MZ@ !L!This program cannot be run in DOS mode. $Ke%e%e%e$e%tjxe%tjze%e%7e%e%Riche%PEL^O   @5`*(`.@5 30P@.text h.rdata@H.data$ @ @INIT`*`* .rsrc`.`.@B.reloc  3  3@B%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %%%%UE @M A2ҋM 3]U0EE3EEEEEMQURE PMQEEE@UЉUEEEPh?MQ|UREPE؋MQ]UtE3EDž3ɉDž3҉DžDž33f3҉fEh$"PDžDžDžDžDžRhPbhjQ 3ffURPQEM싕J\u3ɋU싅f PMM UU}v6E싍A\t3M싕fJ3M싕fJEfNs0jNh@"R' Lf 3f 3fPuh"RDžDžDž@DžDžEEjP~ (t (j_h#PDžDžDž@DžDžRh?P4u@h#j}Qh?R}jjjjjhjPQhUR}P7jMQREPQ3EPjju]UHDžEƅDžDž3EEDžEE3fhjR* h!PDžDžDž@DžDžRh?P}DžMQjjjR}t#tEPjuMQURPjQ}nE UU싅M;HsTURjjjEPQ}t#t륋U;UvEE땋MQjE}uE UU싅M;HUREPMQjURP}h!MQ D=vhjQ h"REH QURP)EQ RU-EtjP}t jMQt RE]UPVDžDž3DžDžDžDžDžDž3fhjR 3fhjQ 3fhjPz ƅhjQ] URh D=vLMQRh0!P;QRDžDžDž@DžDžQh?R}PjjjQt#tiRjuDž<PQRjP}jQB hjuDžjQDž;aQhRjPQ}hjR hjP QRPQ B PQRP Dž insufficient resource \??\C:\show log.txt ACCESS_MASK: %X WRITE_ERROR: %X CREATE_ERROR: %X @*&.0+H+R+j+t+++++++++++,4,D,`,v,,,,,,, --4-F-j-------- ..4.EExAllocatePoolWithTagstrlennRtlInitUnicodeString strcpyfIoCreateFilememset`ZwCloseoObReferenceObjectByHandleZwWriteFile1DbgPrintZwRestoreKeymemcpy_wcsicmpwcscatWExFreePoolWithTagIoRegisterShutdownNotification'NtBuildNumberZwQuerySymbolicLinkObjectKeSetPriorityThreadvIoDeleteDeviceMmGetSystemRoutineAddressoZwDeleteValueKeyZwOpenSymbolicLinkObject"wcslen+KeDelayExecutionThreadmObQueryNameStringeZwCreateFilePsCreateSystemThreadBExAllocatePoolIoUnregisterShutdownNotification9KeGetCurrentThreadPsTerminateSystemThreadwZwEnumerateValueKey IofCompleteRequestcIoCreateDevice wcscpyRtlCreateRegistryKeyvZwEnumerateKeyZwQueryKeyZwOpenKeyntoskrnl.exe_except_handler30H.LL4VS_VERSION_INFOStringFileInfo080404b00CompanyNameBeijing Rising Information Technology Co., Ltd.FFileDescriptionprotectreg.sys8 FileVersion1, 0, 0, 160InternalNameBeijing Rising Information Technology Co., Ltd.\LegalCopyrightCopyright(C) 2011-2012 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.FOriginalFilenameprotectreg.sys\ProductNameRising security Software 2011.ProductVersion1.00@SpecialBuild738126963437500DVarFileInfo$Translation2222233 3333$3*30363<3B3H3N3T3Z3`3f3l3r3x3~33333333333333/4=4y444U5b5566.7>7K77777777;8R8Z8888 99,999<:q:::*;o;;;]>>>>?>?f??a0|00011Y1a1z1111112222&2-232=2J2Q2W2^2d22\33;4R4_4455+6;6H666677=7777778 858E8K8U8[8b8u888888888888889#9I9R9`9h9o9u9999999::(:0:B:L::::;;,;>;I;e;t;;;;;;;;<<<"<1<>,?0?4?8?>>0!0 +{dgQMlby300yBٸ>0  *H 0S1 0 UUS10U VeriSign, Inc.1+0)U"VeriSign Time Stamping Services CA0 120501000000Z 121231235959Z0b1 0 UUS10U Symantec Corporation1402U+Symantec Time Stamping Services Signer - G300  *H 0Yft=}zD{GjUNPG 8Oix vg f-̵sY{3nfZ^R7bђY5EYM$hBr:hk"-NƯ䠫<(#rSgwQ00 U003U,0*0(&$"http://crl.verisign.com/tss-ca.crl0U% 0 +04+(0&0$+0http://ocsp.verisign.com0U0U0010 UTSA1-30UI&`es8ͿWo0  *H 'xrm5ĈmK-盋?9 f\TNoeg |RkzȬB|,=fsr֏Q Ѝ1RO^}JuN+)+]~n'{#b)f,ν'x1"ijGC_^|}bM "Vͮv M٠h;004+(0&0$+0http://ocsp.verisign.com0U00AU:0806420http://crl.verisign.com/ThawteTimestampingCA.crl0U% 0 +0U0$U0010U TSA2048-1-530  *H JkXD1y+LͰXn)^ʓR G'/8ɓN"b?7!Op18UN$ҩ'NzaA*^ݻ+>W~ +;R8'?J00A&);`aw0  *H 01 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)101.0,U%VeriSign Class 3 Code Signing 2010 CA0 120511000000Z 150810235959Z01 0 UCN10UBeijing10UBeijing1B0@U 9Beijing Rising Information Technology Corporation Limited1>0<U 5Digital ID Class 3 - Microsoft Software Validation v21B0@U9Beijing Rising Information Technology Corporation Limited0"0  *H 0 ݝUbZF۠yi_ <3n*2L#IskmԔ]^[mW}6w_?]MT >'}hZa))>\ܾ!+viswX,ˋkߙG'<4 VQ@r1MmiK𯶤$WDSsa5p "]5kTwHىHpjxW㩒A&!;-{ @W!2e:{0w0 U00U0@U9070531/http://csc3-2010-crl.verisign.com/CSC3-2010.crl0DU =0;09 `HE0*0(+https://www.verisign.com/rpa0U% 0 +0q+e0c0$+0http://ocsp.verisign.com0;+0/http://csc3-2010-aia.verisign.com/CSC3-2010.cer0U#0ϙ{&KɎ&ҧ0 `HB0 +700  *H  :IɚDPLޕϖz`_6g֬ٚ]]f `]νm V9u->5B$wMf tW'1 ]R(6|WWt-?=^uL[^"xIԡ:c# HWAaăleN?00 0R%VK30  *H 01 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1:08U 1(c) 2006 VeriSign, Inc. - For authorized use only1E0CUߖqU&J@<& m%{Ͽ?/wƵVz;T0Sb4Z(LN~[uGr.4L~O =W0֦6րv.~4-00U00pU i0g0e `HE0V0(+https://www.verisign.com/cps0*+0https://www.verisign.com/rpa0U0m+ a0_][0Y0W0U image/gif0!00+kπjH,{.0%#http://logo.verisign.com/vslogo.gif04U-0+0)'%#http://crl.verisign.com/pca3-g5.crl04+(0&0$+0http://ocsp.verisign.com0U%0++0(U!0010UVeriSignMPKI-2-80Uϙ{&KɎ&ҧ0U#0e0 C93130  *H V"4aHVdٌĻ z"G8J-lq|pO S^tI$&GLc4E &sЩdmqE`YQ9XkԤyk Ar7" #?Da̱\=ҍB=e6Դ=@(#&K ː]L4<7o 4&ٮ Ś!3oX%|tXuc?1|Sv[퓺]!S‚Sc P=TR,=.ǓH10001 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)101.0,U%VeriSign Class 3 Code Signing 2010 CAA&);`aw0 +p0 +7 100 *H  1  +70 +7 10  +70# *H  16j= >uGFɞr"0  *H fMe |A=,]%}D ECi` 6W\ uCRsxy-kqZ!ɄL҂^4@0eE[p"(0Pw˄CXck"}ˋydoՙ^! 5]Hw< 7:p0 +]0 *H  1  *H 0 *H  1 120528063732Z0# *H  1k TJݿ0  *H s :|N߀jSK*b%>)vLg{Gd^Hr=]q{!= qsMM ?W6[͇F Kl G zz(d8f_h{c<