From 6676f886d7aab09520cb04bb11cb3bc9902e814d Mon Sep 17 00:00:00 2001 From: Rairii <2650838+Wack0@users.noreply.github.com> Date: Sat, 23 May 2026 10:44:54 +0100 Subject: [PATCH] original yellowkey repo is gone, add mirror --- YellowKey-main.zip | Bin 0 -> 20174 bytes readme.md | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) create mode 100644 YellowKey-main.zip diff --git a/YellowKey-main.zip b/YellowKey-main.zip new file mode 100644 index 0000000000000000000000000000000000000000..f2bbff0e9be34af391cd6844b4ffb0978a283b22 GIT binary patch literal 20174 zcmWIWW@Zs#U}WH6_?@{v=2*-!WfeaLhSm)X3_=VH43VihIr-(@sg=69iJ5tNRhb36 z7iZ4!PWfS+CZ68#_~EmAr@KFHsDIaU;MQf&pdaThe~b++F4!>b6V_Q8NnH*0uE#QBtyfvnyrRMrd z{$;9vBR^Vi^y1AoRpm21@UZOBFZl)LUEf zGRZCnlU!dud!*xB0TzvE)0;UhNMRyf7g& z@TP3kkp{*Ecjv1AQvUyQr_9GmXI+hI1TSBfE%1>)ueq);^nI)2ga*1t?YbnO46 z@A+);S;l)>ALsUeRh_sZD6Pq^>PzVP7S;fJ>1)S5MF0LZSmzO^t!7*6*Hm`66 zD6d;84GMYp5neS6O|%1_^xJAYsI*6E24rhGaiaW%eY`OHZN7Tr17YgWT|ulfofd%hWBompZPj(!N&i~s(PN}Ms;q!SWvF{GsxHW-Wx|n6Q1>7W>pD&R`zA=91BmcFb=7kKSden4mLU*Y7%)oNUa8`Rb>=3gBsD3J1-Kke*Xm)HDD{6*Ba zM=#vs;Ao|`oz>E{SNHP&U$5sUb12^VDsAi3r*v&&&&__uD|x3sP0nL>SZ-mJd60X0 zpWl|=AEmlicbgYIdH8g~$yZ#0oJEQ44XQu(9yxkfvZm3(!ZhA!iuL2z%{MFc9)^4q zld!lN7M=Y?MeM=b4|WUt#n*1^6Utd69P8BL?ZnsR^5C}kgeb{;upJr?~INMNdhRWD%ZxiUdkTY-3-wP=rN*|wAt(N$;MO}9Dg3XFOg3G4s^hB<Z=q$ zxAa;qlGMs_x+37~$!DgY%0KA}26IR)?vO2;FR{dCL5iH~4gT&s%RJ1UGWF&2{O^{C z{c%)hNp0dG$+L5_WNQ?zjTT9;Xjl4-7B{4n6hHpl20F1Ef2Fa z7#$LR-*Cv7Z7J8+y&ug#Sc(08$=LnGu1z5!+F-{Vn;VAtANHNk;Z}~be)MLc{qYZx zb9?7lMP=ASQ547w83 zT0=q|x0U_#<#G=GWx4a{sZD?4Qs?QOw){0?SG%d^hAq8b4~{+GxW)IF*hHVZE2Wp5 zo0}>TAMtCuKc8PqMO)|%zvNEux3hTGxp?f>c)MU#NZb7xf*gRkus#ca^j5 z6rP&;SnKg;8B?#t>AS1CTPh!Hu5I`}sdVecEl=Al@^VzCm@vEi;W{I+h+Y3!bdC9q zO(_$SQ+$)=pEmh0&C&k&70%+@hxAu3luCTwr1?$3K;D-9=VcEqMWZ!&`jdVutqTua z)2k?VHQfK?rk8HdVs$)=IF9W-uq^7<@w6t}H#5ZSd6&Ae%Jqo}%2ltsP{OZjchGam zpIGN#iHSA0MBIKp`Eh>|^Morql&aMh1^h|=EMZ&sGik9ye0PQ3v7$!rCV_e9<>rJ< zUieQ|Bkj0LeLd6EiC!CS@L4|bXSNjcv+jr-qgdf@AD<Z_}gOXI3X(%zpKlyTE$F^20?;ucwLU+Z}%SPjt?XFa1ilQr~2Bhkaw_ zdcV5s?$6D(^?ED9iv=HVo&JB>rD%z}!4`(rW~}=>ex=UHt^V;(wxfvefUgEZuYJu)^ENOuR;|Up~9CZQk7WIzntVWBTV@(HY-$a&|7O zvU@ep`py#nj);R_WpBFl&MJCUU8v^kTYtf?SZcq_yQb%^rZsDnzbI=+%#=}B`_|O5 z)uMDk{noWoD^>Wc*=pC^4>r{g&(wQ6TZ;Ws&i#k$FDtIzaGkv(CLm$j$K4D1A9CD@ z(AeqerD5B_GnYqf`{Z&x(SL~tZ|d~Coe;SBQl|0dQ)k{vq}}?=qcw46NaW#{TtEHm z96w5}bU1bEUC>weGr#JXgF5XolIn(uV2!*&ocGbTKS?w$8w6?r>?DW`paXdJm1uZXJ2yCm)(2o8Rbs@DvVP* z^yt*?-&;8DZLn!PY#%qbBWj|k%i-`hy!lfX>y&PcuJbC~F1(}9OwZA-&?kg>)q}}D zn0Pc^mA(%BbpMu5_wh5onqI2KE4`n($>fdq#?!innSPUcSAP0uUBNK_)T<76mK5## z8f~v9oA0VEt*V}L4ezdS_b;nFTD#yEkKZ%Lw$xN5k=_GrKj(887Zf@g z?l^ekQ7O;wqOU!>SFU^@#Kd(z=G!zMlkYi9#jOGFKdHU)7ZChhIq|aNVyEx_4qI>C z=N~&MGcLYfk<0OSpoEL3nLnrHyVh>SO%;xwd3yio7&Y7Wcf6)j6TrJM?mZxn5I_t~;jU*E&N$k9Ltufb3C|s?DXq3+MBNae3|ne=8yyu+>Z ziDDb)>z-vVFqvj@#UgTD`L7+Fc3j8jew%)GieA{Z3ps0!Ew^frQ`+^qJkS40_VtzP z4;(qWs?E2&FQ*`UVnyPUeKWrDg!Hv6`(VO&_jUgluk1YvKm4TE%)DigbGzyF%t_3O zb=Mh$GFKeE7=KJ<@$N$}WI`h|mMa#-{QSJpJJj^HBTM${iUbjd$lBH{<n$MRX+)nM`|&_p4YBaRL4%)8h(dap)NdY z!}hyDddUT?K05vCn9Zn;Q8zzr^1Sm? zBFoDT$*g%w%cn+{8ug!;trGSv?L(x=S0N?Vf{p%>g^Nw1&f2Uzc{hLS%Jy{qd#_3> zo+~gKep{9oeRA<>u?y_!DGFhsUR${(i`{q)o|V>pPdQg{66~uf*hAL17FfMdYrWF!D{pw2HSMKZEEEK!9&MMrf8*z&%U@QNaPi4LHno4W)nyfb_8)C8 zk&KeUg0OfU1En^$gXOBrKG%q+ihVb0axb)*8@s&T++*pLmo|Gi_3})*zq&MQGn_j1 z)i!&^#D66!fu>hF+h)F5;L+^)HZkYl{14lIf7%|^7Dv&xNbMK@aYx^>*RXKvmUTlR6fHkbSH{8M}n&u3gN=bY)az4~94 zc<$vku4NxT5@{ zyRh7ujdaUj6;A!=r@xvm00a>0@dN0QuV_*Ptz5Oy~A~5 zzHd9<+;WV6_JMyqAu;^J1OH}bZnPo>F0{z zn|pY8+YPUW|FixtcHmqMmy%fbqkU7IKgBH5Y@c-en`r*TrRov!PoB80cX}$lI{oXf z7txg$m!IR<6TL1f`>v|-b$UbC!U|Kn8MHg z>XhBNj-!`~ud&R&^HlJ-szlT8M6Qh)LG6#c*R$qT|PDat~)zQj(=kbtuR^V^u^I^;qQ-_Lj*S+?i-sfny=ADc(&*TH2>YHB7 z;e9jv@ehs}f{HewhZwf|?Y_V;!T3U>lBcMI#nGlshqfx3R_JLRTV1mxyi$cXTK}}R ze}?XQY4>wd`@VgO=21R<^S@xynM~0GyI**GdHXaw)Vqx5^0W_bPoK%WeKEcEV(RX9 zO!E@oJb8Nj!#5qS`@1AfY-DrxXYTp2RQO=!pH&NA3l}V!S)kFk`q!#YJ2#fSahrTE zwEV^0W7dCeunGogS?%bSdnk88zPEmt_{O`!8v=ZG9QY;hYtH&jv1yJjebyXb65?{Q z>{9YMLyx+0|JWzbbZuh6rohj~ST@*yKKgv(uO^v@zrknc+SM0!uUgG)!1+#YqnJhj z+xmHDZu9+mSHF7pgZ4fBK5eGVZi3z_S1NgXK80_Y)mi+@r>#^ku;9Db>-l@suRHX& zRecfaF1Q(0^g=o6TlPOyi^H{zKNCs}OCBCLcEsl0<+GV$+jM*7HD?-g*nhiveAOYp z-?@Rxe*W=^7bK!uy*p-yep=eKl~ZYU;f#3Z;~%1wmNEJ6;pH}66tZjXjXCE&1fG#x zpKjDJwSuce`he@oXIIxR-Yt?OD^~TUP2F3(V6IGn-jelBp05>CHfk!{Y}jz}ao@Xu z=1rzb*{{Cdon!EMUC5Scwizpbp52&O{@-W*^az`LM@5!RNLMp=S z>KD}~9);H~i?CM|KKu3N+!QAxCb`ebk?%VXz4{znm~Fl%mfQR9_T7h$uAR8>;EGp5 zbEa=Sdp`fMl)^2NENuKuj?+&|I;AeT@g(!8Xl_^AX+s0EzBN6O z{!f01mf9|#@Y6yqQPl3sgW|)-@@+0&d#iC$DrI{2t7$9KB$;1?+`Dq6&(P=gtHiHyT!g-+GgEmaO+$skIcX5WAiKugBLHzy!gefVSW9%PVqf6W>|(M zNgRlry+@!4xx$Nu0+~W9V$(*)z8GnDv z=Y6@g%qfTcy+K^w8D^J_TRRu;d_PY&*kZHzih192&(1P?>n{G*OCim+dZ)uGqu-fM zH^O%Ob2$+xCp66^$bPna&b0W}RiUx->WWuU5C)@i-F3h#a4`#kaD+N*5knx&MEcL}6(vKOyVH5ZdMyphi=_IrnV+KJr%5=%4o zCNo{0etN%Ph{XB)g5Y^cuj+4#OE|Dhvk+`vywkNjY1iEmKHq4u#QN`cHiJ1w zpMOb8%zJiBY{}ce>-$R#bT&jzR<;jz`XoSmT0UePYLcX6>rK^W#gvtLb)@ zKc8=V960rI$eOQzG}d`tdi5pR`rhPIuFPFqcg;wt-FLF);bMEAebXB<-S$7Z%#b2* zxl_-xq`~zl>ls&GSKHJzB9pd1ZOrq_cXQc%_}~i9mQ_1BnqQXv>pvdZuwd5*v6^>l zqIN|&y_lwFzqao8?M2LA%NlcB|Jd*QqN3e=cJuWuOC5f(&aL2`!Kv!u5i4Vo+G-iN zFSC5wymIj!zaK8oT)H!&YfHwO;~W{APp^^j;NEDQn&elYa_#%UXKo=Ur#_CneA76_ zdCwBZ>1ID{cn%tuM4WD2_o;$IMcpAKMR8utoY$W=t)Kp_tbR?>#&-&*m$>$=e&v}N zo@^JARUqw{QQ;_%E;M7s*9f;;H>;zP`EO(#6rUFN-nDmkmHC53vcVe1H)w9*c=9yh z?m}UI-j-SA_g8Nfj0yY35p}pn|5QT8;ks+7bv4HxMXat0bmn-faB0HRz`ECbX6IS1 z+TNHY9`<6|>sx7$E&o{AUT(h@QEqj8&E)lR`(FKY_@M0mce17b=@_#NzbDK!)`F^@ z{kypzugwcN^iH8wGVY?o0VmT6UtKffgiQX~ylYZ8wrqV~u=8j965D1jvvbOGtKEMW zILe>i6_?7phExA#dCD0(`JBF7x!w(VFaIV9vPdnu|7B`{{0^ZbCtTIv)+~zoBe_O* zPt{+$_$`V;yt+&}wX7yLlWsrs4e|UZy;*2#UmyQZC;hkH_ExJio=#H!bjUtt%E>B= zz1ccn_ti?WHFvf8i6)lDPk6(SCR+Gq)*t(cOxq9NO}72Ai*Z7HyVlQ3GdwIk^*EM_ zy*+z!raZ$#)(!5v^EOsk@AiY?*lW>f9}o5h60Fds!M{+lNX*XUd-%XyVqd7-qRP?4&IWVUbQo6ZWxEdf!pp5nfG|*<+5^_-PfqR zacdHfwJr5Al&y-+lHBn`sMLkwLlswZQdl#y5O?K2fuOGSKSZM2PAAP$u~fKyY55VE zrM;e&x*hWrldpbobo=|N*oW%b6dY;R}n%$mh484~yOqS0Q3 zqW|jmpNSc7Zir=EzV7KWxx;ch9d`MgI;oNR;iAdT9lS4mO}G83EW0wv?_H(gT;IQ3 zf!`;&Mr?@we0}m|@f>&29&ZcwY-TGRi`Ui8Iv4XQ&q>dky`t<4H%Gx$&*g6->%PX- zRqvRT`}XwNWrFv+(i*0|Qh6rA=l6c){e`ZdTC%+~wdyM*=N+EV^xLug(1*w8qA&KY z33EAloRy_;Nia`Q>#0473`fpb`b04{9X;@r-ED^7hh7CYSF7nh$JVwNmTRO>u&HjV z5&D=B_@s3Df6K#Xn7EQ9`QEd5uQYEH4f&*Mw?=^?bOru=bjHjKqf5KA-N@Eb?Wqf4%2)nJLGD2a10dzY*SY zMC0J=Z{C4j+lBljRxmeu&v-7v^l(jV*BVRbgI~2c=fz7OaG#*1IPvtFt*wVFUAMja z%)G|W&;6D%-`m=*A{9&9&Ix9*KKGeCZ%tl!A@bTS$4dR#%%-Vqvege(pGjSNNAw%R z*{bxoD|yefCWTLLSo%Ei+#|!Z$&wQvLZZJB`b`$8Y~muV3N3UvIopS-H(H zO!i*dt%>UE_@C+=Q;2L0jag&+wWYH5?pDKorPrI%4sYFeV)=ay(YNpH4qe&uN-@aX z>`ukf2v%`sXaVp%a`io1(6 zf3;Pof=-VGau1%c?pthFMb|2=9<6&11ab5Dz zh*MX7^Y(ng)BWaB&r-j$ifq;hGWU;mcw!~7>hzTh`{u96aMy4-sFJ8~v|FF4$=B@T z>q)D6uS$ykRGk0eSH`m7uUDT>ZrrdbXUV197v4fE>z;}2KVo~tKvVBTm0P2KB5$>w zY5Lti+n&^h+r`9d8?jHGa#QwG*tPVAZ&Q?bS8SfJy>033TMs;+NvGN^JTran)-}$2 zRkcaAQ?94DNmS$q>jJeMNVE%nE7?T#a3S1^}bhv zJx@gnf70zRsbf3Sc;VLE6Y@cU+NTFVeEp+q-OZzY3kvS~iB%le-?sAD)11sR zHD%8tW;sskxSDgm=&JqmgL{{~`Z+;EK4yya$G-26p3N7?-x(X;Ap13W(!t8d=hSr{ zho@?<36SIUaarja&bf~L>>UkruONnpRx70Z#b;Wi{nL><-hBC`PMEj$3%RhFj6xxc zZ>~7=(ff3Op~Wp3l40tuBv3xh+8e7_24O+ z;lFqK^=OW z+wWCBDQnbaz3hoj#ZIF`r&eCzYc8p4`SvWuefGvFCM+ICn+gl6cQd*DPg=ZoN>@wd zt-BL#53+^}PLrHuu-NYT%73nwehd~mTfMDT3{ z-{*~LD}x`t_m}(Q_^I$z^Zc#B`s+9GFWi57($VAU41veqztxc3DO{!cR(7^(RZ~Fa zxzq*zH#byTM<>nmQ@FIF_RwPI|C6eYJe-wP{Y~a_#z~{MachpQJuGrj+45L|(~+Z7 z?#He^dMBf2{m+l4>gN;^a`!CNxb-VBLyo4*;j$D2Ds)OY@+{Kohv>NtD^FOPTZi>OzpfNpE#=hap1pXxtUTjE zzus?qp4zkKdM;c2zr6FH)W^R?k3|E#HaD;RsLZ31mLzQdK;itY9mhf+JXp9XI>s)2 zf6!OihQrPt@+>usb4zIxf9cK67a_jyO0Y(c&8#Di->UDMms{^ru6a|QUB3B|k>rFr^N5Qs z>DN0?S>F4#gEP)^N>1A}>;Lld5eeJ&eYhE@rmz3~0C%2h{&o8&!X8~&M?XKTweBY zM%n5In|?9!=q`UJEhBmD&tATW^5a5_j--?bZLUr$-!9cO@zI6IjMUrHZEm0VbSq)| z_Y*>IoSaU@X}hoevT|n;!_{fEaU17G9sZ!fCVC@?Y4&Q@lkYjD*tZxQnYVe?nh0@2 zLtE95`?nqYre}99*(YkPbTMux=S_=q6V_b2Czum?oul`&C!#+m8vN7nU1XX!{VzlE?q3DBSH{X5OnUL*$46_aLlF`N^BPY) zub3*d&*4UDj8UOxLfL1A&KrviJ5uj|JF6|2a-y@>vB|SnC3L?1@<8EpvmGXW>)FB( zy?WUPqqEIte>yOS8*zla-{X4kg48~b^JfmXJ$d&l;bF6E-}K+^5o`YBtPf_eF1=?a zy{O|>ctwci_szS{eK6a$>D!B>AKWq~+DDmUgbI$Yj*<`CBVFn8dA`g$ ziHPYR{_rp}Tw7tS?y`=1ZpwDI+6a*odC|9KAAe*1Vuo~S%E3yBJ8yf8ue@uH|6q5M zEAn5{#r6KTPcK^-Ez(uH@Sy2e`RCk%E$cPH3?f$X9ABDr$!sFut*NYufxE^MC%DyX8e28#X&?-x1j?b@pBS+;sbm23d|9#IN4^6|km! z!ttOhdc=WG6_UXUv)z-X=*wr@q&Zos9F_+V2=g$t4 ztG&x*b9&#W`Kxy;CFhpdu3z(T`I{=61NE6vX59@Df3|4YCQ4b%t@oAiUSncE`=L^N z!LiS)tL&zqsnYD3yXzdc<}tO(qBd^->DTuBJYdV*G))ZgCpH<`WSROy|f;K=Ema;0xuSEn(=Z_K-O zR)|x4dvi*?&dq;J44lm=`|8XsW#U%f%#RKIvAAjW(W=;*Esor;3T*yn8~5ow-f{FR z>#aHYS6W|t-JI9@Uf}B4n;vCbnB_QT9rivH5w&N>$xP3J&z;_$lQt?$TEx0s_r|P8 zD?cetIs8*2d*7S4MGvYBjyA6APkMc9Cu85?^r>-4bH%rX<*>!reF_%8C&cEO`{>p0 zcXd@U{LQO&FaMm_adBnLbxlE)Ioeh-lG&eDH|$hi?qS`s^Zr&{9(%*Wub1=QPpy`_ z_n7Y;*AnrT(AArxQL*?qA=qi#}hS9WA%~|5m|0n;rV? zwcA!S+fUnc)|t0i`8n?bjeol}w^XJcO1_nBQS0h|_SMAM`z1bJTfvvPIPk|tR+|GW z7#of-9<^+^;*~!6j-aOIo{zUBb3b|5i_fd-FEhEy^U!G9|DO&#(b9U|cVv|2WU#(o zxbCK|mW4z1j^{UDNabf7oa8d~$dC3f&R5p4bOmy*G!S0;vT823@|yBvQRVd;Qrkbh zY$#s&I%~R8)8u3k=0%#PB#W{*Z2!!S*MC-bE!b5*OoLyu>vfYPx!Wa9lB=2EAXyv(wv#ojd!iMci}>7(CSEzvoCk;$ttikNIPRx z=)hei$8ph`d0%PHlEBl~KWQ$zVb_&>O*t)MlJvcHF1C+0I~vlHo91~d@GG6aS+)Oa zN$AYV;@VcTDrA15X&ie6$rbCIF(YyOT~&6=kBy0<@4 zJ3sT&-bsrhD%O1At)KbryXWr8E3f>SI=daDX5>GSkqTIlk#I)C^4gBPIV`NdE!1zf zGR9{&bcDo;ZnR~nX^?eV+*@>3qTa%O?cR$OUiyMjhUt|Ng&fRx*`M>5SA`qjdsR`H zrp#9*J+0R;`pMm=p{uv1IP%t~e_vVlO)D*qyWL=wob=asihJsN*Y`>G|FCM&U_$6^hS?wrS(%EAdJ=I5(&CMaI6IvnEc@he0yd1J+y z%R6;XH+m#GO*(K?>&EoiR*!>J&(D}Ucjf1ktIrmn`1>Sf(X^LV>*uW6Ru#$X_-v=f zy%a&2r(6#O9?h1LY)fgDz7f=OmLXL9arRrcBhwuAZ1!9)EtNRc`0JBvijvd)`qOm_ zc1*a?;}n?kj>TUkv*}ch+v=TrER2H1y90ZdTVMIm=(Br9u-ENR6`NL;SZr-t`Ij$d z=Y{r}?|bG}Tsqd$|2Cpz(h9zS@WrK34M%>+tvh~b;@^`(Usz^T&pP+!_mQ7ln6I)s zsC){Vuz~M;jtbx2E~`D_?<~r!9ves;4{+Prd`#iCS5$1!^9k%78&~xEhqh#YfA#vz z#*+bWzG&E(EWcFR{bkj|gY&r=Jsx!krtGR-IO+F?v?nI>y>u5#x+G~Nm zs&;nv8zYgp$Tp!+*EO%EcQe;8%0zHKJ+Sj}`hB)ES10vL>iZux`Q1$xQ@WG9^|Q)x z`yPW0FIx7WYz}Pi+SYmU)D}w%b#c!b7dU77JTFu$EI9Ew#%{%- zyt4~@w`*urPhy<9s6a2QC}!8PgasVOuZJ#ab#B@ly72321FxCRiie=5PU$!H9 z(c0=|9*+exx%7YCKk~IhB#yU8L$bh7{_y1tQv*4<#jjVe8H>+5@-}06+q|&6f?3O@ zzU0+BYL;-FSC!bfF+$<-j3~(uH+K7&?|JdeNK`Z7kYyQv_Qd6X-0vKD`ASz%bK~!z zH&YH}Okp)NmNnZ}wEWrm>N%$md1(7DQug5e_#sDq;>y$oho!7rV=^D<{MFez>0^}1 z*~v~3a%Ylau6ul#H&f}p;l#tWi&}NoPR>dYS=w}uX;GWh-no|2N3BBj6PAa?m*fd7 zyuCQA+4jTiTFzrX)|G!>^*1s7yj1Q#$u_rDMUPJ%y(2e8>)FbMo2PiP^fAmZJFL+i zu(Ls7jY3cFg1290UzA9`=Wx5f@!lC3_G7PaYqZ+U%bs@c#azBm{oTSlk2R|;S9^B; zjE{=dE8C)c!TH`%!7;8%c8@NsuY09pWiVsUXVJL}R?aQxEL?S+d8@UFmQmynou16S z8~RJWf3D4Y5|+<>%J6#Y;#0qzk4!KB?zQomU`J2K$JP5CZ*XsEt~tiMan>r`{c-b- zuG(Jb@=Wnb?PS^Yr*AcPE?E8LhPe2mpyX#KwLI$%sm)#yZEblW)W}|3E3mr8?d*@~vn77r*WJ>32>=z)>zo#FZ^K)^}aQ zy;>Jbm&ZR`GEH~FV-8Ng%x_}66?tk~#d3@!^mM~p z=Bm5K*FP`YbhdfQilp`P&WXF8c-JTPIO3j=*8ih2aqNnL#ms@b4J_MV&Q)+-b?C0` z-O~w~4pZc(N;dzDnB^XJa_LSvZ@1d{hd&)lIl;=Z;O~_S>wR`M-&%BHxd6A+^6ncU zd`uqq6t3}YNn zI2ss#Ezb{r+5Y~?`S8jGBJsNgwKHy zw9qu_!z*KzRnL0vJ^ed)BE_i zIzMQ*ewm&z_jmmAhjqa(S6fd$&7%{#C~t3St^5u#`IQ}FS^V4%B<5*Rmd*AAo1##i{jjb zN3lB{yt`hc=R8-c)IXJTTz2`LEakg57#S5PE50`hon?K&_r9U!`^7xM%9DdnuS%UUkF9_0{B=Gr_C$y;wEh1#dTH4ui&u`fQcT#^?=Y@j z@sLmc)3;roOC)2?G1pWa?YkEIX{%29OX+p30V_P88Hnt(oT5DMSMD|DYib8C%lxUX zH=bCR=c~AA%kEqIC#_%aih?$1(JHtkxma>E6V^U4d)tE$zhKbquS#_?)WzO`qh4qMAR z>m`5k1P)AnHe+S4PSTFohNoZ4{yROpcyi(ft_rPY+Z`pdZt5@yZ0=dn6ET|!{m(x9V<_WudBF|+%g zC*u=&=I7o;$)?i+jO@xPx9ttLwKZAl*{5b-$8pF{@&HG`))Jomiu`Yb@0HEoV07Zh z?W6_k4#m{zGiB{Fyi>yT|9|tFDQE1C{MYY2>8$j*+WJo3>8RI2pW;tln5xWBxjW*S zU{rwiyyguRQC>Wpog0|e-)Fg;;+qx2X?04ua*<-srr7N|g|E3;*Dh5rt$EI4lA+za z!dC2R@8m{H5%s^-HV=J&y3Wy%ef?;G^u6k0??u~fW^8M34{GqJPZJ8-yD0g`UB`_k zf7NXcO6wUvJ2rjW&rQd#9yxbJN+{wD|K{Bt+oT_UdAZCcPEMrj#%cL{&W9II1+vX~ z5T*Yi=*fdgCpBJ(>^;2qS<}b!3VGqH^qTe>e*AHVO?vai$Byz_*J%9v?6uY)mZ$Ql z{?=<#PEL-CJ$r-cy1;Vhx36|Fu<8ByZKv8g;k1qid-o4j-1@gQYY2LT)0jCdfdgP&c2U6Uh7#j z^OSq+lqT1e?i1DPyLRo!ry~LkM!z!xpMF{}Wz&vVH_GxKE&ue9W5KUU3GXa9J6kVy z%g%jSzjo>c)lDp`atglZy;0+DvdGd~7-`KPbYY@w7JGWPFZ#dU^^?>_9ei`WskT>K4BY5T^0 z_jjkSn|$);)OfskqlIVMA4A@T%gfE@1xoiHJiV)~aqBWyhfw|2`q};Ez!})seyIp!mzdkG7(6^HzgI%ioEc=?CuN%3aA9YqOkYQPN`Cp5U zN4~ecopIb}tDiqN>}I~Z@$!or(*zw$?X4fb{YroMe|HuCwhxuh9@k7Ui(}t=!C6=!awL%F?FI z43up$OWO7GXVD+yz|8X{N8;?y)!O-7I1&=m`u){UHF=2(^S!Dceto-Hs!`|3rQVYp zZ~b9t;Nj(8Emyed!|gSdi@5dso;|+uIo)aYab5lSRzf}=dII|@ZoM?O`ozCjC2HA% ziRbD|mpI=BRyZzw9>q6_6NdBDb7spopK)%DOqtfMY zpP#Io`tGvZs~TU*OqlDbll;@J#$wmCg-?s!rhKf~tGI8nc;393lFf1oOC;6(F0@rV zKk+bfMwo9v_=M7-iw4+`#|P9n-9UqxD={=Jv#y z#cC~KUM(qjP`sb*hL*SCmn=pviHi5rH^1Hau`+uPYi9pFa}ATyQycGpPRsjy^s#iu z6b*-~j}!#NcXn?TO$sQ^eV!vwJ8xlh&gboZd#d}dWjF;-UjImH^5HFVoAg;WEa}*n zUaoZS)=68@QeJl@0lO2MTJjffpRK{aTd#4m=Z=YeM*HO7N1eG+_w<8gR^;5K1d;T_ z%s&P@^vk#N{eNL^HUI5_Yun8hsJm^w=+h&jZ_~hWLuJ*b8}l-5Iwm*@pGsYtdHLW{ zljv06MF%%nZCE??lK-}fZ{2%JWlu6PN^s0RYjO8r?^**Nok=|@r`P%)d!`h>e15CH z+pRi*i|udEi|?nh)SM@9PImWy#2r%Qf5T-W&aw^eHp zcX%3q-2-i>E1cU4Z24sSCYSXIe)QR6{_%G_>q7l(UVH0aU-RF*`3Y?Q{o1#e6&*gX zb{Cgk&cC1a`^{#r3fb4Ie9b>VKw$UHl?B@i@9}%x=6JAIOyfXr%Rbq^?Q4!roff+I z+T^h4DR)l4JUN5=c|+=F{<^uohtg*D9NApAhL=tAVHrnY%&n($qEG0uud|r7GS9pw zZ`ph6`!nlPr6*{aOVtN0SW+4PwKu9@N|q{b)3V~bqEWq5wU7KcQQENQqF)EoqU=M{ zG?xVG37E8M-ns4Yg>Opv&KIpJ3nV{z-FhrN`QDDmOD|R*%(&*oGU@Yd@e--HKT2B@ z?#>A5l`}hBQ?{>XrK;mx@z-;AoD|W2cPwg0&t<K+S;}8k zYgSi~W6gQtTe64D^Lj%ynq58q&m zTUIP%G-I2<^N;rRPVdjLr9Eg)zp3VHT420Qf!i);^4ePulSI$YjO3hq(p**lmP4z- ztX$L8${riV_R71M6tlkzJeanS@89IRWd+;S_MW*niNULCiQ?UTzH;H`Sc-hPmat7V zH%gk|{WGGW|4!Vb#|!Mlou;tLK41-8B%xw*rv8P1(H$`>#~F${rj<|IxOnlCquc%} z)&F<;5%K7F#DYt~OP0*lPz(4}%J_B3o19Y|IqiF+^JkosTzxKyr}eLC&5XleTc*$1 zk{{~Dbs**oN8L8pw@b@+ z#(z_{@;ALsO;UeJh<-A5|`t)q>wyy9iY_aoQ7>=wz_fprc=7#aZ%v(Al z{ktmsvu3ySHLtBtT4-{}oV#mZnbg+vZEv64s@k#3X!eiJ8FJNvDQ!`cEt!71Y0Zxa ztI)o0yJNDrj%Apc_@5c&IwdoCwryv4@TfFAU|-*Y1ABhn$aRU5xoDn{&5*Tmh0gOG z@=f&;9G?x{)iiC=xcTer|82eaRX(H8bnlk;G9NU<_|~j&n^Loi>r}$_2_AD7oX<{F ztiQeB5!dpl-SNlguU@*L^y$Tanu?aWfm{4+S|*3odRo_{+?GtS&i#LTsXKGTtu(v( zGB%(3iYu|_KFG(e{rmS?Q;0U>A&$LPF0cGpXZUP={o`#mE6b+DLruE%)mg_mWSSsEw( z+^^feKWN8Sz93P2LC2h*$DcF^B|MmR&LeE${B8O7-tU&%n75%jt;+#f>v>Qer8kDmFjcZRTcey zw_UrL^oqy{$1jAk)?HbN`X)+rWeE3bcE zVLy>EHu1Lef}7rQ>rB5tKUy%wwk24tUSQeI65p6RcP=K+v7FKURN3n5UG7y{+d6vE z%-_d8I&(vKT8t^*^_7}D-*x!j7{5)q*_I#Dr@gnCXVzrnmYA12a(7DIIbc$M{;z69 zvn@;fecS6+?{~~Qnx$6wDMjos2kZ3dMU2N-XUqDOI7-xIDXssx@ACYr?!Uvzgc|?YYbci{WK@+mSg+<_<}F{raMop6CxsZ#fU9=xYG6g)~dXa zc^>bN%g&uzAlcQZ=rKpMXRCrsQBb`m+gtBlOE@+#Zut6GUo*P-u5T=J>v- zLl@MHi;RpvFJq=l=--DLIS#fK88Dh5H*3~@I@=s{B)83x}WxpSqU!T>M zo}}Iu)NCWHnWeNVK3;2ytG9vQTx#cf zI2_(LcT&a8ibx;7GMbgH6wvv#ye5y! zLw&yMc@w*Hw&I&IqK;lWE`Rff(utxOiJW5B+I~2!m=w`tHTuKu6`j=%q}t*t)XBd2dxNbZ%TVcf%JA<@qxgF#O<6x%HAc^_aNdf+cT{ zf4n>U+2+g{%|ACRi*&yidh89)nL=eIp~sHVe2Y9|4`ePgd+NpieS+^9Wd$=-oab{)8MSiR6SbR8pW7tlg{-+a^ugmU|TRYwNO481l z(=`tZUkAxrF0E~|R#Td#)pP8`vye9)ODA#oKK!VEHD)?*TH^a}suQd)`c7JAX~-O) zT5{^xqmHi{k0x9;^|UXHva!2)d3*hzU6WF!zBciy-e3Lbp{LZ}>!&Zc{Vz%9Shr;Q zoC_xVlRotah~LzEU!uO?-G^m7ER1J;wVtNUlG$0$8OmEoT>lT zW)-)iJLIO!^gFQYb+YCa$p`ns4)|S7VVEd*#{1!!=40He{nXAK+IsiANiU=Cq&%(( zM>bykdvfx$>yjVO?lE3hWb3*!>gyXv9sWTQnt~ju@ik1He&-+vr`J#tT z{S!Uhm+d>6_v-U3$B?-@{@tI-u~Ol{`u`OPO3!mmDo=MEE;_Z=W3zg6kI~m9VY$DW zP6kSOTJ%nlzIP>E_M>-PoAdS;8(AMmXI17ej$_)So$VpQF8C{jC-ZLU(i3+i7p*d! zVBk09U{S>UKgIoyGvCaX{e5(~?td+2xu&n4-b%Nh=olQFb%aYsAUb_|BVWAt+t z_jOwl$>7tj5ms@`r+3Tr#q9h2`EJiozL~FQzw*_%<+R-FANT#<>8oX)-uKxV*`O8k z!sq60u7__OKis(T^qHA3*S60FVa1b^KO8y3&Q@-*^-Fy1#)*4cpXn|*us_DfQ0!rX z!0E})S=czPE=}cqe5;Aw%%og(tJMDdFVD}vcQ(89xqITK=SI`sb+ymRTCw89^j+`S zHGiuf^Lk~$X=(O%qWO{Yweg1zZI9aEuJ&`|s+nl|Fy_$#Lxl^({}*1g>e; zi+D`fw2Ix@;Kp~~qa0>Ce}4boB>sKo((A`BwV(Ru#W8Ps-v9UPTVAb7_+z$J*;U-6 zv*ixgkKiDmN$>ue-?;ty5kt?S7Jk(yHh#?vbw7gAXRmKI__e{5>vcI2wyEh$NF#kk>fl)&K)_omo974^0uB;AyI?pG;?BnUv zJ1XMWM~hzeirW>i=(Dy_+k%T8mV!r@&+tpU`DTSoV~5NGOXJ$zM_Hu`-TvfB_^v!? ztkPRy^I?6dJ^!JYo!=Dc6O!Q-P@&4-tw4zK6%-;XExMpvi zPO%vuM9*#wX-_g2Z1MZ4Hc4hK+tKTcntS^m>CA6hWxetHj3eq*xe4_-EHcGAc3B+U z&pYw4tNQE@N(K9FOm@&*de|YV=i3fNhq=?3?XKGvsGNQnBB>G}byawtLgDF2tg3D@ zRvh>9!oM$e`|NhLQk4m~1 zWxPD`h;{R`)VJ1CjIUW8zqY>Pz4z}uC$1`9`0&g=`ttjG2jsUYR%&fuHo0_OwnF9o z{{QPY7R-BbRVyi1NO8TjM85ytLm`&)n8iarGalW>{keGN-06l5mgY)c=`R)6UoXG^ z>p->NhC-z&w~Hnf*gwgyN;7++d$(qJ$hH^1s&tOAuYTgc%JFiz<-%!|e2OmFmR4!u z)y6q{W^~-K5&GA;YQfis_PS1HnrfSBUbZgL-CcY3zT<2og9GkUoFCtaEj^h2%2M;i z;|mQ3RwO<5oZceDbGTL@{P@!ke^*c9Un!Ea`Q5Knvz+6WowxW_mzHFFj`(rGPG{^aa&m|4jDUnKs>><;ye0~(S|3&Q?;%sjs)C!o>)X`aHbW#w(D^FHl) zKmWZ3_xez^-wiAm>T;42Hho^OHd8WS`m0~j77OHAeN=x5e|_@gpVFLJwlA1|E30xJ zWjgrbsV19c-yt=RjSb6}`R%B_Y@k=QV&1!H*EV&rr>xcLHIiQ`z9sAg&;A{?%yTZR zyp! zSDVo(wrdK0Z)Mf4L@bov4s0nTU@PCHf zrS0l#+fK~aKgwDiC()_@^q%n=4;vXZ+s0}iro%5YC&uR$CVk*PZ|!gL%KSL*eioyo zU$4LB`|&^6RpQ&7kQZ~L;H&HWdYquYJ{TDhtBpOWtSyFc4m+~@Ml zcic4Pg6m;6v5viK;|vTh&B|gp(r`p()BWzFGg}|7dz|{Quqe-H^2e#^dDCyrkr3ST zd*$uXa+6S*R|9bcO^{V;%yq_7ZZ=Jy|@PM~UsZm-}vu?kh z-g@R$%XS+q?>MpA|JR$cRlRE;oH4qh?EUy(d*Z`y_oj3fPq_2{%6<3r4MyiV532^s zN2S=_V7qy`=g**TU(Z=XJE{?BU#pYT@I!glHNcl1sMMV`JU8m_jmFSBm;#aj7urpg>wlC>&t|(x^?5y!(>J5U zHM?bxY`SN%YnN=%&wHA`)U|$#sf6_JXDwmde`?B_MP3s7|NY(@(4MaRBIWHL4wb$? zQhoE59ska^|Hb{))=yq8eDmb9#N2<6pRB(#ry=ZT+<&I)bEcjZo)YPN>89Iyy$2h< zbVX#BmTCTX;K-gDq25)n=#}6#?w3Mc1zW52p1xJhRW-Z9u-m{v>PywO^jGmM(!RzS zXH~Nwn$3K9QnFkuYf9FX-!&g5t2`3o*IoI^CcvAK$(}(3$Ek8E3=p6Ip%@}l(a)IU pVt~joGDtA|yWKE3<;fjJsA4!3;LXYg;xIBWGNdptFogJlcmN>+^
Thus, attacker can grab SYSTEM hive from WinPE, modify Setup!CmdLine to cmd.exe, and cause winload to use this hive when booting WinRE.

When booting WinRE after this, a SYSTEM shell will open with the bitlocker keys in memory for osvolume if they were derived; thus, bitlocker bypass.

Fixed by removing the ability to load SYSTEM hive from systemdatadevice. This bug is CVE-2024-20666. | January 2024 (winre image must be patched manually) | February 2025; discovered in March 2023 | Rairii | | break out in hives 2: alternative method for exploiting systemdatadevice element, usable with a downgrade attack | The fix for break out in hives updated winload.

However, earlier (unfixed) revisions of winload can **potentially** still run to boot its major version of Windows (may not work in practise for every version).

Thus, attacker can bring in an old winload, modify BCD to boot from it, and repeat the attack, however a different exploitation method must be used.

**The `winpe` element must be set in BCD (if it is not, the SYSTEM hive in the bitlocker encrypted osvolume will get corrupted!)**

The working SYSTEM hive here would come from an `install.wim` image of the same major version of Windows (not WinPE/WinRE). The Win32 subsystem will not be able to initialise fully, but smss can be configured in `ControlSet001\Control\Session Manager!SetupExecute` to achieve arbitrary native subsystem code execution as SYSTEM with derived keys in memory.

Fixed by wiping `systemdatadevice` element in bootmgr if Secure Boot is enabled, but the fix was only applied to the PCA 2023-signed bootmgr_ex, so **without the KB5025885 mitigation enabled, this vulnerability is still present and remains unfixed.** This bug is CVE-2025-21213. | January 2025, in PCA2023-signed bootmgr_ex only | February 2025; discovered in January 2024 (after the original fix) | Rairii | | Boot environment does not check SDI when loading ramdisk, which has offset to the used WIM | When loading a ramdisk, the boot environment (and NT `wimfsf.sys`) gets the offset to the used WIM from the SDI file if it's present, and there is no validation of the SDI file used. Therefore a crafted SDI file can be used in the recovery sequence to boot an arbitrary WinPE WIM with the osdevice bitlocker keys derived.

Fixed by checking that the calculated WIM offset is equal to the actual load offset of the WIM, and returning STATUS_INVALID_IMAGE_FORMAT if not. This bug is CVE-2025-48804. | July 2025 | August 2025 (at Black Hat) | Alon Leviev and Netanel Ben Simon of Microsoft (MORSE) | -| [YellowKey](https://github.com/Nightmare-Eclipse/YellowKey) aka trans writes: Filesystem transaction files located on one volume can affect files on another volume | Germanium introduced a new filesystem transaction feature (unrelated to NTFS transactions). Logs for this are on disk and parsed by `fstx.dll` (part of the servicing stack), and in WinPE only it is loaded by new native executable `autofstx.exe` ("Boot-time FsTx Update Recovery Utility" - "This utility recovers failed FsTx updates at boot-time.") which smss runs due to registry entry.

These logs contain full NT paths, and thus can affect files on another volume.

This can be used when booting WinRE with a removable drive attached (NTFS formatted) to delete `winpeshl.ini` on the ramdisk. With this file deleted, `winpeshl.exe` will launch a SYSTEM shell if Ctrl key is held, with the derived osdevice bitlocker keys in memory.

See also [additional writeup by Will Dormann](https://infosec.exchange/@wdormann/116565129854382214). This bug is CVE-2026-45585. | None | May 2026 | Nightmare-Eclipse | +| [YellowKey](https://github.com/Nightmare-Eclipse/YellowKey) aka trans writes ([mirror](YellowKey-main.zip), password: `bitlocker`): Filesystem transaction files located on one volume can affect files on another volume | Germanium introduced a new filesystem transaction feature (unrelated to NTFS transactions). Logs for this are on disk and parsed by `fstx.dll` (part of the servicing stack), and in WinPE only it is loaded by new native executable `autofstx.exe` ("Boot-time FsTx Update Recovery Utility" - "This utility recovers failed FsTx updates at boot-time.") which smss runs due to registry entry.

These logs contain full NT paths, and thus can affect files on another volume.

This can be used when booting WinRE with a removable drive attached (NTFS formatted) to delete `winpeshl.ini` on the ramdisk. With this file deleted, `winpeshl.exe` will launch a SYSTEM shell if Ctrl key is held, with the derived osdevice bitlocker keys in memory.

See also [additional writeup by Will Dormann](https://infosec.exchange/@wdormann/116565129854382214). This bug is CVE-2026-45585. | None | May 2026 | Nightmare-Eclipse | | [ram leak](#ram-leak): Boot environment has no restrictions on ramdisk creation device | When configured to create a ramdisk, the file to load and device to load it from is provided in the BCD.

The boot environment has no checks on the device passed, and thus, BitLocker-encrypted partitions are allowed, assuming the keys can be derived.

Therefore, an attacker can set up a ramdisk with an arbitrary file from a BitLocker-encrypted partition, and the file contents will stay in RAM even if the derived BitLocker keys are wiped, and can be dumped later.

Additionally, an attacker can use this to determine whether a file exists on a BitLocker-encrypted OS partition.

Interesting targets include: hibernation file (contains derived bitlocker keys, and is compressed so should fit entirely into RAM, especially if "shutting down" aka logoff-then-hibernate from the logon screen), pagefile, SYSTEM and SAM hives, any third-party service or driver (identified from SYSTEM hive) to check for vulnerabilities. | None. MSRC closed as low priority due to misunderstanding. | May 2026, originally discovered March 2025. | Rairii | ### dangerous association