DonatShell
Server IP : 180.180.241.3  /  Your IP : 216.73.216.127
Web Server : Microsoft-IIS/7.5
System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586
User : IUSR ( 0)
PHP Version : 5.3.28
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Windows/System32/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : C:/Windows/System32/PSHED.DLL
MZ@	!L!This program cannot be run in DOS mode.

$\t=Í=Í=Í=æ=ÄEÈ=ÄEÌ=ÄEÌ=ÄEÆ=ÄEÌ=ÄEÌ=Rich=PEL[J!	Nr@@l<`<P.text,. h.data(@2@PAGELK\pJ `PAGE?L `.edataP@@INITT .rsrc`<>n@B.reloc@BnZF2 ڸƸ8HVj|$ ,Fbܶжvfз\̹[J"fa=@@bdRSDSدZ:F:u9pshed.pdbU=XW@t]:E ]̋U=XW@t
u`]$̋UTW@EHV3tPVQu5lh@ph@^]̋UE8t)x
ux}xtxt@%?]̋UEi9Et"M39UvQuB;Ur3]̋UQS]VuW}V7S蹍TW@u36mEt67P&ETW@EtVWS5@h@Dh@EE}u673-E}!tPRmEeEEu5mE_^[̋UQTW@VejEPuuuu5\h@dh@=#ushPSHDuj@uVTW@tVEPuuuu5\h@dh@MUM1uuuuuu/$^̋UuTW@uut5\h@hh@$]̋UTW@EHtPQu5lh@th@]̋UTW@EHtPQ5|h@h@]̋U]%(@̋UVuv@u%TW@tV5Lh@Ph@^]̋UE@
TW@tP5Lh@Th@]̋UEHt0t+t&t!3AHTW@tP5Lh@Xh@]̋UVu&V
TW@t
V5h@h@^]̋UQEPVuuuuv33@t#ucA rTW@t.u(u$u uuuuujV5h@h@=uu(u$u uuuuuV ^$̋UUSV3ۃzWuEB(fu8\@t`@(fu8X@t`d@fu8,h@t	\@
h@3;vh@]x9tF;r%_^[]˃t"Itt
i(iF ;B iF,;B,uF0;B0u	3̋U]̋UH4W@3ʼnESV5@h$;@EP֍EEȍEP3hEPE]E@]Љ]@|mWh:@EP֋=@EPjEPjEPuׅ|]u+h:@EP֍EPjEPjEPuׅ}3]}_t	u@M^3[^"̋USVW}O
ekH2v.;tsQ>P 3sO
HE9Mr҉w_^[]̠PW@̋UMS]9Kw)Vs
t"kHD8P;w
KEt2W333҉}vAu
HB;rA}H3ҹtB;Mw8ev,9}tH;EwBC
}HE9Erڅu2s;rkHkHj|8YkHfS
v(U;swPP7wHMuۋC+PjPs_^[]̋UVuu

W}w

S]u
Vt~TW@VWSt5\h@`h@y;uE=rVPS2u)TW@VtFPS5\h@`h@	vS+[_^]̋UHW@}0$@<s&u3ɢPW@ADW@3
u;uujTW@tu5@h@Hh@]2̋U,V5@Wh;@E3P}WjWEEWEPhEPE}E}}8@|"h;@EPjhTW@jWEPu4@9}_^t	u@̋UEH,`@DPM3]̋UE@X@3]̋UQESVW38E8X@;5X@hPSHDPVWu@;u
VWS#X@H@Ds3WHEACA	KKC
X@KjYK{ @PCDK8C@P5X@CPPEME3%_^[̋U}wErw	M3E]̋UQQX@eeV5dX@Wv/Ft<uVVEU(OuۋEEu3K5@jjuuօt8jPt@@֋H}9Hu@@j7uu_^̋UQQX@V5lX@W3};v(S؊Ft<uVVwU(Ku[_^̡X@V5`X@vW~uV(Ou_^̋U졈X@V5hX@vWFHHu
PuV(Ou_^]̡X@V5tX@vW~uVc(Ou_^̡X@S2V5xX@v%WFHtHHuV-V
؃(Ou_^[̋UQX@SV5|X@Wv(EFt<uV
VM
ڃ(Muۋ_^[̋UEtHHt	3]̡X@V5pX@vW~uVs(Ou_^̋U=\W@tM3]̋S؄th @t[̋UQQ=\W@t
;SVW3}u'^}3EEP;u
C;u3MQj(YRP|;hpshduW@E;tX@CX@};v)s>uX@VPO(X@E 9Er3v23X@HIItIuP
jjPG(;=X@rJu/Tt
uS@@}thpshduT@_^[̋UEt#<tv<v<w%	3]̋UQQEUSVuN#F#VWFU+HtY0~NM Ft)NFUV#U#URPuFH~}Ht>HFt"W@NVEFH#EPW@Ft*W@NVFff#Nj}fPW@NFt%W@NVEF"E
ÈE]uW@FHHHtLHFt*F 8@NVEFw#U#UËv V@Ft"v \@NVF2#Pv X@zFt)v @NVFff#fPv P@<Ft'v L@NVEF"E
ÈE]uv H@_^[̋USVuFVN#F#VWsFU+HtY0~NM Ft)vNFUV&#U#URPuJFH~}Ht>HFt"W@NVEF#EPW@Ft*W@NVFff#Nj}fPW@NFt%W@NVEFT"E
ÈE]uW@FHHHtLHFt*F 8@NVEF#U#UËv V@Ft"v \@NVF#Pv X@zFt)v @NVF~ff#fPv P@<Ft'v L@NVEF@"E
ÈE]uv H@_^[̋UEHStFItuNxHuE*wH@HtHtHu.Q@BQ@QQ@EHIt5It'ItIt
2/H Q%p \@3p @p L@MÉQ[]̋Uuuu;]̋UQQVuEPV<u'NEU(#F#VNȋFPQV^̋UQQVuEPV<u#NEU#F#V+FVRPV^̋UQQVuEPV<u NEU#F#VMAQ^̋UQQVuEPVC<u NEUT#F#VMAQ^̋U4W@3ʼnEVuW}EPW<uZOEUS#G#WN~^؋F6‰EEPh@VWQ|EPh@VuS[M_3^̋UEp @]̋UQQVuEPVM<u4NEU^#F#VNEU;uF;uu @^̋UQQVuEPVU<EuN#F#V^̋UQQVuEPV<u'NEU#FN#V;uF;u2^̋U졜W@ST@VW3PSHD;t
VPӉ=W@EPWj}=#u{VuW@tjEPWjpuV9EtQ3!]=W@׋jEYW@r3ufBX@9EuUt+É"ڃ}tUEVW3_^[̋USxW@u3[eVWjYX<@s3u-C$PEP@EPjEPl@uE;EvEt؃=xW@uE_@^[̋UjuuhW@u~]̋UQQVWEPEP3WW@Vu}E$=#t^SPSHDSuW@u?ujW
EPEPWVu
}
SWT@
EM8E[_^̋UjjjhW@u
]̋U=`W@tÍEPEPEPjk
#E̋UM3tv
|8SVW}EPuqVW3|;wu
3fw_^[]̋UQ X@SV5W@Wv(EFt<uV
V}ڃ(Muۋ_^[̡X@V5W@vW~uV(Ou_^̋U$X@V5W@v)WFHHtHuVuuV
(Ou_^]̋UX@V5W@v)WFHHtHuVOuuV(Ou_^]̡X@V5W@vW~uV(Ou_^̡,X@V5W@vW~uV(Ou_^̡X@V5W@vW~uV(Ou_^̡X@V5W@vW~uV(Ou_^̋UQ4X@SV5W@Wv(EFt<uVG
Vڃ(Muۋ_^[̋UQQ8X@V5W@W}v(S؊Ft<uVV^U(Ku[_^̋UQQ<X@V5W@W}v(S؊Ft<uVVU(Ku[_^̋UQQ%xW@%W@3f@X@fBX@flW@8h@PEPEPh$W@h<@E	u`fEflW@ftQhHX@hpW@hW@j		t
3flW@xW@f@X@Phj<@j
hW@+̋USVW;#ǃu33{؃u3M1yMM_^[]̋U4MMS3V5W@W3M̉MЍ}ԫ=X@3ۉuMMMM;&3F	$1@VEUVnEUuuVEEEEE+EMMEMVVAVuuVxV-<un(ChN3;wkrF;sbvE^k(tDEPV+8EPVc,EE̋EEЍEPVVEUV(C;UE_^[Ë1@1@1@1@1@0@0@0@0@0@1@1@&1@11@?1@O1@s1@1@1@̋U03SV5W@W3MЉMԍ}ث=X@3ۈMuMMMM;$3FH$3@VEUVEUuuVOEEEEE+EMMEMV8VwVuuVuVc<uk(CeN3;whrF;s_vE^k(tAEPVa5EPV)EEЋEEԍEPVVEVH(C;E_^[m3@~3@x3@~3@2@2@2@2@2@2@2@2@2@	3@3@=3@I3@U3@̋U,SX@3V5W@W3MԉM؍}ܫ3uMMMM;3F$@5@VEUVEUuuVEEEEE+EMMEMV{VVxuuV!jV<u`(GZN3;w]rF;sTvE~k(t6EPV*EPVEEԋEE؍EPVV(G;_^[Ë'5@-5@<4@M4@^4@o4@4@4@4@4@4@4@4@4@5@5@̋S؄th @t[̋U=dW@u
jj|uu)hPEu`W=dW@G=r[?CPERuS;hW@wKVPIu	E'wWVEM0F2MQ^_wE]E̋UV395dW@u
Ms

;
hW@v
EPl`p`p`p`pPl`lPlPlQERPfPl5dW@-EtVV3a*P^]̋U=dW@u3VuuoPM^]̋U=`W@t]f=lW@tEt3uuhW@0]̋U=`W@tuuuuuuf=lW@u
S]K
xW@u%{BX@Vu;rw9Er
\W}u4uFPu@6t	c7Et&9CPERuqlNjyp3ljQlAp3_^[]̋U=`W@tuuujDf=lW@u3
xW@u"BX@9Er
EP]%@%@%|@%D@%`@%d@%p@%t@%@%,@̋USVEu333^NV^[]̋U4W@t=N@u`EPj}t	}ntelt	}cAMDu
EPjeEt1U@54W@4W@u
N@4W@У8W@;
4W@űUQMj58W@54W@uh@2ÐL$D$T$0ISVD$t$t$t$t$^[WHEAOSCTestOverrideWHEAOSCImplemented\Registry\Machine\System\CurrentControlSet\Services\ACPI\ParametersPshedPluginFAMask\Registry\Machine\System\CurrentControlSet\Control\WHEA\InformationHwErrRecHwErrRec%04XHwErrRecSupportAuthenticAMDGenuineIntel	

 !"#	$%&'
()*+,-./0123
456789:;<=>?`	

 !"#	$%&'
()*+,-./0123
456789:;<=>?	
A
A

@@kNA{GDaaʓ
+N@DUES]VWjY38Pu1HItItItIu!Rj
RjRjRjpp@C _^[]UhPSPiuj@]̋UhPSPiuT@]̋UETS3;u

8PuxuPU;tVWjY@h@}Ut(P;H;peuUM9Xw9XnEt6p ;]P$;RH(;Gxe}uUM9X )9X$ 9X(Et6p,;P0;H4;xe}ȉủUЉM9X,9X09X4Et6p8;P<;H@;xe}؉u܉UM9X8u9X<uz9X@uuEtHD;thPeUM9XDuTE t PH;tGHL;t@@e߉EUM
9XHu)9XLu$9]uE	TW@jYu@h@3
_^[V[J(|А,d$2zDT|b@bv2F\t̑*;Ti}ƒ	

PSHED.dllPshedAllocateMemoryPshedAttemptErrorRecoveryPshedBugCheckSystemPshedClearErrorRecordPshedDisableErrorSourcePshedEnableErrorSourcePshedFinalizeErrorRecordPshedFreeMemoryPshedGetAllErrorSourcesPshedGetBootErrorPacketPshedGetErrorSourceInfoPshedGetInjectionCapabilitiesPshedInitializePshedInjectErrorPshedIsSystemWheaEnabledPshedReadErrorRecordPshedRegisterPluginPshedRetrieveErrorInfoPshedSetErrorSourceInfoPshedSynchronizeExecutionPshedWriteErrorRecordUV5h@iW}97sE7 #!V5h@uE7
h@3_^]̡@W@ȃuu
"@@$<uuAt"@@%@W@Vd5 @W@y(@@,@@#@@u%@W@"@@@W@S228^tXHtHt-~}AF:|u~s:|u~st
<@@cL@@P@@u!#@@jY:sȅv9@@Iu[^̋Ud xtteEPEPPPjE@t
@W@Et
@W@eEPPPEPh9Er MQMQQQPʘE t
@W@VW_ @@G@C@K@
X@\G@O@f\@3SE;v|
~uEHuEihPSHDPV@h@;uVVujh"@˾G@3E9\@vuE0
X@uNt;t,t~9~u/
h@<
=h@ǘ=h@=h@EM];
\@rEh@[h@G@h@_^̋US3CHW@VӋ3u5UEHt"hh@P
h@h@jZ;as;PW@˺DW@3
uWQ39=X@t
hW@jx@=h@5@t'h@
h@SPWQM}hW@֣dW@9=dW@u89=`W@t09=W@t(EPEPEP袋ESPuhW@u֣dW@_^3[̃%TW@jPjh@h@藔̋UExu2Lxt@uft6ft0ft*ft$ftftf	tftftfu]̋U28Mv%Uk8u@t<t<u
:Mr۰]2̋US]C W< {(WPVuF
FF3ɉNCFCFCF CF$ffF(CF*C F+CF0CF4CF8CF<8K vQ+ÍD0PWPWWPWPWPWP
WPWPWPS A;rCtX@l`@C k(^3_[]̋US]C,< K0QPwE3AHH@
@KHKHKH KH$fVfH(KWH*K,H+jsx0Y3{,s0vQ+ˍDHNHNNHNHNHNH
NHNHNHK,G;rC,k_0^3[]̋UMyu3AE@
@@QPQPQP QP$IjHX]̋UEVuF
FFF8HNHNHN HN$ffN(HN*HN,H3N01N0PN03с3щV0fHfN4HN8H N<H$N@H(NDH,NH@tW`@\@_j0X^]̋UEVuF
FFF8HNHNHN HN$ffN(HN*HN,H3N01N0PN03с3щV0fHfN4HN8H N<H$N@H(ND@tW`d@X@_j,X^]̋UMVuF
FFWj8XFQVQVQV QV$ffV(QV*QV,Q3V01V0yV033~0fQfV4QV8Q V<Q$V@Q(VDQ,VHQ0VLQ4VPAt\@,h@_^]̋UMQu3A<t;wE@
@QPQPQPQP QP$S3ۍQ :VWx4jKXf1fp(YX+q<p,qp0qYj@x@X_^[]̋UQ<@S3WSShHESTl`@\@X@PT;9_$G$V\@w$ihPSHDVS@X@;uSw$Vjh"@VSPЍw(]9_$V*<EiX@+tJIt>It2t$ItItIuUPV4PV+PV"PVPVPVPVb;tEE;G$tX@;thPSHDPT@X@^_[̡<@jjhBERTPTt%x$tH$j
X@p$p,p(@X@̋U$SVWj@3V`X@W诌<@VVhEINJPT;u5XW@XW@39s,vYK0wE$v@X@6X@.X@&X@X@X@X@X@B ;S,r95X@95X@
95X@95X@95X@95X@95X@95X@C,k(hpshdPV@;uj@VW見
X@k(dX@X@k(ʍhX@X@k(ʍlX@X@k(ʍpX@X@k(ʍtX@X@k(ʍxX@X@k(У`X@|X@u9s,j(uuuuuuuus0_|X@$@`X@MVQ|}dX@MVQc}}hX@MVQM}glX@MVQ7}QpX@MVQ!};tX@MVQ}%xX@MVQ}EVP}E܋E܃ ;C,)\W@05X@5X@5X@5X@5X@5X@5X@5X@_^[Ð׬@߬@笖@ﬖ@@@@@y@@@@Ԯ@ꮖ@@@̋ULSVWh3WW@Sj<@WWhERSTPTu;u=`W@5`W@39~,N0$@X@vX@nX@fX@^X@VX@NX@FX@> X@6$X@.(X@&,X@0X@4X@8X@<X@B ;V,b9=X@9=X@9=X@9=X@9=X@9=X@9=X@9=X@9= X@9=$X@u9=(X@i9=,X@]9=4X@t9=8X@X9=<X@LF,k(hpshdPW@; ]C,k(PWV贇X@
X@k(k(ƣW@
X@k(W@
X@k(W@
X@k(W@
X@k(W@
X@k(W@
X@k(W@
 X@k(W@
$X@k(W@
(X@k(W@
,X@k(W@
0X@5W@;t
k(W@
4X@;t k(W@
8X@k(ȣW@
W@}}}9{,uj(}}}ĉ}ȉ}̉}Љ}ԉ}؉}܉}}}}}3ۉ}0_$@X@9EW@MVPE}pX@9EbW@VPҼEJW@MVP跼}1W@MVP螼}W@MVP腼}W@MVPl}W@MVPS}W@MVP:}W@MVP!}W@MVP}W@MVP}lW@MVPٻ}VW@MVPû}@W@MVP譻}*W@MVP藻}W@MVP聻}EEM ;H,>hWS虄_^[Ð'@/@7@?@G@O@W@_@g@o@w@@@@@@@@>@W@p@@@@Գ@@@@2@H@^@t@̋UEV0~t
6;u2^]W}jY_ܵ4ĹnZF2 ڸƸ8HVj|$ ,Fbܶжvfз\̹KmemcpyKeBugCheckExsExAllocatePoolWithTag*WheaGetErrorSourceMmMapIoSpaceMZwCloseZwQueryValueKeyZwOpenKeyRtlInitUnicodeStringMmemmoveOmemset)WheaConfigureErrorSourceExFreePoolWithTagZwSetValueKeyYZwCreateKeyHalDispatchTableMmUnmapIoSpace0_vsnwprintf%WRITE_REGISTER_UCHARKREAD_REGISTER_UCHAR'WRITE_REGISTER_USHORTMREAD_REGISTER_USHORT&WRITE_REGISTER_ULONGLREAD_REGISTER_ULONG_allshl_aullshrHalPrivateDispatchTableRtlUnicodeStringToIntegerANtGetEnvironmentVariableEx[NtQueryEnvironmentVariableInfoExntoskrnl.exeHalBugCheckSystemTKeGetCurrentIrql]KeStallExecutionProcessorSKeFlushWriteBuffermWRITE_PORT_UCHARgREAD_PORT_UCHARoWRITE_PORT_USHORTiREAD_PORT_USHORTnWRITE_PORT_ULONGhREAD_PORT_ULONGHalEnumerateEnvironmentVariablesEx;HalSetEnvironmentVariableExHAL.dllKeTickCountL00H`x				 x`
WEVT_TEMPLATEMUI4VS_VERSION_INFO@@?
StringFileInfo040904B0LCompanyNameMicrosoft Corporationx(FileDescriptionPlatform Specific Hardware Error Driverl&FileVersion6.1.7600.16385 (win7_rtm.090713-1255)4
InternalNamepshed.dll.LegalCopyright Microsoft Corporation. All rights reserved.<
OriginalFilenamepshed.dllj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.1.7600.16385DVarFileInfo$Translation	

d
PPD


		


lTA non-fatal hardware error occurred.

LA fatal hardware error occurred.

0Machine Check Event reported is a fatal memory hierarchy error.%n Trasaction Type: %1%n Memory Hierarchy Level: %5%n Request Type: %3%n Address: %6

Machine Check Event reported is a fatal TLB error.%n Transaction Type: %1%n Memory Hierarchy Level: %5%n Address: %6

TMachine Check Event reported is a fatal Bus or Interconnect error.%n Memory Hierarchy Level: %5%n Participation: %2%n Request Type: %3%n Memory/IO: %4%n Address: %6

dMachine Check Event reported is a fatal Bus or Interconnect timeout error.%n Memory Hierarchy Level: %5%n Participation: %2%n Request Type: %3%n Memory/IO: %4%n Address: %6

Machine Check Event reported is a fatal internal watchdog timer error.

Machine Check Event reported is a fatal condition. A processor received an external signal that an unrecoverable error has occurred.

Machine Check Event reported is a fatal functional redundancy check error.

hPCI Express reported a fatal error.%n Device Identifier: Bus %1 Device %2 Function %3%n Uncorrectable Error Status: %4%n Correctable Error Status: %5%n Header Log: %6 %7 %8 %9

,WHEA Error Events

Error

Warning

 Information

DMicrosoft-Windows-Kernel-WHEA

System

WHEA successfully initialized.%n   %1 error sources are active%n   Error record format version is %2.

$Machine Check Event reported is a memory hierarchy error.%n Trasaction Type: %1%n Memory Hierarchy Level: %5%n Request Type: %3%n Address: %6

Machine Check Event reported is a TLB error.%n Transaction Type: %1%n Memory Hierarchy Level: %5%n Address: %6

HMachine Check Event reported is a Bus or Interconnect error.%n Memory Hierarchy Level: %5%n Participation: %2%n Request Type: %3%n Memory/IO: %4%n Address: %6

XMachine Check Event reported is a Bus or Interconnect timeout error.%n Memory Hierarchy Level: %5%n Participation: %2%n Request Type: %3%n Memory/IO: %4%n Address: %6

Machine Check Event reported is a fatal microsoft ROM parity error.

pPCI Express reported a non-fatal error.%n Device Identifier: Bus %1 Device %2 Function %3%n Uncorrectable Error Status: %4%n Correctable Error Status: %5%n Header Log: %6 %7 %8 %9

 WHEA Event

The memory page located at physical address %1 %2 %3 %4. %5

Dhas been taken out of service

will be taken out of service (if and when it becomes available)

due to

Xat the direction of the platform due to

Done or more corrected errors

4an uncorrected error

The page is not listed in the boot configuration data store as defective, and will be used by the operating system after a reboot.

The page is listed in the boot configuration data store as defective, and will not be used by the operating system after a reboot.

CRIMy5V{SD6e$WEVT\ 8DxCHAN,SystemPMicrosoft-Windows-Kernel-WHEA/ErrorsXMicrosoft-Windows-Kernel-WHEA/OperationalMAPSVMAP$0VMAP$VMAP$VMAP$d4whealogr:mapWHEAPending8whealogr:mapWHEAPersistedHwhealogr:mapWHEAPlatformDirected<whealogr:mapWHEAUncorrectedTTBLTEMP`ǎqcpgHqZD	EventDataA=oData%KName	Signature
A;oData#KNameRevision
A=oData%KName	Reserved1
A=oData%KName	Reserved2
ACoData+KNameSectionCount
A;oData#KNameSeverity
AGoData/KNameValidationBits
A7oDataKNameLength
A=oData%KName	Timestamp

A?oData'KName
PlatformId
	AAoData)KNamePartitionId
A=oData%KName	CreatorId
A?oData'KName
NotifyType
A;oData#KNameRecordId


A5oDataKNameFlags
A9oData!KNameRawData
	,	D	\	|			

		

4


P
h
x
SignatureRevisionReserved1Reserved2 SectionCountSeverity$ValidationBitsLengthTimestampPlatformIdPartitionIdCreatorIdNotifyTypeRecordIdFlagsRawDataTEMP
IaOd.LD	EventDataAIoData1KNameTransactionType
AEoData-KName
Participation
AAoData)KNameRequestType
A9oData!KNameMemorIO
AIoData1KNameMemHierarchyLvl
A9oData!KNameAddress

A7oDataKNameLength
A9oData!KNameRawData



 
DXl$TransactionType ParticipationRequestTypeMemorIO$MemHierarchyLvlAddressLengthRawDataTEMPU9kVm9+HHD	EventDataAAoData)KNameSourceIdBus
AAoData)KNameSourceIdDev
AAoData)KNameSourceIdFun
A[oDataCKNameUncorrectableErrorStatus
AWoData?KNameCorrectableErrorStatus
A?oData'KName
HeaderLog0
A?oData'KName
HeaderLog1
A?oData'KName
HeaderLog2
A?oData'KName
HeaderLog3
A7oDataKNameLength
	A9oData!KNameRawData
,d	SourceIdBusSourceIdDevSourceIdFun8UncorrectableErrorStatus4CorrectableErrorStatusHeaderLog0HeaderLog1HeaderLog2HeaderLog3LengthRawDataTEMP[H6Ў$@pD	EventDataAKoData3KNameErrorSourceCount
AMoData5KNameErrorRecordFormat
AWoData?KNameErrorSourceTableLength
AKoData3KNameErrorSourceTable
$Lt(ErrorSourceCount(ErrorRecordFormat4ErrorSourceTableLength(ErrorSourceTableTEMPؗ{Ly8)D	EventDataA7oDataKNameLength
A9oData!KNameRawData
LengthRawDataTEMP-Ù: D	EventDataAIoData1KNamePhysicalAddress
A9oData!KNamePending
AKoData3KNamePlatformDirected
AAoData)KNameUncorrected
A=oData%KName	Persisted
0Dl$PhysicalAddressPending(PlatformDirectedUncorrectedPersistedOPCOLEVLPPPwin:Errorwin:Warning(win:InformationalTASKKEYW4`WheaErrorEVNT,,@,@, 0
@

	@	



@


@


@


@@x@|PPdwU_#v餕/d|V_*WEVT_TEMPLATEMUIMUIen-US1C1i111W22223-333J3\3z3333334434I4O4l444444445)5/5X5g5m5555R6Y6g6n6|6666)767;7s7}7777c89::E:X:^:::::::::;A;J;W;g;w;;;;<"<R<c<{<<<5=S=n=====>>E>L>s>}>>>5?<?i??? G0S0[0o0000001#252c2u2233:3K3x333{444445~5555563666666698888)9999:,:;:K::::::;9;k;;;;<<<<==T=[=======!>(>U>]>>>>?O?V?_?e?k?q????????????0j000111111111111222222202F2{23333333333333333333384@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|55556666M77777
8+8=88889.9:9F9R9^9j9v99999(:/:4:B:I:V:v:|::P77pN0030z02$2T020E0]0n0000000000,161<1E1X11112222!2&2+2;222222222	33&30393=3C3a3333333334	444+424=4E4M4m4w444Y6_688V9\9/:5::;;;7;M;R;h;;<%<+<;<\<k<p<<<<<<<<<<<=	== =,=8=D=P=\=h=t===========>
>>>*>0>b>u>z>>>>>>?9?B?H?N?T?Z?`?f?l?v?z?~?????????????????0#0)01090A0I0Q0Y0a0i0q0y000000000000011 1,181D1L1X1q1111111111111112222$2,242<2D2L2U2a2i2u2}2222223'3?3X3q3333334434I4_4u4444444444444444444455555555 5$5(5,505P0C	*H
40010	+0h
+7Z0X03
+70% <<<Obsolete>>>0!0	+y5ݔϸ>(U00
a
0
	*H
0w10	UUS10U
Washington10URedmond10U
Microsoft Corporation1!0UMicrosoft Time-Stamp PCA0
080725191345Z
110725192345Z010	UUS10U
Washington10URedmond10U
Microsoft Corporation1
0UMOPR1'0%UnCipher DSE ESN:9E78-864B-039D1%0#UMicrosoft Time-Stamp Service0"0
	*H
0
F/F?cE3r'24ΡHPNH pY3[H(ffP(UUp[.%vo),S
㽧E1憋}xX8ݓJ[לMп'Jq
p*aKݫT7F첗ܸ"%Yp>\{A)s"IU&N(Tb;p-aP՟UJT{b]\*
)4@O00U1^
d<i0U#0#4RFp
@v+50TUM0K0IGEChttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X+L0J0H+0<http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0U%0
+0U0
	*H
GqOHE/%[gQٲ&׈5+kXjZF/}zB	(Tlo8:$rL/zv;q'm8g"b+{v&L݊8]e.VLe!-nudk%D9/
y~*x[k[	9:9gSayHg+b	xsI;XS	L@(~fſRľ>;t"3y|Ǹ-Ȥ00~
a0
	*H
010	UUS10U
Washington10URedmond10U
Microsoft Corporation1+0)U"Microsoft Windows Verification PCA0
081022203922Z
100122204922Z010	UUS10U
Washington10URedmond10U
Microsoft Corporation1
0UMOPR10UMicrosoft Windows0"0
	*H
0
:Dn ݤNdž^cBSK]qlv
Jb$E;a
i͈*`_҂NmIž\H-gy{%v_dra%ui_V
p#l݂ٛGlXSjOڅa{I׹^sv:
]iw~sm/wTUE8@q('qr'Q6{::7ixduAx"wKFe[MVkuF?00U%0+
+7
0Ue(b#IS0U0U#0pǵ<J0{Ut0r0pnl4http://crl.microsoft.com/pki/crl/products/WinPCA.crl4http://www.microsoft.com/pki/crl/products/WinPCA.crl0R+F0D0B+06http://www.microsoft.com/pki/certs/MicrosoftWinPCA.crt0U 00	+7/00@+4https://www.microsoft.com/pki/ssl/cps/WindowsPCA.htm0f+0ZXCopyright  1999-2005 Microsoft Corporation.0
	*H
s_ʀ`Fo4"X{.9Y[zC{SDSg:xjo)G
{"wNod)sfZ&WO9.[r72N<}+uCwX2%`YqqA\Z"mR~v|#K%Uao?섥ml+^ȅ`{iIpefF4!<qJ#`4Y:U]ӗ00
ah40
	*H
0_10
	&,dcom10
	&,d	microsoft1-0+U$Microsoft Root Certificate Authority0
070403125309Z
210403130309Z0w10	UUS10U
Washington10URedmond10U
Microsoft Corporation1!0UMicrosoft Time-Stamp PCA0"0
	*H
0
lH*|k.řQ#PN$ѧLt0 TIB\0&k{3$g,{N#SʍE	^аBlg(FS(F.'OUR,j0nY0~֗!~SmREHJGf')fJG	UxP0F#F-TxA1w̛;a
"KT 00U00U#4RFp
@v+50U0	+70U#0`@V'%*
SY䤡ca0_10
	&,dcom10
	&,d	microsoft1-0+U$Microsoft Root Certificate AuthorityyJLsX.e0PUI0G0ECA?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T+H0F0D+08http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0U%0
+0
	*H
\D6鴭wyQM.tq[mξ{.mbWN Pz@WXx;⾏
ȍHSOjՀ/*$"px.
pNk
r9g-Qb\? ?21Jv1=+rp=

a׸N5+^}B{Sr!0ʻxe\[
<fX-/QVpl9Lyzb))4wb=m,C}㤨t5Nq#&v<RqZFCMgȟBy!0fB^Ȟ"!C+H,2L&*H$_ZVޙ:o'tv!'Tj=vanGo2lQȌ#fd=-Y!嵰cxTA.Pxuْu"/2n[%!OɚIeo}in꧗1)[\M/?.Uk00
a0
	*H
0_10
	&,dcom10
	&,d	microsoft1-0+U$Microsoft Root Certificate Authority0
050915215541Z
160315220541Z010	UUS10U
Washington10URedmond10U
Microsoft Corporation1+0)U"Microsoft Windows Verification PCA0"0
	*H
0
ŬNJ75Ұ\a1	4F,, s؍zhfx`)Z^]b\)36ݱFtirSժ芙g		 "8z#׉Qߘf*)[BQ}%
%ܛg
Vs~3+b3 K^I.NqDFd>Cf̃H:6zH=cv)u	')gCwPS1qw|1Hո%"(8z|?@&w:060	+70Upǵ<J0U0U00U#0`@V'%*
SY䤡ca0_10
	&,dcom10
	&,d	microsoft1-0+U$Microsoft Root Certificate AuthorityyJLsX.e0PUI0G0ECA?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T+H0F0D+08http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0U y0w0u	+7/0h0f+0ZXCopyright  1999-2005 Microsoft Corporation.0U%0+
+7
0
	*H
%1XR?x?rWS^2p+M04j. eHb!EJ/	Q2Q/RƂ%B	86ɀZi1ógG?9|Aճ/hlj
Z
mK?{-l4"Us}&]~%pJ{׎ѝIzRR$@->2XJjY-s8@wk4W8h'o#?RN>j+1qAM;ﭯeCQuʎiIxtE	sw2JKh+źT?ˢXܛHCJ~e-N%gൺ~^Ltɳn)[6Qx}2^v\;7!nt*\,QIES#ԡ_
<rڵD<zeMg;};Q*G].5.7Z+UI,ΝF\-$ZYoMʝW&100010	UUS10U
Washington10URedmond10U
Microsoft Corporation1+0)U"Microsoft Windows Verification PCA
a0	+0	*H
	1
+70
+710
+70#	*H
	1\nH)AdQa0Z
+71L0J$"Microsoft Windows" http://www.microsoft.com/windows0
	*H
40x1&T8@|@P~$+XڎX#>1;x1^KzFF5o#^ɍ'޶c+bw’|Qs8Z#N)א=/_
s# 5Rv1÷Exq~DXƑH<LchuC[Yr1
M'jʎm"A^7(_?V^|
urIGjwt"`7R0	*H
	1
000w10	UUS10U
Washington10URedmond10U
Microsoft Corporation1!0UMicrosoft Time-Stamp PCA
a
0+]0	*H
	1	*H
0	*H
	1
090714011913Z0#	*H
	1wݘ|Ӿ4(90
	*H
uXA1se;auQ4j_)>$Ax^$}>/uY>rZFVIB2/@[we.r*$^ICT7XĽNnK-)NsY؈|@NRgXyH,&=3s_[q
rŽ޹QYŠ\ɉUbwT9"ی&'|-
Y[9 cp

Anon7 - 2022
AnonSec Team