90 lines
22 KiB
Plaintext
90 lines
22 KiB
Plaintext
|
MZ� ˙˙ ¸ @ Đ ş ´ Í!¸LÍ!This program cannot be run in DOS mode.
|
|||
|
|
$ á¶ÇĄ×v”Ą×v”Ą×v”îŻ~•¤×v”îŻv•¤×v”îŻr•§×v””¤×v”îŻt•¤×v”RichĄ×v” PE d† ±OĂj đ " 0 €
|
|||
|
|
|
|||
|
|
|
|||
|
|
@ PÉ `A p ä
|
|||
|
|
0 đ 0 Đ% p .rdata d @ @.data € @ Ŕ.rsrc đ 0 @ @ ±OĂj B l l ±OĂj
|
|||
|
|
Ś ° ° ±OĂj $ < < ±OĂj ` ` ±OĂj ‚ 1 1 � \ » č @ q ś Đ # P „ ł á = k — ľ é B m ’ ą ë - i Ž ˛ ŕ R u ś Ó N € ¸ č 4 ] ‡ © Ă ŕ 0 ¬
|
|||
|
|
|
|||
|
|
! " # $ % & ' ( ) * + , - . / 0 api-ms-win-core-processthreads-l1-1-0.dll CreateProcessA kernel32.CreateProcessA CreateProcessAsUserW advapi32.CreateProcessAsUserW CreateProcessW kernel32.CreateProcessW CreateRemoteThread kernel32.CreateRemoteThread CreateRemoteThreadEx kernel32.CreateRemoteThreadEx CreateThread kernel32.CreateThread DeleteProcThreadAttributeList kernel32.DeleteProcThreadAttributeList ExitProcess kernel32.ExitProcess ExitThread kernel32.ExitThread FlushProcessWriteBuffers kernel32.FlushProcessWriteBuffers GetCurrentProcess kernel32.GetCurrentProcess GetCurrentProcessId kernel32.GetCurrentProcessId GetCurrentThread kernel32.GetCurrentThread GetCurrentThreadId kernel32.GetCurrentThreadId GetExitCodeProcess kernel32.GetExitCodeProcess GetExitCodeThread kernel32.GetExitCodeThread GetPriorityClass kernel32.GetPriorityClass GetProcessId kernel32.GetProcessId GetProcessIdOfThread kernel32.GetProcessIdOfThread GetProcessTimes kernel32.GetProcessTimes GetProcessVersion kernel32.GetProcessVersion GetStartupInfoW kernel32.GetStartupInfoW GetThreadId kernel32.GetThreadId GetThreadPriority kernel32.GetThreadPriority GetThreadPriorityBoost kernel32.GetThreadPriorityBoost InitializeProcThreadAttributeList kernel32.InitializeProcThreadAttributeList OpenProcessToken advapi32.OpenProcessToken OpenThread kernel32.OpenThread OpenThreadToken advapi32.OpenThreadToken ProcessIdToSessionId kernel32.ProcessIdToSessionId QueryProcessAffinityUpdateMode kernel32.QueryProcessAffinityUpdateMode QueueUserAPC kernel32.QueueUserAPC ResumeThread kernel32.ResumeThread SetPriorityClass kernel32.SetPriorityClass SetProcessAffinityUpdateMode kernel32.SetProcessAffinityUpdateMode SetProcessShutdownParameters kernel32.SetProcessShutdownParameters SetThreadPriority kernel32.SetThreadPriority SetThreadPriorityBoost kernel32.SetThreadPriorityBoost SetThreadStackGuarantee kernel32.SetThreadStackGuarantee SetThreadToken advapi32.SetThreadToken SuspendThread kernel32.SuspendThread SwitchToThread kernel32.SwitchToThread TerminateProcess kernel32.TerminateProcess TerminateThread kernel32.TerminateThread TlsAlloc kernel32.TlsAlloc TlsFree kernel32.TlsFree TlsGetValue kernel32.TlsGetValue TlsSetValue kernel32.TlsSetValue UpdateProcThreadAttribute kernel32.UpdateProcThreadAttribute €€ RSDSAwâ–äĽ˙đçE©ĽË( api-ms-win-core-processthreads-l1-1-0.pdb GCTL p .rdata p ä
|
|||
|
|
.edata T .rdata$voltmd l ř .rdata$zzzdbg € .bss 0 ` .rsrc$01 `0 � .rsrc$02 Awâ–äĽ˙đçE©ĽË( â–ůeD r–\ɱOĂj € 0 € H `0 Ś �4 V S _ V E R S I O N _ I N F O ˝ďţ
|
|||
|
|
ň]X
|
|||
|
|
ň]X? č S t r i n g F i l e I n f o Ä 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n H F i l e D e s c r i p t i o n A p i S e t S t u b D L L n ' F i l e V e r s i o n 1 0 . 0 . 2 2 6 2 1 . 1 7 7 8 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) 6 I n t e r n a l N a m e a p i s e t s t u b € . L e g a l C o p y r i g h t © M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . > O r i g i n a l F i l e n a m e a p i s e t s t u b j % P r o d u c t N a m e M i c r o s o f t ® W i n d o w s ® O p e r a t i n g S y s t e m D P r o d u c t V e r s i o n 1 0 . 0 . 2 2 6 2 1 . 1 7 7 8 D V a r F i l e I n f o $ T r a n s l a t i o n ° Đ% 0‚%ľ *†H†÷
|
|||
|
|
‚%Ż0‚%«10
|
|||
|
|
`†He 0\
|
|||
|
|
+‚7 N0L0
|
|||
|
|
+‚70 ˘€ 010
|
|||
|
|
`†He BćH궫M`
|
|||
|
|
“żűwxĄĎ«ÂĂ×Ţy��Nyş`Ş – ‚ g0‚ď0‚× 3 'Ö2oCs{‡ 0
|
|||
|
|
*†H†÷
|
|||
|
|
0~1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100
|
|||
|
|
230216201111Z
|
|||
|
|
240131201111Z0t1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1 0 UMicrosoft Corporation0‚"0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ 0‚
|
|||
|
|
‚ Ĺ‘ą-Lđ ÂčÖ©ŕôH˝Ş1 x` çrŹd[ rŢŹďoß>˘żŰę÷¬P.D�Đř_^ppbÔ–Öp‹“ÉhČ&�>2Űĺ0}mďĂ "ă É #xĂqîxXóš$!]~-áń˙…»µôQŻ¶C'1lv`�ĎĦWhµŚüú×!=ÍŃ™�m –Çů™»üÉ4ŇíťűIÎZľ@]9˛¸ UŐ4¸{â*)ߌ�Î!M^<} ®ł.�Úç÷ŤÉ˘đĘGo‡CâmŹ ‚®y"[c˝_J”wz@|^DžŚĐFJ€… ptĂ•Ö–sxáÖˇ96grS›ęt.‘ˇ Ł‚n0‚j0 U %0
|
|||
|
|
+‚7=+0 U ť
|
|||
|
|
Ůw0 a5ˇĚ¶«bĂ:*5)#0EU >0<¤:081 0 U Microsoft Corporation10U
|
|||
|
|
230865+5002310 U #0€ćü_{»" XärNµô!t#2ćď¬0VU O0M0K I G†Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z+N0L0J+0†>http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0 U ˙0 0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ áŇCÔŤF-ÎSÄĽĘ5qčáĄůDú]gŠŰʵ7Rľ +�W-z Šuń�)ŇĆë ĘUÝzj/�—™–sF í� de÷9žęŕCK+} …×;`ˇşŘĆŃÎŽ„á‰kÁxą™:5¶ąŻ&®Ůč_ŕö®`óô( :L6xn=Úňt¦€D„Yđi€ đÍ�&ş)î¨Ăr2Oé‚´
|
|||
|
|
8Dł†R$O�I169PůLý?3kÜŹ#`UΦ˙@ IS +GÍŚSCő ÓËţ
|
|||
|
|
ö‹"Ô ćăČłXµăěrľ U ·)p ż^ÜóäÜŇź/śy:5ń‡E0‚p0‚X
|
|||
|
|
a RL 0
|
|||
|
|
*†H†÷
|
|||
|
|
0��1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
|
|||
|
|
100706204017Z
|
|||
|
|
250706205017Z0~1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100‚"0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ 0‚
|
|||
|
|
‚ édPygµÄăý Lž”¬÷VhęDŘĎĹXO©Ąv|mEşÓ9’´¤ ůůe‚äŇŹýDśče“Î,U„ż}ă.+¨A+·˘KnILkŢŃ҉ q”͵K´ŻŘĚ�Ök”:“Î&?ěćţ4�WŐ ]Iö˛*.Ő…»Y?ř�´+�tĘ+ł;FăđFIÁfTÉ ˝ ÄUbWrřgą% 4Ţ]¦Ą•^«(€ÍŐ˛žĺµcÓ˛ČÁČŠ&
|
|||
|
|
Yě˙í€5L¦ľR[ő¦Úŕ‹ HwÖ…GŐąĆčŞî‹j-\`Ć´*[ś# _Eă o7Ë3€j‰MŁjfcx“Ő0Ď• Ł‚ă0‚ß0 +‚7 0 U ćü_{»" XärNµô!t#2ćď¬0 +‚7
|
|||
|
|
S u b C A0 U †0U ˙0˙0 U #0€ŐöVËŹč˘\bhŃ=”�[×ΚÄ0VU O0M0K I G†Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0†>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0�ťU �•0�’0�Ź +‚7.0��0=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ tďWO){Ä…x¸PÓ"ü ť¬‚—ř4˙*,—•ĺäżĎż“Čă4©Ű�¸Ü ľŇ5oŻĺy•wĺÔńëŘÍN a˘ÂZ#đŚ¨bQEgă?< “ř0…Č9@¦×ł!)奡iŚ"“Ět�çˇGCňS¬Ŕ0iţŇ% moaÓßŐŮr ,i†v=Qۦ9HÉ7amÝS˧ÖaÂżâ�«ŕk›•Ö}(Q°‰JQ¤šlČ· Ji©×ÜÁ~ŃIp޶»rGcú¦Ö˘¦†ě¨D›c¶˛i‰ÇF†z?čĹ !Ő{ů#-ĹAËż LČﱜü"KIŠnă¦v[ŃSy‘…ťŐŇŰ=s5ó<®T˛RGjŔŞ•ŇŽÚ™g^2Śű7…ŃÜu…ś‡ĆZW…ÂżÝ
|
|||
|
|
ŹŚ›-ë´îĎ'Óµ^iú¤§$gsĎMO¶ŢV—z÷éRMôwO…ĆŘ ńŽíB Ń
|
|||
|
|
vă#Vx"&6ľĘ±ŚnŞ ä…ÚG3bŹ¤É‘3_q @Ż�eÉ"čB!%Š -`Ů7‰A‰*×a<”h`RďÖG™ €@î�w>śŕSP 8•› f3'9x‡6ÎNĂ_˛ő=GS¶ŕĺŰ a=*×’,Î7Z>@B1¤ ÂVśż$]QťjyŇÓÚÁ”Ž{%qD«jćÔĆß#š–uĹ1‚Ę0‚Ć0�•0~1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20103 'Ö2oCs{‡ 0
|
|||
|
|
`†He ‚0 *†H†÷
|
|||
|
|
1
|
|||
|
|
+‚70
|
|||
|
|
+‚7 10
|
|||
|
|
+‚70/ *†H†÷
|
|||
|
|
1" ·Ň0°Řç±RŁË¸¨TE
|
|||
|
|
µv@`ᡷLjÔH†0<
|
|||
|
|
+‚7
|
|||
|
|
1. ,sPY7xPB7hT5g5HHrYt8rDLSM9VuZRuWZaef2e22Rs54=0Z
|
|||
|
|
+‚7 1L0J $€" M i c r o s o f t W i n d o w sˇ"€ http://www.microsoft.com/windows0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ ˛ňĎys‘EwŰTŁ[Bë g Źç¨[ľÜŰŤ˝0ťK3šľ;–/í d
|
|||
|
|
bŔhßAîƆ ˙őPqß“ą µLČŤ’
|
|||
|
|
ÉfÖ<©Ĺ%Ě óź?ě!v(łÇ«p6Zwüs¸ţIuđ ôë¶É3ś
|
|||
|
|
ß‚kËů÷ň«îčßťžąşĘÖࡠę®4î?ߍrh^µđ:Kńm)÷°–(}T€EăˇMű_HUp3Ćąş«Řżf°˙{ ĄłŁ†ś”fNBÝWŹĄ–3‘˛{7ť… %"®Óţĺ9xE¬6 •žŰŁIÜőłJYÁ !ń "Â`čEv6śŇGî䡂ý0‚ů
|
|||
|
|
+‚71‚é0‚ĺ *†H†÷
|
|||
|
|
‚Ö0‚Ň10
|
|||
|
|
`†He 0‚Q *†H†÷
|
|||
|
|
‚@‚<0‚8
|
|||
|
|
+„Y
|
|||
|
|
010
|
|||
|
|
`†He UĚ~ŕ;7i3‚CA…2€b2í1čsEö\g[Áázd\Ôv120230512063008.167Z0€ô �Ф�Í0�Ę1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1%0#U Microsoft America Operations1&0$U Thales TSS ESN:DD8C-E337-2FAE1%0#U Microsoft Time-Stamp Service ‚T0‚ 0‚ô 3 ĹÍÍ!ˇôď9 Ĺ0
|
|||
|
|
*†H†÷
|
|||
|
|
0|1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100
|
|||
|
|
221104190132Z
|
|||
|
|
240202190132Z0�Ę1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1%0#U Microsoft America Operations1&0$U Thales TSS ESN:DD8C-E337-2FAE1%0#U Microsoft Time-Stamp Service0‚"0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ 0‚
|