MZ@ !L!This program cannot be run in DOS mode. $F'''''4'1'2'5'-'6'3'Rich'PEd R"  Z `&h( @t`!0!! (.text@ h.rdata  @H.data0@.pdata@@HPAGE APB `.edata&Z@@INIT\ .rsrc l@B.relocTr@BLD$LL$ SUVWH(3HBHH= Gx5HZLL$hHHӋrxHH;wuf,^f,^Htf.H(_^][LD$LL$ SUVWH(H3HHB H=Gx5HZLL$hHHӋxHH;wuf,_f,_Htf/H(_^][H\$Ht$H|$3LHًDDދuCDIAu8fA;w2fD;w'HKHu fufEuEDHII x\O HM+t3M+IHtE fEtfF HHIIuMuHt fA92EfAff H\$Ht$H|$H\$WH HHHHH\$0H _ffH; uHfuH̹)H(MA8HI H(@SH AHLDLAtA@McPLHcL#IcJHCHHKAt HLL3IH [TLH+IOsXMItDH HIHAuItf HIȈAuIffffffHrpكtL+BoAIMII vIo oL H fAfIIuOffffffffffffft IȈHufHr D @HuHo oL ffIH@oD oL fAfIuIIs $MIyIIOsOMItHD HIHuItfD HIȈuIffffffHwtHtL+HoD@HMII vIoD oL H fAf IuTffffffffffffftHɊ IȈufHwH D @uHoD oL fAfIH@oD o fAf uIIs $MI~HIr,IIIGs`MIIITIuItDATIufffffffffffffffffffffكtL+HHMIMIItIJ IILOAHHQHQHQHQ HQ(HQ0HQ8H@IuIt ATIuƻܻ 8FZnм,>JbzԽ $2@N`nR&T"T\SystemRoot\LiveKernelReportsnT Du: A0 RSDSMЅcT+GLn_Ϩwerkernel.pdbBp ` P 0t d4 d4 p PJ2p  4 2p  t 4 Rd 4 R p)20 d T 42p% t4 PH  4 Rpd TR p 4r p`P  t d 4R  4 Rp# #t!#d #4#P td4P[20/ tcdb4a^PH 4 P4pHp d4 p P t4 Pd4 pBd4 p42 pd42 p d T 4Rp1 #t3#d2#41#*PH@d4 pH`t4 P ' p`0Pd 4 R p 4 p`P  4 2p202-+] fw"x""%He$h%9%@9%PP"P'Q"(QS"ST #TT #UU,#VvWH#xWXh#X!Yx#$Y[#[\#\\#\g_#h_h`#h` a$ ab$$bdH$de`$egx$gh$hi$ii$ij#jDk$Dkk$kl"ll$l?m%@mr%rsH%std%tw%"x%%@WH HHt9Wlkct5L@JL&J H _HOyL'DȍJL-'DύJyH\$WH 3HHu m9Wlkct+L @K:L'K(HIHt HcL-'LˍJ3H&H\$0H _H\$H|$Ld$ AUAVAWH0L3MLHMM8IuL%'WO|AIċAf9t HHuHɸ D؅yL('J73Akrew4HHu 3AH2WlkcALD$PId E3؅y L&D$Pu"L'PH3A"HOIԉGH+AIHt ft fHIuMu HfDy DL&EH؅y DL"'+L$PLG8LOI ؅xHuL8'DȺJy4A&E3HtPHOHtQHOd Lw3H(GL 'JLωD$ I?GA*MtIMtAL$Jv H\$XH|$`Ld$hH0A_A^A]H\$Ht$WH0HHHHH"9WlkctL<J L ']Hd$@HT$@yL)'QD"H\$ H\$@LJ'L˺HL^&J H\$HHt$PH0_@SH HHt9Wlkct8L&<JUL1'LˍJ= H [e؅yLS'DȍJH\$Hl$Ht$WAVAWH LAHAϿHuLP'NAG HcAkrewAHHuL;'HA]L3HEIHIyL4'A׹N3HI3y 3Hb3HH\$@Hl$HHt$PH A_A^_HcAkrewH% H\$H|$UHl$HHH3HEGHeHe'3H!EH!EHEHEHE/HE7HE?HLMLEHM|$(HE2E0ED$ PyL]&Dȋ׹EHMLE/HUAD$ y L`&ECM?HHt L&.He7Ht L&H%H;r@L&׹HMHtmHMGH3迺L$I[I{I]H\$WH0HHuQL&Ok mHd$(HD$@H&AAHD$ ؅xHL$@Ht!HL$@H yL&DˍJH\$HH0_LIkIsWH0IC3E3ɍWE3HIC=t"=#tL&WODHcT$HAkrewHHuL&PHfkDL$HHD$HLƺHHD$ TyL|&DȍJ("~ rL&J 3H1Hl$@Ht$PH0_H\$UVWATAUAVAWHH@3LAkrewD{S8DAH]DHHHMX3҉EPHL$(LE3ID$ 6y=yL&DA׹J+AEA;qDF LMHHVAIf\Fy5LNL &A׹HMHH]HME3HEHAQE3HD$ =t =#HcUHAkrewAHHDMHHMHEHLǺHD$ ~DxDwL$DȍJIHMHt H]3HcEx_D;uPwYAHEXAHD$(LZ%DA׹(L%A׹HMHt H]3HD;uPvL%JH$H@A_A^A]A\_^]HHXHpHxLp AWH0E3ILMHDAWL%J3;~#AWL%DύJD$ h߃uI AE߹;~L &QDω\$ L@&D˺3"L$JHtD> H\$@Ht$HH|$PLt$XH0A_H\$WH0HHuQL&KO -LˍQD$ L&xQH\$@H0_HHXHpHx UATAUAVAWHhHE3LLLmgHHLL*fE9.t!AUL&M΍JA~;HA8HL HD$(HL$ L1IκU؅yLX1Dȋ׋CfE.yL%Dˋ׋'^I2؅y`DL&׃uOHA8L `L0IHD$ ױ؅yL0Dȋ׋fE.y L%HMID$hLl$`Dl$XDl$PLl$HD$@"D$8HEDl$0LMLEHMgD$(Ll$ E0LmE@HELm'Lm/΋؅yL%M΋׉D$ fE.HLMgL%Lt$ HEgI$#L$JMtM,$ L$I[8Is@I{HIA_A^A]A\]HHXHpHxLp UHhHH]weAALHuLSKX HMHe/He7HEHMLEHL$0HE3@HE3E0D$(Hd$ LuE'@#؅yL %DȍJHMHt }3ۋL$I[IsI{ Ms(I]@SH H3MDAHt8Mt3Mt.t*HHHf9Kur LBJL H [HfA9Cu(r L$8;uAuMIHAuMIHDAHHXHpHx UHHHH3HHHM33Afu״HEHHL$pHD$xD$pdH $HL$pW؅HWHL$p?؅yL#VND7D$hHt$`t$Xt$PHt$HD$@D$8HD$pD$0LMLEHMD$(E0Ht$ HuE@HEHuHu ؅x HMa=5tH}uދHH3螯L$I[Is I{(I]LI[McUAVAWHHPIcHeHeHeHeLHEMLH #E3A3ICt؅yDL#JRHMuL#PH̽(Mt(Hd$(HMHEE3AIHD$ LJ yDL#iE2Du8Mt/HMHE8E3HD$(HEAIHD$ Du8LJ yDL#EuL#MύJBHMHd$(HEHdAAHD$ ؅yD2HMq3HMHt HHeHMHt 4HeHEHtyHHeI$HMHtLd$xH\$pHPA_A^]LI[WHHH3HD$pHHISHIKICxHT$`HL$PL$fT$dDD$bD$hDT$`D$@L$8T$0DD$(H{8LKL"PHDT$ 3yL"PHDfrHL$pH3{H$HĀ_LI[IsUWATAVAWHHPIcHeHeHeHeLHEMLH"E3A3ICU؅yDL J׺MwMt(Hd$(HMHEE3AIHD$ L׋ yDL ׋HM~uLW ׋λPE2DuHMt/HMHEHE3HD$(HEAIHD$ xDuHL׋ yDL nEuL Mϋ׋λɹBHMHd$(HEHJDAHD$ ؅yDHMW3HMHt .HeHMHt HeHEHtyHHeI$HMHtL\$PI[0Is8IA_A^A\_]H\$H|$UHl$HH3f9;uLyLDAALM@H3DL}@L}P{؅HM@HHEHHUDNE3t$(HD$ ؅xRHM@HtILMPDI#؅xrL9}@tlHMPHEHDNHUE3t$(HD$ ɩ؅xL9}@uL LAA͉D$ GHMPHtHM@Ht*"MLL DAAH$H`A_A^A]A\_^]3WERKERNELHOST: WerLiveKernelCancelReportExt: invalid context. WERKERNELHOST: WerLiveKernelCancelReport returned status 0x%X WERKERNELHOST: WerLiveKernelCancelReportExt returns 0x%X WERKERNELHOST: WerLiveKernelCloseReportExt: invalid context. WERKERNELHOST: Deleting WerContext %p WERKERNELHOST: WerLiveKernelCreateReportExt: Invalid parameter WERKERNELHOST: WerLiveKernelCreateReportExt: Reports not initialized WERKERNELHOST: Key key length exceeded WERKERNELHOST: CheckPolicy failed, status 0x%X WERKERNELHOST: CheckPolicy throttled dump creation for Component WERKERNELHOST: RtlStringCchCopyW failed to copy ComponentName, status 0x%X WERKERNELHOST: Could not create report ID, error 0x%X WERKERNELHOST: WerKernelCreateReport failed, status 0x%X WERKERNELHOST: WerLiveKernelCreateReport: returning reportHandle %p Policy %i WERKERNELHOST: WerLiveKernelOpenDumpFileExt: Invalid parameter WERKERNELHOST: WerLiveKernelOpenDumpFileExt: invalid context. WERKERNELHOST: WepCreateDumpFile failed, status 0x%x WERKERNELHOST: WerLiveKernelOpenDumpFileExt: returning dump handle %p, report reportHandle %p WERKERNELHOST: WerLiveKernelSubmitReportExt: Invalid report handle passed %p WERKERNELHOST: WerLiveKernelSubmitReport failed with status 0x%X WERKERNELHOST: Invalid params WERKERNELHOST: NtAllocateVirtualMemory failed WERKERNELHOST: RtlInitializeSid failed WERKERNELHOST: Could not open root dump directory, status 0x%X WERKERNELHOST: Failed to retrieve disk free space, status 0x%X WERKERNELHOST: Failed to calcalate BytesPerAllocationUnit WERKERNELHOST: Failed to calcalate DiskTotalFreeSpaceInBytes WERKERNELHOST: Free disk space is below minimum allowed by policy WERKERNELHOST: Invalid handle passed to WerpCancelReport BusyWERKERNELHOST: ZwDeleteKey failed with 0x%x WERKERNELHOST: ZwQueryKey failed while determining the size with 0x%x WERKERNELHOST: Out of memory. WERKERNELHOST: ZwQueryKey failed with 0x%x WERKERNELHOST: Live kernel queue size exceeded WERKERNELHOST: WerpCheckSpaceAvailableFull: ZwEnumerateKey returned status 0x%X WERKERNELHOST: WerpCheckSpaceAvailableFull: Failed to open key %ws WERKERNELHOST: WerpCheckSpaceAvailableFull: ZwQueryKey failed while determining the size with 0x%x WERKERNELHOST: WerpCheckSpaceAvailableFull: Out of memory WERKERNELHOST: Full live kernel queue size exceeded WERKERNELHOST: WerpCheckPolicy: invalid parameter WERKERNELHOST: WerpCheckPolicy: Requested Policy is %i WERKERNELHOST: WerpCheckPolicy: Requested Policy %i is higher than highest allowed %i WERKERNELHOST: WerpCheckPolicy: Requested Policy %i is higher than granted %i WERKERNELHOST: WerpCheckPolicy: Granting requested policy %i WERKERNELHOST: WerpCloseHandle: NULL handle WERKERNELHOST: WerpCloseHandle: ZwClose(%p) returned 0x%X WERKERNELHOST: WerpCreateDumpFile: Invalid parameter WERKERNELHOST: A dump file has already been opened. Filename %ws WERKERNELHOST: WerpSetDumpFileNameMini failed with status 0x%X. WERKERNELHOST: Failed to create report directory, status 0x%X WERKERNELHOST: WerpSetDumpFileNameKernel failed with status 0x%X. WERKERNELHOST: Could not create file %ws, status 0x%X WERKERNELHOST: WerpCreateDumpFile - created file handle %p, name %ws WERKERNELHOST: ZwCreateKey failed with scode 0x%x WERKERNELHOST: Key id length exceeded \WERKERNELHOST: Failed to initialize report directory ReportType, status 0x%X \Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\FullLiveKernelReportsWERKERNELHOST: ZwCreateKey failed with scode 0x%x for the root WERKERNELHOST: WerpCheckSpaceAvailable returned no more space available WERKERNELHOST: ZwCreateKey failed with scode 0x%x for the report type WERKERNELHOST: ZwCreateKey failed with scode 0x%x for the report id WERKERNELHOST: Report id %S already exists %ws-%04u%02u%02u-%02u%02u.dmpWERKERNELHOST: RtlStringCbPrintfW failed for wszReportId, status 0x%X. \Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\LiveKernelReportsWERKERNELHOST: WerpDeleteDumpFile No dump file to delete. WERKERNELHOST: Component %ws: Threshold time is not met. Threshold time %lli, Current time %lli WERKERNELHOST: Component %ws: Threshold time is met. Threshold time %lli, Current time %lli WERKERNELHOST: System threshold time is not met. Threshold time %lli, Current time %lli WERKERNELHOST: System threshold time is met. Threshold time %lli, Current time %lli WERKERNELHOST: ZwOpenKey failed with scode 0x%x WERKERNELHOST: WerpGetRegistryKey failed for the busy key 0x%X \WindowsErrorReportingServicePortWERKERNELHOST: WerStartSystemErrorHandler failed with 0x%x. Continuing submission. WERKERNELHOST: ZwQuerySysInfo(ErrorPortTimeouts) failed with 0x%x WERKERNELHOST: WerWaitForSystemErrorHandler failed with 0x%x WERKERNELHOST: WerWaitForSystemErrorHandler timed out WERKERNELHOST: ZwAlpcConnectPort failed with 0x%x WERKERNELHOST: ZwAlpcConnectPort timed out WERKERNELHOST: StringCchCopy failed for key with 0x%x WERKERNELHOST: StringCchCopy failed for id with 0x%x WERKERNELHOST: ZwAlpcSendWaitReceivePort failed, status 0x%X WERKERNELHOST: Service returned failure, ReplyMsg->u.status 0x%X \KernelObjects\SystemErrorPortReady%wZ\%wsWERKERNELHOST: RtlStringCbPrintfW failed for wszFileName, status 0x%X. %wZ\%ws\%wsLastFullLiveReportWERKERNELHOST: Could not set LastFullLiveReport in memory, status 0x%X WERKERNELHOST: Could not open NT_FULL_LIVE_KERNEL_REG_KEY_PATH, status 0x%X WERKERNELHOST: Could not set value %ws, status 0x%X WERKERNELHOST: Could not open report type key %ws, status 0x%X WERKERNELHOST: WER context signature validation failed! Rn(D` wPP(QSTڠ WerLiveKernelApi.dllDllUnloadWerLiveKernelCancelReportWerLiveKernelCloseHandleWerLiveKernelCreateReportWerLiveKernelInitSystemWerLiveKernelOpenDumpFileWerLiveKernelSubmitReportH\$Ht$UWAVHl$H3H LMHEH LEHEHEHMgD$(E(*HE'EE0HuE/@Hu7Hu?D$ opx ] eHMgHHu#pL$I[(Is0IA^_]HEAE3Dt$PHD$HDt$@D$8 HE\$0E33H|$(HD$ o@ޅHAI諸HMgot؅yLDAֹo]&؅y L~D5~3@USVWATAUAVAWHl$HH 6H ~HEH9DCHEHZ3HEH}E$&E$&E.0E46HEHdE3LMoHA3LeoEry3H&~H~H@(H~3eHMoL }HUA豹HMoL }HUAx;HMoL }HUA!H}H9}}#LJDnH}}H~}HMoL c}HU^8HHu LHEgH=P}HD$(ELew\$ H}3MAFA;rDA ACF L~LMwHAIfDdFHMo؅y4LsMύJomHMwHmLewHMwLMHULezLeMtw0#HHu^3HDB0FbL+E3HHHtAft fHHuHuHHEfDLg H8HG(HEHMwE3Ht dlLewx4HEgAHD$(D$ 6HMoLE3l=AHMoHtlMtIHĈA_A^A]A\_^[]úLDˍJ&lHHXHp WH03@*,@85{HXH/HD$(t3LL$HHEA3ɉ57{H58{GxxHL$HLD$@HT$ ?HL$HVkH\$@xNHtI{uCKw8rHzHt'SfzKDf zHS HA]Hkz:<HzHtHH\$PHt$XH0_̸HyHtH2-+H;t HHyù)WERKERNELHOST: WerpInitRootPath failed with status 0x%X WERKERNELHOST: WerpInitThrottlePolicy failed with status 0x%X LastFullLiveReportFullLiveReportsMaxSystemThrottleThresholdComponentThrottleThreshold\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\FullLiveKernelReportsWERKERNELHOST: Registry PerComponentThreshold cannot be shorter than SystemThreshold. WERKERNELHOST: WerpInitThrottlePolicy: ZwEnumerateKey returned status 0x%X WERKERNELHOST: WerpInitThrottlePolicy: Failed to open key %ws LiveKernelReportsPath\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\LiveKernelReports\SystemRoot\System32wersvc.dll̐z ƻܻ 8FZnм,>JbzԽ $2@N`nZwOpenEventPRtlSubAuthoritySidRtlLengthRequiredSidExAllocatePoolWithTagnEtwUnregister@ZwAlpcSendWaitReceivePortTZwCreateKeyExFreePoolWithTag3ZwAlpcConnectPortRtlInitUnicodeString@IoCreateFileZwSetValueKeykEtwRegisterZwQuerySystemInformationiEtwEventEnabled|RtlEqualUnicodeString ZwWaitForSingleObjectExSystemTimeToLocalTimeZwQueryValueKeyoEtwWrite ZwUpdateWnfStateDataZwQueryDirectoryFile- _vsnwprintfHZwCloseZwQueryWnfStateNameInformationZwQueryVolumeInformationFileqZwFlushKeyYRtlTimeToTimeFieldsRtlInitializeSidKRtlCopyUnicodeStringZwOpenFileaZwDeleteKeyUDbgPrintExkZwEnumerateKeyZwQueryKeyZwOpenKeyntoskrnl.exe0 H`4VS_VERSION_INFO@%@%?StringFileInfo040904B0LCompanyNameMicrosoft Corporationt&FileDescriptionWindows Error Reporting Kernel Driverr)FileVersion6.3.9600.16384 (winblue_rtm.130821-1623)<InternalNamewerkernel.sys.LegalCopyright Microsoft Corporation. All rights reserved.DOriginalFilenamewerkernel.sysj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.16384DVarFileInfo$Translation  0`!0!N *H !?0!;10  `He0\ +7N0L0 +70 010  `He 0\T%n9DӶp"ސ{^Cki 003$ hs$0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110 130617214338Z 140917214338Z0p1 0 UUS10U Washington10URedmond10U Microsoft Corporation10UMicrosoft Windows0"0  *H 0 b\ESFA:YU,xUїȡC4DpK_<}]ӟSABnsirSSOHx1#\t&}و`0D; VT_O؏ @(:[hitq^i" +CTRSbj<^v˘;ph|aV+T''^ʭǍT5E&0{0U%0+ +7 0UISܕ iC((&o3s&0QUJ0HF0D1 0 U MOPR1301U*31612+09a6d5f3-8125-416a-b9b1-447d2c25afa90U#0)9ėx͐O|US0TUM0K0IGEChttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a+U0S0Q+0Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0 U00  *H  x&KC&2!e?T'kٲOHjҏVaw3ٶ?iW34p;*;0Xȑšܫg0/ 9<8?.+O:;hDӇ?"06$94GKG(ZlF$t{http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  |qQyn9>\` QfG=*hwLb{Ǻz4KbzJ7-W|=ܸZij:ni!7ށugӓW^)9-Es[zFX^gl5?$5 uVx,Јߺ~,c#!xlX6+̤-@EΊ\k>p* j_Gc 26*pZBYqKW~!<ŹE ŕ]b֠c uw}=EWo3wbY~10001 0 UUS10U Washington10URedmond10U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113$ hs$0  `He0 *H  1  +70 +7 10  +70/ *H  1" (rom9k+QCf/D9 ?vMCq?-[uzrQ@áJ0F +71602 *H #010  `He0= *H  ,(0$ +Y 010  `He 8"ѡB5_eza1QXCW20130822123956.196Z001 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:C0F4-3086-DEF81%0#UMicrosoft Time-Stamp Service0q0Y a *0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 100701213655Z 250701214655Z0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0  *H 0  w: iktTե |hK,_av>f+[S'1A |a0Y0D`TC M8Bݓs0W&E GͿ$`2X`FXG2tag_TϓLĦ]an(aF'$gr!KdPb]w=WuBM@Q>gfD~Knʱz* 1N5xhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0  *H  Q ?q=!o1Wm0fjxǨ%kTW+QDS`v@@A\\^5$VKtBȯ7}Z?yJR8/ye٩kzoK0D$"<Y)p2J'U/3b_W@ΙfjbJ &9Jqc{!mÜ<}jxm8ؔƥ B"8 %d~cY%z.9Wvqa˚Gͧ};q ]t"aڰPo1:eGxHr~akow˧ 9؂r*T9[ Uzs;-3.)/T'!ȬN(ۖBAM*f0ӻt2Kc{/!YDhttp://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U00U% 0 +0  *H  "=d~K&N VZA2Ev`$T){13?z; r 1 EZH~ھE׺MX veY/BɫaIpId!`S~h <ۣQtSrf_)ϏLT2ì*ntD0yR:eǍ'G4i'7"H*v0^0㡁01 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:C0F4-3086-DEF81%0#UMicrosoft Time-Stamp Service% 0 +]_;fNeޘSD001 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher NTS ESN:B027-C6F8-1D881+0)U"Microsoft Time Source Master Clock0  *H u0"20130822113521Z20130823113521Z0t0: +Y 1,0*0 u000 y06 +Y 1(0&0  +Y  0` 0 0  *H U+wTZR8OHop{1][[[^3%sgzp_u(΃i7yX%ktvc/wl7Jespb#9znHdXM |PVUXŎÑOHg!;\k_]G}h'^إ.up&Tcdf8mp/=AJS*'{y8_0i!01000|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103(gu#3^ fpHA>Nk+kN(/Nv!G;g!CM$^oo^R3cSQ*d}6[6pT51zS UA~qEn[U$