MZ@ !L!This program cannot be run in DOS mode. $xxx[xxz]x\xJxMxZx_xRichxPELL!  x@pSo]Z @] T` ptD-8 @, .text `.data$0"$@.rsrc `F@@.reloctDpFT@BLnLLLɹLɹLɹL?ɹLhBLLeLLjLܸLLLnLmsvcrt.dllntdll.dllAPI-MS-Win-Core-LibraryLoader-L1-1-0.dllAPI-MS-Win-Core-LocalRegistry-L1-1-0.dllAPI-MS-WIN-Service-Core-L1-1-0.dllAPI-MS-WIN-Service-winsvc-L1-1-0.dllAPI-MS-WIN-Service-Management-L1-1-0.dllAPI-MS-WIN-Service-Management-L2-1-0.dllcryptdll.dllDNSAPI.dlllogoncli.dllSAMSRV.dllLSASRV.dllmsv1_0.dllRPCRT4.dllKERNEL32.dllooaootoDoAoofoٿoouoo ww [wwZwwwfwZwww2wYwqwywEtwWwwwwwwuwUw\wewwwUwXXwxTw\w,w_w ow3w^wx`wwYgwTwєwQwgweww(+wwGw)cw3wŚwIwewwwhAwww`ww[weooPlo8ooZooλoopooo#ooWo"opoQo?oqoxooooaootoDoAoofoٿoouoo ww [wwZwwwfwZwww2wYwqwywEtwWwwwwwwuwUw\wewwwUwXXwxTw\w,w_w ow3w^wx`wwYgwTwєwQwgweww(+wwGw)cw3wŚwIwewwwhAwww`ww[we.mmmRmҀmkCm6ḿm,Wm[mVini^ibh1_i_i ai^hbhai bichbi cioi!piYli^h$chdhdh`ip7o]r~rrrUrrʀrtr|rФrrrZ)r`rDrՁrrhrAr[JmJmQJmiIm wwwHwԼwwFpwpwVw0wn6ww᯾w`wIawwaw?w]w\weTww_wŻwZw7wCwqww[{wzwFw≻wwּwiw|wwFww]7wNwvw(7w/wA#wuMwFwuGwTwKwwUw̼w=w8w1#www www[ww;wwwQ3wwgwwgrw"[[L\[ L[+ &0("t\[L\[L\[UU[UU[UU[DK\F\ F\ F\  [LGLOLK[N.,[64[<K\F\ F\ F\  ,F\00 F\88 [LL=[>U&U$[,[4K\F\ bF\ ~F\  F\(( F\00 [L\[+ &0J@Rz([U2U0[U:U8[UBU@[UJUH[URUP[UZUX[lL\[UU[UU[[L\[[L\[K\F\44 tF\<< F\DD F\LL F\TT F\\\ F\pp F\ ,F\ HF\[LLLLLLLL[BK\F\4[[K\HI [L[K\F\44 F\<< F\DD F\LL F\TT F\\\ F\pp ,F\ U<[TK\F\ PF\ :F\  VF\(( F\00 XF\88 tF\@@ [\[tUU[U"U [U*U([@K\F\ pF\  vF\ PF\ bF\$$ ~F\,, [[K\F\ [\[@][>6[ [ ?6\[ [jLlLhLbL^LZLVLRLRLNLLDL@LMLI=L+L'L6LLLL\[ x[K\F\ F\ [\[[HK\F\ F\ F\ F\$$ F\,, F\44 [\[BK\F\[\[K\HI[L[K\F\![[<L[W[T[4L?6L6LLL6LLLL[ ( DK\HI f[LA[[LK\F\ :F\  F\ F\  hF\(( fF\00 8F\88 T[[[K\HI [L[4[UFUD[UNUL[UVUT[lK\F\ (F\  4F\88 VF\@@ dF\HH XF\PP tF\XX [L[N[[dK\F\ F\ F\00 F\88 F\@@ F\HH F\PP [LL\[NUU[UU [4K\F\%\F\ F\ F\ F\  [\[0 L5L[!L\[K\F\ [[\[L\[) [ \)[+ )0(2LK\F\%\[[[K\F\%\F\%\[[+ )0  + ):)[+ )+ )[L[0K\F\%\F\%\F\%\F\ %\F\((%\F\,,%\[L[+ )0) [+ )0 PK\F\ F\%\F\ %\F\%\F\%\F\%\F\%\F\$$ zF\,, F\44 TF\<< p[[+ )0 V\K\F\ F\  F\ F\((DF\00 F\88 F\@@ F\HH [L[\\K\HI\ B  J &((00 R88 p@@ HH [L)[d[UnUl[UvUt[U~U|[UU[K\F\ FF\  LF\ &F\((F\00 NF\88 jF\@@ F\HH zF\`` F\hh F\pp F\xx F\ .F\ J[LN[[L[j},[K\F\ [[)}K\HI [L[K\F\ 0[[p,K\F\%\F\%\F\`[LX\[,K\HI,%\%\[L[K\F\![[} K\F\ F\ z[\[+ & + & [+ 0FK\F\VF\ F\ [\[[K\F\ [[( LjLl@[K\HI[\[K\F\ [[+ &+ &K\F\ F\  L[[f  [ [(K\F\$$ [L[(K\HI($$ [L[ K\F\ [\[B 6?[%\!L\[K\F\ [[+ )0$H[L\[ K\F\%\F\F\%\[\[K\F\%\F\F\%\F\p[\[+ )T0 . K\F\%\F\*F\\[\[K\F\%\F\F\\F\ [\[ )TK\HI %\[\[+ &0 [+ )n+ )TU}b]%So5SoL5So5SoYSoq5SoSo+5SoDxV44ͫ#Eg]+H`FSo06So5SoP6So27SoXFSo?Xo1 XoIXoJXoYoZo`YoYoYoYoYo\Xoo4ZoYo4ZoZo4YouYo3Zo'ZorXoYo>ToToYo-So{YorXoTo(ZoYoYoNXouPYoWSoYoӎZo(RYo YoJXobToYo3YoWoWoYJXoWYo\Xo\XolXoNZo_RZo#TZo[UZomXoH1\GA    pH1\GA   ! VpH(1\qG G   b bH H !P! p$H1\XFE   b bH  pH1\<DFA   l! lpH1\BDFA  H   l!lpH 1\XFA  H   vAv pH$1\G C   v vH   Hp H$1\tG C   v vHX  Hp H 41\G C   v v HH H P!$P!(a,p0H 41\G C   v vHH.HP! P!$P!(a,p0H 1\GA   Dp H 1\GC HH! LpH 1\GA   Dp H1\GG HH  !pH 1\^`FA  H   l!lXpH(1\tG C   v vHH X  H p$H 1\XGG   v v ,H  pH1\GG HH  F!^pH 1\GC !dpH1\GA   v vH pH1\XGC   v vH!pH1\FA HHp H1\$FA  P!p H1\HFE H  H pH1\HFE    H pH$1\^|F A  H   l!lXP!p H1\LGA   v H pH 1\GA  DpH 1\XGG   v vH &!pH 1\XFA  H   vAv hpH 1\VFA  H   vAvApH 1\XXFE   vA v ,HpH!1\GG v  pH"$1\TG A  H  v H p H#1\$GA  DP!p H$ 1\GC !hpH%1\GG |  pH& 1\GC  pH'(2(=G G  H H !P!X p$H(1\GC H!hp H)1\FA   v v pH*$1\V@F A  H   vAvAAp H+1\GC  H pH,1\XXGC   vA vH pH-,1\G G   b bH H !P! X$p(H.(1\V@G C  H   vAvAA p$H/ 1\GC ApH0 1\XXGG   vA v HpH1(1\tG G     vvH X p$H21\FA   H pH31\FA  Hp H41\$$GC HX pH51\GC  H ! VpH6(1\tG G     vvH X p$<xV@lVLNJd H  > z 2 t  L  6 P7FSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSopSo%So%0SoUVW@8[oWSouTMWSo_^]U39EP9E =]%SoUQQSVWh@8[o3SoM4[o=4[oh\sQTh@8[oSo_^[U}"ujSo]%So Ef9!f9>ECf9Qju PEuEPSoEPEPEP.dMEMȉE%SoudvEEE(@Ev.}4l.jju4PMW.E8M(E u$]$+M$%0[o}@uu@}DtuDu@^M(M(UME ;>M3] %SoUQ@<[o3ʼnE@5[oVE6e^M3 PPSoPSoPNlDnsRfc1510UdpKpwdNlDnsRfc1510KpwdNlDnsRfc1510UdpKdcNlDnsGenericGcAtSiteNlDnsGenericGcNlDnsRfc1510KdcAtSiteNlDnsRfc1510KdcNlDnsDcAtSiteNlDnsDcNlDnsKdcAtSiteNlDnsKdcNlDnsDsaCnameNlDnsGcIpAddressNlDnsDcByGuidNlDnsGcAtSiteNlDnsGcNlDnsPdcNlDnsLdapAtSiteNlDnsLdapObsolete 20Obsolete 19Obsolete 18Obsolete 17Obsolete 16Obsolete 15Obsolete 14Obsolete 13Obsolete 12Obsolete 11Obsolete 10Obsolete 9Obsolete 8NlDnsLdapIpAddressObsolete 7Obsolete 6Obsolete 5Obsolete 4Obsolete 3Obsolete 2Obsolete 1U@<[o3ʼnEEM8E U ;t f9:>;SPE4j Pu03PPP@XPu4<89[oA@0$t h 9=P6[o>@!`9XtXl`YtPPhj @Pj3P`PjhWSo9`t `sK^=SSo=3[oQS So#`3hD0(PTPPl7AtuwDhhu6[o;i9h=t*t h ّ˭5[ou5[o;i["(=9D0hu 9h%"h8WSoj 3K$MSSoP@txDCS So +CT=39$3E0@`T<8L4P0,@XtX9W0[K9X?G0p(f0@@f;u+(D8p4G8D;B96[ooBpQPw4Bppf@@fuD+DU\@<[o3ʼnEEEԋE E؋EEEEEEЋE$SEVW3fE}f33fE}ủuĉuȉuuufUH9 4[oU4[oP;UP2 UC zUStckkUSjWG @5[oEoUukUuuuhZSoVj虽}u Pc tEE}t8EPEPuVEEM܉EȉMEPWV3SEq uu#MQu#PF$Pt5[oiPVuču uuSuuuPEuuuuhZSoVj誼3ۃ;tV;t?HeapmT9]tu9]tu9]9]Ee_^[M3n DsGetDcName function returns %ld: Dom:%ws Acct:%ws Flags: %hs DsGetDcName function called: Dom:%ws Acct:%ws Flags: %hs UU$3ɸ#ЉMMMM;GU$#;GS@VW]$tM$E;f9Eu$ukPtaE(@EEE?}85Pu8V$}4tu4u8=-MM( }$E$u ]$}$z}t}t E(5_3^[9Eu 9EME(t 9EuM_M_e_______ ``1`K`h`````` NETLOGON.dllDsrGetDcNameEx2I_NetLogonAddressToSiteNameI_NetLogonAppendChangeLogI_NetLogonCloseChangeLogI_NetLogonFreeI_NetLogonGetAuthDataExI_NetLogonGetSerialNumberI_NetLogonLdapLookupExI_NetLogonMixedDomainI_NetLogonNewChangeLogI_NetLogonReadChangeLogI_NetLogonSendToSamOnDcI_NetLogonSetServiceBitsI_NetNotifyDeltaI_NetNotifyDsChangeI_NetNotifyMachineAccountI_NetNotifyNetlogonDllHandleI_NetNotifyNtdsDsaDeletionI_NetNotifyRoleI_NetNotifyTrustedDomainInitSecurityInterfaceWNetILogonSamLogonNlNetlogonMainVW8[oVSo39=t3[ot p3[o3GVSo_^hhZod5D$l$l$+SVW@<[o1E3PeuEEEEdËMd Y__^[]QÐjhaSo3Feu8E Wo WoUQ@<[o3ʼnEEeM3蒴QL$+ȃ YQL$+#ȋ%;s -Y$ÐUVW7[oVSo3[o$Pj@ue3 GVSo_^]UQeSVWh9[oSo]{Eu9}4,39u+} ;tC jY3}y3Fh9[o So_^[%So%0[oUSo;Er+E]+EHUjju ]UQSV5SoW3SSSSjuSW։E;LM ;L@P EE9]LSSPujuSW;M_^[ UEȁu<@M ЃM 3]%SoB#;tjX/3@7 9 >UQQS3ۉ]9<3[odVSEPSSj\jSoV19]E^9]t ju[8]6E[ÐUV7[oVSo$3[oWPhu VSo^]U$@<[o3ʼnEE$M0SVuH3WE43EDE;t f9E ;t f9};uE,;t f9;QhSV4EM FEFEN$ ~F N0;GF(E(}[F[3ɋVDR V@RPvPvv,SQW;EF tF(i9^iFPPPv4v vvv,6;9]8SSu8V1UQQVWEPEPu3hySo}};eEPEPuhySo;eEPEPu h ySol;e9}9}Qe9}g} t"EPEPjE PhySo;IeE;ʶM$3_^ UE tDf8t>VWPcP@uu+uPVu5V_^]3h{SouS (&U@<[o3ʼnES3VW9] 9]=1[oSSuu ׋;];;5 4[o4[oD0;PRFe;EStckxVuuu ׃q}u9HEP@u+‰EEH@u+EEPu6EPjux"EPuuaEPjuKu؅6PS 7O'u+Fh}SoF|VWuGuW}}u=uGWj+uE+Nh}SoNVWEME033ۋE;t8Heapeƍe_^[M3Θ))(F;ɲj^3SoSoSoxSodSoPSoUas ChangeFail PrimaryStart PrimaryUas Logon ResponseDISTRIB_RESPONSECENTRAL_RESPONSEDISTRIB_QUERYCENTRAL_QUERYUAS Logon Response UAS LogonUE$~SoSo]Sam Logon Response ExUU EtVu M v 0B u^] UQSVW339}T9} ^3EP5;SjXffE fFFEEPj uEPhuEPhuHEPjEPEPjEP EPuu ME$EEM(EEEEEEE@1M,E+Ɖ3R;_^[(UUuSoVuA;R ftW} M vf@@BB fu_3f^] U(@<[o3ʼnEE S]VWhSojSE =2[o7 <SoS}0SotG;}{hjdY3ҋj 3Ҋkd0+ȋYhSoj0FE0PV SEjP[jhhEP4SoM؉3M_^3[\\.\MAILSLOT\NET\GETDCXXX%SoUW} 2\_] U} vEMSM A} w[] 39V9,tQTPlPPFWhSoSh y;5,Lq,dhSoh萑 NetpDcGetName: %ws: IP and Netbios are both done. NetpDcGetName: NetpDcGetNameNetbios returned %ld UQQVuFkW3hC[o}}JF6S9~Lig>F9~pu>Fj PF@vPPhSojEPFjvD#v@hЊSoWj vPv<;PWv(hSoh̏tBt=t56t-Zt%Bt[tt ]tK[_^ NetpDcGetNameNetbios: %ws: Cannot NlBrowserSendDatagram. (1C) %ld {{ e} t{ tjVSoE,t 8u,Cu(u$u uPuuu u8VE׃=3[odEE=E?USVW3}9}8[o}}=SoVE<׋p4[op4[o'VSo}<uEv 9EuE}qE_^[(UVuFE`WEPEPuuuVu uSoY =So׋`u!_9 5`^U]%Sof@@f;u+LEM;cpf@@f;u]+<EPC33E,} уVRP>EuGYcu Eu~0~4WF(EE,u} PWF,E,u|EPW$WFPSoCs }@PW WFPSoCu$|u E(+WVP3[o0FEtVWu$u htjjWV ǍPMW>p6GtPWSo96u_V5U$ES3VW]]]So}jdEX9E u]EGT0];tV9]9]9t)EPEPj]܉]j1[o;6GT벐NetlogonGl;tCSP SoSEPwlSowSoyXu;uE ;+ƃdrjdXPSoHu1[oYY;hSoP1[o E;99^tuXuE6E1[o&YuuuuuSW G W y%39]t u1[oY9]t u1[oY_^[UQVuEPVju EFuL1[o3^ U E3ɉM;tSVW9MTE;IM9M=EEH;vEftfu3fH]T;A!hj@SoE@FE~~ p0W苵 } tu F1ftfu FE3fFPvv 3҉E;jYf;tfufEfF} MQFCF0sA`9Ut E8u0EEE;E3_^[UE@\]6GT;]jy^P1[oYEPEPjuhSo>;xLDomainGuidUQS3ۉ]93[oVWh7[oSo53[o};6;6΋ff;Qf;tfPf;QQf;u3;{6WhHSoh hH4[oSoh7[oSo_^9][NlSetDynamicSiteName: Old and new site names '%ws' are identical. gc._msdcs.pdc._msdcs.3@EE33 4[o^(VhДSo;tC$;tPQŲ" jj DžUEVu DvMuF8Ptv08Pu+8Pu&nt@M^] 3@\t3ZtƅU@<[o3ʼnEESVuW}3ۉ+ƈƅPjPu V Jtj7 eƄ.CT;9QPPu Vs )lutDƄCS貱SQP躰 3@M_^3[_!␐U,E,S3VW]]]]]]]]܉];n8fP DEE0;E;E(;(8 PDE9]tuDE9] tu DE9]$tu$DE9]4tu4DE9]8tu8sDE9]uz{,3C,PVsCPs :dC(s$VPPt6~=6[o6rM_^3[4kUVut?W=SotP׋FtP׋FtP׋F$tP~-QV_^]UVutjv.VSo^]S6!U@<[o3ʼnEES3VuWE]]]82[o1ESEPSu j!Vӷ;EP3Hf!Gf9X^H;=';uՍ Pj@So;^EFE]FE F~;tVHf!;u8]&N E^039].^M_^3[i UES]VWkflC[o!ui#$&v'mhC[o VqhhSoSpC[oVTh`SoS|EnC[o&ÍP@u+‹ЋÍx@u+ǿ+QPuy1VhTSoSEѨӨVuSXޔÍP@u+ y.t@;.A3_^[]._sites._tcp._ldap.UW}tM} tG}tAǍP@u+‹ȋE Vp@u+ƍ^;Uw@Pu Q3 @_] 3UE>kSVW8E +5Soj0j@֋؅h}%Ex@u+ǍxWj։=WuP脘E t,x@u+ǍxWj։C WuPQ Et2Hf@@fu+|Wj։CWuP uE Ct{Es VPC,C(F9{tk`C[o(tE C-E$_^[] P;UMh3鉳C knC[ot CtƅdC[oC ()knC[ou C){ $0+#:Mz)Qƅ+#"C,Mi~)K@\UQQVuFW3};FLIS;N t!N ~ыLY;uIN@;Frh4[oSo3vNB;Fs(\[;s@;tLDFTF|O)N@FE3;tO9u9u 9utG;tPu$SoYYVV5SojwjS։EXPjSoEXuPjwjSօXEPjju1[ouSoXuu u}[t u 1[o_^UQQEV33Ʌ@FuutpQjSoEXSW+9QnTfT'+VQ~8j XQSRP(SoSo@TNTE90v03_^|w3@d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\netlogon.ch`SohY |Going to wait on mailslot. (Timeout: %ld) 93[oEb5\3[o 4[o4[oUQW}hSoWhOY PESo=d3[oS V; /7;/EXtPt VcV^[uSo_NlTimeoutApiClientSession Called UVuEE,e=3[ovpSWwwwt+uth wwQ}EE(;3[or}_[3,E^2g%<So%SoU(M3S] MVuEEEEEEEWiEPjVjEPuEPuE5SoMQj0EPjuuj։gHHE0pp[Mf ffffH@ 3fHEMQj0膊oEPjunWuj֋uHHE0ppʇMf ffffH@ 3fH3}t EP4}tu&}tu}_^[%SoUQQSW}39VhSoEPSouEu P2^_[ $MACHINE.ACC%So%0[oUX@<[o3ʼnEESVu EȋEW}EEVE3hSo@SủE؉EĉEЉET uuSۈhp9[oj52[oW菆}ąVEP,SoEjjEPWE؅jMQMQMQP}.EPu}GEPuuEPuu'VhSoSS jEPSVhHSoSS juSȇuEPuuVhSoSkS jEPS葇VhSoSPS juSwjYE@IujYE@Iu9Mtu }tu评EЋ5SotHt AJuEP֋EԅtHt AJuEP֋M_^3[ SNetrLogonComputeClientDigest: %ws: Old Digest: NetrLogonComputeClientDigest: %ws: Old Password: NetrLogonComputeClientDigest: %ws: New Digest: NetrLogonComputeClientDigest: %ws: New Password: NetrLogonComputeClientDigest: %ws: Message: UQQeWEPjNVEPEjP S}tuEjuPPuEu uPSExNuuP33EPEP>^_%SoUE SV3Wuuu;Ɔ7[oWSo];t?3[o;t6ff;f;tfPf;Qf;u3;WSoShSoj }O ;9SEPE ,SoDj.SxSoYYLEPEEP@u+ƒ?dju} u93ۉu;Pf@@f;u+?SSVME;3WSo];ދ53[otˋff;u^f_fPf;QuKfuESetting site name to '%ws' xtVVm2[otPGm2[otPIM3 2[oMW3[oEE 2[oESoE '3}#}&})},u hH4[oSo_^[SYSTEM\CurrentControlSet\Services\Netlogon\ParametersUQQSVu3W];txF;tq=SoSSSSQPSh׉E;tQMQjP`bu^E;t.SSuPPvSh;NbM_^[3UV7[oVSoEHuP PQSoVSo^]UQQuEP,SoSVWh7[oSo5@4[o@4[o;O]CCPjSot[} Fׂ3fF fEfESufPm}@4[o~p 5@4[oh7[oSo_^[ 95[oˆSWhSoE;!$;`ǍP%SoNETLOGON\ParametersUVu>60SoVSj3^]UQES3ۉE VW;tdf9t_}EPSW];uF9]Au9}; AEPVEPSu 7DSo@cVi_^[ jW@UU AMt!EAQR0 ] Ul@<[o3ʼnEVWEMQu }MQMQMQMQMQMQMQjMQMQPE SouEDKAtE3M_3^J UuhSou u ] UQQESVu 3W;f9j{E;:=EESo;tf9tEƍPf@@f;u+ȋEPf0@@f;u+<|?HW{;<hSoWV{u WV?hSoWV3uWV)E0MQPSVhLSobtVg;<MEًE_^[jWt<System\CurrentControlSet\Services\SYSTEM\CurrentControlSet\Services\NetlogonRejectMd5ClientsRejectMd5ServersIgnoreIncomingMailslotMessagesAllowNT4CryptoTryNextClosestSiteRegisterSiteSpecificDnsRecordsOnlyNeverPingAvoidLocatorAccountLookupAllowExclusiveScriptsShareAccessAllowExclusiveSysvolShareAccessAllowSingleLabelDnsDomainNeutralizeNt4EmulatorDisablePasswordChangeEnableChainSetClientAttributesDnsUpdateOnAllAdaptersAvoidDnsDeregOnShutdownAutoSiteCoverageAvoidPdcOnWanRegisterDnsARecordsUseDynamicDnsSysVolReadyRequireStrongKeyRequireSignOrSealSealSecureChannelSignSecureChannelAvoidLsaReplAvoidSamReplRefusePasswordChangeNextClosestSiteRefreshIntervalNextClosestSiteFilterAuditNTLMInDomainRestrictNTLMInDomainForceRediscoveryIntervalAddressTypeReturnedMaximumLogFileSizeDBFlagFtInfoUpdateIntervalSiteCoverageRefreshIntervalMaxLdapServersPingedDnsFailedDeregisterTimeoutNonBackgroundSuccessfulRefreshPeriodBackgroundSuccessfulRefreshPeriodBackgroundRetryQuitTimeBackgroundRetryMaximumPeriodBackgroundRetryInitialPeriodNegativeCachePeriodMaxConcurrentApiDuplicateEventlogTimeoutSiteNameTimeoutCloseSiteTimeoutDnsRefreshIntervalDnsTtlKdcSrvPortLdapGcSrvPortLdapSrvPortLdapSrvWeightLdapSrvPriorityMaximumPasswordAgeScavengeIntervalExpectedDialupDelayMailslotDuplicateTimeoutMailslotMessageTimeoutMaximumMailslotMessagesPulseTimeout2PulseTimeout1PulseConcurrencyPulseMaximumRandomizePulseDnsAvoidRegisterRecordsNdncSiteCoverageGcSiteCoverageSiteCoverageScriptsSysVolFollowing are the effective values after parsing =5[o$Vh NTLM Exceptions = NULL NTLM Exceptions = %ws %SoUE MA ]UQMEE,S],VEPjSui9EtdWuh+EPWEPju 3DSo++}+};,EW融EM_^[%0[oUQMEE^,VuX,WEPjVIu>9Et9Su&h؅5,EPSEPju 6DSou3ST[_^,},}r,ESڌEMƋf9bw9]talw9]u;o[M3^;ÐV6WinsockPnpAddresses List size changed %ld %ld.V6 Winsock Addrs:IPV6SocketAddressList8MH$W=3[o33[oPP3[oPRURhhp QQhf0So_uSoE=3[o@Uu41[ot'VqAu+^AwPjBu N ]E UE E$ 3[o`jEP3[oHQ0So3[oSX CVu3[o@ CW}3ɉ9K(7E9K>S E$U  U U 70hpSoh3@_^[ Received PNP opcode 0x%x on transport: %ws U,EeSXVpW} +x @So+SoًUSoxbEq}p}uu2ZE^}tE 0_^[% So=tQRPhZo')bE܋X;{KMF ;t"VR@PQFF MD EKF,;t$N(Q@PuEF,MD EKE}F$;t*MQMQMQMQMQWPSt;bKF8;b9~4t8} EPEPEPEPEPF0jPS,; bKu;aU@0@4xjYM+ˉ Mĉ@AEMԉ G[oEȉ G[oH VhToh PWƋM_^3[0InitializeSecurityContext: returns 0x%lx InitializeSecurityContext: %lx.%lx: %ws: called with cred handle InitializeSecurityContext: %ws: called UM3t8VqWv3IQ:t @ ;rk ȋ;E #_^]3%<2[o%@2[o%h2[o%d2[o%\2[o%X2[o%T2[oUQQSVuW3 To9%Y.Y7YFx;P@u+@EEPvljC,D Et?+ÉC0C4AQWx>C4D E~xtu+ÉC$vxWP> _^[}.3d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\secpkg.cUSh ToSR YYWQZEVu$WJZAZZELZ8')[ZPTZ@F G[oE( G[o3HW6vhx ToS WR_^[]$AcquireCredentialsHandleW: %lx.%lx: returns 0x%lx AcquireCredentialsHandleW: called UQeSVWh 7[oSo2[o<6E@{;G6u36C s 3sh Toh h 7[oSo_^[AllocateCredential: %lx.%lx: credential referenced: %ld O@:F_M9 jzXUVW 7[oWSo52[otEH9Nu;uWSo_^]vtݐUVj8j@SotLEf0W 7[oWFSo04[oW44[o44[oF04[o2[oF52[oSo_^];jVYYU eVu W>ƍP@uM+xG9S]W@VPX: PjSoE 3F>EtetSoj.VӀ}YYHP+Ƌȃ?]U EFt<.u ~F>u]E M4+3;Ee8U$M43҉u9UƄttMDBMtPM u48uAuNZx)|%EM R@PPAQ`]EEM;\u$f f+Mu f VE+G;3u So[_^ U@<[o3ʼnEM ES]VW;M.5Soj?RQPjW։tOj?|PuSjWօt9P|PPjhSoM_^3[2됐Netlogon AES128UP YVW}WI3;X9u XMj8ZQ@t8Q A,Vu 7wh`TohvL_^] q qQueryContextAttributes: %lx.%lx: %ld returns 0x%lx UEȁ tO;(X;X=t2=t+=X=3t=4XX3] US]V3t!tPFW=SotPV_#^3[]UE3QP0EuQQQuu 0]U@<[o3ʼnEES] E3VuWE}fEH<C;;<6;NC;^^VuEP5VuD5P5jjEPhhTo3,ƋM_^3[IVUEju u0] U$@<[o3ʼnEEW} jj MQ0h| VjYu^M3_US]V3t+tPFW=SotP׋FtPV_#^3[]UQES3ۃ} VW]m=Soj j@׋u;[SE PjFPhTo5L9[oL؅=} K5D9[oj@׉Fjju5D9[oPV5L9[o؅.E0)_^[BlockLengthUQVW=Soj j@׋ut^5@9[oj@׉FtM5<9[oj@׉FtCsState = 0x%lx NlSessionSetup: Try Session setup UeSVuW}`8[oSEGSo39<3[o9EESSo39 PSoEPSoMUW6[o8] G9d3[o_G9O3B WGM9U}uOGu E PSo}G| }jPSo| } PSo_^[U0=G[okd:\w7rtm\ds\netapi\svcdlls\logonsrv\server\lsrvutil.cUVu5@5[oS^Uju^z]6[o94[o53[o4[o 4[o4[o8SokjSSlSoPPpSoPPtSojlSo34d3[oTUL%So}SoK+-(uPQ E h2ToVh@3ۃ99] mu ؅ Gh G hP赥3f"NlStartApiClientSession: Bind to server %ws (%hs) %ld (Retry: %ld). %SoUQQEeEtEE SV5SoWh@8[o֋]P֋utjj{$WV1/ms`} W2]u{PjY3nPe5SoPh@8[oփ}P}mE_^[UQSVW3h7[o33]SoEu_f9l_f9X4[o^PhX4[o~^3h7[oSo]}PE [_^[UVu5@5[oL ^]UQQ@5[oE h5ToW#eYYh (Primary Domain)h`5ToWeYY5ht5To (Native) (NT 4)%8So%4SoUSVW3}}}9=3[o_u;k$V؉];VWS h@7[o}}Soh7Toj'YY9}vW!}u ]Whx7Toj ] jjPËHtu@u @ G,];}rh@7[oSou'EEk$UEU v`MEM)EX EME}jsYp@u+ƍpEV3R u U E$$Mu`8[oVSoE=l3[oel3[oEh4[oh3[oSoVSotW4]t"}vs tP$OuS }_^[ %ld:NlSetForestTrustList: New trusted domain list: t.ȍQU fAAfu+M ٔPju Dt*P*MA ΔP@uM+DEDuEE$E$2[oދE$_h8ToWeYY (Direct Outbound)U}S]VWq4Sot PVj5 Ct PVj" j_CI5IqhL:ToWYYC<:TotTEE:E th:ToWeYYEpEE}pC}  qύs7[o30Soj_VWd{YYth9ToWQYYsW_^[] Dom Sid: (Direct Inbound) 0x%lX (NT 5)h:ToWEEYYpEpEu@}t uVW h:ToWYY ) ( Attr:h:ToW`eYY뭐 quarantinedtBh;ToW,eYYe8 (Forest Tree Root)s hP;ToW 뼐 (Forest: %ld)Vj_Wh;ToWEPCPSoouh;ToW EPSo Dom Guid: %hsU0@<[o3ʼnES33VWu]܍}ݫf3]}髫f]Љ]Կ1To9 9EGM܉EQPWePSujV؅|/EPjEPEP ؅6tttltdPjjVwSp uOPEPWt4u;EM_^3[>E؃}s.kyUeS]VWPESoM}襥I}=SoA;P׃tM}tGE;6[outf}EPV`So3F}EPWGm}EPW2mujY}3}Z3}t uj M_^3[Setting LSA NetbiosDomain: %wZ DnsDomain: %wZ DnsTree: %wZ DomainGuid:% So%42[oU}"t }t] ]U}t}t}t2]Uuu uj ] USVW}EvruߋFE0t PSoEFtPf@@fuM+DAEtPf@@fuM+DAEE,KEuuj@Sou?^ u u}F j0Yt PSoEH0Ftxf@@fu+DEȋFtxf@@fu+DEȃ FC CFCFC{ }G s0tuPVE CGtuPVmE CGtuPVQE C^,M}tu u}uVu u!VSo_^[u^䐐UVWh j@SoþhVSouu uVVSo_^] U MVWh j@SoBEPf@@fuM +Qf1AAfu+D=hWSoEPf@@fu+uVWǃ Pf@@fu+f|G\t E f8\u VWV 3VhjVjhWSoEtFVMQuuPSot0u+uzWSo}t uSo_^j{^So,Ud@<[o3ʼnES]VW3$  ܶSo9jPWP 9J\P t \(P(dSotf(fhUTo;ߟPPSoPϟDRPQVWjS|?$PPjPPDP ,`6dXLVjjSQWqPPPPkI$3jY7[o󧋍$J#иf9Af8 ƅFPv \PF3fE\PvEP3QQfLE܍PWEP\Pl$jP$HQHQHQP3;}$39H\vS3P`ZэL0P`|2(tt0(Soȋ$G\;x\rQr 9$X\ k, x\@`fx,p0 T0 t t t$R`t  |$R`| (p \$@`t0(SoP$@`t0(Sx $@`f|0 \$@`HQp S7$@`D03 fCC$@`f< =$@`QpS$@`03 fCC$\,;H\IPhjhUTohLSo:Pƅƅ2#$xp>QlPa'$t ;2ɋj PQj3 vF3 @u@tqtPXSoƛ,; r 0To VH P39$t $9 t 9t hSoM_^3[d$|SYSTEM\CurrentControlSet\Services\Netlogon\AvoidSpnSet%WINDOWS_LONG%%Soj \6PF@vP*PhSoj\EPFjvD#v@hЊSoWj vPv<1;(2uu jdV/9yua3/FpEWDDDe[1}<"I1(01yuDE S VhܔSoUVhVToVVhVToVhVToVVh\jSoTjWI_udp._gc._kpasswd.f%F$"hRUuhWTojE HRHRHR-lRh 5[o53[oTSoR]In control handler (Opcode: %ld) jy_.ƅ_,_;g8: ȋ@E83u<;+=TQlQPP6hyN:K;XTod(WoZ(Primary QueryXTo3Wo31B 6R&Qƅ_5+Yt~`t jy_Pjv(hYTo,NetpDcGetNameIp: %ws: Couldn't ping any DCs. { .}E} } ESuu} =-E, -UH@<[o3ʼnEES]VW8[oWESo3{u`CPEPSoVVVjjhEEVEPEPhEPEuE@u؉uSo;ƉEdECWSo }쫫EHf@@f;u+PuEVjPdSo;>E VVjEEPh!EPVVVsSo;} NjM_^3[觻 U@<[o3ʼnES]#Vu& WE9 4[oO 4[o;;Q?-ąStckEhPSo#MQUfAAfu+MD=uhuG jhjjjhuESoE*jPSoPjSojMQ6PuSo9E3uSo} t*Et8HeapÍe_^[M3U3VW9M}7+u EH#;u9M vu uV E037@_^]uoP ;Ub;Ub]k,D }bP C}EEUaEu3ۉ9]-E ]9v&3E1Pu` EE M,;r3u39}Ab=So39]tu9]tu׋E9+-_^[US];VWtC +CU;.3_^[} uHE;Eb;E rE C9Ew,CPCC^XPKȉCK 맋Eπ}`uE8tjjN$Q0aExv`vVpe`UXE S3ۉEEVW} EPEPu]W]]]܉]]!;^9]2+}^E_EEлtSj@E2SoE^UEr N0EԿ;E2]e M;M*;*_EF YF^0t;K ;M_;E_S]|So^SSo9F^؋Ft6 ;M_; _Ш^]Ff|K^؋Ft2 ;M_;^Ш^]ȋFf|C^fFfEM#fEfFfEƋM#fEčEPEPF PF#EPvEvvv PEPEPk؅u^}]^);]T]E U ŰME@=uC]EE0;MUDUE V5SoW3;@MEE;@ME3f9}tuFFf9}tEt9}$t u$SoM,hFuW,hToPjWV;LE0S^F,E9}(CEC ECE C{&u(u39}$t}jCPF Pvu$SoPu$zf9}tUSF PEvPuLf9}t4SF PEvPu$3[_^,{륉;Ɖ{鐐UM VuW< +ǍP;Ur6v}tQuAQPu3f M3@_^]E 3E USWu 3h`dTojE]]].} ;'E ?VE u E;93[o’uP;56[oW SSWr;bh54[o54[oPEPE PEPu Sh0Tou;+WOSWhP}9]tu;]EEGVhdToj3 ^_[ DsrEnumerateDomainTrusts: returns: %ld DsrEnumerateDomainTrusts: Called, Flags = 0x%lx U ESV3W0E0EPVVVVVVVuuuuuuuP;|REVMQPg ;|;| 9}39}š9}К;՚h 8[oSo_^[ø6H"|%rmh^T3J@6,j"  #6iTogTogTogTogToiTogTogTohTofhToHhTohTo hTohTo hTo*hTo4hTo>hTohToRhTo\hTophTozhTohToiTo         UE_wiTo$hTo3]UQeEPuhiTou u computerU ES3ۉ]]]];<9] 39]*9]!VW=1[oEPSEPhkToShSouEHpTo]׃P!;*uu1[ouPup1[ouE1[ohkTou EhpTojP]=,;E%tpToEkToE]EPSEPuEj0u׃P;uu`1[oYY;DqDuu1[oYYE;NDMU 9]uPup1[o $;t5] 9t"0uSoYYE E 9u;tWl1[oY9]t u1[oY9]tu9]t ul1[oY_^[distinguishedName$)(objectClass=*)U SVW}3ۉ];9] t{E;ttu;tmEEPSEPhkToSu ]W1[oP;ÉE |%uW1[ouPWp1[o;uE %9]_^[t u1[oYE E ސUMV3ҋ\&QPu hlTouL^] %hs %ld days (0x%lx) ;) MQPGEPlhXmToh&%ws: Transport Address is still (%hs) msDS-HostServiceAccountl1[o颏`1[o阏Wl1[oYuuup1[o ;t;t9_dAuP G%= nUVW}t`u tYǍPf@@fu+VDP1u06t*ǍPf@@fu+DPWV( 3_^] QRPh\u f~\uuhV1[oYY;q<51[oMQ3hCP]փ E r<EPh7]֋ z<huj71[on<E^_[ defaultNamingContextobjectClass(sAMAccountName=0[op1[oŒ1[o鸌UQQESW33ۉ}};f} 83Vf;E s;u Pf@@fu+MQPu؅|}Gf;} rEuEP<6WT=WjuVe3 f;E s4} t(PuhqToVuW؃|'EfEf;E rϋEM|^_[û }1= %ws%wsUM 3tBw:|,SVW}EPuqVW34So|;wt_^[]3fw 뿻hSoS1;l韞SSjSSo;T@Ll鄞hrTo0;|l͞Software\Policies\Microsoft\NetlogonSSjSSo;D@l鋞9l9 ljjj,So;kƅk93[o!{ FU3 K[o;MK[o]1[o鿉1[o鵉1[o髉<2[o|@2[orh2[ohd2[o^\2[oTX2[oJT2[o@D2[o6`0[o=\0[o342[oQRPhjh؇To3uh7[otSoE53[o52[o52[o@4[oD4[o@4[o84[o<4[o84[o36[o36[o36[o36[o2[oV953[ot55[og>󐐐bVVofVVoUS3hSo]]E; V5DSoWMQSMQShToWP]օ7} ujSo؅EPSEPjWuօ}}3EPjYRPG9Ee~jC; P;4 ; ˉf9yEM; |\8[oVSo=<3[odmt<3[o3ۋEV83[oSoZu0So_^[=}5;;ΉuwHE)}MW E; vE8r3EEME3;KwH3[o?t3HE P+Vh8ToL5U 39 V5NlReadFileForestTrustList: Entry too big or small: %lx %lx. E Ee@V4[ogI3AU@<[o3ʼnEVwToVSo2phQPSo3fMphX9[oh܋ToPh?[ojhTojhOZoSoojhTojŠM 3^Y9[OyiNlpInitializeTrace succeeded %d MofResource80[o0[oh3j(SoPPSoYY2[oSo=:EPSoMEx  A щ4[o2[oC ;M~jY}K;~C;E~PC)~}u+VWP S1CE+EPu+QK ĺC +EPSuUWV0[o0[o41[o81[oL1[oH1[o@1[o<1[o 1[o1[o1[o1[o 1[o}1[oo1[oo1[oo1[oo1[oo1[oo1[oo1[oo1[oo%|SoU SE3P]>E;Vu;tEPF PWo;7Wu5 1[oSSSSjj֣D3[o?']SSSSjj֣43[oZ=D3[o5SotSSSS֣@3[o;Z=43[otSSSS֣03[o;\D3[o51[otW5@3[oP։E;@43[otW503[oP։E;/=D3[ot=43[ot=D3[ot p=43[ot htE8]thToh轆YYS_^E[Address list changed since last boot. (Forget DynamicSiteName.) US3hSo]]lE;V5DSoWMQSMQSSoWP]օujSo؅EPSEPjWuօ}u;EPjYRPF9Ee~TC;P;;ˉxf9EM; }u믾8[oVSo=,3[ofmt,3[o3ۋEV(3[oSo\u0So_^[=WhToSh趄3;ǍPDSetting DNS domain name to %ws f@@fu+jWjWt6EP@u+@ESmtPEPjSoVu W_FfsZ }{`{\fCXtuuV7 sdEE@LUSVW=So@8[oS׋uPE׋F`3;jFh;ku3~`~d~h~\fFZfFX5SoS_^[]uhToh@E0 D6PWE6SpWc; fx.tj.YfF3Wfw؅]ÍP8Set DnsForestName to: %wZ @u+=E$3[o3[o 6fX4[o=$3[o5 3[o=\4[ofZ4[o3[oklP?3;iif@@fu+D?PjSolGFWPBf NhĔTolF SoF t4[oF05t4[oFi\Device\NwlnkIpxjhTo!3ۈ]3]܉]h@8[oSo};Ph|Toh 9]t uSoE;SWm;*3G}ExPj@Sou;TX3[oE$ \\t5\3[o93[odžXSPSov6 @L@p@FWRWov^]P=tSo׍,PE9]tuuV ;{9]tuuWv ~th@8[oSoSSSuuu Vh@8[oSo;\ tuP] ;ijSWSEE;Pvth7E;}P5`<[oh7;u9]t-TE\ tH 4[o4[oF05 4[o3;E(0h@8[oSo$9] ҂@t %ws: Adding new domain UoUo%8Soj4hؙTo033u]܉]؉]̉]ԉ]]Љ]ȉ]h@8[otSoE4[o 4[o4[o$4[o(4[o$4[o2[oEPv ;u3[oS;EPEPEPEPEP;9]tEPn;EPh0juuuuuu$;93[ouuXSouWSo9$#$@@NXSPPuQFPV$W;s`3[oSo3;tV^9]tu15So9]tu9]tu9]tu9]tu9]tu9]tu֋Ëu뚐,Uo0UoUE S3;t f8J^3[oHi(VPj@So;B^E EEW3E$Gdž^v6F8}Zov<^@393[ovA(; 3[oruuuu VetQSWW=`SoS׉;t;3[o]} ]99[ot 9 ]_^[] V!]U4@<[o3ʼnEES]VuW} }̉Eԉu}tuCD}̋uЉC|tEu.VSoPjESo2uVP tRsTf>VW48uKXPwslVjC\PdSowD\}tIspf>vVu8CtPCxtcuEjP7hToEjPu؃[uVkt3@M_^3[y3f>f>'^UQeVW}fu MQjPfٖEfFPFŖQwP]N 3fA_^UES3ۉE EVW}EEP]]]];;TmEPxSokm}mmEPju]虗;mEf;cnfYn9XPnpSoVSSo;|mMVqPw=So EPj u,;mEf;mfm9X(m93[oymp(SoVS׋M;mMVq(PE @@PS׋u;lMRqPӨE3fAEp tED6PS׋M ;lM<6Wq P萨M ǃ fx.tj.ZfF3f pujY7[o3ljSSoM;:luEuP訔;l39]tu38]H P迕9]t uj 谕9]tEPm_^[%0SoUSVuWuu hToVh+vh@TojP臨 jjj Su pSWSoPSjPdSopu Ƅ0pP@u}+‰pWPhSoWop9cp3vp_^[] Setting our computer name to %ws %ws %0[oVhToShtjjj WVEqWsVSoPs {TWjCDPdSoqDD=3[otxClCpEqSetting Netbios domain name to %ws jSClF덉uU=2[otKSV5SoW7[oSֿ@8[oW֋uFXPhX4[op\5SoWS_^[3]Uju ]UQVuEfVj u!EPE 6PSovf3^03[oUHS3Wj3Y}]]]]]]؉]܉]93[oEEPhShTohLSoE;'9]W9][9]`9]dE;f9]f_[ÐSYSTEM\CurrentControlSet\Services\Netlogon\JoinDomainUT@<[o3ʼnEV5SoW}jEPEjEPhjWjPEPh#M_3^qUQQ3[oSVWE8u ]F4Eu ]DCSJ}DSjP蘢f(3[o S7uVu0PE F(;F,D9]D39E E9Et}u9] t9F(t E _^[7ۏDj2EU(SVW33EFPu3ۉ}}}}}xSoN9=3[oN}tu_^[ÉuN%So~U3@ÐU$SVW33GWVuu\;SEPEPEPWSNE;ukEPEPEPj?WhtToS9uyShToWoYYEPEPEPj?V0ToVSƷ}SuEuPS̎e3S9utu9u_^[tuEÐGetting cached trusted domain list from binary file. \system32\config\netlogon.ftjU$ES]VW}30EPEPE37HXptVjVjQPEPuuu;E39u PhSoEPE$;xEPhTou"cq3uE܋Mu9u9utu"9u_^[;tҐTrustedDomainListFALSETRUE %ws = %lu (0x%lx) RpcDacl = %ws Scripts = %ws Sysvol = %ws So45[o2[oU @<[o3ʼnESVWG9 4[o 4[o;Q蹷&܅Stck@7[oWSo2[o_WSo2[oeWSSoIÍPf@@fu+;LhToWS#à Pf@@fu+DPE-2[oSMQP6 SSo0S WP hToWShToW W$}@7[oWSo339EPhL QPjh@SSo2[oJ3VPSo`jVV52[oSoWSot;Heap^e_^[M3kW4[oÈPWS\netlogon.bak\netlogon.log\debugU$SVWh`ToEPSo=SoEEEP3۾VEPE]]]];z5SoSuֿ;ϖuDSo_^[\SAM_SERVICE_STARTEDUQSV5SoWj2h@[ojdwToSE֋=SoPׅj2h@[ojeSP_^[EÍEPxSo6}83[o3A[o#0[o 0[o 0[oy %0[o<0[oUuSoP>Mu[uu PSo3] UEfM ufHM MHMHPuSoPSo]UEfM ufHM MHMHPuSoPSo]UEPuuu uk|AVEPjjSo|!uujuujSouDSou^]EPW\SoV5lSo\W֋E\3@7,0[o0[o0[o(1[oI%So`2[otP2[ojL2[o`f;tfPf;Quf;u3 ff;t;tF3lSo93[oA[o3HYEE0FvPFPSuCUSVW3j[EE]EEE9E v4uF0So{9EwEEE ;E rjX;tG9]YP蚘E Y5SoXDj]Wu֋ }XuT3E;Xu9u vwu0SoFEE0FvPFPSuSujjuSoEE ;E r3]jSSo;|pVuSSo;|_VuSSo;|NVujSSo;|;VuVSSo;|)E39utu*_^[I~Wu W} h SoWdh>>3>s3H[oPPH[ohȨToWdr3A[o<TouToPA[ohpToWcr1 %ws = %hs UQSV3SShijTohL9[o]";HSj hTohTo5L9[oO;HWSEPjhD9[oxToW5L9[oO}uo;|djShxTohH9[o;HSEPjh@9[oW5H9[oO}u/;|$SEPjh<9[ohTo5H9[odO}u_^[þSHA256ChainingModeChainingModeCFBAES%L2[oUt@<[o3ʼnEVW V觔33[o;>VWP諓3[oH/ H 53[o;>% 3[oA3[oH 3[o9x>3fEWEP}So9=3[ot<3@WWEjPEP3[oh0;>3GNjM_3^aáh5[oU(VhToEPSo3VEVEEPEPhuEuE@uu So;^|E\Device\LanmanDatagramReceiverUlS3Vj 9[oEEXh2[ohp9[oEEȡ09[oPPj EPE]]E]]]E@]]]EE09[o]]]E49[o]Ĉ]ň]E89[o]Ј]ш]EE$9[o]܈]݈]EE,9[o]]]E`E(9[o]]]E E9[o2[o ^[ÐUQQV3uu953[otD6[oW;Oj`:[oVHSoE=2[oV2[oLSoǑ}_ȑ^ÐVh9[ohVYoh9[oY85O[ohX;[o59[o^Ð%0[oVW3j@[oP@[o7|Ij0@So@[or3O[oO[o5`<[ou Hr_^UQS<SoVWu8GPSoPEu$QuPuSo6QW6@SoM 3_^[ h Toh^YY:[oÐInitSecurityInterfaceW: called %LSo%SoU@<[oeeSWN@;MMУ2[o_[Ðj h@ToPEPf@@fu+@D?(PjSout=eVSoEF@E F ^(uWS蟏 ^$*3WoWoUd@0pSod Q0zﾭuutP`+Pd rcU;utXPd 4[o9M uST@d4[o TE4[oZoTE4[ocZoS]% 4[o먋E UVu3;u su u݃^]ÐU} u+]j,hTo趦M 3BU3u 2[o;;J;O[o;:J9ut^Euu uEu9ut>M EuQu>Eu} u 9ugJ9u J} JEES ToWoWoWoWo)Wo=Wo]WoqWoWoWoWoWoWoWoOWocWo2[oÃV@7[oVSoEPu WVSo^}ZUS]3;t @5[oV5SoW392[ouhP֣2[o392[ouh P֣2[o392[oM f9 | 2[o|hToh52[oX EPSoEPEPEPEPEP+hToP2[oxP ;|@;}:$h}4ToP2[ohpTo+xVPuu +PF+P2[oxP 3ۃ;0} 2[o?Lf9 j Zf2[oj Yf 2[o32[ofLSSh 52[oj52[oShSo;%} 2[oD}_^[ =2[ojWodToTToDTo2[o|SESSIONENCRYPTWORKERPULSE[%ws] %02u/%02u %02u:%02u:%02u [NETLOGON] %|SoUu hpTou M]UVhpTouSoYYrSSjSocW3@jDfFXhpTo~~ j v 7fFF,VhToj/W~F+^;_E 03[VhTohV ^]QuerySecurityPackageInfo: returns 0x%lx Package for securing Netlogon's Secure ChannelNetlogonSspij hTo}3uh@7[o=tSoE3C]h`7[oEEh 7[oE @5[o 2[oD5[o-152[o52[o53[o53[o53[o53[o53[o3[o53[o53[oP4[oT4[oP4[oVhSoq2[o;@FVVVV=Soף3[o;=FVSSVף 3[o;PFEPxSoNF3}@@3[ojhH0WoO;0F3蘟Ð Uo$UoUoUoUoUo%DSojhTo333G9} ;2VVﾭPP+5t3[o5p3[o5x3[ou So9;|D=2[ouh8[otSo=2[oE;1G=2[o;1;1赞 UoUojh(To;3uh9[oSoE4[o4[o4[o%3[o37[o%3[o:Ð~nUonUoUS3VW9E k@} d Y=TSoE P6[oSVׅ\@3[oj_n@hTohTo3[oeYYuBhTohToY=3[o3Y9] uSVPSo9O[o)@2[o3@_^[] 3TohSoY4[o4[o? 3Ð\\jh9[oHSoÐUS3VuW]]]]ܶSo9n 9] n h`8[oSo}  G0;2EEM@E; Pf@@f;u+\EPS訨 h@ToPu諃uESP薃8tMtuMhToVSC2 2S @tuMhpToVS t21 MI MQP31 ;}t$WuhToVS# }39 u E ] xPxSo0jSEE9t\99[o V%Ph@ToWO59[o\<E; hToWVOYY99[otQ9]uLh6[o|SoP h9[o59[o;] VPPhToWNuSujE H8;A p8p4QB=So 9]uFP^^ 9]! dž Vh`8[oSo9]tu3_^[NlSetServerClientSession: Delete successful. NlSetServerClientSession: Connection changing (%p): "%ws" ClientSession: %pNlSetServerClientSession: New discovery flags: 0x%lx; Old flags: 0x%lx NlSetServerClientSession: New DC runs the time service: %ws NlSetServerClientSession: New DC is an NT 5 DC: %ws h9[oLSoÐU@<[o3ʼnESVW3F}}}9 4[o& 4[o;Q輖);StckEuܶSo9d =Soh`8[o׋_ }|  }   tEIIY ]M} To PhPToVh]S蚖M]䋆tM tMM@h`8[oSou̘fVt}T 3ɍ]S39] jËCSt5[oiSuuuv|uRUvX#URQP辂h`8[oׅ P׋PSoS 338EWPuV;  hToVhh`8[oSo}tuݢEt8Heap Ǎe_^[M3qINlDiscoverDc: Found DC %ws NlDiscoverDc: Start %hs Discovery Synchronous%0[oQRPhZo/ZYNlAllocateClientSession: New Perf Instance (%p): "%ws" ClientSession: %p 83銈UEV3;tM +}4I ;[o4^]9v9 9999UMtE tHr;[oE ] ;[oUVu6vhpTohF~Vm%  ^]FreeCredentialsHandle: %lx.%lx: called USVW 7[oSSo52[o}3Ʌ`G9F@4;64BN F 3P7whHTohFSSo3_^[]DeleteCredential: %lx.%lx: credential dereferenced: %ld PIPEPSoEijVtTtHjYA d3[oPMSouEwEuhLTo V2VVNlTimeoutApiClientSessionU}SToSoeWuPu uhTouh39}Auuj;_u[]%hs: Unbind from server %ws (%hs) %ld. %SoUVu6vhpTohCVo% ^]DeleteSecurityContext: %lx.%lx: called USVW 7[oSSo2[o}3ɅW9V;;iF2[o7whXTohBVSoSSo3_^[]DeleteContext: %lx.%lx: context freed EhTojvFP@SoUEM @I+]ËNkhC[oEhLTohBYY93[oYKISMRetryTimer is up C,;or9S arLw,S*s Lπ9H Plw Sr PV9W, G,pf@@f;u+LLq4~9O G pf@@fu+DPES8`j_3Adh<Bs;tuK;ZjXfFEEPjSsEPhubEPj u蜬4UuEPSoSo84E@@fEPrEq4jEPEPSo`4EUVuWVVSSo`8[oA 4 u)Wӡ5[oiPvvWSot }  [ 3_^]UQQSV3W}]]9tHt?`8[oVSoh2)w$w }VSo39]_^[3󐐐UVuW3E}9S] ShToVh)=Soh`8[o׉.džh`8[oSo}[_^NlSetStatusClientSession: Set connection status to %lx \system32\config\netlogon.ftl%SoObjectLengthHashDigestLengthUSWu3ۉ]]eoE;z=SoV7[oV93[ot695[ou.Ef9XXt%5[oiP5L4[o5H4[o\653[ohToj < 3[o;zPטM VSou^n^9])_[DsrGetSiteName: Returning site name '%ws' from local cache. 1!Ɔ~v(hHToS;K ^NetpDcGetNameIp: %ws: No data returned from DnsQuery. yժr{&ty};?L,v9}WeuK}WuPuu h0TogNetpDcFindDomainEntry: %ws %ws: Failed to find%hsdomain cache entry with quality %ld/%ld jSs^霣EPEPuSoPuhtToU;9}Q黚DomainSidUQQS3W} 9]u;jXhp9[oP52[o諐uxgE;;VWEP,So;SjEPu;;M3;tV^9]tuf_[ UE u%hp9[oj52[ouuu ] "UQeVuƋuUE օuLSW`7[oSSo3[o# u ƣ3[o43S4E 53[oSo;} _[%E^ Ph Toj/4SKƅ SopNetpDcGetName: %ws similar query failed recently %ld p@4t&txDt麔PGD oފ$AzUSV`8[oVSoEhȯp pfVSo^[]FLPFHPvPvv,SS;ށPRyV~VE?$!e uPvu :v%So΋v/FAD߉F>9wPh0Toj2W訋3lnNetpDcGetName: %ws cache not for closest site and it is too old or user wants to find a next closest site and we have not tried it yet. %ld jEPPSou6F}bgt0ժWSoS0YY};T8hToh]0ƅNlMainLoop: Registry changed U3VuF MMME SWM;F t6EPVMH@v0Mv`QhToj/F X}q}=}EPEPE3u PVk؅}tv0hXToj// |M8]E}t EtM_[^NlPingDcNameWithContext: %ws responded over IP. NlPingDcNameWithContext: Sent %ld/%ld ldap pings to %ws 9}鸖;ŖUu 3PPPPui]K0'\F0\PQ_\y镒wZzPh@Tojr-F8ئ=6[oG4zjjjPw0P萨q0G0O(Qju43u0DPPP@XP4<8E{uSohDPTPhjjPCWͅ3luDGh(lGhx9E8Th)E8LhNetpDcGetName: %ws cache is too old. %ld U0V3W3}܉uEuuuuu#vxSVVu-؉];jTo9uuHSoPuu uhToShG+u EPSoVuEPS6߆3ۉE;956[o39 6[oVE EjVE|tu E 耆Eܾ}t tVENF M ȉEEt}tVV]S[}EME(ME ME$ME,M؉M܉HEMTpE[_^(I_NetLogonGetAuthData called: %ws %ws (Flags 0x%lx) %hs (with reset)US3V9]'jS^[] 3> PٞPFHvPxPhSoj(MtMQjvL3vHFhЊSoW#à QvPv<9;qP葜Wv(hTo饘NetpDcGetNameNetbios: %ws: Cannot NlBrowserSendDatagram. (ALT) %ld Puh`Toh'3~NlOpenNetlogonKey: Cannot create registy key %hs %ld. 53[oWhTohM'I` V`(7V`,QV}WSothUoSockaddrlen changed.hUoV6WinsockPnpAddresses List is now empty.hWSoh8[oSoE73 <lPuNlGetAnyDCName: Current DC '%ws' no longer available. (rediscover) NlGetAnyDCName: Can't ping the DC %ws 0x%lx. P3ۉ]93[ov1E X)u EE(;3[or3ۋPSo9u9tS}'#3ۍ;tP. ;tPf3h3WP@ ~~ shhZod5D$l$l$+SVW@<[o1E3ʼnEPeuEEEEdËM3YVVVVVVj#EHh UohYYSoVh Uohk VkSoVhP Uo؉]骹Wh Uoh5 麹3@ËehP Uo3@ËehUo 3@ËehPUoh YYEwCannot InitializeCriticalSection for NlGlobalLogFileCritSect Cannot InitializeCriticalSection for NlGlobalChangeLogCritSect Cannot InitializeCriticalSection for NlGlobalSecPkgCritSect Failed to LsaIRegisterPolicyChangeNotificationCallback. %lX Cannot create TrustInfoUpToDate Event %lu Cannot create ChangeLog Event %lu Cannot NetpEventlogOpen Vh(Uoh V~SjVhGE鉒EPjuE*;}VhUoVhUo뜋Ef;tRfwL9XtGpSo=SoVS׋M;uSjjh hj^MVqP;nhUoh9 YYSjS V.VhUoHf;tغf;w鞒EWVh Uoh SjVh 9hp Uoh YY06[o2h Uoh YYSjS V;E=So;tP׋EE;tP׋EE;tP׋EE ;t P`E E;P׋E駒ShhWohpWoϒAccount domain info from LSA invalid. Primary domain info from LSA invalid. Can't NlSetDnsForestName %ld NlGetDomainName: Can't LsarQueryInformationPolicy (DnsDomain): 0x%lx. Local Account domain info from LSA invalid. NlGetDomainName: Can't LsarQueryInformationPolicy (AccountDomain): 0x%lx. NlGetDomainName: Can't LsarQueryInformationPolicy (LocalAccountDomain): 0x%lx. NlGetDomainName: Can't LsaIOpenPolicyTrusted: 0x%lx. So؃u 3ۉsShUohw sCannot GetComputerNameExW() %ld u hUoVh9ڏPu hUoVhj_DomFlags & DOM_DELETEDE$4[ou-E zu H;uj_8] |SjWh |SSjuW*Wz]\v|So8] |Sjj뭋\@tdžXz zXzuhUoh@ 8] B|SjWhiTuhUoWuhUoh Wo8] |SjWhPuh@UohuPuhUohWuhUoh덡(4[o$4[oF05(4[o{3@Ëeuh(Uohb j_38] tSjWhiMEuF{9]t 8]tT;;{Vf*V+*{%ws: Cannot InitializeCriticalSections for domain %ws: BUILTIN: Cannot SamrOpenDomain: %lx %ws: ACCOUNT: Cannot SamrOpenDomain: %lx %ws: Can't SamIConnect: 0x%lx. %ws: Can't LsaIOpenPolicyTrusted: 0x%lx. %ws: Cannot set DnsDomainName %ws: Cannot set ComputerName SjWhi{jjh j_zEF$E]jEPuSoPujhEzShnhWohTUoDzjXWzSoSjuV61;|zSjuu6;dzSVS;SzPkSjWh-3@Ëej_3SjWhiEzzDomainInfo->DomClientSession == NULLE!mE*5 6[oN 6[o9]t ju2C]SEPSSjV4DD]Dj{^jWWwSqPMsP^sMfDS[okWoS[oS[o2eh4[oS[oGWoS[oS[oSo6[o 4[o;w4[oEPEPStWoVO:;tuVh)UoheMs QVhX)UoUtt PVh)UoEEEr ʍ<M;de0];]F(9Fy9F z9F{M9uulc;c} ;`G?u;RjuGt =T%BFkflC[ot*;4;}s G?u;}r+uVh(UoJ3ۅtjSt =T%jFPSvN v vjuvR;=3[ot-M9u%HknC[ou flC[ou M苉H4Hh((UoPh@U6E< ;}%cl+uPVh'Uoh}cPh'Uo|vh0'Uorv h&Uohvh&Uo^Ph@&UoV+Vh%UoL+Vhp%UoBuh%Uo8+uVh$Uo-Sh8$Uo%+uVSh#Uohj_bPh`#Uoh nbuSolbNlDnsInitialize: Bogus DnsNameType: %lx. NlDnsInitialize: %hs: Cannot allocate DnsName structure %lx NlDnsInitialize: Bad DNS host name encountered: %hs NlDnsInitialize: DnsHostName missing: %lx NlDnsInitialize: Bad DNS record name encountered: %hs NlDnsInitialize: DnsRecordName has no trailing 0: %lx NlDnsInitialize: DnsRecordName missing: %lx NlDnsInitialize: Bogus DnsUpdateLocation: %lx. NlDnsInitialize: Bogus port %lx. NlDnsInitialize: Bogus weight %lx. NlDnsInitialize: Bogus priority: %lx. NlDnsInitialize: size not aligned %lx. NlDnsInitialize: Entry too big: %lx %lx. NlDnsInitialize: Previously registered name noticedNlDnsInitialize: DnsHostName has no trailing 0: %lx NlDnsInitialize: %ws: Version wrong: %ld. NlDnsInitialize: %ws: size too small: %ld. NlDnsInitialize: error reading binary log %ws: %ld. 81[oVh@*Uoh GgNetpSockAddrToStr: Cannot convert socket address %ld 3f81[oVh*Uohh "CNetpSockAddrToWStr: Cannot convert socket address %ld fn9ExGGjWXGjzutt P8B&jWXG9] u 鄄h h+Uoh u 鴝NetpAllocUtf8StrFromUnicodeString: Integer overflow in size calculation at line %d 3u$M j^yFj.PYYgH9 jhhWoh8-UoJ)E MfHf+EMff PD1[oM f 0j_IEPEPjEPhWoI;HtWh hWoh2Uoj^ Iu[IFilterBuffer != NULLf9tPf@@f;u+)eE ;%eP@u+ e8eP mf9ePf@@f;u+DEdf9 ePf@@f;u+dh3UoheYY3fx\eef98t+^,f8\ufx\u IIPQS eE ;e^,8\ux\u IIPQSQe8ePEPS^(zfef98zePEPS^(F bef98ePQS^ ( qeNetpDcAllocateCacheEntry: not enough memory for NlDcCacheEntry. HtHhMhEhWShBUohj x^jP'zjujSh@BUoh ShAUoShAUoSh AUoSh@UoShP@UouSh?UozShX?UouSh>UodShx>UoSh>UoSh=Uo덍EPjEPuVku Sh8=Uok}vEjPShSockAddrIn)NetpDcParsePingResponse: %ws: not enough memory. NetpDcParsePingResponse: %ws: server name bad. NetpDcParsePingResponse: %ws:OEM server name bad. NetpDcParsePingResponse: %ws: opcode bad. %ld NetpDcParsePingResponse: %ws: IP Address bad. NetpDcParsePingResponse: %ws site guid bad. NetpDcParsePingResponse: %ws: domain name bad. NetpDcParsePingResponse: %ws: user name bad. NetpDcParsePingResponse: %ws server name not UNC. NetpDcParsePingResponse: %ws server name bad. NetpDcParsePingResponse: %ws: next closest site name bad. NetpDcParsePingResponse: %ws: SockAddr size too big %ld %ld. NetpDcParsePingResponse: %ws: SockAddr size bad. NetpDcParsePingResponse: %ws: Client site name bad. NetpDcParsePingResponse: %ws: DC site name bad. NetpDcParsePingResponse: %ws: User name bad. NetpDcParsePingResponse: %ws: Netbios Computer name '%hs' bad. NetpDcParsePingResponse: %ws: Netbios Computer name bad. NetpDcParsePingResponse: %ws: Netbios Domain name '%hs' bad. NetpDcParsePingResponse: %ws: Netbios Domain name bad. NetpDcParsePingResponse: %ws: DNS host bad. NetpDcParsePingResponse: %ws: DNS domain bad. NetpDcParsePingResponse: %ws DNS forest bad. NetpDcParsePingResponse: %ws: domain guid bad. NetpDcParsePingResponse: %ws: Flags bad. NetpDcParsePingResponse: %ws: Version bad. %ld  AkEPu SothCUoW YYjXkVuS8ktEPSoVhCUoyh'~jEPu SouVuSjtEPSoVhCUo7h._msdcs..domains._msdcs.NetpDcBuildDnsName: not enough memory. 9C0 *9EtMq(Ph8XUoh3+K0tF0tPQ)K,tF0tjjPQ)}9s,s0v0hWUoh}s0v0hWUoWxK,tF0tjjPQ!l)}s,v0hhVUo뺃}v s,hUUoWw>u{ u {$E+}tv vs$s s,hTUoWv4u WCjY7[o3@} jY3.9Ets,hTUoh u){ uUuJtE}(Ps(v(s,hSUohH(9UPv(s,h(SUo K(tQPSoYY(}vs(v(s,hRUoj9UjPv(s,hRUod(9U@Qv(s,hxQUo9U&Pv(s,hPUor9U Pv(s,h`PUoX9UPv(s,hOUo>9UPv(s,h8OUo$9Uv(PhNUo9Uv(hMUoW tvPSoYY (}ivv(hXMUo9EJv(hLUoh띃}1Pv(s,h(LUo}}v(s,hKUo'}Pv(s,hKUo7'}Qv(s,hpJUoFxtuy P'fx~x}tv(hIUoh E^xF|aD'Fxtuy PB'fx~xu+}tv(h@IUoPv(s,hHUoW}3&NetpDcMatchResponse: %ws: %ws: invalid query type 0x%lx 0x%lx NetpDcMatchResponse: %ws: non-good time server responded when one preferred NetpDcMatchResponse: %ws: non-DS server responded when DS preferred NetpDcMatchResponse: %ws: %ws: response not from a DC running web service. 0x%lx NetpDcMatchResponse: %ws: %ws: response not from a longhorn dc. 0x%lx NetpDcMatchResponse: %ws: %ws: response not from IP transport NetpDcMatchResponse: %ws: %ws: response not from KDC. 0x%lx NetpDcMatchResponse: %ws: response is from ourself and caller asked for AVOID_SELF. NetpDcMatchResponse: %ws: Responder is in site '%ws' but site '%ws' asked for. NetpDcMatchResponse: %ws: Dns server or domain name needed and missing. NetpDcMatchResponse: %ws: %ws: Netbios server or domain name needed and missing. NetpDcMatchResponse: %ws: %ws: Responder is not a LDAP server. 0x%lx NetpDcMatchResponse: %ws: %ws: Responder is not a writable server. 0x%lx NetpDcMatchResponse: %ws: %ws: response not from a Time Server. 0x%lx NetpDcMatchResponse: %ws: %ws: response not from DS server. 0x%lx NetpDcMatchResponse: %ws: %ws: response not from real domain DC. 0x%lx NetpDcMatchResponse: %ws: %ws: Responder is not a GC server. 0x%lx NetpDcMatchResponse: %ws: %ws: response for wrong account '%ws' s.b. '%ws' NetpDcMatchResponse: %ws: %ws: Responder is not the PDC. 0x%lx NetpDcMatchResponse: %ws: %ws: response for wrong account '%ws' s.b. '%ws' (but message from NT 4 PDC so use it). NetpDcMatchResponse: %ws: But Domain Guid matches NetpDcMatchResponse: %ws: Neither Netbios %ws nor DNS %ws domain matches queried name %ws %ws NetpDcMatchResponse: %ws: asking for GC and tree name doesn't match request %ws %ws NetpDcMatchResponse: Ping response with unmatched Netbios host name %ws %ws NetpDcMatchResponse: Ping response with unmatched DNS host name %ws %ws NetpDcMatchResponse: Ping response with unmatched host name %ws %ws %ws NetpDcMatchResponse: %ws: %ws: Neither Netbios nor DNS DC name available UJ45f9+3FE;tZEPjW^^fVMN^t6Wt,6F8p<PhYUohE6F8p<PhYUoh躼7Cache: %ws %ws: Cache entry %ld exists and was NOT used. Cache: %ws %ws: Cache entry %ld exists and was used (but account wrong). hZUoh薻YY3}jY3EwNetpDcFindDomainEntry: No search parameter is specified SWj~H[tP~KuF<_[tPVKh]Uoh輺 3XP.2u E+wReferenceCount == 1 dd2PEQp(h@aUohŵ2}u2i2j_VSom2PEp(h`Uoh耵FtP }ǐNetpDcGetNameSiteIp: %ws: Cannot NetpSockAddrToStr. %ld NetpDcGetNameIp: %ws: bogus address length. %ld %ld jY7[os3HCHH%H-#H,#H)#HWWPhcUo(6"zIWs VhcUohWWs 3hbUohӳ+#;t$%t-#t,#t )#HHNetpDcGetDcNext: %hs: %ld: Cannot NetpSrvNext. %ld 0x%lx NetpDcGetDcNext: %hs: %ld: Cannot NetpDcBuildDnsName. %ld NetpDcGetDcNext: %hs: Cannot Query DNS. %ld 0x%lx 01[oG]I] Q3U],]ZWv(hlUohv(hkUohձ jW_Wv(hjUoWv(hiUoWv(hPiUoh蕱n hhUojF|YYuAddressPingWait != 0UsedNetbios != NULL || (UsedNetbios == NULL && !WaitForResponce)NlDcCacheEntry != NULL || (NlDcCacheEntry == NULL && !WaitForResponce)Wv(h@UoS蓕(Pv\v(hЃUoSy ƆƆtFhv(hpUoSI 'v(hUoS3 hV.y|/z(Wv(hUo_tH*#t@{&t |&tWWv(hUoSȔ4(v(hUoS貔{&XƆXNetpDcGetNameIp: %ws: IP Not configured from DnsQuery. NetpDcGetNameIp: %ws: Unknown error from DnsQuery. %ld 0x%lx NetpDcGetNameIp: %ws: Cannot NetpDcGetPingResponse. %ld NetpDcGetNameIp: %ws: site specific SRV records done. NetpDcGetNameIp: %ws: cannot find A record. NetpDcGetNameSiteIp: %ws: Reached the DC limit %lu %lu NetpDcGetNameIp: %ws: Cannot NetpDcPingListIp. %ld  xWvjV3"PhUojl\l =Kt yn!h7[oSo2[otP|j@P 3f|h7[oSof|tKx|WPjV!Pl|Ph(Uoj͐l=Kty hUoj覐YY3tPpPhV /+x hk V$tPpPjV!VhUoj(*NetpDcGetNameIp: Trying to find a DC in a the next closest site: %ws, result is %d NlGlobalUnicodeNextClosestSiteName is null, so skip DC case, try next closest site %ws first, result is %d DC case, try local site first, result is %d v(hUoh- Kuu jdV'yU3PWv(hUouu jdV2Wv(hxUohč:NetpDcGetNameNetbios: %ws: Cannot NetpDcGetPingResponse. %ld NetpDcGetNameNetbios: %ws: Cannot NlBrowserSendDatagram. (1B) %ld NetpDcGetNameNetbios: %ws: Cannot query for GC using netbios. jj PF@v0PPhUoj FjjvD%v@hЊSojjv0Pv<}PhxUoWϋ f 5\E-\ue:\v0hUoj蘋 m\ uv0hUoW} M\&u v0hUoW%uv0vhUoWD\ShUon9Eہ[NlPingDcNameWithContext: Wrong return code from NetpDcGetPingResponse: 0x%lx NlPingDcNameWithContext: No such user %ws on %ws. NlPingDcNameWithContext: Netlogon is paused on %ws. NlPingDcNameWithContext: Invalid response returned from %ws. NlPingDcNameWithContext: %ws responded on a mailslot. NlPingDcNameWithContext: cannot write netlogon mailslot: 0x%lx NlPingDcNameWithContext: Sent '%hs' message to %ws[%hs] on %ws. XUWPThtVhUoTPlPjjtP# tyt %ll@ƅKAwPhUojW3Klf9zYoYVhUoh(Uoj虆 "YG,oYhUoS39w,tA9w tSƅ Soh`UoƅhСUojƅg 5| 鏀EIuPhUoVh/E]ЉEGUShUoVh9"/NlConfirmCapabilities: denying access after status: 0x%lx NlConfirmCapabilities: capabilities differ 0x%08x DC 0x%08x I_NetLogonGetCapabilitiesNlConfirmCapabilities: Secure channel is down %lx Qh Vh|Wo0D;ejh! VhXWoD1eNehUoSW Dž2kWhC VhWoCHeh`UoSh kWh` VhWoCEeMehUoSVpƅ[ pPhWWWWWWJu"p@$uhUoSVƅ 9pt pDž^ƅZjPh0UoShɉ.jd9tAf9u3ȋxp3uhUoSh] Ph0UoShhUoVUdjh< h1TohWoBdjh? h1TohWoAdPhUo: eG0edh8UoSh"{9ju=(6[ou :eDž@+e9 6[oe3eQh h1TohWo2A&fhUohTYYWPP7 7%=.uJ'PP $ePhUoePhUoPhUo#9elledhUoSh" 9t u95x6[ot@}3aDž"gPh@UoSh9hUohSYYDžfPh UoShRfh`Uo뛸"PhUohPUoShƅ Dž"hUohUoSh PSoPSoehUoShPhUoShXeeXPjjjSn-}PhUoXWe ƅƅ;tPhUohP3 uWSôtƅu+dt ujS菴tƅu WouWoPhPUoSVth^SWjS'|[P SoYYt9ƅ3^hPhUoSh dhHUoSV hUoSh ";B==tvhxtPjPtjththhWHDtx|)tx|jtPjPjhY9=3[ot txj|tPjPjhXj|jt*txtPWWjh /txtPjPjh Bj @3_;t=~=~h^PSybUobFailedNlSessionSetup: Session setup: cannot re-pick trusted DC NlSessionSetup: Skip retry failed session setup since same DC discovered. NlSessionSetup: negotiated %lx flags rather than %lx NlSessionSetup: Retry failed session setup (%hs account) since discovery wasn't recent. <Unknown>NlSessionSetup: NlpGetForestTrustInfoHigher failed 0x%lX NlSessionSetup: NlUpdateDomainInfo failed 0x%lX NlSessionSetup: denying access because of unmatching capabilities NlSessionSetup: old password succeeded NlSessionSetup: StrongKey required and DC doesn't support it NlSessionSetup: SignOrSeal required and DC doesn't support it NlSessionSetup: Session setup: Servercredential don't match ours 0x%lx NlSessionSetup: Session setup: cannot FinishApiClientSession for I_NetServerAuthenticate 0x%lx NlSessionSetup: Session setup: cannot NlMakeSessionKey 0x%lx NlSessionSetup: the server returned the same challenge as the client, stop now NlSessionSetup: Session setup: cannot FinishApiClientSession for I_NetServerReqChallenge 0x%lx NlSessionSetup: Session setup: cannot I_NetServerAuthenticate 0x%lx I_NetServerAuthenticate3I_NetServerAuthenticate2I_NetServerAuthenticateNlSessionSetup: Fall back to Authenticate2 NlSessionSetup: Session setup: cannot I_NetServerReqChallenge 0x%lx I_NetServerReqChallengeNlSessionSetup: Clear Old Password = NlSessionSetup: new password is bad, try old one NlSessionSetup: new password is bad. Old password is same as new password. NlSessionSetup: cannot NlGetOutgoingPassword 0x%lx NlSessionSetup: NT5 domain has been downgraded. NlSessionSetup: Only downlevel DC available NlSessionSetup: Session setup: cannot pick trusted DC NlSessionSetup: RODC is asked to establish a non CdcSecureChannel. Failing session setup. |Et @;E SoEPEPSSW;A93[o5Et蝽h Uoj )@YYu譙NlRefreshClientSession: NlGetAnyDCName returned NT4 DC WhUoVh M WӋ#E ;E t8jV誢t,u hPUoVhWSojjjVxWWSojhh1Toh8Uo+^!NT_SUCCESS( Status )NlpEnsureSessionAuthenticated: Try to find a better DC for this operation. 0x%lx NlpEnsureSessionAuthenticated: Can't refresh the session: 0x%lx Vhth1Toh|Wo0*鯜SohUoSh Dž^НPhUoSh鷝hUoSVDž hHUoSVDž PSohUoSV[ t.jntX3A;tu uXuSS@b}.P hUoSh^PSM h(UoSV}/Su逜SHlPSotHhUoSVJ ujPSoK@/PK|uDžxPhUohd; PP'uhUoh3;YY39vMf8u3BfA;r䋍3f PPSoHPPSݗ}(Ph8UoShPSohUo3@ SV PSoPP?} PhXUouBXu3QQPץkPhUot8PP薥*Ph UoNPPPQS蟧="t Dž=jhUoSV PSotwhXUoSV 3I;#PS}%PhUoShSPSo2PSo8PSohUoSV t[hUoSV PPSE}(PhhUoSh|PSojPP襾PSoPPPSo5[o1v Dž i\&ӗPPP 鴗S:hPjPjh L+jh銗P֗PїNlChangePassword: Cannot LsarSetSecret to set old password %lX NlChangePassword: Setting LsaSecret old password to same as new password NlChangePassword: Flag password updated on DC NlChangePassword: Cannot undo NlSetOutgoingPassword %lX NlChangePassword: undoing LSA secret change. NlChangePassword: DC refused to change password NlChangePassword: Cannot change password on PDC managed service account 0x%lx NlChangePassword: Cannot change password on PDC local user account 0x%lx NlChangePassword: Cannot RtlCalculateNtOwfPassword %lX NlChangePassword: Flag password changed in LsaSecret NlChangePassword: Cannot NlSetOutgoingPassword %lX Can't NlGenerateRandomBits for clear password Falling back to short password because I_NetLogonMixedDomain failed with ntstatus 0x%x. NlChangePassword: Password already updated in secret NlChangePassword: Successful response from DC %ws NlChangePassword: Unsuccessful response from DC %ws 0x%lx NlChangePassword: Doing it. NlChangePassword: Old LsaSecret is default value. NlChangePassword: New LsaSecret is default value. NlChangePassword: Cannot NlGetOutgoingPassword %lX NlChangePassword: Can't become writer of client session. SoPhUoh'- kCannot create Browser read event %ld SoP)]jEPEPuSof׋+Vu hUoh|,V밐Ioctl %lx to Browser returns %ld jF0E7}67@K]StSjPk]Ef( SF473[ouVu0ޝP輟E ݺ9] '9] E ܺXٺWSouhUohi+E oWhxUoWhUohF+ oNlFlushNetbiosCacheName: NtDeviceIoControlFile failed 0x%lx NlFlushNetbiosCacheName: RtlUpcaseUnicodeToOemN failed 0x%lx NlFlushNetbiosCacheName: NtCreateFile failed 0x%lx }YEmEmjhh0WohUo(lE$VSoef鉛EF!"[NETLOGON] Unexpected name type passed to NlBrowserSendDatagram"P P$3[o9P P/sP PhUoh(E h@EEPjEPjhGEhWohSoError in reading mailslot message from browser. WinStatus = %ld SoPhUohE(E h@EEPjEPjhGEhWo-hSo3 3[o@ C,U CM 3[o@ C$M7诏Mu7hUoh' tt  jh6[oS苈t7PؑPE0hUo3[oz$t{B$ 6[oMH 6[o;K|_M; vVK9HuNr xs3u7 @CE0EPaPE0hUoj&E Pu}Ex uIE EEPEP6ҥE t)7P PE0hXUoje&3 7PPE0hUoj<&E 06h]ZX %ws: Received '%hs' message on %ws %ws: Received '%hs' message on %ws: (Caller wants response on IP transport.) %ws: Received '%hs' message on %ws: (Discarded as duplicate of previous.) %ws: Received '%hs' message on %ws: (Discarded as too old.) %ws: Received message for this unsupported transport Error in GetOverlappedResult on mailslot read. WinStatus = %ld Wjjh (3VhUoh # VWjPhl[^SoPFVh`Uo뽐Can't set browser max message count: 0x%lx NtOpenFile browser driver failed: 0x%lx 3@Ëe352[oE3GP52[o[h8[opSo52[o;J =52[o49u u/952[ot<952[ot h8[opSo952[ot<;u79=06[otf9}uah5X6[oVVhUo55[oE;tjPhUohJ!5[o E؋Eh@E܍EPjEPVhJi-WhUoWaE;t= tPhUoh 5[o;9=5[o9}VWq ;uh Uoh YY}Hh@8[oSoKXf;Q5[opf@@f;u+4D0Pj@So}uh@8[oSoSQe3V55[o}WQj\XfCXGGHHPs\WQCXDE܋ChPsdwsh.|EtPf@@fu+tFVj@So}Vu55[ohUoVW=uWSou'SoEt,PuWhUohjuWh8UojU}ܾ$Uof3F3h@8[oSoSPE9=06[ou;ug9}ub];h5\6[oVWhSoS萂E;tePhUohE h@E܍EPjEPVhJ]-WhSoWE;t= tPhUoh 5So9}tu9}tu9}tuuE!NetShareDel NETLOGON failed %lu \SCRIPTSRenamed SysVol junction from %ws to %ws NlCreateSysvolShares: Failed to rename junction: %ws %ws 0x%lx %ws\%wsNlCreateSysvolShares: Cannot find primary domain. NetShareDel SYSVOL failed %lu NlCreateShare %lu SYSVOLEլC$PhUoW u0TouVOEt h@EEPjEPWhu'j9chUoWEeYYMMMQPVEM:OE-h@EEPjEPWhuThere is no binary file (use registry). Replacing trusted domain list with one for newly joined %ws domain. jjPh 3SoPVhVo髂h8Voh\YY颂@a;SjPhi@3;}Ph'VohH5So9t9t9t9t9t:So,wGPG,Pw@O QPh'VohWh`7[oSo=P4[oh`7[oP4[o`jjLuHHtHߡ|ht'Voh'VohRYYShKXoS魡h&Voh* 93[othx&Vo 9t6[oth%Vohcs h%Vo_lPP }uPh %Vo.SpN;u.p/;uph$Vohx ޠ +JJ/J0t JsQh`$VoWhGZHQjQP-PhP贿;uh$VoWh PPtp lVSWPt9SSPPjSWm|ƅ;OHQjQPվ"PhP詾jXj^fjyqPfPh#VoWjVPjSWHQjQPU PjP߽,PhP賽TxRjRQP苄 o;V;uxPPtp jQlVSSWPt9SSPPjSWuk|ƅ]   lZpHQj QP蔼PhPhaPhP5 PjP̂ 9sTXRjRQP薂9Xv-PXPPPtp  QljSWPtQSSPPjSWi|ƅuh0#VohYY;&WT);Dh"Vohƅ8[oVSo93[ouSWh5[o t=3[o4[o4[ox5[oi4[oVSo阚PhBWoSDž饝7[oVSo 4[o4[oV4[oSoSSWWVohYY!Vjuu Athh>VojV< F8Heap- P4[o! NlpDumpBuffer: Could not compute Md5. NlpDumpBuffer: Not enough memory to allocate Md5 buffer. } uh|?VoVYYE Pu Sou h;ToV E PSog(null)Qu h@VouF-3ҋ6tPu h`@Vo-3ҋ`tPu h,@Vo-3ҹPu h?Vo,%hs %ld seconds (0x%lx) %hs %ld minutes (0x%lx) %hs %ld hours (0x%lx) %hs 'never' (0x%lx) E EEPEPSo}hAVohJEEEYYEEPEPSoEPEPEPEPEPEPuuu h@AVoV,*%hs%8.8lx %8.8lx = %ld/%ld/%ld %ld:%2.2ld:%2.2ld Can't convert time from GMT to Local time } uhBVoj!YYju EPSo}PhpBVoj EPhdBVoj EPlSo%wZ Invalid 0x%lX (null) =4u*SSEPVEPSo=@t=5u EPVEP;MiPhCVohH P}thCVoh.YYjN5t%Su!iPSoPhHCVohuDSo2iNlWaitForSamService: error %ld %ld NlWaitForSamService 5-second timeout (Rewaiting) NlWaitForSamService couldn't make the event handle : %lx h4[oEtHeapEuj[ESoSh`GVoW hFVoWnYYj{SoSuhFVoWQ&JuhXFVoW83ۉ0!j[&Sot)PuhEVoWPuuhEVoW3So#&PuhWoWP4[oNlReadBinaryLog: %ws: Cannot read entire File: %ld %ld. NlReadBinaryLog: %ws: Cannot ReadFile: %ld. NlReadBinaryLog: %ws: size too small: %ld. %ws: Unable to GetFileSize: %ld NlWriteBinaryLog: file name length is too long NlWriteBinaryLog: Unable to GetSystemWindowsDirectoryW (%ld) Pf@@f;u+S\SjSoEuhHIVoh !uYYa0IVof56[oSu?[ jEPju2u,SoPhHVoh }t uSoe[nWSo-nuSo*nThe following error was encountered when processing RpcDacl SDDL: %#x O:SYG:SYLow resources when processing RpcDacl SDDL. Using default SD. jXx'hp9[ojP'VLSoM'ulEPuuSouEPu3FSotPhPKVouhJVoh t EPSo}&EPSo&ShxJVoh &Rejecting an RPC call due to error from AccessCheck: %#x Rejecting an unauthorized RPC call from %ws. Rejecting an unauthorized RPC call. Client info could not be retrieved due to %#x. W} tSV莘W膘;[te3jϋff;uftfPf;Qufu3uɋƍPf@@fu+tFǍHf@@fu+|Gf>u3@_BWhhWohLVo 銡7!E 鐡OldSiteCoverage != NULL3}} tu F j@P ~}3fF s}u F j@P }2yVhPVoh V=\{+fEEPSh`PVoVf}uuh0SoW^YYRhWoWL6YY&VhlSoW:ƃ Pf@@fu+tFf>uh0SoWYYRhWoW6YY&VhlSoWƃ Pf@@fu+tFf>uh0SoWYY~Rh\WoW讶6YY&VhlSoW蜶ƃ Pf@@fu+tFf>uh0SoWqYY>R#փڃGroup Policy is defined for Netlogon 59[om%9[oVt/u hXWohߵ VhBhWohToU%n <<[onu hXWoh襵 jhhWohTojnWhYSh|WoŦWhZShXWo鼦Wh[ShxaVoء鳦h|Ph0aVoh0部hhhhhŐInteger arithmetic error: 0x%x:%d ClientSession->CsState == CS_AUTHENTICATED5x3[o8So3SoPhaVohd Cannot set MSV termination event: %lu FAjhh TohbVox7whhbVohѳmDeleteCredential: %lx.%lx: credential handle not found CredentialList == TestCredentialhcVoh)YY逨AllocateCredential: Integer overflow in size calculation jhh Toh$dVo%|o7whcVoh~oDeleteContext: %lx.%lx: context handle not found ContextList == TestContext *uheVohֱ  heVoh躱YY ӥh eVohdVoh蘱YY 鱥&F錥AcquireCredentialHandle: Cannot allocate context AcquireCredentialHandle: Invalid Signature on auth data AcquireCredentialHandle: NULL auth data AcquireCredentialHandle: Bad Credential Use 0x%lx. >h3i   ؞! Ξ  ĞWhh Toh`hVodPhWohm 볃} s MQMQMQMQMQWPS3jzX;tPhhVo뼃K鼝PhgVoh(gVohYYMInitializeSecurityContext: Cannot allocate context Cannot pack UTF-8 netbios computer name into message %ld Cannot pack dns host name into message %ld ClientAuthData->Signature == NL_AUTH_DATA_SIGNATURE V Vjh{ h TohhVoV(Where - (PBYTE) PackageInfo) == (LONG) PackageInfoSize N  ;]tQ=t@= t/=ti=#tb=4t=^ Χ ħ 麧  鰧?wj0jVo$ jVo 鍧 郧=t1=o=d=t1=t=o  ;PhHjVoh(    iVojVofiVoiVo Unable to map error code 0x%x 3shHqVoh艫E 鰴E uEwEzg3shpVohOE v3sh@Woh,E S~EujhI h Toh Wo膗ұP3shPpVo$EPhwZEP3shoVoh踪P3shHoVoEPhz$dEñP3shnVoP3shpnVoP3shmVojh h TohWoۖjh h TohWobP3shxmVo[P3shmVoKP3shlVo;jh` h TohPlVouOutputSize == sizeof(Signature->SequenceNumber)NlpSignOrSeal: %lx.%lx: Failed to encrypt sequence number: 0x%x NlpSignOrSeal: %lx.%lx: Failed to encrypt buffer: 0x%x NlpSignOrSeal: %lx.%lx: Failed initialize crypt routines: 0x%x NlpSignOrSeal: %lx.%lx: Failed to encrypt confounder: 0x%x NlpSignOrSeal: %lx.%lx: Failed to set IV: 0x%x NlpSignOrSeal: %lx.%lx: Failed to load crypt system: 0x%x NlpSignOrSeal: %lx.%lx: Failed to initialize crypt routines: 0x%x NlpSignOrSeal: %lx.%lx: Failed to load checksum routines: 0x%x NlpSignOrSeal: %lx.%lx: Failed to initialize checksum routines: 0x%x NlpSignOrSeal: %lx.%lx: No signature buffer found NlpSignOrSeal: %lx.%lx: Cannot LocateContext 3sh{VohyE EwEzE 鸣3sh({VohEE 3sh@Wo3shzVo3shhzVoP3shyVo$EPhz]E£P3sh`yVohѣtP3shxVoP3shpxVoԀM骤5@5[otI3shxVoV艣EpphwVoVu jEPh`wVoV\YYjuE Vh h Toh Wo轏oP3shvVo?EPhwR;ƉE9P3sh@vVoP3shuVoP3sh0uVojhh TohWoIפjh9h TohWo.3shtVoh臢E +P3shXtVo3shsVohZE NlpVerifyOrUnseal: %lx.%lx: signature alg different NlpVerifyOrUnseal: %lx.%lx: Failed to encrypt buffer: 0x%x NlpVerifyOrUnseal: %lx.%lx: Checksum mismatch NlpVerifyOrUnseal: %lx.%lx: Failed to encrypt confounder: 0x%x NlpVerifyOrUnseal: %lx.%lx: Failed to initialize crypt routines: 0x%x NlpVerifyOrUnseal: %lx.%lx: Failed to load checksum routines: 0x%x NlpVerifyOrUnseal: %lx.%lx: Failed to initialize checksum routines: 0x%x NlpVerifyOrUnseal: Remote Sequence: NlpVerifyOrUnseal: (%ld %lu) Local Sequence: NlpVerifyOrUnseal: %lx.%lx: Out of sequence NlpVerifyOrUnseal: %lx.%lx: Cannot decrypt sequence number: 0x%x NlpVerifyOrUnseal: %lx.%lx: Failed to set IV: 0x%x NlpVerifyOrUnseal: %lx.%lx: Failed to load crypt system: 0x%x NlpVerifyOrUnseal: %lx.%lx: Failed initialize crypt routines: 0x%x NlpVerifyOrUnseal: %lx.%lx: seal alg different NlpVerifyOrUnseal: %lx.%lx: Filler different NlpVerifyOrUnseal: %lx.%lx: No signature buffer found NlpVerifyOrUnseal: %lx.%lx: Cannot LocateContext  | 龘SSo頀h8[oSSo h8[o+Ew+M GxPh}Vohљ Puh }Voh趙SoP =Puh|Vo̐NlTransportGetIpAddress: %ws Cannot DeviceIoControl %lx NlTransportGetIpAddress: %ws Cannot NtOpenFile %lx NlTransportGetIpAddress: RtlInitUnicodeStringEx on TransportName failed: 0x%08x hWohYY9 hVoh   PhHVoh uhVoWhVoVhVoPuhȀVoh茗 jhhWohVo SSo hhVohNYY| RQh`VopQuhVoh(U SocketAddressEntry bad %ld %p %ld. NlReadRegSocketAddressList: Unaligned for ULONG dereference: SocketAddress->lpSockaddr (%p) or SocketAddress->iSockaddrLength (%d) SocketAddressEntry bogus. NlGlobalWinsockPnpAddresses == NULLSocketAddressList size wrong %ld %ld. SocketAddressList size is too big, and its address count is %ld. SocketAddressList is too small %ld. SocketAddressList isn't REG_BINARY %ld. Cannot RegQueryValueExW to get socket address list. %ld NlReadRegSocketAddressList: SocketAddressSize too large: %d bytes hWohܒYY PhhVoh輒 uhVoVhVoWh VoPuhȄVoh臒 jhhWohVo~ SSo h`VohIYYz pQuhVoh,\ IPV6SocketAddressEntry bad %ld %p %ld. IPV6SocketAddressEntry bogus. NlGlobalV6WinsockPnpAddresses == NULLIPV6SocketAddressList size wrong %ld %ld. IPV6SocketAddressList size is too big, and its address count is %ld. IPV6SocketAddressList is too small %ld. IPV6SocketAddressList isn't REG_BINARY %ld. Cannot RegQueryValueExW to get IPV6 socket address list. %ld 2%{Ph0Voh6 2 {uSo*y81[o='yuPhVohzjhVoh zQRh؇VoS̎yhVoS蹎}3yhWoh蠎YYPzPVh`Woh舎5zAddress changed.List size changed %ld %ld.NlHandleWsaPnp: Cannot allocate buffer for WSAIoctl SIO_ADDRESS_LIST_QUERY %ld NlHandleWsaPnp: Cannot WSAIoctl SIO_ADDRESS_LIST_QUERY %ld %ld NlHandleWsaPnp: Cannot WSAIoctl SIO_ADDRESS_LIST_CHANGE %ld 2pPhVohp 2npTPhVohPpjhpVoh7 p;Ή`-oHh)h\W h; u;\8r3u4`d`\3;nhVo2[hȊVoS謋d3 [hWoh萋YY[oPVh`Wohx@oV6WinsockPnpAddresses Address changed.V6WinsockPnpAddresses Sockaddrlen changed.NlHandleV6WsaPnp: Cannot allocate buffer for WSAIoctl SIO_ADDRESS_LIST_QUERY %ld NlHandleV6WsaPnp: Cannot V6 WSAIoctl SIO_ADDRESS_LIST_QUERY %ld %ld NlHandleV6WsaPnp: Cannot V6 WSAIoctl SIO_ADDRESS_LIST_CHANGE %ld h8[oSoh`VohYY36qtPSnEP7nEPtPlhVoh誈psth H3[olhčVohu p%ws: Transport Added %ws: Transport Ip Address changed from (%hs) to (%hs) NlTransportAddTransportName: no memory SSo2sPhVohc 81[oE;u8]81[oE;u+=D3[o]oSoPhVo8PhpVo3PhCsServerSockAddr.iSockaddrLength != 0NlPingDcName: Cannot NlCaptureServerClientSession %ld NlPingDcName: No ping mechanism for %ws 0x%lx u]]YE\PhVoVWJ!J hVoVW3!E^9]^Yu= sizeof(*SessionKey)PhHVohn PhЧVo}EPEfPuԤ&}ShvhWohpWo9[uu}EfPEPa&}ShhWohpWo[jYE@Iu错NlComputeCredentials: Failed to encrypt credential 0x%08x NlComputeCredentials: Failed to initialize encryption 0x%08x hVoh^mYYhSoEPWEP饕NlBuildAuthenticator: timestamp of 0xffffffff has been generated, will retry SoPhVohl 2YCryptGenRandom failed with %lu TotPVj_W%l j_CPVW l ItPhVoWk hVoݎhXVoWkeYYuVWk hp`NhpVoSh: qNlSetNameClientSession: NT 5 DNS trust with no DnsDomainName. jhhܶSoh|WoN\SSotPӋtPӋtPӃe=3[ovpGtPtG d3[o ujhhܶSohWoANjX@PwuhtVo VEE(;3[or;u tWQ#'t P腀'SotPӃ'~Xt FTP-Ffl~tF\t FpPFFxt P7fx t Pc't PN'V[NlFreeClientSessionjh1hܶSoh|Wo!MPSoPhȵVoVh3 NlTimeoutSetWriterClientSession timed out: %ld %ld ShgWh|Wo~LShhWhXWohLSoPhVoVh-ReleaseSemaphore CsWriterSemaphore returned %ld WhhܶSoh|WoKY WhhܶSohXWoKL tbt> h0VoVSgwdSoP hVoVSHO h VoVh*N}u-h\jPE"h\@jPMjX3@ d3[o@9]u, ;t"PEE;uShhܶSohVoJE D(u'9 t9]uSh&hܶSohVoJEGM_N39=3[ov+t@PWhVouVG;=3[orՃ}$uNlSetStatusClientSessionClientSession->CsUncServerName != NULL && SavedServerName != NULLSavedServerName != NULLNlSetStatusClientSession: No thread handle so can't cancel RPC on %ws NlSetStatusClientSession: Finish RpcCancelThread on %ws %ld NlSetStatusClientSession: Start RpcCancelThread on %ws PWhHVoht[ ;tWhȼVo9u t$hTou2;tPh@Voh:[ }YWEP,So;ƉE |mEPEPVVVjVjVEPEPԥ;iEMǍPf@@f;u+|Gf97u3(uGu:PhVohZ u NlReadRegTrustedDomainList: RtlInitUnicodeStringEx on TStrArray failed: 0x%08x NlReadRegTrustedDomainList: NetpDeleteConfigKeyword failed: %ld NlReadRegTrustedDomainList: NetpGetConfigTStrArray failed: %ld NlReadRegTrustedDomainList: NetpOpenConfigData failed: %ld uWhVoh^XzuWhPVohCXNZPWhVoj^IE=?jBuEuSot̉Ex+uVp0u h@VoWWE鿟u hVoWW 镞PhHVoWW e+uVhVo+uVhhVohVoWWYY=Pvh`Vo+EPvhVo+uVh@Vo+uVhVo듋+EPvh@Vot+uVhVou+uVhHVogShVoWW S "ShhVoWV  Ep0u hVoWVKWtRh@VouRhVo3>\8 A,; u E 8E8E8飝NlReadFileForestTrustList: ParentIndex %lu is out of range %lu NlReadFileForestTrustList: ReturnedList entry %lu is not in the forest NlReadFileForestTrustList: %ws: Log file isn't for primary domain: %ws %ws NlReadFileForestTrustList: Index causes overflow: 0x%xNlReadFileForestTrustList: Cannot allocate entry %lx NlReadFileForestTrustList: DnsDomainName missing: %lx NlReadFileForestTrustList: DnsDomainName not zero terminated: %lx NlReadFileForestTrustList: DnsDomainNameSize not aligned: %ld %lx NlReadFileForestTrustList: NetbiosDomainName missing: %lx NlReadFileForestTrustList: NetbiosDomainName not zero terminated: %lx NlReadFileForestTrustList: NetbiosDomainNameSize not aligned: %ld %lx NlReadFileForestTrustList: DomainSidSize mismatch: %ld %ld NlReadFileForestTrustList: RtlValidSid returned false for DomainSid. NlReadFileForestTrustList: DomainSid missing (B): %lx NlReadFileForestTrustList: DomainSid missing (A): %lx NlReadFileForestTrustList: size not aligned %lx. NlReadFileForestTrustList: %ws: No primary domain record in Log file NlReadFileForestTrustList: %ws: Duplicate primary domain entry: %ws %ws %lx NlReadFileForestTrustList: %ws: Version wrong: %ld. NlReadFileForestTrustList: %ws: size too small: %ld. NlReadFileForestTrustList: error reading binary log: %ld. VEPhVoSKE̋F3FEЉu}WEPh@VoSKEԋGE؉u}WEPhVoSKE܋GEu}hVoS{KYYEPS jhVoSdKuYYVSih0SoSMK}䥥YYE}EPj u }Vh0VohK x}NlUpdatePrimaryDomainInfo: Cannot LsarSetInformationPolicy 0x%lx to DomainGuid changed from DnsTree changed from %wZ to %wZ DnsDomain changed from %wZ to %wZ NetbiosDomain changed from %wZ to %wZ }} jk,4hVoh+I h@7[oRk,th|Vo܋uSSot P/h'E  EE SSoiugiCan't convert to UTF-8: %ws Netbios domain name is too long: %ws j^}t P蝟'}P臟'j^SSoNjuPESo39 8tjju P耔t)Dt u PzyuC,; sK빋k,8tPlMu j^ud|tWDMtu&ShWh|Wo3|ShWhXWodShWhWo3tShWhWo{3jShWhVoe3`ShWhVoO3VShWhVo93t!G,;uG0;t EEM &h8VohrFYYj ^h`8[oSouhVoMVSMuMjjQP uh@VoVhq v ShhܶSohWoa2*PhVoWE fSoPV hVoShShܶSohWo2&3hSPvFPNlAllocateClientSession: Could not create new perf instance: "%ws" ClientSession = %p Error = %d NlSetServerClientSession: Could not delete old perf instance: Status = %d NlSetServerClientSession: New DC name: %ws; Old DC name: %ws NlSetServerClientSession: New DC is in closest site: %ws NlSetServerClientSession: Invalid data ClientSession->CsCredHandle.dwUpper == 0 && ClientSession->CsCredHandle.dwLower == 0ClientSession->ClientAuthData == NULLClientSession->CsServerSockAddr.iSockaddrLength == 0;tHeapEWhSh|WoQ.} Dh0VoVh ^4} jh>ShVo .IsI`II<IPhVoVh^S^SoFCF jhEShXWo-jjF0Puh8VoVSI h`8[oSot5[oiPSoh`8[oE׃}u gWhVoVS}u h`VoVSuSoPhVoVSu賝EdE XED]IVSized:\w7rtm\ds\netapi\svcdlls\logonsrv\server\nlcrypto.cNlAesControl: input IV(%d) is larger than cipher IV(%d) CEDu)WQx  jWX|jWXsj3W)[ǍPf@@fu+u3+jhl WoWDSo u%jE PWlSou ++  hT WoWSoYY;tj ^W/3W&)j X01234567890xc"j%;t }tj _E03XjWXjWXj5Sohl WoSYYthd WoSYYuE3hX WoSYYthP WoSYYu 3}ÍPf@@fu+ S+(j X]NOFALSEYESTRUEjf9Eu'X鮾"jWX-E3=Ëe3S4[o4[o4[oCannot reset NlGlobalTrustInfoUpToDateEvent event: %lu NT_SUCCESS(Status)d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\domain.c%ws: Unable to convert Domain name to OEM 0x%lx Domain thread asked to terminate d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\dns.cDNSClientSession->CsUncServerName != NULL: %ws: %ws (Error: could not allocate a buffer for UnicodeDnsRecord)%ws: [Unknown]\system32\config\netlogon.dnb%lu<UNAVAILABLE> d:\w7rtm\ds\netapi\svcdlls\logonsrv\idl\netpdc.cAACSetServiceStatus error: %lu ClientSession->CsFlags & CS_WRITERClientSession->CsReferenceCount > 0SessionInfo->NegotiatedFlags & (NETLOGON_SUPPORTS_RC4_ENCRYPTION | NETLOGON_SUPPORTS_AES)d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\logonapi.cNT_SUCCESS( Status )!NT_SUCCESS(Status) || *ValidationInformation != NULL!NT_SUCCESS(Status) || Status == STATUS_SUCCESSSamLogon: %hs logon of %wZ\%wZ from %wZ successfully handled on DC(UseHub is %hs). _SC_{262E99C9-6160-4871-ACEC-4E61736B6F21}_JoinDomainwithoutwithClientSession->CsState != CS_IDLEClientSession->CsUncServerName == NULL,d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\mailslot.cBrowserncacn_ip_tcpCannot pack HostName into message %ld Cannot pack DomainName into message %ld Cannot pack DnsForestName into message %ld UasSamCannot delete %ws (%ld) d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\nlsite.cCN=IsmServDsrAddressToSiteNamesW: Sockaddr is too small %ld (ignoring it) DsrAddressToSiteNamesW: Address familty isn't AF_INET or AF_INET6 %ld (ignoring it) %lx DnsAvoidRegisterRecords = NdncSiteCoverage = GcSiteCoverage = SiteCoverage = d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\perfwrapper.cNlPcReadCounter32: Invalid CounterId: %d OutputSize == MessageBuffers->pBuffers[Index].cbBufferOutputSize == NL_AUTH_CONFOUNDER_SIZECheck->CheckSumSize <= sizeof(LocalChecksum)NlpVerifyOrUnseal: %lx.%lx: buffer too small for sealing d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\srvsess.cCannot NlOpenNetlogonKey to get socket address list. Cannot write '%ws' key to registry %ld. Cannot NlOpenNetlogonKey to save IP address list. d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\ssiapi.cNetrServerPasswordGet: Comp=%ws Acc=%ws returns 0x%lX d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\ssiauth.cNT_SUCCESS(NtStatus)SessionInfo->NegotiatedFlags & NETLOGON_SUPPORTS_RC4_ENCRYPTIONSessionInfo->NegotiatedFlags & NETLOGON_SUPPORTS_AESuserAccountControl4130msDS-ManagedServiceAccountNlDiscoverDc: SetEvent failed %ld ClientSession->CsDiscoveryFlags & CS_DISCOVERY_ASYNCHRONOUSClientSession->CsDiscoveryEvent != NULLClientSession->CsState == CS_IDLENLPC_HPROVIDER != NULL%lx: worker thread handle cannot be closed. %ld 0x%lX %lx: worker thread handle cannot be awaited. %ld 0x%lX %lx: %lx: Ditching worker thread Dhf O]+H`[ K\F\F\%\[\[%\NK\HI%\[\[ [ ]L\[ K\F\F\[\[K\F\~[[K\F\[[') 'K\HI%\[\[$\[L\[ K\F\[\[ Wo Wo  H@<[o0!WohUQSVWh#Wo SYY`7[oVSo=Sol%3[oV3[o׍EP蠰u*uP{}Ph"Woh uLPhH"Wohn VSo%3[o=3[ouh"WoSI%3[oYYV_^[ChangeLogWorker Thread is exiting ChangeLogWorker cannot get new domain name: %ld ChangeLogWorker: Browser won't rename domain: %lx ChangeLogWorker Thread is starting 3[otPh#WoF53[oSo%3[oÐWait for worker to stop3[otjPSo=u=3[ou33@Åu53[oSo%3[oPh$Woh- ΐCannot WaitFor Change Log Worker thread: %ld UQeSSoVW`7[oVӋ=So393[ou93[ot-9Euh%Woj|YYVhSoVE}(rV׃}(_^[uh$WohEYYNlWaitForChangeLogBrowserNotify: Couldn't wait for change log worker exit NlWaitForChangeLogBrowserNotify: Waiting for change log worker to exit 3[ot t3(U3[otth&Woh YY#E 0`ph&Woh 3] I_NetLogonGetSerialNumber: returns 0x%lx 0x%lx I_NetLogonGetSerialNumber: failed 1 U=3[otDV`7[oVSo}u%3[oh(Wo3[oh'WohYYVSo^3]NetpNotifyRole: LSA setting our role to Backup. NetpNotifyRole: LSA setting our role to Primary. UV`7[oVSoP[orh(WohYYM S[o@P[oVSo3^]Too many Netlogon Dll handles registered. UQQSW`7[o3S}So}9=P[ovlVu4S[o0Sou(SoPh *WohE S[oGu0Ph)Woj EE;P[or^S=P[oSoE_[NlpFreeNetlogonDllHandle freed 0x%lx 0x%lx (%ld) Cannot Free NetlogonDll handle. %ld UQ3t3ÍEPjjh9!WojjSo3[ouSoPh*Wohy 3@3[oÐCan't create change log worker thread %lu UQQV3uu953[ou3\9ut#u|Sou @uSoEW} ;t@@EE ;t0FFEEtKSV؅u VjSECE }CsDtuuV suct1PwFV=So 3f FVC Pu=SojC P׋E t%QpFVE  3f FVjCYYuV}th.WoV"YYuV}th-WoVYYuVh0SoV5SoYYWֿ`7[oWSoT4[oP4[oCWT4[o53[o8SouSoPh-Woh 3[_^Cannot set ChangeLog event: %lu Dom Guid: Obj Guid: Sid: Rid:0x%lx Dom:%wZ %wZNlSendChangeLogNotification: sent %ld forUuy3;| QQQQQQjJ]U@<[o3ʼnEUS3ۉU]93[ou3=3[otM!E#;MtVW;t ;t ;uSSSSSRjE踀U;t;t;u@3;uj;uj;ujY3}쫫SSEPuMSuS9]|EE_^M3[US393[ou3f=3[otVuu 2[o u 2[o3;u)5 3[oSouSoPhWoh SSSVSSj^[]U393[otPPPuPPj*}u$V`7[oVSo3[oVSo^]US393[ou3J=3[ot5 3[oSouSoPhWohS SSSSu S8]tjj*[] UW39=3[ou3A=3[otV5So9}t uEP֍}uEPWu EujjPj^_SVWhH0Wog3;}Ph2Woh 3[o5So;t P։3[o 3[o;t P։ 3[o`7[oVSo=P4[oP4[otShht2WohD2WoVSo52[o_=pSoh 7[oVס2[o5So;t P։2[o2[o;t P։2[oh@7[o_^3[ÐIsListEmpty( &NlGlobalChangeLogNotifications )d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\changelg.cFailed to LsaIUnregisterPolicyChangeNotificationCallback. %lX UE3҉E V393[oth3Woh YY*jY9Mw#E@PP 3M1^]I_NetLogonReadChangeLog: failed 1 UVhx4Wo V83[oYYtth04WoVYYE 3^]I_NetLogonNewChangeLog: failed 1 I_NetLogonNewChangeLog: called 3[otth4Woh WYY3 I_NetLogonAppendChangeLog: failed 1 UE VPh5Wo V3[o tth5WoVYY3^]I_NetLogonCloseChangeLog: failed 1 I_NetLogonAppendCloseLog: called (%ld) U(V5SoW3PW}܉}؉}}}}E։E;u ESPEPSj R#+}sdjuuSottPEEPSj #E܉E;t΅@E39tE؃9u};uDh9WohTYYjh]hWoh9WoEEPj@։E;tWj@։E;tԋu]9Eػ8EEPEP3GWjWWj2[ot PuhX9Wo&EH t Quh8Wo;tuQh`8WoS UM}؃E6E𥥥e39}t u,2[o}E܋EM܍49>Y3ۉ]}=So[tu39u|EME MEM,9ut9uvE4,2[oF;uru׃}tu׋E_^ NlGetNdncNames: DsCrackNamesW returned %lu names for %ws NlGetNdncNames: DsCrackNamesW substatus error for %ws: 0x%lx NlGetNdncNames: DsCrackNamesW failed for %ws: 0x%lx LocalReAllocLoopCount < 20NlGetNdncNames: GetConfigurationNamesList returned 0 entries UE W3}}};t8詿th@WojYY SV5SoWj@֋؉]u Wj@֋utVS}Wh@WohG ~ÍPf@@fu+t S(EtƍPf@@fu+tV'E{=So@8[oSuuvd1ut vdh?Wovh1tuvhh ?Woh@E tuvhh>WohFht PfhEeFh5SoSֻ7[oS׋}W53[oc1Wt 53[oh=Wo53[oF1tW53[oh8=Woh ?E tW53[ohDomFlags & DOM_DELETED) == 0NlDeleteDomain called UQQW39=2[oSSoV@8[oV=2[oӉ}}E4[oE$4[o\tTWVSoTu&VSoh`HWoWh hSoVӃTVuSoTtjhhWohReferenceCount == 1NlUnitializeDomains: Sleeping a second waiting for Domain RefCount to zero. U4@<[o3ʼnESVuW3 j}Љ}[9 4[or8 4[o;r(Q1te;t ]Stcku'h4[oE;t HeapÉEu]UEPEPV;E;t PhOWo'38E@X;:OWoOWou OWotڃu OWotSPh`OWoVhIXWSo39$ue393[oSFXQɃQvtPFPVO$;u&WSohOWoVh EQ\t $`3[oSoWӃX@8[oWSo\u=VLE؅})WuhNWoVh_u5?E\WӍPSopQxSo9?u썆PXVv]EPSVSE:3[oMQ t5[oi3WjQ% W @PWuvtS#EPF$PWWVE\@E9=3[o9=3[o/;+E3\uSh0 hWohNWo蛶Xt93[ot{9]tvVg;tj56[oW jtTtCh^WƊSSuWwu)`8[oSSo SSo=3[otW(Woj3Wg=3[o SVQE;PhHNWoVhvuhNWoVh`Eh@E؍EPjEPjhia3;tXWWWWjh O3C9XuNE9x,3Wjp,E܋@,hEԍEPWWS}h i]ah WoVh E$SS]9]tX9]tu!E;t8HeapuP4[oEe_^[M3sNlUpdateRole Failed %ldNlUpdateRole: Couldn't register DNS names %ld IsPrimaryDomain( DomainInfo )Cannot initialize NT BDC list: 0x%lx Cannot allocate PDC ClientSession Changing role from %hs to %hs. BDCNONEPDCNlUpdateRole: Failed to NlGetRoleInformation. %ld UQSVuWh$RWoV3h] V;t= u9$u-WWhQWoVj8] SSWhi贕SEP$SSV0;}1WhQWoVh8] tSjWhiWc9o9]uSh hWohQWoͱESY'uj_=VL;}/WhPQWoVh/W98] tSjWhE93_^[Cannot NlInitTrustList %lX AccountRid != 0Cannot NlSamOpenNamedUser 0x%lx Couldn't NlUpdateRole %ld 0x%lx. Create domain phase 2 USVuWhpUWoVS @8[o=3[o\t E*t Et EMM#W\SoEthUWoVSe jVhthTWoVSH VMth`TWoVS- VI2thTWoVS ViPhSWoVhWSo\@h WoVS\߃ WSo_^[]hSWoڐDomain thread exitting Invalid DomFlags %lx Domain thread started doing API timeout Domain thread started doing update trust list Domain thread started doing update role Domain thread started doing create phase 2 Domain thread started U$SV33ۉuuuuu]uathXWojVYYu9u u hXWohWEPEPEP;}%P%4E8]VjPh o@8[oVSo$4[o$4[o;t3C;uv(Pj@SoEuVSoE 5$4[oK\u@39]vE@pv`fuC;]r;]uVMEE4E6;u39]EE܋5$4[oe;t4\uuE@pv`u 6e;u҃}uEEPE@h@uu uujpj=EuuEn}uEC;]kh@8[oSo39uvE4;F;ur3=So9ut}vE4,2[oF;uru39utu9utu_9uu E;tME^[NlUpdateServicedNdncs: Ignoring update since DnsHostName is NULL NlUpdateServicedNdncs: avoid NDNC update in setup mode UE8u @$}u_jW;oC[oh5hnWoh诫 u"hj^hhnWohz SˋE p`Et̍H@u}+pGdu܅tP@u+@E؋GhtP@u+@EԋEtPf@@fu+DEЋMԋEE؍MD04QPuE}hhnWohǪ VEPEj YRP!}hȍEPuu}huj@SoEu܋uuX4X0SX]܃ jX+E+EdtEuVX wdS )uhtEuVXwhS )uu E\x3ɥ9Mt!uuX$PSe)uE 3ɋUP(UM9 M9Mr}9Nx,x0jYJuLttH,p0d1NEH,@0\E@MtEPSà Hf@@fuU+D)EEM@,3EuE ;2L9 3[oto7[oWSoE d4[o`4[oH3d4[ou952[ou6V3CShS[oc@t2[oE phmWoh舨 j^WSo=So[ JRH׋UčE;u}tu}tu׋_^NlDnsAddUpdateRequest: %ws: Cann't queue DNS Update Request work item NlDnsAddUpdateRequest: Integer overflow in size calculation at line %d NlDnsAddUpdateRequest: DnsHostName: %ws. Invalid Ndnc domain name %ws. NlDnsAddUpdateRequest: DnsHostName: %ws. Invalid site name %ws. NlDnsAddUpdateRequest: DnsHostName: %ws, SiteName: %ws, DnsTtl: %ld U0@<[o3ʼnEES3ۉEԋE V3E؉]E];t3f93[ou XWS+};u EWB;uhuWo56[oV/EuhtWoWh E^SVEd;ÉEEPPP]3PuWjVŽE|_ ujhkhdWohWouԍE55[o53[oPEP tE} PhXtWoW}6t}t9]u GfPjjVuu!PEPPuJuhsWoVhE}|E"uVd}tTjVEgcE|AE0 7hpsWoh@P}t?tWhu }})E;P[othE؍EPjEPjhKEࣨP[o_t}tVCV@}tuvEM^3[Send a Dns update request to %ws. DnsNamesCount: %ld NlDnsSendRemoteUpdate: denying access after status: 0x%lx I_DsUpdateReadOnlyServerDnsRecordsNlDnsSendRemoteUpdate: Can't become writer of client session. NlDnsSendRemoteUpdate: This RODC has no client session with the Hub DC. UU VuhVE|HUM +Sj2[t++u Wu+tt @IOu_uHz[^] Up@<[o3ʼnES]VW}w0VS j EPu SohHSoVSl EPVSa GklC[o0fueGPfuh xWoVS5 fu hxWoVSEPwLwHu EPVS PhwWohg fu*hwWoVS wDVS hwWoVS $hwWoVS j EPw8SoEPVS hHSoVS j EPw<SoEPVSj HhHSoVS[ j EPw@SoEPVSA hHSoVS5 wDVS+ hwWoVS HM_^3[מ IN SRV . IN CNAME NetpSockAddrToStr failed with %d IN AAAA IN A UVhjSot"WVu uVVSo_^]USVWh@7[oSo=X3[o} ]v/G uh`WoH$t f9tQp`hTWoSr EPuSC55[oWQuWoPGkXC[ohWoS3tVh@7[oSo_^[]ÐU@<[o3ʼnEE$S]Vu W}h (jPYE t @5[oh@7[oSo u h`WohTWo hLzWou脜 E$Pu uBu,F \F`Fd$PTh/uWoP,kXC[ohWou tVh@7[oSoM_^3[6%hs: U$SVWh7[oESo h4[oh4[oFt;At5A0p@u+ƍADtx@u+Ǎtu ;uuj@So}uh7[oSoE_ +5h4[oljEuh4[ouwueRF5F0x@u+@E썸FDtP@u+@EGEFCF4FkflC[oC uj PYuCE@LChjPc cF8mCF=rhHWohiYYh WohV$ jhjjjhVSoEuCSoPVhWohEEh@EEPjEPjhu7&h4[o]h4[ouG2[ouSo7[oSSot>HeapuV4[oe_^[M3Ë]8| ~+~Ph`Woha hXWohW W55[oShTWohWǃ H@u+j؍EPSWuSot9]u;]]h4[oRSoPVhWohEΕSuVhWoh貕NlDnsWriteLog: %ws: Write bad byte count %ld s.b. %ld NlDnsWriteLog: %ws: Unable to WriteFile. %ld ; NlDnsWriteLog: %ld: Invalid state NlDnsWriteLog: %ws: Unable to create file: %ld \system32\config\netlogon.dnsNlDnsWriteLog: file name length is too long NlDnsWriteLog: Unable to GetSystemWindowsDirectoryW (%ld) U@<[o3ʼnES]VW33jXQ,P(J jYWoj}Y}3Wu{&;9=46[ouD,#9=P[ou WWWWjh讆P[oM_^3[薒j@WP=P[oC05[oCklC[o fuXsPfu3BfjZfSHROfsHjZfjZf3cfujZfjZfSD>j!Zfj ZfSDfS8ffSM7F P׋F(u6[o;v 6[o;sF(N(_^[ U@<[o3ʼnEUME VuW}RQWPVPkhC[oSu5[oDž >&t.'t) u5[oDžX5[oDž 7[oVSojjS55[o5|5[oWPu@uVSojX[M_3^{HWoWP@V3 9|5[ou=5[odu;tOjPjdPPuuj^h7[oSo{HWPV 3ېNlDnsNtdsDsaDelete: Name queued for deletionU SV3W}]]];ZWLu;u4j.WxSoYY;uj{_KFFf9tV}E;ujVW_E;tEPM;} VhWohBy V?]3ۋEk9hC[olC[ofoC[o3[ouUUfu] }u] t\j3Y7[otLnC[ouuujSut,EE390v!uutSuu#EF;0rE}(E3WWj{_39]tu蕗9]tu舗9]tuK_^[NlDnsNtdsDsaDeletion: Cannot LsaIQuerySiteInfo 0x%lx Ux@<[o3ʼnESVW}3ۍEPEP}]]]]]]];tVhWoWhwuu;vNPj@SoE;u9]t uSojXVuP0E;tPPhPWoWj,wh7[oSo5h4[oh4[o"9~ uNE tujVϺ6;u\W0\ EtMEPh`W/k3;tVVhWoWjvuEPhWk;tVVhWoWhrvu]EhC[oe8[oWSo5 6[ou0=XC[o PVSoYYtƍPf@@fu+tFf>t EWSo39}t XC[ohWouh@urlC[of9=<6[oU9=h6[oI!}9}=uftfu[39Eu MU9tIVPuut6EPEv6UWWEPXC[ohWouh5u}EE;E뀀nC[ouMft9=h6[o3WWuun;VVXC[ohhWouhtudhC[oMtM;tA 33;vBpMj6uu tWW6XC[ohWoujot}Muċ}E`h4[o5h4[o>t39~ u.FthWoVh@6 jV\tf 6;uh7[oSo5So39}tu9}tu09}tu#9}tu֋EM_^3[sNlDnsAddDomainRecords: marked for deregisterCouldn't NlDnsAddName (%ws %ws) %ld 0x%lx. Couldn't NlDnsAddName (%ws) %ld 0x%lx. Couldn't NlDnsAddName (%ws %hs) %ld 0x%lx. NlDnsAddDomainRecords: Skipping name %ws (per registry) Couldn't NlSitesGetCloseSites (GcAtSite) %ld 0x%lx. Couldn't NlSitesGetCloseSites %ld 0x%lx. Couldn't DnsScreenLocalAddrsForRegistration %ld 0x%lx. NlDnsAddDomainRecords: Failed to get ip addresses that need to be registered %ld. U@<[o3ʼnESVW3hSP jHt4Ht*HuC9t C0t83[o3[oCC Ps$VtZK0PDXC[oshXWohmhPC0tȺuC0Dj@jPkC(lC[o @fu% jXfjXfCJj!Xfj XfCC0fD fC0fDfC0fDfj\jPfDžDžC0 |PfujjP3&3PPPP&u&hWos(sPC0PV1hWo:3PPQP%u h(WoPhWos(sPC0PhC0 L,t@P,,|jYj3Xfj0jjjAPjP1[othWo@jBP PjB@P/(wPhWoEjPhWoEjP菝 $Ew$hWojPyhWojP[ Plsltt_t[p@xjE|h@EĉlPj(PC038LjQ[lt=3[o ;C,F7[oSSo393[oVSo2[oVSot ;tSSoM_^3[i%2[o7[oVSo%2[o뫐NlDnsUpdateRequestWorker: Failed to deregister (%ld)NlDnsUpdateRequestWorker: Deregistered (success)NlDnsUpdateRequestWorker: Failed to register (%ld)NlDnsUpdateRequestWorker: Registered (success)NlDnsUpdateRequestWorker: %hs: %ws: NetpDcBuildDnsName failed. %ld Processing a Dns update request for %hs. SiteName: %ws, DnsTtl: %ld, DnsNamesCount: %ld U@@<[o3ʼnEVW3hf3VP3 ƅ953[o V?q 9546[ou+95P[o] VVVVjh4ZP[o> h7[o5P[oSo9uu SoESPSo5h4[oh4[o{d[=2[ot~4u F4 ~49=3[otgu"=2[otu5h@Wo=D6[oLuhWoh@ eYƅY`jV =2[oPPF P Pj 覘u-Pv0DPv}HhF \@t/@`Pf@@fu+QDP.|q6;}聖uSh Woh`WhHWohchȼWohcYYhwh8WohjP15h4[o )<9~4PPF Ph@NLN8L싅N<LN@Lu`D|v0PW#ǍHf@@fu+D)t DF \@tWD|F p`PWzǃ Hf@@ffFkoC[ot 3~@@ 3~D6; h7[oSo=3[ot*uE`;v+VPhHWohVa=2[o`PP跻=3[otu;w =2[oMh7[oSoƅt/DtP艭5h4[oh4[o`k~4PPF P`F;|u}v0kƅL7jV蠣hȻWoVSf f3;t D+t|HtdHtvHt^HF \@p`tƅLSF \ tq~F \ t\~uV9ƅ|9L;ʉujV衢h`WoVS QhWoVS6h4[otyQhWoVS~2 Gu WSo5[o=7Awitu>Pw7ot/hWoVh@K jVt 9t3p0tEh@P38D jVjPQѴF PSoN(6[ou ;v ;s F( ;s$"thWoh\ h7[oSot 4[t {M_3^\NlDnsRemoteScavenge: Memory allocation failed for %ws. NlDnsRemoteScavenge: Ditch it due to time expireNlDnsRemoteScavenge: deregistration remoting failed %ldNlDnsRemoteScavenge: registration remoting failed %ldNlDnsRemoteScavenge: remoted registration (success)NlDnsRemoteScavenge: remoted deregistration (success)NlDnsRemoteScavenge: Integer overflow in size calculation at line %d NlDnsRemoteScavenge: Avoiding Remote DNS scavenge on shutdown NlDnsRemoteScavenge: Abort Remote DNS scavenge on shutdown as TotalElapsedTime %lu exceeded threshold %lu NlDnsRemoteScavenge: Memory allocation failed for required size %ld. NlDnsRemoteScavenge: Continue Remote DNS scavenge on shutdown (config) NlDnsRemoteScavenge: Continue Remote DNS scavenge on demotion U8@<[o3ʼnEE VuW3ƅ9=3[o$|PuhWoVhV S9=6[ot0WPPj-|PLuh8WoVSU PW 2[o;tPhWoVSU \tRP|PhVoP|PWVyo@\t'P|PWVEou tPVtPh(WoVST\YPPѢtPh`WoVWT-3vV4Ї؉t-|PPSoYYtSG;riVj@So39vq3hPfPX Pt4Fuaf9thWoPW PPW C;rj|PjjjhG3[9t P2[o9t `*5So9t9t9t 8M_33^(SNlDnsAddDomainRecordsWithSiteRefresh: Failed to get ip addresses that need to be registered %ld. NlDnsAddDomainRecordsWithSiteRefresh: Cannot NlDnsAddDomainRecords 0x%lx. NlDnsAddDomainRecordsWithSiteRefresh: Cannot DsBindW %ld. NlDnsAddDomainRecordsWithSiteRefresh: NlSitesGetIsmConnect failed NlDnsAddDomainRecordsWithSiteRefresh: Cannot NlCaptureSiteName. U,MSSoVW37[oV}}}}E9=2[o3=2[oSoE} E2[ot%2[oVSoWhKXoW,V9=2[ot } suhWoh@KO C2[otVESoEPhÿWoj+V9=2[ot} s uhWo밋=h4[oEE =3[otau詛=2[oEt }u2hWo=D6[o}uh Woh@NYEY}`jW~hWoWh諰 SoVESoEPEPWEVu =:vuPhpWoWhX=2[ot} rU}t uWE}uE?h4[otCuEhWoh hXWohMYYuhWoh@M =3[o=2[o}=h4[oEh4[o4=3[o>MEPSoEPEPG P`}4hWoWhG4, SoVESoEPEPWEVu莙=:vuPhpWoWhٮ=2[ot} rD}t uW{}t 4utG44uE?h4[otuhWoh@1L =3[ou%=2[oi}t5VSouiVӃ=2[otCuh@WohK EPSo=h4[oh4[o9ǃ?uP PQSoMQMQ Pte;uÁ}/s EM39=6[ot5[oi;EsE9=3[oupEԣ4[oEأ4[o9=2[ouEP4[o_3ҹ`PhWoh@ K53[o8SouSoPhXWohJ }=2[ot9}tWWWWjh?9=2[ot$ 2[o52[ohWohJ =2[oV=2[oSo_^[NlDnsScavengeWorker: Preserving the scavenge flags for future re-do: %ld NlDnsScavengeWorker: SetEvent failed %ld NlDnsScavengeWorker: Set DNS scavenger to run in %ld minutes (%ld). NlDnsScavengeWorker: Avoid ReStarting DNS scavenge after too many times %ld NlDnsScavengeWorker: ReStarting scavenge %ld of DNS names NlDnsScavengeWorker: Avoiding DNS scavenge on shutdown NlDnsScavengeWorker: Abort DNS scavenge on shutdown because DNS is too slow %lu NlDnsScavengeWorker: DNS is really slow: %ldNlDnsScavengeWorker: scavenging nameNlDnsScavengeWorker: Continue DNS scavenge on shutdown (config) NlDnsScavengeWorker: Continue DNS scavenge on demotion NlDnsScavengeWorker: ReStarting scavenge %ld (after adding domain records) NlDnsScavengeWorker: ReStarting scavenge %ld (after adding <1B> names) SVW=Soh7[o׃%2[oj2[oSoh4[o JRHӋh4[o;uh7[oSoh7[o׾`4[o JRHӋ`4[o;uh7[oSo_^[ÐUQeVuWMEPj}WhPWoVh8CWE8U jP 3_^ NlGetRoleInformation: Cannot SamQueryInformationDomain (Role): %lx UE8u @$UEP Q 3[oP@E諅]UQQSVuWv3hWoj}}> vtM ;s+ȸ;vM EEV Fʃ  u U;u3BW]SRuQPWv4WWWvWWv,vReferenceCount == 1UE Vtf8tPujX)3Wu$u uuuuVu)V_^] US3VuW3]]]]]]9^:v FE;uj_9] tu *E;tEPFS%PSv4vju;9]t uSo]SSEPEPEPu];u9]v9]tuuڈtE[tStK*#tC{&t!|&tWWv(hWohu1v(h(Woh^1 {&9]t uSo9]tu_9]tunP9]tuaP;uEM_^[ NetpDcCheckSiteCovered: %ws: IP Not configured from DnsQuery. NetpDcCheckSiteCovered: %ws: Unknown error from DnsQuery. %ld 0x%lx UQQSVuWj[@5[otNuuh(WoS/} tu u hWoS/tVhlSoS/ h0SoS/YY3j_9EtT;tu@M 9]u L@ 9}u L@ @PU#PPɍE #Qju#E 3ɉ=$5[o (5[o85[o`45[o;u ,5[o 05[o"05[o,5[o*v,5[oh 5[o53[oTSo5SouPhWoW. 53[o3[o8SouPhWoW. _^[Cannot set termination event: %lu Data: %lu 0x%lxNlExit: Netlogon exiting %lu 0x%lxUQ3[oSV33F3[o53[o;tPSo53[oSo3[oWS93[ot-VS5O[oSolWotSjoWhXWo3[olWo8[oVSo9t3[ot9p3[ot3[oE]VSox3[o;t 8]t jPSo5x3[oSox3[op]=4[o4[otShWh(WoK=4[o4[otShWhWo.=x4[ox4[otShWhWo9L3[otShWhWo5pSoh 8[oh8[o[h7[oh7[oSSJJ7[oWSo3[o;t PWK3[oWSoW04h@5[oSSS=4[o4[otShhlWohWo]9|3[otShhlWohlWo@h8[oֿ`8[oWSol3[o;tPJl3[oh3[o4[o4[oWSoWh`7[oSoP4[oP4[oQxJ P4[o;uh`7[oSo92[oth2[o2[o3[o;t P蒂3[oj`:[oWHSo2[o;t PSo2[oWLSoW=PSoh :[oh9[oh8[o֡3[o;t PSo3[o82[ot01[oX9[o \9[o t&QPTSoG[oX9[o\9[oP[oP[orS52[o52[o/93[ot=Ph0Woj+* 53[o=SoׅuSoPhWoh* 3[o;tjP$So3[o3[o;t P׉3[oP9[o;tSP@0[oP9[o@7[oWSo2[otPSo 2[o2[o;t PSo2[o2[o;t PSo2[oWSo2[o_;t PH2[oh8[oh 5[o53[o$5[o45[o85[oTSo2[o;tYPP52[ohPWoV(52[o59[o2[o;uhWoV(YYPhWoV( ~iz,5[o^[=*u05[oÐNlCleanup: Could not delete old perf instance: Status = %d NlCleanup: Delete successful. NlCleanup: Shutting down NlPcGlobalTotalInstance (%p): "%ws" CloseHandle NlGlobalTerminateEvent error: %lu Netlogon.dll unloaded (%ld). NlGlobalChallengeCount == 0IsListEmpty( &NlGlobalChallengeList )!NlGlobalServiceAccountInitializedIsListEmpty( &NlGlobalServiceAccountList )IsListEmpty( &NlGlobalPendingBdcList )IsListEmpty( &NlGlobalBdcServerSessionList )Status == RPC_S_OKd:\w7rtm\ds\netapi\svcdlls\logonsrv\server\error.cU$S3V]8]tDEPjEPSE]]]]]);}$Vu hHWoh:%*EEu EPSouEPu9]t8]t EP=^[NlpUpdateTdo: %ws: Cannot LsarOpenPolicy 0x%lx U@@<[o3ʼnEES]V3EE9wVhhWoh|WouVhhWohXWoE EtXt uPhWoShVW}ujS}襥M$QMQPRKeWVujS<|T ujhhWohWoučEjPEP } VhWoW6ttu Eȃ}tWjjSJu}~VVu!PEPPRu[Vh`WoSh|"VS}t1}u+EhWoSh nf|b}tZPSoE0ust}PSoC(PSoPSo3_jYE@Iu}VhxWoSh=M^3[ "NlpGetForestTrustInfoHigher: failed %lX NlpGetForestTrustInfoHigher: remote DC doesn't support this function. NlpDidDcFail: denying access after status: 0x%lx I_NetGetForestTrustInformationNlpGetForestTrustInfoHigher: trust isn't marked as cross forest trust: 0x%lX d:\w7rtm\ds\netapi\svcdlls\logonsrv\server\ftinfo.cUVWhp9[oj 52[o3uE{z;tj_S953[otj2Et 4Su"Q3ۋCuSP u  uu h WoVhE f8]t9Xt PEPSojSEPVLEuu h`WoVhKm56[oP譾uhWouhſ Fu]jSuu},P9$]t4u} P3}t}tuݾu[Wu hpWoVhtVoO_^DsrGetForestTrustInformation: %ws returns %ld NlpGetForestTrustInfoHigher: Can't become writer of client session. DsrGetForestTrustInformation: %ws: can't find the client structure of the domain specified. DsrGetForestTrustInformation: %ws called: 0x%lx UE VWuMuu hWoWVu E"=3[ot ES,SSou WׇEuSSoE"uuPAES}So_E@b H@MuSou hWoSo}t!}tu h0WoWVE-uE|e}"uEt j Y@Iu[uu hWoWVtWLE_^]NetrGetForestTrustInformation: %ws returns %lX NetrGetForestTrustInformation: %ws failed because secure channel isn't a domain secure channel NetrGetForestTrustInformation: %ws failed because F bit isn't set on the TDO NetrGetForestTrustInformation: %ws called: 0x%lx UEHtCHt9Ht/Ht%HtHtHtWo/Wo(Wo!tWolWodWo \WoPWo]InteractiveNetworkServiceGenericTransitive InteractiveTransitive NetworkTransitive Service[Unknown]U S] VW}3PMQPPSWEE^}"VShXoWhQV)@jSotVSh0XoWh!EPjjj4So} VShXo뜋58SoEPjEPju֋؁#tSu hXoWhSmuHEuj_MQuPju֋}Vu hpXo$E5<SoSHPS@SoM;t#Qu hXoWVJSV4jSSwtXSou&uu hXoWVSV4wt3}t uDSo}tu4So_^[NlEnsureClientIsNamedUser: %ws: DomainId mismatch 0x%lx NlEnsureClientIsNamedUser: %ws: UserId mismatch 0x%lx NlEnsureClientIsNamedUser: %ws: NtOpenQueryInformationThread (again) failed 0x%lx NlEnsureClientIsNamedUser: %ws: NtOpenQueryInformationThread failed 0x%lx NlEnsureClientIsNamedUser: %ws: NtOpenThreadToken failed 0x%lx NlEnsureClientIsNamedUser: %ws: RpcImpersonateClient failed 0x%lx NlEnsureClientIsNamedUser: %ws: NlSamOpenNamedUser failed 0x%lx Ul@<[o3ʼnEMES]V3W} }]Mu953[otj2X1;tjWV1CEu hp9[oj52[oltSWhXouhj_oWut SWh0XoҋSojEP!uu3}īEPuEPӋ]jEPEPEPjEPjstClPPjj} PPf@@fuM+Q@I0KB|IWưuj.VMQF@PE}H0Qp4\u \uFPFPEpdppplS蠅^f E@b=0SoFEM@EFPEPׄufEHM@ EFPEPׄuNEHM@EFPEPׄuNF PEPׄuN EHM@EEPF$EH M@$EF(PEPׄuN(EH(M@,EF,PEPׄuN,N0EP~@WQF4PEPCWPs b[F8PEPEH@WQpD?[\Et'jYx@IuEj(Y@Iuu.t tV-3]t8SE@C$WuuPhXojE0NjM_^3[`Woʐ%ws: NetrLogonUasLogon of %ws from %ws returns %lu NetrLogonUasLogon of %ws from %ws failed NlEnsureClientIsNamedUser NetrLogonUasLogon of %ws from %ws failed NetpAccessCheck UT@<[o3ʼnE=3[oMEVuW} }Mtj2XtjWSj>؅uE`Wo:hp9[oj52[ogEtXuWh XoSh EC$uuuPhX XojU tS=E[M_3^ &3fF5SoPEPփeu3}īEPuEP֍EPjzPEl%ws: NetrLogonUasLogoff of %ws from %ws returns %lu NetrLogonUasLogoff of %ws from %ws failed NetpAccessCheck U(@<[o3ʼnEEHS] VuutHHtHt1HtHHFC$tGVjP0Vj4S0FujhhWohWoC0tlVs,PW}쥥PuإEP}jhhWohpWoC4}ܥPuإEP_}jhhWohpWoM^3[D U(@<[o3ʼnEEHS] VuutHHtHt1HtHHFtEVjC$P.Vj4S.FujhkhWohWoVs,s0WEPV{$W}jhChWohpWou쥥EPuإ{4W}jhUhWohpWouܥ_M^3[J U @<[o3ʼnE}VuW}t}t }E tttuitcWPvGtWjFxPu.WjƜVf.6EPWƜV(}jhhWoh4WoEEFM_3^U @<[o3ʼnE}VuW}t}t }E tttuitcWPvGtWjFxP,WjƜV,6PMHWEPMj}jhkhWoh4Wo M_3^Ux@<[o3ʼnEEEES]EE V3EȋE$WEEEuuuu9wVhhWoh|Wo56[oSGE;uhPXoShQEEPSouuu56[oSuhXo뿃}Et}t }EuE}u} u E90u3jY}t }t3jX PSG;D}襥M t }҅tu}} }u,@u E$t@t = 6[ou EEE@#;ȋEtE+-(EuEPPP-EPuuteuEuWujSEEu'EtHt HuEEE39 uWhhWohWor9}S軥jEPSEu}EW8uN^GEPuuVuuuEup'u[} WhXo56[oS薤EEEt:uuVuuuPEP }FWhXo5uVuuuPEP l}WhXo|7tjhLhWohWo6|>ujhMhWohLWo6ttu;E}s2hXoSh¤ t P"&E^uujSa*EPuu+|>ujhVhWohXo}hXoVYYjPV7hHXoVYYjPV6}uhXoVYYjEPV6W5u48Eu/}PPEPP62+EPWhhXoSh诣|"E@;uWS}E3|"t'^t~~WI5u^;|3tVh6hWohWoNE90uVh7hWohLWo2EP0hXoShEȃ^}EthXXoShĢ hXoSh觢 ^phuEP6uu}t }t}ut'}t}uVuV}Mȃ&1PSo3QQQ6uCpAQj#QPSo ut3PPPQuPPPPPoujhBhWohXoWhHXohK 6&E|ttjhhWohWoE8ujhhWohLWo|:utjhNhWohWoh|>ujhOhWohLWoIjYE@Iu8MtS艟}uSB1EE Et=EPSot/u+uEEPVjE%AuVj52[oAj3FVjAjVj52[o@Vj>Vj52[o>0M_^3[B NlpUserValidateHigher: LsaIFilterSids failed 0x%lx !"[NETLOGON] LsaIFilterSids failed"NlpUserValidateHigher: Can't do transitive trust to NT 4 DC. NlpUserValidateHigher: Can't do generic passthru to NT 4 DC. NlpUserValidateHigher: Can't pass these ExtraFlags to old DC: %lx %lx NlpUserValidateHigher: denying access after status: 0x%lx %lx NlpUserValidateHigher: Return Authenticator = NlpUserValidateHigher: SessionKey = NlpUserValidateHigher: Seed = *ValidationInformation != NULLNlpUserValidateHigher: Can't become writer (again) of client session. I_NetLogonSamLogonI_NetLogonSamLogonWithFlagsI_NetLogonSamLogonExNlpUserValidateHigher: Can't become writer of client session. NlpUserValidateHigher: Can't allocate Client API slot. U$@<[o3ʼnEESVu3ۉEE9wShhWoh|Wo56[oVauh@ XoVh{ ^vWSV;.EPPP3ۍPWSjV|U ujhhWohWo!u܍Eu PEP &} Wh, Xo6ttu CrPjjVcWd*u!PEPP&umWhXoVh]|"WVڷ}tCjVE踶"t%^;t~~ W)uVr_M^3[ NlpUserLogoffHigher: denying access after status: 0x%lx I_NetLogonSamLogoffNlpUserLogoffHigher: Can't become writer of client session. USVWSou؍PESop7(΋Q6+;sH= rQQPSo;uuSo_^[]UW}XSVu F@@PjSo؅tqFPvS]&F3f C PESop7FPSSoYYt6;tNVHSouSoSSo^[_]US3VuX]]]t B93[ou9]u9@6[otc9]u^EP;ÉE}hX'XoVh 8]u!h&XoVjE$ EdhH&XoVj W}9]9]G@@PS]So؉]u EkGPwS%G3f C PSop3jjFPu?t6;t4v?~ v=sENH^p3EPSo}t!uh%XoujEduVfEu EMQu$u uWu jP#؉]|<@5[ot3}TouToPGPGPWu PhWoVjn }!}4jtqt$t;;tE6;uߋEPf@@fu+\CPj@Sot@SuFP" }2rOAGQ8SoSoF F~p7uSo}tu3_9]t uSo9]t j uE^[ NH뜐NlpUserValidateOnPdc: SamrQueryInformationDomain failed: 0x%lx Avoid send to PDC since user %ws failed recently NlpUserValidateOnPdc: BDC and PDC are in the same site. NlpUserValidateOnPdc: Ignored a user validation on a PDC in remote site. NlpUserValidateOnPdc: Cannot SamISameSite. Uu ujuuuu u]UQES3ۃX]tsVu @W@PSSo;uRPvW S3Sf GEPSWuY;| uWSo9]t EPq_^[UQeVuXuo93[ocqWXE(E0txV轁uUE(Pu$u uSjjV|1@5[ot(hToCPCPSjPhWouj V豁}0t j u0TE$}tf;t}u }D39 3[o"8MtQhhWoh>Xo}tjhhWoh>XoVڀEu E$EPu$3u uSuWuu;}|3tWhhWohWocE 98uWhhWohLWoGt"uE$8tF^;u5}tf;u}u}}t}uSu)u:uCdE9 3[o} EuE VEu E/5[otV} uP}+uJ}tDu03fEԍ}֫fEPSoh;XojCPCSPEPE$E5[otD} u>}+u8}t2u03fEԍ}֫fEPSoh;XojCPSCPEP肇EPu$u uSujuE&} t} u#Etttt Ed?}t@\uVVEu!hX4[ohp>XoVjEdM"f9 tEPEPSVUE}}} t} u}u }A},7EPEPEPu؍{uu jSWV7H Eu܍EPSoEPjEPV~EtDuMQWSh=XoPh`@.MQWSh`=XoЍEPWSh}+u8}t2u03fE}fEPSoh;XojCPSCPEP} EPu$WuSuuu<|3tjhhWohWo?ujhhWohLWott"uduE$E$8uE$8tjh*hWohpValidationSam != NULLFailed to validate the passthrough target %#x for computer name %ws NlpLogonSamLogon: %ws failed because F bit isn't set on the TDO SamLogon: %hs logon of %wZ\%wZ from %wZ: Not signing or sealing: %ld SamLogon: %hs logon of %wZ\%wZ from %wZ: Not using Netlogon SSPI: %ld SamLogon: %hs logon of %wZ\%wZ from %wZ: Cannot RpcBindingInqAuthClient %ld 0 == ((*ExtraFlags ^ OriginalExtraFlags) & ~NL_EXFLAGS_NTLM_EXCEPTION)UQ3PMQu(Eu$u uuuuu uP$UQjEPu(eu$u uuuuu ujU$Uju,u(u$u uuuuu uj ](U39Eu"#Pu(u$u uuuPPuu u]$UESu u VWu7uKsQVSPhhNXoWjE/3;u "}t f99Cf99C9Eu9E u9Eu9Eu 93[ot 9Et9E t9Et9EtЍ,VSou W7EuVSo"XuuP},PSo,E@@5SoE ,P֍GlPS`SotSjף=3[ot?WgEu SjP\ugtہ"tEPjSWLhEu } t} uEPSoEPu#hNXoujj uHgdTSjuu*gtt"u% "uEt j Y@IuVCPCPSuhMXoWj tWcQ_^[]NetrLogonSamLogoff: %hs logoff of %wZ\%wZ from %wZ returns %lX SamLogoff: Avoid transitive trust on NT 4 trust.NetrLogonSamLogoff: %hs logoff of %wZ\%wZ from %wZ Entered U8@<[o3ʼnE=3[oMEMЋMS] MԋM]܉MEt VWPShRXoWh}u "%,VSoSW^3؅uVSo"EXt*{@t$VSohRXoWh "uԍstuЍ}襥CdSE}E,PSo둋C@ttE,PSoh RXou됋E,PSoEPuuu܍EP,So|9s@}EPuu}VhQXoWh3jYE@Iu"u/Ej Y@Iu8MtuhPQXouhVuhQXouh~}tu_^M3[NetrLogonSendToSam: %ws: returns 0x%lX NetrLogonSendToSam: %ws: mapped access denied status NetrLogonSendToSam: Cannot NewCallToSam %lX NetrLogonSendToSam: Call only valid from a BDC/RODC. NetrLogonSendToSam: Call only valid to a PDC. NetrLogonSendToSam: %ws: Entered UL@<[o3ʼnEE SVu3ۉuEE]Ή] u |WuVh[XoSWuuhjjV[Eȅu Xth[XoPh ^9@6[ot\9]uWEP}h8[XouhF x8]uhZXouW+ 3[h0ZXouW u_؅u hYXouj56[oSbuhYXoE}ܥMURPQ39}t uSouWSou;uuuV EPuVb}WVujSa|U ujhShWohWo耭uEuPEP 萑} VhYXo6ttu E}sWjjS=3[otu"u }Vu%PEPPVhXXoSha|"VS}tkEjS|YEuhXXouh51PEPPPh`WXoShajYE_@Iut8MtSj`S]}t uSo}VuhWXouhz}tuƋM^3[耿I_NetLogonSendToSamOnDc: %ws: failed %lX I_NetLogonSendToSamOnDc: Skipping secure channel reset with seed update %lu I_NetLogonSendToSamOnDc: %ws: PDC doesn't support this function. I_NetLogonSendToSamOnDc: denying access after status: 0x%lx I_NetLogonSendToSamI_NetLogonSendToSamOnDc: Can't become writer of client session. I_NetLogonSendToSamOnDc: This BDC has no client session with the DC. I_NetLogonSendToSamOnDc: BDC and PDC are on the same site. I_NetLogonSendToSamOnDc: Ignored sending to a PDC on a remote site. I_NetLogonSendToSamOnDc: Cannot SamISameSite. I_NetLogonSendToSamOnDc: not allowed on PDC. I_NetLogonSendToSamOnDc: Sending buffer to DC of %ws, SCType %lu U=3[otj2X uu j^] j2XUQQW3}}9=3[ot M ;u ;v9ytVuuPu h`Xoh$u";u E",SVs,SESou V%;u SSo}Xt x@H@t uuP%ES} SoSoE 8EPEPjv`u ;؅tSu h_XoWJS$}u(Ex(tu uuPVtEPE:u hx_XoW E" SSou h^XoVW E[}t uuj蒔}"u Ej Y@IutVJE^_DsrUpdateReadOnlyServerDnsRecords: %ws: Call only valid to a Writable DC from a read only server (RODC/ROGC). DsrUpdateReadOnlyServerDnsRecords: %ws is NOT a Read-Only DC. DsrUpdateReadOnlyServerDnsRecords: %ws: Cannot DsGetDomainControllerInfoForNetLogon %ld. DsrUpdateReadOnlyServerDnsRecords: Received request from %ws for %ld DnsNames. SiteName: %ws, DnsTtl: %ld UP@<[o3ʼnEEUM S] VuW}(EE$0u3RQVhkXoh@!9=3[othHkXoh@YY7V;u hjXohڳYYDž"{Vm,VSo9 ;u'VSohjXoh腳YYDž"&Xt x@H@t P;Nj},PSohjXoV,PSoP;lj}PhiXoV c9u h(iXoV8f;tY9tQ@@PR;t:RP 3fA9{hWPCHHH HffMffMffM MMpj@3YfE3;t,P`thhXoVDž"YYYPPWsWF;lj} Ph(hXoR}vC ;t;t;u9tE9WSQPP;9PPWA;tA;t3),PSohhgXoVbDžYY9}*hfXoh'"uj Y@Iu9t 9t "hfXoh@ͯ M_^3[$NetrChainSetClientAttributes: Return 0x%lx NetrChainSetClientAttributest(to %ws, from %ws, for %ws): status 0x%lx NetrChainSetClientAttributes: only valid to a Writable DC from a read only server (RODC/ROGC). NetrChainSetClientAttributes: couldn't update object, status 0x%lx NetrChainSetClientAttributes: DNSHostNameValueCheck failed NetrChainSetClientAttributes: client not cachable NetrChainSetClientAttributes: failed to query for cachable 0x%08x NetrChainSetClientAttributes: couldn't authenticate NetrChainSetClientAttributes: no ServerSession NetrChainSetClientAttributes: no DomainInfo NetrChainSetClientAttributes: not supported on workstations NetrChainSetClientAttributes: Entered (to %ws, from %ws, for %ws, inver 0x%lx, outver 0x%lx) U}tuhhmXoh苩 /M$tPhlXou(Qu juuuu u]$NetrChainSetClientAttributes: dwOutVersion 0x%lx not supported NetrChainSetClientAttributes: dwInVersion 0x%lx not supported U}vuhnXoh) .E$8vPhHnXou(Pu uuuuu uK]$NetrChainSetClientAttributes: OutVersion 0x%lx not supported NetrChainSetClientAttributes: InVersion 0x%lx not supported US]VW} thrXoVWJ thrXoVW3 th|rXoVW @thxrXoVW 㿄yhprXoVW thlrXoVW thdrXoVW thXrXoVW thLrXoVW{ th@rXoVW^ @th4rXoVWA th(rXoVW$ thrXoVW thrXoVW thrXoVW @thqXoVW yhqXoVW thqXoVWYthqXoVW?thqXoVW%t4ǍP@u+‰E ǍH@u+u S+hqXoVPY_^[]0x%lx WS Try_Next_Closest_Site Longhorn_DC RET_NETBIOS RET_DNS DNS NETBIOS BACKGROUND LDAPONLY AVOIDSELF GTIMESERV WRITABLE TIMESERV KDC IP PDC GC DSP DS FORCE Uu3uPuu PPu]Uuuuuu jju]V3ʅtf9tFFJuuW^t |+ʉÃ'ÐUW3t;U vW| E'_]UeS] VW=Sou ]jP׋uu ujP׋Mj_;~~&~ qhyXoQhC jD8jPEH|L EPDSoMECEEEĉ|EjZEE}}>v8Puuj]MEUЉ]ԉM}MEUv}+WhpxXoVhCWu`YhxXoVpYYuuVuhpwXoVThvXoVIuuVouh`vXoV, 3}t EP]I_^[EPjQSK}WhuXouhYB뾋CEECEFEEFEEPEPut}WhuXoNlSetOutgoingPassword: cannot LsarSetSecret 0x%lx NlSetOutgoiningPassword: cannot NlOpenSecret 0x%lx NlSetOutgoingPassword: Previous Clear Password Version Number is: 0x%lx NlSetOutgoingPassword: Previous Clear Text Password is: NlSetOutgoingPassword: Current Clear Password Version Number is: 0x%lx NlSetOutgoingPassword: Current Clear Text Password is: NlSetOutgoingPassword: %wZ: cannot LsarSetTrustedDomainInfoByName 0x%lx NlSetOutgoingPassword: invalid secure channel type USVW`8[oSSouWvv:E u8E tWvv:E SSoE _^[]UX@<[o3ʼnES3Vu W}DžDž9[oDž09[oDž(9[oDž8]u DžWVhXoj蛛PhXoh jQEPSSJgfu EPjQP_ DžSoPSSPDžDžSoj4;É}$PWhXoh)SPhSLength - sizeof(PasswordVersion) > 0ClearPasswordVersionNumber != NULLUE eeSVWP؅u uSuvt+t P3E9} v(CEuE4vt+uEEG;} rދEEEPEP]K]}eWhXoh uuuuFS339ut EP\;t}v4F;urS_^[NlGetUserPriv: SamGetAliasMembership returns %lX UMSVt ] tf;uR3^[]ыf0f;2uftfpf;rufu3tpf@@fu+LAf9t3@룐US]VWtlu tef>t_tP(WjX΍qfAAfu+tHuVj@Souj jBVPSou VWW;3jWX_^[]UQUSVWM f:f9ڋ‰]M pf8@@fu+DBEPf0@@fu+tA;wo=XSo;]w_f*tVPf؋E PYYf;ue]E CC]9u w/ɋE9Ew*f8*t$Pf؋EPYYf;u+NNm9u v΋E9Ewuf8*u;u rf8*u3@3_^[USVWj :[oW3$So55[o9]t4;u&.uVuƍPf@@fu+tFf9t3CWLSo_^[]UVu W}hWE y|KU S+jW[t,+u+tft f@@IOuuHHz3f[_^] U@<[o3ʼnEME U(S],M V3M$W}$, ;t1;t2;t3Pf@@f;u+(s 6 E3+HHHwHgHHWHt,uhXo|M9u}@9tjhdh1TohXoq9]t}t }u3((,DHhToPSoYYZ PPh#,W=3[otlqud0h4jP PPj,WT|0PDž0WV,hXoWS'i ]M@ uM9M,jhXoWhك #uu%,#uPhXoWS蟃d}tt,hXoWSvՋrtxfun Džh4jP芴 0PDž0@UP,h0XoSłt,hРXoS裂 ",PSo(9uutG,f|A.t-7w d,DAhToPSoYYuڸfPjPKV}/VPh8XoWSVTjd`@uPhПXoWSҋHt!tQuPh0XoWS躁멋HtPhОXo뵋t tnxuhfv`@@PjSou QpV轲 ,3Vf FVSoA$I(( AuHt"PPhPXo$h蘀( pDž (( ;r399uVhh1Tohtw V?6Pj@ESou3jZVuWh,WouWƍPf@@fu+tFf>uˋǍPf@@fu+3fLGE 83jWX_^]U@<[o3ʼnEES] V3dh;t"ÍPf@@f;u+v hPW;W=SoVEP׋ÉuHf@@f;u+SEEjPu dt5u jEP djV VEPEt3WWl+VPh+hQ;tVSdhPXohf9h_t hDSoƋM^3[;fNlBrowserRenameDomain: Unable rename domain from %ws to %ws: %lx UQQeS]3!MVt AAEt @@@EEtpf@@fu+DEEMDPPju EWF(~0u 8] tSh%h0Woh,XoOQf,F,PsW? Eu PFPSo p EPW WFPSo}39]t"uEPW WFPSo} 3fF^3+8] SSWVP3[o0:VP_^[!AddNameU=3[ouhXouhc mSV@8[oVSo3[o8SotJW}\t9V3PPj PW<}PhвXoWhcVSo\_V^[]Can't remove the 0x1B name: 0x%lx NlBrowserDelName: before browser initialized. UEHt Ht3jjX]U|@<[o3ʼnE3[oV3;90tq3fEVEPuSoVVjPEP3[ohu0`;}PhhXoh*b EP3[o0So3[o0DSo3[o03[o9pt p3[oP53[o53[oM3^bÐCan't reset browser max message count: 0x%lx U(@<[o3ʼnEEM S]VuW}jPEPM%tP蓾 3PPu$fEu؍ESWuPu VM_^3[Ka U<@<[o3ʼnEESVu 3hSP6 ;ujWX;VPSofSPPSoPPPjPjS1;93W9vQ_L>ff;uftfPf;Qufu3t;r3ۋ9t D>3fuD>H@u+D |PjS0Du!hĔTotSoYYu.9u ;ktWhXoW^9vWËHf9t/Pjj(0PthXoW^u_}M^3[^%ws: NlServerComputerNameAdd: Cannot remove %ws to SMB server on transport %ws %ld %ws: NlServerComputerNameAdd: Cannot add %ws to SMB server on transport %ws %ld US3W3]}𫫉]]93[ouhXouh\ -Vu\tVX ]So@8[oWӍF$PzWESoh8[oӋp4[o{tVRCP3Aj QVME|CPhXoVjEL\D}t>CPh8XoVh-\CEEhEEPjEPjhm(Pp4[omSoh8[oӃ}tWSo\WӃ}uhXoVh[ ^}_[tuCan't add the 0x1B name because all transports are disabled Failed to add the 0x1B name on transport %ws Added the 0x1B name on transport %ws NlBrowserAddName: before browser initialized. U=3[ouEXPu3]U@@<[o3ʼnEVjEPEPjEP3FVj0+t=tPhXohkY MȅSWvvju[EԉE;sX]؋UЋDEąt8E؋L;H u*tx3uRjpuԥu EЋM؃dE̋MȃE9MrEԋEԃH;r3ۉ];SEЋD2jPdEЋEЉU̅Ëp ;up3p pEPjEP So|zEԋ}3fLEEPhXoWViXEPj)tEPhXoWVGX$WtEhXoPVXu莉ZthPXoVWEЃ p pEPjEP So}PEthоXoVW E3fLEE؋E؃;Eu_[M3^WÐ%ws: NlBrowserSyncHostedDomains: can't RtlOemToUnicode: %lx. %ws: NlBrowserSyncHostedDomains: SMB server had a hosted domain we didn't (deleting) NlBrowserSyncHostedDomains: can't NetServerComputerNameAdd: %ws. NlBrowserSyncHostedDomains: can't NetServerComputerNameDel: %ws. NlBrowserSyncHostedDomains: hosted computer name mismatch (SMB server): %ws %ws. NlBrowserSyncEnulatedDomains: Cannot NetServerTransportEnum %ld UQE HtHteEESVu\Wtn3SSSj53[oa ;ËSoEuPPhXoWS}tjjju P53[o" E}uEPPhpXoWMS1ju Pjjj%tPPhXoVW?S} Vu9 } u.\u"j$tPPhhXoVWR_^[NlBrowserUpdate: Couldn't NetServerComputerNameDel %ld 0x%lx. NlBrowserUpdate: Couldn't I_NetServerSetServiceBitsEx %ld 0x%lx. Couldn't I_ScSetServiceBits %ld 0x%lx. Couldn't I_ScSetServiceBits off %ld 0x%lx. j6u3Mj#thtXoZuPjh,hB jhL6[ojj%3@ÐLanmanServerUPVW3jVVupSoE;u&SoPuhXohePjuPhSoE;u&SoPuh Xoh,Pl5xSoSMQj$MQP֋Sot$}}tGuGuaPuhXoӃztPuh@XohujSoEu MQuPuօuPuhXo뺋E j3Y5\So]EHtHtHHtmuuhXXo뉁}5u[uhXoj>O h53[oSo=3[ouhjCt]OtZEPuօuPuhXo)3>uuuhXoVN}*uuuhXoVN[u5lSoփ}tuփ}t uSo_^ Service specific error code: %lu %lx NlWaitForService: %ws: service couldn't start: %lu %lx NlWaitForService: %ws: QueryServiceStatus failed: %lu NlWaitForService: %ws: wait for service to start NlWaitForService: %ws: Invalid service state: %lu NlWaitForService: %ws: QueryServiceConfig failed again: %lu NlWaitForService: %ws: QueryServiceConfig failed: %lu NlWaitForService: %ws Service start type invalid: %lu NlWaitForService: %ws: OpenService failed: %lu NlWaitForService: %ws: OpenSCManager failed: %lu U,@<[o3ʼnESjh3hXo]l93[oLVW}ԫEPhXoE E uh|XojIj EPuTSoEPSEPj hlXoSo;tMtEWEPhXoVIEP@ E;t"h@EPSSjh}=uҠEP]So;t+PhXoaEPSj hxWoSo;tPh`Xoh?hSoSu5O[oSo;tWhXoVH EPSo;tWhXoVH 3[o_^hXoj3[oHYYM3[HNlInitTcpRpc thread finished. Can't RpcEpRegister %ld Can't RpcEpRegister %ld (giving up) Can't RpcServerUseProtseq %ld (giving up) Can't RpcServerInqBindings %ld Can't RpcServerUseProtseq for port %hs: %ld (giving up) ncacn_ip_tcpUsing RPC server port %lu DcTcpipPortRPCSS%3[ohXojMFYYDS is no longer paused. UE#t;t2]USV`7[oVSo3[oVSotEt.Xu\@ttӁ^[]U<@<[o3ʼnEEE܋EEЋEE؋E,S](EfEVfW}CEEPj$P3CEPhu2EPj G$P#9u t}EPjGxPE袲EPjh7[o蒲9u$EPjEPzEPjEPkEPjEP\u$$1[oMEWMjE^EuЋMu؃u܉0EEuEEEEEEE@E+ÉͮPh@XoWjRD3M_^3[jD(!u侠7[oVESo} t 3[ou3[oMQMQMQMQMQjPS:V5SoEփ}tuh@WoWhCEx}sGh@8[oSo} tGhuGdMQMQMQMQMQjPSQ:h@8[oE֋ujz^tVhWoWh`C }|EPEPEPEPEPjS9PVhWo뭐Ping response '%hs' %ws to \\%ws on %ws U0@<[o3ʼnEE EE S]$ E0VE4W}3VP4$^3P,f\s3VPfPps>SEu$7[o9 +Pjj 1[o ;:9fu ƅ;fuCPTtƅ9((x@fu;u?:t|fuv(@xWt`9u jYs3t7(vCt$uOFf8u:ƅ;;ƅ:(@(5Nf;ft=f:\PjSӗFfuQj\PjfuQjP蜗P\P h`Xo,j@7[oVSo=2[ou h`9[oSo2[oVSot 1[o,7[o$uifu \Pjfu\PjS\P h,XoWjb?VSo=2[ou hh9[oSo2[os$C VSo3E(tlv EtHt HuEEEfEf3WfC2 CC<52[oEVj P,h-1VEj P5D5[oEVj P ExE䉅|DEEjẺExPSSjh{hh9[o2[o92[oEPpPh`9[o7E3ҹ5[olۅl}HXo5@XoQQE$h0XojPX52[oEVj PFh-1VEj P55D5[oEVj P#ExE䉅|DEEjẺExPSSjhh`9[o2[oh7[oSo8[oVSoh4[o3[oVSoM_^3[U!%.2f @AUHE S3VW}$uEEP]]]]]SoEPjEPEPE]]ĉ]]ȉ];}VuhhXohb ](9] u=EPjuU;}VhXoh. EE @]]EMQM QuPSjSjuEu Pj;M E ]9]tuEPjEPEPuuE3;]9]vE3EMQM QSpSjSjSPEPEj;|1E M E$EE ;Er8]oEЋM]39]tu9]tu9]tuv9]tu_^[ VuhPXoh]먐NlGetNt4TrustedDomainList: %ws: LsaEnumerateTrustedDomains failed: %lx NlGetNt4TrustedDomainList: LsaQueryInformationPolicy failed %lx NlGetNt4TrustedDomainList: %ws: LsaOpenPolicy failed: %lx U0@<[o3ʼnEME S]VuW3}MEu.SQPVSo3ɃWI ;;t\EPEPSotJ=SoEVPYYt!f>\uf~\uFPEPYYt3tf?\u f\uEPujWhxWojSotNSuSoEPSot2#t t3H% "3M_^3[]UQEPhXohXou2Ã}uhhXojYYÐNlDoingSetup: doing setup SYSTEM\SetupSystemSetupInProgressU}VuE 3!HffHOEHf@@fuu +ffFPEFu ffF2NQuPL ^]UVutFtP:3!FffF^]UW39} }EoV5@5[o\EPSo;tu PuhYoVn4Sh@7[oSoSojXEfE3ɍhPAQEPhSo=8Et/EE9E tPSo9E u uhYoVlt&lWhdYoVljSoPpWh4YoVEPtPSoEPEPEPEPEPEPEPWhYoVduWhYoVUuWhdYoVFEHPWh YoV2EPWhXoV!uWhXoVe0}}OHtaHtUHtIHt;Ht#HtQhXoV ^h`XoVYYOw7h4XoV:Ph Xo7hXo7hXo7hXoV 7jSoPEE;Eh}G}PuhXoVKh@7[oSoEPSo[^_NlPrintRpcDebug: Couldn't finish enumeration for %hs: %lu Ansi string: %hs Unicode string: %ws Long val: %d Short val: %d Pointer val: %d Truncated Invalid type: %d [%lu] NumberOfParameters is %d [%lu] Flags is %d [%lu] Detection location is %d [%lu] Status is %lu [%lu] Generating component is %d [%lu] System Time is: %d/%d/%d %d:%d:%d:%d [%lu] ProcessID is %d [%lu] ComputerName is %ws NlPrintRpcDebug: Dumping extended error for %hs with 0x%lx NlPrintRpcDebug: Couldn't get EEInfo for %hs: %lu (may be legitimate for 0x%lx) UEu\jSouu uPhYohH]Assertion failed: %hs%hs (Source File: %hs, line %ld) US]VWuShhYohYo8} uWhhYohYout>ujhhYoh`YoH;tjhhYoh,Yof?v-CfWfSfCSo@ jSSo_^[] *Where == ROUND_UP_POINTER( *Where, sizeof(WCHAR) )Where != NULL && *Where != NULLInString != NULLOutString != NULLd:\w7rtm\ds\netapi\svcdlls\logonsrv\server\nlp.cU @<[o3ʼnESVuWh@7[oESo] vh0SojhpYoj  uE{G3ۅE)u;] sQ}tu4h`Yo PhTYoj PHSoYt L:D.0}u } vhLYojrYYD ÃDEèuEPh<YojE; C;O} _^[vhpYosh0SojYYh@7[oSoM3I %hs %02x %08x ------------------------------------ UQSV5SoWSu ֿuhYoh= Su ։E;t_^[tuSoPuh0Yoh WaitForSingleObject error: %ld %ld %hs WaitForSingleObject 2-minute timeout (Rewaiting): %hs UQQME SفWEEtEuCE}y#E84u?@M@5[oVu uhL Yoj 3vE}t(;uu#E4th< YoE@t h0 Yo4h Yojy F;r}^t#}vh0SojX YYuuj~Ah0Soj; YYuWuu uuju 52[o_[t*=uh Yoj YYPhP Yoh Error writing this event in the eventlog, Status = %ld Didn't log event since it was already logged. "%ws" %ld 0x%lx Eventlog: %ld (%ld) Ujuuuuu uZ]UEfHu^f9H u2]UQeSVWh7[o3SoE tEhlE `tE`dMj33XvUAD ;rPMuj_tp8p}}E;t;=3[ot}h(YohYY3;t.9;t*98v8t0SoG;8r3So#t P&}_^[t uSo}t uSoEju hWo请t hYokWEPj}0#t>zt%tjhohWoh`YoWhYoh u=Soj׉EPEPj}P뾋E@4DRPj׉E}G4DRhYoPu:G8PG4DRPu跔Vut Ph Yo^uhYohtPj@So[e8va}@8Hf@@fu+@EPj@So ǃ8I49u0Z9 EM;r398vi@jhWo4DSo u%@Ã@j,4xSoYYt3f@4uSoYYuE8G;8rh@7[oSo0h8YoW'3ۃ 9v%0You(YoSPhYoWC;rh0SoW3YY9E9uhYohWoW@YY4ShYoWe8v=Ek A}0You(Yo0QhYoWsEM;rh0SoWYCYY;nh@7[oSoE(%2d) %ws *%hs%5d ,NlSitesGetIsmConnect: Site link costs for %ld sites: NlSitesGetIsmConnect: I_ISMGetConnectivity returned NULL. NlSitesGetIsmConnect: Cannot I_ISMGetConnectivity %ld. CN=IP,CN=Inter-Site Transports,CN=Sites,NlSitesGetIsmConnect: Cannot GetConfigurationName 0x%lx. Status == STATUS_BUFFER_TOO_SMALL || Status == STATUS_PROCEDURE_NOT_FOUND || Status == STATUS_NOT_FOUNDNlSitesGetIsmConnect: ISM service not started. NlSitesGetIsmConnect: Avoided during startup. UVuuhYohYY3SƍPf@@fu+jPV}tVhYohT jVXt=T%tVhYo3@^]NlValidateSiteName: Site name %ws is not valid DNS label NlValidateSiteName: Site name %ws is mangled NlValidateSiteName: NULL site name is invalid U\@<[o3ʼnEESEE VW}EEh7[oE}So84[o@;{ u9uϋ{3u(E8Cu E9CuCuPSoYYt'}84[ouSoj jӋ3`EPuEu`zuCPEPhPYoj !C}tCtu j@P1 Ct3fH h7[oSoM_^3[!Wj@FӉFu VSo_WuP<0E juFEu~ FFtčEPv EvyuFPEPhYoj T84[oF84[op584[oI%hs/%ld: Adding Subnet for site '%ws' %hs/%ld: Re-adding Subnet for site '%ws' UL@<[o3ʼnESVu7[oSSoNuWEPv EvtxFPEPh@Yoj 8FtPyNHFW=SotPV_SSoM^3[E%hs/%ld: Subnet deleted UVu>t5W3PrhYohYY6So&_Ft Pf^]Deleting subtree SVWhYoS#YY7[oVSoh6[oQh6[oG6[o6[o6[o6[o6[o6[o6[o6[o36[o36[oVSohYoSYY_^[ÐNlSitesEndSubnetEnum: Exitted NlSitesEndSubnetEnum: Entered UeVWh7[oSoEPEPEPu MuuuuuuEuj^M Sfup6[o] fXpE 6[o] }*] Ph8YoWs ;u%PhYoW\ hj@Sot"}v# EF}E jEejY+3@E]ShYoW] vjh hWohYoXE ؋CtA@PuhYoWC@Mu:As6hLYoW scE@CEE;Eb3hYoWS j{^[}t uSo}tuh7[oSo_^ %ld: Use previous subnet %ld: Deref previous subnet %ld: Subnet already exists %ld SubnetIndex <= 255%ld: Doing sub-byte %ld: Creating subtree %ld: Doing byte =2[oSVWhYoWYY7[oVSoh6[oh6[oh6[oh6[o3SSo2[o;t PSo2[oVSo=@4[o@4[oWotjhShYo=84[o84[otjhShpYoVpSoh<YoW2[oYY_^[ÐNlSiteTerminate: Exitted IsListEmpty( &NlGlobalSubnetList )IsListEmpty( &NlGlobalSiteList )NlSiteTerminate: Entered Uju uSo]ÐU=3[oStj2[OWu(u.Vu Vh W؅uhYoj0p@So^tWf'_[]UVjjhWoth YohEYYE^]NlSitesNeedPollISM: ISM service not started. U@<[o3ʼnEEPS] V30W}X|3PhTƅvxpƅwl\7@uh0.Yoj YY955[otƅwwЍp#PPPxPV|P4uh-Yo룋x5So3[oPj@։Pj@֋Xywn3j@֋3l;T5[ouy93D\Pp4t">xI4Ph,Yoj +\u">x@4h,YohV F;3돃39;\Pp4ZtlxI41Ph,Yo>\ur\Pp4t(lxI41Ph@+Yoj 1\u(lx@4h,Yoh G;;@39;D`d;^h0dxk p;u@4h*Yoh wtl<t@44hP*YoId@45ux@44h)Yo6u#x@44h`)Yoh~`u#x@44h(YohpFhx`Pk ;4s0@`444h8(Yoh(d`dhd;`u;x@4h'YohT X $T` x@0Hf@@fu+DPj@SoX 9x@4ƍXf@@fu+V@P1" hG;;PT X<ts7[oSSo2[otPSo0Pf@@fu+DPj@So2[ot$4΍yfAAfu+VAQP" SSoƅv39ptJx;t*39v$5Sop9t 0֋xG;9s5Sop։p5So9ltl9xt x:vuPT;tP։X9t-h8v8t0֋hC;r7փ'3ۋhMv_^3[ NlSitesGetNextClosestSites %ws: Site does not have next closest site. NlSitesGetNextClosestSites %ws: '%ws' has cheaper link costs than '%ws' NlSitesGetNextClosestSites %ws: Site '%ws' is the first valid site. NlSitesGetNextClosestSites %ws: Site '%ws' has infinite cost. NlSitesGetNextClosestSites %ws: Site '%ws' is invalid. NlSitesGetNextClosestSites %ws: Site '%ws' is filtered out. NlSitesGetNextClosestSites %ws: Site ignoring itself. NlSitesGetNextClosestSites: IsFullDCInSiteForNetlogon failed with error %d. Site %ws will be filtered out. NlSitesGetNextClosestSites: Site %ws will be filtered out based on setting NextClosestSiteFilter. NlSitesGetNextClosestSites: IsRODCInSiteForNetlogon failed with error %d. Site %ws will be filtered out. NlSitesGetNextClosestSites: NlSitesGetIsmConnect failed NlSitesGetNextClosestSites: Cannot NlCaptureSiteName. USVWEPEP3EPuuuuT]uh/Yoj QYYh7[oSo5@4[oX39}vO<t4PSoYYtG;}s-܋E;Eu7G4hH@Yoj 'jPG4 @uG4h?Yoj O441h?Yoj 9(h7[oSo'f>hSoVdSo3YY;3f9tPPVf?Wh?Yoj jPWfE t$PVuWjC$PV)u@E @tuVh?Yoj WPVtj\YfƍPf@@fu+tFf9t jPW7thlE `t`d3;s1 jQQSou F;r;uJƅt jE t K$WE @tlAt_|uRtE tE @t)h QjjjP*;3;s1 jQQSou G;r;uN~ƅt nE t C$[E @A~t||uotE tE @tFPh>Yoj h PjjjW39v4ŒF;r39h;tPSohl;t:VjSohtVP l Dž3ҍl9h@B;E `t~`;tPSo`d;t:VjSo`tVP d Dž3ҍd9v`@B;rh7[oSo39t So9tj$2[o9t ,2[o9t ;;t"39v4G;rSSo9u;t tM_^33[%hs: %ws: Site is no longer auto covered by our site. %hs: %ws: Site is covered by our site (regkey). %hs: %ws: Site is auto covered by site '%ws'. %hs: %ws: Site is not auto covered by any site. %hs: %ws: Site is auto covered by our site. %hs: %ws: '%ws' is alphabetically before '%ws' %hs: %ws: '%ws' has more DCs than '%ws' %hs: %ws: '%ws' has cheaper link costs than '%ws' %hs: %ws: Site '%ws' is the first valid site. %hs: %ws: Site '%ws' has no Dcs. %hs: %ws: Site '%ws' has infinite cost. %hs: %ws: Site '%ws' is invalid. %hs: %ws: Site has no %hss NDNC: %ws %ws: isn't a site returned from ISM. (ignored) NDNC list: %ws %ws DC: %ws %ws: isn't a site returned from ISM. (ignored) DC list: %ws %ws NlSitesUpdateSiteCoverage: Cannot DsGetDomainControllerInfoW %ld. GC: %ws %ws: isn't a site returned from ISM. (ignored) NlSitesUpdateSiteCoverage: CrackNameStatus bad: %ws %ws: %ld GC list: %ws %ws NlSitesUpdateSiteCoverage: CrackNames failed: %ld GC: This DC isn't a GC. So it doesn't auto cover any sites as a GC. NDNCDCGCUSV3W} ]];tuftft 3_^[h7[oSo8TS[ot(2[o;u3h7[oSo@E;uf>uuE6[oG~W)uWuE}6[oh@IYouSE6[o;YYe}EM<Wh IYoS6 t)4~tWhHYoSF EEE;Erut9Et;Ft!jh hWohHYoH F@EE tF0uSiteEntry == Subnet->SiteEntry%ld: Lookup: saving subnet at this level %ld: Lookup: Doing byte Get ipv4 mapped ipv6 or embedded ipv4 address Ujun]U(S3VEP]]]]]]]]ڠ;}?uhPYoj /YY]VhOYoh V@EvEWupS[op{E;tPhOYoh ;93[ot E@th@OYojYYjjhNYoj YYEP;}!VhNYohu Vr?EEPEPEPCuh`NYoj CYYEE]9X3ƍHf9uPhNYoj EjQuSou EƍHQPhMYoj E]9]tM39]vFED;tM 9t1PSoYYtG;}sԋEtM9tE܋Eup p@;tCEWHQPh0MYohG{uED jE؍EPSSjhkEEM;H7[oVSo9]uE88]TS[o8TS[othLYoj YYVSo=So]9]tu9]t 39]vE9t0F;uru_9]tu9]^[tuEThere is only one site. All clients belong to it. %wZ: %wZ: Cannot add subnet-to-site mapping to cache: %ld %wZ: Site %wZ is not site this DC is in. %wZ: Subnet has no associated site (ignored) Cannot NlSitesGetNextClosestSites Cannot LsaIQuerySubnetInfo %lx Adding subnet to site mappings from the DS Set GC-running bit after netlogon.dll unload Cannot NlSetSiteName %ld Cannot LsaIGetSiteName %lx DS isn't running so site to subnet mapping ignored UQEV30953[otj2XS] ;ujWXzWPj@So};ujXYvcEE E Hr+t'ftft PhWojQPh Woh $E F;r3ҍv t DB;rPeuu Ewe HH<مvXEM 9u jVSo2ffFP~PW  |E 9] re}ue vE tPwE 9] rWSo}tt P[&E_[^U@<[o3ʼnEEV30W}T`P953[otj2X@S] ;ujWPj@So\;ujX d;vzl)lhGr1t-ftft PhWolQP)Qh WoS* &hu] j 4cTuDžlWcPtWjV] Wb؉`uDžlYWjS0TM h Z p d\+ljX)XSolLL8t%P0qXPlQӃ?pQp ppPf@@fu+j/XfupjFupHXfFDP@j PSoD3fEppPPlhhl;E l] v8d\+d>tP}ttPdu\SoltsTt P.&`t&vtP Ou`Pt$vtPKuPl[M_3^UQV3u uzSW} EPu7jV]E ;uF93vBCf;v7FFVC`t3fLpCQp7 E tS%uE _[^UM 3tvW|GES3Vt*UW++Ѝ 7t ftf@@Nu_uHHz3f^[] UM3ItItItIIt IttjWX] 9[o3t Q w%9[oÐUV39utpW} |>~u4uWu59[ovtEVuWuhWYohʾ)jW^WhWYoh貾 jjnhWohTo*_^] NlPcIncrement32: Invalid CounterId: %d NlPcIncrement32: PerfIncrementULongCounterValue Failed. pInstace = %p CounterId = %d Value = %d Status = %d UV39utuW} |?:uuWu59[outKVuuWuhYYoh,jW^WhYYohʼ jhhWohTo?_^]NlPcIncrement64: Invalid CounterId: %d NlPcIncrement64: PerfIncrementULongLongCounterValue Failed. pInstace = %p CounterId = %d Value = %d Status = %d UV39utsW} |>~u4uWu59[o8stHVuWuh[Yoh,jW^Whx[Yohܺ jhhWohToQ_^] NlPcDecrement32: Invalid CounterId: %d NlPcDecrement32: PerfDecrementULongCounterValue Failed. pInstace = %p CounterId = %d Value = %d Status = %d jh9[o$SoÐUE U @ME E 3@]VhP[oh]Yoh]Yoh\Yo3Vj1[ouSoVhh]YohҸ ^ÐNlInitializeAuthzRM: AuthzInitializeRm failed 0x%lx NetLogonP[ot,P1[ouSoPh(^Yoh Ã%P[oÐAuthzFreeResourceManager failed 0x%lx UVWuSoWWu3uVWSo}V_^]UQMS3Vu W}FE9GdtjXGt Olt SWWFSjPGd tvPfXuxE39_lv+NPGp4:XuLEC;_lrGt tu39vk4VN<t@C;s>3E9~t(9>vFtPG;>rvf&E E_^[ UE SWEPCljYR3P}i,}!hhXfYoh EPh,u}hȍEPSoPu}h뤃}Vt8Ct t2u9v4SoGt;r䋃Eu}t+e?vGM4SoEtE;rECXFjY#C0C@C8CH}CPDЍD#D#D#D#D#D#D #D#D#D$#D@#PEyTEu3jYCx@Iuj(Y@IuSgE j1Yjh3WPEu荆,EKlQspPvEFpMClME;}EȉE}toCt ti9va}DDM 4SoPE苃4uEE EE;r}tce?vZED UGM4SoMPEG4u{EE EEE;rEM;EtjhyhfYohfYo9=SoPu%E ׋MjD_#ljEEPC0PF0P茟EPC8PF8P{EPC@PF@PjEPCHPFHPYEPCPPFPPHEPCXPFXP7EPPP EPPP }nEPPPEPPPўEPPP躞E@#ljEEPPP蚞E@#ljEEPPPzE@#ljEEPPPZE@#ljEEPPP:E@#ljEEPPPE@#ljEEP P PE@#ljEEPPPڝE@#ljEEPPP躝E@#ljEEP$P$P蚝E@#ljEjYCx@Iuj(Y@IuS|E 03^_[ GroupIndex == ExtraSidsd:\w7rtm\ds\netapi\svcdlls\logonsrv\server\rgroups.cNlpAddResourceGroupsToSamInfo: Integer overflow in length calculation at line %d UX3SVW3}Љu̫}u䫋]u}3fE܍}ޫf3u}uuuuE;s5h<[oE4XSouF;r;u3};Pj@Sou 3jZvMI ƉT@;rv } Ɖ]Ë_YMu 9[o} ƉT (9[o@ ƉT@EEPu uwtzOt esEPESofEfE3SEPEPSShEPhހ;}WhhkYoh踭 EPEP3PPES5P[o0j1[ou(SoWhjYoht W 3fEfEލE܉E3@EESEEEEȍEPESSEP[o}]]ESPuS1[ouSoSh8jYoW SzEȋ;tPhiYojԬ 3tVSo}tu}t u1[o}tuEPx_^[NlpVerifyAllowedToAuthenticate: AuthzAccessCheck failed 0x%lx NlpVerifyAllowedToAuthenticate: AuthzAccessCheck failed unexpectedly 0x%lx NlpVerifyAllowedToAuthenticate: AuthzInitializeContextFromSid failed 0x%lx NlpVerifyAllowedToAuthenticate: SamIGetUserLogonInformation2 failed 0x%lx USVu W33M}EPEP6MM؅|m}EPjEPJ}؅|OE8tPVu؅|7xdt/}t)M~t EuPuW_u|}t%39uvEtPF;uru_^[U VW33}u} u9v$5h<[o4XSou3F;r܍EEh<[oEEPWuE_^3U\@<[o3ʼnEEEEEE EE$S]EE(WE3h{YoE}hEԉE؉EЉEEẺE܉EīmYYu  tVut  j u͘}j u趘E39E9E ;p{c9[EC]; Ej?aGEGt/EPjEP3Wjuuuh`{YoV蘧&Gt#EPjEP3Wcju uuhzYoGt!EPEP3W'u uuhzYoGtDEPEP3W&uuuhzYoxGtuuuuhhyYoVGt$EPEP3W&uuuhxYo.39Et0PjPPuEąu{uuuhxYoV蝦+9EuuuhwYoug}uuuuhPwYoV[jWEąuWuuhvYo39}tuoE;u_uuuhHvYo9}tuKE;u;uuuhuYo9}@u&gE;uuuuh0uYo`uuuhtYoh詥}ă,SSouW'uSSouuuhHtYox@u4@buuh sYo  'Phh TohTohrYoVlYY jYE@Iu9Mtu}tu}}tuo}tu}tu}tuVuuh`rYoh|^M_3['$AcceptSecurityContext: %lx.%lx: returns 0x%lx AcceptSecurityContext: Second accept called. AcceptSecurityContext: %lx.%lx: Don't know client computer name. AcceptSecurityContext: %lx.%lx: Secure channel doesn't exist for %ws%ws BDC AcceptSecurityContext: %lx.%lx: Can't NlFindNamedServerSession for %ws AcceptSecurityContext: %lx.%lx: from %ws AcceptSecurityContext: %lx.%lx: Cannot alloc oem computer name %hs AcceptSecurityContext: %lx.%lx: Cannot alloc utf8 computer name %hs AcceptSecurityContext: %lx.%lx: Cannot alloc DNS computer name %hs AcceptSecurityContext: %lx.%lx: Cannot find domain %ws (fatal) AcceptSecurityContext: %lx.%lx: Cannot alloc domain name %hs AcceptSecurityContext: %lx.%lx: Neither DNS or netbios domain name specified (fatal) AcceptSecurityContext: %lx.%lx: Cannot find domain %hs AcceptSecurityContext: %lx.%lx: UTF8 computer name bad. AcceptSecurityContext: %lx.%lx: both DNS '%hs' and Netbios '%hs' client name specified AcceptSecurityContext: %lx.%lx: DNS hostname bad. AcceptSecurityContext: %lx.%lx: DNS domain bad. AcceptSecurityContext: %lx.%lx: Cannot parse computer name AcceptSecurityContext: %lx.%lx: cannot get netbios domain name AcceptSecurityContext: called UuSo3] Uu 9VuWjuuu VcW6vh|Yoh覙3_^]MakeSignature: %lx.%lx: returns 0x%lx Uu 9VuWjuuu V W6vhH}Yoh_^]VerifySignature: %lx.%lx: returns 0x%lx UE@3҄tV@քu^E H#]UVu Wju3VSo|Ofv VIIft ǥ}WhYoht WhPYoh@s NjM_^3[;t NlSetClientAttributes: Return 0x%lx NlSetClientAttributes: failed %lX NlSetClientAttributes: LsaIReplicateClientObject(%ws, %ws), status 0x%lx NlSetClientAttributes: can't authenticate client session NlSetClientAttributes: denying access after status: 0x%lx NetrChainSetClientAttributesNetrChainSetClientAttributes2Fall back to NetrChainSetClientAttributes NlSetClientAttributes: Chaining to %ws NlSetClientAttributes: can't become writer of client session NlSetClientAttributes: Going remote: (%lu, %lu, %lu) (%ws->%ws, 0x%lx->0x%lx) <unavail>NlSetClientAttributes: Skipping remote call for enctypes only NlSetClientAttributes: no client session to HubDC NlSetClientAttributes: invalid DnsHostName (%ws) from client (%ws) NlSetClientAttributes: no primary domain located NlSetClientAttributes: LsaISetClientDnsHostName(), status 0x%lx Ut@<[o3ʼnEMEMMM S]$3W} 9 3[ot RV9 3[othXYohlYYP豞WhYoVhl3;u "PPQPMQPPuWV'}%PWh YoVhel"0,WSoVu WSoʋHT;t'QhYohkpt}إHdPM?},PSo=`5[ot7}u1x@t Et,PSojc,PSo/EPhPMt1t,E=st4Ph(Yoh kE=U+Љfftu]u+h#u+v!PhYohjh@Yohqj EPP*}RPhhYoPhدYoEPEPk"tEPEP"#utVhhYoSh~|VS}tEjS|\d|SuEPEP7 pWo}jhh WoWAAuEPEP }jhh WoWAjYE@Iu8MtEE}'VuhYoSh}tu軫EM^M_3[oTNlGetTrustedSideInfo: %ws: failed %lX NlGetTrustedSideInfo: denying access after status: 0x%lx I_NetServerGetTrustInfoU@<[o3ʼnESVu3W56[o} VHXpd`PhT\luhPYoVh+Džt^\PEPEPSSVt=fl3jDfnxSPD=So lPxP׍lPEP׍lPEPVDPOPPPjxPjSVJ|Shh WohTPhPVtx0HXp TPhPVM0VXwX;}ptt;|勅\;tJ9vF@t$u+hYoVhDžpth@YoDžlS@P`PdPVW;ÉtJ9dEPd;Ét}P(DžtEPEP t.Wo9luWoPhYoVjpEPEP tWo9luWoPh@Yo9`tyEP`;ÉtTEPEP` tWo9luWoPhYolEPEP2 tWo9luWoPh@Yo>hYoVhDžpj j^΍E@Iu΍Ë@Iu΍E܈@Iu΍E@Iu9t9huhSoRh;t Vo;u DžtVp&ATt Tt 0XA hHhd5So;tH;t AJudP֋`;tH;t AJu`P9ht h9\t \9P_^[t PmMt3NNlVerifyTrust: passwords don't match NlVerifyTrust: old-old password match (%hs trust attributes) NlVerifyTrust: old-new password match (%hs trust attributes) NlVerifyTrust: new-old password match (%hs trust attributes) NlVerifyTrust: new-new password match (%hs trust attributes) NlVerifyTrust: F bit is set on trusted side but not locally NlVerifyTrust: F bit is set locally but not on trusted side !NT_SUCCESS(Status)NlVerifyTrust: Can't become writer of client session. U}tuF]ס]U@<[o3ʼnESVu W}3j~Pf|~Pƅ{{ 7[oSSo2[otP|j@P|| SSof|tuuSrMԋu WhYoVh>E%tWh8YoA0@@PjSoEЅu EEH0Qp4uoE@0U3f BE @tj@Ytj$@j؍URU#PEPjQjuVE؅}+PEԃ0PhYoVh=uұE;}tjh h WohYo7*E@u u܍}쥥} uEPuuE؅tPWhYohf=WhYoSR= jEPSxqWh0YoS7= juS^quEPuuUE؅t PWhYoWh0YoS< jEPS!qWhYoS< juSqjYE@IujYE@Iu39utuKn9utu[9ut uSo9u_^[t juEPbME3<NetrLogonComputeServerDigest: %ld: Old Digest: NetrLogonComputeServerDigest: %ld: Old Password: NetrLogonComputeServerDigest: %ld: NlComputeMd5Digest failed (2): 0x%lx NetrLogonComputeServerDigest: %ld: New Digest: NetrLogonComputeServerDigest: %ld: New Password: NetrLogonComputeServerDigest: %ld: NlComputeMd5Digest failed (1): 0x%lx Rid == AccountRidNetrLogonComputeServerDigest: Can't NlGetIncomingPassword for %wZ 0x%lx. NetrLogonComputeServerDigest: Account %ld is disabled NetrLogonComputeServerDigest: Account %ld isn't a machine account NetrLogonComputeServerDigest: %ld: %wZ: Message: NetrLogonComputeServerDigest: Account %ld: Cannot SamIGetUserLogonInfo 0x%lx NetrLogonComputeServerDigest: Account %ld: cannot convert domain ID to sid.: %ld NetrLogonComputeServerDigest: Account %ld: cannot find domain for %ws NetrLogonComputeServerDigest: Account %ld failed access check. UQQhp9[oj52[oOEt ESjg؅u E=3[oVWt SE6EP}!hpYoSh4 V轨ESCbuhYoSh4 EKfPSofpuwXwtau PSo>u EEMP6h(YoShO4W&_^tSe[E NetrLogonGetTimeServiceParentDomain: %ws is the parent domain. (PdcSameSite: %ld) NetrLogonGetTimeServiceParentDomain: Cannot find trust to my parent domain. NetrLogonGetTimeServiceParentDomain: Cannot SamISameSite. UX@<[o3ʼnE3S3VWu3 3fEj Y}f38^ `0<DžLYoDžP\Yo@8F,XT@Dž,YoHf@@f;u+vDž`>FPf@@f;u+vDž`8^tYFPhYoj_W0 8uDžYo 8d98QFPf@@f;u+ȋdLPf8@@f;u+<|?WSSo<;8\dLѭ\\Pbv\P1[oPdEPv h`Yohf+d1[o `>4PjX4׃ d;tP1[oPdEPv hYo뜍4PhXDž4׋ ;t%W1[oPWEPv h(Yoh*W`XhSSW1[od;tP1[oPdEPv hYo PSPP8W1[od;t!P1[oPd8v h`Yo6[o3ҹTPPj W1[od;gtZt+PEPv hYoh)d1[o[wd1[oPwdEPv hYoh)j(T@ ;t5P1[oPTp EPv hYohT)Tp v h@Yoj7) !EPv hYoh)S1[o`908^0u)F LEjPLPSSjhk`TWoW|j PH0hWj P3F DEH |LhjPDPSSjhSPN: ldap_result timeout on %ws for %ws. SPN: Set successfully on DC %ws SPN: Cannot ldap_result on %ws for %ws: %ld: %hs SPN: ldap_result unexpected result on %ws for %ws: %ld SPN: Cannot ldap_modify on %ws for %ws: %ld: %hs SPN: Cannot ldap_bind to %ws for %ws: %ld: %hs SPN: ldap_set_option LDAP_OPT_AREC_EXCLUSIVE failed on %ws for %ws: %ld: %hs SPN: ldap_set_option LDAP_OPT_REFERRALS failed on %ws for %ws: %ld: %hs SPN: ldap_set_option LDAP_OPT_TIMELIMIT failed on %ws for %ws: %ld: %hs SPN: ldap_init failed on %ws for %ws: %ld SPN: CrackNames failed on %ws for %ws: substatus %ld SPN: Cracked Name is not unique on %ws for %ws: %ld SPN: CrackNames failed on %ws for %ws: %ld SPN: Cannot bind to DS on %ws: %ld msDS-SupportedEncryptionTypes%dSetting msDS-SupportedEncryptionTypes: %#x ServicePrincipalNameSPN: Setting SPN %ws and %ws DnsHostNameSPN: Setting DnsHostName %ws 1.2.840.113556.1.4.1413RestrictedKrbHost/HOST/U=3[otj2XRhp9[oj52[o{tjuuuu 0;}!VPYVhYohA ^3]DsrDeregisterDnsHostRecords: Cannot I_NetNotifyNtdsDsaDeletion. %ld UVuFW=SotP׋NVH |3[o_^]USVE"Soh8[oESo54[o4[o;WEO6;r++H=G EGtDeMQP.EtPEEhEEPjEPjhZuSo!EhEEPjEPjhW;`_h8[oSo^[ÐUQQEePf@@fu+VD&Pj@Sou ~SoFEHf@@fu+SWDPuF POE N@F E N@h8[oFSov4[o9=|3[orDe<So=4[o 9Ut E?;t!G PuhhYohW4[oF0|3[o=|3[o54[or5|3[oEhYohJ 5Soh8[oփ}toM8[oWSoEPSoEPEPh4[oIu<9Ev2+E53[o4[o8SouSoPhxYoh W_3[^ NlInsertChallenge: SetEvent failed %ld NlInsertChallenge: Too many challenges: %lu. Will start scavenger in 2 mins NlInsertChallenge: Removing challenge %ld for %ws Ueh8[oE"So}tS4[o4[oVW}jj~ Wugux}9E tgFt`POuu v詑uFeEPvEt2EEhEEPjEPjhZuSoEV4[oZ_^h8[oSo}[t}}v'EEEhEEPjEPjh} U@<[o3ʼnE=3[oM ES]W}pt VPKtu "5@5[otK3hPfxzP7K xPjA谝|xPphYoV~hYoVpYYjSVMW4h0YoVTYYjWV~MWSp} jXGHutt tJ^M_3[XNetrServerReqChallenge: ServerChallenge = NetrServerReqChallenge: ClientChallenge = NetrServerReqChallenge: client %ws (%ws) is starting secure channel setup U@@<[o3ʼnEEEE E$3S3VW`af3PQf301f3 !f3@AfM Uu3hif3pqf93[ot SuQRjVH5@5[ote3hfxzSPG xPjAo;Íx}Zo1Ph(ZoWVH;uDž"XUu hZohYYDž"06[o!9,6[ou*@u#hZoV Dž9|6[otu hHZo9L6[otu%@tu DžSP #P0PjSRW;É}PhZoWh*&hXZoS j0PS It#h ZoS j PSHh8[oSo/=4[o4[o&jjG P8aGhGlGpG hx ZoSt+ jpPSNHh ZoS jhPS+Hu0 0# @PPhPpP@P6?kh ZoSl jPPSG6PP`PpP=hP ZoS- jVSPGh ZoS  j`PS-GjY`3thX ZohwcuGPω?4[oDžh8[oSoudh ZohKDž"3]PhP Zohh8[oSo n}u .z3`RPRPQ0%%@с   PuR})h ZohF@7PPhPn;hH ZoSYYjSE39hSPCB Dž;uDžDž 'uDžDž  Dž hZoViSSShZoPSj蠕;É}Ph8Zoh)7hZoV3ہdu Dž9jY@IuujPjPjh[<"u9w-hPjPjhZg9t @jYэP@Juэ0@Juэ @Ju@@Iuuj%M_^3[ NetrServerAuthenticate returns Success: %ws on account %ws (Negot: %lx) NetrServerAuthenticate: Cannot set client DNS host name %lx (ignoring) Windows NTNetrServerAuthenticate: %ws is running NT %ld.%ld NetrServerAuthenticate: ServerCredential SEND = NetrServerAuthenticate: NlInsertServerSession failed for %ws on account %ws NetrServerAuthenticate: Can't NlMakeSessionKey for %ws 0x%lx. NetrServerAuthenticate: Failed to authenticate %ws on account %ws NetrServerAuthenticate: Bad password %lu for %ws on account %ws NetrServerAuthenticate: ClientCredential %lu MADE = NetrServerAuthenticate: ClientCredential %lu GOT = NetrServerAuthenticate: SessionKey %lu = NetrServerAuthenticate: ServerChallenge %lu = NetrServerAuthenticate: ClientChallenge %lu = NetrServerAuthenticate: Previous Password for account %ws = NetrServerAuthenticate: Password for account %ws = NetrServerAuthenticate: Can't NlGetIncomingPassword for %ws 0x%lx. NetrServerAuthenticate3: the client %ws is asking for MD5 and this server disallows it. NetrServerAuthenticate3: the client %ws is asking for NT4 crypto and this server disallows it. NetrServerAuthenticate from LM 2.x (disallowed). NetrServerAuthenticate entered: %ws (%ws) on account %ws (Negot: %lx) <unavailable>UE Pu uuuuu u]UQeEPuuuuu uUTrustedDomainName != NULLNETLOGON_CONTROL_TC_QUERY function received. NETLOGON_CONTROL_TRANSPORT_NOTIFY function received. NetrLogonControl: User %ws is in a trusted forest (%lx). NetrLogonControl2Ex: RtlInitUnicdeStringEx on InputData->UserName failed: 0x%08x NETLOGON_CONTROL_FIND_USER function received for %ws. NetrLogonControl: Password Change failed %lx NetrLogonControl called with NETLOGON_CONTROL_CHANGE_PASSWORD for an interdomain trust account on a BDC. NetrLogonControl2Ex: RtlInitUnicdeStringEx on InputData->TrustedDomainName failed: 0x%08x NetrLogonControl called with NETLOGON_CONTROL_CHANGE_PASSWORD and specified NULL trusted domain name. NETLOGON_CONTROL_CHANGE_PASSWORD function received. InputData != NULLUx@<[o3ʼnEMEMS] MW3M ƅƅƅƅ9=3[ot V;uDž"PuSh4ZoVh;tȋSo,WV3YuWSoDž"EHdpt}襥PM},PSo=So,P׋EHtBHtDžHj0ȉ3ah`8[oh7[oh7[oh@8[oӍPӃƅƅƅ:8+h觋؉uh7[oDž#hjSH@ Svt$FxP5$3[ov\v h7[ot׀ u)v% u,uꃽuPj@Sok\P蚊C`jPC` C\ !u,D j؅wL Dt臼u u#ߋL KLKLK jZY0fQ,fQ.QpHQjp0#\,; u>[`v1K0tuPP\u؋dPh@8[oh7[oƅh`8[oƅƅuCtP: C$t_f9K rTjGY󥉅EPh3Zoh {,tDC(fv;@@PjSot+C(Ps,W>C( 3f G$u`3Zo83Zot3Zo#PsD#PQsPl};Ph2ZoVh9t=th 2ZoVj39t SouWWsPVWWjW;tlPSo8x$h7[oh1ZoVhl Dž jYE@Iu"uj Y@Iuuhh1Zoh39t w9t So9t 9|;u ;tg];t6V٢9~\v3ۋF`PǢG\;~\rFhtPV3;tF;tPqVk5SotPh@8[oրth7[oրth`8[o֋^M_3[#NetrLogonGetDomainInfo: %ws %ld Returns 0x%lX NetrLogonGetDomainInfo: Input is invalid NetrLogonGetDomainInfo: DnsHostName of %ws is %ws NetrLogonGetDomainInfo: Cannot set client DNS host name %lx (ignoring) Windows ServerWindows WorkstationWindows unknown versionNetrLogonGetDomainInfo: %ws is running NT %ld.%ld build %ld (%ld) NetrLogonGetDomainInfo: %ws %ld Entered UME!HtHt5j|3E v*v=v=v=uQjjPu}j2X]U]dUVWjXEEE@EWoujhWhWoE EEE@E5@5[oth5ZoVYYuuV'EPEPJ}jhWhWo]5@5[oth5ZoVYYuuV_^ NlEncryptRC4: Encrypted data: NlEncryptRC4: Clear data: UVWjXEEE@EWoujhWhWoE EEE@E5@5[oth6ZoVYYuuVEPEP,}jhWhWo*5@5[oth6ZoVYYuuV_^ NlDecryptRC4: Clear data: NlDecryptRC4: Encrypted data: UQSVuW} 3F}] uShhWohXWoSE PSjV;}Ph8Zoh x]@5@5[oth8ZoVYYWSVEPSWSu E} jh<hWohpWouh`8Zo떅5@5[oth 8ZoV1YYWSV\} _^[t E P( NlEncryptAes: Encrypted data: NlEncryptAes: failed to encrypt 0x%08xNlEncryptAes: Clear data: NlEncryptAes: failed to initialize AES 0x%08xUQSVuW} 3F}] uShqhWohXWoAE PSjV;}Ph;Zoh x]@5@5[oth:ZoVrYYWSVEPSWSu E} jhhWohpWouhp:Zo떅5@5[oth4:ZoVYYWSVJ} _^[t E P NlDecryptAes: Clear data: NlDecryptAes: failed to decrypt 0x%08xNlDecryptAes: Encrypted data: NlDecryptAes: failed to initialize AES 0x%08xUVuFtVu u=tVu uB+jhhWohTovh;Zohu ^] NlEncrypt: unsupported algorithm 0x%08xUMAtQu u%tQu uPhhZoSYYjEPS ujY}3uuvd}FtPulWh>ZoSAYYjuSi h@>ZoS)YYjWSS 3fF`fFXf!Fb3M_^3[K NlCheckAuthenticator: Seed + time + 1= NlCheckAuthenticator: Server Authenticator SEND = NlCheckAuthenticator: Client Authenticator MADE = NlCheckAuthenticator: Seed + TIME = NlCheckAuthenticator: potentially malicious client is calling with timestamp of 0xffffffff NlCheckAuthenticator: Time = NlCheckAuthenticator: Client Authenticator GOT = NlCheckAuthenticator: SessionKey = NlCheckAuthenticator: Seed = UW3}9}u b^E ;u M8EPf@@f;u+SVF6PWSo؉];u uVS5`Soj@Sփt bj\SYY;t3fXEESbt9}tZu3fE}fEPSo\3[oPEP`Sou*\3[oXPEPsuf}uEf8.tÍPf@@fu+pv(u 6P*tE SV0 u5Soօ}] tPփ#^[_U E S3ۉ]];u EPhHpTohSou(;ÉEE9u E%pVMQhPDZo0u~(;ËuE|EW39t j&0hDZoDSo tG9u_9tLf9t u Pq*E;tVl1[oY^9]t ul1[oYE[B:32:1EB93889E40C45DF9F0C64D23BBB6237:otherWellKnownObjectsUW3}諫3}}EEEEEEEPu EuEWoh1[o P$_ UW3}諫e3}}EEEEEEEPu EmTouh1[o P=$_ UW3}諫3}}EEEEEEEPu EuEmToh1[o P#_ USVuEPSoj^f9uvfE] jfEXfEjEPEP]So}uWjY3SfCSoY_E%f;vjXE3f C^[UPSVW3jY}}ث33u}u}u}諍EEԍEE؍EȉE܍EEEhTouEčEEЍEjPuuEtpTouE"3;|UEPhHZo3uO$}397t0uSoYYtF8uZf3b%uf9tbMEPu }}tjhFhHZoh|HZo茺EuESu Pu|} tWl1[oY}tuA%^[_WellKnownPath == NULLd:\w7rtm\ds\netapi\svcdlls\logonsrv\server\svcacct.cmsDS-HostServiceAccountBLUSVW3fE}3Sf3]E;u hTouEjP';uEP,So;|}SjEPuek;ua56[oVlu^JSVyu3EPSju $P]L0[o9]t uSoV-m9]tu#;tV5ju_^[U@<[o3ʼnEES] VW}3VPf P\hToSjPU&؃VPu 3ɍMf8u3BfAxr3fEjSoPSo؅|XjPhW"P(So|,Wh"Pp(؅|?jVuEPSo@8[oVSoEPjEP\3[o~rVSo^9]tu9]t EPo_[U,ES3ۉ]]؉]]E]ԉ]]]]t]܉E9]bebhp9[oj52[o3"Pi$;EPu U;VWEPE %PSSSSSS>P($;E؋0SEPV;SSoPSo;SEPVSo;|kEP53[ou;|SEPuEPEPuui;|39]tEuj|M t9]tw9]tZZEthWouu= 0(LONG) NlPcReadCounter32(ClientSession->CsPerfData, NLPC_Waiters) >= 0USVW}ܶSowjhSh|Wou +-(~tjhSh ]ZoԧPSoFujhSh\Zo誧Fft PSofPSoj3FVSou-PhSh\Zo[SoPh\ZoWh%\fRVVǜ7[VV52[oNV7r}jhSh8\ZoV52[or}jhSh[Zoަyn_^[](LONG) NlPcReadCounter32(NlPcGlobalTotalInstance, NLPC_Holders) >= 0(LONG) NlPcReadCounter32(ClientSession->CsPerfData, NLPC_Holders) >= 0ReleaseSemaphore CsApiSemaphore returned %ld !"ReleaseSemaphore failed"ClientApi->CaFlags & CA_ENTRY_IN_USE!IsApiActive( ClientApi )US]V3Wuu;f93jVmE;tySpkE;tl`8[oWSou95h3[ovNl3[oPEPSoEPS`SouYl3[oD t Puu?EE$;h3[or3WSo29utu9utu_^[WSo3АUSVuW39wWh7hܶSoh|Wop9tWh8hܶSohWoSPSoPSoܶSoujhHWhWoSouSoPh_ZoVSX} u jjF0PN9wPhbWh|Wo薣ujhcWhHWo{h_ZoVSPX ujhoWhWoJ8SouSoPhWoVSXVT_^[]NlDcQueueDiscovery: Can't queue it. NlDcQueueDiscovery: ResetEvent failed %ld U,S]VW} 3E;u2{u MKMPEPSoEKMK MKOpMOtMOTMOXM苏uM3ɉM 9NME3ۉE9]t9XtupXSoEtCf}t)8t$0EPSoEPEP`SotH3CEf}t\xtVpEPSoEPEPYTDt8EPEPhcZotEPEPhcZoWhV eE E E,;F&]EPEP3PuPsPPEPEPV0EFE$tNFEM HM@tEHt CtEHt CtEH ut*E@ t;tjhhܶSohbZofEp CMu AEK Ht }EHt t` 3_^[ EM$]tU :TrustedDomain->ParentIndex == 0 || TrustedDomain->ParentIndex == ParentIndexNlUpdateForestTrustList: Similar trusts have different netbios names: %wZ %wZ NlUpdateForestTrustList: Similar trusts have different DNS names: %wZ %wZ U SVW3h`8[o}}}SouEPuVe;} P%}#E@tE t9Eu9MuEtEPh؅uxujWu3҅R#PEPSv|SvtvXuu Q؅tSheZoVh9RuQfh`8[oSouEM_^[NlPickDomainWithAccountViaPing: Cannot NetpDcInitializeContext 0x%lx U$SVuW3W]SoEkPj@SoE;uWSo3] ];t+M@uE;uWSoEE;t];uV~Wuu ^v^\E;u 7h`qZovjPF^^.}uhpZovhkPFFFEE^;Ev]]9]u 8^E~9uRWVuu vE;u16Fu h8pZouj衮8^t^F };tP9^vNSSSSjP7~E=u,P6hoZoh+7^c6 9]9^uF8^t$FFu h(oZoujhFF FFF8^t@h'vMt/~u h^vnF9u SSSPav^NNEEE;E9]hnZojKYYSoEu=Su] 8^8^~WVuu vE;6F^u h8pZoujSSSSj7|EF=u,P6hoZoh蜬7^!b649]t/EukMt h0nZoh^3m}t]9]uFF E;9]t u]EPEPSu"%E;=%tdytQu FhmZouW9]uv^[a6^Av Eav^ *^E}s)Qu Fh(mZouW被^F9^u+9^ u&8^u!u FhlZouWoF8^tMEE;E jdSo9]CEMku thHlZouj69]tum9]tb9]vT}EE G;tP9;tP-G;tP0`G;tP#`G;tPHM uuSo9]t;uuhkZohX _^[ NlPickDomainWithAccountViaPing failed 0x%lx NlPickDomainWithAccount: %ws has account %ws NlPickDomainWithAccount: %ws no ping context for account %ws NlPickDomainWithAccount: %ws responded negatively for account %ws NlPickDomainWithAccount: %ws invalid response for account %ws NlPickDomainWithAccount: Cannot NlPingDcNameWithContext %ws 0x%lx NlPickDomainWithAccountViaPing: Waiting for responses NlPickDomainWithAccount: %ws: Can't find DC for domain %ws (ignore this domain). NlPickDomainWithAccount: Cannot ping DC %ws 0x%lx NlPickDomainWithAccount: %ws: Noticed domain %ws has discovered a new DC %ws NlPickDomainWithAccountViaPing: Cannot NlPreparePingContext 0x%lx NlPickDomainWithAccountViaPing: Captured DC %ws US](Vu,W3>9}uEP,So}WhrZoh) EPEP3}rZo@Py|Qu]F;w3VuuzM3fqEE E(#EPx;ru3} t%Su$rZou uuuu j u_^[(on GCvia LsaMatchNlCrackSingleNameEx: RtlInitUnicodeStringEx on InLsaAccountName failed: 0x%08x U( 3[oSV5SoW3h NPEEEE؉M؋ 3[oPjM֋]=SoEEPCj5 3[oSotGtBhPxZoj-YYuSoh NjEPjuE׃}thwZojYY39<uuu9 uMȋE At\A;tpf@@fu+ttxf@@fu+tFIt QSoEED0,E3EEE,; {9uuuSou3u;u,j^uSo9}tuME8E8_^[E Et* Pj@SoE;uj^uSo%Ek,ƉE}}9 3ɍVMU} |1{}tUu}Ut1rt1 rt12t1rt1z D1trMUuƒHE39|1tB эrf:BBfu+tVQPuEMU 3z9|1t=BLэrf:BBfu+tVQPMU uEzE,EUEu,M; Z39}t-9}v>EU Htu u ,Jt9}vEM 8,IuuSo339}t uSo;pEMEMrNlpEnumerateDomainTrusts: Can't get updated Domain List from cache. NlpEnumerateDomainTrusts: NlGlobalTrustInfoUpToDateEvent has been reset. Uu5=3[ot E 2[o\3[ooM3]USVWKu39t|99[ouShhܶSohWoLV?fPh{ZoW蛜59[oq;uhzZoWrYYPh(zZoWb P;tPM:tu ;tFAV:_^[]NlFreeClientSession: Could not delete old perf instance: Status = %d NlFreeClientSession: Delete successful. NlFreeClientSession: Closing Instance (%p): "%ws" ClientSession: %pUQ38E S]VWEPSo =с@u!} tt @;tz뽍@u6j࿃uPSoVft*h'V:t39u PPuVMV:V7PSo7;uPSoXuLS073;t>9u0V/ft&h'V9t9u WWWVMV':V@7_^[USVu3WܶSo9wShWh|Wo蒅9tShWhWoyuShWhHWo_93[ouSjPVLh`8[oSo9wShWh|WouShWhHWoh`8[oSo9uShWhWoل8SouSoPhWoVh9V 6_^[]U\@<[o3ʼnE3SVW3}fE}MMfMȉMMMЈMMMM܉Mt }MuEE^}$EE$E(E,MMMM;u }QPSoEPhVl؅}Sh ZoVU JEjYMQRP ؅|MQPu)؅|EPPu؅|EPE Pu؅|EPju؅vE3ۉ]tE; 4[ow= 4[oL;r/Qt"Ea܉]tStck]u4EH;rQ4[o؉]tHeap]u ‰E]܁"LD]MEft:uwS3f CPwuUj\Yf B3ۉ]E} Pwul}3Ƀ f Gu+j@W`SoYYEt+Mt@@Ef9tEWfM} ]QMQWSPEEPuhPZouj腕(}u(}u"jjuhZouVa}u} u}taSWuhZò} t%}t SWuhHZo봀}u jWuhZo례}t}u} t}t}u} tEEEEE}j_)MEPEPPEPQEPEj#E[SPE#EԉuPjE΅u49}u 8E]}?9}v9]t}uuPuuh ZouQ*9uuEP,So؅} ShxZojjEPu{2EȅtNP1}uWuԁ3V]83Vf7EPuuhȈZouEj裓$w39]cuE9]u78]MEPPEPQEPjuEؼZoj jpAMEPEPPEPQEPE#EjPE#EPj9]t[;u:9}u}E}9}}t}uuPuuh(ZouQ豒39]v}l9d6[o`uuuR};EuhZouVaePSo_pfȃPwt}j\VxSoYYuƉu@@EuPWuh0ZoujAuuuhZoujđe}t} OE, E,e3sSh8Zo9_Tȃs PwXuVu 3f FShZoV+ PSo}tEԉE뒻|O}tuu$uu$|(}t"uM(ut P7&ߋEt8HeapuP4[o}tu.Íe_^[M3Ɛ(NlPickDomainWithAccount: NetbiosDomainName too long: %wZ NlPickDomainWithAccount: DnsDomainName too long: %wZ NlPickDomainWithAccount: Username %ws is in forest %ws (found %hs) NlPickDomainWithAccount: Username %ws is %ws\%ws (found %hs) NlPickDomainWithAccount: Username %ws found via 'pinging' NlPickDomainWithAccount: Username %ws can't be cracked (%hs). 0x%lx %ld On GCNlPickDomainWithAccount: Username %ws is assumed to be in %ws with account name %ws NlPickDomainWithAccount: RtlInitUnicodeStringEx on UpnDomainName failed: 0x%08x NlPickDomainWithAccount: Username %ws can't be cracked %hs. 0x%lx %ld NlPickDomainWithAccount: %ws: CrossForestHop (%ld) and not AtRoot (%ld) NlPickDomainWithAccount: %ws: Both CrossForestHop (%ld) and ExpediteToRoot (%ld) NlPickDomainWithAccount: %ws: Non-DC passed CrossForestHop (%ld) or ExpediteToRoot (%ld) NlPickDomainWithAccount: %ws: Must be either UPN or SAM account. UPN:%ld Sam:%ld NlPickDomainWithAccount: %ws: Algorithm entered. UPN:%ld Sam:%ld Exp:%ld Cross: %ld Root:%ld DC:%ld NlPickDomainWithAccount: arithmethic overflow when calculating allocation size 0x%08x UVWh ZojKu YYVj u3;u9>v3ҋNL!G,;>r_^]NetrEnumerateTrustedDomains: Called. U`@<[o3ʼnEEM EE(V3EE,W}M̉}ȉEEuĉu;t0GEf90uuԃu}f97uuăMGEЋEEtGuuhPZoQjWES9ut9uuuhZouS/EGu E'u EPuhPZouSEGtuhZouj؅E}3fE}f}2Ʌt%f?vWhhZouS蝅EGE}ąt)f9vWhZouSmEGEthE}$EGPjSoEtWuP衶M 3fy3E9Et uSohMQPujhyE}39EEptuXSotjEԅt)8G wEWpEP 3fD}3fE܋E!u$EE܉EhEPuSoPujhxE 89Eu9EuhxZouS? e}ttuPXSotE}tGTf8tPu`Sot6E39MtFGpf9t>Pu&#uJ9Et1GpPuhZo}tˍGTPuhPZoWS$9MuE̋?3 ;K}tXthZoVh$ VE3}uu$uu uWVu>[E0uKEpEu} PVuuuWt AF0qhZoCjuuuV_ M}t Eȋ@h0ZoVh# t8u0EȃxuFpFTV M_3^Z(NlUpdateTrustList: Already in trust list NlUpdateTrustList: Added to local trust list NlUpdateTrustList: Deleted from local trust list NlUpdateTrustList: Similar trusts have different netbios names: %wZ %wZ NlUpdateTrustList: Similar trusts have different DNS names: %wZ %wZ NlUpdateTrustList: All parameters are NULL (ignored) NlUpdateTrustList: %wZ: DNS domain name is too long (ignored) NlUpdateTrustList: %wZ: Netbios domain name is too long. NlUpdateTrustList: %wZ: trust is KERB only (ignored) NlUpdateTrustList: %wZ: trust type is neither NT4 nor NT 5 (%ld) (ignored) NlUpdateTrustList: %wZ: trust has no SID (ignored) NlUpdateTrustList: %wZ: trust is not outbound (ignored) U,eSVuWft EF FEF ] E3jY}eEԋFE؍~E܋GEF EEftCXPVouWCP`SoEPhZoSh{CtEF$M QȀɍV#QuPh@EPjuE|I}e~(v.eu F,EWPSuE|EEE0;F(rփ}tu<E_^[EPh8ZoSh>{F$MQM QȀɍV#QPuEh@jPSuE|EI}t/8u%8EPhZoShzENlAddDomainTreeToTrustList: Closest path to %wZ is via %ws. %wZ: Added from enterprise tree in LSA NlAddDomainTreeToTrustList: %wZ ignoring enterprise tree entry for ourself U8S3ۉ]]]\thZojxYY3VuW3}䫫P]ȉ]܉]So5 3[o8SouSoPhPZohx 8;t6t Pc#? ;u39]t EPjM]S_uhȧZoVWGxhEPEP'MSuh(ZoVWx3;9EE{!EEM<f?GEtPhЦZoVSwuFP`SotuhHZoVSw63PPPPPjjWVEP؅uGt wWVEEE ;EaShȥZoVhInsertedd:\w7rtm\ds\netapi\svcdlls\logonsrv\server\worker.cjhȭZoӳehS[otSoEP[oP[oP[oP[oP[oP[o%P[o3 S[o3S[o3@S[oP[o33@ËeEjX蛳ÐZoZoU=P[ouhZoh)hYY3aSWhS[oSo3V4 S[otoS[otfPWhWoSgj6Sot6PWhXWohg6Sou6SoPWhWohg&ƇS[oGzu39E 8FtM9P[o=P[o 339 S[otGrhZoh.gYY3vVhdZoSg}tP[oP[oF05P[oP[oP[oF05P[oFp~uhS[oSo3@^_[] 9E\ZouXZovVPhZoSfN}HtP[oFP[op5P[oP[oFP[op5P[o=P[o3FhS[oSouMQPWhZoPPSou4 S[oPWhZoS f>uSoPhXZohe P[o딐NlQueueWorkItem: Cannot create thread %ld %lx: %lx: %lx: Starting worker thread Boosting %hs priority work item %lx (%lx) lowhighInserting work item %lx (%lx) NlQueueWorkItem: Internal Error NlQueueWorkItem when worker not initialized UEV3tHtjW^2!5P[o!5P[o!5G[ouSoP[oP[oG[oE ^]U=G[oSVVEjP?[o]EE UEE M]UHf@@fu+DEEEEUčHf@@fu+DEȍEEЋEjYUԙjpEXM؉UMfEuEEUMfuEP5P[o5P[oSo^[tPhZohb NlpTraceServerAuthEvent: TraceEvent failed 0x%lx L9[otjP?%L9[oH9[otjP?%H9[oÐUVut0VV;8tP PpSoV^]USV5x4[oWx4[o;t'uSoYYt6;u;u3_^[]U@<[o3ʼnEM  S3VWfE}f}M 3\.u];t8; 4[ow04[oD;r#P%tC蕬t Stcku7C;rP4[ot Heapuh8Zoh`YYSjVPw^(S=SoFSPF؋E QpSޑ F SPF؋EQpS辑 SFP׍F PFPhZoj `hhZoEP׍EPEPEPuEVP?}uPhZoh_}tu3t>HeapuV4[oe_^[M3_ NlChangeCachedPasswords: failed to update logon sessions with status 0x%08X, substatus 0x%08X MICROSOFT_AUTHENTICATION_PACKAGE_V1_0NlChangeCachedPasswords changing cached passwords for %wZ\%wZ NlChangeCachedPasswords failed with allocation failure. UQVWEPx3V}ݴuaVWuE PtSoWWWuu uukzu"WuuuEP} u/}E_^USW@8[oW3So\3[ouWSoVuH$Qp`,WSot2\3[o@XjjPFXjPFPV;u#3 x4[o@x4[oAx4[otV轳^_[]S 8[oSSo=L3[ou SSo[Ë x4[o%L3[oVx4[o;t(Wx4[opQW x4[o;u_SSo^[ÐUQSW=Soh 8[o׃=L3[oSou 蛬E|@ute.uE|V8[oVh4[oSo%4[oV^h 8[oӋE_[USW 8[oW3So9L3[ou ؅|1u{u%PV PQV ^WSo_[]UQQP[oVW33 P[oukEPVVhZouuSoE Et%VVuuhP[o\So tuuSoP[o P[ouWhZohOZ _^F~f1Could not open event log, status 0x%08X UhW3fE}f3fE}f3fE}f7u5P[o5P[oSo5EPu LEPu8EPu$MV3jZo_;tQ;t f;t AAUMu}MEE;tf9EtMMAAMu}MEE;tf9EtMMAAMu}MEĉE;tf9EtMMAAMuȉ}ЉEԉẺE܉EEPjuM5P[oM5P[oESo^EPr=EPi=EP`=_(NULL)VW5P[o=P[oWVjjhP[o\So;u;uۋ tWVSo_^ÐUE H@u+M;At2Pqu hSo ]UQeVuWEPEVu p p!u.9Et$9uuPhh ZohܾZoCEME0_^AllocatedUnicodeString != UnicodeStringBufferd:\w7rtm\ds\netapi\svcdlls\logonsrv\server\nlldap.cxxUVuF 9E sjzXPvu_F M 3^]U @<[o3ʼnEEPE US]`VW3fE}f33jfEY}2@M t4Pf@@fu+MQPuu|EPjuuF;rbujSoMEfFE FEFEF$FP~,F0So}F8F(t$u^d0[oPuSr ud0[o3ɉMU<?_V($Er s sEetKSHSoE9CE 9CE9CM9K$C,;Et}s 3}t6CPuh0[otse}vau{(+<7u >>{uPۋt@>ff;uftfPf;Qufu3uEE;ErE;EtUB9E]VKHE CYC0EjN(E7+PSXr Hf@@fu+M\CAM;MM}tu^ uSq EFq0u SoME_^3[?(%%Uu(u$u uujuuu u]$UVW}WSowP PQSo96uW So_^]UuuSo]%SoUuEPSoSo8t EPSoED=v35fEMQPݕuPEPEPSo} uɕʋEUuEPSoSo8t EPSoED=v35fEMQPauPEPEPSo} uMʋEVW3@[o8t 0\ r3O[o8t 0\ Hr_^ÐU]%SoUEfM ufHM MHMHPuSoPSo]UEVu;r1U W+;_v$+‹U;sЋE J@t w3^]3@UMVu@;r2U W+;_v%+ыM;sUtfI@@ft w3^]3@UMVu;r-+9U v$+M ;MrPSo;EuU 3@3^]UuEPSoSo8t EPSoEDfEPCnEu3!jEPEPSo} uZދEUVuu3fEPSoVEPSoE fEjEPEPSo^ UVu ujXEHQVPugV蠒3^] UQQSVuW33tHFftfu.} tvu tCf~u 6uu +#WjSo}ujXe4ߋ]Cftsfum} tsu 褑tXE4f{u03jXuEfD1[o}fFCFE jXj fXMDEyEME83_^[UQQVuFW3}};Fr LIS;N t!N ~ыLY;uIN@;Frh4[oSo3vNB\[;s@;Fs;tLDFTF|O)N@FEtO}ti} tcF+#tuO u QwPE;u.u3f3Wj,Sou SoEtj.XfE_^[SyncDomainWithMembershipSystem\CurrentControlSet\Services\Tcpip\ParametersUQE3S2ۈ]9UvYM t#IttItIu EB;UrDŽt E}t EE [UEPSo}32V5SoEPEPքtEPuքtE;Ew3+E^UE| M 3 E ]U} wErw M3 E] UQEu E 3P@uS+XEPSqtj X`EPEjYRP~}BVujgujX-W} SVSu7jjSou!V TSo3_^[U} vVu6M &} w^]UQe}SVWv'u} +7P6؅uEE;Er3_^[ uu ꐐU@<[o3ʼnEEMef}S]Vu EЉMutt3ff} dvjWX$EEP@fE܅ujWjdY38E PE̍8PSEE่Zoff;uftfPf;Qufu3P[ou0|P[ot;Uf9f;:uftfyf;zufu3Ƀt:PSouhSe jju$SoP[ou E>(f} u]=(So8RuujSPQffM3fSo=E;u{jjEPSEPEP Eu̍8PEȉ8E<8PuujV5P[oh0׋Mԃ<ufuԋE3f9t(URQuujPQjSoffu SoEuQu̍8P fE_M^3[1BASEUU3f9t!VW@qf9AAfu+TJf9:u_^]UMW3f99t"VPf0@@fu+Df91u^G_]USVuWVEHf@@fuuU +؍D7++RPtcD_ 3_fLF^[] UU3f0rf9wk BDB fu]UE S3ۅujWXJ!VuWf9j%VxSoYYu,VI؅uj^E tSuO_^[]3^ƍPf@@fu+ptSHO<6Wpb؅tPSu Sot 6;vSojW^uE 뎸0[oA%0[o0[o,%0[o0[o%0[o%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So1[oQRPh\ZogZY%1[o0[oݐ%0[o0[oː%0[o0[o빐%0[o0[o말%0[o0[o땐%0[o0[o냐%0[o0[on%0[o0[oY%0[o0[oD%0[o1[oD1[o01[o,1[o׏$1[o͏1[oÏT1[oQRPhZo]ZY%T1[o1[o1[o1[ox1[ot1[oh1[od1[o|1[o\1[o%So%tSo%pSo%lSo%hSo%dSo%`So%\So%XSo%TSo%PSo%LSo%HSo%DSo%@So%<So%4So%0So%,So%(So%$So% So%So%@So%,So%(So%So%$So% So%So%So%So% So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%So%SohDhPZou3ۉ3ƅ3GDž]PShDZoSh  > >pH2GK >H @pH2GK > Hp H2GK > > pH2GK > >  > pH 2GO > > H ,pWoYSoq5So<[oZWo+ Wo%XSo%TSo%PSo%LSo%pSo%So1[oQRPhZow ZY1[o1[o1[oڸ1[oӐUME ;r M3 E] U\@<[o3ʼnESVWSo؁jCXC+qejEPu SoẺEEPSoe}NF}uKeh@ZoSouh$ZoSot)h ZoP SoteMQЃu EvEMGQPuE|rE!EtEPWu|W?9EsEO#}+}ujXEM;r-jhuWSotEPVuWSot3@3e_^[M3y$ÐSetThreadStackGuaranteekernel32.dllkernelbase.dllUud@0jpSo]Uud@0jpSo]1[oQRPhZo ZY%1[o1[oݐ%1[o1[oː%1[o2[o빐%2[o 2[o말% 2[o2[o땐%2[o2[o냐%2[o2[on%2[o1[oY%1[o1[oD%1[o1[o/%1[o1[o%1[o1[o%1[o,2[oQRPhZo ZY2[o2[o 2[oڸ$2[oӸ(2[o̸H2[oe{%H2[op2[oQRPh|ZoZY%p2[o%So%XSo% Sot0[o{p0[o{l0[o {h0[ozd0[ozX0[ozT0[ozH0[ozD<0H< 0L<00,P<804 T<H0D0<0@<0P<1<T1P<\1X<1<1<2<420<<28<p2lCRYPTBASE.dllpcwum.dllAPI-MS-Win-Security-SDDL-L1-1-0.dllCRYPTSP.dllADVAPI32.dllnetutils.dllsrvcli.dllWS2_32.dllIPHLPAPI.DLLWLDAP32.dllAUTHZ.dllNTDSA.dllNTDSAPI.dllWINBRAND.dllbcrypt.dllsamcli.dllt*Pr(<FXfv*:Nbv":Nf~0>P^pst o q$Evaw. u()O7I6Vj~ >b|<LXb"@TrSystemFunction001SystemFunction002PerfDeleteInstancecPerfCreateInstancecPerfStopProviderPerfSetCounterSetInfoPerfStartProviderPerfIncrementULongCounterValuePerfIncrementULongLongCounterValuePerfDecrementULongCounterValueConvertStringSecurityDescriptorToSecurityDescriptorWCryptGenRandomCryptAcquireContextWPCryptReleaseContextAllocateAndInitializeSid2LogonUserWSystemFunction033LookupAccountSidAFreeSidOpenThreadTokenAccessCheckGetLengthSidEqualSidRegisterEventSourceWAReportEventWDeregisterEventSourceSystemFunction032SystemFunction031SystemFunction030LsaOpenPolicyLsaQueryInformationPolicyLsaFreeMemorySystemFunction015SystemFunction013SystemFunction014SystemFunction012SystemFunction007I_ScSetServiceBitsWLsaCloseLsaEnumerateTrustedDomainsdNetpwNameCompareNetpIsUserNameValidNetpIsComputerNameValidNetpwPathCanonicalizeNetpwPathCompareNetpIsDomainNameValidNetApiBufferAllocateuNetApiBufferFreeNetpwNameCanonicalizeI_NetServerSetServiceBitsExNetServerComputerNameDeldNetServerTransportEnumiNetServerTransportAddExNetServerTransportDelNetShareAddNetShareGetInfoNetShareDelNetSessionEnumNetShareSetInfogetnameinfoWSASocketWWSAEventSelectWSAIoctlGetAddrInfoWFreeAddrInfoWWSAStringToAddressWWSAAddressToStringWWSAAddressToStringAGetAdaptersAddressesLAuthzInitializeContextFromSidAuthzAccessCheckAuthzFreeContextAuthzFreeResourceManagerlAuthzInitializeResourceManagerGetConfigurationNamesListGetDnsRootAliasDsCanRODCHostNdncForNetLogonCrackSingleNameDsGetServersAndSitesForNetLogonDsFreeServersAndSitesForNetLogonIsRODCInSiteForNetlogonIsFullDCInSiteForNetlogonIsMangledRDNExternalSGetConfigurationNameSDNSHostNameValueCheckForNetlogonDsGetDomainControllerInfoForNetLogonDsFreeDomainControllerInfoForNetLogonDsCrackNamesWDsUnBindWDsBindWDsFreeDomainControllerInfoWDsGetDomainControllerInfoWlDsFreeNameResultWBrandingFormatStringBBCryptDestroyHashBCryptFinishHashBCryptDecryptBCryptCloseAlgorithmProvider+BCryptOpenAlgorithmProviderBCryptSetPropertyBCryptGenerateSymmetricKeylBCryptEncryptBCryptDestroyKeyBCryptGetPropertyBCryptCreateHashBCryptHashDataNetUserSetInfo\tH( $T \ h0 x8 H t x l@ ` TL H` 8KERNEL32.dllRPCRT4.dllmsv1_0.dllLSASRV.dllSAMSRV.dlllogoncli.dllDNSAPI.dllcryptdll.dllAPI-MS-WIN-Service-Management-L2-1-0.dllAPI-MS-WIN-Service-Management-L1-1-0.dllAPI-MS-WIN-Service-winsvc-L1-1-0.dllAPI-MS-WIN-Service-Core-L1-1-0.dllAPI-MS-Win-Core-LocalRegistry-L1-1-0.dllAPI-MS-Win-Core-LibraryLoader-L1-1-0.dllntdll.dllmsvcrt.dll      & @ J T ` h r |            $.8BP\hp|&@Zx":Zv,<Tft(>Hf|2Nn<Rp6Vv2@Tp~ *<Vdx *:Pbx&6@Tjx&>Td&Hb<Z $B\v,<Nl>d  4 P x     !.!P!`!!!!!!""6"R"l"""""" ##8#P#n####$$0$@$R$j$|$$$$$% %2%P%n%%%%%%&&6&V&h&&&&&&&&'2'L'^'v'''''''((&(6(F(V(h(|(((((((()6)J)`)v))))))**(*<*N*Z*r********++$+2+D+X+r++++++++ ,,&,4,J,Z,f,t,,,,,,,-*-F-^-j-|-_wcslwr]wcsncpy_smallocfree_initterm_amsg_exitY_except_handler4_commoncwcsspn2_itoa_s^_stricmp4timememmovememcpy_vsnwprintf;_snwprintf_srandqsort_wcsnicmpisprint_vsnwprintf_ssrand_ultoa<towupper sprintf_s`wcsrchrdwcsstrh_strnicmpkwcstoul_ultowstrchrQwcschr.swprintf_sstrcpy_sstrcat_sL_ltoa_wcsicmpPwcscat_sUwcscpy_smemsetj_XcptFilter5EtwEventEnabled9EtwEventWrite7EtwEventRegister8EtwEventUnregisterJEtwRegisterTraceGuidsWDEtwLogTraceEventCEtwGetTraceLoggerHandleNtSetInformationThread5NtImpersonateAnonymousTokenRtlIpv4AddressToStringExWRtlIpv6AddressToStringExWRtlDowncaseUnicodeStringRtlCopySidoWinSqmSetDWORDRtlIntegerToUnicodeStringRtlCompareUnicodeStringRtlEqualUnicodeStringRtlConvertSidToUnicodeStringRtlSystemTimeToLocalTimeRtlTimeToTimeFieldsRtlCopyUnicodeString DbgPrintRtlInitializeResourceNtCreateEventUNtOpenEventNtSetEventRtlOemToUnicodeNRtlUpcaseUnicodeStringToOemStringNtCreateFileNtDeviceIoControlFileNtCancelIoFileWNtOpenFileCRtlAcquireResourceShared(RtlExtendedMagicDivideRtlInitUnicodeStringExRtlTimeToSecondsSince1970kNtOpenThreadTokenNtQueryInformationTokenRtlSubAuthorityCountSidRtlSubAuthoritySidNtCloseBRtlAcquireResourceExclusiveURtlReleaseResourceRtlDeleteResourceQEtwUnregisterTraceGuidsRtlEqualSidRtlEqualComputerNameRtlEqualDomainNameRtlUpcaseUnicodeToOemNRtlCreateUnicodeStringMRtlFreeUnicodeStringRtlDeleteCriticalSectionRtlInitializeCriticalSectionrRtlGetNtProductTypeRtlValidSidRtlLengthSidRtlInitUnicodeString RtlEnterCriticalSectionRtlLeaveCriticalSectionRtlCompareMemoryUlongRtlNtStatusToDosErrorRtlxUnicodeStringToOemSizeNlsMbOemCodePageTagRtlOemStringToUnicodeStringRtlxOemStringToUnicodeSizeRtlInitStringhRtlAnsiStringToUnicodeStringRtlxAnsiStringToUnicodeSizeNlsMbCodePageTagRtlInitializeSidRtlLengthRequiredSidRtlDeleteSecurityObjectRtlSetSaclSecurityDescriptor{RtlSetDaclSecurityDescriptorRtlSetGroupSecurityDescriptorRtlSetOwnerSecurityDescriptorRtlCreateSecurityDescriptorORtlAddAceRtlCreateAclRtlNewSecurityObjectcNtOpenProcessTokenRtlInitAnsiStringRtlUniformNtQuerySystemTimeRtlTimeToSecondsSince1980HRtlFreeHeapcRtlAllocateHeapRtlImageNtHeaderFreeLibraryDisableThreadLibraryCalls LoadLibraryExAGetModuleFileNameW GetModuleHandleWLoadStringW GetProcAddressRegCreateKeyExARegNotifyChangeKeyValueRegCloseKeyRegQueryValueExARegOpenKeyExA%RegSetValueExWRegDeleteValueWRegQueryValueExWRegDeleteKeyExWRegOpenKeyExWSetServiceStatusQueryServiceStatusRegisterServiceCtrlHandlerWOpenServiceWCloseServiceHandleOpenSCManagerWQueryServiceConfigWCDLocateCheckSumCDGetIntegrityVectCDLocateCSystemIDnsNameCompare_WlDnsScreenLocalAddrsForRegistrationiDnsReplaceRecordSetUTF8BDnsModifyRecordsInSet_UTF8XDnsQuery_UTF8&DnsFree{DnsValidateName_WHDnsNameCompare_UTF8YDnsQuery_WzDnsValidateName_UTF8I_DsUpdateReadOnlyServerDnsRecords#I_NetGetForestTrustInformation)I_NetLogonSamLogon6I_NetServerReqChallenge+I_NetLogonSamLogonWithFlags*I_NetLogonSamLogonEx,I_NetLogonSendToSam@NetGetDCName&I_NetLogonGetCapabilities/I_NetServerAuthenticate0I_NetServerAuthenticate21I_NetServerAuthenticate34I_NetServerPasswordSet5I_NetServerPasswordSet2I_NetChainSetClientAttributesI_NetChainSetClientAttributes22I_NetServerGetTrustInfoGNlBindingRemoveServerFromCacheHNlBindingSetAuthInfoFNlBindingAddServerToCache'I_NetLogonGetDomainInfo(I_NetLogonSamLogoff^SamrCloseHandleSamIGetUserLogonInformationExSamIFree_SAMPR_USER_INFO_BUFFERlSamrQueryDisplayInformationSamIFree_SAMPR_DISPLAY_INFO_BUFFERSamIFree_SAMPR_ENUMERATION_BUFFERSamIGetResourceGroupMembershipsTransitiveSamIFreeSidArrayiSamrOpenDomain-SamINetLogonPingdSamrGetAliasMembershipSamIFree_SAMPR_ULONG_ARRAYpSamrSetInformationUser?SamISetMachinePasswordASamISetPasswordInfoOnDcSamIGetUserLogonInformation2ESamIUpdateLogonStatisticsSamIFree_UserInternal6Information SamIFreeSidAndAttributesList9SamIResetBadPwdCountOnPdc=SamISameSite*SamIMixedDomainmSamrQueryInformationDomainSamIFree_SAMPR_DOMAIN_INFO_BUFFER5SamIQueryCapabilitiesSamIConnectLSampDsIsRunning\LsaIQuerySubnetInfoFLsaIGetSiteNameRLsaINoMoreWin2KDomainLsaICallPackage)LsaIFree_LSAI_SECRET_ENUM_BUFFER5LsaIFree_LSAPR_TRUSTED_ENUM_BUFFER*LsaIFree_LSAPR_ACCOUNT_ENUM_BUFFERbLsaIReplicateClientObject:LsaIFree_LSAP_SITENAME_INFOKLsaIIsDsPausedULsaINotifyNetlogonParametersChangeWcLsaISafeMode~LsarDeleteObject}LsarCreateSecretLsarSetInformationPolicy9LsaIFree_LSAPR_UNICODE_STRING_BUFFER#LsaIForestTrustFindMatch$LsaIFreeForestTrustInfoXLsaIQueryForestTrustInfoLsarEnumerateTrustedDomainsEx6LsaIFree_LSAPR_TRUSTED_ENUM_BUFFER_EX<LsaIFree_LSAP_SUBNET_INFOLsarSetTrustedDomainInfoByNameLsarSetSecretLsarQueryTrustedDomainInfoByNameLsarQuerySecret+LsaIFree_LSAPR_CR_CIPHER_VALUE4LsaIFree_LSAPR_TRUSTED_DOMAIN_INFOLsarOpenSecretDLsaIGetNbAndDnsDomainNames%LsaIFreeHeapuLsaIVerifyCachabilityeLsaISetClientDnsHostNametLsaIValidateTargetInfoqLsaIUpdateForestTrustInformationLsaICallPackagePassthrough&LsaIFreeReturnBuffer"LsaIFilterSidsALsaIGetForestTrustInformationLsarOpenPolicy[LsaIQuerySiteInfo;LsaIFree_LSAP_SITE_INFOWLsaIOpenPolicyTrustedLsarQueryInformationPolicy-LsaIFree_LSAPR_POLICY_INFORMATION|LsarClosenLsaIUnregisterAllPolicyChangeNotificationCallbackaLsaIRegisterPolicyChangeNotificationCallback MsvGetLogonAttemptCount MsvValidateTarget MsvSamLogoff MsvSamValidateRpcServerRegisterIfExvRpcCancelThreadoRpcBindingSetAuthInfoWRpcMgmtSetCancelTimeout-I_RpcExceptionFiltermRpcBindingSetAuthInfoExA^RpcBindingFromStringBindingARpcStringBindingComposeANdrClientCall2RpcServerInqCallAttributesWkRpcBindingServerFromClientsRpcBindingToStringBindingW]RpcBindingFreeRpcErrorStartEnumerationRpcErrorGetNextRecord>I_RpcMapWin32StatusRpcErrorEndEnumerationI_RpcBindingCreateNPRpcStringBindingComposeW_RpcBindingFromStringBindingWRpcStringFreeWRpcServerRegisterAuthInfoWRpcServerUseProtseqEpWRpcStringFreeAUuidToStringARpcServerUnregisterIfNdrServerCall2RpcRevertToSelfRpcServerUseProtseqEpExARpcServerInqBindingsRpcServerUseProtseqExW~RpcEpRegisterWuRpcBindingVectorFreecRpcBindingInqAuthClientWRpcImpersonateClientYI_RpcServerInqRemoteConnAddressRCloseHandleWaitForSingleObjectSleepGetLastErrorCreateThreadGetVersionVirtualQueryqGetSystemInfoVirtualAllocVirtualProtectRegQueryInfoKeyWExpandEnvironmentStringsW=LoadLibraryExW]FormatMessageW%SetComputerNameExWIlstrlenACreateMailslotAUSetEventSetUnhandledExceptionFilterUnhandledExceptionFilterTerminateProcessGetCurrentProcessIdGetCurrentThreadIdInterlockedExchangeInterlockedCompareExchangeDelayLoadFailureHookInterlockedCompareExchange64CreateSemaphoreWGetVersionExWGlobalFreeGetCurrentProcessGetCurrentThreadDuplicateHandle>lstrcmpWInterlockedIncrementReleaseSemaphoreQueueUserWorkItem=lstrcmpAHeapFreeGGetProcessHeap$FileTimeToSystemTimeGetLocalTimeGetFileAttributesWCreateDirectoryWDeleteFileWGetFileSizeaSetFilePointerGetComputerNameWWaitForMultipleObjectssOpenEventWRegisterWaitForSingleObject>LoadLibraryWaMoveFileWDeviceIoControl5GetOverlappedResultQueryPerformanceCounter ResetEventCreateEventWGLocalFreeCLocalAllocGetComputerNameExWJLocalReAlloc!WriteFileCreateFileWzGetSystemWindowsDirectoryWwGetSystemTimeAsFileTimeGetTickCounteMultiByteToWideChar WideCharToMultiBytedCompareStringW8LeaveCriticalSectionEnterCriticalSectionInitializeCriticalSectionDeleteCriticalSectionReadFiletSetMailslotInfoUnregisterWaitExL%-#L5~ -#~RSDSkoN(GeJ;netlogon.pdbZoZo UoTo Zo"To,ToZo4ZoIZo^ZoToAToZoZoZoZoZo{Zo3tTo)tToqZogZo]ZoSZoIZoZorZo]ZoHZo3ZoZoZoZoZoZoToZoZo Zo*ToZoZo®TonZopToToTo ToZoZoZoZoZoZoZouZo ZoRZo ZoToToRZoTozTopToHZo̮To>Zo4Zo4To>TofTo\To*ZoRToHTo\ZoZomToZoZomTopToZoZoZopToToZoToToTo@ToʍToԍToލToToToZosToZosTosTooZohZoaZoZZoBZoZoZoZoZoZovZoaZoLZo7Zo%ZoZoZoZoZoZoZoZoZoZo=tTosTosTotToZoToTotTo tTotToTosTosToZoDl BN@ۀEJMflGk> OZosToToToToTo(ToTo"ToDToToܾTo To%To6To_mYo0ToTo<|Yo<|YoI|Yo|Yo#|YoTo7ToToEJMflGk>l BN@ۀdddd0d @d(N@ToToX<[o9[o 9[o\<[o$9[o`<[o (9[o d<[o,9[oh<[oSo SoSolSoHSo$SoSoSoSoSoSodSo4SoSoSo So0SolSo8SoSoSo|So hSo$ So(So,SoSo4tSo8PSo<NSo((!NSo((!NSo((!NSo((!NSo((!|NSo((!dNSo((!5C:;<o?7 p4PO&{3W Vj!Ui[@A6<X2~ F2>K:=?zH3GyF C8D*GE;"u4s$JXjbK# Xd esop6a q%cghd2 34 3ZBlll5Sol<[o 09[o p<[o!t<[o"x<[o#49[o$89[o%|<[o&<[o'yѱh OMqF.y(@Xp   kaRhg WEVT_TEMPLATEMUICRIMPF~f1$WEVT,, CHANhLMicrosoft-Windows-NTLM/OperationalTTBLTEMP.QX|'QD EventDataACoData+KName SChannelName A;oData#KNameUserName A?oData'KName DomainName AIoData1KNameWorkstationName ACoData+KName SChannelType  @Xt SChannelNameUserNameDomainName$WorkstationName SChannelTypeOPCOLEVLhPPwin:Warning(win:InformationalTASKppp,CATEGORY_BLOCKNTLM,CATEGORY_AUDITNTLM0CATEGORY_MAX_CATEGORYKEYWEVNT0888DDTEDTFDT4VS_VERSION_INFOjDjD?StringFileInfo040904B0LCompanyNameMicrosoft CorporationVFileDescriptionNet Logon Services DLLr)FileVersion6.1.7601.17514 (win7sp1_rtm.101119-1850): InternalNameNetLogon.DLL.LegalCopyright Microsoft Corporation. All rights reserved.B OriginalFilenameNetLogon.DLLj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.1.7601.17514DVarFileInfo$Translation 63S&D08/7D(=6+i* WEVT_TEMPLATEMUIMOFDATAMUI en-USD6i660555555556$6064686<6P6T6X6\6`6d6h6l6p6t6x6|666666666666666666666666666666666777 77777 7$7(7@66666666666777 77777 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|777777777777777777718E8M8]8b88888+9p99]:m:w:::?PDK00"1O1U1c11:2A2222367"8-888_99<<<<<====`00011161y1111=2D2I2i2222222 3L34W4l4444446666777777888888&9d9j9o999x:::V;;;;<<<<<<<<=!=q=|====V>>???p0000000 11 1%1-1i111111222d3344,5R5576i6657;7U7v777J8O8g8v8L9h9::: ;;;;<<.=h====> >>>)>3>=>G>Q>[>e>o>y>>>>>>>>>>>>>>>>>>>>>>>>?? ??????"?00X22222273r33?445 6-6W6a77778 8888899::O;Y;c;m;w;;;;;;;;;;;;;;;)<.<<(?c???L0$0^0{000061E1x12Q3i33333 44$4)4/45*5599<:}:::k?/0E0Z0P1V111 2?2J2r22333 4R4r444W555=6e6666%7R7x77777778u888 99u9{9999":5:U:u:W;;;E<<<<<<==s==P>x>> ?x0001$161^1111k2222)3$6O6V6b66666778+8@8J8V8_888 9999999999 :\:m:r:x::::;;;9>>K>h>>>>>>>_??-001c293F3L3g33>4H445555556 6&6?6W66667C7u777 8]8i8{8;:<;I;;f<<<==== >>*>H>c>w>~>>>>#?+?3?;?C?L?z??????0(0@0O0d0q000001"1/1E1O1\1g1z11111223!3X33333333364I4a4444445i5v5}55555556]666666 7787>7d7n77778*80858888)9>9I9V9\9l9y9~99999: ;;%;D;O;b;;;;;;x>~>>6?j?~??????00C0g0v0|000 1111B1M1Z1`1m1w1|1111112222222 33%3?3r33G5R5`57%707;7F7Q7\7u79B:M:]:9;?;E;~;;;U<\?G? l(111O2V2\2x222333 4a445U5`5c667U7f7l77c88889>9Q9X9f9999(:P:::::::?????000#00001]11111111111122'2Q2a3334 4U4b4}4444445A5W55555556i6o667 777"7(7/7~888)999]9999]::::@;y;;;;;(<====3>l>>>>>> ?@000101{111111112233)3H3N33 4n4y4~44556*6X6n67778I8]9h9:u::;;;p>>?Pd122H3S3C4m4455566666C7u7{77t8~88889999<:T::::;;m;;;<<:3\33333+5B5x56%6\6c6h6n6s666666677!7'7D7P7V7b7f7|7778888888888888888888888889{999:(:.:8:\:i:u:z::::: ;7;W;y;;;@>3?[?c?t???p*000012J2m222d333333333334 44 4*444>4H4f4S5o5u55646M666r778#878<8B8H8`888888 9999%9+93999E9J9O9U9Z9_9d9j9o9t9y999999999999999999999999: :::::$:*:0:6:<:B:H:R:\:b:h:r:x:~::::::::::::::::::::::;;;; ;%;0;6;<;C;I;R;X;^;d;j;p;t;z;;;;;;;;;;;;;;;;;;;;<)<0<@>&>6>B>H>S>h>m>>>>>>>>>>>?1?q?v???L00000000011(1/151I1[1a1o1u1111111 22"2W23334B4{445525S5Y5g5m5z55555555555555556j6s6667777F7L7Y7_7e7j7o7t7y7~777777777778"828Y81989>9Q9\9b9s99::::;;.;3;?;F;M;S;d;;;<$<,<8X>g>>>>>>>>>>>??(?6?L?f?+0H0X0r041;1A1T1_1e1v11Q22233334444 4&4d4444445 5595l5555556Y6_6x6~66(7.797M7S777778888$8)8.83898]8888_9e9999:):}::::::(;;;;<=,>6>S>>>b?u?00,0j000c1i1111c2n2t2|222323333j4v44*5556~6668:8`9f9k9999999:::G:v::::::;;';9;?;F;t;;;;(6>R>]>w>~>>>>>>>>>>?I?U??\0o000011)1r11111 22252>2E2L2Q222222222 33)303M3R3X33334%4?4G4P4m4s44444 5n5z55555566/6F6S6y66666666666667*717H7N7c7i7o7777788g8r888889T9X9t9999999:Y:r::(;0;4;<;@;H;L;T;X;`;d;l;p;x;|;;;;;;;;;<<<.<> >>>)>>> ??-?G?p??00000000001 1111!1'1-12171<1B1L1^1e1x11111111112282>2D2M2^2f2l2r22222222223 33<3@3r3{33333333333 4 4&4+4N4T4{444 5R555I6666666667)7777`:f:y:::::;n;z;;; ??4????010011)1v1{11'2?22223)3=3D3333 4<4556D6I6m66667h7y7777s88888 999/949C9i90:';<,>>?hz0000W1H2o223345F5L5e5j5{555@7^7789=::;;AP>c>}>>>>?J?|s0}00 1*1011111252@2H2223 33.333444/44 5(5A6p66-7J7777777 88(8$;~;;;;;<=>>>?? p,00060<0F0L0P0V0\0b0g0r0{0000011?2V2`2x2222222223 33!3<3W3:':::;<<<======0T000011112K4444444444444545x55556]66617\77777@T33F3L3l33344445E5g55566;6U6666666767[7q777778888P =9i9:g;;<==Y?r?w??`<^0001 252P23/4N4l444445-5;5I5W5==>A?o??pl90E0O0U0000011C1Q11111111162^2f222233339999:=:V:{:::;;#;>???4?9?L?H000001_1u14444 5&5Y5557>8_8:<:X::::::>/?}???h000000%1S1111112,22 3,3l3|333333334%46444455555566677R888@Q9e99: :: :Y:y::::5;?;Q;=>>N>S>p>>>>N????`G001111#2+2E2556c6666667 77,747`77778"8B>>>> ?(?p??\40{00000001C1g1111/2?2G2t2223?3]3p3w3333333K4}4555\555567h55566667"78888889.9:999=:K:m:::F;};;;;;<<}<<<<>=[=====>2>p>>>H88f999c:::::<<<=?=o== >>E>U>a>~>>>>>??i???3I3Y3444>4D4J4]4j4y4444444444505B5P5q55555555l6666666666 7-747G7777: :a:;;;<%<0<}<<<<= =,=;=A=M=T=}==========>>8>E>R>^>c>m>u>>>>>>>>>>? ??"?)?7?C?O?W?l?x????????D 00A0L9i9y99999999:#:+:B:U:]:::::;u;;;;;;.0E00000011181=1T1h1z111111111 22A2H2N2a2q222222L3X3{3333333 4<4H4T4`444445555556?6666B7c7{77777777788 8'8J8{8899:a>>>>>>>>>>>>?)?0?3>[>3?M?]?p?????@000+12"2,2D2X22223$3:3s44444445565G5[5p5788'8O8U8q888999::$:?:S:^:<<=L=b=p=z==6>H>v>{>>P_1y11334 4 4%4j67Y7e7777H9S9999999:!:Z:|:::::::; ;:;U;\;b;;;;;;;;;;<<<"<)<.A>T>b>>>>>>?*?2R22333M4i4446666 7788999 :$:(:,::::+;0;E;k;;;;;;;;; <<+<<A>b>|>>>>>>>>>>hG3g33333333336 77)7B7[7n777999q:{:::-=3=8=y===>>>>>???%?-?3?;?A?I?O?Hf11222223u33K6b6677868=8U8::;&;t;=>>M>k>>>p/242Z2a2z223333g4l44444567N7x7}777889994:G:Q:y::::;L1R122)2=2Q223W3334=4[4p4u4444555586N6^6d66677.7A7M7g7777*8/8V8q88::::;;===0>M>f>z>>>>>>>>>???5?X?w??<<:e:::::;< ==,=d=:>O>??%?;?Q?g?}????? 0P0U0e0y0000e4~4444'5L5[5a5f5|555555B6f6666667!7P7W7|777<===?=L===>>R>>>>>>>?>?V?f?}???????t 00"0B0L0^0s0000005&6=6a666667-7K7 :T:`:~:::g>>>>?%?;?C????P0O0h55555(6^888888899:::::Z;;;;5=X=]=n=x==???tl1&2+2+333333414A4Q4i4s444444445 6.6z6666666689d:::::;;<<&<<<<<==== 00$1(1C1U1\1b1j1r11111111h3r3}3333333333~444444446B6P6w6F7O7V7b7h7p7y77p8w8|888889)929?9I9S9Y9r99999::::::5;L;c;<<|<<<<<<<=!=7=C=M=T=Y=_=k=s=y===>??????0 0000Q0p0w0}0000000011&1k1|1111111111111112 222$21262I3P333 444C5S5d5(66666d7q7777798:::<;A;a;z;;;;;;;<<<9<>6C6`6n666|777799;:B:c::::::;;;+;Q;_;g;;;;;;;=><>Q>Z>c>z>>>>? ???!?:?B?G?L?q???????????`00000000001111(141;1Z1k1{11111111111445 5.55-6,7J7q777V888t992:d:t::\;;:=H=O=X=^=j=s======p001191H11111222 3436<6A6`6x6666677)7?7R7h7x77;8`8z888888888 99,9p9{99999:::3:9:i:v:|:::::;;;4<9>>V>>>>>>>? ?H?Q?Y?c?h?o??????#0:0K0R0q0/3z33333 4 4405e5S6\66&77+8:8I8h88:;;;;[;`;z;;;;;;1>_>w>>>7?>>>?.?4?:??????0000%0X0e0j0000 11=1L1s1x1111 22,2Z2`2f2w667 777-7>7S7778D8L8899&:4:::;';L;^; <7<>S>y>>>>p2222233!3;4444I6V6p6667777&7,797?7P7U7[7a7g7x77777z888888888888888889 99 92989>9D9Y9]9k9v9z999999999999:: ::#:0:C:G:T:Y:d:q:v::::::::::::::::::;;;#;*;1;6;A;G;N;U;\;c;o;v;;;;;;;;;;;;;;;;; <<<#<5>%>,>3>:>A>H>>?&?K?X?`?????p0%090`0t0H4p444444577:9E999999:L;;;;;"<'>>>?#?.?@?`?p??tb0?1D111-2d2{22222)3.3B3c333c4h44444455@66666 77*7/7I7N7h7m7778!8===>>>>>4? l0011S1111112202M2n222F3T33333?4t4444515 8[8899E;;8==K>>?@?N?W??????011P2X2n222222N3S3j3o33+4Y4^4444G5L5616_6l666.7y7777778 8%8S8X8888899.939J9O999:::W;??9?V?o?????@l011111222383F3c33333(404Y4z4444405N55$6)6=6B6;;;;; <#>6?b?v????PX0 00;0h000B33333464U4c4r4441565l555@6~666<<<==Q====>8>@>`D1122I2}222"3'3>3f3345555V6<<=>c?z??????pd020O0l000000131M1g11e33344444655~9999:=:_::::;5;|;; <-"?+?1?q?X00 1%1c1j11$2n222b33333.4h4444655#6(666707c7<8d8888#9G9~998U4}444495?55>7M7\7~77777-8@88>>?u?030b1g11112A2I2b2i2n2w22233333444$4)404B4I4T44J55566N77U9\9999999:W:c:h:w::R<<<==>/>Q>u>>|22222 3S3<5`55555556(6N6`6u6666667 727N7k777;<<3<[N>v>>>2?B?U?d?}???? 00/0Y0_0k0g222222222223#3)3?3^3t3z3333444%4D4Z4`4m4{44444445 5555557789T9^999997:<:T:;;;;;;;(<<(>3>N>>>>?C???????000&0;0[0b0x0000000444L6k6w6}66667F7L7y7777788889+9999:::':1:6:;:@:E:J:O:T:[:d:m:r:;;u;;;;;9p>>>>>>>>>>>>>>>????$?+? d00N0[000-11112 2g22223r334<4j4444H55A6H6M6X6{666667>>>>?T?[?a?p?0|0C1S1f1y111112a2o2222#3M333314`445>5s56j6666*7o7777;8[8888899:;s<<=u====>>3>r>@PX7^7d7k7v7|77777808i8n89:8:Q:i:y::::;7;M;;;+<2>>>>`\'0j000243x3}33[7g777718k888889"9,949R9p99 ==5=h==>>>?.?\?????pP0?0g0z000000001}11111142-<}<'==X>_>e>j>>>>>K?h???11111222 2&23282>2J2P2V2c2h2u2{2222222223S3333474g4q4x5556N8~888 9?99N:T;`;s;;;;<@>>>??\22323R3m3x3333344$40478^88S:::::;2;;88>???DC0a0001u112%28O9b9i999:$:I:::::6;;; <<<< ==P444&5K5_55556_6`8888)9_999:"::===><>A>}>>>>>?n???L0-0M0]0q00001@1l1111112223[33333'4?4E4445556E6t2222F3_3}333 4'4A4V4b444455.5>5i5t5555556C6k6}666 7-7G7f7k7{77778888J8889T999S: D809a99999S:Z:a:h::;);;===6>l>>>>?T?u????0t00l01$141D145 5'5Y5d5k5%646S6Z6666^7c777777777p9u9999999::;;;Q<<<==7=`=}====@1 2c2h2v222G3L3y33333445!5x5~5555w666666666777%8*8_8;9c9999#:i::: ;;;;;;<<8H>P>o>t>{>>>?!?????P60e002191>1D1O1V1b11k2s233,3>333:4E4\4~4555n666;7@7N7Z7b77777777888B8h88888889:::: ;#;9;K;[;f;l;;;;;=========>A>F>^>c>>>>>>>> ?;?E?l?}???`P0011B1h1{1K2P2Y4h4X5s5y5E6Z6h666$777D888T999H::: ;7;;;px11 223333333 4-4445P5c5H6779 99X9e9j99999;C<<<=$===W=b=~==========+>>>h?p??<v000121E12A2M222333 4H4g444455>z??X0R0p0001D1~11 2;2_2222{33H:Y: ;;C=u={====>1>>>> ?#?V?p????70`00000000B:O:f:s::::::::::::: ;;;);;;@;N;U;^;j;;;;;;;;; <<'<2>)>5>?>R>_>t>>>>>>>>?%?+?6?=?C?N?b?h?z????????????0 0000060K0i2o2u2222222|33334,424D44444485?5x5556,6X668F9O9T9d999999::::':-:4:@:[:g:}:::::::::; ;;T;m;y;;;;;;;;;<<<<===>>>>.>c>>>?L00171111-2@2}22222=3v33333344'4z;;;;;9 >> >0>5>E>J>Z>_>i>}>>>>>>>>>>>>>? ???/?4?D?I?Y?^?n?s????????????x1S2_222222"3F3e33f4444-556(7@7K7l7s77777 888V8|8889991:6:E:v::::;;<<4>?>]>m>>>>P20A0U1g1 22223<3A3m334F4T45C6X6o66666666666667 77"7-787C7N7S7]7q7v7777777777777778 88!8+858?8I8S8]8g8{88888888888889 99"9-989C9N9Y9d9o9z9999999999999 :::*:5:@:K:V:a:l:w:::::::::::::;;;';2;=;H;S;^;m;;<<#(><>A>??????000(030>0C0M0[0b0i0p00001&1,151;1D1K111{22222222222333!3&33383H3M3]3b3r3w33333333333333444$4/4:4E4J4T4^4h4r4|4440\00 00000 0$0(00080<0@0H0L0P0T0X0\0`0d0h0l0p0t0x0|000000000000000000000000000000011 11111 1$1(1,1014181<1@1D1H1L1T1\1`1d1h1l1p1t1x1|1111111111111111111111111111111222 2222 2$2(2,242<2@2D2H2L2P2T2X2\2`2d2h2p299999:::::::::::; ;;;;; ;$;(;,;??@ 0011(181H1X1h1x11111111122(282H2X2h2x22222222233(383H3X3t333334484T4p444444545P5l555555606L6h6666667,7H7d7778808H8`8x8888889 989P9h9999999:(:@:X:p::::::;;0;H;`;x;;;;;?????????P 0