MZ@ !L!This program cannot be run in DOS mode. $hВ;В;В; ;֒;4:Ԓ;4:Ғ;4:;4:ْ;В;C;4:Β;4:ђ;4a;ђ;4:ђ;RichВ;PELPO! v$r W@A`|(4 %Tx.textuv `.dataz@.idata |@@.rsrc(@@.reloc4 @BXPx$& x>u L&p))pp))`*+ ---P.01P111P3345667 :?CDpFG`IJL M0MPMpNNOPpQRTXX0YYZ \0]p]]^^_`@moppruvPx@P$FF\DisableFilesystemRedirector pattern buffer too small, disabled filename matching.NS_DisableFilesystemRedirector::NotifyFnDisableFilesystemRedirector initialized.DisableFilesystemRedirector notification: All DLLs have been loaded.DisableFilesystemRedirector uninitialized.fdwReason(%d) pszCmdLine(%s)NS_DisableFilesystemRedirector::InitializeHooksMultiNotifyFn returned FALSE, fail load shimKERNEL32.DLLFindFirstFileApdwHookCount(%d)SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INSTALLERNS_DisablMsiKeyRedirection::InitializeHooksMultiADVAPI32.DLLRegOpenKeyExWntdll.dllNtAllocateVirtualMemoryNtMapViewOfSectionINSTALLERSOFTWARE\CLASSES\INSTALLERINSTALLERSOFTWARE\CLASSES\INSTALLERNS_DMsiCIKeyRedirection::InitializeHooksMultiRegOpenKeyExARegCreateKeyExWRegCreateKeyExANS_DuplicateHandleAccess::InitializeHooksMultiDuplicateHandleNS_Ignore2ndFindClose::InitializeHooksMultiKernel32.DLLFindClose,NS_GetFileVersionInfoRedirect::InitializeHooksMultiVERSION.DLLGetFileVersionInfoAGetFileVersionInfoSizeA[LimitLargeAddressAwareProcessTo3gb] Reserving address space above 3gb NS_LimitLargeAddressAwareProcessTo3gb::NotifyFnNS_LimitLargeAddressAwareProcessTo3gb::InitializeHooksMultiDisableFilesystemRedirectorDisablMsiKeyRedirectionDopeWarsSanitizeSegmentRegistersDuplicateHandleAccessGetFileVersionInfoRedirectLimitLargeAddressAwareProcessTo3gbModifyShellLinkPathMsnInstallerRedirectHhShortcutToSysWow64SmartPhoneSDK2003Wow64CoCreateInstanceFlagwow64IsDelShareWow64ProcessLieWow64MM2Wow64SysWow64DirLieWow64UpdateDriverLieWow64MdmIgnore2ndFindCloseDMsiCIKeyRedirectionwow64 shim is initialized.NotifyFnAcWow64wow64 shim is terminated.DisableFilesystemRedirectorDisablMsiKeyRedirectionDopeWarsSanitizeSegmentRegistersDuplicateHandleAccessGetFileVersionInfoRedirectLimitLargeAddressAwareProcessTo3gbModifyShellLinkPathMsnInstallerRedirectHhShortcutToSysWow64SmartPhoneSDK2003Wow64CoCreateInstanceFlagwow64IsDelShareWow64ProcessLieWow64MM2Wow64SysWow64DirLieWow64UpdateDriverLieWow64MdmIgnore2ndFindCloseDMsiCIKeyRedirectionSoftware\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXECOMHook_IShellLinkA_SetPath.bat.cmd/C """" %windir%\syswow64\cmd.exe.htm.html".exe%windir%\system32\%windir%\syswow64\COMHook_IShellLinkA_SetArgumentsNS_ModifyShellLinkPath::InitializeHooksMultiSHELL32.DLLInstallDirProgram Files (x86)\MSNProgram Files\MSN%SystemDrive%Program Files\MSN%SystemDrive%Program FilesProgram Files (x86) (x86)MsnInstaller initialized.NS_MsnInstaller::NotifyFnMsnInstaller notification: All DLLs have been loaded.MsnInstaller uninitialized.NS_MsnInstaller::InitializeHooksMultiRegSetValueExWSETUPAPI.DLLSetupGetLineTextAhhNS_RedirectHhShortcutToSysWow64::InitializeHooksMultiNS_SmartPhoneSDK2003::InitializeHooksMultiSetupDiCallClassInstallerNEWDEV.DLLUpdateDriverForPlugAndPlayDevicesWNS_Wow64CoCreateInstanceFlag::InitializeHooksMultiOLE32.DLLCoCreateInstanceCoCreateInstanceEx\_isdel.exe_ISDEL.exe\syswow64\installShield\_ISDEL.exeNS_wow64IsDelShare::InitializeHooksMultiOpenFileNS_Wow64Mdm::InitializeHooksMultiPSAPI.DLLGetModuleFileNameExA;0x,DoInstallmsoobci.dllmm20ex.inf 0x,ProxyRemoteInstall[GetVersionExA] called. return WinXP.NS_Wow64MM2::APIHook_GetVersionExA[GetVersionExW] called. return WinXP.NS_Wow64MM2::APIHook_GetVersionExW[GetVersion] called. return WinXP.NS_Wow64MM2::APIHook_GetVersionNS_Wow64MM2::InitializeHooksMultiGetVersionExAGetVersionExWGetVersionwceusbsh.infwceusbsh.sys\NS_Wow64UpdateDriverLie::InitializeHooksMultinewdev.DLLUpdateDriverForPlugAndPlayDevicesANS_Wow64ProcessLie::InitializeHooksMultiIsWow64ProcessGetNativeSystemInfoNS_Wow64SysWow64DirLie::InitializeHooksMultiGetSystemWow64DirectoryA[DopeWarsSanitizeSegmentRegisters] Adding vectored exception handler NS_DopeWarsSanitizeSegmentRegisters::NotifyFnNS_DopeWarsSanitizeSegmentRegisters::InitializeHooksMultiShimLib")("%S%s%s%s ShimLib::GetHookAPIsPO$&PO \&PO$@)@v||}}~U~~~d&$&8&qqr-rRrsuYwiw0p)fLux3{|RSDST@@AcWow64.pdbGCTL.rdata$brc.CRT$XCA.CRT$XCU.CRT$XCZ.CRT$XIA.CRT$XIAA.CRT$XIZ8.gfids .giats0.rdata$&(.rdata$sxdataL&t.rdata$voltmd&.rdata$zzzdbgp)@.text$di)R.text$mn|.text$x@ .text$yd`@.xdata$x`.edataP.data$brcP,.data$r$brc|.data.bssx.idata$5x.00cfg|.idata$2.idata$3x.idata$4.idata$6`.rsrc$01`.rsrc$02 T@@!E/B APOLh@@NY̡LhPHNY̋Uud0jpT]̋SVWRu8ti<*tNPQYY;u,CGt <*tPQYY;t؅u3_^[Ë׍Ku Gu3@jh`,P3}}}܉}U(JtEP} \q u ux֋uEƋMd Y_^[u}u ũtctcuuhjkWVWQ5QyhXjcVWj(hjfVWj_^hPjohhj3@̋US] -VWtPuh|jhhj}3t7}u>u -5t,3QBC5\tt'}du95Xt3XM}umu!hhhhj뼡\@ @`*p ppt7Vhhhhj\_^[] ̋UQVu (+ttBuuJ^Ɂz ̋UUM:u uVu,du(u$pu  -- t,3QB3-ttt1)}du95pt3\pK}uEt@(@P3p ppt3Vhj>hhjt_^[] ̋UTMu)T|V PQp x^]tu; Pu@T3@̋USVW} -tPuh|jQh8h,j]3t3}u>u -f,t,3QB+|tt1)}du95xt3\xK}uE|d@t@4p ppt3VhjUh8h,j|_^[] j|E}MeW-EM@A+BuRQYYu H5M. [6Ë}Mu Wp$xDj|D}MeWEM@A+BuRQYYu H5M. 6Ë}uMuu Wp x Dj(}sDeM5hMEZ.EEPEPM6ME-E̾@PV64E̾HPV64MX-MP-MH-3@73nC̋VN "-N^-̋US] -VWtPuh|hhhj}3t73@9Eu&E#p,*PSx֋xPSx׋E#rVSx׋Yh`EPp%hhEPpw%E.#hjP: p(hPSx֋u{trhl%EPp$E"PEPp$Eu"p,a)PSx֋xhpSx׋6"+"Dž@BË^8h ~8]@E hhCSgehjP;9 p(hPSx֋)h-EPEPpf#E!hl[EPp.#E "E EPp"E 'PSx׍q Dž@DË6̋USVu -WtPuh|hh(hTj}3ۅt3@9EuAu D-DQ3 t,(}du9_^[] 9EuShXĠh?j0Vh@5ȠtHhCj Vh@5Ƞt+tShhh(hTjy3w̋VWqJ+y3PJWP @_^̋UVM7^J+y3PuJP @]j$U~[5E3] }EЉEԡL]}E؉u܃}uEShpYYύQff;u+MM;WMQhhM"}؋ύQff;u+ʉuEjPh MuME3f;t!PY;tEPYfMUЉu QWup uSRx֍M؋Q3GÃeM]Uԋ}븋M̋UQQ S] Vp$W}SuWuuu ux։E}W;EhWYYeEjPh EO;w"PYN;tEPYFWP@PWPh,P3 W @ 0f DfL0tE_^[̃t"tcu7hhhHh hhhdhhj3@̋US] -VWtPuh|hhhhj}3t73@9Euu 0-0t,3QB`ܕtt/'}du95ԕt3ԕx}u9uu0t^P` 0N}uHܕd@!@Pp ppt3Vhhh!hjܕ_^[] h@hY)]E UjY3fp uRWSx։PS(9WhPjSduffj_3fff=3;vPPShPAP( Aff3ҋfHSSPSlxV@;EsI]uV 0艅3@ËeEt;tPpt3fMd Y_^[̋USVW} -tPuh|hh!h j]3t3}u>u -s t,3QB tt1)}du95t3_N}uH!@"@Rp ppt3Vhhh!h j_^[] ̋Ut3ʼnEESVW} 3ۉ,hP"VYYah8"VYYKVYY4WVYY"V0=EPVP%hP"P3j fFZ;tf;tfuf9V4PV8PP<tcf9uUf uKfuAfu7SSjSjhVtSVt =uVWM_^3[F̋UԐy5h"h ""Ȅuhh"hp" 3Ԑ]̋UĕVW}p Wx֋tX|tOh"hh"hjG?GG ( GGu3_^]̋UĕVW}p$Wx֋tXtOh"hh #hj3GG?G ( GfGu_^]h0#hhT#hj`t( áĕVp<x^̋USVW} -tPuh|h-ht#hj]3t33@9Euu  -C t,3QBtt1)}du95t3_N}uH$@$$@Zp ppt3Vhhh#hj_^[] ̋UЕVW} p Wuxօt'_^]%̋USVW} -tPuh|hhH$hj]3t33@9Euu $-$t,3QBtt1)}du95t3\K}uEd@$@^p ppt3VhjXh$hj_^[] ff3̋USVu -WtPuh|jh`%hj0_^[] ̋UVut&w!rwtPd0jpP3^]̋UQVEPjYtujV& ^̋UQSمt5t0J3WEBPdtVuVSW D>^_3[̅u3ËVrBu+^̋UQSVWM3pt;r2t'PVu 3|?PuPk_^[hdEP̋UVuWtWSZ;5B;.J+;%6Pu JP p3ҋAfAu VRr:[_^]̋UESV3~;F~3W~;}P}PV3N x3_^[]̋UVUuWzffu+_Q3ɋ^f P]̋U LaS]Vu MWx/FPjlPpVSW 37tiEPxZu3~=PPVWPPxE~*MPuE0VWjjx QM;tWjlPh_^[hdEP ̋USVًM WDuz}`ey} M9y},qW,FEPu3 UE+4EPPEAPE Pu Q y_^[̋U SًM]EM VWk3E3E}NNE;[]uV.YYtu4XGVYYu}΍Qff;Eu+4N;ur]);]+]]GE؉]C9G|~)MwSFPW}7 ?G4Gu;]uWuЉUYYt]M++ȋE+ȍB4 MVPE+EEWЉE uuύQff;Eu+&_uWt&^]̋US3Vut_u Wt^[]jK }LO3҉QULG WuEu O ̋UQQS] VqMW;;x~QM3Q }"xPSYYtG;x|] M;x| ;yQM9@@뭋q xPYY t+>yu@+PQ@@u+PQp;3@_^[̋V3tt VV3NF45<2VV333<t P5< 8t Q583@^̋UEjdY;t8t3t+tu,jhettHjjjf3Y jeYU ;]̋UU 3VuAWuVx>t %%-RVQu h%hh%h%j$_^] ̋UUM ] h<LHYu@à 3̋U} SVWdH3ۣ@d]PʉU33G;th`U3u}=Dt jNY\LEth5Hu;r:MtxUL H;uE9Mt͋‰MEP@3HYLG@D9]33G9} d3ۉ]@PU;th`U3u}9Dj[t jc5hh=DgYYt3Xhh8YD}Yu3=Pt&hPjYtu5PSux_^[ ̋U} u+],̋Ucsm9Eu u PYY]3]j,hE3uE w|} u=uu9E t =TtNE} u uu ux׉EMEQPCYYËe3uu}Euu uEMEQPYYËe3uu}Euu u}EMEQPYYËe3uu} }EVVu4MEQPwYYËe3uEVVuGMEQPHYYËe3u=Tt4EVVuxMEQP YYËe3uE t Euu uEMEQPYYËe3uu=TtG=t>Euu ux׉EMEQPsYYËe3uuEEMd Y_^[ } w |̋UVu3;u sWu>t x׃;u r_^]%; uk̋Uuuu uhuh]̋UjXu\h TPP]̋U$ 5=f f fff%f-E EEX  jXkǀjX jX jXk LjX Lhjh( eLEuu5$xYTjJYeLEHEEPEPu= u܋M LM HEƋMd Y_^[ËujY̋UuJYH]̋UV EtVFY^]%H%ܠ̋UE3SVWH<AYt} p ;r H;r B(;r3_^[]̋UjhHhvdPSVW1E3PEdeEhtTE-PhPt:@$ЃEMd Y_^[]ËE3Ɂ8ËeE3Md Y_^[]̋UMMZf9uA<8PEu f9Hu]3]̋UeeVWN@;tudEPDE3EEd1EH1E@3EM3EEPLE3E3E;t5uO@ȉ _^%8hvd5D$l$l$+SVW1E3PeuEEEEdËMd Y__^[]Q%4%0%,%(%Ԡ̋Md Y__^[]Q̋M3Pd5D$ +d$ SVW(血3PuEEdPd5D$ +d$ SVW(血3PeuEEdPd5D$ +d$ SVW(血3PEeuEEdhvd5D$l$l$+SVW1E3ʼnEPeuEEEEdËM3n%Р%ؠ%D̍MZ̐T$B J37̍M*̐T$B J3<̍MMM黺̐T$B J3̍uj_T̐T$B 3.J3$̍ ̐T$B 3J3̍M̐T$B J3J3~@Z̍nc̐T$B 3=J33̍M&̐T$B J3D̋MM ̐T$B J3p̹@̹H*. .0 000"|,PU6"`x|P6"|} } }P7" P< 9}{}}}}Z}e}p}D} O}PB"}}}}~0PD"d|H~PG"Ă~~PKTT[["h~"~uxssssstDtXtsttttt uHu\uxky~y@mt|PPO܄ȄЄ؄poAcWow64.dllGetHookAPIsNotifyShims-------------------.?AVCStringError@CString@ShimLib@@N@D>^~Ҧ(:F\nʨjNF0$ڧn(Z£֣  ,8BLVbnx8. ܤҤʤ Pbpĥܥ@mԢРlP 6lȢ>^~Ҧ(:F\nʨjNF0$ڧn(Z£֣  ,8BLVbnx8. ܤҤʤ Pbpĥܥ:SE_ShimDPF0SE_GetShimId&SE_COM_Lookup#SE_COM_AddServer"SE_COM_AddHookapphelp.dll__CxxFrameHandler3ctolower"_wcsnicmp_strnicmp_wcsicmpwcsncmpdtoupperPstrstr_stricmpwcstombswcsstr_strlwriswctypeetowlower{wcschrwcspbrkt_XcptFilter_amsg_exitfreemalloc_inittermmsvcrt.dlls_except_handler4_commonk_lock_unlock__dllonexit_onexit??1type_info@@UAE@XZRtlAllocateHeapRtlFreeHeapRtlDosPathNameToNtPathName_UNtOpenFileNtCloseNtQueryInformationProcessCRtlpEnsureBufferSizeRtlNtPathNameToDosPathNameRtlFreeUnicodeStringntdll.dllWow64DisableWow64FsRedirectionWow64RevertWow64FsRedirectionGetSystemInfoVirtualQueryVirtualAllocfExpandEnvironmentStringsWKlstrlenAeExpandEnvironmentStringsAGetSystemWow64DirectoryW>SetLastError1GetWindowsDirectoryAIsWow64ProcessGetCommandLineWLlstrlenWIGetFileAttributesWFindFirstFileWnFileTimeToSystemTimeCreateFileWOGetFileSizeCloseHandleyFindCloseAddVectoredExceptionHandlerMultiByteToWideCharWideCharToMultiByteQHeapAllocGetProcessHeapUHeapFreeGetCurrentProcessIdSleepUnhandledExceptionFilter}SetUnhandledExceptionFilterGetCurrentProcessTerminateProcessXQueryPerformanceCounter GetCurrentThreadIdGetSystemTimeAsFileTimeGetTickCountKERNEL32.dllRegOpenKeyExARegCloseKeyapi-ms-win-core-registry-l1-1-0.dllRegQueryValueAapi-ms-win-core-registry-l2-1-0.dllGetFileVersionInfoExAVerQueryValueAapi-ms-win-core-versionansi-l1-1-0.dlli_CxxThrowExceptionmemcpymemmovememset0 H`4VS_VERSION_INFO ! |O ! |O?$StringFileInfo040904B0LCompanyNameMicrosoft Corporation.FileDescriptionWindows Compatibility for 32bit Apps on Win64n'FileVersion10.0.20348.2849 (WinBuild.160101.0800)8 InternalNameAcWow64.DLL.LegalCopyright Microsoft Corporation. All rights reserved.@ OriginalFilenameAcWow64.DLLj%ProductNameMicrosoft Windows Operating SystemDProductVersion10.0.20348.2849DVarFileInfo$Translation  000L0P0X0`0x00000 q9v9{9999999:$:c:~:::::;;; ;);5;<;D;P;\;c;h;p;;;;;;;;;<<,=`======>/>\>k>u>z>>>>>>>>?? ???-?4?G?N?c?m?r?z????????0 00\0c000001=1V11111 222"2B2F2T2h22222222222233#3(30383a33333333334-494J4P4W4^4s4z44444444444 55"5'5/5M5Q5_5q5555555555556%656@6V6c6r66666667717;7o7777 888"8B8F8T8h88888888888899#9(90989P9999,:;:B:G:O:m:q::::::::::::;>;[;h;n;;;;;;;;;; <<<<.<3<8<=> >>&>+>0>5>D>I>N>S>t>}>>>>>>>>??+?0?=?b?~????@0000141_1m1112222233 3-3k3|33w444444455$595U5`5e5w5}5555555555555556Z6s66666797L7`7s77777 838D8K8f8l8888888888889*969@9E9M9j9{9999999999:#:(:0:::@:G:N:^:e:l::::::::::;#;?;D;m;;;;<+<2<7>>>&>;>B>G>O>W>>>>> ??%?*?2?R?V?d?x????????????P0 0E0R0j00000001!1(1E1R1|11111111122*262<2J2P2W2^2s2}2222222!3K33:4d444 555"5@5D5R5d55555555555566%6,6;6B6Y6k6|6666 7)7l7{7777777778'8=8G8L8T888888819;9@9H9_9k9999999999::-:4:9:B:U:\:o:v:::::::.;;;K;n;;;;;,<;>'>.>3><>O>V>k>u>z>>>>>>>>???-?1???Q?m?y??????????` 00"0'0/0O0S0a0r0000000000000001122!2C2Y2222233&333334,4K4j4q4v444445&5-5:5D5i5546j6!7N8r8y888899 <<-<7<>>/>>>W?]?o?z?????p81060=0J0T0Y0a00000001(1=1J1g1p1v111111112$2)2/2C2H2T2e2m2222233A3X3m3445"5=55555"6'6D6M6X6_6w6}666666666666666666677"72787C7I7U7e7n777777777Z8z88888919799:):2:;:P:e:t:|:::::;;;);z;;;<6s>>>,?A?Q?x????????? 0(00080D0L0l0000000000111 1(1L1\1d1l1t1|111111111111222,242<2H2P2h222222222233 3<3@3L3l3x3333333333333344444 4@4\4`4h4p4x444000 00000 0$0(0,0004080<0@0D0H0L0P0 x1