntHfo<`3HFH#H;3du9˵uHH\$PHl$XHt$`H|$hH@A^H\$3HBAMI;DAWEGExDDHt-L+L+IHtA ftfHHuHu HAzAAHtfH\$H\$Hl$VWAVH@HL5:dA,IHLsIHEH9nHD$0H dL$(AIHD$ ^3Ht;HuoL5Ĭ3DHvHtiHt;LD$hH!s#^Ht;A0|$(HcLsHD$ HmAIn^/HDHMHu3du9=uHH\$`Hl$pH@A^_^H(H; ͬtHH@x_H(H(H; MuXHɳHtL=vCD;r1Mt,DIHL$PHL$X HL$P3H(@SH HHt(H r}]uHHt H3H [H8E3H֫H q\H E3Ht$HE3H|$0H5ײH=̲AQH|$(Ht$ X\taH\$@\DúH\D H MLH|$(HvHt$ \H\$@3Ht$HH|$0H833H\$Hl$VWAVH@HL5*aIHL qIAHEHAkHD$0H`L$(HD$ [3HtHL5AHNHHtHXHpHH pHHH HHH pHH8H HH@H pHHhH >HHpX HX(HP0HXHXPHXXHP`HXxHHtH9`\$(AHD$ LoH/jZ8HOAHH3#du9XuLHHH\$hHl$pH@A^_^H\$WH0HI؋H@[t/)u*C#CCCTCXC\H\$@H0_H\$Hl$Ht$H|$ AVH@HL5^AFIHL9oIHEHiHD$0H^L$(AIHD$ Y3HtHL5hf?HHHtHXH PjHH nHHH HHX HX(HtAH\$(HH^LynHD$ H]hAIY3Hi?HҦHa3du9buVHWH\$PHl$XHt$`H|$hH@A^@SVWATAUAVAWHHDŽ$HH3H$IMDLH$$L$L$H$`HL$PH$hHT$XL$pLD$`L$xLL$h3ۉ\$pH$Ht>|$tD$|HH$H$H$H$H=LL$8LD$0HT$(HL$ LMAIH@XD$3AH$\$xHD$xHD$ AL$AT$I"XCHlH$]W&MHmH$N9H$HD$ AE3H$IVHD$|HD$(H$HD$ L$E3HlH$xVus$ui$ u\AMHlH$8L$IH$Cu#HlH$oVDى\$p0\$p|$tD$D$L$L$H$LD$PLL$XLT$`L\$hH$HtULD$PLL$XLT$`L\$htU>AUH+L\$8LT$0LL$(LD$ LMIH@VH$0H$0H$z0H$l0AH$H3EHA_A^A]A\_^[H:0H.0HT$UHPHHHP]H\$Hl$Ht$H|$ AVH@HL5YA}IHL1kIHEHdHD$0HYL$(AIHD$ zT3HtHL506:HǩHHtHXH jHH jHHH sHHX HX(HtA\$(HYLqjHD$ HEcAIS3H9:HHa3du9"uHH\$PHl$XHt$`H|$hH@A^H(d$0HL$0d$8t!HL$8L$0t 9L$8u3 H(̉L$LSHP3ICI[H[ICE3I[E3D$(?H\$ I[Ru0HL$hDKHD$`DL$(E3HD$ H\`RKDًHP[HWAVAWH`H@HXHpHHHE3H\HL$HR{uD3L=~;}rHKHD$8Hd$@HcHL$8EtIr. Ic.HL$8u3HL$8RQtu HL$8?HL$8,HL$H,$L\$`I[(Is0IA_A^_HH,H8,HT$UH0HH\HD$ AL\HSLQHH0]LSH@3D$XICICL?[IKHYDKI[HPKDًH@[LSH@3D$XICICLZIKH|ZDKI[H_PKDًH@[LI[IkIsWH@3HiUHIHL[HE‹ICHrRL$(H?UKICA)$PHtu-HuzHUHE35HHtmHtdu9uYtuHu~HTA+LZHD$ HQNOH6HʜHu3Bu6HtHT\$(A-HD$ LZH|QFOHH\$PHl$XHt$`H@_H8duq=TtZHYALYHD$ H"QN@tHYLPHD$(HP?tH8HWHH@HXH3x3DG`HHH|$`3HD$hHD$pHjHD$PH|$XHL$P1HVHL$P+H^XHL$P*HQXHL$Po*HHL$P:*H3XHL$PQ*DŽ$hDŽ$f$HD$`HD$HH$HD$@H|$8H|$0D$(|$ E3E3HT$P3K؅t%HL$`KHL$`KHL$hKHL$P~($H$H_HPU(HT$UHPHH]WHD$ A_LsWH4OAILHHP]HxHH3HD$`HMtHHA<u LscL$(H WHL$0H WHL$@H$LD$ E3DD$,HD$8HD$HHt HD8u H cHL$PLL$ 3DD$\D$XDASJHL$`H3&HxH(HeH@HM3ɃDH(H(H5H@L3ɃDH(H\$Hl$Ht$H|$ AVH@HL5PAAIHLAbIHEHZHD$0HUPL$(AIHD$ :K3HtHL50HwHHtHXH bHHH HHH bHH8HaHH HH@X HX(HP0HXHXPHXXHtAF\$(HOL\aHD$ HYAInJ3H0H-H<3du9uHH\$PHl$XHt$`H|$hH@A^@WH@HD$ H\$XHHHD$PHHHL$($H ?UF/HL$(9A|4LcH&UIu HHH `H@JHHHHH@JHH\$PHL$($HHD$PH3H@kJH\$XH@_H(P$HT$UH HHH ]H\$Hl$Ht$H|$ AVH@HL5MAEIHL9`IHEHIXHD$0HML$(AIHD$ H3HtHL5@V.HǝHHtHXH _HH _HHH #HHX HX(HtAG\$(H8MLy_HD$ HWAIG3HY.HHa3du9"uHH\$PHl$XHt$`H|$hH@A^H\$Ht$WH HʜHH@HHt HH\$0Ht$8H _H\$Hl$Ht$ AVH@ADLfIHHFHH|$PLH|$pDAH|$ HG؅xfH3HD$097vVH-VfE3D$ LD$03HgFAHl$ LMfH!VsFHD$0;7rH|$PH\$XHl$`Ht$hH@A^ø@H\$Hl$Ht$H|$ AVH@EHLfIHH@ELHHD$xLHD$(EHD$pHHD$ HIFHHHH eEuf;uCtHeA20HH eEuAf;u;Ct2HeA8LeHD$ HT EcH\$PHt$`Hl$XH|$hH@A^H\$Hl$Ht$ AVHPILLv_IHHDLHH$LH|$`LH$IH|$@HHD$8H$HD$0$D$(H$HD$ I~E؅xJE3D$ LHe3#DH^A]L'_HD$ HSDH|$`H\$hHl$pHt$xHPA^ø@H\$Hl$Ht$ AVH0ALLbIHHCHH|$@LH|$`DIH|$ HD؅xJE3D$ LHd3>CHWbALzbHD$ HR#CH|$@H\$HHl$PHt$XH0A^ø@Hl$Ht$ WAVAWHpILL\AHHBLHH$DHD$8LH$IH$HH$L$L$Ld$0H\$(HD$ ICMUMHH ZmB5HLL$P3H,ZH|$(E3HH|$ H@ *Cf|$PHL$XH[BHLL$PH|$(HYE3H|$ HH@ Bf|$PHL$XHS[AI $LL$PH|$(HYE3H|$ HH@ {BxWf|$PuO|$XuHLIHru6I $LL$PD$XfD$PHYE3|$ HH@( BHI[A=L\[HD$ HP@L$H$@L\$pIk0Is8IA_A^_LSHICHHD$P3H\$XA[3DC`IKH\$`3HD$hHD$pHL$Pd$7H\HL$PHT$P9ZHDHD$`HD$HH$HD$@H\$8H\$0D$(\$ E3E33D>L]H~OHg]HD$ AK?HL$` >H$HL$`:>$Ll]H%OuH]HD$ AK^?!D$(H]HD$ A;?HL$`=HL$h=H]HD$ A?HL$PH[HPHT$UHPHHHP]@SHHDŽ$HHL$xTHL$xyHY>HHL$xH+HyHY>HH+D$xHH:HD$P3H\$X$3DC`H$H\$`3HD$hHD$pHL$P"7H2YHL$PDHT$P9ZHDHD$`HD$HH$HD$@H\$8H\$0D$(\$ E3E33;LRYHMHXHD$ A~KP=HL$`;H$ HL$`;$ LXHLuHXHD$ AK<!D$(HYHD$ A<HL$`E;HL$h:;H9YHD$ A<HL$PHL$xH[HxHPHT$UHPHHHP]H\$Hl$Ht$H|$ AVH@HL5"AIHL\IAGHEHKHD$0H@L$(HD$ ;3Ht;HL5w!HHHtH {\HxH3H {\x HHH HHH \Hx(h;H HZAHD$ L\H\3; H HEAHD$ Lc\H|\:H OHAHD$ L.\HG\:H H{AHD$ L[H\:H HFAHD$ L[H[_:tPHt;Hm?|$(AQHD$ LZHI:3H ḢHL3du9=<u0H1H\$PHl$XHt$`H|$hH@A^H\$Ht$UWATAVAWHHpIH]QHELMIE3HL}8LD|$ AHQH@(E3HfDeA:H|QfDeHELMHHuQE3D|$ HH@(P:L|$8HE8HD$0LcQH\$(HwQHL|$ E3I:HM8LML|$(H_QE3L|$ HH@ 9f}}xHM8HH@9H%QL}8HELMHHPE3fDeHD|$ H@(9L|$8HE8HD$0LPH\$(HPHL|$ E3IP9HM8LML|$(HPE3L|$ HH@ 9f}}HM8HH@8HrPL}8HELMHHOE3fDeHD|$ H@(8L|$8HE8HD$0LOH\$(HOHL|$ E3I8(HM8LML|$(HOE3L|$ HH@ T8f}}HM8HH@&8HOL}8HELMHHOE3fDeHD|$ H@(7L|$8HE8HD$0LOH\$(HOHL|$ E3I7]HM8LML|$(HNE3L|$ HH@ 7,f}!}HEOfDeHELMHH^NE3D|$ HH@(97L|$8HE8HD$0LLNH\$(H`NHL|$ E3I7HM8LML|$(HHNE3L|$ HH@ 6vf}k}aHNfDeHELMHHME3D|$ HH@(6L|$8HE8HD$0LMH\$(HMHL|$ E3IN6HM8LML|$(HME3L|$ HH@ 6f}}HNfDeHELMHHLE3D|$ HH@(5L|$8HE8HD$0LLH\$(HLHL|$ E3I5x?HM8LML|$(HLE3L|$ HH@ k5xf}u 9EDHM8HtHH@?5L}8H|MfDeHELMHHLE3D|$ HH@(5H HMHELME3fDeHKD|$ HA(H4L\$pI[0Is@IA_A^A\_]@SH Hً Mt 2HH [̋ &t 3H%2H\$Ht$WH HHtj t_p2HtTHHf<^uHøHHu6Ht1H3HHt LHHxHH3HHH@3H\$0Ht$8H _@WH0HD$ H\$@Ht$HHHL*THU2HHt3HL$PHHHc3؋ t31@H\$@Ht$HH0_HP@WH0HD$ H\$@Ht$HHHLZSH1HHt3HL$PHHH2؋ ct30@H\$@Ht$HH0_HP@WH0HD$ H\$@Ht$HHHL SH1HHt3HL$PHHH#2؋ t3F0@H\$@Ht$HH0_HPeH\$Hl$Ht$H|$ AVH@HL55IHLRIAHEH@HD$0He5L$(HD$ I03Ht7uEHu L5}HH}HtwHHHtaHtdu95#uG|u9EH5ALQHD$ H[?K/3 H˄H Q3HH QHHH -HHH QHpp Hp(a/H }HSDKHD$ LQHQ./tH {}HDKHD$ L|QHQ.MH H}HDKHD$ LIQHRQ.Ht7H3t$(AHD$ LPH<>.HH\$PHl$XHt$`H|$hH@A^H(t&u<-}t 3ҋ-3 |te-|H(H3H@H%/H\$Hl$Ht$H|$ AVH@HL52A<IHLAPIHEH=HD$0H2L$(AIHD$ z-3HtHL5{6HgHHtHXH OHH OHHH HHX HX(HtA>\$(H2LOHD$ H<AI,3H9HjzHa3du9uHH\$PHl$XHt$`H|$hH@A^H\$Hl$Ht$WH0=]IIHuFYHbLLHՋH@E-H\$@Hl$HHt$PH0_H\$Hl$Ht$H|$ AVH@HL50IHLNIAHEH;HD$0H0L$(HD$ +3Ht>uEHu L5/yHHyHtwGHHtaHtdu9=cuGWu6HT0ALNHD$ H:K*3tuhHH ?HH NHHH VHHHxx Hx(Ht>H/|$(AHD$ LMHO:*HH\$PHl$XHt$`H|$hH@A^HXHrxH3H$@u73HL$ A買HL$ D$ U)t$:u3H$@H3HX@SHP3ҋHL$ DB0RLL$pAHT$ 3'u?HL$pHt5LD$hP'u#LD$hHtLM@)HL$h'HP[H\$Hl$Ht$H|$ AVH@HL5B.ALIHLLIHEH9HD$0H.L$(AIHD$ (3Ht3u>Hu L5vHFHovHtj3H}HtWHt3du95}uA}u0ueH-DOMHD$ L0LHi8O`(3Au5Ht3APt$(Hg-LKHD$ H,8AI"(H+}H\$PHl$XHt$`H|$hH@A^H8|@tH3KL7HD$(H6A*H.KLGKHD$ H7AI'3&HtCHT$@D$@H|$@H~H@f82u&3%Ht&H8H\$Ht$WHPMHLH蛤DL JEH JHLJH+LDHJLL$@HDH\$8HJHL$0AH|$(HD$ &H\$`HHt$hHP_ɃgwEHcHllHde fhE3E33ģelllslzll̋Hы@SH HHكx|@HHHAHsHHAHdHH [H\$Ht$WH HJsHHHHAH Hc~HH LMH^%Ht$8HH\$0H _H\$WH HHsH HH;t H H H{Ht$L3H#HCH\$0H _H\$WH HHH HH;tHH9} HsH;ux}PLHHH@HHHCHH\$0H _@SH HLH\ H:HH [@SH HHLP1HH [@SH HLH HHH [H|$ AVH HcL~Ht[HL$8舯̅uHNq3HHQH\$0Ht$@@}@;|;| ;LuH#O"L3HI"H\$0Ht+p3Ht$@fTx xH IH|$HH A^HZHL$8ѮHH\$WH LH3HEJE~AALcCBf\tf/u f\tf/uftbEtHAu fAz:utuu.L0HttCHf\tf/tHJHLEH\$0H _H\$Hl$Ht$ WAVAWH0Ho3IcHHLHiHExD LG3H HHuH{YHL$`菭LHH!@, Hw~Ql$(DLHl$ 33, ~2IIDωl$(L3HD$ 3 IH;t9 L3HH\$PHl$XHt$hH0A_A^_H\$Ht$WH HIHcHكx;x~HHtH LMH HxH H; Xnt3fyH\$0Ht$8H _H\$Hl$Ht$ WH IcIHcHxeEx`;;rGt.{HHLH= HLHT$PMH& H\$0Hl$@Ht$HH _HWHL$8ޫHWHL$8̫̅H\$WH0HcMHHzHt$@Hr9B;2HcJ+;(H JLMIHXH3HcAfALD$ DLHϋRHHt$@H\$HH0_H\$WH HHH;~4FHmH;t#SH?CHS HLcMH\$0H _@WH@HD$ H\$PHE33H [؅t}HflHT$(HD$0HL$(DHH%t2;w.PHL$( HT$(HHXHL$(3HL$(HL$(3H\$PH@_H(HT$LD$LL$ H(LD$@ H(H\$Hl$Ht$H|$ AVH LHIIIH΍PH>LcOIAH=w+IYMHLHux HH;wu3f_ Mt3fHH\$0Hl$8Ht$@H|$HH A^@SH HAL3HH [H%Ht$WH HHxHp;P~>H\$0X;LHCLcHV MHHΉX7HH\$0Ht$8H _H\$WH H330t)HˋbHH;s3HH\$0@H _H\$WH Hz33t)HˋHH;s3HH\$0@H _@SH HHDjH HH;t* H H hHYiHHCH [HiH;t,H\$WH HuHHHf"u8D$H^H\$@ftLf"tHHfu5A*Ht$@ft f tf tHHfuHD'fD?HD$PHD$(HL$ AL(HT$@3+DEt/AsH$tuAAG=v3fD'f;tK$tAHHƄ$H$E38HH+\$@HAH$EsEuFHHtHC:HHFHf;t*f tf t Hf?uD'H^3fHHL$XHH+HB(HT$XfD'IMf H^IIM<$AtIAuI $L;t'IH+HY+؍CLcMII$X2D$uEuIVIN@3DHHfL|F,hP:$j^F4&0^N@r2H`<0&Rx` 0p %p& '(*.1P1p344`56@88 :=@BFF GHI0KKLMNOV_0``pabddPff`ik@l>SCVMMmofcompApplication Specific Shims initialized.NotifyFnAcSpecfcApplication Specific Shims uninitialized.AuthentecFingerprintDisableDialogAPIDWmigrationFCSIntelGraphicsCPLNitroPDFPro9OfficeMetricsLieOneKeyRecoverySCVMMmofcompSierraWirelessHideCDROMSmartAccessFindWindowSql2005Sql2005MMCSnapinSql2005SetupComputerNameSql2005Sp1ExtractorTerminateZTEFileAutExefdwReason(%d) pszCmdLine(%s)pdwHookCount(%d)NotifyFn returned FALSE, fail load shim%programfiles%\Microsoft System Center 2016\Virtual Machine Manager\setup\scvmmswitchportsettings.mof%programfiles%\Microsoft System Center\Virtual Machine Manager\setup\scvmmswitchportsettings.mof%programfiles%\Microsoft System Center 2016\Virtual Machine Manager\DHCPServerExtension\VMMDHCPSvr.mof%programfiles%\Microsoft System Center\Virtual Machine Manager\DHCPServerExtension\VMMDHCPSvr.mofwbem\mofcomp.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\MitigationCache\{48133BEB-3BE4-47BC-8166-55287ADF1EF1}SOFTWARE\Microsoft\Windows NT\CurrentVersionUBR "RunMofComp: Exception encounteredNS_SCVMMmofcomp::RunMofCompSACExecuteMitigation: Exception encounteredNS_SCVMMmofcomp::ExecuteMitigation[ApiName] Hook EnteredNS_SCVMMmofcomp::NotifyFn(ShimLib) Hook EnteredApiNameUnknownNS_SCVMMmofcomp::InitializeHooksMultiAUTHUI.DLL: LogonUI Logon Window"м " H "" H"Ŀ " 0"px"(@h ",Dlx"" "4< "lt " "H"( "x 8"l|8g$]%зСg$] 0\>AuthentecFingerprintDisableDialogAPIDWmigrationFCSIntelGraphicsCPLNitroPDFPro9OfficeMetricsLieOneKeyRecoverySierraWirelessHideCDROMSmartAccessFindWindowSql2005Sql2005MMCSnapinSql2005SetupComputerNameSql2005Sp1ExtractorTerminateZTEFileAutExeNS_AuthentecFingerprint::InitializeHooksMultiKERNEL32.DLLGetProcAddressLoadLibraryAKernel32.dllCreateThreadpoolWaitNS_DisableDialogAPI::InitializeHooksMultiUSER32.DLLDialogBoxParamWDontShimDWSoftware\Microsoft\Windows\Windows Error Reporting\Debug-c\dwwin.exe .exe__COMPAT_LAYERNS_DWmigration::InitializeHooksMulti{ABABABAB-CDCD-EFEF-0000-ABABABABABAB}{2D9E65B5-E6FE-4239-9F33-D0C67819F0F1}gpmc.mscError: CString error while applying FCS shim. GPMC.msc not found. NS_FCS::APIHook_MsiEnumRelatedProductsWGPMC.msc foundError: FCS could not convert lpProductBuf from "%ls" to "%ls". Converted string length is greater than the maximum buff size.Error: CString error while applying FCS shim.NS_FCS::InitializeHooksMultiMSI.DLLMsiEnumRelatedProductsWMsiQueryProductStateWigfxcpl.cplNS_IntelGraphicsCPL::InitializeHooksMultiNitro PDF Creator (Pro 9)NS_NitroPDFPro9::InitializeHooksMultiwinspool.drvEnumFormsWOpenPrinterWClosePrinterNS_OfficeMetricsLie::InitializeHooksMultiSystemParametersInfoA\REGISTRY\MACHINE\BCD00000000\Objects%s\DescriptionType%s\Elements\%xElementWindows RollbackNS_OneKeyRecovery::InitializeHooksMultiADVAPI32.DLLRegEnumKeyExWNULLNS_SierraWirelessHideCDROM::InitializeHooksMultiKernel32.DLLGetDriveTypeWGetDriveTypeALogonUI Logon WindowNS_SmartAccessFindWindow::InitializeHooksMultiuser32.DLLFindWindowWsoftware\microsoft\inetstp\componentssSubKeyNameASPNETsValueNameGetDWORDValueStdRegProvuValueMetabaseWMICompatibilityWindowsAuthenticationStaticContentDefaultDocumentHttpRedirectSystem\CurrentControlSet\Services\IISADMINstartCOMHook_IWbemServices_ExecMethodSYSTEM\CurrentControlSet\Services\IISAdminIWbemServices::ExecMethodNS_Sql2005::COMHook_IWbemServices_ExecMethodCOMHook_IWbemLocator_ConnectServerIWbemLocator::ConnectServer hooked IID_IWbemServicesNS_Sql2005::COMHook_IWbemLocator_ConnectServerQ188769rsctr.iniSystem32\iisreset.exe[LoadPerfCounterTextStringsW] Createprocess on IISReset.exe successfullNS_Sql2005::IISReset[LoadPerfCounterTextStringsW] IISReset.exe exited successfully[LoadPerfCounterTextStringsW] IISReset.exe exit with a failed dwReturnCode 0x%x[LoadPerfCounterTextStringsW] IISReset.exe failsystem32\inetsrv\appcmd.exe set config "Default Web Site/ReportServer" /section:handlers /accessPolicy:Read,Script[LoadPerfCounterTextStringsW] Createprocess on appcmd.exe successfulNS_Sql2005::GrantReportServerPermissions[LoadPerfCounterTextStringsW] appcmd.exe exited successfully[LoadPerfCounterTextStringsW] appcmd.exe exit with a failed dwReturnCode 0x%x[LoadPerfCounterTextStringsW] appcmd.exe failedCOMHook_IWbemServices_CreateInstanceEnumIWbemServices::CreateInstanceEnum hookedNS_Sql2005::COMHook_IWbemServices_CreateInstanceEnumCOMHook_IEnumWbemClassObject_NextIEnumWbemClassObject::Next hooked NS_Sql2005::COMHook_IEnumWbemClassObject_NextCOMHook_IWbemClassObject_GetOSProductSuiteDisabling WEB SKU in OSProductSuiteNS_Sql2005::COMHook_IWbemClassObject_GetSuiteMaskDisabling WEB SKU in SuiteMaskNS_Sql2005::InitializeHooksMultiLOADPERF.DLLLoadPerfCounterTextStringsWWBEMPROX.DLLsMK.$Gy1WV~2@LJsMK.$E:K.$COMHook_ISqlManager_GetSnapinDescriptionCOMHook_ISqlManager_GetProviderCOMHook_ISqlManager_GetSnapinVersionNS_Sql2005MMCSnapin::InitializeHooksMultiOLEAUT32.DLLSysAllocStringSqlManager.DLL EQO ;VVB_C<*C(NS_Sql2005Sp1Extractor::InitializeHooksMultikernel32CreateDirectoryAComputerNameNS_Sql2005SetupComputerName::InitializeHooksMultiMsiGetPropertyW(ShimLib) Mitigation Success[ApiName] Mitigation SuccessNS_TerminateZTEFileAutExe::NotifyFnNS_TerminateZTEFileAutExe::InitializeHooksMulti")("%S%s%s%s ShimLib::GetHookAPIsShimLib [AppAndCommandLineT::Set] BEFORE App(%S) CL(%S) ShimLib::AppAndCommandLine::GetAppnameAndCommandlineCommon[AppAndCommandLineT::Set] AFTER App(%S) CL(%S) [AppAndCommandLineT::Set] CL without App(%S) RSDSW:;aGCldAcSpecfc.pdbUGP.text$lp00acspecfc.dll!20_pri7 .text$mnP .text$mn$00d .text$np .text$x#.text$zyD%`.text$zz.rdata$brc.idata$5.00cfg.CRT$XCA.CRT$XCZ.CRT$XIA.CRT$XIAA.CRT$XIZ.cfguard .rdata@.rdata$zzзX.rdata$zzzdbg(.xdata`.xdata$xd.edatat.idata$2(.idata$3@.idata$40,.idata$6(.data$00$brc(8.data$r$brc`.data$zz$brc .data.data$00.data$dk00(.data$zz.bss`.bss$00pP.bss$dk00.bss$pr00$.bss$zz.pdata`.rsrc$01`.rsrc$02B!@(dT4pd42 p!PT t T 4241*p`  #= =]w.!w!! *" *D"Dq"S#2P    4 2pm#  4 2P4 r px(F&8%%!&:&  2Px r04(&8p&&&&  2P2!4rpPȞr[.g.s.<,,---.4+ _p`0004(0X.../m/x/////20=0N0~000  rPT4 r p `b!  td 55!45 6!5 6!55!td 55!55T4 r p `  4 Rp t d T 4 r1 ` p`0==(=h :::;<>=L=]=k==  P `B  0r0d4 p@$A0A(L|F,hP:$j^F4&0^N@r2H`<0&Rx)SE_GetShimId3SE_ShimDPFSE_COM_LookupSE_COM_HookObjectSE_COM_AddServerSE_COM_AddHookapphelp.dll_wcsicmp_wcsnicmpi_vsnwprintfmemmovewcsstrwcsspn`_vscwprintfxiswspaceU_XcptFilter_amsg_exitLfreemalloc}_inittermW__C_specific_handlermsvcrt.dll??1type_info@@UEAA@XZRtlAllocateHeapRtlFreeHeapNtQueryKeyRtlCaptureContextRtlLookupFunctionEntryRtlVirtualUnwindntdll.dllRegGetValueWRegOpenKeyExW#RegQueryValueExWRegCloseKeyRegCreateKeyExW,RegSetValueExWapi-ms-win-core-registry-l1-1-0.dllvGetModuleHandleWGetProcAddressGetCommandLineWGetSystemDirectoryWSearchPathWSetEnvironmentVariableWCreateProcessWWaitForSingleObject<GetExitCodeProcessCloseHandle_ExitProcessFindFirstFileWvFindCloseuGetModuleHandleExWDHeapAllocGetProcessHeapEGetFileAttributesWTlsSetValueTlsGetValueTlsAllocTlsFreeGetVersionExWLocalFreeGetCurrentProcessIdHHeapFreeMultiByteToWideCharrGetModuleFileNameW%GetWindowsDirectoryWcExpandEnvironmentStringsWLocalAllocxSleepUnhandledExceptionFilteriSetUnhandledExceptionFilterGetCurrentProcessTerminateProcessAQueryPerformanceCounterGetCurrentThreadIdGetSystemTimeAsFileTimeGetTickCountKERNEL32.dll#EventWriteLsaOpenPolicyLsaQueryInformationPolicyLsaFreeMemoryADVAPI32.dllCoTaskMemAllocCoTaskMemFreeole32.dllmsi.dllOpenPrinterWUEnumFormsWWINSPOOL.DRVK_CxxThrowException[__CxxFrameHandler3memcpymemsetƗ0Й.?AVCStringError@CString@ShimLib@@ƗƗƗƗƗƗƗƗƗƗƗƗƗƗƗ2-+] f@(P?@PT|%t0m\t@08llD`Lp =|D7 ` b 8 .!8.!!8!!8!*"8*""8""8"S#8S#v#8##8#$0$B%dl%%l%F&F&a&p&&&'h '((**V*l\**Խ*4,<,[.x.000Ⱦ1A1lP122b3ܽp34ؾ44|4O5|`55l555 6 6\6 \6f6 f6k60k6o6@o6s6X6+8h@88|8: :===\=D?L??|? @(@$Ax

Windows NT KPTV 6.2 build 9200 (Windows Server 2012 Datacenter Edition) i586