,'1D= B'@?:+NB= (?1z@J= * ?3= +`?wU4?= ,?DO= ;.?$b = /p?g)([|X>= H1?>gV = 20?OBO= *4?bPA< 5?e4= f7@?|[{~*L= 9?ٹE= t:?G]C= '"?@(6F= ? #?'A= @H#?43
A= Ax#?uN}*J= C#?)r7Yr7= ]D#? .K="= rE $?r = F0$?3=1Z1= H`$?h|=G= gI$?ܩN:= J$?4e 6= K$?{<9= =M%?uYPwH= NH%?-*8= Px%?y F.= -Q%?\9 ;,= R%?29Zd@= T &?~YK|
= sU0&?WĻ(J= VX&?RIG= X&?W N= Y&?g'9= [&?
D"^= 2)$ 7bmL Mӿ( ԏ S4 _ >L |/ dM 4g±8 2 qڜ1 ןqaPC Qo %;9 ?_0C w 4g%6L &M;k@ ڿ81AB ۏ1uB )_ Y /, : x.Ճ^- ? ޯԝI -:]=O> O#w_jُB n (+E -V~|_ B}_A CK!ܨY: _5G t/C$> #H m-
M Vn@ QU^tA $OÄ þiM @K8|;2 @(A V64 oꬠTC 9?&u. ~Fs:4 Կ J _L
II =@0( ן$.G ?}3Rʏ3
!|.4 *ڟ
}3 ?
G"jm
>; *O 0
:O 2K; Q`4 _ ZD
69 *
F _
T3ʢK M.֢> @_@ ? 1\hU XpM &Jx3 Ҭ x /h 7 8Lv]E V 3 Bv9 r_cM *5&L q3 ?:R$ @$= K' \?Ъ{b> $EvC Iw8R' F G_j,) +jBD |_ `kA %'r BL TE _GO # i# ;^طH ? 6(`JJ \HB 5 ``.11 \?QD T Ӿ96 оk<
xE ˾CqTR; ǾdG GgL @_h
%? SS@ b?Wdy>c*GPAiFC.ֿ ? 53=?)a,?][SqnC?nw tӰY?eus<)kp?&<ߑțuE?Ka<>?5a1xH<lX?
aJ.?#Eq<1
?1j<1Lp!?|眊<dD8`<;f?Ud4ݛ u? gVr/eT'?*mb|L%?2 L#FG?AֈDh?ԛƟfNJ?:|<۠*B?&KVU?An/X0y?c~˛= W?0 k8= ޮp? x9= >.ښ?pn5= Yح? Q*= c??b6= Y ?T?= >?W!= @-32? Dz= p(?vP(= ` ?US ?>= e?g7= `ŀ'?bͬ/= ^s?}#= Jwk?zn = N ָ?LN 9= @$"3?5Wg4p6= T?Nv$^)= &?.)< lB?M%= `j?w*= <śm?E2= ެ>
?E = t?? = OQ?w(@ < 0?Ac
0= Pyp?dry? = St)?4K >= $?QhBC .= 0 ub?-0= ?a>-?= ?Й,< (lX ?T@b == P ?3h,%= f??# = V ?ߠϡ6= Y?z $= G ? $l35= @n?[+3= Rŷ ?sdLi== p|?rx"#2= @.?|U2= lԝ?rF= a? 4= Y?sl#{ = `~R=?.i1= ,? = vX ? = p ?h}s"= E[
?%S#[k = 7H?j= !V1?}a2= j q?20J5= ?5= x¾/@?"B <1= iz?\-!y!= X0z?~b>== :? #.X'= HBO&? (~= xbb? .= Cq?y7i9+= v?:= 0 ?2ض8= xPD?X 1 = ? ? Q? Q? ? ? ? ? ? ? ? ? ]? ]? P? P? ? ? U? U? (? (? `? `? _? _? ? ? ? ? z? z? 1? 1? p? p? ? ? (e? (e? @#? @#? ? ? `? `? hk? hk? ,? ,? x? x? ? ? ? ? N? N? x? x? p? p? ? ? ~? ~? HN? HN? ? ? ? ? ? ? p? p? Xi? Xi? ?? ?? ? ? ? ? ? ? 8? 8? s? s? pI? pI? &? &? ? ? ? ? o? o? *? *? ? ? `? `? Z? Z? ? ? 0? 0? ? ? PY? PY? ? ? `? `? ? ? pm? pm? /? /? ? ? ? ?C O N O U T $ D i r e c t o r y \ ? ? \ G L O B A L R O O T \ D e v i c e H a r d d i s k \ ? ? \ G L O B A L R O O T \ D e v i c e \ D e v i c e D R \ n t d l l . d l l NtOpenDirectoryObject NtQueryDirectoryObject RtlInitUnicodeString NtClose \\.\ Volume{ Volume \\?\ \??\ HarddiskVolume \\?\GLOBALROOT\Device\ \??\GLOBALROOT\Device\ HarddiskDmVolumes \Device\ Harddisk \/ \ ? ? \ \ \ . \ \ \ ? \ \ G L O B A L R O O T \ GLOBALROOT\ D e v i c e \ Device\ G L O B A L ? ? \ GLOBAL??\ G l o b a l \ Global\ D o s D e v i c e s \ DosDevices\ H a r d d i s k V o l u m e \ D R \DR \ P a r t i t i o n \Partition V o l u m e { H a r d d i s k D m V o l u m e s S T O R A G E # V o l u m e STORAGE#Volume 8 O O P `T pV V V 0T L W W 0^ b b b Pc c V V d V V V `e e V V V V \ S y s t e m 3 2 \ \ s y s t e m 3 2 \ \ s y s w o w 6 4 \ \ s y s t e m r o o t qscan: memmod: Pid = %u, %S S y s t e m kernel32 qscan: memmod: GetModuleHandle for kernel32 failed IsWow64Process qscan: memmod: IsWow64Process failed qscan: memmod: Error enum of %u pid. Error %u ntdll.dll NtWow64QueryInformationProcess64 qscan: memmod: Can't resolve NtWow64QueryInformationProcess64 (Error = %u) NtWow64ReadVirtualMemory64 qscan: memmod: Can't resolve NtWow64ReadVirtualMemory64 (Error = %u) qscan: memmod: Can't open process. pid = %u (Error = %u) qscan: memmod: NtWow64QueryInformationProcess64 failed 0x%X qscan: memmod: NtWow64ReadVirtualMemory64 PEB failed 0x%X qscan: memmod: NtWow64ReadVirtualMemory64 Ldr failed 0x%X qscan: memmod: NtWow64ReadVirtualMemory64 Ldr_data failed 0x%X qscan: memmod: Verified 1 is failed qscan: memmod: Verified 2 is failed qscan: memmod: No memory for FullDllName stored qscan: memmod: NtWow64ReadVirtualMemory64 ldrEntry.FullDllName failed ` qscan: Object type is not valid: '%S' qscan: Failed to delete file: '%S' %u qscan: Invalid object '%S' type qscan: Invalid object '%S' attributes %X qscan: Can't clear readonly flag '%S' (%u) qscan: Failed create file: '%S' 0x%X S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ S e s s i o n M a n a g e r qscan: IfFileIsCopy: Error open key %d P e n d i n g F i l e R e n a m e O p e r a t i o n s qscan: IfFileIsCopy: Error query value %d @ ՂՂՂH K L M H K U H K U S H K C U H K E Y _ L O C A L _ M A C H I N E H K E Y _ U S E R S H K E Y _ C U R R E N T _ U S E R NtOpenKey NtDeleteKey `V V V L b 0 p`T @V `P` p @ p 0 P0 ` `pp HKLM\SYSTEM\CurrentControlSet\services\ivm HKLM\SOFTWARE\Citrix\personal vDisk\Config HKLM\SOFTWARE\Wow6432Node\Citrix\personal vDisk\Config UserDiskDrive qscan: klarkreg: CitrixPvd UserDiskDrive not found qscan: klarkreg: CitrixPvd detected qscan: klarkreg: !conn_reg qscan: klarkreg: !va klarkreg qscan: klarkreg: Can't get driver log with error native = %d, klava = 0x%08X
qscan: klarkreg: drvlog: %s qscan: klarkreg: !conn_regkey qscan: klarkreg: !va klarkrkey p`T @V `P` ` P P p P0 ` ` ( p`T @V `P` ` P P p P0 ` ` `V V V L `V V V L a r b g c a z h - C H S c s d a d e e l e n e s f i f r h e h u i s i t j a k o n l n o p l p t r o r u h r s k s q s v t h t r u r i d u k b e s l e t l v l t f a v i h y a z e u m k a f k a f o h i m s k k k y s w u z t t p a g u t a t e k n m r s a m n g l k o k s y r d i v a r - S A b g - B G c a - E S z h - T W c s - C Z d a - D K d e - D E e l - G R e n - U S f i - F I f r - F R h e - I L h u - H U i s - I S i t - I T j a - J P k o - K R n l - N L n b - N O p l - P L p t - B R r o - R O r u - R U h r - H R s k - S K s q - A L s v - S E t h - T H t r - T R u r - P K i d - I D u k - U A b e - B Y s l - S I e t - E E l v - L V l t - L T f a - I R v i - V N h y - A M a z - A Z - L a t n e u - E S m k - M K t n - Z A x h - Z A z u - Z A a f - Z A k a - G E f o - F O h i - I N m t - M T s e - N O m s - M Y k k - K Z k y - K G s w - K E u z - U Z - L a t n t t - R U b n - I N p a - I N g u - I N t a - I N t e - I N k n - I N m l - I N m r - I N s a - I N m n - M N c y - G B g l - E S k o k - I N s y r - S Y d i v - M V q u z - B O n s - Z A m i - N Z a r - I Q z h - C N d e - C H e n - G B e s - M X f r - B E i t - C H n l - B E n n - N O p t - P T s r - S P - L a t n s v - F I a z - A Z - C y r l s e - S E m s - B N u z - U Z - C y r l q u z - E C a r - E G z h - H K d e - A T e n - A U e s - E S f r - C A s r - S P - C y r l s e - F I q u z - P E a r - L Y z h - S G d e - L U e n - C A e s - G T f r - C H h r - B A s m j - N O a r - D Z z h - M O d e - L I e n - N Z e s - C R f r - L U b s - B A - L a t n s m j - S E a r - M A e n - I E e s - P A f r - M C s r - B A - L a t n s m a - N O a r - T N e n - Z A e s - D O s r - B A - C y r l s m a - S E a r - O M e n - J M e s - V E s m s - F I a r - Y E e n - C B e s - C O s m n - F I a r - S Y e n - B Z e s - P E a r - J O e n - T T e s - A R a r - L B e n - Z W e s - E C a r - K W e n - P H e s - C L a r - A E e s - U Y a r - B H e s - P Y a r - Q A e s - B O e s - S V e s - H N e s - N I e s - P R z h - C H T s r a f - z a a r - a e a r - b h a r - d z a r - e g a r - i q a r - j o a r - k w a r - l b a r - l y a r - m a a r - o m a r - q a a r - s a a r - s y a r - t n a r - y e a z - a z - c y r l a z - a z - l a t n b e - b y b g - b g b n - i n b s - b a - l a t n c a - e s c s - c z c y - g b d a - d k d e - a t d e - c h d e - d e d e - l i d e - l u d i v - m v e l - g r e n - a u e n - b z e n - c a e n - c b e n - g b e n - i e e n - j m e n - n z e n - p h e n - t t e n - u s e n - z a e n - z w e s - a r e s - b o e s - c l e s - c o e s - c r e s - d o e s - e c e s - e s e s - g t e s - h n e s - m x e s - n i e s - p a e s - p e e s - p r e s - p y e s - s v e s - u y e s - v e e t - e e e u - e s f a - i r f i - f i f o - f o f r - b e f r - c a f r - c h f r - f r f r - l u f r - m c g l - e s g u - i n h e - i l h i - i n h r - b a h r - h r h u - h u h y - a m i d - i d i s - i s i t - c h i t - i t j a - j p k a - g e k k - k z k n - i n k o k - i n k o - k r k y - k g l t - l t l v - l v m i - n z m k - m k m l - i n m n - m n m r - i n m s - b n m s - m y m t - m t n b - n o n l - b e n l - n l n n - n o n s - z a p a - i n p l - p l p t - b r p t - p t q u z - b o q u z - e c q u z - p e r o - r o r u - r u s a - i n s e - f i s e - n o s e - s e s k - s k s l - s i s m a - n o s m a - s e s m j - n o s m j - s e s m n - f i s m s - f i s q - a l s r - b a - c y r l s r - b a - l a t n s r - s p - c y r l s r - s p - l a t n s v - f i s v - s e s w - k e s y r - s y t a - i n t e - i n t h - t h t n - z a t r - t r t t - r u u k - u a u r - p k u z - u z - c y r l u z - u z - l a t n v i - v n x h - z a z h - c h s z h - c h t z h - c n z h - h k z h - m o z h - s g z h - t w z u - z a kernel32.dll Wow64RevertWow64FsRedirection Wow64DisableWow64FsRedirection \System32\ \SysWOW64\ QueryDosDeviceW GetVolumePathNamesForVolumeNameA GetVolumePathNamesForVolumeNameW msi.dll MsiGetShortcutTargetW MsiGetComponentPathW advapi32.dll ConvertSidToStringSidA userenv.dll RefreshPolicyEx NtQuerySystemInformation NtSetSystemInformation RtlNtStatusToDosError RtlGetVersion version.dll GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueA k e r n e l 3 2 HKEY_CLASSES_ROOT HKCR HKEY_CURRENT_USER HKCU HKEY_LOCAL_MACHINE HKLM HKEY_USERS HKU qscan: RtlGetVersion error 0x%08X qscan: verinfo: Can't resolve one of function qscan: verinfo: file <%S> not found qscan: verinfo: error <%u> qscan: verinfo: No memory qscan: verinfo: GetFileVersionInfo error = %u qscan: verinfo: VerQueryValue error = %u qscan: verinfo: Invalid verinfo signature qscan: Can't get system boot time with error 0x%08X GetTickCount64 GetTickCount qscan: Can't found GetTickCount with error 0x%08X qscan: Can't get process time with error 0x%08X qscan: Unexpected process time with error 0x%08X "'P= uq U _ < @ p ` p P @ 0 pP @@*Ջ S'Ջ S F F F F F F F G #'P= uq$Ջ S F ` wtsapi32.dll WTSEnumerateSessionsW WTSFreeMemory WTSQueryUserToken WTSQuerySessionInformationW WTSGetActiveConsoleSessionId OpenProcessToken ImpersonateLoggedOnUser RevertToSelf CreateEnvironmentBlock DestroyEnvironmentBlock qscan: Failed query sessions func 0x%0X qscan: Can't enum sessions 0x%0X qscan: Can't found active session qscan: Cannot get session token !!!!!!! qscan: Cannot duplicate token !!!!!!! w i n l o g o n . e x e qscan: Can't query session token 0x%0X e x p l o r e r . e x e S e I n c r e a s e Q u o t a P r i v i l e g e S e S e c u r i t y P r i v i l e g e S e S y s t e m P r o f i l e P r i v i l e g e S e D e b u g P r i v i l e g e S e M a c h i n e A c c o u n t P r i v i l e g e S e C r e a t e T o k e n P r i v i l e g e S e A s s i g n P r i m a r y T o k e n P r i v i l e g e S e T c b P r i v i l e g e S e A u d i t P r i v i l e g e S e S y s t e m E n v i r o n m e n t P r i v i l e g e p < ` P P C : qscan: klif active error 0x%0X qscan: klif req error 0x%0X $V ,V ( qscan: klarkapi: Set last chance value <%ws> <%ws> status is native = %d, klava = 0x%08X qscan: klarkapi: Set service group order value <%ws> status is native = %d, klava = 0x%08X qscan: klarkapi: Open drive 0x%I64 by name <%ws> status is native = %d, klava = 0x%08X qscan: klarkapi: Close drive 0x%I64X status is native = %d, klava = 0x%08X qscan: klarkapi: Can't read drive 0x%I64X at offset 0x%I64X with error native = %d, klava = 0x%08X qscan: klarkapi: Can't write drive 0x%I64X at offset 0x%I64X with error native = %d, klava = 0x%08X qscan: klarkapi: Can't get geometry for drive 0x%I64X with error native = %d, klava = 0x%08X qscan: klarkapi: Can't get partition info for drive 0x%I64X with error native = %d, klava = 0x%08X qscan: klarkapi: Get kernel filename status is native = %d, klava = 0x%08X qscan: klarkapi: Set reg hooks status is native = %d, klava = 0x%08X qscan: klarkapi: Add reg key <%ws> status is native = %d, klava = 0x%08X qscan: klarkapi: Add reg mask <%ws> status is native = %d, klava = 0x%08X qscan: klarkapi: Lock 0x%I64X sectors from 0x%I64X for <%ws> status is native = %d, klava = 0x%08X qscan: klarkapi: Set last chance write sectors from 0x%I64X for <%ws> status is native = %d, klava = 0x%08X N U L L qscan: klarkapi: rmcb 0x%08X <%ws> status is native = %d, klava = 0x%08X qscan: klarkapi: !conn_api qscan: klarkapi: !va klarkapi qscan: klarkapi: Can't get driver log with error native = %d, klava = 0x%08X qscan: klarkapi: drvlog: %s HKLM\SYSTEM\CurrentControlSet\Services\volmgrx PrimaryPackId HKLM\SYSTEM\CurrentControlSet\Services\dmio\Boot Info\Primary Disk Group ID { } qscan: klarkapi: Can't get inquire data with error native = %d, klava = 0x%08X read write qscan: klarkapi: Can't %s 0x%I64X sectors for storage 0x%I64X (P%uT%uL%u) at 0x%I64X with error native = %d, klava = 0x%08X qscan: klarkapi: Can't get geometry for storage 0x%I64X (P%uT%uL%u) with error native = %d, klava = 0x%08X \\.\X: \Device\Harddisk \\?\GLOBALROOT HKLM\System\MountedDevices \DosDevices\ DMIO:ID: \??\Volume{ qscan: klarkapi: ATA: <%s> ID = 0x%08X, H = %d, D = %d, PPTL = %d:%d:%d:%d, R = %d, F = 0x%08X, UF = 0x%08X qscan: klarkapi: Can't open drive <%s> with error native = %d, klava = 0x%08X qscan: klarkapi: Can't get part info with error native = %d, klava = 0x%08X qscan: klarkapi: Can't get layout info with error native = %d, klava = 0x%08X qscan: klarkapi: Can't get partition info with error 0x%0X qscan: klarkapi: Can't find mbr partition with error 0x%0X qscan: klarkapi: Can't find gpt partition with error 0x%0X qscan: klarkapi: Unexpected style 0x%0X with error 0x%0X qscan: klarkapi: Empty partition info with error 0x%0X \Device\Harddisk%d\DR%d qscan: klarkapi: !va klarkata
;ՂՂՂՂ
lb l m noV V @oV V V ooV V V V _`h
b V
;ՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂ
ՂՂՂՂՂՂՂՂՂՂՂՂՂՂV V V V ^Ղ
lb ltuvV V @oV V V ooV V V V _p
b o
xpyyy0z
<ՂՂՂՂՂՂՂՂՂՂ
I>MN`O@PR W wpz0}
<> ?? @@AA B><CpCCDPEFFp==@D
ՂՂ
ՂՂ
Pp`pHKLM\SYSTEM\ControlSet HKEY_LOCAL_MACHINE\SYSTEM\ControlSet SYSTEM\ControlSet___ qscan: Skip inactive control set <%s> qscan: Can't get ticks with error 0x%0X qscan: Can't get process ticks with error 0x%0X qscan: Can't get os ver error 0x%0X HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Configuration Manager\LastKnownGood Enabled qscan: Unexpected knowngood type %u with error 0x%0X qscan: Unexpected knowngood value %u with error 0x%0X qscan: Enable skip inactive constrol set due sysUpt 0x%llX and procUpt 0x%llX HKLM\SYSTEM\Select qscan: Can't open select key with error 0x%0X Current qscan: Can't get ccs val type with error 0x%0X qscan: Unexpected ccs type %u with error 0x%0X qscan: Can't get ccs val data with error 0x%0X H K L M \ H K C U \ H K U S \ S y m b o l i c L i n k V a l u e \ R e g i s t r y \ M a c h i n e \ \ R e g i s t r y \ U s e r \ \Wow6432Node HKUS _Classes Wow6432Node SOFTWARE\Classes\Wow6432Node SOFTWARE\Wow6432Node H K L M \ S O F T W A R E \ W o w 6 4 3 2 N o d e , - - - $- L- d-
p`T @V `P`ՂՂՂՂՂՂՂՂՂՂՂP0 ` `pp
`V V V L b Ղ\ r e g i s t r y \ m a c h i n e \ r e g i s t r y \ u s e r p
p`T @V `P`@ @P`P0 ` `p
`V V V L NtOpenSymbolicLinkObject NtQuerySymbolicLinkObject M y
0
PV V V V
pV V V V
V V V V
V V V V qscan: kavsys create ok (v%d.%d.%d.%d) qscan: kavsys unload ok (v%d.%d.%d.%d) x
V V V V l
V V V V
ՂՂ
V V V V X
V V V V
@d
V V V V
PV V V V H
V V V V
V V V V
V V V V
V V V V
V V V V
@V V V V (
V V V V
V V V V
pV V V V
V V V V NtQueryInformationFile : $ D A T A NtQueryDirectoryFile <
`T `0pL ! {00000000-0000-0000-0000-000000000000} qscan: get_scsi_address: Can't ioctl %S 0x%X qscan: Error getting uppercasePath for <%s> with error 0x%X
?A`AAA B BPBpBBBBC0CV V V V
0'p''`T P5550`0L 9p<CldApi.dll qscan: Error query StringLibFactory2 qscan: Error create StringLib 0x%X \ . \ \ . . \ G L O B A L R O O T \ D e v i c e \ H a r d d i s k V o l u m e qscan: Error parse path <%S> 0x%X qscan: Error get items <%S> 0x%X qscan: Can't download cloud file <%s> with error 0x%0X qscan: Can't open long path with error 0x%X. Second chance with \\?\ prefix \ ? ? \ V o l u m e { NtQueryObject \ D e v i c e \ H a r d d i s k V o l u m e qscan: Try download cloud file <%s> CfHydratePlaceholder qscan: Can't find cloud api 0x%0X qscan: Hydrate failed 0x%0X 0x%0X qscan: Success download cloud file : ,
ՂՂՂ@hՂ`0 L ՂՂ \ \ . \ G L O B A L R O O T \ D E V I C E \ k l a r k _ 0 4 0 1 1 2 \ \ . \ k l a r k _ 0 4 0 1 1 2 qscan: Can't close KLARK handle with error = 0x%08X qscan: Can't determine WOW64 status 3 2 6 4 . d a t . d r v qscan: No memory for klark module names qscan: Scan was cancelled during load klark driver (error 0x%08X) qscan: Can't load klark driver with error 0x%08X qscan: Invalid klark device path qscan: Invalid klark device symlink qscan: klark fill servicename failed, with error 0x%x qscan: klark load failed qscan: Can't connect to KLARK qscan: Can't get KLARK init status with error native = %d, klava = 0x%08X qscan: KLARK driver version = %u.%u.%u.%u qscan: OS %u.%u props = 0x%I64X qscan: Driver props = 0x%I64X, status = 0x%08X qscan: KLARK was blocked by undoc! qscan: KLARK was blocked by disabler! qscan: Can't determine WOW64 status with error 0x%0X qscan: Fail check klark driver with error 0x%0X klark drvloader: k l a r k qscan: Can't send klif name <%ws> with error = 0x%08X (native %u) RtlFreeUnicodeString NtQuerySecurityObject qscan: qscan: Can't get inquire data with error native = %d, klava = 0x%08X qscan: Can't get inquire data for emu with error native = %d, klava = 0x%08X qscan: <%ws> flags = 0x%X qscan: Can't read MZ header at 0x%I64X with error native = %d, klava = 0x%08X qscan: Can't read NT header at 0x%I64X with error native = %d, klava = 0x%08X Can't read file <%ws> with error = 0x%08X qscan: Can't read file <%ws> with error = 0x%08X HKLM\SYSTEM\CurrentControlSet\Services\ ImagePath s y s t e m 3 2 \ \ S y s t e m R o o t \ Can't get image base of <%ws> with error native = %d, klava = 0x%08X qscan: Can't get image base of <%ws> with error native = %d, klava = 0x%08X drvObj->get_nth failed for <%ws> qscan: drvObj->get_nth failed for <%ws> Failed to get handler image base for <%ws> qscan: Failed to get handler image base for <%ws> IsEqualNtHeaders failed for <%ws> qscan: IsEqualNtHeaders failed for <%ws> \ / qscan: Emulation canceled Emulation of <%ws> was failed with error = 0x%08X. Second try qscan: Emulation of <%ws> was failed with error = 0x%08X. Second try Emulation of <%ws> failed due to null handler. Second try qscan: Emulation of <%ws> failed due to null handler. Second try Emulation of <%ws> as MP was failed with error = 0x%08X qscan: Emulation of <%ws> as MP was failed with error = 0x%08X get_nth failed for <%ws> qscan: get_nth failed for <%ws> Can't get image base for <%ws> qscan: Can't get image base for <%ws> Can't find image base for <%ws> qscan: Can't find image base for <%ws> Can't get handler info for <%ws> qscan: Can't get handler info for <%ws> ProcessKlarkEmuHandler(1) was failed with err = 0x%08X qscan: ProcessKlarkEmuHandler(1) was failed with err = 0x%08X ProcessKlarkEmuHandler(2) was failed with error = 0x%08X qscan: ProcessKlarkEmuHandler(2) was failed with error = 0x%08X a t a p i . s y s a t a p i s c s i p o r t . s y s ParseServiceImagePath was failed for <%ws> with err = 0x%08X qscan: ParseServiceImagePath was failed for <%ws> with err = 0x%08X GetImagePathFromServiceInfo was failed for <%ws> with err = 0x%08X qscan: GetImagePathFromServiceInfo was failed for <%ws> with err = 0x%08X . s y s Candidate <%ws> status = 0x%08X; next try qscan: Candidate <%ws> status = 0x%08X; next try Processing of <%ws> with raw was failed with error = 0x%08X qscan: Processing of <%ws> with raw was failed with error = 0x%08X Processing of <%ws> status = 0x%08X; second try qscan: Processing of <%ws> status = 0x%08X; second try Processing of <%ws> status = 0x%08X qscan: Processing of <%ws> status = 0x%08X qscan: Failed to set emu-flags qscan: Valid emudata has been sent to klark! qscan: Can't send valid emudata to klark with error native = %d, klava = 0x%08X qscan: Send invalid emudata to klark! qscan: Get inquiry data failed! qscan: Fill emu data failed! qscan: Emulation for KLARK has been finished with status 0x%08X qscan: Can't emu raw KeyObjectType for <%ws> with error 0x%08X; second try qscan: Can't emu KeyObjectType for <%ws> with error 0x%08X qscan: Can't send sys obj type init with error native = %d, klava = 0x%08X s e m _ k l a r k _ 0 4 0 1 1 2 qscan: Skip init klark OK qscan: Try init klark OK qscan: Can't get kernel name from klark with error native = %d, klava = 0x%08X qscan: No memory for full kernel ansi path qscan: Unsupported io version 0x%0X qscan: No memory for kernel buffer qscan: Error read kernel 0x%X qscan: Error read kernel (wrong data size %lu) qscan: Can't send kernel to klark with error native = %d, klava = 0x%08X qscan: Can't process KeyObjectType for <%ws> with error 0x%08X qscan: Success process KeyObjectType for <%ws> qscan: Success init klark OK qscan: Can't init klark kernel with error 0x%X qscan: Can't get klark kernel init global status with error native = %d, klava = 0x%08X qscan: KLARK is blocked KLIF_DEVICE_NAME KLIF qscan: Can't send klif name qscan: No disks \ ? ? \ A : 0w,aQ mjp5c飕d2y җ+L |~- d jHqA}mQDžӃVlkdzbeO\lcc=
n;^iLA`rqgjm
Zjz '
}Dңh i]Wbgeq6lknv+ӉZzJgo߹ﾎCՎ`~ѡ8ROggW?K6H+
L
J6`zA`Ugn1yiFafo%6hRw G "/&U;( Z+j\1е, [d&c윣ju
m ?6grW Jz+{8 Ғ
|! ӆBhn [&wowGZpj;f\ eibkaElx
TN³9a&g`MGiIwn>JjѮZf @;7SŞϲG0 º0S$6к)WTg#.zfJah]+o*7 Z-Can't allocate drv parameters object %d Can't init drv parameters object %d Invalid symlink type %d Invalid device symlink Invalid plugin name Invalid plugin bases filename Invalid service name Invalid driver bases filename Invalid service type %d Invalid service start type %d Invalid service error type %d Invalid platform context K L _ D O N T _ U S E _ D R V Drivers aren't used by this product Load plugin forcely Can't get preferred driver type Something strange happened while getting preferred driver type Driver load type is %d Exception occurred while creating driver loader data Prepare driver loader data error 0x%08X Can't allocate drv settings Can't init drv settings Create driver loader error 0x%08X Load driver or plugin error 0x%08X Invalid plugin name for delete Start deleting of boot plugin <%ws> Can't get KL1 name for creating ark path Can't create registry manager S Y S T E M C o n t r o l S e t \ S e r v i c e s \ \ P a r a m e t e r s KL1 wasn't found in Plugin <%ws> was deleted from Plugin <%ws> wasn't found in Deleting of boot plugin <%ws> was finished Invalid plugin name for disabler copy P a r a m e t e r s No manual disabler data Invalid manual disabler size %d Invalid manual disabler v1 data No bases disabler data Invalid bases disabler size %d Invalid bases disabler v1 data Value <%ws> is set for temp service Invalid file name Open file <%ws> error 0x%08X File <%ws> is signed and trusted File <%ws> check sign error 0x%08X (0x%08X) K L U p d M a r k e r I m a g e P a t h Can't create service manager Temp service <%ws> is already exists \ S e r v i c e s k l u p d _ _ Can't get current control set Can't create bases io for <%ws> File <%ws> was successfully read from bases Invalid file size mz 0x%0X Invalid file sign mz Invalid file size pe 0x%0X Invalid file sign pe Invalid file arch 0x%0X File arch mismatch %u, %u Can't check WOW64 status U P D _ S Y S _ S U P P O R T E D vector too long string too long invalid string position Ԉ$hoYɶ"ULb.!`,q v f n o y r e z n a q v f n o >WA&>;vh譄o_ ٽ%sdrvcomm: %s Can't get ntdll base Can't get RtlGetVersion from ntdll RtlGetVersion error status 0x%08X OS version %d.%d.%d GetVersionEx error = 0x%08X Can't get OS version Unsupported OS version Invalid value for <%ws> Can't create key manager Exception occurred while creating registry manager Can't create driver helper object Can't init driver helper object Exception occurred while creating driver loader Exception occurred while creating services manager Can't allocate KL1 manager object Exception occurred while creating KL1 manager Can't allocate KLIF manager object Exception occurred while creating KLIF manager Invalid context Can't create bases reader object with error 0x%08X Can't enc bases reader object Can't init enc bases reader object Exception occurred while creating enc bases file reader Exception occurred while creating tracer Invalid filename Can't klava bases reader object Can't init klava bases reader object Exception occurred while creating bases file reader Invalid access Can't klava i/o object Can't init klava i/o object Exception occurred while creating simple io Create property bag error 0x%08X Set property error 0x%08X Get env var <%ws> error 0x%08X Resolve env var: <%s> -> <%ws> Can't write env var <%ws> Exception occurred while getting environment var <%ws> L
sssY
ՂՂYY
Z@[[`\ ]Can't fill KL1 parameters KL1 loader param 0x%p created KL1 loader param 0x%p destroyed Can't get KL1 name Product drv name is <%ws> Can't make device symlink Can't make device path Exception occurred while fill kl1 loader params in 0x%p Can't fill standalone parameters Standalone loader param 0x%p created Standalone loader param 0x%p destroyed Can't get KLIF name W I N D I R Can't resolve WINDIR \ S y s t e m 3 2 \ D r i v e r s \ Exception occurred while fill standalone loader params in 0x%p Can't fill driver settings Can't get KLIF name for driver settings Can't get KL1 name for driver settings \ F i l e S y s t e m \ F i l t e r s \ Exception occurred while filling driver settings Create registry manager error 0x%08X Get current control set error 0x%08X S Y S T E M \ Open key error 0x%08X Exception occurred while getting service <%ws> key Exception occurred while getting service <%ws> param key
p{PpЄ0t0t 0Pp Pp`~8
p{Ѝ st0P
p{b {{{{{ |ssss tst t|Pv C745D0........C745D4........C745D8........C745DC........C745E0........E8........5F5E C745CC........C745D0........C745D4........C745D8........C745DC........E8........5F5E INIT \system32 h
@`p|
@ՂՂՂP
Д
p ataport.sys AtaPortInitialize scsiport.sys ScsiPortInitialize storport.sys StorPortInitialize classpnp.sys ClassInitialize hal.dll IoAllocateDriverObjectExtension ntoskrnl.exe IoGetDriverObjectExtension \system32\drivers aemu: mp type: 0x%X
0 ` `@h
@
Д
Y |
ՂՂՂ
0 ` @T
@|
Д P
Y
@h
0 @No filename Enc bases reader 0x%p created for <%ws> Enc bases reader 0x%p destroyed Exception on buffer resizing (%s) % 0 2 X Module <%ws> enc md5 is %ws Can't allocate %d bytes for enc file File already encrypted (old style) File don't encrypted (new style) T E M P Can't resolve TEMP Can't create folder <%ws> Can't open io for <%ws> Can't write file body into <%ws> %d bytes was written into <%ws> Full path for module <%ws> is <%ws> Can't delete temp file <%ws> with error 0x%08X Temp file <%ws> was deleted Can't delete temp folder <%ws> with error 0x%08X Temp folder <%ws> was deleted Cleanup temp folder... Drop file into temp folder... Can't drop file into temp folder BSMKAFY} 鍅 {V3GH L$=/fsTON|f݃͡W| <,z0<ކ1Mc˳[Ո) :z VD:ACj,d'S EF
P<Y,!.,bn- Y{:
LcOsNMg=M_ aWD@ 6IdN)M}k9/˽m>> ,
""p((() KL1 helper 0x%p created KL1 helper 0x%p destroyed K L 1 _ D E V I C E _ N A M E K L 1 KL1 name too long <%d> to setup it KL1 set name <%ws> error 0x%08X KL1 name was set to <%ws> KL1 get version error 0x%08X Plugin name too long <%d> for KL1 Sys plugin name too long <%d> for KL1 KL1 load buffer <%ws> error 0x%08X Plugin <%ws> size %d was loaded into KL1 Plugin path too long <%d> for KL1 KL1 load module <%ws, %ws> error 0x%08X Plugin <%ws> was loaded into KL1 from path <%ws> KLIF helper 0x%p created KLIF helper 0x%p destroyed K L I F _ D E V I C E _ N A M E K L I F
- .p..00+!
-p.1Service already opened Service <%ws> with <%ws> was created by 0x%p Invalid names Invalid service type Invalid service start Invalid service error Exception occurred while create service in 0x%p Service <%ws> was opened by 0x%p Invalid name Exception occurred while open service in 0x%p Service object 0x%p isn't valid Exception occurred while get service key in 0x%p Service <%ws> status is %d for 0x%p Exception occurred while query service status in 0x%p Service <%ws> was started by 0x%p Exception occurred while start service in 0x%p Exception occurred while stop service in 0x%p Exception occurred while delete service in 0x%p Can't create service object in 0x%p !
"0>P> >>5KLAVA bases reader 0x%p created for <%ws> KLAVA bases reader 0x%p destroyed No iolib Get full path error 0x%08X \ \ No DB_Manager Open db file <%s> error 0x%08X Open iolib file <%s> error 0x%08X Module <%ws> md5 is %ws Can't open <%ws> Invalid io Get file size <%ws> error 0x%08X File <%ws> size is zero Can't allocate %d bytes for file Read file <%ws> error 0x%08X Read %d/%d bytes of file <%ws> Invalid i/o KLAVA I/O 0x%p created for <%ws> KLAVA I/O 0x%p destroyed Get file size error 0x%08X (0x%p) Set file size error 0x%08X (0x%p) Read error 0x%08X (0x%p) Write error 0x%08X (0x%p) Flush error 0x%08X (0x%p) Close i/o (0x%p) "
CD DDD0EEEPAKL1 plugin helper 0x%p created KL1 plugin helper 0x%p destroyed Invalid driver type Invalid bases filename Old KL1 version Can't get full plugin path for KL1 Can't get plugin data Fail to load plugin <%ws> into KL1 Plugin <%ws> was load successfully to KL1 R e g L o a d RegLoad is not supported No RegLoad value RegLoad is supported by KL1 RegLoad is disabled now (%d) Plugin value <%ws> wasn't found Reg plugin size is %d, bases plugin size is %d Different plugin in bases Plugin <%ws> updated in registry KL1 wasn't found in inactive control set Plugin <%ws> was deleted from inactive control set Plugin <%ws> wasn't found in inactive control set Can't determine reg load support Skip plugin update due to KL1 Can't check difference for value <%ws> in key <%ws> Plugin <%ws> is different in bases and in registry Can't write plugin body into registry No difference for <%ws> Connected to <%ws> Open device <%ws> error 0x%08X Open symlink <%ws> error 0x%08X Only boot plugins can be installed Can't update boot plugin in registry Invalid driver loader data Exception occurred while installing plugin in 0x%p Can't update boot plugin for only update Skip plugin loading due to flag Can't create drv comm object Plugin <%ws> is available Can't load plugin <%ws> into KL1 Can't connect to device after plugin loading Exception occurred while loading plugin in 0x%p "
-@W@[\ GPrivilege holder 0x%p created OpenProcessToken error %d Can't setup privilege <%ws> Privilege holder 0x%p destroyed Lookup privilege value <%ws> error 0x%08X AdjustTokenPrivileges(%ws) error 0x%08X e n a b l e d Privilege <%ws> was %ws Lookup ntdll.dll error 0x%08X Lookup RtlInitUnicodeString error 0x%08X ZwLoadDriver Lookup ZwLoadDriver error 0x%08X ZwUnloadDriver Lookup ZwUnloadDriver error 0x%08X ZwQuerySystemInformation Lookup ZwQuerySystemInformation error 0x%08X Reg API service manager 0x%p created Reg API service 0x%p destroyed S y s t e m 3 2 \ T y p e S t a r t E r r o r C o n t r o l G r o u p Can't convert to wcs service name with error 0x%08X Can't convert to wcs service name - converted %d isn't equals size %d \ R e g i s t r y \ M a c h i n e \ S Y S T E M \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ S e L o a d D r i v e r P r i v i l e g e Load driver <%ws> error 0x%08X \ R e g i s t r y \ M a c h i n e \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ Unload driver error 0x%08X Service <%ws> was stopped by 0x%p Reg API service manager 0x%p destroyed x#
Py`yzPxd#
kl p0r tv wb#
p0Unknown exception bad cast bad locale name false true : iostream iostream stream error ios_base::badbit set ios_base::failbit set ios_base::eofbit set WinAPI registry key object 0x%p created WinAPI registry key object 0x%p destroyed Create registry key <0x%08X, %ws> error 0x%08X Registry key <0x%08X, %ws> is created as <0x%08X> Key object 0x%p is already opened Exception occurred while create key in 0x%p Open registry key <0x%08X, %ws> error 0x%08X Registry key <0x%08X, %ws> is opened as <0x%08X> Exception occurred while open key in 0x%p Query info for registry key <0x%08X> error 0x%08X Key object 0x%p isn't valid Exception occurred while getting key info in 0x%p Can't create subkey object Can't create registry subkey <%ws> for key <0x%08X> Exception occurred while creating subkey in 0x%p Delete registry key <0x%08X, %ws> error 0x%08X Exception occurred while delete subkey in 0x%p Can't allocate %d bytes for subkey name buffer Subkey %d name is too big %d Enum %d subkey of <0x%08X> error 0x%08X Exception occurred while enumerating keys in 0x%p Invalid prefix for enum subkeys for 0x%p Can't open registry subkey <%ws> for key <0x%08X> Exception occurred while opening subkey in 0x%p Delete registry value <%ws> for key <0x%08X, %ws> error 0x%08X Registry value <%ws> of key <0x%08X> was deleted Exception occurred while delete value in 0x%p Query registry value <%ws> for key <0x%08X> error 0x%08X Query registry value <%ws> for key <0x%08X, %ws> error 0x%08X Registry value <%ws> of key <0x%08X, %ws> was get (%d bytes) Exception occurred while get value in 0x%p Can't allocate %d bytes for values name buffer Value %d name is too big %d Enum %d value of <0x%08X> error 0x%08X Exception occurred while enumerate values in 0x%p Zero size of value <%ws> for key <0x%08X> Set registry value <%ws> for key <0x%08X> error 0x%08X Registry value <%ws> of key <0x%08X> was set (%d bytes) Exception occurred while set value in 0x%p Flush registry key <0x%08X> error 0x%08X Registry key <0x%08X> was flushed Exception occurred while flush key in 0x%p WinAPI registry key manager 0x%p created WinAPI registry key manager 0x%p destroyed Redirection from <0x%08X, %ws> to <0x%08X, %ws> was applied for 0x%p Exception occurred while apply redirection in 0x%p Can't create key object in 0x%p Exception occurred while delete key in 0x%p S Y S T E M \ S e l e c t C u r r e n t Exception occurred while get current control set in 0x%p %p Lu Ld lu ld eE pP %
'
h (
PՂՂЌ'
`0 @ l&
PpЌ&
x*
+
D)
г`@ p$
X $
M M p @@@0b +
M M p@@@ b &
'
'
Main service <%ws> is not exist Create main service <%ws> was failed Driver <%ws> is available Can't start service <%ws> Can't connect to device after driver loading Exception occurred while loading driver in 0x%p p-
p{`-12Driver helper at 0x%p created Driver helper at 0x%p destroyed Invalid driver full path Can't get bases file size Can't get driver file size Driver size is %d, bases size is %d Can't allocate %d bytes for driver body Can't read %d bytes from bases i/o Different driver in bases Can't set zero size for <%ws> Can't write new body into <%ws> Can't open io for exist <%ws> Can't check difference for driver <%ws> No difference for driver <%ws> Driver <%ws> is different in bases and on disk Can't create io for <%ws> Can't write io for <%ws> Driver <%ws> is unsigned Delete temp file <%ws> error 0x%08X Temp driver <%ws> was deleted Replace <%ws> by <%ws> error 0x%08X Temp service is required due to we can't replace driver <%ws> Replace <%ws> by <%ws> on reboot error 0x%08X Delete <%ws> on reboot error 0x%08X Driver <%ws> was updated on disk Can't create <%ws> Can't write temp driver <%ws> Delete temp folder <%ws> error 0x%08X Temp driver & dir <%ws> was deleted T e m p S e r v i c e s Can't allocate %d bytes for temp service value Temp service <%ws> stored in registry Updatable marker is set for service <%ws> Can't put updatable marker for service <%ws> with error 0x%08X Exception in temp service create callback Can't prepare temp service Exception in service create callback Service <%ws> is not available Service <%ws> was deleted with subkeys Delete service <%ws> status 0x%08X File <%ws> was deleted with parent directory Can't delete directory <%ws> status 0x%08X Can't delete file <%ws> status 0x%08X Service <%ws> is active now %d temp services was enumerated Can't get service key with error 0x%08X E r r o r Can't get value "Error" with error 0x%08X Can't set value "ErrorControl" with error 0x%08X Can't delete value "Error" with error 0x%08X Value "Error" was renamed into "ErrorControl" Can't get DG status with error 0xC00000BB DG is enabled Build <%d> is blacklisted for retpolined drivers S O F T W A R E \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n Can't open registry key <%ws> with error 0x%08X U B R Can't found value <%ws> in registry key <%ws> Can't get value <%ws> from registry key <%ws> with error 0x%08X Build <%d>, UBR <%d> Build <%d.%d> is blacklisted for retpolined drivers Service <%ws> is not exist Create service <%ws> was failed Starting temp service for <%ws> Can't start temp service for <%ws> Can't update driver Exception occurred while installing driver in 0x%p Can't update driver for only update Skip driver loading due to flag HAL.dll MmIsAddressValid \Parameters \ \ . \ G L O B A L R O O T \ D E V I C E \ ' 06 XE P
lV
`5
6 \
' H@ ' T
f F TV x5 h xF 6 T A 5 p
5
U 7 XU P
<
pU H H
XB
8 G $ 0V $ P7 G G b 3 E 4U
4 0
b
5 0
F x
E
p
F T @ x4 8A
6 9 X9 A H=
H
$ T
D
8
8 (f 8
$ 8 c G F
A 4 88 P
V 8T x p9 < @ 8 8H h
U qscan: Can't init oslib registry enum with error 0x%X qscan: Active hive not found. Return any first item qscan: Can't init init oslib registry enum forcely with error 0x%X qscan: Can't get first hive with error 0x%X qscan: Can't open first hive with error 0x%X qscan: Can't init stringlib for klbg with error 0x%08X HKLM\SYSTEM\ControlSet___\Control\ServiceGroupOrder ControlSet___ List L i s t qscan: klbg init: Can't open KLBG parameters key <%s> with error 0x%0X qscan: klbg init: Can't init KLBG setting by current registry impl with error 0x%0X qscan: klbg init: KLARK last chance init qscan: klbg init: Can't init KLARK last chance with error 0x%0X qscan: klbg init: KLARK last chance not required qscan: klbg init: Can't open Klbg devPath <%s> with error 0x%X qscan: klbg init: Can't open KL1 parameter path <%s> with error 0x%X klbg qscan: klbg init: Can't access to KLBG tasks key <%s\KLBG> with error 0x%X Group Start 1 1 0 1 1 2 qscan: klbg init: Tasks duplication qscan: klbg init: Success qscan: klbg init: set common KLARK tasks qscan: Can't read KLBG binary with error 0x%08X \ \ . \ k l b g 0 0 7 klbg32 klbg64 qscan: klbg init: KLBG plugin name is <%s> qscan: klbg init: KLBG service name is <%s> HKLM\SYSTEM\ControlSet___\Services\ qscan: klbg init: KLBG service key is <%s> qscan: klbg init: KLBG parameters key is <%s> \Parameters\klbg qscan: klbg init: KLBG tasks key is <%s> \ R E G I S T R Y \ M A C H I N E \ qscan: klbg init: KLBG kernel service key is <%ws> qscan: klbg init: KLBG kernel parameters key is <%ws> qscan: klbg init: KLBG kernel task key is <%ws> \ R E G I S T R Y \ M A C H I N E \ R E G I S T R Y \ U s e r qscan: klbg task (ver = %d): t = %d, r = %S, k = %S, v = %S, fs = %S, fd = %S, c = 0x%08X, cs = 0x%08X qscan: klbg: FlushStorage <%S> qscan: klbg: Can't save storage <%S> into registry with error 0x%08X qscan: klbg: Can't set last chance for storage <%S> with error 0x%08X qscan: klbg delayed cure: Invalid flags <%u> qscan: klbg delayed cure: Can't get full path qscan: klbg delayed cure: Begin cure for file <%s>, destination dir is <%ws> qscan: klbg delayed cure: Begin cure for file <%s> qscan: klbg delayed cure: File is already copy qscan: klbg delayed cure: File is on removable media qscan: klbg delayed cure: Can't open enumeration on given enumerator qscan: klbg delayed cure: Can't find filename in path qscan: klbg delayed cure: Can't find2 filename in path qscan: klbg delayed cure: Can't assign old path qscan: klbg delayed cure: Can't assign2 new path qscan: klbg delayed cure: Can't assign new path qscan: klbg delayed cure: Can't create temp folder <%s> with error = 0x%X qscan: klbg delayed cure: Temp folder is <%s> qscan: klbg delayed cure: Can't assign new file path qscan: klbg delayed cure: Can't assign new file name qscan: klbg delayed cure: File <%s> is already exists qscan: klbg delayed cure: Can't generate new filename with error = 0x%X qscan: klbg delayed cure: Temp filename is <%s> qscan: klbg delayed cure: Can't create temp file <%s> with error = 0x%X qscan: klbg delayed cure: Copy file to <%s> qscan: klbg delayed cure: Can't copy file data with error = 0x%0X qscan: klbg delayed cure: Can't copy imports with error = 0x%X qscan: klbg delayed cure: Transaction is commited qscan: klbg delayed cure: Can't open enum for dir <%s> with error 0x%X qscan: klbg delayed cure: Can't create random dir <%s> with error 0x%X qscan: DelayCureFile: new_size = %X \drivers qscan: klbg delayed cure: imports count %u qscan: klbg delayed cure: unexpected import <%s> qscan: klbg delayed cure: Copy import to <%s> qscan: klbg delayed cure: Can't create copy import file with error = 0x%0X qscan: klbg delayed cure: Can't get import file with error = 0x%0X qscan: klbg delayed cure: Can't copy import data with error = 0x%0X ControlSet001 qscan: klbg init: KLBG control set is <%s> qscan: !va klbg qscan: klbglog = 0x%p qscan: No memory for klbg module names \ \ . \ k l b g _ 1 1 0 1 1 2 \ \ . \ G L O B A L R O O T \ D E V I C E \ k l b g _ 1 1 0 1 1 2 qscan: Set klbg binary value result = 0x%08X qscan: Invalid klbg device path qscan: Invalid klbg device symlink qscan: Invalid klbg service name qscan: No memory klbg service name qscan: klbg is plugin qscan: klbg is standalone driver qscan: Connected to <%S> qscan: Failed to connect to the <%S> qscan: !init klbg qscan: !gdl klbg qscan: klbgapi: drvlog: %s qscan: DG enabled qscan: klbg init: KLBG isn't supported by os (error 0x%0X) qscan: klbg init: Obsolete klbg007 is present (error 0x%0X) qscan: klbg init: Unsupported KLBG type <%u> qscan: klbg init: Can't get KLBG control set with error 0x%0X qscan: klbg init: Can't fill KLBG params with error 0x%0X qscan: klbg init: Can't get KLBG plugin name with error 0x%0X qscan: klbg init: KLBG setting has been initialized by raw registry qscan: klbg init: Can't init KLBG settings by raw registry with error 0x%0X qscan: klbg init: Can't query library lite qscan: klbg init: Error get lite registry 0x%X qscan: klbg init: Try to use lite registry qscan: klbg init: Can't init KLBG settings by lite registry with error 0x%0X qscan: klbg init: KLBG setting has been initialized by lite registry qscan: klbg remove tasks: Remove klbg file tasks for <%S> qscan: klbg remove tasks: Unexpected store key with error 0x%08X qscan: klbg remove tasks: Unexpected store buff with error 0x%08X qscan: klbg remove tasks: Can't init klbg params with error 0x%0X qscan: klbg remove tasks: Empty klbg tasks key with error 0x%0X qscan: klbg remove tasks: Can't open klbg tasks with error 0x%0X qscan: klbg remove tasks: Can't get klbg tasks value with error 0x%0X qscan: klbg remove tasks: Found task value <%s> qscan: klbg remove tasks: Can't get klbg tasks <%s> value type with error 0x%0X qscan: klbg remove tasks: Can't get klbg tasks <%s> value data with error 0x%0X qscan: klbg remove tasks: Can't decrypt klbg task <%s> with error 0x%0X qscan: klbg remove tasks: Found task value for patching <%s> qscan: klbg remove tasks: Can't encrypt klbg task <%s> with error 0x%0X qscan: klbg remove tasks: Can't patch klbg task <%s> with error 0x%0X qscan: klbg remove tasks: Task <%s> successfully patched qscan: Fail check kblg driver with error 0x%0X .
-
pՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂՂL.
Ղ.
x.
Pж@@0 @p `PP V 0` k l b g klbg drvloader: ': 1 j?$.Dsp"8 1).lN!(Ew8fTl 4)P|ɵՄ? Gy 1Ѭߘr/Ḗ~&jE|,G$l iciNWqX~=t
XrX͋qJ T{YZ90`*#`(yA8۸y:`l> w'K1/x`\`U%U攫UbHW@cj9U*4\̴ATr|*oc]ũ+1t>\ 3֯\$lS2zw(H;Kkē!(f a!`|H2]]]u#&܈e>#Ŭom9BD . Ji^ Bh!la gӫҠQjh/T(3Ql n;zP;*~ ev9>YfCoEå}^;uos D@jVbNw?6r=B$7H
ۛIrS{y%P;LylO`@\^c$johSl>9oR; Qm,0DE ^J3(fK.WtE9_ ӹyU
2` yr,@%g̣ 饎"2u<ka P/R=2`#H{1S >W\o.ViB~(2gsUO'[iXʻ]=!lJ[-ySeEIҐK3~ˤAb Lw6~д +MەqՓkю%ǯ/[{AI~ -% ^q h"W6d$ cUYCxSZ٢[} Źv&ϕbhAJsN-GJ{R Q)S?Wƛv`+ t恵o Wk
*!ec.4dV]-SGjnpzKD). u#&İn}ߧI`fqilRdVឱ¥6)L u@Y>:䚘T?eB[k?ҡ08-M]% L&pc^ ?kh >\D}W7:
P tA u8/;21>8TNmO
Bo
,y|$ryV w.? rU$qk.P̈́GXzt}K:z fC cdG 27;C$CMQe* P:qUN1w_V5kǣ;< $Y,n< pEㆱo
^*>Z w=Ne) ։>%fRxL.jxS<-
N=+ 6&9`y#Rnf E{7(2åZl!Xeh;/ۭ}*/n[(!pa)uGa0a 4c\s9pL ު˼,b`\n di#PZe2Zh@*<1! T_~}=b7w-_h)5 ǡޖXxWcr"ÃF
T0.SHُ(1mX4a(s<|J]d]B> EꫪOlOBBǵj ;Oe!Ay MjGKPb=bF&[$ti GV [ Htb #*BXU > ap?#r3A~_;"lY7|`t˧@n2w΄PU5ai Z .zD4Egɞ s͈Uy_g@Cge48>q(= m!>J=+hZ=@ &L4)i Av.kh q$j 3ԷCa P.9 FE$tO!@ MpE/f m1'A9UG%ښ
ʫ%xP()Sچ,
mbh iHפh'?Oz| Ϊ_7әxB*k@5 ٫9N; VmK1f&tn:2C[Ah xN
جV@E'H::SU kKмgUXc)3VJ*%1? ~^|1)p/'\,(H"m?H܆ AyG@n]Q_2Տd5A4x{%`*`lc ´2Of#k>3b $;"
r(-Exb}doITH}' >AcG
t.no:7`L
knU{7,gm;e'
) ̒9 i{f} ϑ^و/$[Qy{;v.97yY̗&-1.Bh;+jLu .x7BjQ满PcKkؽ%=YBD
n *Ngd_ڈ鿾dW{x`M``FѰ 8Ew63kBq A_^ ;Z4ٷ,Q+:Ֆ}}>(-}|% rZLZq)GW;()f(.y_xU`uD^mm%adâW<'*:m?!c f&(3uU4V<wQ(
gQ̫_QM08bX7 z{>d!Q2Ow~㶨F=)iSHd$m-if!
FEdlX [@X̻k~jEY:D
5>ʹrdfGof ,ҏ"W##v215VbuZ6ns҈bIPLVq
z2E{S b%ҽ5iq"|˶+v>S@`8G% 8vFšw``u N˅؍芰z~L\HjiԐ\-% ?2aN[wߏWr:FSSync.dll DRV_QueryActiveImages DRV_RegCreateKey DRV_RegEnumValue DRV_RegEnumKey DRV_RegQueryValue DRV_RegSetValue DRV_RegDeleteValue DRV_RegDeleteKey DRV_RegDeleteLinkKey DRV_SpecFileRequestLL DRV_REGDU DRV_UNREG FSSync_GEP _B +\ P |5
|
+\ 5
+\
$ 5
+\ \
/
4s f f @ f 4&
f @ g D T d 4&
g @ D k g L S K T x ! p H 6 n i . ^
0 d l >
F ` >
^
p " ` F > 0 ^ B h 8 v A 2 } J ~ 0 d 8 + X d 4 l ! f! ! ! J" v" " " # N# # <$ $ $ % >% % % '& p& & & F' p' ' ( ( ( ) \) ) ) ) (* P* * * * 8+ f+ + , 8, x, , - H- - - . 0. . . . / / / 0 0 1 N1 1 1 1 2 N2 ~2 2 2 Y3 3 3 3 ,4 a4 4 55 5 5 5 16 n6 '7 p7 7 7 8 18 8 8 9 9 9 9 6: l: : ; >; `; ; ; 2< ^< < < = V= = = D> > > ? H? ? ? F@ p@ @ @ A 8A `A A A A B HB pB B B C C C C (D VD D D D E >E `E E E E F @F `F F F F G G @G G G H fH H I kI I J HJ xJ J J LK K K L 4L PL pL L L M OM pM M @N N O VO O O dP P P FQ Q Q Q VR R R S 0T nT U PU U U V DV hV V V W RW W W 4X |X X X
`" p>
" >
" >
" ,?
0" X?
PX ^" ?
" ?
" ?
" @@
08" t@
`" @
" @
" 8A
@ K V a " A
" A
" B
0 8 @F" `B
p x " B
" B
" "D"" hf
p"" f
" " "" f
# # ##" g
@#H# "! Pg
p# x# # # #
#
# #
# #
# #
# #
# # # #" |h
$ $ $ ($ 0$ 6$" h
`$ k$ v$|$" i
$$$$$" `i
$ $ %" i
0% 8% " i
`% k% v% % %%" j
%" j
% % & & &" k
P&d& j&X& ^&" `k
&& && &" k
&& && &" k
'"'(':'@'" Dl
Tl
hl
@ 1" l
' ' ' ' ' ' ' ' ''" Lm
dm
( xm
@ <5" m
@( H( P( X( `( h(
p( x( ~((" Ln
( ( ( ( ( ( (" n
)" n
@) H) P)V)" o
8o
) Lo
@ ? " o
) )" o
))" (p
@p
* Tp
@ C" p
p
p
p
@ kT@ S" q
p* x* **" hq
* * **" q
*" q
q
+ 2+ r
z b" @r
`+ " |r
r
+ + + + + r
z e" r
$s
+ 8s
z f" ls
s
, 2, s
z g" s
s
`, r, t
z +h" Pt
x> >"
>
z
X "
> > > > > ?
? ?"
@?
z \"
p? {? ? ? ?" 0
? ? ? ? ? ?"
@ (@ 0@ 8@ @@" Ћ
@ h" (
@ @ @ @" l
|
@ dk" Č
Ԍ
@ am"
A (A 0A" X
h
|
@ p"
A A"
@ r" <
A A" p
@ t" Ȏ
@B"
@ v" L
B B B"
B
@ z"
C C
@ |" P
@C HC SC ^C iC tC C"
C" ؐ
C C"
D" 8
PD" d
D D D D"
̑
z e"
$
z 5" X
h
|
z "
E2E8E"
z " D
E E" x
z " Г
E E"
(
z " \
l
z "
Ĕ
ؔ
z "
0
z " d
t
z ۪"
F F"
z %" H
X
l
z "
Ė
z "
`G kG vG |G" <
\
G G p
z "
G G G H H z " 4
d
@H HH ZH `H x
z ظ"
Ԙ
H H H
z "
D
H H H X
z v"
0I8I >IFI LI WI _IeI z " $
I I I " x
d
II J J J J@ "
@J"
pJ" D
JJJ J J"
J " ԛ
K(K.K 6K >K DK" (
KKK K K K" |
@ " Ԝ
@ " ,
L(L .L" h
x
@ "
@ 4@ " L
LL"
L"
L L ML"
@M"
,
@
@ " t
M M M M M M M " ؟
NN N"N(N.N4N:N"
@
`NkNqNwN}N N N N N"
N N N O O
O"
@O HOPO" `
L
O O OO OO O OO z "
O O " 8
$
P(P .P 6P >P FP LP RP XP^P z " ̢
P PP "
P P P P P P P P" t
0Q 8Q@Q"
pQ {Q"
Q Q Q" @
X
Q l
z *. "
R (R 0R 8R >R DR JR PR" <
T
R h
z 2"
RR "+ إ
R R R S S S SS S S S
S S S
S S S S S S S S S %S +S 1S 7S S S S S yS S mS! sS IS# OS aS% gS US' [S =S) CS" T
T (T"
`ThT"
T T T T T T T T T U U" <
@U HU" p
pU {U"
UU UU U"
U U U" ,
0V8V >V" h
`V"
V V V" Щ
V"
W W" 0
0W 8W @W FWLW"
pW xW W W W W W W W W"
W W" 0
X X X (X.X" |
PX XX `X hX pXvX" Ы
X X"
X X X XX" h
Y Y0Y Y(Y6Y"
`Y hY "
Y Y Y Y Y Y Y Y Y YY"
ZZ " Э
0Z 8Z CZ NZ VZ Z Z ^Z iZ oZ uZ
}Z
Z Z Z Z Z ZZ"
Z Z [[ [" خ
" 0
h
P[X[^[ d[l[ |
"
[ [ [ [ [ [ [ [ [ [ [["
@
\ \ \ &\ .\ 9\ ?\ E\ K\Q\"
\\"
\ \ \ \\" 8
] ] ] !] ,] 7] B] M] X] ^] d] o] u] {] ] ]] ]"
]] " (
^ ^ ^ !^ ,^ 7^ B^ M^ [^ i^ w^
^ ^ ^
^ ^ ^ ^ ^ _ _ #_ ^ ^ ^ ^ ^ _ _ _" @
P_V_\_b_h_n_t_z_____ _____"
__"
` ` `&`" d
P` X` `` f` n`"
`" ܴ
` `" (
` ` a a" l
0a 8a @aHa pa va |a" ̵
RR V ,W X X@ cY
"
0
Ľ
f ] 0 $
4
Ľ
g '^
P
`
t
v
b
L
0
$
t
^
P
8
,
b
0
D
V
h
|
6
X
n
z
h
N
4
&
p
V
N
0
d
L
2
$
v
Z
L
8
$
v
d
(
H
R
F
b
~
4
F
V
f
r
0
@
N
d
z
$
4
$
6
T
B
X
l
|
6
F
- CharLowerBuffW ; CharUpperBuffW : CharUpperBuffA , CharLowerBuffA USER32.dll 5 CharToOemA FilterSendMessage FLTLIB.DLL ReadFile %WriteFile DeviceIoControl fSetFilePointer GetLastError CreateFileA GetCurrentThread R CloseHandle EGetProcAddress GetModuleHandleW GetCurrentProcess GetModuleHandleA OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW [Module32FirstW GetWindowsDirectoryW ]Module32NextW GetExitCodeProcess GetFileAttributesW aSetFileAttributesW DeleteFileW `MoveFileExW TryEnterCriticalSection 9LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection SetThreadPriority InitializeCriticalSectionAndSpinCount GetFirmwareEnvironmentVariableA GetVolumeNameForVolumeMountPointA pGetSystemDirectoryW {GetSystemWindowsDirectoryA Sleep FLocalFileTimeToFileTime <LoadLibraryA QueryPerformanceFrequency GetThreadPriority lSetFirmwareEnvironmentVariableA RaiseException sGetSystemInfo DecodePointer HLocalFree GetCurrentProcessId bFreeLibrary yGetSystemTimeAsFileTime QueryPerformanceCounter RGetProcessTimes WFlushFileBuffers gMultiByteToWideChar QueryDosDeviceW CreateFileW QueryDosDeviceA CreateMutexW WaitForSingleObject ReleaseMutex hSetFileShortNameA GetDriveTypeA <FindFirstVolumeA GFindNextVolumeA PFindVolumeClose CreateDirectoryW ?FindFirstVolumeW GetLongPathNameW aGetShortPathNameW RemoveDirectoryW XSetErrorMode GetVolumeNameForVolumeMountPointW GetFileInformationByHandle GetFileAttributesExW JFindNextVolumeW GetDriveTypeW InterlockedExchange InterlockedExchangeAdd ReleaseSemaphore CreateSemaphoreW GetVersionExW `GetShortPathNameA GetVersionExA WideCharToMultiByte EnterCriticalSection NlstrlenW KERNEL32.dll OpenThreadToken SetThreadToken RevertToSelf nRegQueryValueExW aRegOpenKeyExW 0RegCloseKey RRegEnumValueW HRegDeleteValueW OpenProcessToken ~RegSetValueExW ORegEnumKeyExW 9RegCreateKeyExW DRegDeleteKeyW hRegQueryInfoKeyW AdjustTokenPrivileges LookupPrivilegeValueW SRegFlushKey ZGetTokenInformation `RegOpenKeyExA NGetSecurityInfo eGetUserNameW DuplicateToken SetSecurityInfo FreeSid SetEntriesInAclW AllocateAndInitializeSid = BuildExplicitAccessWithNameW EqualSid HGetSecurityDescriptorDacl CryptReleaseContext CryptGetHashParam CryptDestroyHash CryptHashData CryptCreateHash CryptDecrypt CryptAcquireContextW CryptGetUserKey CryptDestroyKey PRegEnumKeyW ADVAPI32.dll SHGetDesktopFolder SHELL32.dll > CoInitialize l CoUninitialize CoCreateInstance h CoTaskMemFree CLSIDFromString ole32.dll @StrRetToStrW SHLWAPI.dll @ CertFreeCertificateContext CertCloseStore 5 CertFindCertificateInStore W CertOpenStore F CertGetCertificateContextProperty CRYPT32.dll s WinVerifyTrust WINTRUST.dll UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent cGetStartupInfoW GetCurrentThreadId InitializeSListHead OutputDebugStringW iGetStringTypeW EncodePointer sSetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree d CompareStringW -LCMapStringW GetLocaleInfoW rGetCPInfo RtlUnwind InterlockedFlushSList >LoadLibraryExW VirtualAlloc VirtualProtect VirtualQuery ExitProcess GetModuleHandleExW GetModuleFileNameA HeapAlloc HeapReAlloc HeapFree hGetACP IsValidLocale GetUserDefaultLCID EnumSystemLocalesW dGetStdHandle GetFileType .FindClose 3FindFirstFileExA CFindNextFileA
IsValidCodePage 7GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW aFreeEnvironmentStringsW WSetEnvironmentVariableW JGetProcessHeap HeapSize SetStdHandle GetConsoleCP GetConsoleMode gSetFilePointerEx $WriteConsoleW DN@
Copyright (c) by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED. . .
h h h h h h h h h
l l l l l l l
z |
@
C `y! @~ ڣ @ ڣ A Ϣ [ @~ Q Q^ _j2 1~ abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ
PST PDT
u X~B4ϳN2AoLF>-z75?h OϢ Ԗ X $ B K l 1 $ * + p q $ ' Y * Z u "
v "
w "
x "
$ $ $ $ # # # # # # # # $ #
$ $ $ $ $ $ $ ' V * W $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ Q $ Q $ Q $
$ D D D ' \ * ]
$ "
"
$ $ $ $ $ $ ' P * Q $ $ $ $ # # # #
( $ $ $ $ $ $ $ ) v $ #
#
#
#
#
#
#
#
# _ # # # $
( $ i < < i = < i > < i ? < i @ < i A < i B < i C < < < = < > < ? < @ < A < B < C < y < y = y > y ? y @ y A y B y C z < z = z > z ? z @ z A z B z C < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C < ; < =
$ P
$ P
$ $ P $ P $ P $ $ ) $ ) ) $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 2I J
2J I
I J
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ X I b
$ W J
N J
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ I J
$ $ $ $ $ $ I J
>I J
O I J
$ I J
I J
c I J
I J
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ |I J
$ $ $ $ $ $ $ $ $ $ $ I J
I J
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ "
< I J
$ $ $ $ $ $ $ $ $ $ $ $ $ I J
$ $ $ $ $ L P $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ F I J
$ $ $ $ $ $ $ $ $ I
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ < = > ? @ A B C < = > ? @ A B C < = > ? @ A B C < = > ? @ A B C < = > ? @ A B C < = > ? @ A B C $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ ' _ * ` $ ( #
$ $ , = , > r < = > ? @ A B C < = > ? @ A B C < = > ? @ A B C < = > ? @ A B C $ $ $ $ $ $ $ | < < | < = | < > | < ? | < @ | < A | < B | < C } < < } < = } < > } < ? } < @ } < A } < B } < C $ $ $ $ $ $ $ $ s < < s < = s < > s < ? s < @ s < A s < B s < C t < < t < = t < > t < ? t < @ t < A t < B t < C u < < u < = u < > u < ? u < @ u < A u < B u < C v < < v < = v < > v < ? v < @ v < A v < B v < C $ $ n $ $ $ $ w < < w < = w < > w < ? w < @ w < A w < B w < C { < < { < = { < > { < ? { < @ { < A { < B { < C $ $ $ $ $ $ $ $ , : , ; $ G #
G #
G #
G #
G #
G #
G #
G #
"
" 6 m6 D
D " D
D " D D 7 $
"
" 8 m8
"
" 9 m9
"
"
$ ]
"
" $ ^
"
" $ 7
7 " 7
7 " 7 7 $ . / 0 1 2 3 4 5 _ . _ / _ 0 _ 1 _ 2 _ 3 _ 4 _ 5 & ' ( ) * + , - m& m' m( m) m* m+ m, m- , - , . + / $ $ $ $ " " , 0 H , 1 D D D D D D D D D D D D D D D D ' 2 ' 3 ' 4 ' 5
"
"
"
" E " E ' 6 & " ' " ( " ) " * " + " , " - " , 7 , 8 + 9 + < F F F F 0 , ? : , @ , A , B , E & " ' " ( " ) " * " + " , " - " ' F ' G ' H ' I f , J ' K ' L ' M ' N . O . R . U . X . [ . ^ . a . d D D
D - g . G G. D D D . G G . & ' h ' i $ ! ' j ' k
D
#
7
' b * c $ o < < o < = o < > o < ? o < @ o < A o < B o < C p < < p < = p < > p < ? p < @ p < A p < B p < C q < < q < = q < > q < ? q < @ q < A q < B q < C r < < r < = r < > r < ? r < @ r < A r < B r < C $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $
( ' ' " " $ % $ $ ' $ 9I J
9J I
$I J
$ I
I J
I J
!I J
! I
' B
B
B
B
B
B
B
MN MO N M O M $ $ $ $ I J
J I
I I K
+ I
V L J
L L J
I J
B I J
$ $ $ $ $ $ $ $ $ $ ' " ( " ) " * " + " , " - " . " / " 0 " 1 " 2 " 3 " 4 " 5 " 6 " ' P I J
I J
I J
I J
I J
FI J
"I J
I J
=I J
M I J
E I J
I J
I J
b I J
I J
L K
L K
L K
LL K
^L K
_L K
`L K
NL K
L K
L K
L K
ML K
$ $ L B
-L K
}L K
' ' ' [L K
\L K
]L K
e $ $ $ $ $ $ L
-K L
D D D D D D D D D D D D D D D D
: m: C " " " $ $ ; m; " " " ' " ?
? " " " " " : b : b $ $ ' & " " " 7 b 7 b " 9 I J
) "
bL " a Q " I J
' ' & " ' " ( " ) " * " + " , " - " $ L K
L K
L K
QL K
kL K
$ h Q L K
L K
gL K
VL K
TL K
UL K
eL K
WL K
YL K
L K
L K
ZL K
iL K
jL K
$ , L L K
L K
fL K
sL K
RL K
SL K
dL K
L K
$ L K
L K
L K
lL K
cL K
yL K
L K
L K
L K
L K
L K
OL K
PL K
$ $ # # C # A # ; # # ` # # #
#
#
#
"
"
"
p q $ t "
t "
t "
t "
t "
t "
t "
t "
$ $ $ $ Q $ Q $ Q $
(
$ $ @ $ $ $ $ $ $ i
x
~
# D # # #
# # # 7 # $ $ "
"
$ . . " . $ n o $ #
_ #
$ $ $ $ $ $ i @
@
x @
~ @
@
@
@
@
' S * T $ $ P P $ $ P ~P i < < i < = i < > i < ? i < @ i < A i < B i < C < < < = < > < ? < @ < A < B < C x < < x < = x < > x < ? x < @ x < A x < B x < C ~ < < ~ < = ~ < > ~ < ? ~ < @ ~ < A ~ < B ~ < C < < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C " "
( % ) r $ $ $ $ $ $ $ < < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C $ $ $ $ $ $ $ < = > ? @ A B C m $ $ $ $ $ $ $ )
) ) ) ) ) ) ) $ @
G # G # G # G # G # G # G # G # $ # # # # # # # # #
#
C #
A #
; #
#
` #
#
$
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ h $ $ $ $ $ $ $ $ $ $ $ $ $ $ g $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ . . .
. . $ . . Z [ \ $ # $ $ $ $ $ $ $
$
k P
@
l P
@
' D $ ' e * f
D
7
b # D # # #
# # # 7 # $ @
$ @
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 6I J
6J I
4I J
$ $ $ 5I J
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ P I B
$ Y J
Q J
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ I J
I J
I J
$ $ $ $
I J
?I J
R I J
U I J
I J
I J
d I J
I J
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ I J
{I J
$ $ $ $ $ $ $ $ $ $ $ $ $ -I J
J I
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ "
"
> I J
$ $ $ $ ' u $ $ $ $ $ $ $ $ $ $ $ $ $ $ /I Q $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ D I J
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ P $ P $ P $ ) $ $ $ $ $ $ $ @
$ $ ( ! ) ( @
$ $ $ $ $ ) ) $ $ Q $ $ $ Q $ I J K # $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 8I J
8J I
#I
# I
I J
I J
I
I
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ I J
J I
J I K
* I
S L J
G L J
I J
A I J
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ & P I J
$ $ I J
I J
EI J
!I J
I J
<I J
H I J
K I J
I J
I J
a I J
I J
I J
I J
I J
LI J
^I J
_I J
`I J
NI J
I J
I J
I J
MI J
I J
I J
I b
.I J
zI J
' n ' o ' p [I J
\I J
]I J
$ $ $ $ $ I J
I J
I #
J I
$ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ "
" 8 I J
$ bI "
a P I J
' q $ $ $ $ $ $ $ $ I J
I J
I J
I J
QI J
kI J
-J I
h P I J
I J
gI J
VI J
I J
I J
eI J
WI J
YI J
I J
I J
ZI J
iI J
jI J
T I J ( I
I J
I J
fI J
sI J
RI J
SI J
dI J
I J
$ I J
I J
I J
lI J
cI J
yI J
I J
I J
I J
I J
I J
OI J
PI J
$ $ 1 2 3 m $ $ $ $ $ $ $ j < < j = < j > < j ? < j @ < j A < j B < j C < < < = < > < ? < @ < A < B < C < < = > ? @ A B C $ $ $ $ $ $ $ < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C < < < = < > < ? < @ < A < B < C < $ @
@
@
@
$
e c (e Xe d pd e pe e c d e d Hd 0d d @e d c x .?AVtype_info@@ x .?AVbad_alloc@std@@ x .?AVbad_array_new_length@std@@ x .?AVlogic_error@std@@ x .?AVlength_error@std@@ x .?AVout_of_range@std@@ x .?AV_Locimp@locale@std@@ x .?AVbad_exception@std@@ x .?AVPhys_Disk_Enum_WinAPI@@ x .?AUFS_Base@@ x .?AU?$KLAV_Iface_Impl@UKLAV_IO_Object@@@@ x .?AUKLAV_IO_Object@@ x .?AUKLAV_Obj_Enum@@ x .?AUDisk_WinAPI_IO@@ x .?AVKLAV_MemModScan@@ x .?AVMemModScan@@ x .?AVPendingOperations@@ x .?AVIPendingOperations@@ x .?AUReg_Enum_Common@@ x .?AUReg_Enum_WinAPI@@ x .?AUReg_Enum_Common_Key@@ x .?AUReg_Enum_WinAPI_Key@@ x .?AUReg_Enum_Klark@@ x .?AUReg_Enum_Klark_Key_Lite@@ x .?AUReg_Enum_Klark_Key@@ x .?AUReg_Enum_Klark_Lite@@ x .?AVWin_API_Library_Impl@@ x .?AUKLAV_Win_API@@ x .?AUKLAV_Win_API_Library@@ x .?AVWin_API_Impl@@ x .?AVIKLAV_Win_API@@ x .?AUKLAV_Win_API_Shortcut@@ x .?AVWin_API_Authorization_Impl@@ x .?AUKLAV_Win_API_Authorization@@ x .?AUKLAV_STRING_LIB2@@ x .?AVSTRING_LIB@@ x .?AVKLIF_API_Impl@@ x .?AUKLAV_KLIF_API@@ x .?AVKLARK_ATA_Disk_IO@@ x .?AVI_KLARK_ATA_API@@ x .?AUKLARK_ATA_LogicalDiskExtents@?1??get_extents@KLARK_ATA_Logical_Disk_IO@@UAAIPAPAUKLAV_LogicalDiskExtents@@@Z@ x .?AVKLARK_ATA_Logical_Disk_IO@@ x .?AVKLARK_API_Impl@@ x .?AUKlarkPhysicalDrivesListImpl@@ x .?AUKlarkPhysicalDrivesList@@ x .?AUKLAV_LogicalDiskExtents@@ x .?AUKLAV_Volume_Info@@ x .?AVKLARK_ATA_Physical_Disk_IO@@ x .?AVI_KLARK_API@@ x .?AVKLARK_ATA_API_Impl@@ x .?AUReg_Enum_Klif_Key@@ x .?AUReg_Enum_Klif@@ x .?AVWin_API_Crypt_Impl@@ x .?AUKLAV_Win_Crypt_API@@ x .?AVWin_API_Sync_Impl@@ x .?AUKLAV_Mutex@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Mutex@@@@ x .?AUKLAV_Win_Sync_Lib@@ x .?AUKLAV_Win_Named_Mutex@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Reg_Enum_KLIF_Factory@@@@ x .?AUKLAV_Reg_Enum_WIN32_Factory@@ x .?AUDisk_Enum_WIN32_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Object_Factory@@@@ x .?AUKLAV_KLIF_API_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_WIN32_API_Library_Factory@@@@ x .?AUReg_Enum_KLIF_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_String_Lib_Factory2@@@@ x .?AUWIN32_API_Library_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Win_Sync_Factory@@@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Dir_Enum_WIN32_Factory@@@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Win_Crypt_API_Factory@@@@ x .?AUKLAV_CommonFunc_Factory@@ x .?AUString_Lib_Factory2@@ x .?AUKLAV_KLARK_API_Factory@@ x .?AUKLARK_API_Factory@@ x .?AUKLAV_MemModScan_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Disk_Enum_WIN32_Factory@@@@ x .?AUCommonFunc_Factory@@ x .?AUKLAV_PendingOperations_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_WIN32_API_Factory@@@@ x .?AUKLAV_Disk_Enum_WIN32_Factory@@ x .?AUKLAV_WIN32_API_Library_Factory@@ x .?AUKLAV_String_Lib_Factory2@@ x .?AU?$KLAV_Iface_Impl@UKLAV_PendingOperations_Factory@@@@ x .?AUKLBG_API_Factory@@ x .?AUReg_Enum_WIN32_Factory@@ x .?AUReg_Enum_KLARK_Factory@@ x .?AVIKlavCommonFunc@@ x .?AUKLIF_API_Factory@@ x .?AUWin_Sync_Factory@@ x .?AUKLAV_Win_Sync_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_KLIF_API_Factory@@@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Reg_Enum_KLARK_Factory@@@@ x .?AU?$KLAV_Iface_Impl@UKLAV_MemModScan_Factory@@@@ x .?AUWIN32_API_Factory@@ x .?AUMemModScan_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Phys_Disk_Enum_WIN32_Factory@@@@ x .?AUKLAV_Object_Factory@@ x .?AUKLAV_Win_Crypt_API_Factory@@ x .?AUKLAV_Reg_Enum_KLARK_Lite_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_KLARK_ATA_API_Factory@@@@ x .?AUKLAV_WIN32_API_Factory@@ x .?AUKLAV_KLARK_ATA_API_Factory@@ x .?AUKLARK_ATA_API_Factory@@ x .?AUDir_Enum_WIN32_Factory@@ x .?AUKLAV_Reg_Enum_KLARK_Factory@@ x .?AUPhys_Disk_Enum_WIN32_Factory@@ x .?AUKLAV_KLBG_API_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Reg_Enum_WIN32_Factory@@@@ x .?AUWin_Crypt_API_Factory@@ x .?AUKLAV_Dir_Enum_WIN32_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_KLARK_API_Factory@@@@ x .?AU?$KLAV_Iface_Impl@UKLAV_CommonFunc_Factory@@@@ x .?AUReg_Enum_KLARK_Lite_Factory@@ x .?AUKLAV_Phys_Disk_Enum_WIN32_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_Reg_Enum_KLARK_Lite_Factory@@@@ x .?AUKLAV_Reg_Enum_KLIF_Factory@@ x .?AUPendingOperations_Factory@@ x .?AU?$KLAV_Iface_Impl@UKLAV_KLBG_API_Factory@@@@ x .?AVKlavCommonFunc_Impl@@ x .?AVDir_Enum_WinAPI@@ x .?AVDisk_Enum_WinAPI@@ x .?AUDir_WinAPI_IO@@ x .?AVexception@std@@ x .?AV?$_Ref_count@VTracerKlavaImpl@antirootkit_helpers@@@std@@ x .?AV_Ref_count_base@std@@ x .?AVTracerKlavaImpl@antirootkit_helpers@@ x .?AUISimpleTracer@antirootkit_helpers@@ x .?AUIDriverSettings@antirootkit_helpers@@ x .?AVDrvSettings@antirootkit_helpers@@ x .?AUIDrvParam@antirootkit_helpers@@ x .?AVKl1Param@antirootkit_helpers@@ x .?AVStandaloneParam@antirootkit_helpers@@ x .?AUIHandlerInfo@ArkEmuLib@@ x .?AVBaseSigProcessorType32@ArkEmuLib@@ x .?AUIObjectTypeInitializer@ArkEmuLib@@ x .?AUtSig32EmuObjectTypeHandler@ArkEmuLib@@ x .?AVIObjectTypeSignatureProcessor@ArkEmuLib@@ x .?AVSig32EmuObjectType@ArkEmuLib@@ x .?AVSig64EmuDriverObject@ArkEmuLib@@ x .?AUtSig64EmuHandler@ArkEmuLib@@ x .?AVBaseSigProcessor64@ArkEmuLib@@ x .?AVSkipJmpSigProcessor64@ArkEmuLib@@ x .?AUIDriverObject@ArkEmuLib@@ x .?AVNVRaidSigProcessor64@ArkEmuLib@@ x .?AVISignatureProcessor@ArkEmuLib@@ x .?AUtSig32EmuHandler@ArkEmuLib@@ x .?AVBaseSigProcessor32@ArkEmuLib@@ x .?AVSig32EmuDriverObject@ArkEmuLib@@ x .?AVSkipJmpSigProcessor32@ArkEmuLib@@ x .?AVNVRaidSigProcessor32@ArkEmuLib@@ x .?AUISimpleFileReader@antirootkit_helpers@@ x .?AVBasesEncIoImpl@antirootkit_helpers@@ x .?AUIKl1Manager@antirootkit_helpers@@ x .?AVKl1Manager@antirootkit_helpers@@ x .?AUIKlifManager@antirootkit_helpers@@ x .?AVKlifManager@antirootkit_helpers@@ x .?AUIService@antirootkit_helpers@@ x .?AUIServiceManager@antirootkit_helpers@@ x .?AVBasesIoKlavaImpl@antirootkit_helpers@@ x .?AUISimpleIO@antirootkit_helpers@@ x .?AVIoKlavaImpl@antirootkit_helpers@@ x .?AUIDriverLoader@antirootkit_helpers@@ x .?AVKl1PluginHelper@antirootkit_helpers@@ x .?AVServiceRegApiManager@antirootkit_helpers@@ x .?AVServiceRegApi@antirootkit_helpers@@ x .?AVCommDrvHelper@antirootkit_helpers@@ x .?AUIDriverCommunicator@antirootkit_helpers@@ x .?AVfailure@ios_base@std@@ x .?AVruntime_error@std@@ x .?AV?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ x .?AV?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ x .?AVios_base@std@@ x .?AVerror_category@std@@ x .?AVsystem_error@std@@ x .?AV_Facet_base@std@@ x .?AUIRegistryKey@antirootkit_helpers@@ x .?AVRegWinApiKey@antirootkit_helpers@@ x .?AV_Generic_error_category@std@@ x .?AU_Crt_new_delete@std@@ x .?AV?$_Iosb@H@std@@ x .?AV?$basic_iostream@_WU?$char_traits@_W@std@@@std@@ x .?AVRegWinApiManager@antirootkit_helpers@@ x .?AV_Iostream_error_category@std@@ x .?AVbad_cast@std@@ x .?AV?$numpunct@_W@std@@ x .?AUctype_base@std@@ x .?AV?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ x .?AV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@ x .?AVfacet@locale@std@@ x .?AV?$basic_ios@_WU?$char_traits@_W@std@@@std@@ x .?AUIRegistryManager@antirootkit_helpers@@ x .?AV?$basic_istream@_WU?$char_traits@_W@std@@@std@@ x .?AV_System_error@std@@ x .?AV?$ctype@_W@std@@ x .?AV?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@ x .?AVStandaloneDrvHelper@antirootkit_helpers@@ x .?AURedoActionCreateFile@KLBG_API_Impl@@ x .?AURedoAction@KLBG_API_Impl@@ x .?AVIKlbgApi@@ x .?AVKLBG_API_Impl@@ x .?AVSafeIntException@utilities@msl@@ x .?AURedoActionCreateDirectory@KLBG_API_Impl@@ h @ We h R 0R % $ 7 l l W KA @ " = b b 8 [ ' F ڧ sO ;P D g| p R M 6 G J N P N W N ] T U Z [
_ ^
P 9 < 8 ; `
Y 8 P h } 4 V S _ V E R S I O N _ I N F O ? R S t r i n g F i l e I n f o . 0 4 0 9 0 4 B 0 B C o m p a n y N a m e A O K a s p e r s k y L a b . L e g a l C o p y r i g h t 2 0 1 9 A O K a s p e r s k y L a b . A l l R i g h t s R e s e r v e d . T L e g a l T r a d e m a r k s R e g i s t e r e d t r a d e m a r k s a n d s e r v i c e m a r k s a r e t h e p r o p e r t y o f t h e i r r e s p e c t i v e o w n e r s J P r o d u c t N a m e K a s p e r s k y A n t i - V i r u s 6 P r o d u c t V e r s i o n 1 4 . 0 . 0 . 0 2 F i l e V e r s i o n 3 . 1 . 1 4 . 0 Z F i l e D e s c r i p t i o n S e t o f s y s t e m i n t e r f a c e s . I n t e r n a l N a m e k a v s y s > O r i g i n a l F i l e n a m e k a v s y s . k d l D V a r F i l e I n f o $ T r a n s l a t i o n
H 00 000!0&0,03080A0G0L0a0g0l0x0000000002236F>X> 114 0 $ 2'57:==>>>>>>>> @ ( V1h1F9S9996=E=l=}=V>c>>>> P 00001b1p1111111252J2Z2`2j2B3M3V333445668899!9&9.999D999 :":+:::&<3<<<<=====f>x>@?~????????? ` *01122$3333444444 55>5r55566666 77'707H7W7`7o777777777788&8V8h8888999;V;b;;;=5=G=P=&?4?? p 8 03$333888
9f9x9v:::;;>>>?>???? L 62G2p255#6A6c666667#7A7c7777788939U9u999:<::C;N;V; t T3y3334'444445P5555)6O677F8S8888;F;X;v;;;;;2>>>>>>
??4?|?? 0*0G0e0171P1111111122*2r22 3*3G3e34B4r445(5G5M5Y5^5s5y55555 6A6q66679889 9=9[9y99999:
:: :3:9:N:e:k:::
;C;y;;<<==>0>N>l>x>>>> ??? t e00,1B1L1g11122-2@2F2X2f2 383T3d3k33334444567778r8899F>c? 161G1111B2^2e2u22222233)3>3K3T3333'4W4v4445D5Y5_5y5~555567G77828`8r88898999999F:U:i:::::&;6;;;;I<<<<< ==(>i>q>z>>>>>?I? 0%042U22273N34O4444444455555%6a6666677778F8U8899j999 :o:::;; ;&;E;z;;;;c<<<< =B===d>p>|>>>>>>>>>>? ?? ?'?2?@?R?Z?g???? 0011122 333%44444255 6666777&888v88888888899&9+9Y9v999v::: ;%;+;; v>>>>??? 0`0u01$1.1X1111111202W22222223(3y333334
4!444&5h5555J66688(8/8?896:H:::::;;;<#> ?n?? 00*1w11111222223F3X3333D44444475k55<666667777778f8w88f9t9:::{;0<7\>a>>>>)?>?????? 0!0w00000011e1k1|111222222]3334 4C4]4444444)5l55556x666A7|77778889(9>99::; ;s;V>>+?V?g? D 44;444,5D5+67666y77788D99;;G<===F>X>>??? 0 H v00V4f466H6;; > >]>>j?? @ x [00z11*22M3344-55N6d667(7D777 8Q8\8f889:9p9999 ::4:G:M::::;;s>>>>>?$?M>>>>>8?j??? H 00V0c000f4w46&888:(:]:z:::::@;;<<=>>?a???? t 080K0v000011*1O1`1112k3&484p4T7777~999999999::;#;(;0;n;============= ?Y? h 00|001s111123H334444555555 66666 789V9h97:z:; ? ?$?(?,?0?4?8?">7>L>a>>)?U?g???? < J0x1C2R223477B9v999;;"<<<
=>?f?w??? 001(1]1b1r111111112$2C2^222J3f333333334$4N444f5t5567H78(88899999999::::;<== >%>>>V?f? p %0E00000111111122F3X367E7y7f8x8:::<<<<<<<<<<<<<<=
====='>A>>>>?r? B0L0l042=2M2q2x22222 333333334T4e4444445 5^5g5w5555v66667 7`7f77777778 8,878c8n8888K9[9999F:X:;;;v<<=====v>>???? &060011S1b1m111m222&383v3 4]444<5555555
6 616C6Z6j6~6666666627}888V9f999::::<<<= =+=2===8>>>??? | /0;0E0^0e0v0-12445O5V5`5556 66,6|66647H7R7c78"8v88888r9;<<<==&>8>\>c>m>>>>>>?S?r?}??? x 091y22N3333&454U4l44<5L5U5\55566'678829[9`9f9l9999::F;W;5_>{>>|?????? 0 D 0C0f0x012355@67:89:=::;#;q;v<<<9====v???? @ \ 0)03333 44!4,424M4W4h4444444445&5E5d555F6S666Q899v::f>u>>?? P T V1h156G6&787&959m9V:g::;;; ?.?E?^???? ` h 0000 11)1F5V5566/6666 7V7c7z77F8X88V9F:X::::;Z>>>>>>>>>???? p 0*050000000011*222p2x22344;4B4v4445T5a5555616U6l6667d7n788S8Y8d8|888888909:9K9999K:p:;;A<<=W== >?? *0o00V1h11111{233
44f4x4444455556667G7k7r7|7777778 8(8o888888 99'9:::;;&;0;@;;;V=h====== >$>>>>>>l??? h 2222333!4'4G4N4$5j55555666&787W7777778V8f888889Y99G:;&;;@???? ( 0W112 5J5788!9:J> 000m1111111112242C2Q2222223 3)373V3k33333 444)4:4B4I4Z4b4t44444445V5`5u5555566 646:6P6s6666c7p7777778Z8v888899+919>9E9`9999999::K:l:::*;V;b;;<~<=== >>i>>:?? x 0
00001e11 2&242k2t2`3k333344,5G55666!6(606:6B6J6T6\6d6n6v6~66<77-8<888999%:;;}<<}=?? \ 11223 4R4b5{5556 6?6X667|7&888899J9S9
:9:T:>;Z;9>>>?$? h 050p00061H11722222203G3v333444 56*6q6667E7788_9t999:::;A? l 001\1*222 33!3E3h3333
4"4n4444|55K66*7P7777788899I999D:T::: ;&;2;v;;&>8> 4 62G263G3;769H9W<<<<<,>w>"?? 00g000G11222Z3d336444X55-6766q77 88J889 9999999 ::&:9:L:_:r:::::::;;);<;O;b;u;;;;;;;;;;; <<< <<<< < <$<(<<<<<==&=4=L=X=^=g=n=s====s>> ?&?@?Z?|????? 0 0&0F0U0000
11S1r11111^2q222U3344445=5v5555+6`6667%7{777 888 9 9-9999":J:z:::::V;j;o;;;;<% >F>X>>> ?v??? @ l 60H0000001`1z111R22V3h33&424v44445"5f5r55566V6b6666777&848b;<===>>? P x 0 02333f5v55566687778{89999&:4:Q:]::;J;;;6 >'>4>>>
?U?c?i?? ` 0000%11112(2]2222&343G3e333444 5,5V5h55566V6h6667 7v7778/8?8888#9[99:v:::::[;k;;;;
<0<<<==6=H=t===>5>z>>>>>?Y??? p l 80{00031C1V1b11112F2W222#33F4X4u4
6"66666888999R:::::;W;h;&<8l>>>>> X &1611132222 3v333333434446667&858O8::<<=t==F>U>>>>"?? h V0f00001&1l11111&25222&33333L4x44425]5|5v66748O8888 :&:6:f>>">,>>> @ &35333k4444667#77869H9;;<<<===>>r? V0f0112=2Y2i2y2222 3L3S333333 44.454L4P4T44445_7~77778889#9::V;c;<@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>>>>>>>>>>>>>>> ( 4(46667779&;7;f> P &181333333-45566U7777748f88M999;3;W;;<<1=?=H=>>> ( 2266 7I799::;<;;;? d h1x1111222%5666666666666666666666666666667<= =6>D>X>q? 8 11226(688];b;z;;;;;==>>e????? < D0v00]112 3C3g3355:':6=F=`=>;>D>e>>>>2? V0h0000F112<2\2x22233J33/494`4u44z5+6|697I7P7i7777778869B9v::: ;f;v;;;<<<4=j=~====W>>>>1?Q??? 0 <0f0001111112 2)23O3b3334404X4v444N5k55556f7x777 8e88889G9999:G:::;c;o;;;I>>>?*?B?v??? @ 0k000111122223
333M33333333^445g5556&6@6666V7e7|778889F9U999::;&;8;;;; <v>>>??? P 700011^222303D33 4@4\45:55556M6T6^666F7X77777778 8F8X88889Q9n999 :g::::F;V;;;;;;;<,>1>6>f>t>>>7?]?t?{????? ` 060F0]0 1(191?1M1T1c1i1w1111111111112:2Z263E3_3r3v4444555,6S6z66|788p88888869E9m9,:_:::;i;z;;;;0<<<=f=w===>>?? p &060y00011?11162F222233?333&464y44445.5\56&6i66677777 88888f9x99999F:::::;K;p;; < <>??? 0081[1u111 22&2P222 353n33354V4f4444465C56(6L666677$8M8';w; <*<\>>>?F?U?? q00!1+171P1Z1f1111111222233-3R3f33334444444465F5]55T6666697'8J88889j9{99":k:::::;K;;;<&>j>>>>?? (0H0000:11111r222u3333:444445J555555U6677Z7777 8E8f8v88
99l9999:6:F::::;%;;;#<;>>>>>??Z???? | 0$0F0V0000>1_1111K2223333z44 5.5f5u5C6}667F7U78d888&9599/:::;;;
<{<<<<={=&>>>>?#?G? X 222223-3H3v3333333Z4`445W5 6666P7V7:::::;<<<=
=??? | 0"0<0f0s00000111112#2B2\2222&333O3333333&434445255567%7788*9M999*:J:::2==>??? 8 %0<0Q001122 2244>4v44 5668%8<:>B>R>>>>>>>>>>O?Z?b?r????? | ;0p0000 1V1e11(2>2:4C4L4S4444p5555F6U6l6x678B8l8888!9F9X9999I:::m;;<6$>M>>^?? ?0a0000161C1T11111 2+2?2223)333 4&4m44
5D55696a6j6666777 8e8889::::::=;;;===== >Q>?'?6?E??? 00a0n000000&151m11.2344435N5f5|5555667
77!7B77778U8u88893999I:p:
;6;f;x;;;;Y<<=@=f=x=====
>>/>@>f>x>>>>Y???? 0 4 )0P000F1m111D2p2w2}2222266F8X8>> @ $ D4446+6`677N8E9W9c9|=? P , 22347889>>O>>>> ??? ` 11+222f3v333l444444444555 5 5&6-6h6l6p6t6x66677777M;;;<<<<<<<<<<<<@>???????????? p h 111u1111(2>33333333333:::::::::::::::::: ;;; ;;;; ; ;!=+= t v55K6h6s666666)7D7n777777 8W8d888R9l9:):Y;b;|;;;;<#>7>r>>>4?? d 0b000f1x11123253V33&454L4S44525556'66667 7w78999::p:;;<U>?? 020N0^0001.1f111112A2223)3g33
48444F5V56G6R666667L7o7777828a88888b9;;;;; <$<6<@0> P 1Q556V7h77889F:X::;;>> >>&>7>n>??? 0 00555X6g6s69:==S=F>X>>>>?E? x 0+122
3 343I3^3s333333 4f4x444
5F5h5556 686g6666
797_7777%8_8889;e;;;<6<,=>>>'?7?@? H F1X124455#6.6:6f6667888M99==i=====G>>>!?? 0>01+1m11202Y22222&3O334W4p444444445
55#5O5]5h5555555 6&6-6F6]6667N777778g8899[9&=6=>>]?g???? +0a0l0v001J1v111 262F222222<3u333 4D4f44445F5T566H6666 7X777h8889C99:A;};;<'2>t>>>> h 11!3-3E3r3333334[4;<"<*<2<:!>>>j>>>>N???? Y0000#1,1A1112@22222J33334 4d444#5S5\5v555X66666*7H7j77~8888899G:i::::G;;;<<)<<< =7=@=Q==>3>i>r>>>@?T????? 0 | 80a0j0z000000012g3*414455*5<5N5`5u55g788999::
<<<<<<<<<<<<<<<<== = =$=(=,=0=4=? @ 8 z034B5V5c5~5;====== >>> >>>> >??? P L 0$00E1v1111122>2S2Z2`2r2|22233/3a3j3u3|3333333333333333444 4#4-474G4W4g4p4444444444444445
555 5*545G5L555566'6,6E6J6W666666 7>7P7
8=819A9d99999L:U:]::::::;;;-;a; <+<5 >">7>O>U>i>>>>>>>>0?O?l????? ` 0/0D00W11111111
2(2A2T2}222233%3D33334474L4a4f445@5555566k6q667$7+7H7p7899999999: :1:7:=:D:::::::::::::::::;;;;; ;%;+;1;6;<;B;H;M;S;Y;_;d;j;p;v;{;;;;;;;;;;;;;;;;;;;;;;; <<
<<< <"<(<.<3<9 >>> >">(>->3>9>?>D>R>X>z>>>>??K? p D 0050C01(2/24282<2@2222222G55 6667>1? H U022223r47757C78(9/94989<9@9999999KQ> $ &023 31333%484455
6; h =============>> >
>>>> >!>%>)>->1>5>9>=>A>E>I>t>>>>>>>"?6?R?\?f?t??? 000 0;0[0i0p0v000001 161R1a1m1{1111111112!2&2+2O2[2`2e2222222222 303<3e3q344!5-5555666q684;\>>>>e? < 01112*2Z2w222256G=\=~=='????????? < P000000 1117:::::::::::::-;; T 11B2^2g3H788%9l9;;0j>>>>> ?#?*?6?I?N?Z?_?p????? D0V0^0h0q000001"1(1.11111334
4=4B4c444666/7G7t7777777773888T9_999:::;;;;;;;;;">N>k>? ?J?Q?\?j?q?w??? 4 Q0V111223467@7J77H8N888>>???? 001 1G2%4+4=45 4000001,2@22u3|333334"4=4I4Z4c444444455+555X5b5{5566)747>7M7U7]777778 8g889::\<}>>>>
?'?? 0 i00002&5^555
66888888999!9&99999999::,:4:[:t::::::;);F;Q;V;[;;;;;;;;<<< <8>4>?>D>I>j>z>>>>>>>>? ??2?c?n?s?x?????? @ d 0 0G0R0W0\0w0000000001%141X1j1v12:2|3344:< =&=6=E=L=d=k==t????????? P X
000K0X0f0t0000000 1;1V111123222M344444/829C9t;;;>>>P?w? ` 00 11-1I1g1q111111111
22$2.2>22224(5I5N5Y5m5x555555 6W66627f777
8888c88888!9f9x999999 :::;;0<<<<<<=-=O=v=== >#>*>1>>>>>>>>? p 0
0"040a0000001
1"1_1e1t1Q22223445Y6647G889(9c99=:7;o<<<<<<+=A=W=`=k=s======>t>>> ??-?5?d??? 0000F1N1t11111 2{222>3F3340445)515R5566 7
78?888888A990::Y;v;;;<<=L=]=e=u===&>>>?X?d?s?~??? T 00^111 2V2l22303B3T3f3x333333334G40777 88-8i8.:5:=:E:M:
>? P 0q00344G5Z5J6667088899B999:L::];R<<==
>3>H>_>>O???? , 0T0001%11f222=3944x<<<>>?j??? h 00 6P6,7777 888Q8|8888889.9s999999:=B====>(>3>@>R>>>7?L?U?^?v???? m000001~1111121222233333444 535P5r55M66\7f77/898c899999e:{:::;;;;;< <<<<<<< =J=R=o====>>> ?1?d? 00r0000=1C1H1N1_1f1l111222223a5~56 66888 9B9999X:::;.;h;; <"G>v>>> ?P??? 60001^111(2e2223(3]333 4f4444@55526Z667H777;8889@9p999::;B;v;;<.<~<<=P==>X>>>2?r??? 0P000 1p11 222243r333 4*4X4444 5P5556B6p666&7T7z777J8889`999G::::\;;;j>>>0?v??? F00001x11
2\222203`3 4N4445P555F66677)7X7778*88 929n999:::b:::
;!;J;x;;;;;B>>>?2??? 0 00 1j111122`2222x333
4>444G5556P66F77778P8880999:H:~::;P;r;; >>(?Z?? @
0b00001T1r111 222d222223*333 4D4h44445!5P5r555 626R6r6666727R7777*8I88888 999,:Z:::
;h;;;>7?h?? P h 0v001X111
2h2224L44.5b5556V6z666%7d77 8F8889N999 ::$;B;;;i<<<==>?? ` 4 0>0000"1`111112!2'2A2G2M2W2a2k2u22 p 43<3@3D3H3L3P3T3X3\3`3l3p3t3x3|33334484<4@4D4H4L4P4T4X4\4`4888888888888899999999999999999999 l0t0|000000000000000001 11 1$1,141<1D1L1T1\1d1l1t1|111111111111111112 22 2$2,242<2D2L2T2\2d2l2t2|222222222222444t8x8|888888888888888888888888888888888 999999999999: :: :$:,:4:<:D:L:T:\:d:l:t:|:::::::::::::::::; ;; ;$;,;4;<;D;L;T;\;d;l;t;|;;;;;;;;;;;;;;;;;< << <$<,<4<< >> >$>,>4><>D>L>T>\>d>l>t>|>>>>>>>>>>>>>>>>>? ?? ?$?,?4?>>>>>>>>>>>?? ?,?8?D?P?\?h?t???????????? 00 0(040@0L0X0d0p0|00000000000 1 11$101<1H1T1`1l1x11111111111 2 22$202<2H2T2`2l2x22222222223 33 3$3,343<3D3L3T3\3d3l3t3|333333333333333334 44 4$4,444<4D4L4T4\4d4l4t4|444444444444444445 55 5$5,545<5D5L5T5\5d5l5t5|555555555555555556 66 6$6,646<6D6L6T6\6d6l6t6|666666666666666667 77 7$7,747<7D7L7T7\7d7l7t7|777777777777777778 88 8$8,848<8D8L8T8\8d8l8t8|888888888888888889 99 9$9,949<9D9L9T9\9d9l9t9|99999999999999999 :::: :(:0:8:@:H:P:X:`:h:p:x::::::::::::::::: ;;;; ;(;0;8;@;H;P;X;`;h;p;x;;;;;;;;;;;;;;;;; <<<< <(<0<8<@>>> >(>0>8>@>H>P>X>`>h>p>x>>>>>>>>>>>>>>>>> ???? ?(?0?8?@?H?P?X?`?h?p?x????????????????? L 0000 0(00080@0H0P0X0`0h0p0x00000000000000000 1 X6\6`6d6h6l6p6t6x6|66666666666666666666666::::<<<<<<<<<<======================= >>> >>>> > >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>>> 0 p0t0x0|000000000000000000000000000000000 111 1111 1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|111111111111111111111111111111111 222 2222 2 2$2(2,20242 @ 89<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9999999999999999999999::<:@:D:0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>>>>>>>>>>>>> P L :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|::::::::::::::::::::::::::::::::: ;;; ;;;; ; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; <<< <<<< < <$<(<,<0<4<8<<<@> ??? ???? ? ? d 111111114444444444::::::L?P?T?X?\?`?d?h?l?p?t?x?|????????? 9999999999999999999 ::: :::: : :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:::::::::::::::::::::::::::::::: ;;; ;;;; ; ;<< <<<< 666666 777 7777 7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|777777777777777777777777777777777 888 8888 8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|888888888888888888 22 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|222222222222222222222222222222222 333 3333 3 3$3(3,3034383<3@3D3H3L3P3T3 |5555555555566 66,6<6@6P6T6X6\6d6|66666666666666 77(7,7<7@7D7H7P7h7x7|7777777777777788 848D8H8L8P8X8l8p8t8x888888888888889 9$9<9L9P9X9p999999999999 :::$:(:,:D:H:`:d:h:p:::::::::::::: ;; ; ;0;4;L;P;h;l;;;;;;;;;;;;;;<< <$<4<8>(>,>0>4>8>L>P>h>l>>>>>>>>>>>> ???0?4?H?L?\?`?x??????????????
D 0$0(0,0D0T0X0p0t0x000000000001 1 1,101H1L1P1T1X1`1x1|111111111112$2(2,2024282<2D2H2P2T2X2\2`2t2x2|222222222222333 3 383H3L3d3h3|33333333333334 4 4 4$4<4@4D4H4P4T4X4l4|4444444444444 55(585<5D5\5`5x5|55555555555566 6 64686<6D6L6d6t6x6666666666666 7 7 787H7L7d7h777777777777777777 888 8 8$84888H8L8d8t8x8|88888888888 99(9,909H9X9\9t99999999999999999 ::(:,:0:4:8:L:P:h:l::::::::::::::: ;;; ; ;0;4;8;<;@;D;L;P;T;X;\;d;h;l;p;x;|;;;;;;;;;;;;;;; <<< < <$<(<,<0 >$>(>,>0>4>8>@>D>H>L>P>d>h>l>p>>>>>>>>>>>>>> ??? ?,?0?4?8?>>> > >4>8>P>`>d>t>x>>>>>>>>>>>>?? ?$?(?> >$>(>@>D>X>\>l>p>>>>>>>>>>>>>> 0
9@9H9T9t9|9999999:4:<:D:P:p:x::::::::::; ;; ;$;,;4;<;D;P;p;|;;;;;;;;<$<,<8 >> >(>H>T>t>|>>>>>>>>>>??0?4><>H>h>p>|>>>>>>>>>>?,?4?(>H>P>\>|>>>>>>>>>>? ?? ?$?0?P?X?`?l??????????? `
0 0$000P0X0d00000000001 11 1(1H1P1X1`1h1x1111111111 2 2,242@2`2h2p2x2222222222 3333$3D3L3T3\3h333333333333 4 4(404<4\4d4p444444445 55 5$5,585X5h5x55555555556 6(60686@6L6l6x66666666667 707T7\7d7t77777777778 88L8T8`88888888888889 9(90989D9d9l9t999999 : :$:l:t::::::::::; ;(;0;8;D;d;l;t;|;;;;;;;;;;< << <(<0 >> >$>0>P>X>`>h>p>x>>>>>>>>>? ?,?H?X?h????? p
0 0040P0`0l0t0000001(181@1L1l1t1|11111111222$2L2`2h22222222222343<3D3P3X3x3333333334 44 4(4L4\4d4l4t4|444444444455585@5\5d5l5x555555555 6 6$6,646<6D6L6\6d6p66666667 7$7,747<7D7P7p7x7777778 88 8D8L8T8\8d8l8t8|888888899 909T9\9d9l9t9|999999999999: :: :$:,:<:D:P:p:x::::::::::(;0;8;D;d;;;;;;;;;;;;<0<<<\ ><>D>P>p>x>>>>>>>>>> ????(?L?T?\?d?l?t?|?????????
0 0,0L0d0p00000000000 141<1H1h1p1x1111111111 2$2,282X2`2l222222222223 3(3H3P3X3`3h3p3|33333334 4 4,444@4`4h4t444444445 55 5$505P5X5`5h5p5|555555556,646<6D6L6T6\6d6l6x66666666777$7D7L7T7\7h7777777 8 8,888X8`8h8p8x8888888899 9(9H9P9h9t9|9999999: :$:,:D:T:\:h:p::::::::: ;;;4;<;D;L;T;\;h;;;;;;;;; < <,<4<<> >@>H>T>\>>>>>>>?$?0?P?X?`?l?t????????
0(040T0\0d0l0t0|000000001 1<1H1h1p1x111111111 2(202<2D2x222222222 33 3(3H3P3\3d333333333$4,444@4H4|4444444444,545<5H5P55555555566 6,646h6p6x666666667 77 7(7H7P7l7t7|7777777778 88 8@8H8P8X8t8|8888888888 99(90989T9\9d9p9x999999999999:(:0:8:H:P:t:|:::::::::: ;(;H;P;X;`;h;t;;;;;;;; < <,<4<<>$>0>P>X>d>>>>>>>>> ?? >> >$>,>4><>D>L>T>\>d>p>>>>>>>>> ??? ?4?> >0>8>T>d>
d 000000000000 111 1111 1 141@1p111111111117`8d888888888 ` 6666666666666666666667<7\7|77778 8P8p888889,9L9l99999 :D:h:::::;0;\;|;;;;;<<<< =(=P=p=====><>`>>>>>?P?|??? p 0D0h0001H11111 2H22223D3t3334,4T4t44445T5555 6D6p666747X77777<8`888909`99994:X:x::::;<;p;;;<0<\<<<<=L==== >8>h>>>>?D?t??? p 0<0l0000(1\1111 2P2222 3D3h334,4P4p4444 5@5\5555686X6667@7t777708h88888(9
;:10KIM0kz8BsTSx69UjRLnjKcCntuK/1EIBVKz3n340v8YIoiWqJjjUi2GFheqnSIDDTSGSUBSxnz/akPFuwvLvG4%% X 0X *H
X0X1 0 + 0L
+7>0<0
+70 0!0 + 1 Cb)tҏנ*պɠ00W~|NYKw;0
*H
01 0 UZA10U Western Cape10U Durbanville10
U
Thawte1 0U Thawte Certification1 0 UThawte Timestamping CA0
121221000000Z
201230235959Z0^1 0 UUS1 0U
Symantec Corporation100.U'Symantec Time Stamping Services CA - G20"0
*H
0
ITK
%y"W*oܸ&Csk¿.PZvC%CE{t"״ MD$k_E;DCsi+˙ r&Mq 1QaSI,xE/W?=ƒJ{3y
uAQlie)`;
tޒ"t|'JÞ-'}aqPK],e ؖ|NHDD h]jxdE`F~T|yq 00 U _n\t}?L.02+&0$0"+0http://ocsp.thawte.com0U 0 0?U 8060420.http://crl.thawte.com/ThawteTimestampingCA.crl0U % 0
+0U 0(U !0 010UTimeStamp-2048-10
*H
yY0h O]7_R DnmX|0i#s oG9*ÎY M1\*zz WLey@b%n7j!AW? wI*^8j"Q~0085njP0
*H
0^1 0 UUS1 0U
Symantec Corporation100.U'Symantec Time Stamping Services CA - G20
121018000000Z
201229235959Z0b1 0 UUS1 0U
Symantec Corporation1402U+Symantec Time Stamping Services Signer - G40"0
*H
0
c 9D#DIa
Sۭ,Jn"hcSit <ü u00ƫoNT˹WF0
*H
0s1 0 UUS10U
DigiCert Inc10U www.digicert.com1200U)DigiCert High Assurance Code Signing CA-10
170602000000Z
200708120000Z0N1 0 URU10
UMoscow10U
Kaspersky Lab10U
Kaspersky Lab0"0
*H
0
ob#xLC "tR S S5 +.@K*? k
l)T(YeRj |V%yM3է!v?xm [T>q"iJ ULXe, `'>+m2xcMEԏ͓B 6`Lh# lOAä_uW ޔv&)PmusJl`ɶÄ?=[+Qy 00 U #0HkX#̔.ed0 U =ӏs+Ctid0U 0U % 0
+0iU b0`0.,*(http://crl3.digicert.com/ha-cs-2011a.crl0.,*(http://crl4.digicert.com/ha-cs-2011a.crl0LU E0C07 `Hl 0*0(+ https://www.digicert.com/CPS0g 0+z0x0$+0http://ocsp.digicert.com0P+0Dhttp://cacerts.digicert.com/DigiCertHighAssuranceCodeSigningCA-1.crt0 U 0 0
*H
eV |*HJ!+ JmۿFh.7cYwR%KACB xM7y 擴eEqXt ,!-&F|gfv ~=|z]=ALœMx- \Od9d mtʫUZošFisݏ eIA_wMXsE"dG Rp-] ]mr
ys0;0#
a M '0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1)0'U Microsoft Code Verification Root0
110415194533Z
210415195533Z0l1 0 UUS10U
DigiCert Inc10U www.digicert.com1+0)U"DigiCert High Assurance EV Root CA0"0
*H
0
sԻ--2?%Iq*Ք4g
_i@ķИAY:ܔiGԘ&cd+0 U #0b
![Cn TPkҖq0UU N0L0JHFDhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
*H
Yok-J>u ELAP ٰ*?SV9jcx$y}G
˽fy <ܬ p?x~K`&sa!hcoٟ'Ml$Ƚ؟{9:$Joz 9ad>W8zҵ9ն<}k*LLT hXa`}x!unj*ke--P 0x<#g W0S0U 0U % 0
+0U 00`Hl00:+.http://www.digicert.com/ssl-cps-repository.htm0d+0V R A n y u s e o f t h i s C e r t i f i c a t e c o n s t i t u t e s a c c e p t a n c e o f t h e D i g i C e r t C P / C P S a n d t h e R e l y i n g P a r t y A g r e e m e n t w h i c h l i m i t l i a b i l i t y a n d a r e i n c o r p o r a t e d h e r e i n b y r e f e r e n c e .0U 0 0+s0q0$+0http://ocsp.digicert.com0I+0=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0U 00@><:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@><:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0 U HkX#̔.ed0 U #0>iGԘ&cd+0
*H
I|`|źKdi)ޘ}@f&3/DU5p
4ӮT.e z2 >l&9ǪFfƳtX4uPD}10tkEv3 zHo1V+3"DΌʈ> yCCU\,
kxwָښL+ݯLҗƮ_D37/V[Ug4l sJ{5xp zKO"6ɏ0>00s1 0 UUS10U
DigiCert Inc10U www.digicert.com1200U)DigiCert High Assurance Code Signing CA-1ƫoNT˹WF0 + p0
+7 10 0 *H
1
+70
+7 10
+70# *H
1Y&nDisMj5 [Zh0
*H
@` 'T9&[6
h7sz%gcЪVAJCs[v}/,LB#d
Jң8+mWR(j (kzIr!6X
%Dۯ'ء<(0< R) hu19?9-ĻG{}wPCXw\[N~4h"0d;0P7![v-8A}jR,l3H0:
+71:y0 *H
|0x10
`He 0\
+7N0L0
+70 010
`He /WȓO'OCgmv<-IW'00q-{Db%0
*H
0N1 0 URU10
UMoscow10U
Kaspersky Lab10U
Kaspersky Lab0
161003115548Z
311003115547Z0N1 0 URU10
UMoscow10U
Kaspersky Lab10U
Kaspersky Lab0"0
*H
0
kuW zOq σc
cJȀ2{+woϔ$[֒ O),B*w? svCƛ$mi D mET1X ~Ś#>}+z T+h߸Y9=
Dzbs ;Zij)b0ݧE=:je10XǑe
qg(tkXh]j2)0LCfVϯ;Yg B4 }n /n *#Ӑ9Y챰/_=ZɌ=:Z@e tl~{-s4+&hyKVU^26f_8w}6Qq 6'āCݝ}7Pmz ָI6.حfS fLY5jM Ο9;DiG荤_QSz
D?ߞ,ol[XX"qq`r? V3^Uc'{ 00 U 0 0U x0v /=VnzFfP0N1 0 URU10
UMoscow10U
Kaspersky Lab10U
Kaspersky Labq-{Db%0
*H
$IA /;xNr h7݁=1k x5ԟz ZD,Ջ ້i 2yD_D.ul𨓑=FU\]F*aB'Oa|⒤
-c[{;mI36
Dl*vf݃eH0PCpJH`yF1VB[EI[nVXp Y?"L֡kdZ9l Z
k(: *UEH@vQS #x,KmlPkQ<CnyO訵 } ĵ7 3선8b$L,
R
h kX>E j!?Wie}4%#]qm@1'j w3b|Uju&.v zX=u"vGĂ:z>⏘ f~j1A0=0b0N1 0 URU10
UMoscow10U
Kaspersky Lab10U
Kaspersky Labq-{Db%0
`He q0
+7 10 0
*H
10 *H
1
+70/ *H
1" (D)8kg Dvm<ݛ q0
*H
:̤(QGbtf Oj z_nhCSr@pV" [Yf z
_ Rd
b^`3s_T6C?5cލ^~TGgI#aTI2a j]2 9H;c'GB.lQ `.e:z6:xp)Ƃx\O`JW3ӤBpVtǘ W J־q5J\4sc:rCbK3MJmt !l]6Vk6 WKUxԣ2ɈKB
'*\$ 3g
8) [Ǣ{qkSߚ\ğpHp̋A)zSuW7RQAp! ̴i+O!9Jp\ 2e |!kHB^8mʆ!Z_nI.$(̓M
3I;Kሙ3ǀۑWrwͨ 7jK _y5x2#2AY>+ m:ɜHS6xš7 w0s0U 0U 0 0fU _0]0[ `HE0L0#+https://d.symcb.com/cps0%+0https://d.symcb.com/rpa0.+"0 0 +0http://s.symcd.com06U /0-0+)'%http://s.symcb.com/universal-root.crl0U % 0
+0(U !0 010UTimeStamp-2048-30 U cʣNrৼA)8ub0 U #0wiHGS2vї0
*H
u-4\2EOxoOȁ@)]Vdq0* af V]q G̐/
lN3ִLcH9@!n< ɏSWA/ MNxlBna\RNkJzS
uu.fW : Ί۞8R`
M'm2?@Ῑ9+ZXU}ǚ#*a0K03{寺?#"AM0
*H
0w1 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network1(0&U Symantec SHA256 TimeStamping CA0
171223000000Z
290322235959Z01 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network110/U(Symantec SHA256 TimeStamping Signer - G30"0
*H
0
ܿi{TqG e$ m0 ?'J3Nm@" <$(rQ= &:C#uGp _[ rHWeM<@28?,Y#ˀMɪ
lUaW,ĵl#ҟ
lbiNR1[tRWl"Uo?J"ve6&,8ӯ%@ S)WX^HA!&{@SXyR1ME< :"Ŵoﰊ 00 U 0 0fU _0]0[ `HE0L0#+https://d.symcb.com/cps0%+0https://d.symcb.com/rpa0@U 9070531/http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0U % 0
+0U 0w+k0i0*+0 http://ts-ocsp.ws.symantec.com0;+0/http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(U !0 010UTimeStamp-2048-60 U n _;1y6 { 0 U #0cʣNrৼA)8ub0
*H
F_HϨ'K!Ͳrpc/U){9FN~eXW
6$
{;bJۊTm(gq?3 ٢Y JekR)u J+˛MYA÷?Dz"tG %t`n`Vz
DXH wr$, ?Kg _\T>3[ŷNqfE?v1Z0V00w1 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network1(0&U Symantec SHA256 TimeStamping CA{寺?#"AM0 `He0 *H
1
*H
0 *H
1
190408114547Z0/ *H
1" h8
N32W.EJ07 *H
/1(0&0$0" tv }9N
|ƀ~kEiy:r"@:8)";D_P|Dp~_dp{!m9rtM(S搕sWLH&0" *H
"0"10
`He 0\
+7N0L0
+70 010
`He /WȓO'OCgmv<-IW'0;0#
a M '0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1)0'U Microsoft Code Verification Root0
110415194533Z
210415195533Z0l1 0 UUS10U
DigiCert Inc10U www.digicert.com1+0)U"DigiCert High Assurance EV Root CA0"0
*H
0
sԻ--2?%Iq*Ք4g
_i@ķИAY:ܔiGԘ&cd+0 U #0b
![Cn TPkҖq0UU N0L0JHFDhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
*H
Yok-J>u ELAP ٰ*?SV9jcx$y}G
˽fy <ܬ p?x~K`&sa!hcoٟ'Ml$Ƚ؟{9:$Joz 9ad>W8zҵ9ն<}k*LLT hXa`}x!unj*ke-OfVm'6Opd;$8mÁ}
KlbC,n!p64X۫
|x{ȁBY\ X]$͒Vւd9[L3
쑆F_G+ 00 U #0~m2j #pj:k0 U gn=`(Y02U +0)'+0 RU-MOSCOW-10277398674730U 0U % 0
+0{U t0r07531http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07531http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0KU D0B07 `Hl0*0(+ https://www.digicert.com/CPS0g 0~+r0p0$+0http://ocsp.digicert.com0H+0@W
: D[a#iF
vxRX 3U_ 5|qeVntǚ^@$8E000_:xG\0
*H
0l1 0 UUS10U
DigiCert Inc10U www.digicert.com1+0)U"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1 0 UUS10U
DigiCert Inc10U www.digicert.com1+0)U"DigiCert EV Code Signing CA (SHA2)0"0
*H
0
Sdτ5Ѷǣ,,:5:W/HO#~le$U>#|BzbE}ct˞c%EO} u >Ez X64+.+1Xf2R>v@Zj=Kv\60L *XA "v^T8bp$ pd - !lس{P6
\J9yݿ=: % X0T0U 0 0U 0U % 0
+0+s0q0$+0http://ocsp.digicert.com0I+0=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0U 00@><:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@><:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0U 00 `Hl00:+.http://www.digicert.com/ssl-cps-repository.htm0d+0V R A n y u s e o f t h i s C e r t i f i c a t e c o n s t i t u t e s a c c e p t a n c e o f t h e D i g i C e r t C P / C P S a n d t h e R e l y i n g P a r t y A g r e e m e n t w h i c h l i m i t l i a b i l i t y a n d a r e i n c o r p o r a t e d h e r e i n b y r e f e r e n c e .0 U ~m2j #pj:k0 U #0>iGԘ&cd+0
*H
3J 37ۭ6:.zCBNMݟ !]Cw+ב3lղ;.ɓO@~YVrjA F|If8pwɍ1 )3͉?|mƲ:fk{ئ4XSW`#dM|%d!BC7M&MaKFAeθy ;Ǚ*nm^aƖa-Cbԙjd10{00l1 0 UUS10U
DigiCert Inc10U www.digicert.com1+0)U"DigiCert EV Code Signing CA (SHA2) ~Ŕf0
`He 0
+7 10 0
*H
10 *H
1
+70
+7 10
+70/ *H
1" (D)8kg Dvm<ݛ q0
*H
{8kTT!zPHw 4T]+5 ,H SD4cƻ+T~zŤ 5>3K5I\C=/,~Yfb#=7a
l5BAND/RBh 5&LN7 R33qdc|=cHAc7jŋVl,ّ_ /SPϘ]9X&z8B/VHv |}:\ `=09
+71)0% *H
01
0 `He0 *H
0 `HE010
`He ˇz9.~I`WGp|)? I DgG\e20190408114548Z0 01 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network110/U(Symantec SHA256 TimeStamping Signer - G3
080 {IhQDɉҜ0
*H
01 0 UUS10U
VeriSign, Inc.1 0 U VeriSign Trust Network1:08U 1(c) 2008 VeriSign, Inc. - For authorized use only1806U/VeriSign Universal Root Certification Authority0
160112000000Z
310111235959Z0w1 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network1(0&U Symantec SHA256 TimeStamping CA0"0
*H
0
YYUOr]UM
3I;Kሙ3ǀۑWrwͨ 7jK _y5x2#2AY>+ m:ɜHS6xš7 w0s0U 0U 0 0fU _0]0[ `HE0L0#+https://d.symcb.com/cps0%+0https://d.symcb.com/rpa0.+"0 0 +0http://s.symcd.com06U /0-0+)'%http://s.symcb.com/universal-root.crl0U % 0
+0(U !0 010UTimeStamp-2048-30 U cʣNrৼA)8ub0 U #0wiHGS2vї0
*H
u-4\2EOxoOȁ@)]Vdq0* af V]q G̐/
lN3ִLcH9@!n< ɏSWA/ MNxlBna\RNkJzS
uu.fW : Ί۞8R`
M'm2?@Ῑ9+ZXU}ǚ#*a0K03{寺?#"AM0
*H
0w1 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network1(0&U Symantec SHA256 TimeStamping CA0
171223000000Z
290322235959Z01 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network110/U(Symantec SHA256 TimeStamping Signer - G30"0
*H
0
ܿi{TqG e$ m0 ?'J3Nm@" <$(rQ= &:C#uGp _[ rHWeM<@28?,Y#ˀMɪ
lUaW,ĵl#ҟ
lbiNR1[tRWl"Uo?J"ve6&,8ӯ%@ S)WX^HA!&{@SXyR1ME< :"Ŵoﰊ 00 U 0 0fU _0]0[ `HE0L0#+https://d.symcb.com/cps0%+0https://d.symcb.com/rpa0@U 9070531/http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0U % 0
+0U 0w+k0i0*+0 http://ts-ocsp.ws.symantec.com0;+0/http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(U !0 010UTimeStamp-2048-60 U n _;1y6 { 0 U #0cʣNrৼA)8ub0
*H
F_HϨ'K!Ͳrpc/U){9FN~eXW
6$
{;bJۊTm(gq?3 ٢Y JekR)u J+˛MYA÷?Dz"tG %t`n`Vz
DXH wr$, ?Kg _\T>3[ŷNqfE?v1Z0V00w1 0 UUS1 0U
Symantec Corporation1 0 U Symantec Trust Network1(0&U Symantec SHA256 TimeStamping CA{寺?#"AM0 `He0 *H
1
*H
0 *H
1
190408114548Z0/ *H
1" >/N#.VeThOH 07 *H
/1(0&0$0" tv }9N
|ƀ