MZ@ !L!This program cannot be run in DOS mode. $sk8889888989898988898Rich8PEd 㛉W" b$ Apa<P$"03800``.text h.rdata 0 @H.data@*@.pdata$P,@H.idata`0@HPAGE20p28 `INIT2j bGFIDS$@B.rsrc@B.reloc0@BLMK HXIcMK(H 0ICMKMK ICMKDʺ+"QHXLL$ SH`H$MDHHtDAHtL@L5IcH;HEHEHd$PH{/HL$HH$LD$@MHD$8HT$0+HD$(HL$ H|PH`[LL$ SHpH$MDHHtDAHtL@LIcHHL$HEHd$`H.HD$XLL$PHL$HH$LD$@MHD$8HT$0+HD$(HL$ HEOHp[Àw'3tA@AA,A@AA)IAA)AA,IAHHXHhHpHx AVE3HHEEEDQAfA;fD;HI HufufEtD ELIEDIIEAu}_utfD;wnf;wiHHufEuftD AHHExDEMMt%L+HtHfAIHIuMu HɸDEMDfEfDA H\$AHl$Ht$ H|$(A^LMK HHIcMK H,ICMKDʺ+NHHH\$Ht$LL$ WHL$HMtALMtIYIL$MtA MtMZHLMHcIIEMDMEHd$pHD$hH\$`HD$XHT$P+HL$HHL\$@HD$8H$LD$0LHD$(HD$ H+ML$I[IsI_LMK HIcISH+AACEAMCISIS8MCISIS0MCISIS(MCLISIS ICISAQ{LHĘ̹)̊ALɊJ:svAAJf;rwHRIID6E3LLMt\t HHuH;svLHHH\$0Hl$8Ht$@H _HHXHhHpHx ATAVAWH IHHQH;qAA;t A;@\HBH;O A;t A;H>HpH;1+;!EHM@IHvLvM4nL;nA+;ttG HH;L¨tHW(IIFJ@H;C FA;t ;ODHpH;wy+;rooHHHD;u_LPIuOLvL;wF6A+;r;IDƅt;wIb wHwU\C]KTWucV;_f`x=HQ]y*"ӼzN _o W Uhx]{Aqs'UQpo@* K )6hCwB` (q>em+0lG#:@#]#7`##:#e$49$G%:p%r%:%(:():pp6qLs6Lss06sBt<6Pttl6txx6x~y6yy7y zL7 z{\7{~t7~77 7M7P78<8Wl8Xa8d384Ԓ8Ԓ 8 Ɩ8ȖD8D977F:2:=L6@ɶ6̶:6<Y6\6(8T8(l68f"ffeeeee|eJfdd,dHd\drdddcddd ee6eJe^ecccccpcXc@c(cdcfffff#p%bneX`a^f`8f"ffeeeee|eJfdd,dHd\drdddcddd ee6eJe^ecccccpcXc@c(cdcfffffARtlEqualUnicodeString[RtlUpcaseUnicodeCharRCmUnRegisterCallbackObfDereferenceObjectExCreateCallbackRtlInitUnicodeString RtlCopyUnicodeString wcsstrExNotifyCallbackMmGetSystemRoutineAddressExAllocatePoolWithTag ZwQueryValueKeyExFreePoolWithTagxIoWMIRegistrationControlAInitSafeBootModeBInitializeSListHeadOCmRegisterCallbackT ZwClose ZwOpenKeyRtlCompareMemory6ExpInterlockedFlushSList8ExpInterlockedPushEntrySListICmCallbackGetKeyObjectIDr memcpy_sRtlAnsiStringToUnicodeStringt ZwDeleteValueKeyRtlInitAnsiString ZwSetValueKeyntoskrnl.exe BCryptDestroyKeyBCryptGetProperty(BCryptVerifySignatureBCryptOpenAlgorithmProviderBCryptFinishHashBCryptCloseAlgorithmProviderBCryptDestroyHashBCryptImportKeyPairBCryptHashDataBCryptCreateHashcng.sys ZwQuerySystemInformationExAllocatePoolWithQuotaTagsPsGetVersion& __C_specific_handler@UHH@eH<.HMHMHA.HHMHMH?.HHMHMtHHlHtE3HME33}rSH(.HMNHM$H]Ht,HA.HM'HMHH@]H\$Hl$Ht$ WATAUAVAWH@L$3M@A]H$HLe H@Hu?v Mu DA4$DAAAA;wyE3IA6E~A~Mt!A$AIfHE$IT$薳t.I(HEAMv AFЈ])],HmHuAu#AA1AEH$Hu A0HOIVAHt HHuHt@u_)_,H_=GIFHD$0HGu_H9L$ALt$ HT$pAHuD$pG)HHW,Lt$ L$DAUD$4G,D$2G)L\$@I[8Ik@IsHIA_A^A]A\_@SH0HH9tlHu9HHK8H!L&HL$ LHK3H[HuH0[ÃuHGHHxH0[H\$WH HH=H;t%t?uHYH=H\$0H _HK8Ht H1H[HuH(H Ht HH HtH Ht螢H Ht EBstH(M"H\$UVWATAUAVAWHH@E3ILmuMA8H H |EE(HIHbD8-IpE(fD;.tHUHx H](HUHy1H L=I;LI,@D$( H]A/C0Ls8HM$F'AYIk%fEPIHEQLk%LM;rHL{LKDAHI#QHUXH]Hk%EYHEZHk%HE[Hk%HE\Hk%HE]Hk%HE^Hk%HE_Hk%APHH EH#HIL 'Ls M96>IH3ȅAIֹ蚧L=;tJt6u1HH I;@,t:D/HD/iHHI;tJ@,tCeL %LH Ht$ HIH]HHH9CHCJLHA HHaH tgA$ AL$HI;t5@,t.eL %LH Ht$ HIH]H=H .H9t)IIFL0L5CPK`C@C0oK| 6HHmL=fI;t5@,t.L$(eL %LAH :Ht$ HI H$H@A_A^A]A\_^]H\$DE3fALfE;tnLIMteAA[f+t@fAH7H;#A, {EXu E3LEHAEBegHEHuIH HH;t,A,t% eL %LH HI܋DEX3HXDMXHULE3HMЉD$0D$(HD$ Dy,H eH^H;JA,?HME3DI-Dy,H HH;A,\!t$(HE@HMLEPAHD$ Hx Dy,H ķHH;A,EPtAEBegENjLHu,H vHoH;A,DEPE3HMH]Dy,H /H(H;A, lE3L0HHMDy,H HڶH;A,!t$0HHMLMD$(Lz3HD$ Dy,H HxH;dA,YEI֋HHu*H =H6H;}A,rVJLE`MIHt,H HH;HI5fHK0E3fD1HT$0D$0fAffC2y&H HH;t'I,At|$ HC HH@IHAHtHH\$`H|$xHl$hHt$pH@A_A^A\HHXHhHpHx AVH03LHf;)u AEBdeӹHHuWH @H9H;FA,;eL %WH LD$ HI~ L3H託HoAEBstLJRHG8HuVH HH;A,D$ eL %LH fHI]~dH_0Hf+HfG29HH؅y&H )H"H;t&I,t\$ HG I>H@HHHtHHl$HH\$@Ht$PH|$XH0A^HSH HHI8Ht EBstHKhHt EBstHKXHt EBstHKpHt EBhsHHt EBtpHKHHt EBstEBdeHH [H\$Hl$Ht$WAVAWH AHY83AXHBXHA\AEBstBhD}A`B\AdBlf;tBEA^HGHHu -HO@HfGBf)}~؅ H^(f;t8EAHG8HtHO0HfG2f)9~؅H^f;t<EAHG(HjHO HfG"f)}؅Fdt5AEBtpAHG`H%VdHLFPDu@F`AEBhsAGHGPHV`HLFHDGtyHOPHtEBhsHoPHO`HtEBtpHo`HO(Ht AHo(HO8Ht AHo8HOHHtAxHoHHl$HH\$@Ht$PH A_A^_H|$UHHpHeHeH=yHMyQHH H;2J,&eL %LH zD$ HIhzH\ HMRHeH=WE0LEE@H}HMEy3HH H;J,D$(H|$ WHMHUAE3D$(HL$ HMyMHH H;t:J,t2D$(HEHD$ eL %LH tHI_zHMHt EBdbHMHtH$Hp]H\$Hl$VWATAVAWH@d$xLө3˩AEBdbMHHuWH HH;A,eL %UH L3D$ HIx5WLpL=HL;tp 7IF`HH;R !.;LL$xDII؅D$xI;riM?+LHL;uHt!EI<$bG]G33HtEBdbH;L\$@I[0Ik@IA_A^A\_^ûH HH;tA,tH HH;tA,t\$ H cH\H;eA,ZeL %H 2D$0t$(l$ HI{'H HH; A,D$ eL %LQH ʦHIvH\$DD$UVWATAUAVAWH0A MDQHq\DA@hDHA0DDQlAD;sQHgH `H;t4@,t-eL %LėH =D$ HI'vD3HЎ3҉GGHCpHGHHCxHGPCXG,ChG8GXKD{ Dc@ADk0AClibDAEEAʼnD$pftHSDHO` 3C ftHS(HD3C@ftHSHAHDҊ3C0ftHS8AHD贊3ҋCltHS`DAH虊3ҋC\tL$pDHSPH}3C@G$C0GCG C GC\G0ClGHt EBstF赽L$I[0Is8IA_A^A\_]HHXHpWHPH`IHHL@HPHHW@0@@@I؅x%L$LHL$`HHL$`ѩHt$pH\$hHP_H\$Ht$H|$ UAVAWHHpH"HHe(H A LHMIHeHEWHELEE0E@HM(ELH e L5 x7IքHEHMHM(L LH|$ HU؁4t:uEH}(t>Hs HMI'HUHM(H H|$ LELM^؁4t:uLH|$ L= I33HM(HtjL\$pI[ Is0I{8IA_A^]H\$Ht$UWATAVAWHH@E33HfDeHMHEEMfEMDe@M E!yHE@E3HD$(ED$HUDd$ H=#t =U@AEBsgƧHHu_HE@LHD$(HUE@AHΉD$ Qx KHC AMALEMMIEHtEBsgH H\$pHt$xH@A_A^A\_]Ht$H|$ UAVAWHHE3H 3fD}HMHEEEfEL}(D} UH HMDHEE0WHELEL}غE@HM(EDyPH HH;A,AWDD$ eL %LvH ƅHIUAEBst:HHu/H HH;gA,\WD$ HM(HE HD$(HULωt$ A=t=#u~EBstHu AEBstHVHHu*H HH;A,WjHM(HE HD$(HULωt$ AȅyEHHH;txB,tqeL %LuL$ H {HIrTF} r@9u w;u5OA=w(u#HD HHO fD|G !HAƺEBstH|HM(HtL$AIs0I{8IA_A^]H\$Ht$WH03ۃH|#ǺKhAEBib@LHuYHH H;h@,]eL %LtH b D$ HILS+IMHHI+HHLHL;HGHtIIM@L;rIDӃIH5ALIHI@I#HD$@H]Hk%D$AHD$BHk%HD$CHk%HD$DHk%HD$EHk%HD$FHk%HD$GHk%Hȃ?IIMɋsAD;GL ނ ЂHt$PH\$HH0_@USVWATAUAVHHPE3E3Lm؅yPHځH5ӁH;J, eL %AU H L#sD$ HIQDAEBreEĉUH H5nLDEH3HjLHMHj؅=#AHUHEĹHHuH H;t;B,t4D$ eL %LcrH ܀HIPH̀HtEBmLHHH;cB,XeL %LrH } \$ HIkP*H_H;tB,t\$ RMHHHLH}LI3gEIEAMHMLED$LMXI$IHeXDyJH H;I,teL %L OriginalFilenameWdBoot.sysj%ProductNameMicrosoft Windows Operating System> ProductVersion4.10.14393.0DVarFileInfo$Translation F6F717A43AD9ABDDC8CEFDDE1C505462535E7D1307E630F9544A2D14FE8BF26E 1.3.6.1.4.1.311.76.8.1;1.3.6.1.4.1.311.76.11.10(@ ` `h"0"  *H !0!10  `He0\ +7N0L0 +70 010  `He r0/@gD 0+03w \+!0  *H  0~1 0 UUS10U Washington10URedmond10U Microsoft Corporation1(0&UMicrosoft Code Signing PCA 20100 151028203122Z 170128203122Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1>0<U5Microsoft Windows Early Launch Anti-malware Publisher0"0  *H 0 p'[=GV췎)'agl+L e-/Ш0`eh\1?^ې:sFu7^QnB*|ԵzN6x(\ KRd@~yH7(PFwotR瓲UAۍJt5 ⾹ m8޶ˎdvHok.dBu-#e!O@h@x^B4lUZ.Y5'\\T@{z0v0U%0+ +7=0U7:YS 0^Ws.0QUJ0HF0D1 0 U MOPR1301U*31614+04984872-d462-43eb-a2ad-2bf9d116d9a30U#0_{"XrN!t#20VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0 U00  *H  Mr)7)T|Q r]ڴ|O5I[_\%:R<_(}T%ù_yq!=4~]Un(Vy4_ǃ"DLcw7~™=ǐ"K6;ba} oŧOV)-D9V⸲}j~aKH9C]Pb8http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0  *H  tWO){xP" 4*,Ͽ4ہ5oywNaZ#bQEg?<09@!)奡i"tGCS0i% moar,iv=Qۦ9H7amS˧a¿⃫k}(QJQlȷJi~IprGc֢DciFz?!{#-A˿Lﱜ"KInv[Sy=s5SP8f3'9x6N_=GS a=*ג,7Z>@B1V$]Qjy{%qDj#u1000~1 0 UUS10U Washington10URedmond10U Microsoft Corporation1(0&UMicrosoft Code Signing PCA 20103w \+!0  `He0 *H  1  +70 +7 10  +70/ *H  1" zfnsXt`8l/OP'd(00Z +7 1L0J$"Microsoft Windows" http://www.microsoft.com/windows0  *H ~C'#S+,HehPZvovzzE2f+[S'1A |a0Y0D`TC M8Bݓs0W&E GͿ$`2X`FXG2tag_TϓLĦ]an(aF'$gr!KdPb]w=WuBM@Q>gfD~Knʱz* 1N5xhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0  *H  Q ?q=!o1Wm0fjxǨ%kTW+QDS`v@@A\\^5$VKtBȯ7}Z?yJR8/ye٩kzoK0D$"<Y)p2J'U/3b_W@ΙfjbJ &9Jqc{!mÜ<}jxm8ؔƥ B"8 %d~cY%z.9Wvqa˚Gͧ};q ]t"aڰPo1:eGxHr~akow˧ 9؂r*T9[ Uzs;-3.)/T'!ȬN(ۖBAM*f0ӻt2Kc{/!YD6` 0  *H  0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100 160427170619Z 170727170619Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:BBEC-30CA-2DBE1%0#UMicrosoft Time-Stamp Service0"0  *H 0 ^ |&QAũWr4BvR`ytRc׊E /z2BВ# ?iwS%M)! =bS PP/0(m:5"kNm6Ɗ+i&ssa nҾJ'ٸ7ВW7G_C3Ą\Z6SG$(-F5"16l z̵OZ{}׍(C 00U ?'Fsc^~Zez0U#0c:\1C{|F3hZmU0VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U00U% 0 +0  *H  xR? ɡϿ˻d=!8L(f2wy!nVV3ϧ {1|f=^a BF-ʓ}^& qȦK&4(qeF!L6:f7{H(dR{GΎlśh}ޫ/㗪XÐw2~|'RZ+zۯ,mԁA~xϻ} L L&c!}p<jf6kth(S~ªy0a0㡁01 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:BBEC-30CA-2DBE1%0#UMicrosoft Time-Stamp Service% 0 +VfpB001 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher NTS ESN:57F6-C1E0-554C1+0)U"Microsoft Time Source Master Clock0  *H 30"20160716002638Z20160717002638Z0w0= +Y 1/0-0 30 0J0 5O>06 +Y 1(0&0  +Y  0` 0 0  *H ;3朦@bᅁ63n̓so 31F`N1Q-۞06;r*i+xh->jl$¬9M|2&rM''FV:4S38nHdUYԻ֖˴nO_NR!2?nS~<KS%dh>/Uv݈hm6y&=|)Kkw̚Mu"UM*mY6,1000|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103>6` 0  `He20 *H  1  *H  0/ *H  1" ^5(ŭ: Mt[ϜqW0 *H   1000VfpB00~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103>6` 00X> ʏљ:0  *H  !5= dݮ-f+x$cvW!!rzg]id*Fa>7lBYD5}P:D~Mao =" Wjeh#=9-䱜y{^r?5*59d(W KraiٲF^pы|u%':vz5Ϥ'XU`[tp% u.,=V@ء|qrrl