119 lines
20 KiB
Plaintext
119 lines
20 KiB
Plaintext
|
MZ� ÿÿ ¸ @ Ø º ´ Í!¸LÍ!This program cannot be run in DOS mode.
|
|||
|
|
$ k&Ê/G™/G™/G™/G™6G™&?‚™,G™&?„™,G™&?’™,G™&?˜™.G™&?…™.G™&?€™.G™Rich/G™ PE d† ÍØèb ð " dp � lì „p ( € ˆ ` ´ & x+ Ð0 0 Ð .text G h.rdata $ 0 @ H.data @ @ È.pdata ´ ` @ HINIT ˆ p â.rsrc ˆ € " @ B H‰\$H‰t$H‰|$ E3ÉI‹ØD‹ÒL‹ÙöÂt3Àé� A‹ùA;цŽ H�L$º A¶H�5ð IÿÊ0ˆHÿÁHƒêuä‹D$<@s¿ŠT$€ú@s¶ÀàŠÊAÿÁÀé
|
|||
|
|
ÈAˆŠL$€ù@s>Àâ€|$@s(ŠÁÀáƒÇ
|
|||
|
|
L$ÀèIƒÀ
|
|||
|
|
ÂAƒÁAˆ@þAˆHÿA;úr€ë Àé
|
|||
|
|
ÊAˆ AÿÁA‹ÁH‹\$H‹t$H‹|$ ÃÌÌÌÌÌÌÌÌL‹ÜI‰[I‰sWATAUAVAWHƒìpH‹ùH�
|
|||
|
|
0 3ÛL‹ãI‰[¨H‹óI‰[°A¾ A¿fubiD‰¼$° f‰\$`3ÀI‰CʉD$jf‰D$nA‰[ D À:Ãv¿€ ‰|$0é H;û„› H;Ë„’ E‹ÇI‹Ö3Éÿˆ L‹àH‰D$@H;Ãu¿€ ‰|$0ér E‹ÇI‹Ö3Éÿ_ H‹ðH‰D$HH;Ãu¿€ ‰|$0éI M‹Æ3ÒI‹Ìèg M‹Æ3ÒH‹ÎèZ fD‰t$bL‰d$hE3ÀH‹×H�L$`ÿV ‹ø‰D$0;ÃŒ ·D$`‹ÐH‰\$P‰\$4A;Æ�ì L‹ÆH‰t$PÿʉT$4;Ó| HcÂBŠ AˆIÿÀL‰D$PÿʉT$4·D$`ëÝ·ÐL‹ÆH‹Îè°ýÿÿLcèD;뎡 E;î�˜ Aˆ\5 ‰\$8L‹ÎH‰t$XD‹Ã‰\$8E;Å}7A‹À™ƒâ ƒà +ÂHcÈH� ¾A¾3ÐAˆIÿÁL‰L$XAÿÀD‰D$8ëÄM‹Æ3ÒH�
|
|||
|
|
C. è^ D‰l$ L‹ÎL�„$¸ ºÿ H�
|
|||
|
|
". ÿ\ ‹ø‰D$0ë ¿€ ‰|$0L;ãt A‹×I‹Ìÿú H;ót A‹×H‹Îÿé ‹ÇL�\$pI‹[0I‹s8I‹ãA_A^A]A\_ÃÌÌÌÌÌÌÌÌÌHƒì(ƒb0 Hƒb8 H‹Ê3Òÿ 3ÀHƒÄ(ÃÌÌÌÌÌÌÌÌÌL‹ÜI‰[I‰kVWATAUAVHƒì0H‹ª¸ 3À3ÿf‰|$ I‰CʉD$*f‰D$.�} à€H‹ò‹ß… L‹bL�5K- » L‹Ã3ÒI‹ÎI‰{èU
|
|||
|
|
9]B]D‹mI‹ÔD‹ÃI‹ÎèÜ H�L$ I‹Öÿ H�L$ I‹ÖèÕüÿÿ;Ç‹Ø|RD�OH�L$hI‹ÖE�A{è® H9|$ht6H�L$hèÁ H�L$hè‡ H‹L$h‹Øÿ ;ß|Aƒýu A‹ýAÇ$ HcÇ3ÒH‹ÎH‰F8‰^0ÿì H‹l$p‹ÃH‹\$`HƒÄ0A^A]A\_^ÃÌÌÌÌÌÌÌ@SHƒì0H‹YH�s
|
|||
|
|
H�L$ ÿh H�L$ ÿE H‹Ëÿ\ HƒÄ0[ÃÌÌÌÌÌÌ@SH�ìÀ H‹ÙD À„À…³ H�, H�L$pÿ Hƒ¤$˜ Hƒ¤$° Hƒ¤$¸ ÇD$h Hƒd$` ƒd$X ƒd$P Hƒd$H ƒd$@ ÇD$8 H�D$pº€ ÇD$0 L�Œ$€ ‰T$(Hƒd$ L�„$� H‹ËÇ„$� 0 Ç„$¨ @ H‰„$ ÿ� …ÀyHƒ# H�ÄÀ [ÃÌÌÌÌÌÌÌÌ@SHƒì H‹JH‹B0H‹Ú‰H‹JHH‹B8H‰AH‹KPE3À3ÒÿO H‹Ëÿ– ¸ ÀHƒÄ [ÃÌÌÌÌÌÌÌL‹ÜI‰[WH�ì€ L‹F Iƒc H‹ M‹ I�CE3ɺ I‰C˜ÿ= …ÀyH�
|
|||
|
|
" èÇ 2Àéj H‹Œ$˜ Hƒy t
|
|||
|
|
H‹AH‹XH…Ûu4ºaP rH‹AH‹X8H…Ût H‹[H…ÛuH‹YH…Ûuÿ† H‹ØH…Àt©ŠKL²ÿã H‹øH…ÀuH‹Œ$˜ ÿÝ H�
|
|||
|
|
Î éwÿÿÿE3ÀH�L$@A�Pÿg 3ÒH�L$XD�B(èG ÇD$x€ H�D$XH‰GH�D$@H�®þÿÿH‰GPH�D$0H‰GHH‹„$˜ H‰‡À eH‹%ˆ H‹�¸ H‰‡˜ ÆG@ ÆA¸H‰YàH‹„$˜ ÇAÀ( H‰AèÇAÈ H‹„$˜ H‰AÐH‹�¸ Hƒaø H‰QðÆA»àH‹×H‹Ëÿ% Hƒd$ H�L$@A±E3À3ÒÿÔ H‹Œ$˜ ÿæ °H‹œ$� H�Ä€ _ÃÌÌÌÌÌÌÌL‹ÜI‰[I‰s WHƒì`L‹u H‹ I�CM‹ 3ÛE3ÉI‰[Àº I‰C¸ÿk ;ÃŒg H‹Œ$€ H9Yt
|
|||
|
|
H‹AH‹xH;ûu>ºaP rH‹AH‹x8H;ût H‹H;ûu!H‹yH;ûuÿÄ H‹øH;Ãu
|
|||
|
|
¸
|
|||
|
|
Àé ŠOL²ÿ H‹ðH;Ãu
|
|||
|
|
»
|
|||
|
|
Àéá E3ÀH�L$@A�Pÿ« ÆD$xH�D$xH‰FH�D$@H‰FPH�D$0H‰FHH‹„$€ H‰†À eH‹%ˆ H‹Ž¸ H‰†˜ ˆ^@ÆA¸H‰yàH‹„$€ ÇAÀ H‰AèÇAÈ
|
|||
|
|
H‹„$€ H‰AÐH‹†¸ H�
|
|||
|
|
šüÿÿH‰HðH�L$@Æ@»àH‰HøH‹„$€ H‹H(H;ËtH‰YH‹ÖH‹Ïÿd H�L$@A±E3À3ÒH‰\$ ÿ H‹Œ$€ ÿ& ‹ÃL�\$`I‹[I‹s(I‹ã_ÃÌÌÌÌÌÌH‹ÄH‰XWHƒì`Hƒ` H‹ÙH� H�HØÿo H�h H�L$Pÿ] L�œ$€ L�D$@L‰\$0A¹" 3ÒH‹ËÆD$( ÇD$ ÿ …Àx\H�T$@H�L$Pÿ‰ ‹ø…ÀyH‹Œ$€ ÿ
|
|||
|
|
‹Çë4H�vúÿÿH‰ChH�ùÿÿH‰ƒ€ H�
|
|||
|
|
ùÿÿH‰CpH�*ùÿÿH‰ƒà 3ÀH‹\$pHƒÄ`_ÃÌÌÌÌÌÌÌÌff „ H;
|
|||
|
|
‰& uHÁÁf÷Áÿÿu HÁÉé ÌÌÌÌÌÌÌÌHƒì8L‹
|
|||
|
|
e& L‹V& Hƒd$ H‹Ñ¹÷ ÿú ÌÌÌÌÌÌÌÌff „ L‹ÙH+Ñ‚ž IƒørböÁt7öÁt Š
|
|||
|
|
IÿȈHƒÁöÁtf‹
|
|||
|
|
Iƒèf‰HƒÁöÁt
|
|||
|
|
‹
|
|||
|
|
Iƒè‰HƒÁM‹ÈIÁéuPM‹ÈIÁétH‹
|
|||
|
|
H‰HƒÁIÿÉuðIƒàM…ÀuI‹Ãà Š
|
|||
|
|
ˆHÿÁIÿÈuóI‹ÃÃfffffff „ fff�ff�I�ù sBH‹
|
|||
|
|
L‹T
|
|||
|
|
HƒÁ H‰AàL‰QèH‹D
|
|||
|
|
ðL‹T
|
|||
|
|
øIÿÉH‰AðL‰QøuÔIƒà érÿÿÿfff „ f�H�ú rµ¸
|
|||
|
|
D
|
|||
|
|
@H�Á€ ÿÈuìH�é ¸@ L‹
|
|||
|
|
L‹T
|
|||
|
|
LÃ LÃQL‹L
|
|||
|
|
L‹T
|
|||
|
|
LÃILÃQL‹L
|
|||
|
|
L‹T
|
|||
|
|
(HƒÁ@LÃIàLÃQèL‹L
|
|||
|
|
ðL‹T
|
|||
|
|
øÿÈLÃIðLÃQøuªI�è I�ø ƒqÿÿÿð€ $ éºþÿÿffff „ fff�fff�f�IÈIƒøraöÁt6öÁt HÿÉŠ
|
|||
|
|
IÿȈöÁtHƒéf‹
|
|||
|
|
Iƒèf‰öÁt
|
|||
|
|
Hƒé‹
|
|||
|
|
Iƒè‰M‹ÈIÁéuPM‹ÈIÁétHƒéH‹
|
|||
|
|
IÿÉH‰uðIƒàM…ÀuI‹Ãà HÿÉŠ
|
|||
|
|
IÿȈuóI‹ÃÃfffffff „ fff�ff�I�ù sBH‹D
|
|||
|
|
øL‹T
|
|||
|
|
ðHƒé H‰AL‰QH‹D
|
|||
|
|
L‹
|
|||
|
|
IÿÉH‰AL‰uÕIƒà ésÿÿÿffff „ f�H�ú ðÿÿwµ¸ H�é€
|
|||
|
|
D
|
|||
|
|
@ÿÈuìH�Á ¸@ L‹L
|
|||
|
|
øL‹T
|
|||
|
|
ðLÃIøLÃQðL‹L
|
|||
|
|
èL‹T
|
|||
|
|
àLÃIèLÃQàL‹L
|
|||
|
|
ØL‹T
|
|||
|
|
ÐHƒé@LÃILÃQL‹L
|
|||
|
|
L‹
|
|||
|
|
ÿÈLÃILÃuªI�è I�ø ƒqÿÿÿð€ $ éºþÿÿÌÌÌÌÌÌÿ%˜ ÌÌÌÌÌÌÿ%¤ ÌÌÌÌÌÌÌÌÌÌff „ H‹ÁIƒørS¶ÒI¹I¯ÑIƒø@r H÷ÙƒátL+ÁH‰HÈM‹ÈIƒà?IÁéu9M‹ÈIƒàIÁétfff��H‰HƒÁIÿÉuôM…Àt
|
|||
|
|
ˆHÿÁIÿÈuö f�fff�ff�I�ù s0H‰H‰QH‰QHƒÁ@H‰QØH‰QàIÿÉH‰QèH‰QðH‰QøuØë”f D HÃHÃQHÃQHƒÁ@HÃQØHÃQàIÿÉHÃQèHÃQðHÃQøuÐð€ $ éTÿÿÿÌÌÌÌÌÌ\ D o s D e v i c e s \ I M F F o r c e D e l e t e 1 2 3 ÌÌÌÌObReferenceObjectByHandle error! ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌFD_StripFileAttributes IoAllocateIrp error ÌÌÌÌÌ\ D e v i c e \ I M F F o r c e D e l e t e 1 2 3 ÌÌÌÌÌÌ@SUWHƒì0H‹êH‹M@3ÛH;Ët‹½° ‹×ÿò H‰]@닽° H‹MHH;Ët ‹×ÿÕ H‰]HHƒÄ0_][à €q ˜q °q Äq àq øq
|
|||
|
|
r r (r <r \r pr „r Žr ¤r Àr Ør är ôr s $s 6s Bs Rs ps ÍØèb u ä1 ä ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ>ÿÿÿ?456789:;<=ÿÿÿÿÿÿÿ
|
|||
|
|
|
|||
|
|
ÿÿÿÿÿÿ !"#$%&'()*+,-./0123ÿÿÿÿÿax40oznp8sowqnnc06mfy0ngz2y6rlbv RSDSp¯¦%f:HˆµxyB9yC f:\iobitsvn\c++\imf5drv\imf5drv\drvimfforcedelete\objfre_win7_amd64\amd64\IMFForceDelete.pdb B b 20 R0 t
|
|||
|
|
d 4 0 RpP0
|
|||
|
|
d 4 ÒðàÐÀ p B ú d 4 ² p 4 òp
|
|||
|
|
T 4 RàÐÀ
|
|||
|
|
p ` 4 ²p 2¢ß-™+ Í] ÒfÔÿÿ Ü „2 ä C ¬2 L k `2 t • ø2 œ Ò |2 Ø ¬ ”2 ´ õ t2 ü Å ì2 Ì † Ü2 Œ ^ 3 ˜ ¿ h2 Ð p2 0 3 ú G 2 dp ‚p `2 H‹ñÐÿÿHº2¢ß-™+ H…ÀtH;Âu/H�
|
|||
|
|
ÖÐÿÿH¸ €÷ÿÿH‹ H3ÁH¹ÿÿÿÿÿÿ H#ÁHDÂH‰®ÐÿÿH÷ÐH‰¬ÐÿÿÃÌÌÌÌÌÌÌHƒì(L‹ÂL‹Éè•ÿÿÿI‹ÐI‹ÉHƒÄ(é
|
|||
|
|
©ÿÿÌÌ°p bs 0 €q ˜q °q Äq àq øq
|
|||
|
|
r r (r <r \r pr „r Žr ¤r Àr Ør är ôr s $s 6s Bs Rs ps s ExAllocatePoolWithTag åIoDeleteSymbolicLink ‹ ExFreePoolWithTag IoGetRelatedDeviceObject ºRtlInitUnicodeString ãIoDeleteDevice eKeSetEvent ÑIoCreateFile ÷KeInitializeEvent KRtlUnicodeStringToAnsiString IRtlUTF8ToUnicodeN òIoFileObjectType ZwClose £IofCompleteRequest |ObReferenceObjectByHandle ‡KeWaitForSingleObject ÷IoFreeIrp IoAllocateIrp ØIoCreateSymbolicLink ˆObfDereferenceObject ÎIoCreateDevice ? DbgPrint ¢IofCallDriver ÈKeBugCheckEx ntoskrnl.exe ½__C_specific_handler € 0 € H `€ ( (4 V S _ V E R S I O N _ I N F O ½ïþ ? ˆ S t r i n g F i l e I n f o d 0 4 0 9 0 4 B 0 , C o m p a n y N a m e I O b i t d F i l e D e s c r i p t i o n I M F F o r c e D e l e t e f i l t e r d r i v e r R F i l e V e r s i o n 7 . 0 . 0 . 5 b u i l t b y : W i n D D K @ I n t e r n a l N a m e F o r c e D e l e t e . s y s ` L e g a l C o p y r i g h t © I O b i t . A l l r i g h t s r e s e r v e d . H O r i g i n a l F i l e n a m e F o r c e D e l e t e . s y s L P r o d u c t N a m e I O b i t M a l w a r e F i g h t e r 4 P r o d u c t V e r s i o n 7 . 0 . 0 . 5 D V a r F i l e I n f o $ T r a n s l a t i o n ° x+ 0‚+g *†H†÷
|
|||
|
|
‚+X0‚+T1 0 + 0L
|
|||
|
|
+‚7 >0<0
|
|||
|
|
+‚70 ¢€ 0!0 + XŒÝ4.½tì‹ï -¡UÒ×ý ‚Ô0‚;0‚#
|
|||
|
|
a M´ '0
|
|||
|
|
*†H†÷
|
|||
|
|
01 0 UUS10U
|
|||
|
|
Washington10URedmond1 0 U
|
|||
|
|
Microsoft Corporation1)0'U Microsoft Code Verification Root0
|
|||
|
|
110415194533Z
|
|||
|
|
210415195533Z0l1 0 UUS10U
|
|||
|
|
DigiCert Inc10U www.digicert.com1+0)U"DigiCert High Assurance EV Root CA0‚"0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ 0‚
|
|||
|
|
‚ ÆÌåsæûÔ»å--2¦ßå�?ÉÍ%I¶q*ÃÕ”4g¢
|
|||
|
|
°_i¦@±Ä·²�И¤©AY:ÓÜ”Ö<Ût8¤JÌM%‚÷J¥S8îóImq‘~c¶«¦_ä„øObQ¾øÅìÛ8’ãå‘ Ä(AUûËZ‰~qè5¿Mr =¾:8P[w1�³Ç$Eš§¬m Z·ºëQ
|
|||
|
|
˜AA"Nea‡�AP¦y\‰ÞJWÕ.æ] S,~˜Í¤hsÐ4\¡qÓZ|UÛ^dá7‡0Vå´)€ñy9ˆ¢|'f·ˆ·xòÊ
|
|||
|
|
¨8«
|
|||
|
|
d¿f]•„Á¡% ‡]P ÌA»n Q8¸KË £�Ë0�È0U
|
|||
|
|
00U 0 U †0U ÿ0ÿ0 U ±>Ãiø¿GÔ˜&ïcd+Ã0 U #0€bû
|
|||
|
|
![CnÚ TPkõÒ–qñž0UU N0L0J H F†Dhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ ŒÁYíoœk-ÁJ>u ELAP ½€êÙ°’‹*?SžV9jŠc¶x$yõ}¸¹G¡
|
|||
|
|
–Âö˽¢fŸá¬Òy ý<ܬ p¯?ìx~ÔëK`&Ùsa‘!í°hcà—«o íÙŸÒÚ'<³äVùÑÔ�q½B|¦‰ÜÍÕ½•¢«ñ“}è¬1)¨]fpA�üuÉÕ³9*Ð…P‹¬‘ÊÄ“Ëq¥�¤”oX ún Ä1µ…�~�ùÒ=Ê[…l
|
|||
|
|
†ì" ¥t4O(¼•J« ¶˜°] ¤wv~硫]„ö$ËÑm¦Ã¡œÂu€ÿ�2ýæÏC:‚÷Î�ár*›b·_í•9\/”mH·_3/»Ü-s4‰B
|
|||
|
|
‹yù£úïú¡ßà²Á•ë\ —;5>ˆMÛl¿$‰�Ƚ؟{9:$ ÕßÑóJ—ö¦oz °�©³¬9‘Óa·dñ>W8¯ÎzÒµ�õ®Ü9™Õ¶<—í¦ËÇ}k*L�”æLTý Í ìÎhœ‡Xéa`¾ëÉÕ}Ÿéx½¬!u�©nàŒj*kœãçe¼¼-<mÜÜgE62¯�¼¨ naL•Å\ÔŽŽŸ/Á2t½½eÍï·^WÚ†Ô(4¯ˆI²Ï¥Ý‚VohªâYTþÿêîïê’p"`�ã%#ÀŸÌI²5ªXÃ:ÃÙ”0‚Ø0‚À
|
|||
|
|
˜õß–Å’Å·kýáË‚0–0
|
|||
|
|
*†H†÷
|
|||
|
|
0e1 0 UUS10U
|
|||
|
|
DigiCert Inc10U www.digicert.com1$0"UDigiCert EV Code Signing CA0
|
|||
|
|
190827000000Z
|
|||
|
|
220830120000Z0�ø10 +‚7<CN10 +‚7<Sichuan1(0& +‚7<Wuhou District, Chengdu1 0U Private Organization10U91510107072412418F1 0 UCN10USichuan10UChengdu10U
|
|||
|
|
IObit CO., LTD10UIObit CO., LTD0‚"0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ 0‚
|
|||
|
|
‚ ¨ž`ÀùŸí[i‰ `žÙÚŠjÏ”…È<Õ]à¿’Õú„Iå7´¢è Y§Z ƒ¿ £hzWŠ–T†-afÖYÎj ulH¶;- ú)¼”ô{Ϻ^e¿q$”-i4‚”ý�üß:P»žªËô ¶gö»HÆ� ËסêÙ�ÁkþzÇxb�‡®s–E¥£ê»†?b=Iú ©Às7Íäd“a[k9t-l©¤ý|Z¥ñæKPÙíoã×g7Ûáy¤úÛy›t6”"3¢”èÞ£û<þÚ~¼çNÚGíÉšÝZ¢OßÛÄK" ¾ òÐèr×(z‰!Ë[Gã–h\s\GC0# £‚î0‚ê0 U #0€ipü€³©”k”†^÷'Œ0 U V4twºˆP-þJ½-owÎ/8zØ08U 10/ -+ !0 CN-SICHUAN-91510107072412418F0U ÿ€0U % 0
|
|||
|
|
+0sU l0j03 1 /†-http://crl3.digicert.com/EVCodeSigning-g1.crl03 1 /†-http://crl4.digicert.com/EVCodeSigning-g1.crl0KU D0B07 `†H†ýl0*0(+ https://www.digicert.com/CPS0g� 0y+m0k0$+0†http://ocsp.digicert.com0C+0†7http://cacerts.digicert.com/DigiCertEVCodeSigningCA.crt0 U ÿ0 0
|
|||
|
|
*†H†÷
|
|||
|
|
‚ ‰Õ2VÌô²å
|
|||
|
|
ŽØ�éí3öÞáC¦÷ðBìNÙ" |A•µCéÅ®T!ñ’
|
|||
|
|
b²„IÈ: 1u—eÁ'þ×|Dpr—o-^�Dà}¯»Å Ωè �Ãø¢*å=Œiÿ?û×à�é%“§8¸½mX;'åç—g"”ѸI&ƒ±³òÃàÅqùúÐ-•ø NO§"¬B¿!åNÁ‰B«3Ÿ Jµ|°8S›õoÁWž
|
|||
|
|
Ý|B oõá °“KJ€ «ítŠj…ŠõÉ`–Îl©±KF÷1 H_IñB«eÚËÚ®á;"iò²һ+«é6BìɈúSapJÌ sÔŠx =_0‚µ0‚�
|
|||
|
|
Ðã7JÉ[ÛúkCK*Hì0
|
|||
|
|
*†H†÷
|