84 lines
22 KiB
Plaintext
84 lines
22 KiB
Plaintext
|
MZ� ˙˙ ¸ @ Đ ş ´ Í!¸LÍ!This program cannot be run in DOS mode.
|
|||
|
|
$ á¶ÇĄ×v”Ą×v”Ą×v”îŻ~•¤×v”îŻv•¤×v”îŻr•§×v””¤×v”îŻt•¤×v”RichĄ×v” PE d† ±OĂj đ " 0 €
|
|||
|
|
|
|||
|
|
|
|||
|
|
@ ~; `A p ä
|
|||
|
|
0 đ 0 & p .rdata d @ @.data € @ Ŕ.rsrc đ 0 @ @ ±OĂj B l l ±OĂj
|
|||
|
|
Ś ° ° ±OĂj $ < < ±OĂj ` ` ±OĂj ‚ 1 1 � \ » č @ q ś Đ # P „ ł á = k — ľ é B m ’ ą ë - i Ž ˛ ŕ R u ś Ó N € ¸ č 4 ] ‡ © Ă ŕ 0 ¬
|
|||
|
|
|
|||
|
|
! " # $ % & ' ( ) * + , - . / 0 api-ms-win-core-processthreads-l1-1-0.dll CreateProcessA kernel32.CreateProcessA CreateProcessAsUserW advapi32.CreateProcessAsUserW CreateProcessW kernel32.CreateProcessW CreateRemoteThread kernel32.CreateRemoteThread CreateRemoteThreadEx kernel32.CreateRemoteThreadEx CreateThread kernel32.CreateThread DeleteProcThreadAttributeList kernel32.DeleteProcThreadAttributeList ExitProcess kernel32.ExitProcess ExitThread kernel32.ExitThread FlushProcessWriteBuffers kernel32.FlushProcessWriteBuffers GetCurrentProcess kernel32.GetCurrentProcess GetCurrentProcessId kernel32.GetCurrentProcessId GetCurrentThread kernel32.GetCurrentThread GetCurrentThreadId kernel32.GetCurrentThreadId GetExitCodeProcess kernel32.GetExitCodeProcess GetExitCodeThread kernel32.GetExitCodeThread GetPriorityClass kernel32.GetPriorityClass GetProcessId kernel32.GetProcessId GetProcessIdOfThread kernel32.GetProcessIdOfThread GetProcessTimes kernel32.GetProcessTimes GetProcessVersion kernel32.GetProcessVersion GetStartupInfoW kernel32.GetStartupInfoW GetThreadId kernel32.GetThreadId GetThreadPriority kernel32.GetThreadPriority GetThreadPriorityBoost kernel32.GetThreadPriorityBoost InitializeProcThreadAttributeList kernel32.InitializeProcThreadAttributeList OpenProcessToken advapi32.OpenProcessToken OpenThread kernel32.OpenThread OpenThreadToken advapi32.OpenThreadToken ProcessIdToSessionId kernel32.ProcessIdToSessionId QueryProcessAffinityUpdateMode kernel32.QueryProcessAffinityUpdateMode QueueUserAPC kernel32.QueueUserAPC ResumeThread kernel32.ResumeThread SetPriorityClass kernel32.SetPriorityClass SetProcessAffinityUpdateMode kernel32.SetProcessAffinityUpdateMode SetProcessShutdownParameters kernel32.SetProcessShutdownParameters SetThreadPriority kernel32.SetThreadPriority SetThreadPriorityBoost kernel32.SetThreadPriorityBoost SetThreadStackGuarantee kernel32.SetThreadStackGuarantee SetThreadToken advapi32.SetThreadToken SuspendThread kernel32.SuspendThread SwitchToThread kernel32.SwitchToThread TerminateProcess kernel32.TerminateProcess TerminateThread kernel32.TerminateThread TlsAlloc kernel32.TlsAlloc TlsFree kernel32.TlsFree TlsGetValue kernel32.TlsGetValue TlsSetValue kernel32.TlsSetValue UpdateProcThreadAttribute kernel32.UpdateProcThreadAttribute €€ RSDSAwâ–äĽ˙đçE©ĽË( api-ms-win-core-processthreads-l1-1-0.pdb GCTL p .rdata p ä
|
|||
|
|
.edata T .rdata$voltmd l ř .rdata$zzzdbg € .bss 0 ` .rsrc$01 `0 � .rsrc$02 Awâ–äĽ˙đçE©ĽË( â–ůeD r–\ɱOĂj € 0 € H `0 Ś „4 V S _ V E R S I O N _ I N F O ˝ďţ
|
|||
|
|
ó]X
|
|||
|
|
ó]X? â S t r i n g F i l e I n f o ľ 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n H F i l e D e s c r i p t i o n A p i S e t S t u b D L L l & F i l e V e r s i o n 1 0 . 0 . 2 2 6 2 1 . 7 5 5 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) 6 I n t e r n a l N a m e a p i s e t s t u b € . L e g a l C o p y r i g h t © M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . > O r i g i n a l F i l e n a m e a p i s e t s t u b j % P r o d u c t N a m e M i c r o s o f t ® W i n d o w s ® O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 1 0 . 0 . 2 2 6 2 1 . 7 5 5 D V a r F i l e I n f o $ T r a n s l a t i o n ° & 0‚%ů *†H†÷
|
|||
|
|
‚%ę0‚%ć10
|
|||
|
|
`†He 0\
|
|||
|
|
+‚7 N0L0
|
|||
|
|
+‚70 ˘€ 010
|
|||
|
|
`†He Î
|
|||
|
|
3|e6ůsż]©‘śQ©ÎˇBĆ\śđÜ‚�/Ń ‚ v0‚ţ0‚ć 3 ‘dbó·>â Í ‘0
|
|||
|
|
*†H†÷
|
|||
|
|
0~1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100
|
|||
|
|
220512204706Z
|
|||
|
|
230511204706Z0t1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1 0 UMicrosoft Corporation0‚"0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ 0‚
|
|||
|
|
‚ ž?ď((ńn SY]=¤ęĺĆt \ěO<¬‰‹˙ü+~é¤mLşR[SĘ�ŇÚy±r’™«™ÝĽ/i‡ŇDôűgQNb ™÷Íoi!VĄŃÚ#\s?‚Bęu�ć�ďâ~“d q6x*ŕrŮ”.}Z/˝ÍgGŞh•á`TŻŹ±É‡»®źe)µ„…%4 &°ńž/Ś$í†s �HAk˙ô
|
|||
|
|
Ýż�›iK…RÉŤĎŹ¶0'Ű’íČ ~VlŹT~Ň9*żŞęz’‹¶K|
|
|||
|
|
+űĚ˙`€ >Vä+C0ŕ!i±/+I}jÔ{ą„s�›j|t?@čý?3hÇßz`hs‹ Ł‚}0‚y0 U %0
|
|||
|
|
+‚7=+0 U ČZÔ ě¸Ţ 2˘€“ĚËöŤ:Z/0TU M0K¤I0G1-0+U $Microsoft Ireland Operations Limited10U
|
|||
|
|
230865+4705630 U #0€ćü_{»" XärNµô!t#2ćď¬0VU O0M0K I G†Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z+N0L0J+0†>http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0 U ˙0 0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ ËĂ~ä´¦-ń’W“˘U„ら*dd:ľRWÔşW�ś"šâUK cŔşâ@;ĂL�‹�Č
|
|||
|
|
óÁ)ĺ±kÍ#nîÄłÝÎ;Äô‡uĂŞ=WŔa} 9EŮíď}î/ŹSQwhŃŁa˘çFŃn?ŵuEA-)ţQČŐ‚%�É9×h“KkřďĐ'�T¶"�ü–-Ö"Üž?rŞAŠôĆŇR€fÜĂ�ÉŔ/f?©� Â�ĄßÇ0Ť¸A_Ář D° ŇsŹ˙ř ĐËmĘR1%E^ hękł{äúDy0±¬=ó0çC¬5�H)k§9U†vQÂ]ü�źÝR<0‚p0‚X
|
|||
|
|
a RL 0
|
|||
|
|
*†H†÷
|
|||
|
|
0��1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
|
|||
|
|
100706204017Z
|
|||
|
|
250706205017Z0~1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20100‚"0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ 0‚
|
|||
|
|
‚ édPygµÄăý Lž”¬÷VhęDŘĎĹXO©Ąv|mEşÓ9’´¤ ůůe‚äŇŹýDśče“Î,U„ż}ă.+¨A+·˘KnILkŢŃ҉ q”͵K´ŻŘĚ�Ök”:“Î&?ěćţ4�WŐ ]Iö˛*.Ő…»Y?ř�´+�tĘ+ł;FăđFIÁfTÉ ˝ ÄUbWrřgą% 4Ţ]¦Ą•^«(€ÍŐ˛žĺµcÓ˛ČÁČŠ&
|
|||
|
|
Yě˙í€5L¦ľR[ő¦Úŕ‹ HwÖ…GŐąĆčŞî‹j-\`Ć´*[ś# _Eă o7Ë3€j‰MŁjfcx“Ő0Ď• Ł‚ă0‚ß0 +‚7 0 U ćü_{»" XärNµô!t#2ćď¬0 +‚7
|
|||
|
|
S u b C A0 U †0U ˙0˙0 U #0€ŐöVËŹč˘\bhŃ=”�[×ΚÄ0VU O0M0K I G†Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0†>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0�ťU �•0�’0�Ź +‚7.0��0=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+04 2 L e g a l _ P o l i c y _ S t a t e m e n t . 0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ tďWO){Ä…x¸PÓ"ü ť¬‚—ř4˙*,—•ĺäżĎż“Čă4©Ű�¸Ü ľŇ5oŻĺy•wĺÔńëŘÍN a˘ÂZ#đŚ¨bQEgă?< “ř0…Č9@¦×ł!)奡iŚ"“Ět�çˇGCňS¬Ŕ0iţŇ% moaÓßŐŮr ,i†v=Qۦ9HÉ7amÝS˧ÖaÂżâ�«ŕk›•Ö}(Q°‰JQ¤šlČ· Ji©×ÜÁ~ŃIp޶»rGcú¦Ö˘¦†ě¨D›c¶˛i‰ÇF†z?čĹ !Ő{ů#-ĹAËż LČﱜü"KIŠnă¦v[ŃSy‘…ťŐŇŰ=s5ó<®T˛RGjŔŞ•ŇŽÚ™g^2Śű7…ŃÜu…ś‡ĆZW…ÂżÝ
|
|||
|
|
ŹŚ›-ë´îĎ'Óµ^iú¤§$gsĎMO¶ŢV—z÷éRMôwO…ĆŘ ńŽíB Ń
|
|||
|
|
vă#Vx"&6ľĘ±ŚnŞ ä…ÚG3bŹ¤É‘3_q @Ż�eÉ"čB!%Š -`Ů7‰A‰*×a<”h`RďÖG™ €@î�w>śŕSP 8•› f3'9x‡6ÎNĂ_˛ő=GS¶ŕĺŰ a=*×’,Î7Z>@B1¤ ÂVśż$]QťjyŇÓÚÁ”Ž{%qD«jćÔĆß#š–uĹ1‚ö0‚ň0�•0~1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1(0&U Microsoft Code Signing PCA 20103 ‘dbó·>â Í ‘0
|
|||
|
|
`†He ‚0 *†H†÷
|
|||
|
|
1
|
|||
|
|
+‚70
|
|||
|
|
+‚7 10
|
|||
|
|
+‚70/ *†H†÷
|
|||
|
|
1" f_ ]±vŢš�OÂ|-łćÖI»$j&8 &sa=e*$0<
|
|||
|
|
+‚7
|
|||
|
|
1. ,sPY7xPB7hT5g5HHrYt8rDLSM9VuZRuWZaef2e22Rs54=0Z
|
|||
|
|
+‚7 1L0J $€" M i c r o s o f t W i n d o w sˇ"€ http://www.microsoft.com/windows0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ \š#—oEŞčCÝńí<]©
|
|||
|
|
\hO§¤ŻÉ*•ÚîaSH JRřĘŕc…Ö/ŠÄř–ś}čäBzMkö
|
|||
|
|
mq35AQľŰů˛&‰ČÜw� l lČŚ÷ť*c ďCH Ă: ÷źŁéňp вŔ˝�›¸ăˢ2’7©†<
|
|||
|
|
ÖZá„”[B.Ć& ´Żöý-ľ> =:
|
|||
|
|
��Iţ 6KĄµ^f…űÁ"ŞĆ™IĘß5 BŚúČţČKIKúZĚËNTá�y’§ł
|
|||
|
|
öŞé�ęaQŠÜ„•GăÉ“�ÄăŹÂţüHRßv1gĆZ-ď)ľĹÁ‘a;žwƢpP …ß$c1ˇ‚)0‚%
|
|||
|
|
+‚71‚0‚ *†H†÷
|
|||
|
|
‚0‚ţ10
|
|||
|
|
`†He 0‚W *†H†÷
|
|||
|
|
‚F‚B0‚>
|
|||
|
|
+„Y
|
|||
|
|
010
|
|||
|
|
`†He \,Ó?
|
|||
|
|
W—B�XÁ6qKz†]C”P27Ą�çQşvcOß1@K20221019212811.5Z0€ô �ؤ�Ő0�Ň1 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1-0+U $Microsoft Ireland Operations Limited1&0$U Thales TSS ESN:0842-4BE6-C29A1%0#U Microsoft Time-Stamp Service ‚z0‚'0‚ 3 ˛n@n©”’ ˛0
|
|||
|
|
*†H†÷
|
|||
|
|
0|1 0 UUS10U
|