80 lines
22 KiB
Plaintext
80 lines
22 KiB
Plaintext
|
MZ� ÿÿ ¸ @ Ð º ´ Í!¸LÍ!This program cannot be run in DOS mode.
|
|||
|
|
$ á¶Ç¥×v”¥×v”¥×v”î¯~•¤×v”î¯v•¤×v”î¯r•§×v””¤×v”î¯t•¤×v”Rich¥×v” PE d† `@f ð " 0 €
|
|||
|
|
|
|||
|
|
|
|||
|
|
@ K `A p l 0 ð 0 ø% p .rdata ä @ @.data € @ À.rsrc ð 0 @ @ `@f : ô ô `@f
|
|||
|
|
Œ 0 0 `@f $ ¼ ¼ `@f à à `@f 8 ˜ Ø m ™ À ç = h Ž ³ × ú I p • À Z ‰ ² × + X � ¤ Ë ì 8 c †
|
|||
|
|
|
|||
|
|
api-ms-win-core-memory-l1-1-0.dll CreateFileMappingW kernel32.CreateFileMappingW FlushViewOfFile kernel32.FlushViewOfFile MapViewOfFile kernel32.MapViewOfFile MapViewOfFileEx kernel32.MapViewOfFileEx OpenFileMappingW kernel32.OpenFileMappingW ReadProcessMemory kernel32.ReadProcessMemory UnmapViewOfFile kernel32.UnmapViewOfFile VirtualAlloc kernel32.VirtualAlloc VirtualAllocEx kernel32.VirtualAllocEx VirtualFree kernel32.VirtualFree VirtualFreeEx kernel32.VirtualFreeEx VirtualProtect kernel32.VirtualProtect VirtualProtectEx kernel32.VirtualProtectEx VirtualQuery kernel32.VirtualQuery VirtualQueryEx kernel32.VirtualQueryEx WriteProcessMemory kernel32.WriteProcessMemory €€ RSDShѨ<·aÌj?ZGÂ$ ž api-ms-win-core-memory-l1-1-0.pdb GCTL p .rdata p l .edata Ü .rdata$voltmd ô ð .rdata$zzzdbg € .bss 0 ` .rsrc$01 `0 � .rsrc$02 hѨ<·aÌj?ZGÂ$ žNF@ø©ˆ�Ôê`@f € 0 € H `0 Œ ˆ4 V S _ V E R S I O N _ I N F O ½ïþ
|
|||
|
|
ò]X
|
|||
|
|
ò]X? è S t r i n g F i l e I n f o Ä 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n H F i l e D e s c r i p t i o n A p i S e t S t u b D L L n ' F i l e V e r s i o n 1 0 . 0 . 2 2 6 2 1 . 1 7 7 8 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) 6 I n t e r n a l N a m e a p i s e t s t u b € . L e g a l C o p y r i g h t © M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . > O r i g i n a l F i l e n a m e a p i s e t s t u b j % P r o d u c t N a m e M i c r o s o f t ® W i n d o w s ® O p e r a t i n g S y s t e m D P r o d u c t V e r s i o n 1 0 . 0 . 2 2 6 2 1 . 1 7 7 8 D V a r F i l e I n f o $ T r a n s l a t i o n ° ø% 0‚%ê *†H†÷
|
|||
|
|
‚%Û0‚%×10
|
|||
|
|
`†He 0\
|
|||
|
|
+‚7 N0L0
|
|||
|
|
+‚70 ¢€ 010
|
|||
|
|
`†He ¡ ^†€ôÖv5¢J£\£ö˜eë"é´¸ƒÎõ@ ‚ g0‚ï0‚× 3 'Ö2oCs{‡ 0
|
|||
|
|
*†H†÷
|
|||
|
|
0~1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100
|
|||
|
|
230216201111Z
|
|||
|
|
240131201111Z0t1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1 0 UMicrosoft Corporation0‚"0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ 0‚
|
|||
|
|
‚ Å‘¹-Lð ÂèÖ©àôH½ª1 x` çr�d[ rÞ�ïoß>¢¿Ûê÷¬P.DˆÐø_^ppbÔ–Öp‹“ÉhÈ&�>2Ûå0}mïà "ã É #xÃqîxXóš$!]~-áñÿ…»µôQ¯¶C'1lv`ƒÏĦWhµŒüú×!=ÍÑ™ƒm –Çù™»üÉ4Òí�ûIÎZ¾@]9²¸ UÕ4¸{â*)ߌ�Î!M^<} ®³.�Úç÷�É¢ðÊGo‡Câm� ‚®y"[c½_J”wz@|^DžŒÐFJ€… ptÕ֖sxáÖ¡96grS›êt.‘¡ £‚n0‚j0 U %0
|
|||
|
|
+‚7=+0 U �
|
|||
|
|
Ùw0 a5¡Ì¶«bÃ:*5)#0EU >0<¤:081 0 U Microsoft Corporation10U
|
|||
|
|
230865+5002310 U #0€æü_{»" XärNµô!t#2æï¬0VU O0M0K I G†Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z+N0L0J+0†>http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0 U ÿ0 0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ áÒCÔ�F-ÎSļÊ5qèá¥ùDú]gŠÛʵ7R¾ +ˆW-z Šuñ�)ÒÆë ÊUÝzj/ƒ—™–sF íˆ de÷9žêàCK+} …×;`¡ºØÆÑÎŽ„á‰kÁx¹™:5¶¹¯&®Ùè_àö®`óô( :L6xn=Úòt¦€D„Yði€ ð͘&º)î¨Ãr2Oé‚´
|
|||
|
|
8D³†R$OƒI169PùLý?3kÜ�#`UΦÿ@ IS +GÍŒSCõ ÓËþ
|
|||
|
|
ö‹"Ô æãȳXµãìr¾ U ·)p ¿^ÜóäÜÒŸ/œy:5ñ‡E0‚p0‚X
|
|||
|
|
a RL 0
|
|||
|
|
*†H†÷
|
|||
|
|
0�ˆ1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
|
|||
|
|
100706204017Z
|
|||
|
|
250706205017Z0~1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100‚"0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ 0‚
|
|||
|
|
‚ édPygµÄãý Lž”¬÷VhêDØÏÅXO©¥v|mEºÓ9’´¤ ùùe‚äÒ�ýDœèe“Î,U„¿}ã.+¨A+·¢KnILkÞÑÒ‰ q”͵K´¯Ø̈Ök”:“Î&?ìæþ4˜WÕ ]Iö²*.Õ…»Y?ø�´+ƒtÊ+³;FãðFIÁfTÉ ½ ÄUbWrøg¹% 4Þ]¦¥•^«(€ÍÕ²žåµcÓ²ÈÁÈŠ&
|
|||
|
|
Yìÿí€5L¦¾R[õ¦Úà‹ HwÖ…GÕ¹Æèªî‹j-\`Æ´*[œ# _Eã o7Ë3€j‰M£jfcx“Õ0Ï• £‚ã0‚ß0 +‚7 0 U æü_{»" XärNµô!t#2æï¬0 +‚7
|
|||
|
|
S u b C A0 U †0U ÿ0ÿ0 U #0€ÕöVË�è¢\bhÑ=”�[×ΚÄ0VU O0M0K I G†Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0†>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0��U �•0�’0�� +‚7.0��0=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ tïWO){Ä…x¸PÓ"ü �¬‚—ø4ÿ*,—•åä¿Ï¿“Èã4©Û�¸Ü ¾Ò5o¯åy•wåÔñëØÍN a¢ÂZ#ðŒ¨bQEgã?< “ø0…È9@¦×³!)奡iŒ"“Ìt˜ç¡GCòS¬À0iþÒ% moaÓßÕÙr ,i†v=QÛ¦9HÉ7amÝS˧Öa¿⃫àk›•Ö}(Q°‰JQ¤šlÈ· Ji©×ÜÁ~ÑIpª¶»rGcú¦Ö¢¦†ì¨D›c¶²i‰ÇF†z?èÅ !Õ{ù#-ÅAË¿ LÈﱜü"KIŠnã¦v[ÑSy‘…�ÕÒÛ=s5ó<®T²RGjÀª•ÒŽÚ™g^2Œû7…ÑÜu…œ‡ÆZW…¿Ý
|
|||
|
|
�Œ›-ë´îÏ'Óµ^iú¤§$gsÏMO¶ÞV—z÷éRMôwO…ÆØ ñŽíB Ñ
|
|||
|
|
vã#Vx"&6¾Ê±Œnª ä…ÚG3b�¤É‘3_q @¯˜eÉ"èB!%Š -`Ù7‰A‰*×a<”h`RïÖG™ €@î�w>œàSP 8•› f3'9x‡6ÎNÃ_²õ=GS¶àåÛ a=*×’,Î7Z>@B1¤ ÂVœ¿$]Q�jyÒÓÚÁ”Ž{%qD«jæÔÆß#š–uÅ1‚ö0‚ò0�•0~1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20103 'Ö2oCs{‡ 0
|
|||
|
|
`†He ‚0 *†H†÷
|
|||
|
|
1
|
|||
|
|
+‚70
|
|||
|
|
+‚7 10
|
|||
|
|
+‚70/ *†H†÷
|
|||
|
|
1" KÀÖ�„_Û–èMJ�äÝý~"ó—õØlV-îÅ£•º”0<
|
|||
|
|
+‚7
|
|||
|
|
1. ,sPY7xPB7hT5g5HHrYt8rDLSM9VuZRuWZaef2e22Rs54=0Z
|
|||
|
|
+‚7 1L0J $€" M i c r o s o f t W i n d o w s¡"€ http://www.microsoft.com/windows0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ ´}d08è<Š|'i‰]F|xÆŽ=9=â†è¡^I
|
|||
|
|
þã3l_ ô¨
|
|||
|
|
ÑíOB�ûž¯ÕD b“¦kàTLÐÌà�Fp¡ô )_üDùÏ'´[tçC#o©vU¡�YÞ²X[ÌLžZ�H5®Y/ °‰Ïƒ¨JTJL¢0»Üd®;ª÷
|
|||
|
|
Û>ÅQà{&¤ìc–ÊÔùÄq‹êßé¡·@¾�É9…à\Âû,!K5‘v½ÈˆŸ]Ì�b¡-ÓÏÒÿ2“ ÄmA/Q[ �ÿ¼ÒÙdÙبƒð„æ ,ɶä•q±é?KÏPeêÿÑ!¤…õÝgQ<£GxG¡‚)0‚%
|
|||
|
|
+‚71‚0‚ *†H†÷
|
|||
|
|
‚0‚þ10
|
|||
|
|
`†He 0‚Y *†H†÷
|
|||
|
|
‚H‚D0‚@
|
|||
|
|
+„Y
|
|||
|
|
010
|
|||
|
|
`†He Iø<Á ¤ëp›*`ªˆÛ5†~î¢JP…þi@Ðé²ìNd?ÓŸ@´20230512063018.817Z0€ô �ؤ�Õ0�Ò1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1-0+U $Microsoft Ireland Operations Limited1&0$U Thales TSS ESN:179E-4BB0-82461%0#U Microsoft Time-Stamp Service ‚x0‚'0‚ 3 µß×…pm µ0
|
|||
|
|
*†H†÷
|
|||
|
|
0|1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100
|