MZ@ !L!This program cannot be run in DOS mode. $?eQLeQLeQLLeQLTMeQLRMeQLUMeQLPMeQLePLeQLYMeQLQMeQLLeQLSMeQLRicheQLPELX(! &v$r |@A`( %px.textuv `.data z@.idata |@@.rsrc(@@.reloc @BؑPx@& x>u(h&|))p))*+ ---P.01@111033445p67:?BD`FG`IJL M0MPMpNNOPQRTXX0YYZ \ ]`]p]^^__ moppruvPx@P$FF\DisableFilesystemRedirector pattern buffer too small, disabled filename matching.NS_DisableFilesystemRedirector::NotifyFnDisableFilesystemRedirector initialized.DisableFilesystemRedirector notification: All DLLs have been loaded.DisableFilesystemRedirector uninitialized.fdwReason(%d) pszCmdLine(%s)NS_DisableFilesystemRedirector::InitializeHooksMultiNotifyFn returned FALSE, fail load shimKERNEL32.DLLFindFirstFileApdwHookCount(%d)SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INSTALLERNS_DisablMsiKeyRedirection::InitializeHooksMultiADVAPI32.DLLRegOpenKeyExWntdll.dllNtAllocateVirtualMemoryNtMapViewOfSectionINSTALLERSOFTWARE\CLASSES\INSTALLERINSTALLERSOFTWARE\CLASSES\INSTALLERNS_DMsiCIKeyRedirection::InitializeHooksMultiRegOpenKeyExARegCreateKeyExWRegCreateKeyExANS_DuplicateHandleAccess::InitializeHooksMultiDuplicateHandleNS_Ignore2ndFindClose::InitializeHooksMultiKernel32.DLLFindClose,NS_GetFileVersionInfoRedirect::InitializeHooksMultiVERSION.DLLGetFileVersionInfoAGetFileVersionInfoSizeA[LimitLargeAddressAwareProcessTo3gb] Reserving address space above 3gb NS_LimitLargeAddressAwareProcessTo3gb::NotifyFnNS_LimitLargeAddressAwareProcessTo3gb::InitializeHooksMultiDisableFilesystemRedirectorDisablMsiKeyRedirectionDopeWarsSanitizeSegmentRegistersDuplicateHandleAccessGetFileVersionInfoRedirectLimitLargeAddressAwareProcessTo3gbModifyShellLinkPathMsnInstallerRedirectHhShortcutToSysWow64SmartPhoneSDK2003Wow64CoCreateInstanceFlagwow64IsDelShareWow64ProcessLieWow64MM2Wow64SysWow64DirLieWow64UpdateDriverLieWow64MdmIgnore2ndFindCloseDMsiCIKeyRedirectionwow64 shim is initialized.NotifyFnAcWow64wow64 shim is terminated.DisableFilesystemRedirectorDisablMsiKeyRedirectionDopeWarsSanitizeSegmentRegistersDuplicateHandleAccessGetFileVersionInfoRedirectLimitLargeAddressAwareProcessTo3gbModifyShellLinkPathMsnInstallerRedirectHhShortcutToSysWow64SmartPhoneSDK2003Wow64CoCreateInstanceFlagwow64IsDelShareWow64ProcessLieWow64MM2Wow64SysWow64DirLieWow64UpdateDriverLieWow64MdmIgnore2ndFindCloseDMsiCIKeyRedirectionSoftware\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXECOMHook_IShellLinkA_SetPath.bat.cmd/C """" %windir%\syswow64\cmd.exe.htm.html".exe%windir%\system32\%windir%\syswow64\COMHook_IShellLinkA_SetArgumentsNS_ModifyShellLinkPath::InitializeHooksMultiSHELL32.DLLInstallDirProgram Files (x86)\MSNProgram Files\MSN%SystemDrive%Program Files\MSN%SystemDrive%Program FilesProgram Files (x86) (x86)MsnInstaller initialized.NS_MsnInstaller::NotifyFnMsnInstaller notification: All DLLs have been loaded.MsnInstaller uninitialized.NS_MsnInstaller::InitializeHooksMultiRegSetValueExWSETUPAPI.DLLSetupGetLineTextAhhNS_RedirectHhShortcutToSysWow64::InitializeHooksMultiNS_SmartPhoneSDK2003::InitializeHooksMultiSetupDiCallClassInstallerNEWDEV.DLLUpdateDriverForPlugAndPlayDevicesWNS_Wow64CoCreateInstanceFlag::InitializeHooksMultiOLE32.DLLCoCreateInstanceCoCreateInstanceEx\_isdel.exe_ISDEL.exe\syswow64\installShield\_ISDEL.exeNS_wow64IsDelShare::InitializeHooksMultiOpenFileNS_Wow64Mdm::InitializeHooksMultiPSAPI.DLLGetModuleFileNameExA;0x,DoInstallmsoobci.dllmm20ex.inf 0x,ProxyRemoteInstall[GetVersionExA] called. return WinXP.NS_Wow64MM2::APIHook_GetVersionExA[GetVersionExW] called. return WinXP.NS_Wow64MM2::APIHook_GetVersionExW[GetVersion] called. return WinXP.NS_Wow64MM2::APIHook_GetVersionNS_Wow64MM2::InitializeHooksMultiGetVersionExAGetVersionExWGetVersionwceusbsh.infwceusbsh.sys\NS_Wow64UpdateDriverLie::InitializeHooksMultinewdev.DLLUpdateDriverForPlugAndPlayDevicesANS_Wow64ProcessLie::InitializeHooksMultiIsWow64ProcessGetNativeSystemInfoNS_Wow64SysWow64DirLie::InitializeHooksMultiGetSystemWow64DirectoryA[DopeWarsSanitizeSegmentRegisters] Adding vectored exception handler NS_DopeWarsSanitizeSegmentRegisters::NotifyFnNS_DopeWarsSanitizeSegmentRegisters::InitializeHooksMultiShimLib")("%S%s%s%s ShimLib::GetHookAPIsX($&X( \'X($\)\X()v||}}~Q~~~&$&8&qqr-rRrsuYwiw0)FLux/{| RSDSߌC,§ߌ<19AcWow64.pdbGCTL.rdata$brc.CRT$XCA.CRT$XCU.CRT$XCZ.CRT$XIA.CRT$XIAA.CRT$XIZ8.gfids(.giats0.rdata@&(.rdata$sxdatah&t.rdata$voltmd&.rdata$zzzdbg)@.text$di)R.text$mn|.text$x@ .text$yd`@.xdata$x`.edataP.data$brcP0.data$r$brc.data.bssx.idata$5x.00cfg.idata$2 .idata$3 x.idata$4.idata$6`.rsrc$01`.rsrc$02 ߌC,§ߌ<19f_Rȏ҉X(Lh@NY̡LhPȕdNY̋Uud0jpT]̋SVWWu 8u 3@N<*tNPQYY;u,CGt <*tPQYY;t؅u3_^[Ë׍KuGujh`P3}}}܉}UJtEP} ܕq u ux֋uEƋMd Y_^[u}u ũt\tcunhjkPVWQyhXjcVWjhjfVWj_^hPjohhj3@̋U} -SEE ]VWPSh|jhhj}3t7u@9u u -M 5t+3QB5ܕtt&du95ؕt3ؕumu!hhhhj뾡ܕ@ @*p ppt7Vhhhhjܕ_^[] ̋V5+ttAuҍA^E3ɅzE̋UUM:u ɸDVu,u(u$phhj}du95t3_^[] ̋UԕMu)ԕV ЕQp x^]tu; Еu@ԕ3@̋US] -VWEPuh|jQh8h,j}3t7}u~u -i,tl3QB+tZtd@t@4p ppt7VhjUh8h,j}du95t3_^[] j|E}MeW)EMA+BuRQYYu ȕ5M. ;6Ë}Mu Wp$xDj|E}MeWEMA+BuRQYYu ȕ"5M. 6Ë}uMuu Wp x3@9Euzu -G'thQ3& tWt>hjdh80Sjt>WhjuhhSj}du9=t3  _^[] ̋UQWt Eth8tcEPWQM xU O}tIVut@VuYYu0V5M3uFWM VxU M E0^_̋UQQeSVuMW} h+hhLhSQW։E8MEhP.hhHhSPWMEh_hhDhSPWMEh3hh@hTSPWMEh7hh<hSPWMEh:hh8hSPWhDhh4hSEMPW`MEh`Ihh0h(SPW3@9Eu D-DQ3t>WhXĠh?j0Sh@54ȠtdhBj Sh@54ȠtGt>Whhh(hTj_^[] }du9=u3̋VWqPWjJ+XIBP @_^̋UVM5PuJ+jXIBP @^]j$Q~g5E3] }EЉEԡL]}E؉u܃}uE%ShpYYύQff;u+MM;WMQhhM"}؋ύQff;u+ʉu3fEEjP MfuhMfE3f;t!PY;tEPYfMUЉuQWup uSRx֍M؋33GÃeM]Uԋ}븋M̋UQQS] Vp$W}SuWuuu ux։E}W;EhWYY3EfEEEjPh EO;w"PYN;tEPYFWP@PWPh,P3 W @ 0f DfL0tE_^[̃t"tcu7hhhHh hhhdhhj3@̋U} -SEE ]VWPSh|hhhhj}3t73@;u@9u u @-M @t+QjZOtt!du95t3u!hhhhhj뿡@@`Fp pp@ @ @ Gp$p(p,t7Vhhhhhj_^[] h,~1]} h,hJSeWEh0 YYhPh*EPphPQzPQg@ PSx֍!<KËMWSx@E/̋US] -VWEPuh|jjh8 hxju3t>3@9Eu <-3<Q3twt>WhXĠhJjh0h@5,ȠtDt>Whjoh8 hxj_^[] }du9=xux33@ j 3̋US] -VWEPuh|jAhp hj}3t73@9Eu 8-8Qj[Ztttt @ @ Mp pp@ @ @ 0Mp$p(p,t7VhjDhp hj}du95lt3 lt_^[] ̋UMhEVuDMup Qu ux^]̋UMhEVuDMup$uQu ux^]̋US] -VWEPuh|hh hj}3t73@9Eu 4-04Qj[httt@(!!@pNp ppH@3@9EuVu H-WHtDQ3t3t>Whj>h`%hj?}du99=t32h$j*h0%hPh_j|_^[] ̋UVut&w!rwtPd0jpP3^]̋UQVEPjYtujV@ ^̋UQSمt5t0J3WEBPdtVuVSW D>^_3[̅u3ËVrBu+^̋UQSVWM3pt;r2t'PVu 3?PuP_^[hlEP̋UVuWtWSZ;5B;.J+;%6Pu JP3 p3ҋAfAu VRr:[_^]̋UESW{;C~0Vs;LPuPS7K p^_[]̋UVUuJffu+3ɉP^f P]̋U LaS]Vu MWx/FPjlPpVSW 37tiEPxZu3~=PPVWPPxE~*MPuE0VWjjx QM&;tWjlPh_^[hlEP3̋USVًM WQuz}e3ׅIЋUE9x}-Wˍp8FEPu3 UE4 +EP1PEAPE Pu Q y_^[̋U(WM}EM SVw7E3؉E]NNE;b}uV:YYtu4xCV'YYu]΍Qff;Eu+4N;ur}-]+]]MAqE؉]؍C9A|>~"SFPu7 ?G4Gu;]uWYYȉMtaEUu< ++E+VAPW~uu upu3f>E+EEW'Uȃ Euu܋ύQff;Eu+yu@+PQ@@u+PQo;3@_^[̋V3+t1tetHttVV3/E51VV33t P5t P53@^̋UEjdY;$t6t1t)t u*PPjh3Yet tHjfjeYU +]̋UU 3VuAWuV\Ҹ-%DQV%DQu h%hh%h%j$_^] ̋UUM ] h<̖ȖYu@à 3̋U} SVWdH3ۣd]PʉU33G;th`U3u}=Ėt jNY\̖Eth5Ȗu;r:MtxU̖ Ȗ;uE9Mt͋‰MEP@3ȖY̖GĖ9]33G9} d3ۉ]PU;th`U3u}9Ėj[t jc5hh=ĖgYYt3Xhh6YĖ}Yu3=Жt&hЖjYtu5ЖSux_^[ ̋U} u)],̋Ucsm9Eu u PYY]3]j,hE3uE w} u=uu9E t =ԖtNE} u uu ux׉EMEQPCYYËe3uu}Euu uEMEQPYYËe3uu}Euu unEMEQPYYËe3uu} }EVVu%MEQPwYYËe3uEVVuGMEQPHYYËe3u=Ԗt4EVVuxMEQP YYËe3uE t Euu uEMEQPYYËe3uu=ԖtG=t>Euu ux׉EMEQPsYYËe3uuEEMd Y_^[ } w ̋UVu3;u sWu>t x׃;u r_^]%; uk̋Uuuu uhuh]̋UjXu\h TPP]̋U$ |5x=tff fpflf%hf-dEEEؑ jXkǀjX jX jXk LjX Lhjh0 e̖Euu5$xYTjFYe̖EȖEEPEPu9 u܋M ̖M ȖEƋMd Y_^[ËujY̋UuJYH]̋UV EtVfY^]%H%ܠ̋UE3SVWH<AYt} p ;r H;r B(;r3_^[]̋UjhPhvdPSVW1E3PEdeEhtTE-PhPt:@$ЃEMd Y_^[]ËE3Ɂ8ËeE3Md Y_^[]̋UEMZf9uH<ȁ9PEu 3f9Q]3]̋UWVWN@fE;tudEPDE3EEd1EH1E@3EM3EEPLE3E3E;t5uO@ȉ _^%8hvd5D$l$l$+SVW1E3PeuEEEEdËMd Y__^[]Q%4%0%,%(%Ԡ̋Md Y__^[]Q̋M3Pd5D$ +d$ SVW(3PuEEdPd5D$ +d$ SVW(3PeuEEdPd5D$ +d$ SVW(3PEeuEEdhvd5D$l$l$+SVW1E3ʼnEPeuEEEEdËM3n%Р%ؠ%D̍M8̐T$B J3;̍M̐T$B J3 <̍MMM韺̐T$B J3̍ti^SH=2̐T$B 32J3(̍̐T$B 3J3ā̍M̐T$B J3J3D^̍LA̐T$B 3AJ37̍M̐T$B J3L̋MM ̐T$B J3x̹̹ȕ{*. ./000"|,P56"`x|P6"||}}P7" @5}w}}}}V}a}l}@} K} PB" }}}}~4PD"hD~PG"Ȃ~~~PKTT[["p~"~uxssssstDtXtsttttt uHu\uxky~y m|PX(܄ȄЄ؄poAcWow64.dllGetHookAPIsNotifyShims-------------------`.?AVCStringError@CString@ShimLib@@N@DBb ֦,>J`rΨnRJ4( ާr,^ƣڣ$0<FPZfr|<2$֤ΤTftȥ mآРpP :Ģp̢Bb ֦,>J`rΨnRJ4( ާr,^ƣڣ$0<FPZfr|<2$֤ΤTftȥ=SE_ShimDPF3SE_GetShimId)SE_COM_Lookup&SE_COM_AddServer%SE_COM_AddHookapphelp.dll__CxxFrameHandler3ctolower"_wcsnicmp_strnicmp_wcsicmpwcsncmpdtoupperPstrstr_stricmpwcstombswcsstr_strlwriswctypeetowlower{wcschrwcspbrkt_XcptFilter_amsg_exitfreemalloc_inittermmsvcrt.dlls_except_handler4_commonk_lock_unlock__dllonexit_onexit??1type_info@@UAE@XZRtlAllocateHeapRtlFreeHeapRtlDosPathNameToNtPathName_UNtOpenFileNtCloseNtQueryInformationProcessgRtlpEnsureBufferSizeRtlNtPathNameToDosPathNameRtlFreeUnicodeStringntdll.dll<Wow64DisableWow64FsRedirection@Wow64RevertWow64FsRedirection GetSystemInfo VirtualQueryVirtualAllocExpandEnvironmentStringsWwlstrlenAExpandEnvironmentStringsAGetSystemWow64DirectoryWhSetLastErrorRGetWindowsDirectoryAIsWow64ProcessGetCommandLineWxlstrlenWhGetFileAttributesWFindFirstFileWFileTimeToSystemTimeCreateFileWoGetFileSizeCloseHandleFindCloseAddVectoredExceptionHandlerMultiByteToWideChar:WideCharToMultiByterHeapAllocGetProcessHeapvHeapFree;GetCurrentProcessIdSleepUnhandledExceptionFilterSetUnhandledExceptionFilter:GetCurrentProcessTerminateProcess}QueryPerformanceCounter?GetCurrentThreadIdGetSystemTimeAsFileTime4GetTickCountKERNEL32.dllRegOpenKeyExARegCloseKeyapi-ms-win-core-registry-l1-1-0.dllRegQueryValueAapi-ms-win-core-registry-l2-1-0.dllGetFileVersionInfoExAVerQueryValueAapi-ms-win-core-versionansi-l1-1-0.dlli_CxxThrowExceptionmemcpymemmovememset0 H`4VS_VERSION_INFO je je?$StringFileInfo040904B0LCompanyNameMicrosoft Corporation.FileDescriptionWindows Compatibility for 32bit Apps on Win64n'FileVersion10.0.26100.4202 (WinBuild.160101.0800)8 InternalNameAcWow64.DLL.LegalCopyright Microsoft Corporation. All rights reserved.@ OriginalFilenameAcWow64.DLLj%ProductNameMicrosoft Windows Operating SystemDProductVersion10.0.26100.4202DVarFileInfo$Translation $000L0P0X0`0x000000 9999999:!:=:I::::::;#;4;9;B;N;U;];i;u;|;;;;;;;;;;<<-<</>Z>j>t>y>>>>>>>>>> ??#?*???I?N?V?g?r?w???????0%0Q0X0|00001-1F1y111112 225292G2_2t2y222222222222 33393c33333333334 44'4.434;4L4X4a4444444444555,505>5P5d5k5r55555555566 666C6R6s6666666677O7g7777778%8)888N8x88888888888888999,9999 ::!:&:.:N:R:`:q:::::::::::;/;<;B;X;;;;;;;;;;;;;<< <<&<+<0<5H>Q>X>]>e>>>>>>?? ?-?R?n????@0 0w00 1$1O1]111 222222 333a3r33m44444445 55,5@5F5K5R5X5^5d5m5u5{55555555556?6c6~66666:7C7X7k7}77777#848;8^8d8888888888889"9.989=9E9j9{999999999::#:(:0:::@:G:N:^:e:l::::::::::;#;?;D;m;;;;<*<1<6<>>>$>)>1>B>M>R>y>>>>?*?4?9?A?e?i?w???????????P000P0]0u000000111181U1b111111111122#212=2M2S2Z2a2v22222222!3K33:4d444 555!5C5G5U5g5{5555555555566"61686O6a6r66667$7g7v7777777778'8=8G8L8T888888819;9@9H9_9k9999999999::":5:<:O:V:k:u:z::::::.;;;K;n;;;;;*<:>>!>(>=>G>L>T>e>p>u>>>>>>>>>? ?.?@?T?[?b?w?~???????` 0000>0B0P0a0q0x0}0000000000011112%2;2222222333334(4D4K4P4d4{44444555A55 6D66#8G8N888888;;<<"<={>>J?P?b?m?s?x???p8 0%0/0;0E0J0R00000001(1=1J1g1p1v111111112$2)2/2C2H2T2e2m2222233A3X3m3445"5=55555"6'6D6M6X6_6w6}666666666666666666677"72787C7I7U7e7n777777777Z8z88888919799:':0:9:N:c:r:z:::::; ;;%;v;;;<2o>>>(?A?Q?x????????? 0(00080D0L0l0000000000111 1(1L1T1\1d1l1t1|111111111112 220282@2L2T2l22222222233$3(3D3H3T3t333333333333344 4444$4(4H4d4h4p4x4444000 00000 0$0(0,0004080<0@0D0H0L0P0 x1