| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /ProgramData/Sophos/AutoUpdate/data/warehouse/ |
Upload File : |
MZ @ !L!This program cannot be run in DOS mode.
$ } 9M9M9M 'M:MkM;M &M:M9M M =M>M M:M #M=ML<M-M8ML8MRich9M PE d W>W " T ( E @
@) U8 ` 0) d ) ) X n L 0) , 0c 8 pc ` P .text
M N h.rdata `
R @ H.data ̂( p \ @ .pdata X ) ^ @ HINIT v ) b b.rsrc ) h @ B.reloc , 0) l @ B HHXHhHpHx AVHpHHH
Z P A H
( 3D5^( AH-\( E3-[( P -a Ha Ha L( -a Ha Ha H
_ -a Ha D5a 3Ha HÙ -a -a - Ha D5 H-( -( H-( 3 tH-( H( H
( ' yCH=; \ H|2 HtHx3҉\$(LD$ ~ LiB JMO HH i 8 HL$0D36 Hd_ L=( H
( HT$0HD$P\$0Dt$HDt$L ( x_H-( R xMH=: \ H1 HtHx H> HD$(LA LD$ JKO y L\$pI[IkIs I{(IA^H\$WH H
G( H" N H=!( uN ( H ( "|N H9( u( }
( 3H
( YN H
( DHH\$0H _H%c( H(H
( 7N -( u3H( H( H
( H(H%M H8H( E3H
g( ( 3 Y =( } ( =( H] LD$HH
( l( HT$HHD$PH
( LL$XA HD$ ( xBH|$Pu2HD$XA E3 HT$HH
( c( ( A DHT$HH
( *( H( H
t( H8H%( @UHHp3HMDB8@4 H\ LM HE3MHELEHEHUHMMH
( HEE8 E C( xHUH
( 6( 3Hp]H\$Ht$ UWAVHl$H H[ H3HEpHH3HL$DDBT3 3HMA }3 HL58[ NH
[ HT$@E3HD$PE3Lt$hEL$@*/ y=H 7 \ HH. HtHXHL8 |$0HD$(D$ \ FHHUH
s[ E3Ƀe E3e E$E @ HELuEZ E. yJH 6 \ H- HtHXHL7 |$0HD$(D$ j 3LˍJM K 3HMpH3. L$ I[0Is8IA^_]H\$Ht$WH HZ H3H$ 3HL$0DBH2 H=Z tDH C6 \ H- HtHXD$ { L 7 LˍJKuJ 3 X[ LL$0E3D$TH%Z D$P 3HD$ AP
E- y5H 5 \ H, HtHX|$(L6 D$ A H
Y 3- y5H 5 \ HD, HtHX|$(L6 D$ T H E5 HUX H
J xHTX H
I xfHSX H
I xMH
Y W, \ H+ LHHuL3҉|$(LU6 D$ JMH H
X , y7\ HG+ HtHXt$(Lq6 D$ 3LˍJMH H$ H3), L$ I[IsI_H 4 H* HtHXD$ L5 H\$WH HW H3H$ 3HL$DDB<y/ :W H
W H3 E3HD$PHT$@D$@*+ yHH 3 \ HT* HtHXHD$PL3 3҉|$0HD$(LD$ : JMG H$ H3,+ H$ HĐ _H\$WH HV H3H$ 3HL$DDBD. zV H
#W H43 HD$PHT$@HKV E3HD$hD$@T* yHH 2 \ Hx) HtHXHD$PL3 3҉|$0HD$(LD$ I JMF H$ H3P* H$ HĠ _@SH0H3` H
( A H( H 2 \ H( HtHX D$ LLB6 JKQF H0[H\$Ht$WH@ H T HKc) yG\ H
1 r( LHHuL
1 HLf4 3҉t$0HD$(D$ JME HHuH
( Ht ) Hh( H
Y( 3H
SU Ar( H\$PHt$XH@_, HAHH? HHXHhVWATAVAWH@H` 3H` 3L$ MLHA HAxX H@W\Ht5HxKHcx#f9Gt
Hy+t
AHcH<ODHH HH. DLIH)
H LD$03I' yCH ,0 \ H& HtHX|$(LK2 D$ 3LˍJM]D H$ LL$pHL$0E3Lt$ H' y2H / \ H& HtHX|$(L 2 D$ HL$pHB( H > u
S t HD$p HL$pHH) HT$pE3HL$0' H|$0 u3& L\$@I[8Ik@IA_A^A\_^H(uYS ;uX3H(HHXHxLpUHhH H~R H3HEX4 Hd$0 HE
W4 HD$@HEEHMA( H4 3EJ4 A^D$8& ( MDD$H. 0
84 HD$PE84 ME ) HdR CH
( L3D EE] ( HD$0HuBS$ H . H$ HtHX3D$ $ LL3 JMEB H
( A H( HT$0E3H
s( A ( HT$0LD$8H
V( ( y5H - \ HH$ HtHX|$(L3 D$ * 1 HT$0HH
( LMHd$h LD$XHD$`H/HD$pDt$XD$| D$x o( H
( L
!Q E3HT$0s( y5H , \ H# HtHX|$(L
3 D$ ? HP LD$HH
]( G( y2H , \ HO# HtHX|$(L2 D$ B ; yYH M, \ H# HtHX|$(L2 D$ E 3LˍJM~@ HT$0Ht
H
( ( 7H P H
( ( HP H
( Hd$0 ( HO 3HMH3# L$ I[I{Ms I]H\$WH`HH3HL$@DB ,' H
5( Hf Hd$H E3ɃL$XLHD$PHHnO D$@ HD$(HD$@HD$ ( yJH $+ \ H! HtHX3҉|$0H. LHD$(L/ D$ JMI? H\$pH`_H\$H|$UHl$HP ` HL$0D3Y& MH _HD$XDlj|$03҉\$8HMD$=\$4'& H8 }DHE3҉]HME & HrN LD$0H
( E3Hd$ }]E ( y3SZH * H HtHX|$(L. D$ H
N HN H
( LEE3HD$ ( y2H ) \ Hz HtHX|$(L. D$ ]HM HM H
5( LEE3HD$ S( y>H V) \ H HtHX|$(L. D$ 3LˍJM= L$P I[I{I]@SH D$PJ H;wkt_- ttzt4t4udH= yL M H
}( ( ytA \H
d( LQH [H%( H9 5- ttt t LL H
( N( yDH
( H( H [@SH D$PH- tTtA|t0t$tt < 3Hk ) 3H 3 H H
( DHH [H%( HHXHpHxLx UHhH H.K H3HEGe L=J He 3!Eǃe He e He? HEEHBHEH'HE3!EHEEHHEHHE3!E'HE2ۉE#HHE/HHE7HUE3HIHHHIADH
J l x ÀrNH=& \ Hu HtHx3҉t$0L:) LύJMH@IHD$(D$ : HMGH3K L$ I[IsI{ M{(I]H\$Ht$WH0H
^J H & 3HtU 33 Ɓ rH%%J \ H LHHuLD$ L( (\ H LHHuLD$ L( JK9 y7\ HN HtHX3҉|$(LD$ L( JM9 H\$@Ht$HH0_HHXWH0H` LHH` HH
( A ( yCH=% \ H HtHx3҉\$(LD$ Le) JM49 HD$HH H
I DB~ HI@ A H0I0@@A@HPIP@`A`IHpIIHuH HHH H0ffI H ȉI H( HI : H\$@H0_@SH0 H # \ H HtHX H' HD$(L' LD$ JK 8 H0[H\$HE3Eӻ
HBH=DGExRIIvD=EHt+L+L+IHtAft
fHHuHu
HA fDH\$AHHXHpHx UATAUAVAWHhH 3EHE'LHE/3HM MHڋIFpHH DH9 tDQ\H * H HtHX3ƉD$(L* LD$ JM6 ASWI06 HHu=H ) HˍP\- HtHX3D$ LL) JM6 / 3A H fWIFHhɉOIF f73fWffOC@H %) IFHHHQH D < E E H HELMgMH HELEHHUMgHHHEHD$(HEHD$ H I5 yG\ H LHHuLˋEgL( D$83ҋED$0t$(JMD$ ~5 uVM3HEftHMHEftH:\ H LHHuL˺ D$ L( JL&5 3Mt&Et!MH MMĺ
f IF9p(t_\ HK HtHXINL LAHD$@A(JLD$8 D$0LD$(L( D$ 4 HU H
̵ >4 Hǵ HM J<!4 L$ HI[8Is@I{HIA_A^A]A\]3 D LI[I{AVH@3L5g IC ICICI9t8ISH
> 3 I<HL$ I$ 3 HtSWI0Hq3 H\$PH|$XH@A^HHXHhHp WHPH` LHH` HH
( A ,
( yCH K& \ H HtHX3҉|$(LD$ LM( JM<3 & H|$h uDH & \ H˿ HtHX3D$ LLA( JM2 3H 2 H; 3HD$0 HT$0HD$8H
HD$@l2 H HtsHT$h
HH H IJABIJABIJABIJHuABAfBHL$01 HHƖ H4H\$`Hl$pHt$xHP_HHXWHPH` LHH` HH
,( A ( yCH $ \ H HtHX3҉|$(LD$ Le& JM1 HD$h f;H H A HØq 3HD$0 HT$0HD$8H
~ HD$@0 HL$hHØq Htg
D@sJIB A J0I0B@A@JPIPB`A`IJpIIHuBABfAHL$0\0 H\$`HP_HtHtȉABffAHHXHhVWAVH0LHHE3H
( A LpLpr( yBH # HAV\ HtHX3҉|$(LD$ LX$ JM/ HD$`H 8 H5@ H @ HD$` HF HKAp HI@ A H0I0@@A@HPIP@`A`HHpHIIuHKHT$`HLi Hi Hm HD$`A Li A9 vHi A fD ;r HHK A HI@ A H0I0@@A@HPIP@`A`HHpHIIuHD$`A t8 Li A9 vHi A fD ;rDsH J? H5K? HD? @
H\$PHl$XH0A^_^H\$H|$UHl$H0 HeP LMPHd$ HA H
( ( yCH=} \ H HtHx3҉\$(LD$ m L" JMn- HEPH 8 LQ> HR> AHEP I@ HJA HI@ A H0I0@@A@HPIP@`A`HHpHIIuA E3ۉHEPD9 EKALPHLfE;
| HD$0IAAJ AB HAJ0@ AB@H0AJP@@AB`HPAJpL@`HHHu
HBHMHHL$0I A HI0@ A@H0IP@@A`HPIpH@`HHIuHEPAD; E3HEPD9 EKALPHLfE;
| HD$0IAAJ AB HAJ0@ AB@H0AJP@@AB`HPAJpL@`HHHu
HBHMHHL$0I A HI0@ A@H0IP@@A`HPIpH@`HHIuHEPAD;B H; L; H; @
L$0 I[I{I]HHXHhHpHx AVH E3AHHH] : O HQB(ȅ> Jh L
( L( H: EtIH: Hu;HCL: EIHhC #CD #; AAD;rfD95y: H H: Aދ Hs: HuHi H\: ;rQHJ: HD H
8: HH u(H!: ;vFH: fD9tM t0H9 Ë;s3H\$0Hl$8Ht$@H|$HH A^H9 H\$WH HHH HtH: vSWI4( H' H# H\$0H _H\$Ht$ WH@HHHtH" H H! H Hd$X LL$Pd$P LD$XH) H
Q) l \ H
h U
LHHuL
S D$PLh D$0 HD$XHD$(D$ JK' T$PLHL$XL HL$XSWI20' Hd$X 3d$P H93vQ\ H
LHHuL
HL# pL$(JKD$ -' HH;3rH\$`Ht$hH@_́ u3MtfA;HtfI;r2ðHHXHhVWAVH0I II! IH` LHE3L H|$`HtnHASWI4H @& HHu?H HˍP\ HtHX3H|$(LD$ L JMK& LLËI) H\$PHl$XH0A^_^HHXHhHpHx ATAVAWH`3MMHLM HvTH [ HˍV\B HtHXAd Lt$0I;LDF3DD$(LT D$ 4 JM% e 3H 3U0A Ff+f wv+HcHH4AH;rHFH= H \ H HtHX Ht$(LD$ O L JK
% fA7 H p \ HU HtHXAnAd Lt$PI;IDFLDD$HI+ĉT$@L T$83HHHD$0JMHt$(D$ B $ VH \ H HtHXAd Ht$8I;Lt$0LDF3DD$(L D$ K JM1$ 2L\$`I[ Ik(Is0I{8IA_A^A\LL$ LD$T$SUVWATAUAVAWHXH a 3ILDLf; HD$@DjII+HHH;k HH+HHw,HIϋHt f9t
HHuHtHH+H
f$ L$ HMI#3҄tgr\Hˋ LHHuL˺ D$ o L JK # IdwGL$ II3MtIHt$ fBDqM<oIfA; HL$@H LHHuL3D$ r L JM" G\ H LHHuLˋ$ L H|$83҉D$0t$(D$ JME" H$ \ H HtHX Lt$(LD$ L JK" HtL7HXA_A^A]A\_^][H\$Ht$H|$AVH@yMI؋HtKH \ H HtHXGL D$(D$ # LˍJK~! 2 Q I;vQH \ \ H HtHXG L t$8 D$0LˋGD$(JKD$ * ! 뜹 ASWI2 Hu6H HˍP\\ HtHXG L D$(D$ 3 ?HG AWDG HH H\$PHt$XH|$`H@A^H\$Ht$H|$ UATAUAVAWHH LM3HHMIDB( HMLE3E0 W}0 }HMH}EE@ Hu D HMHE0HD$(DgEĉ|$ E3I~ D=# U0 ASWI3| LH HMHEHD$(ME0EID$ - DxULMI@IH q \ H HtHXDd$8L 3L|$0Ht$(LD$ o JM7 SWI3I H \ Hz HtHXE0L 3҉D$(LD$ u JM H \ H=4 t<- HtHXDt$8Lv 3L|$0Ht$(LD$ | JM 8 HtHXL|$0L Ht$(LAD$ M T HMH H , \ H=4 t7 HtHX3Dt$0Ht$(L| LD$ JM 3S HtHX Ht$(LD$ Ll JK L$ @I[8Is@I{HIA_A^A]A\]% H(MA8HI
H(@SH A HDLALѨtA@McPLHcL#IcJHCHHKAt HLL3IH [ % %B %D %F %H %J % % % % % % % % % % % % ff H;
+ uHfuH ̹ )H(H
+ L( Hz+ H
( H( H\$WH HH( HHH\$0H _ H\$Hl$Ht$WH 3HHHu
H
"( H3( H
4( H5( #( } L
( HL* H( X H
* 4 xv xkHHxZH( @8h0t&HOhH( HHEHt( HQ HGh#@t H( Hj( H' H( 3H\$0Hl$8Ht$@H _H(H( HtHH;tH(UH\$WH H+* H=4* H;v{ 6H!* H;s(H 5* {(u(HHtHCH(HCH;r3H\$0H _ø H\$Ht$WH HH5) H
) 3H;v{ ZH ) H;sN;PuDHC8H ~) HtL:( H
LHH"( LH x HP벸 H\$0Ht$8H _H\$WH H ) H ) HH
( H;tEH;w@HC@HtL( H
G LHH( LH+ HPH; ( vH\$0H _% % % % ff HIr,IIIGs`MIIITIuIt D ATIufffffff fffffff fffffff كtL+HHMIMIIt IJ IIL O AHHQHQHQHQ HQ(HQ0HQ8H@IuIt
ATIuLH+ IOsXMIt D H
HIHAuItf
HIȈAuIffffff HrpكtL+BoAIMII v I o
oL
H fAfIIuOfffffff ffffff t
IȈHuf H r
D
@H uH o
oL
ffIH@oD
oL
fAfIuI I s $ MIy IIOsOMItHD
HIHuItf D
HIȈuIffffff HwtHtL+HoD@HMII v I oD
oL
H fAf IuTfffffff ffffff tHɊ
IȈuf H w H
D
@uH oD
oL
fAfIH@oD
o
fAf uI I s $ MI~S o p h o s ..\..\src\swi_callout\callout.c [%s:%hu] Cannot add the provider <%S>: 0x%08x S W I _ S U B L A Y E R [%s:%hu] Cannot add the sublayer <%S>: 0x%08x [%s:%hu] Cannot add the callout <%S>: 0x%08x [%s:%hu] Cannot add the filter <%S>: 0x%08x [%s:%hu] swi_callout filters already registered, no need to register again [%s:%hu] Cannot open the engine: 0x%x [%s:%hu] Cannot begin the transaction: 0x%x [%s:%hu] Cannot commit the transaction: 0x%x [%s:%hu] swi_callout filters registered [%s:%hu] Cannot abort the transaction: 0x%x [%s:%hu] Cannot acquire the classify handle: 0x%08x [%s:%hu] Cannot acquire the layer data: 0x%08x [%s:%hu] Cannot register the callout <%S>: 0x%x [%s:%hu] Cannot unregister the callout <%S>: 0x%x [%s:%hu] swi_callout filters un-registered [%s:%hu] swi_callout filters is not registered, no need to un-register [%s:%hu] Cannot close the engine: 0x%x s w i _ c a l l o u t [%s:%hu] Unloaded the driver <%S> [%s:%hu] Cannot create the driver <%S>: 0x%x [%s:%hu] swi_callout lost proxy link, disable redirection [%s:%hu] Cannot get the pointer to config: 0x%08x local proxy [%s:%hu] Cannot create the default queue: 0x%x [%s:%hu] Cannot create the driverControl queue: 0x%x [%s:%hu] Cannot create the pendingRequests queue: 0x%x \ D e v i c e \ s w i _ c a l l o u t \ D o s D e v i c e s \ s w i _ c a l l o u t [%s:%hu] Cannot allocate the device init [%s:%hu] Cannot assign the name: 0x%x [%s:%hu] Cannot create the device: 0x%x [%s:%hu] Cannot create the symbolic link: 0x%x [%s:%hu] Cannot create the queue: 0x%x [%s:%hu] Cannot create the redirect handle: 0x%08x [%s:%hu] Loaded the driver <%S> ..\..\src\swi_callout\calloutUtil.c [%s:%hu] Port <%hu> is in use [%s:%hu] Cannot create a new meta [%s:%hu] SecLookupAccountSid() failed: status : %d, username size is %d, domain size is %d [%s:%hu] Current Irql level is greater than APC_LEVEL, skip calling SecLookupAccountSid. [%s:%hu] %S(%u) bind() to <0x%x:%hu> before connect() [%s:%hu] Cannot get the pointer to browser list: 0x%08x [%s:%hu] Cannot get the pointer to bypass list: 0x%08x [%s:%hu] Cannot get the pointer to meta: 0x%08x [%s:%hu] Cannot get the pointer to metas: 0x%08x [%s:%hu] Cannot get the pointer to metas ..\..\src\swi_callout\Loopback.c [%s:%hu] ...port [%.*S] not valid, more then 5 chars long: ignored [%s:%hu] temp port is %Iu, %Id along whole multistring, , non num char 0x%x[%C], viewing [%.*S] [%s:%hu] ...port [%.*S] (%Iu) not valid, out of range: ignored [%s:%hu] Bypass loopback port %Iu [%s:%hu] ...valid [%s:%hu] More than 100 ports specified - the limit is 100, **ports after the 100th are ignored**. User must reconfigure. [%s:%hu] WalkLoopbackPortsMultiString: RtlStringCchLengthW failed with status 0x%x multistring len %lu remaining characters %Iu [%s:%hu] %Iu valid bypass loopback ports specified in the registry [%s:%hu] ParseLoopbackPorts: ExAllocatePoolWithTag(NonPagedPool, %Iu, SWI4) FAILED [%s:%hu] Loopback ports string [%S...] len %lu... [%s:%hu] - port %hu ..\..\src\swi_callout\registry.c [%s:%hu] CopyMultiStringBuffer KeyValueInformation->Type(%lu) != REG_MULTI_SZ [%s:%hu] CopyMultiStringBuffer KeyValueInformation->DataOffset(%lu) + KeyValueInformation->DataLength(%lu) > size(%lu) [%s:%hu] ExAllocatePoolWithTag failed for size %lu [%s:%hu] ZwQueryValueKey(%wZ, %wZ,allocated buffer) failed status 0x%x [%s:%hu] ExAllocatePoolWithTag(NonPagedPool, %lu, SWI3) failed [%s:%hu] ZwQueryValueKey (%wZ, %wZ, null...) returned unexpected status 0x%x not STATUS_BUFFER_TOO_SMALL as expected [%s:%hu] Registry value %wZ %wZ is not present. [%s:%hu] ZwOpenKey(%wZ) failed status 0x%x [%s:%hu] Registry key %wZ is not present. R) <) () ) ) ) ) p) R) 4) ) ) ) ) ) ) B) T) h) ) ) ) ) ) ) ) ) ) z) n) X) B) ) ,) ) ) ) ) (H @ @H @ S W I _ C O N N E C T S W I _ C L O S E S W I _ R E L E A S E \6t@4~'dvzF~Z <ƄbE}
g \ R E G I S T R Y \ M a c h i n e \ S Y S T E M \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ s w i _ c a l l o u t \ L o o p b a c k B y p a s s a @ B y p a s s L o o p b a c k P o r t s & ( b @ d 6 8 b @ D : P ( A ; ; G A ; ; ; S Y ) ( A ; ; G A ; ; ; B A ) K m d f L i b r a r y W>W O d V W>W
`d `V xp @ Pa @ Xa @ RSDSǨΘI֠? c:\Build\build\swi_callout\x64\Release\swi_callout.pdb 08 .text$mn 0H .text$mn$00 H 9 .text$mn$21 L J .text$s ` P .idata$5 Pa .00cfg `a .rdata d 8 .rdata$zzzdbg Hf .xdata p .data p .kmdfclassbind$a p .kmdfclassbind$c p .kmdfclassbind$d p .kmdftypeinit$a p .kmdftypeinit$c p ܁( .bss ) X .pdata ) - INIT 0) P .idata$2 ) .idata$3 ) P .idata$4 ) .idata$6 ) X .rsrc$01 ` ) @ .rsrc$02 t d T 4 R0 `20 20
4
p C
4
p C ( d7 46 0 p P C p $ .d 4 p C T 4 r
p ` b P B -
! t d 4 P C d 4 R p d 4
r p
4
p 4 Rp t- 4, * P
4
2p B ) ( t' 4& $ P C 4 t d T 4 2 t 4
r
4 p
d T 4 p#
#t #d #4 # P
T 4
R
p ` t) 4( & P d
4 r p
4
2p t d T 4
p`P0 "
"t "d "4 "P
t d 4
r 20
d T 4 2p
4
2p B
4
2p d 4 2 p `a @ ?CBxa @ rJTL ]&Fz8 a @ VDd %Td|Y<q/@MinnK_'DTJ"y- ] f2-+ 0 c @ (@ p @ G Hf H g g ' g ( ,g F f H f f f df g g 8g 1! g 4! ! g ! # g # $ pf $ !% |f $% & Dg & ' lg ' ( g ( ") df $) ) h ) , ph - - 4h - >/ Xh @/ 0 Hh 0 G3 h H3 6 h 6 8 h 8 8 h 8 #: h P: ; h ; (= h (= O? i P? @ Di @ C $i C C 8g C ,D \i D D xi D E i E BE i DE dF |i lF F i F G i G G i G H h @H BH i H yI hi I L pi Hq`HtH2-+ H;t HHK`ù )`) ) ` P) 6) ` ) ) (` ) j) ` R) <) () ) ) ) ) p) R) 4) ) ) ) ) ) ) B) T) h) ) ) ) ) ) ) ) ) ) z) n) X) B) ) ,) ) ) ) ) 9
strrchr V DbgPrintEx KeInitializeEvent KeInitializeSpinLock | ExAcquireFastMutex ExReleaseFastMutex IoGetCurrentProcess
_wcsnicmp KeAcquireInStackQueuedSpinLock 1KeReleaseInStackQueuedSpinLock ExAllocatePoolWithTag ExFreePoolWithTag ZwClose W ZwOpenKey ZwQueryValueKey ntoskrnl.exe @ SecLookupAccountSid ksecdd.sys + FwpmEngineOpen0 ( FwpmEngineClose0 m FwpmTransactionBegin0 n FwpmTransactionCommit0 l FwpmTransactionAbort0 E FwpmProviderAdd0 d FwpmSubLayerAdd0 FwpmCalloutAdd0 . FwpmFilterAdd0 FwpsCalloutRegister1 FwpsCalloutUnregisterByKey0 FwpsAcquireClassifyHandle0 FwpsReleaseClassifyHandle0 FwpsAcquireWritableLayerDataPointer0 FwpsApplyModifiedLayerData0 FwpsRedirectHandleCreate0 FwpsRedirectHandleDestroy0 fwpkclnt.sys RtlCopyUnicodeString WdfVersionBind WdfVersionUnbind WdfVersionBindClass WdfVersionUnbindClass WDFLDR.SYS 0 H ` ) < <4 V S _ V E R S I O N _ I N F O S t r i n g F i l e I n f o x 0 4 0 9 0 4 b 0 > C o m p a n y N a m e S o p h o s L i m i t e d X F i l e D e s c r i p t i o n S o p h o s W e b I n t e l l i g e n c e 0 F i l e V e r s i o n 3 . 6 . 0 . 1 > I n t e r n a l N a m e s w i _ c a l l o u t _ 6 4 9 L e g a l C o p y r i g h t C o p y r i g h t 2 0 1 0 - 2 0 1 6 S o p h o s L i m i t e d . A l l r i g h t s r e s e r v e d . H O r i g i n a l F i l e n a m e s w i _ c a l l o u t . s y s D P r o d u c t N a m e S o p h o s A n t i - V i r u s 4 P r o d u c t V e r s i o n 3 . 6 . 0 . 0 D V a r F i l e I n f o $ T r a n s l a t i o n ` PXآȣ p 0Ƞ L 0L~ *H
Lo0Lk1 0 + 0
+700
+70u njմ$fڎ`T1P0L
+71<8 5 EOu7:o5m AUcPPP[sW 5RZj+< + $ 9dLc'y|Vo 4 HJY5z1+^ ԭF D q:O.RZL R C#%"RsR \ v Tڎr ߀ ^ ?;"$?3 b H0xZseלRa[Vf h *a[l{}?XZW l ۩I W~mPAU n 0!0 + Xm[\jT f֩ .X 00W~|NYKw;0
*H
01 0 UZA10U Western Cape10U Durbanville10
U
Thawte1 0U Thawte Certification1 0 UThawte Timestamping CA0
121221000000Z
201230235959Z0^1 0 UUS1 0U
Symantec Corporation100.U'Symantec Time Stamping Services CA - G20"0
*H
0
ITK
%y"W*oܸ&Csk¿.PZvC%CE{t"״ MD$k_E;DCsi+˙ r&Mq 1QaSI,xE/W?=ƒJ{3y
uAQlie)`;
tޒ"t|'JÞ-'}aqPK],e ؖ|NHDD h]jxdE`F~T|yq 00 U _n\t}?L.02+&0$0"+0http://ocsp.thawte.com0U 0 0?U 8060420.http://crl.thawte.com/ThawteTimestampingCA.crl0U % 0
+0U 0(U !0 010UTimeStamp-2048-10
*H
yY0h O]7_R DnmX|0i#s oG9*ÎY M1\*zz WLey@b%n7j!AW? wI*^8j"Q~0085njP0
*H
0^1 0 UUS1 0U
Symantec Corporation100.U'Symantec Time Stamping Services CA - G20
121018000000Z
201229235959Z0b1 0 UUS1 0U
Symantec Corporation1402U+Symantec Time Stamping Services Signer - G40"0
*H
0
c 9D#DIa
Sۭ,Jn<SU?+پay [LvCK"+Ch@O8#dX2oNW* Kc2[^Z(Pa;EQ V Gf=Gpr_ăd%"кzw[etA*L-wD h֨tw[2V3cI:3 ٳW;z"$.pžN& O(r W0S0 U 0 0U % 0
+0U 0s+g0e0*+0 http://ts-ocsp.ws.symantec.com07+0+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<U 50301/-+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(U !0 010UTimeStamp-2048-20 U FiJ LRc?^6
0 U #0_n\t}?L.0
*H
x;* Lb07x'o%ܠԔN%@ y!hڶ2m,&c3Idm
g5l|߲ q͕tܶ\7 Cxx( KĈ)\vnO^EFAn
8: q y{i +[ =[m .8
),Z,/I"xQÆ]=Qy3+.{ qj[0W,I?ɿ>"hcSit <ü u009% 0a.+M|0
*H
0_1 0 UUS10U
VeriSign, Inc.1705U .Class 3 Public Primary Certification Authority0
061108000000Z
211107235959Z01 0 UUS10U
VeriSign, Inc.1 0 U VeriSign Trust Network1:08U 1(c) 2006 VeriSign, Inc. - For authorized use only1E0CU<VeriSign Class 3 Public Primary Certification Authority - G50"0
*H
0
$)z5` K;N|<E +)Wd'1]"*BUK~WCfba`
b=TIYT&+3ICcjRKҏpQMщi{pt{]KVӖw% g :<7=u3 @t$!*RǏIcG<iG+~OŕCgs~?s3
]?4S% 00U 001U *0(0&$" http://crl.verisign.com/pca3.crl0U 0=U 60402U 0*0(+ https://www.verisign.com/cps0 U e0 C93130m+ a0_][0Y0W0U image/gif0!0 0+kπjH,{.0%#http://logo.verisign.com/vslogo.gif04+(0&0$+0http://ocsp.verisign.com0>U %705+++ `HB
`HE0
*H
Z YbNY8Nfӭ
m>J <eTƯD,k>c^.*g3 *V# :YE5[fPmWxW KɎ~ƽ00
a 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1)0'U Microsoft Code Verification Root0
060523170129Z
160523171129Z0_1 0 UUS10U
VeriSign, Inc.1705U .Class 3 Public Primary Certification Authority00
*H
0 \Y@WjE@ 3X %*D x #}֬cEr'Luq9OBu
Ǝ o#_p)6Ɇ籚 S=}$E3vqdLe.hE #0 0U
00U 06 +7)0' +7щNל ӿn 0 U 0U 00 U {wߞ
?.iw0 +7 C r o s s C A0 U #0b
![Cn TPkҖq0UU N0L0JHFDhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
*H
F;Eu~_CFˊGAt9QG{W2|?B!JCJo\KџLUn
%qNg˂U7> n.aAHu, (I$s%<̈ (LeT^,Q:G<5ITJK}yϿ5 \9QDD4*\;)N7~uմ
nl#qgqNt LX^m9ˆ? 2mב6Gx'*hONg?-@ aH1s FVI) ڣ`TY(TfLۦg.Q{49Ah&$ 灎
-/HoSIdx] U&ﺍѥ/Zka3b$v/C|4$(UuN1+gcs
Y?*Eb[/ 9_sG*CbU==&}bU֔4Me0e0M+TL6?%"0
*H
01 0 UUS10U
VeriSign, Inc.1 0 U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)101.0,U%VeriSign Class 3 Code Signing 2010 CA0
131024000000Z
161222235959Z01 0 UGB10U Oxfordshire10UAbingdon10U
Sophos Limited1>0<U 5Digital ID Class 3 - Microsoft Software Validation v210USophos Limited0"0
*H
0
<~96BRFR3pL~ޥ@99A$7jPw7%];Ts+:,$͇as.Oie$Y-Iҽo%h
WH~zÎVx^|
q ArTuHI7W:B%8 ]QWl;)bmOǞ p!6ۜ#{.$7Q>F* P?,kWs:)jLa {L X! {0w0 U 0 0U 0@U 9070531/http://csc3-2010-crl.verisign.com/CSC3-2010.crl0DU =0;09 `HE0*0(+ https://www.verisign.com/rpa0U % 0
+0q+e0c0$+0http://ocsp.verisign.com0;+0/http://csc3-2010-aia.verisign.com/CSC3-2010.cer0 U #0ϙ{&KɎ&ҧ0 `HB0
+70 0
*H
H iک3e4 Qtm&p\d{~
>;Ģ6(J4˧Vݼm8uSeW<& x$GfR: } %da~RЂr iд'J4}V ?=[!f& [
CR#2^;v#?SP[r9mө",đb ¨ ŊO=j2ŝx\.Q;5Z릮֝mS*w,xԒ(.s$0
0R %VK30
*H
01 0 UUS10U
VeriSign, Inc.1 0 U VeriSign Trust Network1:08U 1(c) 2006 VeriSign, Inc. - For authorized use only1E0CU<VeriSign Class 3 Public Primary Certification Authority - G50
100208000000Z
200207235959Z01 0 UUS10U
VeriSign, Inc.1 0 U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)101.0,U%VeriSign Class 3 Code Signing 2010 CA0"0
*H
0
#K^2W&~}6ku0h+u i7{7M_;'5% 8cjbL!;*O[Oɧv'|~}Hi<<A >ߖqU &J@<& m%{Ͽ? /wƵVz;T0Sb4 Z(LN~[uGr.4L~O =W0֦6րv.~4- 00U 0 0pU i0g0e `HE0V0(+ https://www.verisign.com/cps0*+0 https://www.verisign.com/rpa0U 0m+ a0_][0Y0W0U image/gif0!0 0+kπjH,{.0%#http://logo.verisign.com/vslogo.gif04U -0+0)'%#http://crl.verisign.com/pca3-g5.crl04+(0&0$+0http://ocsp.verisign.com0 U %0++0(U !0 010UVeriSignMPKI-2-80 U ϙ{&KɎ&ҧ0 U #0e0 C93130
*H
V"4aHVdٌĻ z"G8J-lq|pO S^tI$& GLc4E
&sЩdmqE`YQ9XkԤyk Ar7" #?D a̱\=ҍB=e6Դ=@(#&K ː ]L4<7o 4&ٮ
Ś!3oX%|tXuc?1|Sv[퓺]!SSc
P=TR,=.ǓH1,0,001 0 UUS10U
VeriSign, Inc.1 0 U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)101.0,U%VeriSign Class 3 Code Signing 2010 CA+TL6?%"0 + p0
+7 10 0 *H
1
+70
+7 10
+70# *H
1W4h"\h+a
3|0
*H
Rc~[6, Pr2 eW=6n\RrJqZey:$R @ TRAoIkb eE ]k-7Y"3 }7]zg j n-D&u.)um͜yVKTb Go5K` '+ϩYBy3t.Z,Bi3\/rQI$d< 182Q5< k١*=0 *H
100r0^1 0 UUS1 0U
Symantec Corporation100.U'Symantec Time Stamping Services CA - G285njP0 + ]0 *H
1 *H
0 *H
1
160520091820Z0# *H
1
: 1.K |-E*0
*H
SV*>Mj-f-<
H=;AQ!Vt'C iu-iz ]:B1OeCF}k _ 6!
\o$'_e>-ZQγFOE
#c^<QO_G9I"kRkK ~P;E z1-Ib>ax Iyyo{: | F҆D
yaW/!]0(.
+71( 0( *H
( 0(10
`He 0l
+7\0X0!
+70
մ$fڎ`10
+71 #w ]9>Vy
zF
;%j*+- | kh^HVZkC C+,i-N,Dy1|{;e x Ep $ .QQ^"EOߔ>0~e" 4 ;CxN1Ea~8[_lY.ω3 D >Su =19lF$frŧb8 # R !soV]U"EYj|rׂ 0 \ +ѨEUr5G X(8~j ^ Kғ`}zi8 r b 0:l+8}㯚< h PۧMP {r_WO% l
!d1HIFNkCU? n 010
`He eN77V3, ɇ_~._X009% 0a.+M|0
*H
0_1 0 UUS10U
VeriSign, Inc.1705U .Class 3 Public Primary Certification Authority0
061108000000Z
211107235959Z01 0 UUS10U
VeriSign, Inc.1 0 U VeriSign Trust Network1:08U 1(c) 2006 VeriSign, Inc. - For authorized use only1E0CU<VeriSign Class 3 Public Primary Certification Authority - G50"0
*H
0
$)z5` K;N|<E +)Wd'1]"*BUK~WCfba`
b=TIYT&+3ICcjRKҏpQMщi{pt{]KVӖw% g :<7=u3 @t$!*RǏIcG<iG+~OŕCgs~?s3
]?4S% 00U 001U *0(0&$" http://crl.verisign.com/pca3.crl0U 0=U 60402U 0*0(+ https://www.verisign.com/cps0 U e0 C93130m+ a0_][0Y0W0U image/gif0!0 0+kπjH,{.0%#http://logo.verisign.com/vslogo.gif04+(0&0$+0http://ocsp.verisign.com0>U %705+++ `HB
`HE0
*H
Z YbNY8Nfӭ
m>J <eTƯD,k>c^.*g3 *V# :YE5[fPmWxW KɎ~ƽ00
a 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1)0'U Microsoft Code Verification Root0
060523170129Z
160523171129Z0_1 0 UUS10U
VeriSign, Inc.1705U .Class 3 Public Primary Certification Authority00
*H
0 \Y@WjE@ 3X %*D x #}֬cEr'Luq9OBu
Ǝ o#_p)6Ɇ籚 S=}$E3vqdLe.hE #0 0U
00U 06 +7)0' +7щNל ӿn 0 U 0U 00 U {wߞ
?.iw0 +7 C r o s s C A0 U #0b
![Cn TPkҖq0UU N0L0JHFDhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
*H
F;Eu~_CFˊGAt9QG{W2|?B!JCJo\KџLUn
%qNg˂U7> n.aAHu, (I$s%<̈ (LeT^,Q:G<5ITJK}yϿ5 \9QDD4*\;)N7~uմ
nl#qgqNt LX^m9ˆ? 2mב6Gx'*hONg?-@ aH1s FVI) ڣ`TY(TfLۦg.Q{49Ah&$ 灎
-/HoSIdx] U&ﺍѥ/Zka3b$v/C|4$(UuN1+gcs
Y?*Eb[/ 9_sG*CbU==&}bU֔4Me0 0t|ѷt6F0
*H
01 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network100.U'Symantec Class 3 SHA256 Code Signing CA0
150420000000Z
170419235959Z01 0 UGB1
0 UOxon10UAbingdon10U
Sophos Limited1 0 U Endpoint Security Group10USophos Limited0"0
*H
0
`(1W$ lFzcU:p#ӮwͷZ\8 4;]
f/]OM
sUz8N _gi ʓJhN~HXR- =CBYSPQժJ3CO~yZ e)I>k.4߆GHe
c7%cH).CP} oҾW| yqy&OŸ U 00 U 0 0U 0+U $0"0 http://sv.symcb.com/sv.crl0fU _0]0[ `HE0L0#+https://d.symcb.com/cps0%+0 https://d.symcb.com/rpa0U % 0
+0W+K0I0 +0http://sv.symcd.com0&+0http://sv.symcb.com/sv.crt0 U #0;Sy3}.+ʷ rf0 U ?R ?hY^ E0 `HB0
+70 0
*H
8Co 7H߉vڢ"*9z >:`'ߠ^v |I%Gv-Cfy= 'YFY }+'iofX L/싱|ScW$6;s^K RjBI?G 5n7
X]=+(4v_PXѼYJY1) :ԼD1=3cJ epOn1CEOlO|EA$:60Y0A=xvI`a} ʆ*0
*H
01 0 UUS10U
VeriSign, Inc.1 0 U VeriSign Trust Network1:08U 1(c) 2006 VeriSign, Inc. - For authorized use only1E0CU<VeriSign Class 3 Public Primary Certification Authority - G50
131210000000Z
231209235959Z01 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network100.U'Symantec Class 3 SHA256 Code Signing CA0"0
*H
0
,hQ` qGXM#bjZQ
wh6/!Pڞ_'N p\
N
ΑrT.ΣDR?A<J9S!Xj=6 ŗ${1-=nܵBKa_ p}ۋaxhxUGSٳ2֡F@ŗS[5Wba
0w$Mb{h1eՍ5܌+ojr\` ^VR H}/8FZ8ݛ 00/+#0!0 +0http://s2.symcb.com0U 0 0lU e0c0a `HE0R0&+http://www.symauth.com/cps0(+0 http://www.symauth.com/rpa00U )0'0%#! http://s1.symcb.com/pca3-g5.crl0 U %0++0U 0)U "0 0 10USymantecPKI-1-5670 U ;Sy3}.+ʷ rf0 U #0e0 C93130
*H
i7~ aS^ u x#U9qeZ0DZapo!.sIѓ]^?t 8ϻ5/3XVM;y(G >٦V?.)|=꺓P")L:_֤%k/L'{ "`?MLrgw'Ǻ5I(J
D 6+P]'KT+^t
É" wCL?d!1#0 001 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network100.U'Symantec Class 3 SHA256 Code Signing CAt|ѷt6F0
`He 0
+7 10 0
*H
10 *H
1
+70
+7 10
+70/ *H
1" \l罹^ ɪw吆{܀[ "^C0
*H
$>3J}.C~<T[ݶ]bZ!;5|nUaWڏqUl1B~& ]@_
+P r4m XFӔEAKszX
2+
0oy5L3u7'/'6*x˙IB- ?#4Z 5!p"#HB/_GQo Da6ugPB\/_
9u\)\ƻ뀍O!fD %.yQ'2j4(-|#m2 0
+710 *H
010
`He 0w *H
hf0d `Hl010
`He _AD~'-]Et@c'lA
Me20160520091821Z 00pBY@wO0
*H
0r1 0 UUS10U
DigiCert Inc10U www.digicert.com110/U(DigiCert SHA2 Assured ID Timestamping CA0
151224000000Z
250107000000Z0R1 0 UUS10U
DigiCert, Inc.1*0(U!DigiCert SHA2 Timestamp Responder0"0
*H
0
ܛͮ zer,5/9($є ^h 8(x̠8z-vG,Mn(e]x NW ! 4+f
)7
k. pj.XKǦP:98!b^* خX'GFt;ys( ŊE ~* c*B"T J\K ^GۢSG͂x6$,B>o\O"Ȫv 8040U 0 U 0 0U % 0
+0U 00 `Hl00(+ https://www.digicert.com/CPS0d+0V R A n y u s e o f t h i s C e r t i f i c a t e c o n s t i t u t e s a c c e p t a n c e o f t h e D i g i C e r t C P / C P S a n d t h e R e l y i n g P a r t y A g r e e m e n t w h i c h l i m i t l i a b i l i t y a n d a r e i n c o r p o r a t e d h e r e i n b y r e f e r e n c e .0 `Hl0 U #0 )a%5n0 U $yXO!VCT0qU j0h020.,http://crl3.digicert.com/sha2-assured-ts.crl020.,http://crl4.digicert.com/sha2-assured-ts.crl0+y0w0$+0http://ocsp.digicert.com0O+0Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
*H
D FM$z l<ja5|Ai%'/[ y 0&IbɚmϤq.@у5a2CUcU2k'6|U2[|b`@?,\7 ;&W_en^[UNu<f}^ KfA
5 "_v<,IrE;&ڌ73g4ґODsq4-hȚ#e
zÓx|77k~lr": 010
%2~A60
*H
0e1 0 UUS10U
DigiCert Inc10U www.digicert.com1$0"UDigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1 0 UUS10U
DigiCert Inc10U www.digicert.com110/U(DigiCert SHA2 Assured ID Timestamping CA0"0
*H
0
2K͏ݩ9T(W#JE3Q}}Mh~綠䗿c!W~j 8. ;̦2Y_e?FGU~ '~"?~">m;| ]Ț T qk"uqrN
@:\QyM$#0]<`j/GوP^fnVa')QFP*,u>1֭d{ Єr=MBS*O <ڬݬV 00 U )a%5n0 U #0E뢯˂1-Q!m0U 0 0U 0U % 0
+0y+m0k0$+0http://ocsp.digicert.com0C+07http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0U z0x0:864http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:864http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0PU I0G08
`Hl 0*0(+ https://www.digicert.com/CPS0 `Hl0
*H
qQVi|czx7@Kŧ B,w+ !Z*4 j'f `v:|b^% ĺ {,![,5Churǘ<d H_8aMbF$cR,)x GpuՓ~gSakXi
|(uc"ay~Yo&lQ!X` -+m~%+G|I|BB(VA4f]t{V3"/"6KJR1M0I00r1 0 UUS10U
DigiCert Inc10U www.digicert.com110/U(DigiCert SHA2 Assured ID Timestamping CABY@wO0
`He 0 *H
1
*H
0 *H
1
160520091821Z0/ *H
1" $b5xTꙈ,f)2DX h>0+ *H
1 0006ݨ|=c%S4h^0
*H
z&VDӜʻ&sʸwO~" ua+rd=82[s=Y]#hߍ6
@fWztL?e)Dvn/$Vޫh --Y qNr^JC
]^UjRJ<~ i0;פK(~u~^K<rw@oT|-{MԌʹQ,L-ؔÝƎ;.Xd~ZnM*CΪx*