MZ@ !L!This program cannot be run in DOS mode. $KS*****#*#*#*#*#*#*#*Rich*PEd S"  8@ o4` D(  ]8c`.text NP h.rdata`T@H.dataj@.pdata l@HPAGE{>@v `.edata @@INIT .rsrc@B.reloc @BH=pptckpD`pAL#ILEpqAeH %3IHH $IHI@8I@0I@(I@ I@IHqÐH=otcoDoAL#ILo9qAeH %3IHH $IHI@8I@0I@(I@ I@IH qÐH0=coH!=To!2H0[ÐSH0=oHc=oV2H0[ÐH=XotcSoDHoAL#IL-oYpAeH %3IHH $IHI@8I@0I@(I@ I@IH,pÐH0=knH=\n2H0[ÐH= ntcnDnAL#ILmoAeH %3IHH $IHI@8I@0I@(I@ I@IHloÐSH0=mH=m2H0[ÐH0=cmH=Tm2H0[ÐH=mtcmDmAL#ILlnAeH %3IHH $IHI@8I@0I@(I@ I@IH|nÐH=mtc mDmAL#ILl)nAeH %3IHH $IHI@8I@0I@(I@ I@IHmÐmÐSH0=lHc=}lV2H0[ÐHIr,IIIGs`MIIITIuItDATIufffffffffffffffffffffكtL+HHMIMIItIJ IILOAHHQHQHQHQ HQ(HQ0HQ8H@IuIt ATIuÐffH; ijuHfuHH\$WH0H.؅xBH kE3E33HD$ "JHkHu#H=kH k3JH\$@H0_ù H;E̐H\$Hl$WH0=>k%UH-hkH qkE3E33HD$ I؅@=jt̐H(tIHI8 2H(ÐLH+IOsXMItDH HIHAuItf HIȈAuIffffffHrpكtL+BoAIMII vIo oL H fAfIIuOffffffffffffft IȈHufHr D @HuHo oL ffIH@oD oL fAfIuIIs $MIyIIOsOMItHD HIHuItfD HIȈuIffffffHwtHtL+HoD@HMII vIoD oL H fAf IuTffffffffffffftHɊ IȈufHwH D @uHoD oL fAfIH@oD o fAf uIIs $MI~H\$WH HHHHH\$0H _̐)H(MA8HIH(ÐH AHLDLAtA@McPLHcL#IcJHCHHKAt HLL3IH [|̐D$D$Ðcritical errorassertion failurenoncritical errorwarning messageevent messageexecution trace messagelow resource conditionDMM specific eventPresent token event *** Display Driver Model %s detected @%p. Break to debug, Ignore, ignore All (bia)? *** Added %p to ignore list - entry %u of %u...*** Can't add %p to ignore list - list is full at %u entries.*** Invalid response, please try again...\KernelObjects\SystemErrorPortReadyWERLIVEKERNELREPORTING:%u: ERROR Invalid params WERLIVEKERNELREPORTING:%u: ERROR ZwCreateKey failed with scode 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwOpenKey failed with scode 0x%x WERLIVEKERNELREPORTING:%u: ERROR NtAllocateVirtualMemory failed WERLIVEKERNELREPORTING:%u: ERROR RtlInitializeSid failed WERLIVEKERNELREPORTING:%u: ERROR Could not find \ in the keyname looking for Reportid WERLIVEKERNELREPORTING:%u: ERROR No report type can be detected WERLIVEKERNELREPORTING:%u: ERROR Could not find \ in the keyname looking for Report Type WERLIVEKERNELREPORTING:%u: ERROR ZwQueryKey failed while determining the size with 0x%x WERLIVEKERNELREPORTING:%u: ERROR OOM WERLIVEKERNELREPORTING:%u: ERROR ZwQueryKey failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR Live kernel queue size exceeded WERLIVEKERNELREPORTING:%u: ERROR Key key length exceeded WERLIVEKERNELREPORTING:%u: ERROR Key id length exceeded \Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\\LiveKernelReportsWERLIVEKERNELREPORTING:%u: ERROR ZwCreateKey failed with scode 0x%x for the root WERLIVEKERNELREPORTING:%u: ERROR ZwCreateKey failed with scode 0x%x for the report type WERLIVEKERNELREPORTING:%u: ERROR CheckSpaceAvailable returned no more space available WERLIVEKERNELREPORTING:%u: ERROR ZwCreateKey failed with scode 0x%x for the report id WERLIVEKERNELREPORTING:%u: ERROR Report id %S already exists BusyWERLIVEKERNELREPORTING:%u: ERROR WerpGetRegistryKey failed for the busy key 0x%x WERLIVEKERNELREPORTING:%u: ERROR ParseKeyName failed with 0x%x \WindowsErrorReportingServicePortWERLIVEKERNELREPORTING:%u: ERROR WerStartSystemErrorHandler failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwQuerySysInfo(ErrorPortTimeouts) failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR WerWaitForSystemErrorHandler failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR WerWaitForSystemErrorHandler timed out, failing the call with 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwAlpcConnectPort failed with 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwAlpcConnectPort timed out, failing the call with 0x%x WERLIVEKERNELREPORTING:%u: ERROR StringCchCopy failed for key with 0x%x WERLIVEKERNELREPORTING:%u: ERROR StringCchCopy failed for id with 0x%x WERLIVEKERNELREPORTING:%u: ERROR ZwAlpcSendWaitReceivePort failed WERLIVEKERNELREPORTING:%u: ERROR Service returned failure WERLIVEKERNELREPORTING:%u: ERROR ZwDeleteKey failed with 0x%x H|$@7 ZuHfZ H eZHKH bZHCH_ZHCH\ZHC HYZHC(HVZHC0HSZHC8HPZ3DBHH YI3@χ5Z7=W38YJHKL G:3HL$ LJeY6@H=Y3HHH;Ct Hr 3HT$HH D@fD$H6D$HTHC0H;THC8H8T3DBHH S13@χT0=xQ38S2HKL W43HL$ LJe|S0@H=S3HHH;Ct Hr 3HT$HH tD@fD$Hs0D$HP H =PHKH :PHCH7PHCH4PHC H1PHC(H.PHC0H+PHC8H(P3DBHH O!3@χ P,=M38O"HKL '03HL$ LJelO,@H=O3HHH;Ct Hr 3HT$HH dD@fD$Hc,D$HHPt7HO`HWDHWPLG@HHOhH;HLE3HO(AH\$0Hl$8Ht$@H|$HH A^H%sH\$Hl$Ht$ HT$WH IHH~HHT$8H(.K8sK8eH %HT$8HHSPHSXHSDHK`#HT$8C@HH;HLЃ{<HT$8uLHKhE3HK(@H\$0Hl$@Ht$HH _ÐH\$Hl$Ht$ WH HH(pK8tkLt$0E3@uɉK8Ds8D9s8uGHKhUHHtK<u HS H/Ls@LsPLsXLs`LLs Lt$0HK(@H\$8Hl$@Ht$HH _H%̐H\$Ht$WH HH({<u{8t HKhCLT$XMt4HQLIHHu%AL3ҹ1 H [HL+ILIEH;wALH&HuALI HH+HH3A H [ÐS%]QS6u ]QUGPuRSDSΜA6p#watchdog.pdb`x 2@N^lx*FP^v(Bbx.>Nb(@P^|$FZjx0LZn Z.K ɂwb@Pp Au7 v3 '= F<!nT Du: AHz>/nB??????@@ @$@0@Y@0@@@@.AR0R0R0R0R0(R0  4 RpT 4R p,B  4 2pB20"d"t((`e"t((`e"0d"t**e"t**e" d"t,,e"t,,e"@jd"t..f"t..f"d"t00@f"t00@f"@d"t22xf"t22xf"@e",eb  * 4 2pRp"466f"466f"466fd 4R pRp"499`g"99`g"499`g4p";<g" d;<g";<g  4 Rp  4 2p"d?:?h"?:?h20"t??Hh"??Hh  4 2p dT42pd42 p   4 2p|f"20d42 p t dT42  d T42pd T42p"FF i"FF id42 p   4 2p 20 20202020 bb B b !d42 p  4 R`"tLLj"tLLj?$4 R0 4 p`P%pPP "4QRj"dRRj"RSj"čSUj"SUj"RSj"RRj"QRj d4 p`   4 pt dT2"4@YYxk"@YYxk T4 p ` @. 4 pc20 4(&P "^k .d 4 r pB20"tPaLl"PaLl"tPaLl  4 Rpd 4R pt d T R"40\l" 0\l p`" d̪l"4̪% m"T%=,m"%=,m"̪% m"̪lR0  4 Rp J 4 2`"t.m".m/ (!)!t(!d'!4&!$P ! 4 2p   4 Rp  4 Rp"n" ,n"tPaLl"$l"P0l"3,x (h tdT4^^XRMHC> ,x (h tdT42-+] f @@ @ @d@jddd d0dye@ e@e,e@e@k8eHeTe((`e(g*peg**e**e*o,eo,,e,,e,w.ew..e..f.0f00,f00@f02Pf22df22xf24f44f45f56f6X6fX66f66f68g88 g888g89Pg99`g9;hg;;|g;;g;<g<:<g:<=g= =g>?h?:?h:??h??4h??Hh??Ph??dh@Z@xh|@ Ah AAhAChCDhD$Eh$EEhEFiFF iF]G4i]GGHiGG\iG@Ipi@IlIilIIiIIiIIi,JpJipJJiJ KiKKiK$Li$LLjLLjL/M(j/MM@jMpNXjpNNhjNQxjQRjRRjRSjSUjU Wj WWkW#Wk#W`W k`WW0kWXDkX@Yhk@YYxkY+Zk+ZAZktZ[k[\k\]k^kl$l3LxgHL$PHD$XE3E3H\$(HD$ )HL$PHD$XHx%@5 HVH\$`Ht$hH@_ÿHo e ̐H(3 t H(G}H(ÐÐH x'H|$0u$H(HtЋH|$0H [Ët 8 ̐fÐH\$WH0H؅x@H E3E33HD$ HHt!H;u%H 3H\$@H0_H=nۻ ̐H\$Ht$WH03H BE3E33ҋH|$ H6HH9t9sU HH9u AWdogJIHHA Os@{HCHH HHKH9Hu3HXHH 3H\$@Ht$HH0_ù)Hl$Ht$H|$ AVH0IADHH H\$@؅x @ LL$`LAH&H\$@Hl$HHt$PH|$XH0A^ÐLWATHH̐6AH-s̐UVAVAWHHxH H3HEDD33LEPhuĒEп8E)T^LEVHMxdHMHUE3H$ީ=#FED:HPAWdogH|$puHHu)H|$pH$HMH3^HxA_A^^]DE3HI]EHMHULljES؅M9MBMMDDWI;stAIHA;r A;sB>,AHApA;s5EBEJD+A0ADD$ LA0Ig}aW̸̐H\$Ht$WH0H 3E3E33H\$ 0tLt$@L5A;tr;rV d^;s DSCID+I I]4OA';u @t=Lt$@H 3H\$HHt$PH0_H%̐SH03\y3H0[HH|$@E3ɋ8H E33H\$ =HH HH;t9xt HH H;uHXH 3H|$@HH0[ÐHtWdogH%ץÐH\$Hl$Ht$WHP3IHDB(HL$(I Z3LD$ HD$ 0H\$(D$8@H|$0HD$@HD$HsH\$`Hl$hHt$pHP_ÐHl$Ht$ WAVAWH03IDLH\$PI8H1չAWdogHHtEHD$`LE3HD$(AIωl$ D$`l$`=t=#tx H>HHH\$PHl$XHt$hH0A_A^_ÐHl$Ht$ WAVAWH03ILLH\$PI8HiչAWdog.HHtHHD$`LAHD$(IIωl$ D$`+l$`=t=#tx H>HHH\$PHl$XHt$hH0A_A^_ÐH\$Hl$Ht$WH0HAHHtzDAWdDWHHȉ|$ 3H{8{@{DH{HH{P{X{HH%LÉ{`CdC\H{hH@MHKp3IHH\$@Hl$HHt$PH0_ÐSH H%Ku HH [H [H\$Hl$Ht$WH0HAHHtdDAWdSWHHȉ|$ 3H{8H{@HKh3H{PCHH{XH{`HHH LgHH\$@Hl$HHt$PH0_ÐSH 3HGKu HH [H [ÐH D$PHDA3AHQDIAHA HA0HHt$PBwFAsFt>vv.H$HHt$PH\$XHl$`H|$hH@A^Á@uҺAWdogbHHtH$LLHD$8$ӈD$0HD$xIHD$(HD$pHD$ % HHtieH%3AH|RHHO8HG LODGHL$8HO(HHL$0HD$(HGHHD$ ӟG@tH|3H̐SH0LHD HHEQ0DAIH;wiBw$AstwFH @u5H A LK8I҉D$ 0tHˉC@H0[2H0[ÐH\$Hl$Ht$H|$ ATAVAWH 3LH L;LDAI3L;DD0 D;vyHH HHp s\$`;vdyHH HHXrHMA;^t B<3uuAHLJDumpLJBlobLJ,H0 LJ AAGDÉAGI։AG HLJ( $jR3H\$@Hl$HHt$PH|$XH A_A^A\ÐH\$VH H؅xCHH|$0u+HHL߉؅y HdžH|$0yMHcHHNHH HMH\$8H ^ÐH03HHD$@fD$ HD$"D$*fD$.Hu H0[HT$@>x9HL$@?HL$ H)HT$ AH(HL$@H0[ÐH\$UVWHl$H`HH3HEPIHHHu 2Ht3AHMNHt3HDB@:NHHM3A%NDW8fEt[LO@MtRAAxHcMQfA8\t IHy;}&HA~HMHAH+I;LBI?PHtLEк@HHn3HHMHD$PHD$0DC 3҉\$0H\$8HD$XH\$@D$H$\$`H\$h\$pH\$x]H]JMLD$@HUЍKE3H\$ ؘHL$8yHt3HT$0ff9H*HEH%HEH"HEHHv?HH QHUA "tL$0HHG H;HL$8rHL$8_ Hf< t;I0H躂LH?LD$8HL/HL$83—3HMPH34MH$H`_^]ÐH@HD t H@[Ht$PH|$XH3I3t *ttk?@8s0E3Du^HK(3HT$ ft$ HD$"D$*fD$.@x(HD$(LL$0AHD$0HD$88HL$ -HALL$0HD$0HCHAHHD$8y;3HSHHL$ ft$ HD$"D$*fD$.HT$ E3@DtHt$PH|$X3H@[Ht$PH|$XH@[ÐH\$VH@AHD u|Htwts HD$8D$0;HD$(H|$PGIM HD$ HHtHH8DHLHω_@_HH|$PH\$XH@^3H\$XH@^ÐHt/SH HHI8Ht WdogOWdogHAH [Ðrv w3ÐH\$Hl$Ht$WAVAWH0H$IMLHtBKDD;qSDHPSHHP Hx(NkH&[AWdog hHHt,AWdogJHHuWdogHD3x3AHHHs8HCDZHD$pL;{HC HD$xLsHC($HkH C0HtLKHHHH\$PHl$XHt$`H0A_A^_ÐHXHH3H$@HL$ 3AGHL$ D$ "D$,H$@H3HHXÐH`HHD$pHHy8y@t{HT$pH[xkC@HL$pHD$@HD$8D$0HC8HD$(HD$PE3E33HD$ HL$p؅x_H`[QH`[ø H`[ÐH\$ AVHPHnH3HD$@H=vAML$0T$4f\$8u fcv Ht$`AWdogH|$hHcHHHu E3HD$0HG HEfD;s}EO MtCIAf9tHHu IHu IH+x H IÅxuIJfAHL ωDD\ fD;rH kH4DE3H|$ WdogHϋ;Ht$`H|$hHL$@H3FH\$xHPA^úWdogH ̐H( u"H HtHֳH(3H(ÐH\$WH3HH:Hpf9:u HHL$pD$hH|$`|$X|$PH|$HD$@"|$8HD$p|$0L$L$HD$(DŽ$0H$DŽ$@H|$ H$H$H$/yH;H$H_ÐUWAVHHH3H$3LHH*f9pt H$0HHT$xHHL$pL$8HD$pL$H$HL$xL%$$$D$D$t$@D$8L$0T$(LCH0@MDDT$ zH?HpH$JD$hHl$`l$Xl$PHl$HD$@"D$8H$l$0L$L$ID$(DŽ$0H$DŽ$@Hl$ H$H$H$[y ƃd f0fpL$L$8H$0H$H3GCHA^_][ÐH\$Ht$H|$ UAVAWH$HHzH3H3AxHAHIE3LLMAWIH5HL$xIF-E3fAFH.AL|$pL|$xEHEIxkHL$xHLD$pHUHEE,,dHL$xH|$px0Ht+u%GA=wDH^HW HCYH{H^HHuHCHrHCHoHCHlHC HiHC(HfHC0dC8HfDQ3HM3AL|$pfD|$xHD$zEfEfD}z@3HMD}DB(g@3LHML˺L}HELt$ wy HUHL$xSD$hL|$`D|$XD|$PL|$HD$@D$8HD$xD$0LMLEHL$pD$(L|$ E0L}E@HEL}L}؅x HL$p΋=5tH}uAߋHH3@L$I[(Is0I{8IA_A^]ÐH\$WH HH W|H xyyHH\$0H _byHH\$0H _ÐH8fyLIthHf8t[H0f:tNHT$(H\$0HpLwHHD$ uy3fH\$0H83H\$0H83fp H8Ð,3ÐH\$Ht$WH HIYK,A''*H\$0ȋHt$83H _ÐD…yمyAEtAAʅt D…uÐH`@HAH>@HAHr@H3HHHHHHHHHHHHHHAxHApHAhHA`HAXHAPHAHHA@HA8HA0HA(HA HAÐH\$Ht$WH HH H\$0DAAHt$8H _Ð~+ Yu,fnt^uxXC,fnÐW)f/vW-)Y))^X)Yf/v\ )\)f/%s)ÐYÐHHXHhHpHx AVHH$)p)x؋HEAD)@D)HD)PD)XD)`D)l$0D)t$ fn3Y;D%=3A)fnDYJD_@tAY7D=EWfEn3H_`H_pA))EEXY ĊEXD)DOhD)\DYAXAXYA^X\D5ˊ)3A\XAY^AYGPYA^\)D\HAYA^YH_xH_YQG AXD^D)EYA^DO(G0tD)D)D)3XYA^J3)ɉ03)\EXEXDXDXDXDE^EYDtEYD(t$ L$XA({E(CE(SD3I{(I[IkIs A(sE(KE([E(cE(kIA^ÐHHXHhHpHx AVHH$)p)x؋HEAD)@D)HD)XD)`D)hD)t$@D)|$0 fn3Yg3)fnY=@tYLD5NAƙA)$fntAY3EWH_xH_t D-E)D3DoXD)WD="D)3AYE)D$ AXD^X߇AXD\%qD^EYDg83A^3A)rEXD)\D)EXA^EXEXDl$ EXDA^AY^D^E^Dg0E^EYDt DY͆W5 3H_`H_pD)AXDY^AX\)\WHY^YOL$EXI[IkIs DYhE(CE(KE([E(kE(sG X3A^A({AYD(|$0Gh)A^E(cYA(sG(I{(IA^SZZ( P ,\0@PШ>TD@IlI|(PpIIK0K??IJJ6809@ ;(== >p0?> J(Hĺ@D\@$E|@E AFAG':NYiw %=Tu.BTi}'>Udv 1Kk(?\1FSiw  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYwatchdog.sysDMgrAcquireGdiViewIdDMgrGetSmbiosInfoDMgrIsSetupRunningDMgrReleaseGdiViewIdDMgrWriteDeviceCountToRegistryGTF_FloatToIntegerGTF_FloatToRationalGTF_GetGCDGTF_InitWorksetGTF_NormalizeGTF_RoundGTF_SqrtGTF_SquareGTF_UsingPixelClockFrequency_Stage1GTF_UsingVerticalRefreshFrequency_Stage1SMgrGdiCalloutSMgrGetActiveSessionProcessSMgrGetNumberOfSessionsSMgrNotifySessionChangeSMgrRegisterGdiCalloutSMgrRegisterSessionChangeCalloutSMgrUnregisterSessionChangeCalloutVpInitializeWdAllocateDeferredWatchdogWdAllocateWatchdogWdAttachContextWdCompleteEventWdDbgCreateSnapshotWdDbgDestroySnapshotWdDbgReportCancelWdDbgReportCompleteWdDbgReportCreateWdDbgReportQueryInfoWdDbgReportRecreateWdDbgReportSecondaryDataWdDereferenceObjectWdDetachContextWdDiagGetEtwHandleWdDiagInitWdDiagIsTracingEnabledWdDiagNotifyUserWdDiagShutdownWdEnterMonitoredSectionWdExitMonitoredSectionWdFreeDeferredWatchdogWdFreeWatchdogWdGetDeviceObjectWdGetLastEventWdGetLowestDeviceObjectWdInitializeWdIsDebuggerPresentWdLogEvent5_WdAssertionWdLogEvent5_WdCriticalErrorWdLogEvent5_WdDmmEventWdLogEvent5_WdErrorWdLogEvent5_WdEventWdLogEvent5_WdLowResourceWdLogEvent5_WdPresentTokenEventWdLogEvent5_WdTraceWdLogEvent5_WdWarningWdLogGetEventOrderWdLogGetRecentEventsWdLogNewEntry5_WdAssertionWdLogNewEntry5_WdCriticalErrorWdLogNewEntry5_WdDmmEventWdLogNewEntry5_WdErrorWdLogNewEntry5_WdEventWdLogNewEntry5_WdLowResourceWdLogNewEntry5_WdPresentTokenEventWdLogNewEntry5_WdTraceWdLogNewEntry5_WdWarningWdMadeAnyProgressWdQueryDebugFlagWdReferenceObjectWdRegFreeInfoWdRegOpenSubkeyWdRegRetrieveSubkeyInfoWdRegRetrieveValueInfoWdResetDeferredWatchWdResetWatchWdResumeDeferredWatchWdResumeWatchWdStartDeferredWatchWdStartWatchWdStopDeferredWatchWdStopWatchWdSuspendDeferredWatchWdSuspendWatchWdpDbgReportCreateFromDumpWdpInterfaceReferenceNopHHtH2-+H;t HHӏù)3Ðl`ntoskrnl.exe`x 2@N^lx*FP^v(Bbx.>Nb(@P^|$FZjx0LZnExAllocatePoolWithTagKeInitializeMutexExFreePoolWithTag1KeWaitForSingleObjectKeReleaseMutex(RtlQueryRegistryValuesEx&IoWMIOpenBlock'IoWMIQueryAllData+ _vsnprintfRtlWriteRegistryValue3KfRaiseIrqlKeLowerIrqlbKeBugCheckExUDbgPrintExWDbgPromptDKdRefreshDebuggerNotPresent;KdDebuggerEnabled<KdDebuggerNotPresentnKeDelayExecutionThreadExInitializePagedLookasideListKeInitializeEventPsCreateSystemThread>ObReferenceObjectByHandleHZwCloseKeSetEventNObfDereferenceObjectExDeletePagedLookasideList!KeStackAttachProcess-KeUnstackDetachProcessExpInterlockedPopEntrySListKeResetEventExpInterlockedPushEntrySListExQueryDepthSListPsTerminateSystemThreadPsGetCurrentProcessSessionIdPsGetCurrentProcessZwOpenKeykZwEnumerateKeyZwQueryValueKeyKeQueryTimeIncrementKeInitializeDpcKeInitializeTimerExKeFlushQueuedDpcsSKeAcquireSpinLockRaiseToDpcKeReleaseSpinLockKeSetTimerExcKeCancelTimerKeRemoveQueueDpcQKeAcquireSpinLockAtDpcLevelKeQueryRuntimeThreadKeReleaseSpinLockFromDpcLevelKeInsertQueueDpcPObfReferenceObjectyIoGetDeviceAttachmentBaseRefRtlInitUnicodeStringqZwFlushKeyKeInitializeSpinLockRtlGetVersion ZwWriteFilePsLookupProcessByProcessIdRtlInitAnsiStringPsGetProcessImageFileNameRtlAnsiStringToUnicodeString2 _wcsnicmpRtlFreeUnicodeStringIoRaiseInformationalHardError*RtlCaptureContextdKeCapturePersistentThreadState8RtlCompareMemoryExRaiseStatuskEtwRegisternEtwUnregisteriEtwEventEnabledoEtwWrite- _vsnwprintf@IoCreateFileExSystemTimeToLocalTimeYRtlTimeToTimeFieldsZwOpenEventPRtlSubAuthoritySidRtlLengthRequiredSid@ZwAlpcSendWaitReceivePortTZwCreateKey3ZwAlpcConnectPortZwQuerySystemInformation ZwWaitForSingleObject ZwUpdateWnfStateDataZwQueryWnfStateNameInformationRtlInitializeSidaZwDeleteKeyZwQueryKey0 H`4VS_VERSION_INFOB%B%?StringFileInfo000004B0LCompanyNameMicrosoft CorporationHFileDescriptionWatchdog Driverr)FileVersion6.3.9600.17031 (winblue_gdr.140221-1952): InternalNamewatchdog.sys.LegalCopyright Microsoft Corporation. All rights reserved.B OriginalFilenamewatchdog.sysj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.17031DVarFileInfo$Translation` XpȣУأ