MZ@ !L!This program cannot be run in DOS mode. $0 tlZtlZtlZtlZlZ}ZqlZ}ZvlZ}ZwlZJZplZIZulZ eZulZ dZilZy>_ZulZtlZulZ ZZulZRichtlZPEdW"  4@ <h#`PD z@H.text h.hook 0  .rdataDG@H&@H.data<hn@.pdata @HINIT .rsrch@B.reloc`@B@SH EHLAALtA@McPLHcL#IcJHCHHKAt AHLL3IH [ FH(MA8HIH(ffHIrSIII@rHكtL+HHMI?Iu9MIItfffHHIuMt HIuffffffIs0HHQHQH@HQHQIHQHQHQufDHHQHQH@HQHQIHQHQHQu $TffLH+Irbt7t  IȈHtf IfHt  IHMIuPMItH HHIuIMuI HIuIffffffffffffI sBH LT H HALQHD LT IHALQuIrffffHr  D @HuH@L LT L LQLL LT LILQLL LT (H@LILQLL LT LILQuIIq $fffffffffffIIrat6t HɊ IȈtHf Ift H IMIuPMItHH IHuIMuIHɊ IȈuIffffffffffffI sBHD LT H HALQHD L IHALuIsfffffHw H D @uH@LL LT LILQLL LT LILQLL LT H@LILQLL L LILuIIq $ffH+Ir"tf: u,HIuMIuMt: u HIuH3ÐIt7HH; u[HAH;D uLHAH;D u=HAH;D u.H IuIMItHH; uHIuIHHHH HHH;HHXHhHpHx ATH MQ8HMAHIHHII\LDDUAA#AfDDEtLMHH@H\$0Hl$8Ht$@H|$HH A\H\$Ht$ UWATAVAWH$HHXH3Hp3ALDHL$HDC(3D\$@ùLL$@DCDHU HL$HLt$XD$`D$dD$h |$@u;;w5H ADC>HD$(L @H@D$ }DHuPf9Ft~AHU LD$pHk8HHL$Hc HEAaHD$8HD$tL H@HD$0H@HE@HD$(AHH\$ |DEtE;sAH8D;wEtE;sH@Am Aߋ8A1Hr?Lt$0HD$(L ?H?AHD$ %|3HpH38>L$I[8IsHIA_A^A\_]LI[UVWATAUAVAWH`Dz8HAE3E!k IHD$HD$PLD$DAUHEeHL FA 9W(u0 s(D9o0u"At AHωt4AUL McfAE;u!E;t @tCsIVANIFD(s A8s AIVM s GI+E;u&%=ts $uDEs IG3HDB8C2F DH$LHD$HDd$@D|$8H|$0HIDl$(d$ FHd$HDd$@D|$8DȸH|$0LHIDl$(D$ Ds|Hd$HDNDd$@D|$8H|$0LHIDl$(D$ s9Hd$HDNDd$@D|$8H|$0LHIDl$(D$ tKs!I4HHt5H Ձ@t`ANxIFDHIFArNA3HDB8[HT$PC2K0g:#K5!fCD$INH+OHA@EJD9$u@t OfD K0@ t tO f CAtAt D WfK@#;uoEtGE;{F <#;uFfCo$Es uo FfCs  so s$F$tu t tF fCfD#fA fD cCyfA fCHl1{1fCFC5uC1K2tH-Hf KANHT$P*ʈK0E;uLf C.o sANAffKf C$oF AH$H`A_A^A]A\_^]H\$UVWATAUAVAWHl$HH H3HEL3T$0AE HUM}EeHMH DL$4MLD$PHUHL$(L|$HAAtLD$@HIEHD$@2A]IM]E3HL$8HMDBF";t'DrA;t tDb8A;Q DWBH,3H~"LADuDe@<t!Hh4AH,L~AOxdt5tGt(HK*:H-,VH%V0HHVHI#+DHHA[H+N1t4=t'x#HH @H@HH+:H+F2+DHHs[H!+F1}-H)H{''HfD9'uH,(GH @IH)HLp>FtAH21AtA H.1H)H\$XHl$`H A_A^A\_^H\$Ht$WH z4IHHt9H{+JLH(HCHyHH#HT$8HHD$8Y'H\$0Ht$@H _H(A}z z$IcT"tstetQ t=t)0tudDBH/RAH/CAH/4AH/%AHa/HH/H//AT(H(DHcL#LvLGB`fEu3AA #IHcиfD#HRH AHkHHfE;HDH\$Hl$Ht$WATAUAVAWH Db8E3 AEHHt(HHt@t C8ШHIQHADAu&HA#HGOWHGDH wFA`fEjAϋ EAcA*tBAuO@tK@H %Atku AAtH#HD"LAIALI#HRH AHkIHDHtHeHDHGL_DRDWEyAAA;uEaAOsHALA#AK`f DA E;}PILI#LkHRH AMALDAA  s EIANEAL5u_A#EN`fErAϋ AuA;u HATA;} IkuAH-ABISHWGA;uVA#ɃAV`fDA E;}LI#HRH EHkIIAu~A#ɋAF` uI#H @H,MIu/L%I#HkIHtMA tHHrHu.A#AN`ftDA E;(A3H\$PHl$XHt$`H A_A^A]A\_̋AD uc}3LAAAI@HAA@SH LE33EA%` tu td@tT= t=A`<`u3H [A t AA@t AEA'A AQ0A AE}EtHtHa {Hu 3KH [H\$Ht$WH p LBLA8z(uDѹEAAAAA@DЃ$DAAB4tt¼~EJDAAIAYMYH=oAH OfDEAA AuLeA@uAuRCIMYAAx@Au A H AuA IcH OAfA#AfA;t3H\$0Ht$8H _H\$LD$UVWATAUAVAWH`AD$H$D~4Hc$HH EED DN83AADظAD##HD$D$D$D$PDpA+EAAAteAAt'D+tAE+EA$3t=t)AAA#A;unAn An LwAjLbAI EA,=AAtAAA,AAFGAX7EAA+AAAE;|A3  AaD;tAEAAxAAAzD AfD|"E_HEf HUh t n XN9$uAAźA#A;+n!$n A;t;uArnAE;EAt[AAhA&hAtAM;EAGEAtAtD+2AA|uAOnAP~WAVtMAYt6AZt!A[LD$Aу 2Aу`#AAPAA؍PDl$PDd$HHcL=?AGfD"$D$@H$HD$8$D$0$D$($ T A t/ t'n EtA;w E}fD|"fDl" AfDd"fD kM-HEHH N $un T ;uDAE#E;u6n@T fD"E HEAHH Le n T A 9Uu$AE fD"fD kE HEHcH fDl"Et HE HE~ T AfDd"MI HE m D AE+dAAAAtoA AtnA9Uu*AE#AuL!Dt @fD" EtnDt L!A fDl" AtnAӋ$t/t nAEDDL!Aun n FAt ẢFA fD|"4 ADt L!fD|"0 E3Dt fDd"D9V(t&nABIBw<0T! 0 D fDd"M HEK Etn$D$9UDt u Dd!ADd!A#*A>AAAt(AtA% D  D D 07 AADt AGpfD|"n D;tdD;tPAt=At*AtA D!I D!H D!D D!G D!F D!E E3L9$t A;a A;X D2AA;D A: Dt 9Uu @fD" A fDl"|L!8 AAt nAD9uuAAtAD ~A;  Dt 9Uu @fD" A fDl"{A$jA&A' AA)A1t A2t _ fDd"@E3D\ DyDifD9D"u($tt ufL"fDl"fD|"DELHֹ!$u,nD{4EHEfKHEA;u!nDk4EHEK7C4@EHEHHKAA(u%Dd fDd"MeHEHH Lu]n E3Dd D9$u!fD|"E-HEHH HU%A fDl"EHEHcH HEH$@f+fDt FfD { n fD cn E3D9$u3ED EzfD|"HEKHEHf EYD A fDl"HEKHEHf HEF$u n A;un D  *AAsnD @AT fDd"D3A@E;A:A4ANAAAtZArnDELHֹz$D 0u C2#YA;u C2KnC2=nD AtB$n u DyfD|"2;uAs nfDD"A fDl" AfDd"39$u 9UtC1ċ$u D!'A;ƍADnD AtJn $FE3u DyfD|"7;uAsFfDD"A fDl"AfDd"E3Dc1DELHֹ'$u D!& A;΍PDˆD!HE$H#ȅt_tEAsArEtn nE#B Dt L!fDD"Enn FE ADt fDd"HEHAD$#EtnAwD"8D9v(.nAw<0D 19$u D @nD9$u D  D  A;AAtrAt:AiHEEj HABDt #fDl"KL!D$K TD K HEA HAEDt$#fDl&KL%!HEHDt KAD  D "S@ARAAAt[AtmE+tJAt"AA[D|!Dt AAtADt E3DAtn[L!Etn$D$A[Dd!ASDt Dd!MHED9uuDt [fD"L!LuASAtjAtND+t9A$EzDt EtkD![D!AkDt D|!AtkDt L!MDHED9uuF8ADt A:k5AtAEuAGp[fD"Dt L!D A:t,A:wD!L=9AGf CAFEAA`A{H$HtAAtD1H‹$;u n3DXT3DXLA3H$H‹$;unA3AA3$H$D$AuHt3$Dl$PDd$HDD$@IcL=JAGfD"H$HD$8$D$0T$(D$EHHHt$ AL A:tA:wL!AOf CH$H`A_A^A]A\_^]HHXHhHpHx ATAVAWH0H\$pD$E3DS8McHHD|$pAoMAFL"Bl ACABAAȃtUt1v3H\$PHl$XHt$`H|$hH0A_A^A\Ë$D= S-9k(u&$D#պ SB ЍAwH$kAHt At)D$E$Eu/u*BD DF4GHGHHNHGL B sBD F2B BD BD!D;uF4OHGHHNHo%AuDF4GeHGHHNHGB;Qu EC>$EuNuIAD$ B4GHGHcHJHGufBD Jf BBD u:OHOLAӊDd$(D$pHAHD|$pHGD|$ $BD Dt  SAtABD!D;uF4ObHGHHNHo2At AAu" F4G.HGHcHNHGF2BL!tv?O~*dA( AHDt ffA @,EXDAA(AMP AX(A@8AHt?vKOv duA3Ãftgtv vׁtρtǁ3DAHAD3AsIHVHnHvHHHHHHHH6HNHfH~HHHÁ?5HHcHHHHHHH1HIHaHyHHHHHH H!H9HQHiHHHHHHHH)HAHYHqHHHHHHHH1HIHaHyHHHHHH H!H9HQHiHHHHÁ?lHқHcHHHHHHH4HLHdH|HHHHHHHH,HDH\HtHHHHHHHH4HLHdH|HHHHHH H$H<HTHlHHHHHHHH,HDH\HtHHHHHHHH4HLHdH|HHHHHH H$H<HTHlHHHHHHHH,HDH\HtHHHHHHHH4HLHdH|HHHHHH H$ H< HT Hl H H H H H Á#?DH:Hc4HH H H H!H,!HD!H\!Ht!H!H!H!H!H!H"H"H4"HL"Hd"H|"H"H"H"H"H"H #H$#H<#HT#Hl#H#H#H#H#H#H#H$H,$HD$H\$Ht$H$H$H$H$H$H%H%H4%HL%Hd%H|%H%H%H%H%H%H &H4&HL&HT&Hl&H&H&H&H&H&H&H'H,'HD'H\'Ht'H'H'H'H'H'H(H(H4(HL(Hd(H|(H(H(H(H(H(H )H$)H<)HT)Hl)H)H)H)H)H)H)H*H,*HD*H\*Ht*H*H*H*H*H*H+H+H4+HL+Hd+H|+H+H+H+H+H+H ,H$,H<,HT,Hl,H,H,H,H,H,H-H4-HL-Hd-H|-H-H-H-H-H-H .H$.H<.HT.Hl.H.H.H.H.H.H /H$/HH>H1>HI>Ha>Hy>H>H>H>H>H>H>H?H)?HA?HY?Hq?H?H?H?H?H?H@H@H1@HY@H@H@H@H@H@HAHAAHIAHaAHyAHAHAHAHAHAH BH!BH9BHQBHyBHBHBHBHBHCH)CHACHYCHqCHCHCHCHCH DH!DH9DHQDHiDHDHDHDHDHDHEHAEHYEHqEHEHEHEHFH)FHQFHyFHFHFHFHFH!GH9GHQGHiGHGHGHGHGHHH)Hø" ;uC;!!;;!;tttdtTtDt4t$t$ H~HHVHH.HHHHGHGHGHfGH^HÁtdtT tD t4 t$ t  HHHHHHHHHZHH2HH HHHÁ?Q H HcHHHHHHIHIH5IHMIHeIH}IHIHIHIHIHIH JH%JH=JHUJÁ?  H^HcLHHHJH`JHxJHJHJHJHJHJHKH KH8KHPKHhKHKHKHKHKHKHKHLH(LH@LHXLHpLHLHLHLHLHLHMHMH0MHHMø;?d HHcЍHH(MH@MHXMHpMHMHMHMHMHMHNHNH0NHHNH`NHxNHNHNHNHNHNHOH OøY;t}? H:HcPHHOHOH4OHLOHdOH|OHOHOHOHOHPHPø ;!5;Ztt[td\tT]tD^t4_t$`taHPHPHZPH2PH PHOHOHOHPÁ6td7tT tD t4 t$ t HFQHQHPHPHPH^PH6PH.QÁ?HHc|HH!QH9QHQQHyQHQHQHQHQHRH9RHaRHyRHRHRHRHRø;?HτHcHHRHRHRHSH)SHASHiSHSHSHSHSHSH TH1TÅ?rH,HcHHTH.THFTH^THvTHTHTHTHTHTHUH.UHFUH^UHvUHUHUHUHUHUHVHVH6VHNVHfVH~VHø @;;RD;;LtBt6t*t?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ܒܙܼoooo o(o0o8o@oHoPoXo`ohopoxooooooooooooooooopppp p(p0p??????8p@pHpPpXp`phpppxppppp?ppppppppppppqqqq q(q0q8q@qHq?PqXq`qhqpq??????xqqqqqqqq??qqqqqqqqqr?rrr r(r0r8r@rHrPrXr`rhrprxrrrrrrrrrrrrrrrrrssss s(s???????0s8s@sHsPsXs`shspsxssssssssssssssssstttt t(t0t8t@tHtPtXt`thtv vvv$v,v4vE3HD$XH#gMELD$PHt Hp8fD9.uHt$PHD$`D$@HD$Ht~tqtdtWtJt=t0HT$@HL$HtL (?L1?\$ \L >GL >4L >+L >"L >L >L i>L @>HT$@HL$HL?>RL>HT$@HL$HM9LLHT$@HL$H<uL>HT$@HL$HD(y$L>HT$@HL$HLȉ|$ L>HT$@HL$H|G HIHsH|$8H\$0Lv>HT$@HL$HLDd$(HD$ rHT$`H n>D_VHL$`H`H3HxA_A^A]A\_^[]@SH HHXH˺\HuHH [LD$LL$ H(LL$HH(H\$WH HHHHA<uH=s)Hcx"H H趿x HcH) H H\$0H _H\$Hl$Ht$WAVAWH =4HHHǀ<uDwAZMNA3AEoHHDHHȋyO1 3 H 43) {4A<@s!Hi4MHHyD5P4H L4@u1H <襾DCH .4A3KdvZMNAHH\$@Hl$HHt$PH A_A^_LD$SHMLك$$HL$AE3DL$AH;},AAH3HADD3IL\$AMtA"AD$HD$0HtD$AH[H\$Hl$Ht$WH H cAHӧE3E3L c@A9tAII IcHdrdIi€ L b3IQxHHH90tEHdr3H:t Hdr%IcHILi IBdpJtxBH kb@H\$0Hl$8Ht$@H _H%%H\$WH H 9bHE3E3DLaIKxI9yu"3H9t HdrH@IBdpAI IcHdrH aAH\$0H _H%H(=atH hȦ%aH(H\$Ht$WH H aH3IE3DLaA9pu3I9XuH9u HdrAI IcHds6IcH IHiЀ H`LI\xHtHThHADpH `A˥Ht$8HH\$0H _H8=`t3H;AHD$(D$ AHHN;L ';^H `3A u%`H%}`H .3yH3;A$HD$(Hd$ AH:`H8̋.`LI[IsWH03ۋ9`uDH<L =H:ICI![KA%ZHt$HH\$@H0_ÅtZt ;uetH _xDDD$P9_t&3H _99tH HcHdrtH e_A4i=&Ze@SH@HEA^H:L ^:HD$(Hd$ AHH9=^ukAdHF:L :HD$(Hd$ AHHY9%.3T$0AkHJ:HD$(Hd$ L 9AHH9H@[LI[IkIs WAVAWHPIc=D^ދu3HJ:L s:H8ICIcA?t9HW:|$0L ,:HD$(Hd$ Hz8A HT$xH?؅y7|$0H&:AHD$(\$ L 9H)8>HL$xLHu|$0H9A%HD$(t$ H D] @]DHGzGLcIIH+HHHHkdH ]L+3D]H9tH HcHdr;u3HL$xHcHi؀ H }\D P| THXHHA<.uLEIHrH \A]\L 8D$Ht$@H\$8H49|$0H6HD$(Hd$ A^j3HL$xHtL\$PI[ Ik0Is8IA_A^_H\$WH@H [Ǡ3L\@A9tI HcHdrSHcL[\$0L 7HiЀ HJH\7H56HD$(Hd$ AH x[@H\$PH@_H%<LI[IkIsWH@=A[u3HN7L G8H5ICIcAyCH [͟3L[@A A98tMHcHdrHcH-ZMHMP3Hi؀ H1oHEXL 7HH<5AHD$8H7|$0HD$(Hd$ sZL t7H4AD$0SZH7HD$(Hd$ [H (Z@Tt ;u%TH\$PHl$XHt$`H@_LI[IkIsWAVAWH@IK3H8HICL58L=7DCQKMII[HHf9FuH,EAZMNAH[HHu0H8Ht$0DG]HD$(OMID$ tLHHnH8HijMIHu%AkH8HD$(AHD$ $vHpAtfHt$8H}8H|$0HD$(AHH\$ HHy1H 8Ht$8AzH|$0HL$(AHMI׉D$ ZMNAHJHl$hHt$pH\$`H@A_A^_LI[WH@IK3H5HICL 5DGOH5I{BH3 H\$P@NjH@_HHXHpHxAWHP3HHHHHHf9AufHL$0A$fD$@fExfD$BH5L 5HD$(H`5AH\$ Hf9~uE?H 53E3uHHu7Ht$0H5DG*HD$(L Q5H 5D$ TvHT$@HHy>H|$8HL$@A6HL$0H 5L 5HL$(AHH4D$ &HuH|$0H5A<fAHt$hH|$pH\$`HPA_H\$ LD$HL$UVWATAUAVAWHH`E3HHUHLAALeHHHfD9$CufLMfEffEHHfE9$AufDLMHfEfIHfE'yC=4H 5H\$0L 6HL$(H3AD$ HEH9XbPKAZMNAE}HHu4H5L 5HP3HD$(AD$ `HEHE3PHH 貮LHLmPAHHfE9$FuD$EH5Lt$0HD$(Hd$ L 75H2AIAՅuEIHVjAHEHENjPHH $E3LHsLm@ǃHfD$FvKHUDE3I͉|$(Ht$ y+H 5L 4H62HL$(AD$ |HUI{y+H 4L a4H1HL$(AD$ @HtZMNAHٛHMHHt軭H$H`A_A^A]A\_^]LHHIcd$ H4D$0ISIKE3E3ICy;=4H 4L 5HM1HL$(A D$ ]HL$PL 5LH(5HL$PL 75LIEpIFIIFIIFIIF IIF(HL/IN0D/ HHIF8HH<uHH=w^In@LIB<uHHZH2*Hl$0HD$(Hd$ L )Hd'A3;7s8H)A HD$(L i)H"'\$ PZMNAHL\$@I[8Ik@IA_A^A]_^H\$Hl$VWAVH03IL!l$`HMtI3LL$`E3J 8L$`u3H i'AAHL$(D$ L 'H|&HAZMNA3LHHuHm'AIHD$(D$ DD$`3HWDD$`LL$`H׹ 9DE3EHWLHJM;v BIL;rAH(E;snظP~IKA C I0K0A@C@IPKPA`C`IpHHKHuIKHA HC HuZMNAH7H\$PHl$XH0A^_^HHXHPUVWATAUAVAWH@E3MHD!hAMtI3L$E3Z 6$u3H %AHL$(D$ L O&H$cHAZMNA3HHuH%AHD$(D$ D$3HUD$L$HՋoDy4H%L %H+$HD$(AD|$ MH$E3D9mvsHT$8AH}L x%H#AHi(HH%H_(H\$0HD$(L!l$ H$HunH$AD;urH%L %Hs#HD$(AD|$ MuZMNAH.AH$H@A_A^A]A\_^]HG(L $H#HD$0H %AHD$(L!l$ AA+AEH~ONG F O0N0G@F@OPNPG`F`OpHHNHuONHG HF +H\$WH03LL$@E3!\$@K 3V4D$@u0H!#AHD$(|$ L ;#H4"f^H3AZMNAHHuH(#AHD$(D$ DD$@3HtSDD$@LL$@Hӹ yHtZMNAH3HH\$HH0_H\$Ht$WHpH3HHu5HE$L ^$Hg!HD$(NA-D$ HWHL$@LNuHG@A4HD$0H,$HWHL$@LuHG@A;HD$0H,$XHWHL$@LuHG@ABHD$0H/$+HW HL$@LuHtH1L$I[IkIs I{(IA^LI[IkIsI{ ATAVAWH`IcL$E3ICIA!6L,I!sMDHcE3ɺIC͂؅y3H.A HD$(L 6.H\$ |HL$0qHuH-A HHHuH-A" 뛊HL3HHuH&A* vHhpHD$HE3HGPHD$8AhHGHeH%HL$HHHD$0HG@vHEHfA HqHD$0HA苄$fAAADaEňAHH H`HHH@L=uPHd$ HL$HDE33b~؅y.H,L ,HoHD$(MAe \$ _0xG8AH~HL$0HtHt HL\$`I[ Ik(Is0I{8IA_A^A\H(B0HBHLE33IIPN~H(@VHH3H3H$Hd$@HHu5H(L -+HHD$(NA7D$ HD$@E3E3HD$8d$0D$(D$ hyH 'AAoHL$@LD$XHT$HA(D$ }yH *AM9HL$@d$xLD$XHT$HA(D$ }y3H 'A[Ht$0HL$(L I*HD$ H|$@t HL$@QH$H3HĐ^H\$Hl$Ht$WH`3HHf9)uHHAf9(u?9h u:Hy A$HD$(Hl$ L HMHAf9(u9h tH A.`HHuH AVOHD$(D$ HCHP`HtHHL$0Lu7H AeHD$(L HHl$ 2HCHHt HL$0LcuHp Aq릉.ZMNAH~L$`I[IkIs I_HHXHhHp WAVAWH@H3HPHpjL5D~xsHL$p{L M AHHD$pIHD$0H AHD$(Ht$ H\$8HB l$0HD$(L  AIAHt$ HL$pHt}Hu2H@ L Y KHD$(AI։t$ VsHHH yH_@HCHGtBt)H_HCHG HCHHO0HCHH`HO(JHCHH0HHHHOH_HCHH0HHG HCHH`HO(HCHH0HHHO0HGHAHD$0HIHD$(LAHt$ xHG HD$0HLHD$(AIAHt$ JHG0LHD$0H{A HD$(IAHt$ HG(HD$0HLHD$(A IAHt$ H K@xH\$`Hl$hHt$xH@A_A^_HHXHhHpHx =[.E3@EڅtP\$(AH-D.H @@8tu'8Tu!D8DuDD;rD;Lv;r;\v AD;sAH\$Hl$Ht$H|$ AHHXHhHpHx ATAVAWHPHL2@2;HH[H@8{C C Ds@D{<u @< u*@(< u@ <u@CH:DCSH <*C7H- HDKEΉD$ D|$HDt$@HkLd$8L HHl$0H9Fhu$HJ AHD$(Hd$ 3H AHD$(Hd$ @{HC @C L\$PI[ Ik(Is0I{8IA_A^A\HHXHhHpHx ATAVAWH@E,$AEDDh3҅t1HL AHD$(HT$ H ?ndr+É+H H+l$8DdD|Dttl Ht$0HD$(HT$ HL AH\$`Hl$hHt$pH|$xH@A_A^A\LSVWATAUAVAWH H+H3H$LL$PMDH3A[3ICICACf$3DCVIJDDDA9^t:AHFHD$(Dt$ AZL OH 3H$H$f$xXD3H$*D3HD$xH$f$$AF$AF$AF$HD$PH$H$H$fDŽ$ EFAAF$Ƅ$ AɃ逃 $$AV $Aɀ*$$$$$AF $$AD$AF$$E33H$sHF3ҊHLsHHD$XHu#DH HL$(D$ AIAVAVHD$ E3E3HL$PsLHD$`Hu#DH HL$(D$ ADEA3HSsH$HD$xHGHH$HGP3HG0HG8H__DH_hG_@eH%HHHFHAAH$HAHH HHH$HH@7-u HHGhD HD$XAE"H rOCHHHHHFHA(HFHH`HL$PHHT$hHF HH`HL$pHHD$`[E~A+A;HrHD$(H\$ L A1HtAHHtHFHP`H H AHtHFJ HH HtHF HP`H HHF J HHD$(H\$ L WARHA~UA;~uK艍HF0艍8HNHF(HA`HNAHF0J!HN HF(HA`HN HF0J!AHNHFHD$@HHD$8HL$0HHD$(H\$ L AH.AbHFHHNDHNHD$PHA`HVHD$hJ"HV HD$pHB`HF HT$`J H wQpD$XD"AuH\$ E3E33H$|oExD8$w8$uD$$D$8L$0HHD$(Dt$ L AHG yCH HL$(D$ L AH I3AH|$XLl$`DEuMt IoHt HoAH$H3$H A_A^A]A\_^[@SH@Z0L H y"H^A4HD$(\$ &H\$0A8HD$(Hd$ H@[H\$Ht$WHH#H3H$pHHHL$@E3L 1H u*HH|$0AHD$(\$ HD$hAHD$0HHD$(Hd$ H5G^HH\$PAHLHEHt3HH=aH\$PAHLHEHHL NH HD$(Hd$ A$.3ۋH$pH3>L$I[Is I_@SUAVHHu"H3H$Hd$@EHHu5HL H HD$(MAD$ 蠿HD$@E3E3HD$8d$0D$(D$ Q؅yHA PHL$@Hd$pHd$hWD$XLD$XHT$HA(Dt$xD$ l؅y3HA3Hl$0HD$(L OH \$ H|$@t HL$@WnH$H3HĐA^][LI[IkIsWH@=AHHu6H+AICD$ L 2H]3t:H*H|$0L HD$(Hd$ HA 3AZMNAmHHuHAHD$(D$ dH H HxHhpajH @Hu H H H9uHHH|$0L JHD$(Hd$ HAdH a@jH\$PHl$XHt$`H@_HL$WH@HH3H$0D$4D$0f$f$H H$$f$&f$HH$f$f$HH$"f$$f$HH$f$f$HH$0f$2f$HH$HD$HHD$hHD$XHD$@HD$PHD$`HDŽ$HD$xHDŽ$HDŽ$DŽ$D$4H$H3(E3HiH$Mu7HHD$(D$ L AH;kH$$iHD$HH$iHD$hH$hHD$XH$hHD$@H$hHD$PH$hHD$`H|$Htz=tqDHHL$H=;tSH"HD$(HD$ L AHbDHHL$HD$0H|$htz=tqDHHL$h:tSHHD$(HD$ L [AHnDHHL$h`D$0H|$Xtz=tqDHHL$X9:tSHnHD$(HD$ L AH^DHHL$XD$0H|$@tz=tqDHHL$@9tSH HD$(HD$ L WAHjܸDHHL$@\D$0H|$Ptz= tqDHHL$P59tSHHD$(HD$ L AHZDHHL$PD$0H|$`tz= tqDHHL$`8tSHXHD$(HD$ L SAHfطDHHL$`XD$0H=HD$pHH$H$HHD$pH|$ptH$H9D$pr $H$HHH9D$pHHD$(HD$ L AHH=4tEH$H #HHHD$(HD$ L DA"HWɶD$0H=HD$8HHD$xHD$xHHD$8H|$8tH$H9D$8r $H$HHH9D$8H'HD$(HD$ L A:H'H=KtBHD$xH =HH HD$(HD$ L VA@Hi۵D$0D$4H$PtH$PL$0D$4H$0H3wH@_H\$Ht$WH =rH mdtjH _aH=Z@Ht>DGHWHOH?HuH=2HtHZMNAHdHHuH @aH\$0Ht$8H _ÉT$HL$HHUH3H$D$@H$H@HD$HD |E3HT$HHL$PfHD$H=HD$HHD$0HHD$(HD$ L AiH2}HD$H}HD$HHD$0HHD$(HD$ L ^AuHq3H aD$@|$@}2HfHD$(D$@D$ L AH%藳$H$7OH$H3uHĘDD$HT$HL$HXD$@D$DA3HL$h75D$D|$Dt D$p9D$DvAHD$`HD$0HHD$(D$ L A`Hph|D$@ D$@D$@D$D9D$@sD$@L$@HT$`LD$hA 6|HD$`HD$0HHD$(HD$ L XAmH ]HX@SH039>u2H L H HD$(KA D$ /H ^HHHuH ^H0[LD$HT$HL$VWHXD$DD$@=u7HK HD$(D$ L WAH | H|$pu7HLHD$(D$ L A H =3HL$pltBHD$pHD$0HHD$(HD$ L AHy |HD$pHD$0H HD$(HD$ L AH7 詰AHL$p2D$@|$@u7HHD$(D$ L 2A"H WyD$@H$Ht$pD$@HL$pHH HH D$@H$HH<HH HT$xHHH|$pHbyDD$@H$HL$pD$DHD$pHD$0H HD$(HD$ L E AIH jD$DHX_^HHh=BH`H`WL@H ,E3@@0@@]y/H T A+L g HL$(AHHg D$ ڮH%HhH\$Ht$WH03HH9u2H> L H HD$(KAD$ qBH l[He H9pt HHu HtHH 7ZHt$HH\$@H0_̈L$HXD$0eH%HD$@H7HL$@HHHD$8H=u5H6HD$(HD$ L QAH4 覭dHD$8D$4[L$4;t4H4HD$(D$ L A HUHD$8L$`D$0D$0HXHhD$@D$DHD$HHD$P<6=u7HHD$(D$ L .A)HaӬHD$(HD$HHD$ E3HZLH 8\D$@|$@}7HHD$(D$@D$ L A:H_eHL$H3Zt8HHD$(HD$ L sADHLGHH Yu7HHD$(D$ L ANHQëD$DLD$P3H YD$@D$@D$0HsHD$(HD$ L AVHc|$@}4HiHD$(D$@D$ L AZH*3HeHD$(HD$ L PA^H|$Dt H XH|$Ht HL$HcZHhLL$ DD$HT$HL$VWHhD$TD$DD$PD$HD$L=su7HHD$(D$ L 6 AHKA3H$5,D$L|$Lu7H HD$(D$ L AHFD$LD$0H HD$(HD$ L AHB贩D$D D$DD$DD$L9D$Ds@D$DH$D$@D$DH$D$AD$@L$A;t D$DD$P묃|$Pu8H HD$(HD$ L  AHnD$PD$0H HD$(HD$ L AHjܨAT$PH$*D$H|$Hu7Hg HD$(D$ L s AH舨D$HD$0Hh HD$(HD$ L 3 AHHD$HH$H$D$HD$0H5 HD$(HD$ L A HD$HH$HH H H D$HH$Hs H<HD$TD$THh_^H\$WH@Hd$X=yHu7HL HHD$(A/D$ NHT$Xu>HH|$0L HD$(HA9D$ H\$X`H SH\$XH DH;u H H #H9tHHH9xt HHuHHH AISHtGHCL H HD$0H>AhHD$(Hd$ _ZMNAHUH\$PH@_HT$HL$H(= u HL$8HT$8HL$0TEH(HT$HL$H(= u HL$8HT$8HL$0HH(HL$HXD$@HD$H=u7HNHD$(D$ L AH HT$HHL$`uH$HD$XH"HL$`HA0H6A 2HAH*AfGfGHT$HHBHLD$pHLELBHBHH`HT$hHHEH[MuHAAVA@ZHtoBsM3H$!MHT$pH$蔽L Hu)HHD$(D$ A肙H$HD$0HHD$(H\$ AOH$HJH$LIB8uIHRH$iH9\$hM3H$LMHT$hH$迼L H u)H.HD$(D$ A識H$HD$0H(HD$(H\$ A zH$HcH$H80uLFHkH$9HHD$(D$ L AHM3Lt$xD2HAHD$(D$ L HїMtZMNAIjGAH$H3YH$0HA_A^A]_^@SH0AD "BLHA*؅y0HL HHD$(A\$ 83ۋH0[@SH HHL$0HD$0#/L$0 H [H\$WH0d$@HDBHIHA @ I0H0A@@@IPHPA`@`IpHHHIuIHA @ I0H0A@HL$@@@)L$@؅y.H&L OHxHD$(A:\$ +H\$HH0_H\$Ht$WH@Hd$PE33EHHTHHu4HkL $DGzHD$(HO\$ 迕HCHL$PAHHL$8Hd$0HE3HD$(HD$ X؅y4AH.H|$0HD$(L HAH\$ EHL$PH޲HVHL$PHtDHt$`H\$XH@_H\$WHpHtH3H$`HHL$03A(HBHL$0E3蓸u0HL )HHD$(A8\$ 腔eHGHL$XDB~IA HI0@ A@H0IP@@A`HPIpI@`IHHuHD$@3HH$`H30VH$Hp_HHXHpWH@H`H HHPR؅y6HL L$0HD$(HA\$ 蘓D$PHt$`H\$XH@_HHXHpWH@H`HHHHE3Ai1؅y6H"L ;L$0HD$(H[A\$ D$PHt$`H\$XH@_HHXHpWH@H`HHHHE3A1؅y6HL L$0HD$(HA.\$ 菒D$PHt$`H\$XH@_@SH HQ3ɻ33ɅEًH [@SH0Ht%A tLD$(DALʋQ D$ 苾2HL H6HD$(AvD$ H0[@SH Hf3҅t %ЋH [/H\$Ht$WHH HHT$@@؅y6HL L$0HD$(HA\$ NIHL$@LLǺ؅y.HL HPHD$(A\$ L$I[IsI_HHXHhHpWHpH HPI}؅yHA|$0H|$`H\$Xt[Ht$3HuL/H*HHt$3HuL3H9HaDN NDFVAɉL$ NlHL$0LL3^؅y.HA HD$(L H\$ ڏL\$pI[IkIs I_̋Q A4/H(b0Hb8H3=3H(HHXHhHp HHWATAUAVAWH@E3LD`>IHET$L-HbHu(HvAHD$(|$ MADqIwD$pY tsw r^utHmHu8l$0H;"HD$(|$ AM薎 HA@ ; ; g ,   t t> vHMA)HD$(ALd$ HH*HMMAHD$(ALd$ 辍VLHHMAHD$(ALd$ 腍HHHMAHD$(ALd$ SHoHSMAHD$(ALd$ $HdHMAHD$(ALd$ HHu5HMAHD$(ALd$ ɌLL$pLAH>H\MA2HD$(ALd$ 荌H́$ f( (, 0 4 tu8 t;< HMAmHD$(ALd$ HqRHMAeHD$(ALd$ HH HCMA\HD$(ALd$ 贋HHHMASHD$(ALd$ 肋HHKHMAKHD$(ALd$ PHH@MABHD$(ALd$ !HH[HMA:HD$(ALd$ HHT)HMAuHD$(ALd$ 轊HA` ;D iH (L P T tzX tC\ HMAHD$(ALd$ /LD$pHHdHMAHD$(ALd$ H`5HXMAHD$(ALd$ ɉJH MAHD$(ALd$ 蜉HHMAHD$(ALd$ mHHHjMAHD$(ALd$ ;HsD$pHMA}HD$(ALd$ HJCDHAWd 7   tz tY t8 t#\$0HEA HD$(D$ WD%IHAD0HAH{MAHD$(ALd$ HH FH MAHD$(ALd$ ڇAs&HAHHD$(D$ 6JfC)D%JHAHD$(MALd$ tADD$pHIHDD$0MG8HD$(AM͹A0Ld$ 43I5L\$@I[8Ik@IsHIA_A^A]A\_H\$UVWATAUAVAWH$`HHfH3HH5LLHD$hHCHL$tE33AHD$XD$`D$PAD$pH 3AXL%HD$0HD$(L HlAMALl$ L%-HL$p5D$HD$xL$@D$8D$tEuD$0HL HD$(HAALl$ ˅HH $HHfD9,AuEH 3E3DLHu2HL LHHD$(ANA\$ iIHT$`HZ2؅y3HAHD$(\$ L HP"HHfD9,puAH 3fDE3CHHuHFAHD$(D$ HT$PH1؅yHFAdIIKt&y@I8LIHKtH ؂H 5IMAIEHtHEHH3.FH$HĠA_A^A]A\_^]H\$Ht$UWATAVAWHH`3HH DcDCdEH]0BHH@#GL5L=y&HDCKHD$(MID$ gHAMHD$0HAHHD$(IH\$ 5H1t%HoMA(HD$(IAH\$ tuH8H(Hd$8LD$8>y3HL$8>HD$8H(@USWHHH cHe He0He(HLE HZ[HEEBD$>y3H L AHHL$(D$ D{HHH=~HD$(Hd$ ALH׹ {HM =LHׅyH AHAHD$(Hd$ zHM(=yH LAHDHM(E3E3 )HM HeHeD$8dHEHEHE(LEHEHHU0HD$0HE3HD$(HE0HD$ E@)=LHׅyH $AHBAHD$(Hd$ y3 HE HHE0H={uHM0Ht<HM HtE<HĀ_[]LI[UVWHHH3HD$x3ICMCICDKHH\$P\$TI[D$ <H|$hDDC3AZMNAH;HHtiH\$@H\$8HD$PHD$0DKLD$XHHD$(H|$ ;x|$PuDCHWHTAZMNAHH`;HL$xH3:H$HĀ_^]@SH0H'D LCHd$ H0[H\$Ht$WH@H'ËH|HT$pDËLDH|\$8Ht$0HD$(Hd$ L H,AwH\$PHt$X3H@_HHL$0HL HD$(Hd$ HA|wHH3H\$WH@d$h=>IHL Hu-HA:T$0HD$(Hd$ HnwI@8HuHADHD$8T$0HHD$(Hd$ H*AHvHS8LD$h[tK|$huDHC8L HHD$8Hv|$0HD$(Hd$ AMC@"lvH\$PH@_LI[IkIsWH@3IH9 L u-HHyKICAD$  vHT$0HHGHD$(AH\$ uDLGHt$ $L -Hu+HH|$0AHD$(D$ u1AD$8HH|$0HD$(H\$ WuHl$XHt$`H\$PH@_LI[IkIsI{ AVH@3L9-ެu4HkL HMICMAD$ tHHH9hf9(HD$0HL WHD$(HAHl$ tD LC3ҋLt$ L Hu+HwH\$0AHD$(D$ 1tfAAD$8HjH\$0HD$(Hl$ t2HL H:HD$(AD$ sHtH<5H\$PHl$XHt$`H|$hH@A^@USVWATAUAVAWH$XHHH3HH3EMDDHD$PHD$@D$\c 9HD$`D$Xu7HAHD$(D$ L HQrHT$@IA"yH A&HL$(D$ HL$@HL$@Ht @"H!t$@HT$Hx3HD$PHu8Hl\$0L HD$(HL$ HA?\r>H9L$Hu!H]AEHD$(HL$ $HHH9D$HH+D$HH=-1~H;AQH3A?HL$p3A -AvH-A_HD$(D$ D$XHL$|MIDd$pDt$tD$x3HD$`HLD$pHEH IHT$PHD$0HD$\A HD$(HHD$ ^4yH ApHL$(D$ HtHT$PHtvHL$@Ht HH3 3HĨA_A^A]A\_^[]H\$WH@H@3HD$8D$0BD7HL$0Hu4HL AjHD$(D$ H^p\H @L HyH ArHL$(D$ HAvHD$(H\$ pH\$PH@_H\$Ht$WATAUAVAWH`ML3ۉ\$@3H$\2DH\$HH\$PDH\$XD $AEDkA;BI $Hu0HHD$(H\$ L DC>H+A?oJLHD$XHu4H%HD$(D$ L EGFHAOnID$HtoHHHtfft^E3E3-LHD$HHu4HHD$(D$ L jEFVHANnID$0H$F.3E3IOM-HHD$PHu3HHD$(D$ L DGeHO.n9HfHy7H|$0H HL$(D$ L AmHAHmtMIVHQyD$ WcHL$HHD$@E3E3HD$ =tH KAFoT$@AH !EH!HHuHIANHD$(D$ 9DL$@HL$HHD$@LNjHD$ -y.H *AVHL$(D$ L HMbH|$Ht HL$HHH$pH3$L$IkIs I_@SH03HD$HLD$PDKS\$HHD$ y.H L HHL$(KAD$ a H9\$PE؋H0[LI[IsWHIcD$X0IcWIcHEEЋD$xMKMCEIKA҉D$pI{M؅y3AH^*|$0HD$(L HAH\$ FaHD$@HL$I[IsI_LI[WHIcD$P0WIcIcD$pEEиEMKMCAI{D$h؅y1A=H|$0HD$(L HQAHʉ\$ `H$HĀ_HHXHhVHPH` `HPɻH@ig%t<|$`t5H)L RHHD$(Hd$ A `7AHL$xE؅y H)AHD$(\$ HL$x3ku tHA뼅H t$0L HD$(Hd$ H#A__HL$xLD$@3a ؅y4Ht$0L YHD$(HA \$ _0H AHD$(Hd$ L H^H|$xt HL$xTHl$pH\$hHP^HHXHhHpHx AVH@3HHHDHf9BuHu7HALHD$(D$ L HRT^E33E3H#HuHAXHD$(D$ H43AZMNA HHuHpDEfHD$(D$ j3A4HDuHf9~uL}HMHL2H ;Hb #AtH>Ht$0HD$(L HVAHH\$ T]Hl$XHt$`H|$hH\$PH@A^H(=~tFH ~ =~t0ZMNAH  ~H~H ~ HuH(H8=Q~urH%W~H`~LA~H 3HQ~HB~| y1AH;L dHD$(Hd$ AHH^e\ }H8H\$Hl$Ht$WH03H9}tBH=}H-}H;t/9_uHWHL$  HL$ H[#uH?ѻHl$HHt$PH\$@H0_LI[IkIsWAVAWHpE3H@D9$AG@EDHAH6L9z,fD9:"D$@0M{AىD$XISWD$`MCH́?< ؅Eu6Ht$0HiEG4HD$(\$ L %H.[E33H#HHuHt$0H>DG@HD$(D$ H3 ؅y5HCALH|$0HD$(L H\$ ZYLD$@?Hj ؅y@HATAH@L YHD$(AHHYD$ (ZHtHL\$pI[ Ik(Is0IA_A^_LIKUSVWHHxH3H"I{HEHICM0IKHMHM؉M8M@HML HKAEY!\$ HME3E3Hy6H H|$0L HL$(HvKAD$ @YDM8HME3HE8APHD$ )=#dE8Y3AZMNAHEHuHYAHD$(D$ 7DM8HM8LHL$ HMȺL HyH 9A#HL$(D$ HEA+@D$8H(H|$0HD$(H!\$ PXHE؋xHMee@HE@E3HD$(d$ E3!=t=#M@AZMNA3HHHMHE@LHD$(E@E3׉D$ :V HNE3E3HEHHE(DF E3HHAfA`HHHUHgHUHRx\HFt,ZMNAHHM3H!uH3H\$0HZAHD$(D$ H A~HL$(D$ H AvHL$(D$ HUAnHD$(D$ jH AaHD$(D$ N|$0H AUHL$(D$ L H|NVoHYAMHD$(D$ L oHHV;HM(L QH*HL$8H |$0HL$(AED$ U}0\yHM(AHL$0H ,D0HAHD$(L$ L H~UHMHtHtZMNAHHEHtZMNAHHEHtHHtHHx_^[]HHXHpWH0LH3E3!X3H=u}D$Htu3AZMNAHHu2HL ~HHD$(KAD$ TrDD$HLL$HHHTyVHA HAHD$(L Ho|$ =TyHtZMNAH3Ht$PHH\$@H0_HHXHhVWATAVAWHPE3HPMD`AHHLHfD9$BufHT$@E3fD$@ffD$BH$HD$(Dd$ =td=#t]L H=4u#H|$0HAHD$(Ld$ uHAHD$(\$ ;S$3AZMNAHHu:HAH|$0HD$(L \$ HRDH$HT$@LHD$($DIωD$ ؅yH*AI6L\$PI[0Ik@IA_A^A\_^HHXHpHxUHhHHHME&(HEE3HHuHA-HD$(D$ mHHM/E'HEHEGHHHEHHM'H]?uH]HEׅy.H AIHL$(D$ L cHQH9[L$IsI{ ËI[I]H8=HzD$ *,HD$(tG%H= tHL$ 7Ht H Ѓ%҈ dĈuH8H(=uvH(HHXHhHpHx AVHPDH"H=JD$@HH0HD$HHH;ӋXӋX w5HH|$0L )HD$(Hd$ DCoH3(PH 0E3E3HHu3H!L DF|HD$(HND$ O;E3E3HHhL Hy%H AHL$(D$ OHHt$0AHD$(Hd$ eO3E@HcHspH L4H ݶ3AHIE3HHIHHH^HυrIHcHrHL$@H2u4HHt$0L HD$(Hd$ HAN3HHl$hHt$pH|$xH\$`HPA^HH L EAHD$(D$ HKH\$Hl$WH@Hڽ-҅=υu2HAHD$(Hd$ HL uMdD tHA tuHB H@u  (HJH,KH@t6D$0AH0HD$(Hd$ L Hg\MՋT3H\t=|$8L D$0HHHD$(Hd$ ALxaH;uH|$0HA]$ t uGA AHL 2HHD$(Hd$ LHC HC 0 ,H\$PHl$X3H@_H\$WH = nE3H n9 txAH8IcHdrH m m@ mHcHdr%mLk8H3H8IA4DB2-H m@uH\$0H _HHXHpHx UATAVHHHH3HE3H=}HLt$HD$`EfH|$hLt$@At;D$0HlAHD$(D$ L HKZHHL$HE3E3Dt$ (yH\$0H dAHL$(D$ HL$HLL$@AHy H|$0H [AHL$(D$ nHD$@xt7HUAHD$(D$ HL fJP wHFAHD$(Lt$ E3^H\$8H;Ɖt$0HD$(L iHALt$ Dt$PLt$XIE33E3HHHHL$PAHH3ADD$PHT$XHHHL$pE3oH]HE3HE3tHE3IdMHu>HL wHHD$0HDAHD$(D$ HHL$P H` HD$@DƋP HH HHHL$HHT$`HL$HHt"HL$@Ht+ HH3 L$I[(Is0I{8IA^A\]HHXWH`L@HP3E3HHXu5HDCqHD$(L HD$ HH=Lt'=t=dtH}AHD$x-HL$xfx-AH|H|$0L HD$(H\$ H AyGH\$pH`_H\$WH0Hd$PLtFtdtkDÍSHFH,H6DÍSHq,,fGe6HHD$(D$ L AH"F\$PH\$@H0_H(=)ht$ t uH H uH(H\$Ht$WH0H~3HH;sgV@x u4HiA8HD$(L HD$ E2Hc_<HH, uHmA@HcYH L HyHA,UH A1HD$(Hd$ CdH8HHXHpWH 3H9dXtcHt^L@SF9\$@uJH djHdD;2tH8HcHdr HtH NdA5Ht$8H\$0H _@SHPHH3HD$HIXHT$0E3HE3tNHL$03,t>Hu2HL .HHD$(A(D$ AHL$HH3 HP[H\$ UVWATAUAVAWHHHCH3HEE3IHDeLeELeDeH,IEt$AIA֋IsL-Ht=L9gt7fD9't1HqH|$0HHD$(MA]AELd$ AHND=Lt=dt =HNLMLEHU5D9%bHUHMEHMHk8HibHu3HA~MHD$(HD$ c@utHNu.H6AHMAuHAE)HMAH}D9%wD9%wE HUHHM:HH;FHU<D9eu}HMAMͅuHAHEt'HAH|$8\$0HD$(Ld$ ? H\$0AHD$(Ld$ >HMHtnHMH3H$HĀA_A^A]A\_^]H\$Ht$WH0HH3ۉ\$@HH;sxSu2HHD$(D$ L AwHKM>K8HvHD$(D$ L RA}H>\$@GfFH\$HHt$PH0_ffH; YuHfuHH8L =L.Hd$ Hѹ%%l%N%%%T%%0%%%%%%t%f%X%J%<%.% %%%%%%%%%%,Unable to disasm 0x%Ix => res == DECRES_INPUTERR || DecodedInstructionCount == 0Disasm..\..\..\..\KernelLibs\DiStorm3\disasm.cStopOnBranch is TRUE and there is not enough instructions%s %sDisasmSize is less than min sizeBYTE WORD DWORD QWORD TBYTE DQWORD YWORD DB LOCK REP REPNZ , ;TAKEN ;NOT TAKENBuffer can not be nullHlpAllocateUnicodeString..\..\..\..\KernelLibs\HelperFunctions\HelperFunctions.cNot enough memoryCan not allocate unicode string %wZHlpMatchUnicodeStringCan not upcase %wZCan not allocate buffer for wide stringHlpUnicodeStringToWideStringHlpAllocateAnsiStringCan not allocate ansi string for %sHlpContainsTextAPath is nullHlpGetProcessImagePathNtOpenProcess failed!ZwQueryInformationProcess failed!Can not allocate memory for bufferZwQueryInformationProcess failed 2nd time\SystemRootERROR: ZwCreateFile failed!Cannot allocate bufferHlpGetSystemRootPathERROR: ObReferenceObjectByHandle failed!ERROR: ObQueryNameString failed!Current process %sHlpPrintCurrentProcessNameCan not open process id %dHlpIsCriticalSystemProcess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nknown DriverDEBUG[%s] INFOLOGWARNINGSPECIALEXCEPTIONERRORERROR_CRITICALUnknown[%s(%i)] %s():, GetExceptionCode()=0x%.8X, NTSTATUS=%s(0x%.8X) - :%wZ, %s,line=%i, pid=%d,tid=%d%s waiting for flusher %d System low on resourcesFlusher woke upZwCreateFile failed!Flush error %xCan not get system root path\Can not append \ to pathCan not append %ls to pathCan not create flusher threadCan not reference flusher threadLog file initialized %wZWait for threadWait completedAuthentication Manager is already initialized!ZmnAuthInitializeAuthentication\AuthenticationManager.cCan not register ZmnAuthProcessCallbackProcess callback detected an authenticated process is terminating...ZmnAuthProcessCallbackLast auth process terminated, real time protection disabledPID %d CreatedI am alive :) beat beat beat... PID %dZmnAuthSetProcessLastBeatAuthentication Manager is not initializedZmnAuthRegisterProcess%d is already registeredCan not lookup process by id %dCan not get process name for pid %dProcessID %d ProcessName %s registered to #%d slot / total %dZmnAuthUnregisterProcessUnregistered process %d - %sg_Engine.RegisteredProcesses.Count %dZmnAuthIsRegisteredProcessIdDeleteFile %lsZmnClnDeleteFilesProcessorCleaner\Cleaner.cDeleteService %lsZmnClnDeleteServicesProcessor\Registry\Machine\System\CurrentControlSet\services\Can not allocate unicode string for delete service entry %lsCan not append %wZ to %wZCan not delete service key %wZCopyFile %lsZmnClnCopyFilesProcessorCan not clone entry buffer %ls|Can not find position of |SourcePath: %ls -> DestinationPath: %lsCan not copy file %ls -> %lsCan not query key value information for %ls valueZmnClnProcessEntriesCan not allocate failed entries bufferEntry %lsCan not set delete failed entriesCan not delete value\Registry\Machine\System\CurrentControlSet\services\ZAM_BootCleanerCan not open boot cleaner keyZmnClnRunCleanerFailedDeleteFilesDeleteFilesFailedCopyFilesCopyFilesFailedDeleteServicesDeleteServicesCan not calculate volume path length for file path %wsZmnIoCreateFileBypassFiltersDiskReader\IoManager.cCan not allocate volume path buffer for %wsCan not get a handle to volume %wsCan not reference object by handleCan not create file %wZCan not get system module information sizeZmnIoGetModuleInformationListCan not alocate buffer for system module informationZmnIoGetModuleInformationByAddressZmnIoGetModuleInformationByNameCan not get system module information (2nd call)Module %s ?= %sFound kernel image %sCan not find system moduleZmnIoGetDriverObjectInformationFound driver object module %sNot enough buffer for image pathDriverObjectInfo->ModulePath %sCan not get system module listZmnIoIsFileSystemDriverHookedSuspicious NTFS CreateRoutine detected in %sSuspicious NTFS ReadRoutine detected in %sSuspicious NTFS WriteRoutine detected in %sSuspicious NTFS DirectoryControlRoutine detected in %sFixed dispatch routine %d 0x%llx of %llxZmnIoFixDriverDispatchRoutines00000\GLOBAL??\PhysicalDriveCan not allocate unicode stringsZmnIoGetDeviceObjectForPhysicalDriveCan not convert disk number integer to unicode stringCan not append drive number to symbolic linkUnable to open symbolic linkCan not alocate unicode string for symlink targetCan not allocate symbolic link targetCan not query symlink targetSymbolic link target is %wZCan not get device object for %wZTDL3 infection on miniport deviceZmnIoScsiGetMiniportInfectionTypeTDL4 infection on miniport deviceCan not get system module info listMiniport->StartIo points to invalid memory!Miniport->ScsiHandler points to invalid memory!Top level device object 0x%I64xZmnIoScsiGetMiniportForPhysicalDriveMiniport device object for PhysicalDrive%d is 0x%I64xCan not get miniport deviceZmnIoScsiGetMiniportInfoMiniport->pRealDevice = %I64xMiniport->pRealDriver = %I64xMiniport->pRealScsiHandler = %I64xMiniport->pRealStartIo = %I64xSCSI Operation failedZmnIoScsiReadWriteIoCompletionRoutineSCSI Operation completed with NTSTATUS %XHighOffset is not NULL!ZmnIoScsiReadWriteDiskCan not allocate IRPException occured while trying to lock pagesUsing Cloud Miniport Information for Miniport Hook BypassUsing Old Tactics for Miniport Hook BypassCalling Driver Object 0x%I64x Scsi Dispatch @ 0x%I64x with DeviceObject 0x%I64xsrb.ScsiStatus->0x%x srb.SrbStatus->0x%xAlready protected sectorsZmnIoScsiProtectSectorsProtected sector range 0x%X - 0x%XWRITEREADALLOWED %s REQUEST => THREAD 0x%x Sector 0x%x - L%dZmnIoScsiNeutralizeOperationBLOCKED ENEMY WRITE REQUEST => THREAD 0x%x Sector 0x%x - L%dZmnIoOpenPhysicalDriveDrive symlink is %wZCan not open physical drive by ZwOpenFileFile path is NULLZmnIoSetFileAttributesCan not open file for read write attributes %lsCan not set file attibutes %lsZmnIoDeleteFileDeleteFile - %lsCan not allocate file path stringCan not set file attributes %lsZwDeleteFile %XCan not delete fileCan not create destination file %lsZmnIoCopyFileCan not open source file %lsCan not reference file by handle %lsCan not get file size %lsFile size is too bigCan not allocate buffer for source file data %lsCan not read file data %lsCan not write to destination file %lsCan not find port driver %sZmnIoScsiSaveMiniportFixFound port driver with name %sSaved miniport fixZmnIoRemoveReadOnlyZwQueryInformation file failed for %lsCan not get volume deviceCan not get IoGetDeviceAttachmentBaseRefCan not reference directory objectZmnIoQueryDirectoryFileWait failedCan not initialize hook managerZmnHmInitializeHookManager\HookManager.cHook manager is not initializedZmnHmAddInlineHookAlready hooked function %llxCan not allocate inline hook structureAdded hook %llxZmnHmIsInlineHookedZmnHmGetNumberOfInlineHooksZmnHmRemoveInlineHookFunction %llx is not hookedRemoved inline hook %llxUnhooking %llx - Bytes %dZmnHmUnHookFunctionInlineInternalZmnHmUnHookFunctionInlineThis function is not hooked by meFunction at address 0x%llx is UNHOOKED successfully!ZmnHmHookFunctionInlinepFunction is NULLFunction %llx is already hooked!Hook function inline %llxCan not disassemble functionFunction at address 0x%Ix is HOOKED successfully!Can not fix inline hook at address %llxZmnHmFixInlineHookFixed inline hook at address %llxIofCallDriverIofCompleteRequestIoCallDriverIoCompleteRequestNtOpenProcessNtQuerySystemInformationCan not get module information for kernel imageZmnHmCheckAndFixCriticalKernelFunctionsINLINE HOOK -> IofCallDriverINLINE HOOK -> IofCompleteRequestINLINE HOOK -> IoCallDriverINLINE HOOK -> IoCompleteRequestINLINE HOOK -> NtOpenProcessINLINE HOOK -> NtQuerySystemInformationPOINTER HOOK -> pIofCallDriverPointer hook pIofCallDriver fixed!POINTER HOOK -> pIofCompleteRequestPointer hook pIofCompleteRequest fixed!Busting rootkit watchdog routine @ %llxZmnHmExQueueWorkItemHandlerRootkit watchdog neutralized :)Can not set Watchdogs Killed eventZmnHmPrepareBypassTrampolineCan not disasm provided prologue until first branchFirst branch instruction offset is %dLooks like there is no infection on the handlerBytes to clean RAW is %dCan not convert raw byte count to instruction aligned countBytes to clean ALIGNED is %dCopied %d bytes of prolog to bypass routineZmnHmNeutralizeWatchdogsCan not reference event object by handleWatchdogs already neutralized...Can not hook ExQueueWorkItemWatchdogs neutralized wait result %XWait for watchdogs neutralized failed...Watchdogs neutralizedOffsetPreviousMode is not set yet...ZmnHmKeSetPreviousModeUnexpected previous mode value foundZmnHmZwQuerySystemInformation calling Nt* routineZmnHmZwQuerySystemInformationZmnHmZwQuerySystemInformation calling Zw* routineZmnHmZwOpenProcess calling Nt* routineZmnHmZwOpenProcessZmnHmZwOpenProcess calling Zw* routineRequest %wsIoctlCreateFileBypassFiltersIoctlHandler.cRequest %SIoctlCheckDriverDispatchRoutinesCan not allocate unicode string for driver name %SCan not reference driver object %wZOpened driver object %wZCan not get driver object informationIoctlFixDriverDispatchRoutinesCan not get miniport information for disk number %dIoctlScsiReadCan not read disk via SCSICan not get miniport informationIoctlScsiWriteCan not open drive %dIoctlOpenPhysicalDriveCan not get kernel image informationIoctlGetKernelImageInformationCan not get miniport information for drive number %dIoctlDumpMiniportInformationCan not get driver name for miniport driverDriverExtension->AddDevice is NULL for miniport objectCan not get system module information listCan not find AddDevice driver nameAdd Device Path:%sSCSI handler VA is NULL!Can not find scsi handler moduleScsiHandler Path:%sCan not find start io handler module baseStartIo Path:%sException while handler informationCan not check critical kernel functionsIoctlFixCriticalKernelFunctionsEnum process modules by id failedIoctlEnumProcessModulesRequest %lsIoctlCreateKeyCan not convert %ls to UNICODE_STRINGCan not open registry key %lsCan not open process %dIoctlOpenProcessCan not open thread %dIoctlOpenThreadCan not convert value name %ls to unicode stringIoctlDeleteValueCan not delete value %wZpRequest is invalidIoctlQueryDirectoryFileDriverInitMain.cSystem Root Path %wZDriver verifier is active\DosDevices\ZemanaAntiMalware\Device\ZemanaAntiMalware\DosDevices\B5A6B7C9-1E31-4E62-91CB-6078ED1E9A4F\Device\B5A6B7C9-1E31-4E62-91CB-6078ED1E9A4FUnable to create DeviceObject %wZUnable to create symbolic linkZAM Driver initialized :) PID %dZAM Guard initialized :) PID %dZAM_EarlyBootZAM_GuardZAM Driver - v%d Loaded :):)DriverEntryVersion Info %d.%d ServicePack %d.%d*Can not allocate early boot patternCan not append early boot to *Can not allocate zam guard patternCan not append ZAM guard to *ZAM_Guard.krnl.traceZAM.krnl.traceZAM Driver Unloaded!%sDriverUnloadIO Stack Location is NULLDeviceIoControlHandlerProcessID %d is not authorized to send IOCTLs IOCTL_CREATE_FILE_BYPASS_FILTERSIOCTL_CHECK_DRIVER_DISPATCH_ROUTINESIOCTL_FIX_DRIVER_DISPATCH_ROUTINESIOCTL_REGISTER_PROCESSIOCTL_SCSI_READIOCTL_SCSI_WRITEIOCTL_OPEN_PHYSICAL_DRIVEIOCTL_GET_KERNEL_IMAGE_INFORMATIONIOCTL_DUMP_MINIPORT_INFORMATIONIOCTL_FIX_CRITICAL_KERNEL_FUNCTIONSIOCTL_DELETE_FILEIOCTL_ENUM_PROCESSESIOCTL_ENUM_PROCESS_MODULESIOCTL_CREATE_KEYIOCTL_DELETE_KEYIOCTL_PROTECT_REGISTRYIOCTL_SAVE_MINIPORT_FIXIOCTL_TERMINATE_PROCESSIOCTL_OPEN_PROCESSIOCTL_BLOCK_UNSAFE_DLLIOCTL_GET_DRIVER_PROTOCOLIOCTL_DELETE_VALUEIOCTL_QUERY_DIRECTORY_FILEZAM Guard enabledZAM Guard disabledSend system informationSend Sys Info size mismatchIOCTL_OPEN_THREADEnabled RT protectionDisabled RT protectionUnknown IOCTL code provided 0x%XResponse size %d*_avast_*competitorZmnMfPostCreateCallbackMiniFilter\MiniFilter.cException while accessing bufferZmnMfPreWriteCallbackNew client %d connected to comm port %dZmnMfOnPortConnectport disconnect %dZmnMfOnPortDisconnectProcess %d is exitingZmnMfProcessNotifyExNo command line for process %dNew process %d started with cmdline %wZProcess %d blocked %wZPsSetCreateProcessNotifyRoutineExCan not get ps create notify routine ex addressZmnMfSetProcessCreateNotifyRoutineRegister ex routineNotifyRoutineEx registered\GLOBAL??\ZAM_MiniFilter_CommPortMini filter registration failed :(ZmnMfInitializeMini filter registered :)Can not start filtering :(Filtering startedFltBuildDefaultSecurityDescriptorCan not create communication portComm port createdMinifilter not initializedZmnMfDestroyZmnMfSendMessageCan not get process object from pidNo clients are connected from session %dNo heart beats yet...Last beat is bigger than intervalData size is bigger than message data sizeCan not send messageZmnMfScanProcessInUserModeByIdCan not get process path from processScan file in user mode %wZCan not send scan process message for %wZScan result for %wZ - %dZmnMfScanProcessInUserModeByCommandLinepInfo->Object = NULLZmnNrRegistryCallbackMonitoring\NotifyRoutines.cCan not get name information for registry objectCan not convert UNICODE_STRING to ZERO terminated UNICODE_STRINGCan not allocate full path for registry keyCan not append slash to full path %wZCan not append value name to full path %wZ - %wZProtected registry value [%wZ] SET VALUE blocked!Exception in registry callbackZmnPhOpenProcessProcessHelper\ProcessHelper.cCan not open thread id %dZmnPhOpenThreadCan not get system processes information sizeZmnPhEnumProcessesRequired size for Processes is %dCan not alocate buffer for system process informationZwQuerySystemInformation -> ProcessesAndThreadsInformation failedProcess count is %dNot enough slots for processes, provided pid count is %dZwQueryInformationProcess failedZmnPhIsWow64ProcessCan not query process informationZmnPhGetPebOpen Process for PID %d failedZmnPhEnumProcessModulesByIdCan not get process PEB address %dCan not reference process object by handleInvalid address detectedException while traversing module listCritical process termination attempt blockedZmnPhTerminateProcessByIdCan not open process with TERMINATE accessCan not terminate processWait for Process %d startingWait for process %d failedCan not get os version informationZmnPhGetProcessPathCan not get process information sizeCan not allocate unicode stringCan not get process informationZmnPhGetParentProcessIdCan not registry Registry CallbackZmnPrInitializeProtectedRegistry\ProtectedRegistry.cpPath is both NULLZmnPrAddEntryCan not allocate unicode string for key pathCan not allocate list head for protected registry entriesAdded new protected registry entry %lsProvided key path is NULLZmnRegCreateKeyRegistryHelper\RegistryHelper.cCan not open key %wZCan not convert unicode string to WCHAR* %wZCan not create registry key %lsCan not open key %lsCan not allocate buffer for %ls value informationZmnRegQueryValueKey%ls value not foundZwQueryValueKey returned unknown status codeCan not read %ls valueCan not get name lengthZmnRegGetNameInformationCan not allocate object name informationQueryNameString failedCalled for %wZZmnRegDeleteKeyZwQueryKey failedCan not allocate Key Full Information bufferZwQueryKey failed (2nd time)KeyPath %wZ has %d subkeysZwEnumerateKey failed for sub key %d of %wZCan not allocate memory for basic infoZwEnumerateKey failed (2nd time) for %dCan not convert sub key name to unicode stringCan not allocate unicode string for merging sub key name to key pathCan not append slash to SubKeyPathCan not append SubKeyName to SubKeyPathDeletion of sub key %wZ failedCan not delete key %wZ*Embarcadero*ALLOW, because dwProcessId=%d <= 10ZmnPgIsOperationAllowedSelfGuard\ProcessGuard.cCan not allocate unicode string for suspect processHlpGetProcessImagePath failed!Current process %wZHlpAllocateUnicodeString failed!%wZ is not allowed to open a registered processProcess guard is disabledALLOW, because KeGetCurrentIrql() != PASSIVE_LEVELBlocked TERMINATE access to ZAMZmnPgOpenProcessObjectPreCallbackHandle is kernel handle for PID %dPID %d is allowed to open PID %d with terminate accessProcess id %d wants to open itselfObRegisterCallbacksCan not find address of ObRegisterCallbacksZmnPgBlockOpenProcess6481620Can not register object callbacksObUnRegisterCallbacksSelf guard is already initialized!ZmnSgInitializeSelfGuard\SelfGuard.cCan not register ZmnNrLoadImageNotifyRoutineRegistered ZmnNrLoadImageNotifyRoutineCan not register ZmnSgLoadDriverNotifyRoutineRegistered ZmnSgLoadDriverNotifyRoutineCan not get OEP of imageZmnSgBlockDriverUnknown machine format for driverBlocked driver at image base %I64xBootBlockBlock drivers can not be run in DriverMode %dZmnSgBlockBootDriversCan not openearly boot driver key %wZCan not read value of %lsType of boot block value is not REG_MULTI_SZBootBlock value is emptyBoot block value %d. %lsCan not block boot driver %spDosHeader HlpIsUserModePointerValid failedZmnSgGetArchitecturepNtHeaders32 HlpIsUserModePointerValid failedZmnSgGetImageSignatureCan not block driverZmnSgLoadDriverNotifyRoutineLoad image %wZZmnSgLoadImageNotifyRoutineCan not read DLL OEP bytesCan not block executablePID %d - Blocked executable %wZPID %d - Blocked real time threat %wZPID %d - Blocked real time threatZmnSgReadOEPProbeForWrite failedZmnSgBlockExecutableT$HL$H(H | &H &H &H &H {&H o&H c&H W&H K&H ?&H 3&H x'&H l&H `&H T&H H%H <%H 0%H $%H %H %H %H %H %H %H %H s%H g%H [%H O%H C%H 7%H |+%H p%H d%H X%H(HT$HL$H(H g$H +$H $H $H $H $H $H $H $H z$H n$H b$H V$H J$H >$H 2$H w&$H k$H _$H S$H G#H ;#H /#H ##H #H #H #H #H #H #H ~#H r#H f#H Z#H N#H B#3H(HT$HL$H(H O#H c#H W#H K"H ?"H 3"H '"H "H "H "H "H "H "H "H v"H j"H ^"H R"H F"H :"H ."H s""H g"H [ "H O!H C!H 7!H +!H !H !H !H !H !H !H !H z!3H(HT$HL$H(H V!H J!H >!H 2!H w&!H k!H _!H S!H G H ; H / H # H  H  H  H  H  H  H ~ H r H f H Z H N H B H 6 H {* H o H c H W H KH ?H 3H 'H H H 3H(HT$HL$H(H H H vH jH ^H RH FH :H .H s"H gH [ H OH CH 7H +H H H H H H H H zH nH bH VH JH >H 2H w&H kH _H SH GH ;3H(ZmnHmScsiHookHandlerTrampolineZmnHmStartIoHookTrampolineZmnHmScsiHookBypassTrampolineZmnHmStartIoHookBypassTrampolineZmnHmExQueueWorkItemTrampolinelW@vZ>(vVB, 2J`x,:Jl2Rhx&4Pl 0L\l&<Nfx,D^n~ ,>^rp`H.xh\D,"WEz`_HV3k2]X: @9iX_HV3 UNDEFINEDADDPUSHPOPORADCSBBANDDAASUBDASXORAAACMPAASINCDECPUSHAPOPABOUNDARPLIMULINSOUTSJOJNOJBJAEJZJNZJBEJAJSJNSJPJNPJLJGEJLEJGTESTXCHGMOVLEACBWCWDECDQECWDCDQCQOCALL FARPUSHFPOPFSAHFLAHFMOVSCMPSSTOSLODSSCASRETLESLDSENTERLEAVERETFINT 3INTINTOIRETAAMAADSALCXLATLOOPNZLOOPZLOOPJCXZJECXZJRCXZINOUTCALLJMPJMP FARINT1HLTCMCCLCSTCCLISTICLDSTDLARLSLSYSCALLCLTSSYSRETINVDWBINVDUD2FEMMSNOPWRMSRRDTSCRDMSRRDPMCSYSENTERSYSEXITGETSECCMOVOCMOVNOCMOVBCMOVAECMOVZCMOVNZCMOVBECMOVACMOVSCMOVNSCMOVPCMOVNPCMOVLCMOVGECMOVLECMOVGSETOSETNOSETBSETAESETZSETNZSETBESETASETSSETNSSETPSETNPSETLSETGESETLESETGCPUIDBTSHLDRSMBTSSHRDCMPXCHGLSSBTRLFSLGSMOVZXBTCBSFMOVSXXADDMOVNTIBSWAPROLRORRCLRCRSHLSHRSALSARFADDFMULFCOMFCOMPFSUBFSUBRFDIVFDIVRFLDFSTFSTPFLDENVFLDCWFXCHFNOPFCHSFABSFTSTFXAMFLD1FLDL2TFLDL2EFLDPIFLDLG2FLDLN2FLDZF2XM1FYL2XFPTANFPATANFXTRACTFPREM1FDECSTPFINCSTPFPREMFYL2XP1FSQRTFSINCOSFRNDINTFSCALEFSINFCOSFIADDFIMULFICOMFICOMPFISUBFISUBRFIDIVFIDIVRFCMOVBFCMOVEFCMOVBEFCMOVUFUCOMPPFILDFISTTPFISTFISTPFCMOVNBFCMOVNEFCMOVNBEFCMOVNUFENIFEDISIFSETPMFUCOMIFCOMIFRSTORFFREEFUCOMFUCOMPFADDPFMULPFCOMPPFSUBRPFSUBPFDIVRPFDIVPFBLDFBSTPFUCOMIPFCOMIPNOTNEGMULDIVIDIVSLDTSTRLLDTLTRVERRVERWSGDTSIDTLGDTLIDTSMSWLMSWINVLPGVMCALLVMLAUNCHVMRESUMEVMXOFFMONITORMWAITXGETBVXSETBVVMRUNVMMCALLVMLOADVMSAVESTGICLGISKINITINVLPGASWAPGSRDTSCPPREFETCH PREFETCHWPI2FWPI2FDPF2IWPF2IDPFNACCPFPNACCPFCMPGEPFMINPFRCPPFRSQRTPFSUBPFADDPFCMPGTPFMAXPFRCPIT1PFRSQIT1PFSUBRPFACCPFCMPEQPFMULPFRCPIT2PMULHRWPSWAPDPAVGUSBMOVUPSMOVUPDMOVSSMOVSDVMOVSSVMOVSDVMOVUPSVMOVUPDMOVHLPSMOVLPSMOVLPDMOVSLDUPMOVDDUPVMOVHLPSVMOVLPSVMOVLPD VMOVSLDUPVMOVDDUPUNPCKLPSUNPCKLPD VUNPCKLPS VUNPCKLPDUNPCKHPSUNPCKHPD VUNPCKHPS VUNPCKHPDMOVLHPSMOVHPSMOVHPDMOVSHDUPVMOVLHPSVMOVHPSVMOVHPD VMOVSHDUP PREFETCHNTA PREFETCHT0 PREFETCHT1 PREFETCHT2MOVAPSMOVAPDVMOVAPSVMOVAPDCVTPI2PSCVTPI2PDCVTSI2SSCVTSI2SD VCVTSI2SS VCVTSI2SDMOVNTPSMOVNTPDMOVNTSSMOVNTSDVMOVNTPSVMOVNTPD CVTTPS2PI CVTTPD2PI CVTTSS2SI CVTTSD2SI VCVTTSS2SI VCVTTSD2SICVTPS2PICVTPD2PICVTSS2SICVTSD2SI VCVTSS2SI VCVTSD2SIUCOMISSUCOMISDVUCOMISSVUCOMISDCOMISSCOMISDVCOMISSVCOMISDMOVMSKPSMOVMSKPD VMOVMSKPS VMOVMSKPDSQRTPSSQRTPDSQRTSSSQRTSDVSQRTSSVSQRTSDVSQRTPSVSQRTPDRSQRTPSRSQRTSSVRSQRTSSVRSQRTPSRCPPSRCPSSVRCPSSVRCPPSANDPSANDPDVANDPSVANDPDANDNPSANDNPDVANDNPSVANDNPDORPSORPDVORPSVORPDXORPSXORPDVXORPSVXORPDADDPSADDPDADDSSADDSDVADDPSVADDPDVADDSSVADDSDMULPSMULPDMULSSMULSDVMULPSVMULPDVMULSSVMULSDCVTPS2PDCVTPD2PSCVTSS2SDCVTSD2SS VCVTSS2SD VCVTSD2SS VCVTPS2PD VCVTPD2PSCVTDQ2PSCVTPS2DQ CVTTPS2DQ VCVTDQ2PS VCVTPS2DQ VCVTTPS2DQSUBPSSUBPDSUBSSSUBSDVSUBPSVSUBPDVSUBSSVSUBSDMINPSMINPDMINSSMINSDVMINPSVMINPDVMINSSVMINSDDIVPSDIVPDDIVSSDIVSDVDIVPSVDIVPDVDIVSSVDIVSDMAXPSMAXPDMAXSSMAXSDVMAXPSVMAXPDVMAXSSVMAXSD PUNPCKLBW VPUNPCKLBW PUNPCKLWD VPUNPCKLWD PUNPCKLDQ VPUNPCKLDQPACKSSWB VPACKSSWBPCMPGTBVPCMPGTBPCMPGTWVPCMPGTWPCMPGTDVPCMPGTDPACKUSWB VPACKUSWB PUNPCKHBW VPUNPCKHBW PUNPCKHWD VPUNPCKHWD PUNPCKHDQ VPUNPCKHDQPACKSSDW VPACKSSDW PUNPCKLQDQ VPUNPCKLQDQ PUNPCKHQDQ VPUNPCKHQDQMOVDMOVQVMOVDVMOVQMOVDQAMOVDQUVMOVDQAVMOVDQUPSHUFWPSHUFDPSHUFHWPSHUFLWVPSHUFDVPSHUFHWVPSHUFLWPCMPEQBVPCMPEQBPCMPEQWVPCMPEQWPCMPEQDVPCMPEQDEMMS VZEROUPPERVZEROALLVMREADEXTRQINSERTQVMWRITEHADDPDHADDPSVHADDPDVHADDPSHSUBPDHSUBPSVHSUBPDVHSUBPSFXSAVEFXRSTORXAVELFENCEXRSTORMFENCESFENCECLFLUSHPOPCNTBSRLZCNTCMPEQPSCMPLTPSCMPLEPS CMPUNORDPSCMPNEQPSCMPNLTPSCMPNLEPSCMPORDPSCMPEQPDCMPLTPDCMPLEPD CMPUNORDPDCMPNEQPDCMPNLTPDCMPNLEPDCMPORDPDCMPEQSSCMPLTSSCMPLESS CMPUNORDSSCMPNEQSSCMPNLTSSCMPNLESSCMPORDSSCMPEQSDCMPLTSDCMPLESD CMPUNORDSDCMPNEQSDCMPNLTSDCMPNLESDCMPORDSDVCMPEQPSVCMPLTPSVCMPLEPS VCMPUNORDPS VCMPNEQPS VCMPNLTPS VCMPNLEPS VCMPORDPSVCMPEQPDVCMPLTPDVCMPLEPD VCMPUNORDPD VCMPNEQPD VCMPNLTPD VCMPNLEPD VCMPORDPDVCMPEQSSVCMPLTSSVCMPLESS VCMPUNORDSS VCMPNEQSS VCMPNLTSS VCMPNLESS VCMPORDSSVCMPEQSDVCMPLTSDVCMPLESD VCMPUNORDSD VCMPNEQSD VCMPNLTSD VCMPNLESD VCMPORDSDPINSRWVPINSRWPEXTRWVPEXTRWSHUFPSSHUFPDVSHUFPSVSHUFPD CMPXCHG8B CMPXCHG16BVMPTRSTADDSUBPDADDSUBPS VADDSUBPD VADDSUBPSPSRLWVPSRLWPSRLDVPSRLDPSRLQVPSRLQPADDQVPADDQPMULLWVPMULLWMOVQ2DQMOVDQ2QPMOVMSKB VPMOVMSKBPSUBUSBVPSUBUSBPSUBUSWVPSUBUSWPMINUBVPMINUBPANDVPANDPADDUSBVPADDUSWPADDUSWPMAXUBVPMAXUBPANDNVPANDNPAVGBVPAVGBPSRAWVPSRAWPSRADVPSRADPAVGWVPAVGWPMULHUWVPMULHUWPMULHWVPMULHW CVTTPD2DQCVTDQ2PDCVTPD2DQ VCVTTPD2DQ VCVTDQ2PD VCVTPD2DQMOVNTQMOVNTDQVMOVNTDQPSUBSBVPSUBSBPSUBSWVPSUBSWPMINSWVPMINSWPORVPORPADDSBVPADDSBPADDSWVPADDSWPMAXSWVPMAXSWPXORVPXORLDDQUVLDDQUPSLLWVPSLLWPSLLDVPSLLDPSLLQVPSLLQPMULUDQVPMULUDQPMADDWDVPMADDWDPSADBWVPSADBWMASKMOVQ MASKMOVDQU VMASKMOVDQUPSUBBVPSUBBPSUBWVPSUBWPSUBDVPSUBDPSUBQVPSUBQPADDBVPADDBPADDWVPADDWPADDDVPADDDFNSTENVFSTENVFNSTCWFSTCWFNCLEXFCLEXFNINITFINITFNSAVEFSAVEFNSTSWFSTSWPSHUFBVPSHUFBPHADDWVPHADDWPHADDDVPHADDDPHADDSWVPHADDSW PMADDUBSW VPMADDUBSWPHSUBWVPHSUBWPHSUBDVPHSUBDPHSUBSWVPHSUBSWPSIGNBVPSIGNBPSIGNWVPSIGNWPSIGNDVPSIGNDPMULHRSW VPMULHRSW VPERMILPS VPERMILPDVPTESTPSVPTESTPDPBLENDVBBLENDVPSBLENDVPDPTESTVPTEST VBROADCASTSS VBROADCASTSDVBROADCASTF128PABSBVPABSBPABSWVPABSWPABSDVPABSDPMOVSXBW VPMOVSXBWPMOVSXBD VPMOVSXBDPMOVSXBQ VPMOVSXBQPMOVSXWD VPMOVSXWDPMOVSXWQ VPMOVSXWQPMOVSXDQ VPMOVSXDQPMULDQVPMULDQPCMPEQQVPCMPEQQMOVNTDQA VMOVNTDQAPACKUSDW VPACKUSDW VMASKMOVPS VMASKMOVPDPMOVZXBW VPMOVZXBWPMOVZXBD VPMOVZXBDPMOVZXBQ VPMOVZXBQPMOVZXWD VPMOVZXWDPMOVZXWQ VPMOVZXWQPMOVZXDQ VPMOVZXDQPCMPGTQVPCMPGTQPMINSBVPMINSBPMINSDVPMINSDPMINUWVPMINUWPMINUDVPMINUDPMAXSBVPMAXSBPMAXSDVPMAXSDPMAXUWVPMAXUWPMAXUDVPMAXUDPMULLDVPMULLD PHMINPOSUW VPHMINPOSUWINVEPTINVVPIDVFMADDSUB132PSVFMADDSUB132PDVFMSUBADD132PSVFMSUBADD132PD VFMADD132PS VFMADD132PD VFMADD132SS VFMADD132SD VFMSUB132PS VFMSUB132PD VFMSUB132SS VFMSUB132SD VFNMADD132PS VFNMADD132PD VFNMADD132SS VFNMADD132SD VFNMSUB132PS VFNMSUB132PD VFNMSUB132SS VFNMSUB132SDVFMADDSUB213PSVFMADDSUB213PDVFMSUBADD213PSVFMSUBADD213PD VFMADD213PS VFMADD213PD VFMADD213SS VFMADD213SD VFMSUB213PS VFMSUB213PD VFMSUB213SS VFMSUB213SD VFNMADD213PS VFNMADD213PD VFNMADD213SS VFNMADD213SD VFNMSUB213PS VFNMSUB213PD VFNMSUB213SS VFNMSUB213SDVFMADDSUB231PSVFMADDSUB231PDVFMSUBADD231PSVFMSUBADD231PD VFMADD231PS VFMADD231PD VFMADD231SS VFMADD231SD VFMSUB231PS VFMSUB231PD VFMSUB231SS VFMSUB231SD VFNMADD231PS VFNMADD231PD VFNMADD231SS VFNMADD231SD VFNMSUB231PS VFNMSUB231PD VFNMSUB231SS VFNMSUB231SDAESIMCVAESIMCAESENCVAESENC AESENCLAST VAESENCLASTAESDECVAESDEC AESDECLAST VAESDECLASTMOVBECRC32 VPERM2F128ROUNDPSVROUNDPSROUNDPDVROUNDPDROUNDSSVROUNDSSROUNDSDVROUNDSDBLENDPSVBLENDPSBLENDPDVBLENDPDPBLENDW VPBLENDVWPALIGNRVPALIGNRPEXTRBVPEXTRBPEXTRDPEXTRQVPEXTRD EXTRACTPS VEXTRACTPS VINSERTF128 VEXTRACTF128PINSRBVPINSRBINSERTPS VINSERTPSPINSRDPINSRQVPINSRDVPINSRQDPPSVDPPSDPPDVDPPDMPSADBWVMPSADBW PCLMULQDQ VPCLMULQDQ VBLENDVPS VBLENDVPD VPBLENDVB PCMPESTRM VPCMPESTRM PCMPESTRI VCMPESTRI PCMPISTRM VPCMPISTRM PCMPISTRI VPCMPISTRIAESKEYGENASSISTVAESKEYGENASSISTPSRLDQVPSRLDQPSLLDQVPSLLDQLDMXCSRVLDMXCSRSTMXCSRVSTMXCSRVMPTRLDVMCLEARVMXONWAITMOVSXDPAUSERAXRCXRDXRBXRSPRBPRSIRDIR8R9R10R11R12R13R14R15EAXECXEDXEBXESPEBPESIEDIR8DR9DR10DR11DR12DR13DR14DR15DAXCXDXBXSPBPSIDIR8WR9WR10WR11WR12WR13WR14WR15WALCLDLBLAHCHDHBHR8BR9BR10BR11BR12BR13BR14BR15BSPLBPLSILDILESCSSSDSFSGSRIPST0ST1ST2ST3ST4ST5ST6ST7MM0MM1MM2MM3MM4MM5MM6MM7XMM0XMM1XMM2XMM3XMM4XMM5XMM6XMM7XMM8XMM9XMM10XMM11XMM12XMM13XMM14XMM15YMM0YMM1YMM2YMM3YMM4YMM5YMM6YMM7YMM8YMM9YMM10YMM11YMM12YMM13YMM14YMM15CR0CR2CR3CR4CR8DR0DR1DR2DR3DR6DR7_HV3k2]X: @9iX_HV3_HV3k2]X: @9iX_HV3_HV3k2]X: @9iX_HV3_HV3k2]X: @9iX_HV30w,aQ mjp5c飕d2yҗ+L |~-d jHqA}mQDžӃVlkdzbeO\lcc=  n;^iLA`rqgjm Zjz  ' }Dңhi]Wbgeq6lknv+ӉZzJgo߹ホCՎ`~ѡ8ROggW?K6H+ L J6`zA`Ugn1yiFafo%6hRw G "/&U;( Z+j\1е,[d&c윣ju m ?6grWJz+{8 Ғ |! ӆBhn[&wowGZpj;f\ eibkaElx TN³9a&g`MGiIwn>JjѮZf @;7SŞϲG0򽽊º0S$6к)WTg#.zfJah]+o*7 Z-ZAMv1.exeU_HV3k2]X: @9iX_HV3U_HV3k2]X: @9iX_HV3U_HV3k2]X: @9iX_HV3U_HV3k2]X: @9iX_HV3U_HV3k2]X: @9iX_HV3U_HV3k2]X: @9iX_HV3DX5O!P%@AP[4\PZX54(P^)7CC)7U@@\@ZMNAhs@Ps@@_HV3k2]X: @9iX_HV3U_HV3k2]X: @9iX_HV3U_HV3k2]X: @9iX_HV3_HV3k2]X: @9iX_HV3U_HV3k2]X: @9iX_HV3_HV3k2]X: @9iX_HV3U_HV3k2]X: @9iX_HV3q@\SYSTEM32\CSRSS.EXE\SYSTEM32\SMSS.EXE\SYSTEM32\WINLOGON.EXE\SYSTEM32\SERVICES.EXE\SYSTEM32\SVCHOST.EXE\SYSTEM32\LSASS.EXE\SYSTEM32\USERINIT.EXE\SYSTEM32\LOGONUI.EXE\SYSTEM32\MSTSC.EXE\SYSTEM32\CTFMON.EXE\SYSTEM32\SPOOLSV.EXE\SYSTEM32\NVSVC32.EXE\SYSTEM32\MSIEXEC.EXE\SYSTEM32\TASKHOST.EXE\SYSTEM32\SEARCHINDEXER.EXE\SYSTEM32\CONSENT.EXE\SYSTEM32\LPKSETUP.EXE\SYSTEM32\LSM.EXE\SYSTEM32\TASKENG.EXE\SYSTEM32\WININIT.EXE\SYSTEM32\SLSVC.EXEU_HV3k2]X: @9iX_HV3H@@@RSDS!?>BOYZ:\Zemana\Projects\AntiMalware\bin\zam64.pdb2 !d!4! p Pdp* 4' p`Pd 4 p `P T 4 2 p `Bd42 p d T 4 2p20 4 p ` Pt d4Vt d T 4 R  t4  4 2p4t d T 4 R d T 4 rp  t d 4RVZ'[.[ td4P p`0P4p`P *0d@- O p`0Pd`r0b d T 42p20- td4Pd  0Vטט dT4pd 4R p  4 rp  4 2p dT42p! !4!p`P  4 rp td 4  dT 4 rp T4r p `$ $4.$&p`P d140. p 4 p`P' $ p`00F dT 4 rptdT 4 r td T4tdT4 tdT4 T 4 R p ` 4rp ` P T4 d4 p P$ d4430 pdp P0d `d  4 RptdT4 d0T/4.,pd42 pp`p`   Hpd0p`B"3d  B t d 4 r( d=4<6 pdd 4 r pd4 p dT4p 41 .pd`& 4f^ p`m   d4 r pd 4 r p dT 4 pR0 td420   d T 4 rp d4 p P0 4>4 p`Pdp0P8b t d T 4 r-  p`0Pd 4 p `Pdxd 4 r p d 4 r pVpp  4 rp  d4 pV$'' d4 p T 4 r) d p )++  4 pT4  `4p$ d4T30 pdp  d p d T 4Rp dT4p T4 p `d 4R p p ` 0P :tdT 4 T 4 r p td4P  4 RpVLMM d 4 R pVUVV3 "tc"db"4a"\Pd( 4 p`Pdpd 4R pd42 p0dH  4 p  4 2pb20B t dT42  `d`dd@     @@@@ @AC@H   !      @ @  A B   !  @ @  ` `         ! #       !#     !#   $ $ $ $!$#$   ) ) ) )!)#). 3 3 3 3!3#38 = = = =!=#=B G G G G!G#GL6Q6Q6Q6Q6Q6Q6Q6Q6V6V6V6V6V6V6V6V6666666666666666[b* h o;8{;8{7;7;( ( ( ( ( ( ( ( ( ( ( ( ( ( ( (         * #6#6#6#6#6#6#6#6& !1!2#!1#278'78'87- 87-!#!83 #837!9 7#9!8? #8?55555555!6!6!6!6!6!6!6!6 E E% J% OT[" b" bhot" z#9$( $( $( !$!$) ) & ( ;!;$!;$;   &&&#&+&1&9`>E''''&J&Q&X&_(f(p)y* * * * * * * * * * * * * * * * &) &) &) &) &) &) &) &) &) &) &) &) &) &) &) &) **** *** *'*-*3*:*@*G*M*T*[+ , &a* h. / &r0 w* u0 0 1% 0 1% 1% * 2 &90 ) * 2 0 0 2 -036363636363636364 444$4)434=5G4 444$4)434=5G6 666$6)636=7G4 844$8)438=5G9:::::::::::::::::::3:3:3:3:3:3:3:3:3:3:3:3:3:3:3:3:4:4:4:4:4:4:4:4:4:4:4:4:4:4:4:455555 555 ;>;>;>;>;>;>;>;>;>;>;>;>;>;>;>;>;=;=;=;=;=;=;=;=;=;;=;=;=;=;=;=;> ;> ;> ;> ;> ;> ;> ;> ;>;>;>;>;>;>;>;>;>;>;>;>;>;>;>;>;> ;> ;> ;> ;> ;> ;> ;> 5'5,515*75*?;=';=';=';=';=';=';=';=';=F;F;=F;=F;=F;=F;=F;=F;L;R;X;^;d;j;p;x;;;;;;;;;;;;;;;;;;;;55!5(5/575>5F5M<>U<>U<>U<>U<>U<>U<>U<>U<>]<>]<>]<>]<>]<>]<>]<>]<>e<>e<>e<>e<>e<>e<>e<>e<>n<>n<>n<>n<>n<>n<>n<>n;v5=8555'51<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>;;;<><><><><><><><><><><><><><><><>55555 555 ;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;?;? ;? ;? ;? ;? ;? ;? ;? ;? ;? ;? ;? ;? ;? ;? ;? ;?;?;?;?;?;?;?;?5'=85,515*;=;=;=;=;=;=;=;=;=,;=,;=,;=,;=,;=,;=,;=,;=1;=1;=1;=1;=1;=1;=1;=1;?;;?;?;?;?;?;?;=;;=;=;=;=;=;=55!5(5/575>5F5M;?;;?;?;?;?;?;?;? ; ;? ;? ;? ;? ;? ;? ;;?;;?;?;?;?;?;?;? ; ;? ;? ;? ;? ;? ;? ;?';';?';?';?';?';?';?';?/;/;?/;?/;?/;?/;?/;?/5=8555655<5<>C<>C<>C<>C<>C<>C<>C<>C<>L<>L<>L<>L<>L<>L<>L<>L54T4Y:^:u:c:h54T4Y:^:u:c:h4Q4V4Q4V> ?% > ?% >5n5t5y=55>'>'>'>'@A=*<p<p<p<p<<&&=:x<x<:x<:x<x <x&<:x,<<:x4B=BE=*`M=*`WCC@hbCC@`iCC@hpCC@`wCC@h~CC@hCC@`CC@`CC@`CC@`CC@`CC@`CC@`CC@`CC@`CC@`CC@`CC@`CC@`CC@`CC@`CC@` CC@hCC@`*ID($*ID0,*GD(4*HD0;*DI($*DI0,*DG(4*DH0;*.D0u*HD8}*HD8*D.(m*D.0u)ID()ID0)ID()ID0*.D0& *ID8. *D.( *D.0& =*(_ =*(l =*(x =*( *ID( *ID0 *DI( *DI0 )CD( )CD0 1D( 1D0 *D/( *D/0 *D,X *D.X )H@(( )I@03 1G (> 1H 0I )H@(l )ID0v 1G ( 1H 0 )GD( )HD0 )GD( )HD0 HE ( HE 0 )ID( )ID0$ )GD(, )HD04 )ID(` )GD(i )ID( )GD( )ID( )ID0 )ID( )ID0 )ID( )ID0 )ID( )ID0 )ID( )ID0# )GD(* )HD01 )ID(X )ID0_ )GD(f )HD0m )HD0 )ID0 )GD0 )HD0 )ID0 )ID0 )ID0 )ID() )ID00 )GD(7 )HD0> )ID(e )ID0l )GD(s )HD0z )ID( )ID0 )GD( )HD0 )ID( )ID0 )GD( )HD0 )B@ )ID0)B@ 0)ID00)B@ G)ID0G)C@ ^)ID0^)C@ s)ID0s)C@ )ID0)C@ )ID0)C@ )ID0)C@ )ID0)C@ )ID0)C@ )ID0)C@ )ID0)ID0)ID04*C@ S*ID0g*ID0o)C@ )ID0)C@ )ID0)C@ )ID0& M pM p5)EDX%PEDX,)ID8>)ID8F)ID8`)ID8h*HD0S*@C S*DI0g*DI0o=*=*=*RS PTh8w88) U =.p)ID8)ID8)C@ )ID0)C@ )ID0 )C@ )ID0)HD0))ID0))C@ 8)ID08*DH0SHAD0IHE@0RPA ([PE 0[)C@ p)ID0p)C@ )ID0)C@()ID0)C@ )ID0)C@ )ID0)C@ )ID0)C@()ID0)C@ )ID0)C@()ID0)C@ )ID0)C@ )ID0)C@()ID0)C@(,)ID0,)C@ ?)ID0?)ID0P)HD0[)ID0e*@.(*D/0)C@ )ID0)C@ )ID0)C@()ID0)C@ )ID0)C@ )ID0)C@ )ID0)C@( )ID0 )C@ )ID0)*D8*)C@ 9)ID09)C@ H)ID0H)C@ W)ID0W)C@0f)ID0f)C@ y)ID0y)C@()ID0PA@(PED0)C@ )ID0)C@ )ID0)C@ )ID0)C@0)ID0)C@ )ID0)C@ )ID0 )C@ )ID05*)]*25*:]*B;I^Q;X^`5*g]*o5*v]*~;"v^"~)C@@)ID@)C@@)ID@)C@@)ID@)C@@)ID@)C@@)ID@)C@@)ID@)C@@)ID@)C@@)ID@)C@@)ID@)C@@()ID@()C@@9)ID@9)C@@J)ID@J)IDP)C@@)ID@)C@@)ID@)C@@)ID@)HDH)GDH$)FDH9)HDHN)GDHc)HDHx)IDH)IDH*/DH)IDH)HDH)GDH)FDH)HDH2)GDHG)HDH\)IDPq)IDH)IDH)IDH)IDH)IDH)IDH)IDH)IDH)IDH )IDHM/ p6M/ p>)ID)ID)ID)ID)ID* * P* * PRA =E0RA =E0RA 9=E09RA =E0 RA =E0RA H=E0HRA =E0=E0.!RA W=E0W=E0?!=*P!=*c!=.pv!=.p!=.p! u u%( - l- l4- |- |4DQDBEDQDJEEZSREZS[E,DBE.DJDQDBEDQDJEESZRESZ[ED,BED.JFHD(dmGQDHDQD.EZSEYSED.ED.DXSZDXSZDXSZDXS ZFHD(  GQD8 HB DQDK .EZST ED.B ED.K EZS EZS ESZ ESZ DQD ODQD OES\ ES\ EPNT EPN` EPN EPN EGD EHD EGD EHD IS  IS  DQD< GDQDE HEZSN EZSW DQDr GEZS| DQD GEZS DXS ZDXS ZDXS ZDXS ZDXS ZDXS ZDXS ZDXS ZDXS8 ZDXS@ ZDQDH GDQDP HDXSt ZDXS| ZDQD GDQD HDQD GDQD HE[S EZD EZS EZS EZS DXSE ZDXSM ZDQDU GDQD] HDXS ZDXS ZDQD GDQD HDXS ZDXS ZDQD GDQD HDXS ZDXSZDQD GDQDHDQD$IDQD;IDQDRIDQDhIDQD|IDQDIDQDIDQDIDQDIDQDIDQDIDQDIDQD'IDQD@IJ@ MSJD0MSEODY`EZSwEZSKC@(KID0KID0KID0DIDDIDDIDDQDIDQDIDQDIL NEX%OEDX,DXSNZDXSWZDXSpZDXSyZJ@ MSJD0MSEDOY`EHD`ESZwESZQ+Q+VID(VID0%.7VGD(t}VHD0WXSZ&WXSiZs}WQDGWQDH!+K@(nKD0nXQDvYA (KE 0ZD KID(KID0XXSZXXSZ[0DXSZDXSZDQDIDQDIDQD!IDQD0IDQD@IEDH`ID eDQDyIDQDIDQDIDQDIDQDIDQDIDQDIDQDIDQDIDQDIDQDIDQD$IDQD5IDQDGIEZDoE[S{EZDES\DQDIDQDIDQDIDQDIDQDIDQDIDQDIDQD#IE\S1DQD@IDQDOIDQD^IDQDoIDQDIDQDI\EDDQDIDQDIDQDIDQDIDQDIDQDIDQD!IDQDIDQDIDQDIDQDIDQDIDQDIDQDIDQD IDQDIDQD0IDQDAIDQDTIDXS_ZDXSjZEZSuEZSKIDHJKIDHJKIDHJEZSE,SE.UE/UEIDEIDEIDEHDEGD.EFDCEHDXEGDmEHDDQDIDQDIE/DDQDIDXS\DXS\DX\SDX\SEHDEGDEFD'EHD<EGDQEHDfDQDzIDQDIDQDIDQDIDQDIDQDIDQDIDQDIDQDIDQDIEID)DXSGZWDXSgZwDXSZDQDPDXSZDQDPDXSZDQD PDXS'Z5DQDCPQDXS_ZoDXSZDXSZDQDPDXSZDQDPDXSZDQD#P1DXS?ZMDQD[PiDXSwZDXSZDXSZDQDPDXSZDQDPDXSZ-DQD;PIDXSWZeDQDsPEIDDQDIDQDIDQDIDQDIDZS_DZSjXWUVKIDHDZSKIDH!DZS*KGDH4XQD=GKHDHGXQDPHKIDHZXXScZKIDHmXXSvZKIDHXQDIKC@@KID@XQDIKDHZDLKDHZDM_DHDDOKDHDDKXWUIDUIKDH XQD LKGDH XQD G_DH) 1 XQD9 OB KIDHK XXSQ ZKIDHX XQD^ IKIDHe XQDn IKIDx XQD IXXS ZTXXS ZTXQD IRKIDP DID KIDP DID KIDP DID KIDP DID KID !DID!`EQ`EQ`EQ@`EQ`EQ`EQO`EQ!`EQ6!`EQ^`EQG!a,Y!a,l!                           ! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ @` @a b c d e f g h i j k l m n o p q r s t bbbbu v w x y z { | } ~  b @@ (b0b 8b@b HbPbXb`b h@У` @ dd dddФ e ,8DP\htƀf ƔƠƬƸ $0!?!@!A!B!C!D!E!F!G!H!I!J!K!L!M!N!O!P!Q!R!S!T!U!V!W!X!Y!Z![!\!]!^!_!`!a!b!c!d!e!f!g!h!i!j!k!l!m!n!o!p!q!r!s!t!u!v!w!x!y!z!{!|!}!~!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!ͤ!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!""""""""" " " " " """"""""""""""""""" "!"""#"$"%"&"'"(")"*"+","-"."/"0"1"2"3"4"5"6"7"8"9":";"<"=">"?"@"A"B"C"D"E"F"G"H"I"J"K"L"M"N"O"P"Q"R"S"T"U"V"W"ͼX"Y"Z"["\"]"^"_"`"a"b"c"d"e"f"g"h"i"j"k"l"m"n"o"p"q"r"s"t"u"v"w"x"y"z"{"|"}"~""""""""""""""""""""""""""""""""""""""""ͦ""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""######### # # # # ################### #!#"###$#%#&#'#(#)#*#+#,#-#.#/#0#1#2#3#4#5#6#7#8#9#:#;#<#=#>#?#@#A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#[#\#]#^#_#`#a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r# @ @ @ @ @@s#t#u#v#@@@@@@@w#x#y#@@@@z#{#@@|#}#@@~##@@ @##!@"@#@##$@%@######&@'@##(@)@####*@+@####,@-@####.@/@####0@1@##2@3@##4@5@(4@LXdp|ΈΔΠά $0@?@##@@A@##B@C@##D@E@##F@G@####H@I@J@K@####L@M@N@O@####P@Q@R@S@###T@U@V@####W@X@Y@Z@####[@\@]@^@####_@`@a@b@####c@d@e@f@##g@##h@##i@##j@##k@##l@##m@##n@##o@##p@##q@##r@#s@#t@u@v@w@###x@y@z@{@|@}@~@@@(4@LX##@##@##@#@#@@#####@@##@@@@#@@##$@@$$dp$@$@$$$$ $ $ $@@@@@@@@@@@@@@@@@@@| $ $$@@$$@$$@$$@$$@$$@$$$@$$@$$@ $!$@"$#$@$$%$@&$'$@($)$@*$+$@,$-$@.$/$@0$1$@2$3$@4$5$@6$7$@8$9$@:$;$<$@@@=$>$@?$@$@A$B$@C$D$@E$F$@G$H$@I$J$@K$L$@M$N$@O$@P$Q$@R$S$@T$U$@V$W$@X$Y$@Z$[$@\$]$@^$_$@`$a$@b$c$@d$e$@f$g$@h$i$@j$k$@l$m$n$o$p$q$r$s$t$u$v$w$x$y$z${$@|$}$@~$$@$$@$$@$$@$$@$$@$$@$$@$$@$$@@@@@@@@$@@@@$$@$$@$$@$@$@$@$@$@$@$@$@$@$@@@@@$A$A$A$A$A$A$A$A$A$ A$ A$ A$ A$ A$A$A$A$$AAAAAAAAAAAAAAA A!A"A#A$A%A&A'A(A)A*A+A,A-A.A$/A$0A$1A$2A$3A$$$$4A5A6A7A8A9A:A;AA?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlA$$mA$$nA$$oA$$pA$$qA$$rA$$sA$tA$$uA$vA$wA$xA$$$ @ @ @ @  @P##%%&'%#&'&'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 oK !E!C@`q@%v@(v@Pv@v@v@v@w@8w@hw@w@w@w@ x@Px@x@x@x@y@@y@py@y@@y@2-+] fcd (L,PT{T`{k"8{l""d}"Q(|{T(({(q){)%.{\.//{0/00:D{(vVB, 2J`x,:Jl2Rhx&4Pl 0L\l&<Nfx,D^n~ ,>^rp`H.xh\D,"strstr;wcsstrRtlInitUnicodeStringQRtlCopyUnicodeString?DbgPrintRtlGetVersionKeDelayExecutionThreadsExAllocatePoolWithTagExFreePoolWithTagProbeForRead|ObReferenceObjectByHandleObfDereferenceObjectZwCreateFileZwCloseaRtlUpperStringYRtlUpcaseUnicodeStringPsGetCurrentProcessIdRZwOpenProcessPsLookupProcessByProcessIdzObQueryNameString:FsRtlIsNameInExpressionPsGetProcessImageFileNamesZwQueryInformationProcess__C_specific_handlerstrchr/RtlAppendUnicodeToStringKeInitializeSemaphoreGKeReleaseSemaphoreKeWaitForSingleObjectKeAcquireSpinLockRaiseToDpcHKeReleaseSpinLockPsCreateSystemThreadPsTerminateSystemThreadqZwQueryInformationFileZwWriteFilePsGetCurrentThreadId(ZwDeleteFile_vsnprintfPsThreadTypePsSetCreateProcessNotifyRoutinePsGetProcessSessionId.RtlAppendUnicodeStringToString*ZwDeleteValueKeyZwSetValueKey%towupperRtlIntegerToUnicodeStringKeInitializeEventeKeSetEventKeAcquireSpinLockAtDpcLevelJKeReleaseSpinLockFromDpcLevelMmProbeAndLockPagesIoAllocateIrpIoAllocateMdlIofCallDriverIoFreeIrpIoFreeMdl IoGetDeviceObjectPointerIoGetRelatedDeviceObjecteObCloseHandleObfReferenceObjectZwSetInformationFileZwReadFileXZwOpenSymbolicLinkObjectZwQuerySymbolicLinkObjectIoCreateFileSpecifyDeviceObjectHintIoGetDeviceAttachmentBaseRefFsRtlGetFileSizeZwQuerySystemInformationIoFileObjectType4KeReadStateEventExQueueWorkItemExGetPreviousModeMmGetSystemRoutineAddress#NtOpenProcessZwCreateEventZwWaitForSingleObjectZwSetEventANtQuerySystemInformationExEventObjectTypeNtBuildNumber)ZwDeleteKey~ObReferenceObjectByNameIoDriverObjectTypeMmIsDriverVerifyingIofCompleteRequestIoCreateDeviceIoCreateSymbolicLinkIoDeleteDeviceIoDeleteSymbolicLink+RtlSetDaclSecurityDescriptorMmMapLockedPagesSpecifyCachePsGetProcessId}IoThreadToProcessPsGetCurrentProcessSessionIdZwTerminateProcesswKeStackAttachProcessKeUnstackDetachProcessYZwOpenThreadPsProcessTypeExInterlockedInsertHeadListExInterlockedRemoveHeadList7CmRegisterCallback:CmUnRegisterCallbackVRtlCreateRegistryKeyNZwOpenKey1ZwEnumerateKeyzZwQueryKeyZwQueryValueKeyKRtlUnicodeStringToAnsiStringRtlFreeAnsiStringProbeForWritePsSetLoadImageNotifyRoutinePsRemoveLoadImageNotifyRoutinePsGetProcessSectionBaseAddressMmSystemRangeStartKeBugCheckExntoskrnl.exeFltRegisterFilterFltUnregisterFilterFltStartFilteringFltAllocatePoolAlignedWithTagRFltFreePoolAlignedWithTag\FltGetFileNameInformationFltReleaseFileNameInformationFltParseFileNameInformationFltReadFileFltQueryInformationFileFltCancelFileOpenFltAllocateContextFltSetStreamHandleContextrFltGetStreamHandleContextFltReleaseContext-FltCreateCommunicationPort'FltCloseCommunicationPortFltSendMessageFltBuildDefaultSecurityDescriptorFLTMGR.SYS0 H`4VS_VERSION_INFO?hStringFileInfoD040904E48 CompanyNameZemana Ltd.0FileDescriptionZAMf!LegalCopyrightZemana Ltd. All rights reserved.(ProductNameZAM4ProductVersion2.21.63DVarFileInfo$Translation @ pX`x(08x8 (08@HPX`hpxȦ#0# *H #0#~1 0 +0 +700] +70MFBմ$fڎ`,1(0$ +71g75O8 %g"H{j~8MW9ve !DXVJ&e@>N $Ȥfk?K|c=\ ;4zxB5!ȕtmD;ɜ-Kו&$2Tڎw-2?D,)d U~`ye7wt~Bv}XөJ*s'@m;V xˀa+ n!jxl٢m)z;E,M' ͷ4/%p쭡զmkIjc)̘vgTQRjceNo] aDx"I|狇kcCA(tc)i3ߦgShO;3vzRsS2$3nduXJsc1h45]aK&3r[JcD>i_=-1x.Tc2 c/;vPJd8)R%NeB}us]tH <O{!]/0b5 (#;FO/-ж̧. Jc?_O^yOCEt}:?UuAx@H <+hf5I[Խ2BU7vx7C5HzbEX>XUsjRbO_.m|Ӑ۲Tkx-{Ȯ=g 47k$sW$NJ&=N9zC6< $v%UUF+#׬9F: ~Wi Vh%H9ӌCLf3-a0rnJ,9o8<~Y)c EUPI`.ɘt)j/uL:'EfȧpMةPB`ӻKj|twS? 4N3)%F踹f-Vx1+j: b ?X'Seؾ[wVÍym&Wܐ׹. ޳qwRJ 5Da0Ţnz0!0 + )@z<,kA00W~|NYKw;0  *H 01 0 UZA10U Western Cape10U Durbanville10 U Thawte10U Thawte Certification10UThawte Timestamping CA0 121221000000Z 201230235959Z0^1 0 UUS10U Symantec Corporation100.U'Symantec Time Stamping Services CA - G20"0  *H 0 ITK %y"W*oܸ&Csk¿.PZvC%CE{t"״MD$k_E;DCsi+˙r&Mq1QaSI,xE/W?=ƒJ{3y uAQlie)`; tޒ"t|'JÞ-'}aqPK],e ؖ|NHDD h]jxdE`F~T|yq00U_n\t}?L.02+&0$0"+0http://ocsp.thawte.com0U00?U8060420.http://crl.thawte.com/ThawteTimestampingCA.crl0U% 0 +0U0(U!0010UTimeStamp-2048-10  *H  yY0h O]7_R DnmX|0i#s oG9*ÎY M1\*zzWLey@b%n7j!AW?wI*^8j"Q~0085njP0  *H 0^1 0 UUS10U Symantec Corporation100.U'Symantec Time Stamping Services CA - G20 121018000000Z 201229235959Z0b1 0 UUS10U Symantec Corporation1402U+Symantec Time Stamping Services Signer - G40"0  *H 0 c 9D#DIa Sۭ,Jn"hcSit<üu00#di D@^0  *H 0s1 0 UUS10U  DigiCert Inc10U www.digicert.com1200U)DigiCert High Assurance Code Signing CA-10 141216000000Z 171220120000Z0J1 0 UTR10 UEdirne10U  Zemana Ltd.10U Zemana Ltd.0"0  *H 0 4U26D@"PI&laE 'W,[ڢ07}\^LXdC]l*N6ͨ&_9~@x&ŷhaݢm[QUD\s zW5}T20;SFV#?},|1yjv1 {@ƍ<`sA]5JH\ZP$ꩁWSa*at^@}100U#0HkX#̔.ed0UlyV5[cդ0U0U% 0 +0iUb0`0.,*(http://crl3.digicert.com/ha-cs-2011a.crl0.,*(http://crl4.digicert.com/ha-cs-2011a.crl0BU ;0907 `Hl0*0(+https://www.digicert.com/CPS0+z0x0$+0http://ocsp.digicert.com0P+0Dhttp://cacerts.digicert.com/DigiCertHighAssuranceCodeSigningCA-1.crt0 U00  *H `ԜiGԘ&cd+0U#0b ![Cn TPkҖq0UUN0L0JHFDhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0  *H  Yok-J>uELAPٰ*?SV9jcx$y}G ˽fy <ܬ p?x~K`&sa!hcoٟ'Ml$Ƚ؟{9:$Joz9ad>W8zҵ9ն<}k*LLT hXa`}x!unj*ke--P0x<#gW0S0U0U% 0 +0U 00`Hl00:+.http://www.digicert.com/ssl-cps-repository.htm0d+0VRAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference.0U00+s0q0$+0http://ocsp.digicert.com0I+0=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0U00@><:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@><:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0UHkX#̔.ed0U#0>iGԘ&cd+0  *H I|`|źKdi)ޘ}@f&3/DU5p 4ӮT.ez2 >l&9ǪFfƳtX4uPD}10tkEv3zHo1V+3"DΌʈ> yCCU\, kxwָښL+ݯLҗƮ_D37/V[Ug4l sJ{5xpzKO"6ɏo2|jn4JNh|:oO惾NYlKɓIȔ 0 *H  100r0^1 0 UUS10U Symantec Corporation100.U'Symantec Time Stamping Services CA - G285njP0 +]0 *H  1  *H 0 *H  1 160817170656Z0# *H  106Bo9D^*`0  *H DoG)JT9Sw6aSvl2˩fQtdH nL.=-SX qΦ:P(٨ Z.l̫U/NAN1**h3h**QqO{ҳلؓf-E\9b"gXm~3G