MZ@` !L!This program cannot be run in DOS mode. ${^(^(^(y"(Z(^(6((W(y"(E(y"(Y(y"(_(y"(_(Rich^(PELXP z2`ĘP"as@`l.text[\ h.rdata``@H.data w w@PAGE `INIT .rsrc@B.reloc @Bj,htM]} }ċEEȃe@E̾`EۋEp2(EЅtUۋ`}EPEptmf}5ufEpwWuuuEEԸ9E}t7`u{'Ӌ`uԉwga`EuC'Uۋ`eC E̋w`FjY@}ċG`$@6X @s0`C(S,Ћ`4Sa׋MaEE EL jhtM`E]s&t%CXs #8CP7fU`eEH U B#B`$aEE EM j(htK]} }ȋEEЃe`EۋEp&E̅tUۋ`E̅tsffUf5ubUrwWPuQCEԸ9E}t7`u[%Ӌ`uԉwga`Eu#%Uۋ`eC EЋw`FjY@}ȋG`$@6X @s0`C(S,Ћ`4Sa׋MaEE EdJ ̋UE3jHQPa]jhtK3}E}܋EX(K M;uu PyIU B#<B#B`$a+r`F@uZFHtFHt6Ht&tHVRS3VRS.VRSG2VRS1VRS90uGFt4t"HHtHHu1VRS9%VRS:VRSUVRSw}FjY@} G`$@6X @s0`C(S,Ћ`4Sa׋MaEEEmJ} }tEGE܉G2ҋaj huIEX(K MU B#<B#B`$a{er`FjY@} G`$@6X @s0`C(S,Ћ`4Sa׋MaEE EI j h8u8IMA@HHe]C EU r`FjY@B`$@6X @s0`C(S,Ћ`4SaU MaEEEQu uA* Qu uK"H ̋UE ;u }u ] N|jh Ph@}M̋U}u3CSVWEfpȋ k Mf;uu3fv] ϊT:uGf;r8u3_^[] j hXuGu ~ jh\WtuVu$jhp\WctHt uVu'e]C Ev`FjY@} G`$@6X @s0`C(S,Ћ`4Sa׋MaEE E&G jhxuF3҉UEX(K M;uu P } G#<G#G`$aw`+HH tzUFjY@} G`$@6X @s0`C(S,Ћ`4Sa׋MaEEEBVWS7VWuDu WuVWuVWS)VWSE̋UPSS}~3^[̋UM E@ ]̋UEM +M ʉ] ̋UME Vq;v3AƉQ^]̋UhAstCuj8a]̋Uju4a]̋UVuW} WF >WjPF@ ~ uf_^]̋UVuvf^]̋UE%@]̋UMyVs E t532҄v+SW] :\ t:r‹t5_[^]̋UMyVs E t532҄v+SW] :\ t:r‹t5_[^]̋USVu 3:uj uD;tNHsWPu ;tVFG8vHÍ0JQPE 5%PusPu :r_^[]̋UEM Vt6u;3Ʌ^] ̋UMɡvkDPD@uIu} u kD]̋USjuXju @:[]̋USVuW3WVrWu gEWFPZjVP+E j@PBju 6+>PE u2UWSP >E VuP>E++PPP=E VPS=Wu +uV=vV^%PuME ~uWtuWMEA9EruR 63ɍH8@u rEPgE _[^̋U eSVW=Tt hP.u 9tPtPEP~kEQhbP 9 t.5PEP9 33ۅvb4kL1tL1A<uAC;r3@;v3E3+EEt~WV^<uWV;urE9]rЃ}tEPPWTPy33ۣ҅v84kL15tL1A<uAB;rW5S؄t}uXdE=2$t P %_^[̡uh03Ʌ̋UVt$5 tN5 kXW}jY_2^]̋UVujPjV7 FP3^]̋UeSV5`h]EP֋]EPhnhojjhEPjPSj|5Ep(|hf]EP֍EPEP`} s`^[hhu833M YYA`q PHM+II tIIII@ ;== ==t9= _;W9UN3>?p}9 t;t6P`u+SS5p}a;tP`t 5p}a3u^;tZ`9 tI}XuC;t?V̓u2;t.t;:u `떿 ]h^EP5`֍EPEPhEP`;}5h^EPhEP`p};Pa3SSEPaj8SpP4 DžpcMoCDžt Džxƅ|}~E]]]3}EPEPSjEPj8pPuhf`;u&ЋMauSSSSEP`}ȋM;W`];FEShp}S `1hP`=$'=(=,=0=4W ~`E~;t9Esh6^3Y];;u;t);t( ~;t;t9ErPQV|3 ~3EU~`c!"3T];t;4(2];=~u t;~]؉]rSSh~aE}0sh]2Y#EP`Du N8u`F`H^^θ~;tYA2ai3@Ëeh]#2YE E,=D}r#9T}tu 2PT}u"]M yEA2a4hAVLSh4Nj8auÃ`` NH HH̋UMy t%QVA0W} <2;_^u A A ]̋UMV1Wy ;tQA;։Quay _^]̋UMA +@]̋U${3ʼnEEVu MQMQPEp7|)}r#}uf}uf}uuf2M3^F0̋UEVp3Ʌ~f~tA;ȍt|2^]f>rFWP} fGv_̋U} t:W} 3E@ jh\P_tfxrHu D Pc2]̋Uu `] ̋USVu F03SP`;tT,"ʅɋH`t $QA $YYUY H`$QAqYYY YЋa^[]̋U4SVW3jY}}䫫3}쫫3}E 3f]p@:u+ƍD(fEhAstTPS8a;ÉEu3u EP`jEPEP`u;uh^EPLaEPEP`EP`EMfAEEԍEPhEPEuE@]܉]`u`;^E_^[̋UVu EPE`jEPEP`EMf$AEhAstTPj8auEP`E@WEPuEVjPuaEP`| }t~ }V`_^ ̋U]%a̋UEȀaw]̋USVuW} t&tPR:uFGu߀>u ?u33@_^[]̋UU EV39uvFt :t @;ur8t3^] ̋USVW= aEP3SEPj ]]ׁEhAstTuj8a;t]EPuVj ׅ|F9vBF]EEEuD0 Pt }}C;r iD3 EV`E_^[̋UU f:MZt3yBtU +֊ t :uG@8u387_^]̋UQQUVp@u+ƍH9MEs23A+ȊMUfNjw؊WWF4P~0auua;uu`}뻋MNMNNF MIE H[_^̋UVujPjV&E FFP3^]̋UV5`W3h_EP}}}֍EPEPhEP`;Shb_EP֍EPEWp p,EPjPua;} M`\Ep(PV>WWF4P~0auua;uu`}뻋MNMNNF MIE H[_^̋U39E uW%UVut BFM u9E ^uJz] ̋ V;Wt; AuhAstTWj8atWjVd%fD _^̋UEu P Q H]̋U P ;Ut;u3]̋UE x!tH`IVuN;M@`SW=`ˉE׈EEptPHUˋ`ӍN0׃F(ЍN0V,ӍN039~(u 9~,EtEЍN0Ӏ}t WW4Va_[3^] j hu(&e]C EU r`FjY@B`$@"-X @s0`C(S,Ћ`4SaU MaEE E% ̋UQU S]C Vr`WEFjY}@B`$@6X @`wE -U `fu`uPv `VE G3+Ht~HHt`HtCt$HGtF}Ӌ`]t_E@G gEGeC EU r`FjY@B`$@.3MH @s0`C(S,Ћ`4SaU MaEE E[̋UV39utuE x!tH`It N;M@`SW=`ˉE ׈EE ptPoUˋ`ӍN0׃F(ЍN0V,ӍN039~(u 9~,EtEЍN0Ӏ}t WW4Va_[3^] j hv@e]C EU r`FjY@B`$@5X @s0`C(S,Ћ`4SaU MaEE E ̋UEV0E x!t@`HF;Eu`SW=`^0׃F(Ћ˃V,`39~(u 9~,EtEЋ`}t WW4Vau`_[3^] ̋UE x!t@`HVuF;EuWSW=`^0׃F(Ћ˃V,`39~(u 9~,EtEЋ`}t WW4Va_[3^] j h8ve]C EU r`FjY@B`$@6X @s0`C(S,Ћ`4SaU MaEE EG ̋UQE PV3!u 9utux!tH`It N;Mҋ@`S`W=`E׈EEpEt@,UӃ}te3PM QPPPEp`|/u E6tMAUӋM `uEUӍN0׃F(ЍN0V,ӍN039~(u 9~,EtEЍN0Ӏ}t WW4Va_[3^ j hXve]C EU r`FjY@B`$@8X @s0`C(S,Ћ`4SaU MaEE Ek ̋UE x!tH`IVuN;M@`SW=`ˉE׈EEpt`Uˋ`ӍN0׃F(ЍN0V,ӍN039~(u 9~,EtEЍN0Ӏ}t WW4Va_[3^] j hxv\e]C EU r`FjY@B`$@9X @s0`C(S,Ћ`4SaU MaEE E j4hv]} }ċuhAstXjj8aȉMuw!Ga3`EvQEЅt@tPjEPNUˋ`F@uЅtMQPtẺF fEfF$eC EЋEċp`FjY@}ċG`$@`6MH @s0`C(S,Ћ`4Sa׋MaEE E jhvde`Euv=؅tC,U`C&ft=(tf=uvu vVSkEu 9E*C(tEhAst1hDj8ahDjW w_g v`NWf{&uCp s E `ES4U`}t~fau e]C Ev`FjY@} G`$@6X @s0`C(S,Ћ`4Sa׋MaEE E ̋UM 3e ]̋UM 3e M  M  ]̋U]̋UEwVu wNwNwE .wAwQwQwE .wAwQwQwE .wAwQwQw+^]h@jhx}%~ ̋UVu W}jXtIuv% 7QqqIȍ_^]̋UQSV$W`EEx}M 9uP;Uu }p 3t =~| @MEU`E_^[̋USV$3` ~A ~u3ɉ ~x}Wy tߋUQ U UQUQЋ`_t jS4a^[]̋UQSV$W`E}39~t;lj~~t WP4a>~|ڊUˉ=~`_^[̋UES]D;E v3W}u3}Vtstouh_u_fuSuVr Sj:uRu1fE f=0/t'f=Pt!ft:j FVPa F>uuuV!u +E@^_[]̋UUt0Bt 3Ƀ(Ah~~ ajjh~a]̺~~%$a̋U=`E=~S`3۸~K`09As?h]8cYEPC#`3K8u`2ҋalVW{ PjWuh6GPa0FGEGFG fFfG f$f 3$(,E P`3K8u`=`39E C0C~t%9Et ׋M ~M ~Ћ`2ҋaMEP3SSSh~E `9] Et9]t׊ЋΉ~~`9]_^u80t)E80t~00`E[2 ̋UE @%VP`3~0t(F`pjv U f 2ҋF a^]̋SV5a3WS3G~W~~h~~~(~~~~~~SWh~SWh= _^$[ ̋Ul{3ʼnE=`E S]VW} =~3;9MGtw jQQjQW`3;u E;lj~3;ȉ~{[zw arPЃGtzwarP'jVh_ujVh_jV)jV)|.jh_~ > tF9t > uF9t > uFPVh_tB+|1jpWV'j+WVj+WVtuEPs PM쉍|싅+K$+D0hAst2Pj8aVPuP4a~V QPVƅUt2j4atfC&6fC&`C(9,+C ffCƅt`efeEPs t)fEMfECMtCfMffhPPVvhAst1hDj8a3;uRNA`HFFFF N^V F$+F,~(C F0ffF4<f@[;t`VF8sf9{&u f{$PtfC&3M_^3[̋UH{3ʼnEESVuWEE 3EEG9=`38~8~z;r9]iFtN jSSWSV`;ˋvu @E;Ɖ~ t; A; hAst2V S8a;tVSW/_f wW:tSH9PV .+F9~.u^+VW9QPVWtt4SW4a%A SW4a3M_^3[ `EfEfhSPƅ SSP@؈VہAHhAst1hDS8a;u SW4aUMHP0fUXXXH xp @$X(X,fP4PH8<f@?j(hv\u3;u 1}EE9~F;tK<9;uAMQp Vt1M܉ fEf@F@;tF@fMfvvFPEԄFt ;tf@&E6EEA ;tf@&3ۉ}ЋF;uF ;t H XMЋ~tv WuPv,W~}eFEԃ~ t$`Ev U۹`jV4a39uuC EЋw`FjY@E@`$@6X @s0΋=`׃C(S,Ћ`4SaUMaEȋ]ԅt'C(׈ESUۋ`EENÀ}t s uT9ut!`uӋ`ủwga[̋UQQSV5`W3ۿ~;uP};uMEPSSSWEig8~t_^[̋U`S3Vu;Wf]f]]]tvf} rof94h_EP`EPEPjEP`|9SjEPaEPEPSj0EPSSuhֲ`;uM`2_^[MaM`uSSSSEP`;u}0u}uEȣ494t,E fESEPf]u4EEfFEw; {űUQMj5{5{uh,a%Da%0a%Ha%`%a%`hRd5D$l$l$+SVW{1E3ʼnEPeuEEEEdËM3$̋US] Vs35{WEE{t N3 8N F3 8E@fMUS[ EMt_I[LɍDEEt|E|@GEu΀}t$t N3 8RN V3 :BE_^[]EɋM SE 9X th{WӋVE MH t N3 8N V3 :EH9S th{WThRd5D$l$l$+SVW{1E3PeuEEEEdËMd Y__^[]Q̋UU t7Vpf@@fu+=^v&MffAQEf f``3]SVWT$D$L$URPQQhXUd5{3ĉD$d%D$0XL$,3p t;T$4t;v.4v\ H {uhCCd_^[ËL$At3D$H3FUhp pp> ]D$T$UL$)qqq( ]UVWS33333[_^]ËjK33333USVWjjhUQQ_^[]Ul$RQt$ ]SQ{ SQ{L$ KCk UQPXY]Y[%Ta̋UME ;r M3 E] %ta%a%a̋U39Et PPua] ̋UVW3VVEPa} G`$MH M@V@aVVVVEP`;|G_^jhvuuuu uau3;t1}jWVaE>3@ËeuaE3̋Uua]%a̋UE,a<Ew ]̋USVW39}v+Mu +PR:utGA;}r3_^[] 3@̋VWa3j>PhstF0|3_^É5H̋U sVu s2=HNt a HjQV F^]̋USVWua]3ju :G0 jP`3;u _^[] PPP3u .3;‰E uV`ӉFVF`t $H@ $PPMP F`$V@ xHW@Phu 'F̋U EV390uut3EPEPjhs`;WVjEPaEPEPVj0LWVVuhֲ`;uM`kMSaM`uVVVVEP`];u4=L0u4=Pu+95ht#95`t95ptj }Y[_^ hjL|=u̡tPa% t `%̋UQQuMu eMMQPaE̋U 3PPEEEEPMhfE"fE$E_EEMat Ѓ% j,hw~E38|t ]_E=4fE8fE:E`E]EPE܉Ẻ]ԉ]jjEPhaE;|=E ;tShb[5a;uE;uU Z|E EConnectionContextTransportAddressFailed to attach \Device\Udp! Loading with TCP support only!Failed to attach \Device\Tcp! Trying to attach UDP!ProviderStartSYSTEM\CurrentControlSet\Services\aswTdi\ParametersNdisQueryBufferSafendis.sys\DosDevices\ASWTDI\Device\ASWTDI******* EXCEPTION in IOCTL_ASWTDI_URLBLOCK_REQUEST processing ********** #################### URLBLOCK: WRONG IRP ######################! #################### URLBLOCK: TOO SMALL IRP FOR HTTP BUFFER ######################! \BaseNamedObjects\aswTdiLogEvent\Device\aswSP_Handler\REGISTRY\Machine\\Device\AswTcpFilter\Device\Tcp\Device\AswUdpFilter\Device\UdpUNKNOWNhttp://HOST:POSTGET dns://\Device\aswSP\Callback\aswKLib\Callback\aswKLibInitializedž֞ \|؛ (<TlĜܜ*Hhޝ&.Nn|4 ؚ>L&BNd|ҟ >\h ,<H^n~ȡܡĚXPe(t(t ' BmxosjMgVTFS1dBeeOsMވWin32:Sasser [Wrm] ' >xdssjgaVTFvS.1dBeesxGMWin32:Sasser-B [Wrm] ' >xsjgVTFSn91dBeesܻ8MWin32:Sasser-C [Wrm] ' T%YYmxosMgVTFS"qqdBe8eWin32:Sasser-D [Wrm] x sg VTFSEdB|ibMSWin32:Sasser-E [Wrm] ' i d bIHFv <}&)qw=Win32:Sasser-F [Wrm]H IG^ ,IaDCOM ExploitE  vU'F^Win32:Blaster-A-UPX [Wrm]E  L0vC'oWin32:Blaster-H-UPX [Wrm]E =2 @ufljetx/zyNd>spguWin32:Blaster-B [Wrm]E &n )a.>(HYO~OvWin32:Blaster-I1 [Wrm]+]y 3DCOMRPC Exploit0A}qALSASS Exploit (EXP)0ALSASS Exploit (E2K)0[K4g~5 q9ږ5ڒBLSASS Exploit (SXP)`[K4g~5 q95BLSASS Exploit (S2K) ' BmxosjMgVTFS1dBeeOsMވWin32:Sasser [Wrm] ' >xdssjgaVTFvS.1dBeesxGMWin32:Sasser-B [Wrm] ' >xsjgVTFSn91dBeesܻ8MWin32:Sasser-C [Wrm] ' T%YYmxosMgVTFS"qqdBe8eWin32:Sasser-D [Wrm] x sg VTFSEdB|ibMSWin32:Sasser-E [Wrm] ' i d bIHFv <}&)qw=Win32:Sasser-F [Wrm]H IG^ ,IaDCOM ExploitE  vU'F^Win32:Blaster-A-UPX [Wrm]E  L0vC'oWin32:Blaster-H-UPX [Wrm]E =2 @ufljetx/zyNd>spguWin32:Blaster-B [Wrm]E &n )a.>(HYO~OvWin32:Blaster-I1 [Wrm]+]y 3DCOMRPC Exploit0A}qALSASS Exploit (EXP)0ALSASS Exploit (E2K)0[K4g~5 q9ږ5ڒBLSASS Exploit (SXP)`[K4g~5 q95BLSASS Exploit (S2K)dIaCH IoValidateDeviceIoControlAccessIoCreateDeviceSecureD:P oD:P(A;;GA;;;SY) 0oD:P(A;;GA;;;SY)(A;;GA;;;BA)68XoD:P(A;;GA;;;SY)(A;;GRGX;;;BA):<oD:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GR;;;WD)VXoD:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GR;;;WD)(A;;GR;;;RC)np@pD:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGW;;;WD)(A;;GR;;;RC)rtpD:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGWGX;;;WD)(A;;GRGWGX;;;RC)~8q{%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}\Registry\Machine\System\CurrentControlSet\Control\ClassSecurityPropertiesExclusiveDeviceCharacteristicsDeviceTypeNoUseClassNoDisplayClassClassGXGWGRGASDWOWDRCASystemUNKNOWN\Device\aswSPsH{tRSDSGq0AA@} :d:\avast700\src\avast500\drivers\aswtdi\build\objfre_w2k_x86\i386\aswTdi.pdbRXU/  r . $`q.w24Y6 89=;<S>OuWyWn\0xx1xx2xx3xx4xx5xx6xx7xx8xx9xx10x11x12x13x14x15x16x17x18x19x20x21x22x23x24x25x26x27x28x29x30x31x32x33x34x35x36x37x38x39x40x41x42x43x44x45x46x47x48x49x50x51x52x53x54x55x56x57x58x59x60x61x62x63x64x65x66x67x68x69x70x71x72x73x74x75x76x77x78x79x80x81x82x83x84x85x86x87x88x89x90x91x92x93x94x95x96x97x98x99x100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255N@D WDBASYIURCAUNU ANBGBU(LS,NSssss|stsls@ds LUQQV5`WhnEP֋=PaEPׅ<u <ąhnEP֍EP_@8^̋U=8u]%<̋UMtAU tA U% A tAM]̋U Vu u3`EPEPv||LEPu EP`aj0ujhu\a|vuuXaua^̋U,E(S]V39u0uux W}$;EPtuWA;} EuMEPju EPut%EPEPuEPW|kEE EEEPE$PE PEP]${EPuu$u uu ua|%EPu} u`EM(EP_^[$̋U SVu W}33ۈ}EPEPW]pa;|w9]tEEPEPWla;|X9]tMEPEPE PWha;|88] tMEPEPE PWda;|8] tMEME3_^[ ̋UE EtEtEt]̋UE3ɉHHH H]̋Ud{3ʼnES]Vu3;W}tMQhh(rP FPFPF PF PF PF PF PFPFPFP6Ehqj'P389uEfuPtEPVVu EPu u EPuC EuEaE;|;ދMtM M_^3[̋UQQSWEP3SS?Wu;D;V{u7EPjjSV|a|SuD4aDjXDHMQS#PSWhruE u5a;|&} wxaPwjhru u֋^_[̋UEt jp4a]̋UE MH]̋U SVW} 3W]EPSjhruf ;|MAMQjjSP|a 4u]39]t Su4a;9]t4EPEPu\;8]t Su4a EGGPShsu ;|4uJG PShru~ ;|4u%GPShruY ;|!4tG;tSP4aW3_^[̋UQQueewEPEPjh?u}VWuGEPhhru^ u5aօ|uuNug4u_3[E @ uu?PhXsV |-EPh8sVE1 |EPh sV Va_^ ̋UQS]V3W{uwWSE t#EF}rދE s_^[ Mk{C{uj jauE  a {M 3̋USVW}33||W t C`rދE E83_^[] U k | |MG3@̋UQESVW8E u aW ;ʉMvVEhSeAlPjE8auFujVwS]3VwfEjWfF4aM3u E ujWa_^[̋UES] VW}'f0EupfxtfXu Ef0r f9E vE3Pf=0rf=9w0,}u>f=Arf=Fw7f=ar$f=fwWM;rBBfu3;Ut7@_^[] 3̋US] VW}3j:Wuuu3;YYMu ;uǍpf@@fu+G3;9s f;uE f t3F@@;rEj3Y҉Eu 9Uut E FuAhSeAljj8a;tR3@f@f`f`uk0;vhSeAlVj8au EVjPE.@fp 3fA 9EfAEj _eFFf9>tf>(uFFf9>tjhsV` 2FFf9>tf>;FFf9>tf>;tAFFf9>tE PEPVOtE EEPE PVE9u tu f8;uFFE }jYf9>tf>;tE Hu9Ef9>tEPEPV7EuutYf9>u FFf9>tuf>)uD}t"uE+EPuEjjPSEu8f>(uFFEE;EEwE E }tj34a# fMfHE_^[ ̋UES]W}'#@@f8 tf8Dt f@@f8:uVu @@f8Pu@@MQMQP3;EuE@@f8 tf9t E 9Mt Qu4aE^_[]E3̋UESVW38EPEPu }u3/;ljE |ijEPaWuEjPafEf E5aEPWEP}hSeSduj8a;u E EPSEP;ljE }9}54atWu;tWSWu4aEE _^[ ̋UVuNP;uNfL&BNd|ҟ >\h ,<H^n~ȡܡĚKeSetEventIofCallDriverKeClearEventIofCompleteRequestKeInitializeEvent-DbgPrintPsGetVersionInitSafeBootMode:ExAllocatePoolWithTagHExFreePoolWithTagmemsetmemcpyKeReadStateEventQMmMapLockedPagesSpecifyCache%IoDeleteDevice!IoCreateSymbolicLinkhRtlInitUnicodeStringFIoGetRequestorProcessIdjIoReleaseCancelSpinLockIoAcquireCancelSpinLockObReferenceObjectByHandleEExEventObjectTypeObfDereferenceObjectKeWaitForSingleObject IoBuildDeviceIoControlRequestIoCreateNotificationEvent=IoGetDeviceObjectPointerPsGetCurrentProcessId2IoFreeIrpIoAllocateIrpGExFreePool@ZwOpenKeyTRtlFreeUnicodeStringRtlAppendUnicodeStringToStringRtlAppendUnicodeToStringRtlAnsiStringToUnicodeStringeRtlInitAnsiStringstrncpyYZwQueryValueKeyZwCloseXZwQuerySystemInformationPsCreateSystemThread IoAttachDeviceToDeviceStackIoCreateDevice_itoa~ExfInterlockedInsertTailListExfInterlockedRemoveHeadList KeTickCountKeBugCheckExntoskrnl.exeRKfReleaseSpinLockOKfAcquireSpinLockDKeGetCurrentIrqlExReleaseFastMutexExAcquireFastMutexHAL.dll#TdiMapUserRequestTDI.SYSMmGetSystemRoutineAddressRtlUnwind4ZwSetSecurityObject4ObOpenObjectByPointerIoDeviceObjectTypeFRtlGetDaclSecurityDescriptorQRtlGetSaclSecurityDescriptorKRtlGetGroupSecurityDescriptorORtlGetOwnerSecurityDescriptor__snwprintfRtlLengthSecurityDescriptorSeCaptureSecurityDescriptor.SeExports)IoIsWdmVersionAvailablen_wcsnicmpRtlAddAccessAllowedAceRtlLengthSidwcschrRtlAbsoluteToSelfRelativeSDRtlSetDaclSecurityDescriptorRtlCreateSecurityDescriptorZwCreateKey8ZwSetValueKey3IoFreeMdlYMmProbeAndLockPagesIoAllocateMdlgMmUnlockPages:IoGetCurrentProcessDIoGetRelatedDeviceObjectyExUnregisterCallbackfExNotifyCallback=ExCreateCallbacknExRegisterCallback0 H884VS_VERSION_INFO?StringFileInfor040904B0>CompanyNameAVAST SoftwareZFileDescriptionavast! TDI Filter Driver\FileVersion7.0.1474.765 built by: WinDDK6 InternalNameaswTdi.sysh"LegalCopyrightCopyright (c) 2012 AVAST Software> OriginalFilenameaswTdi.sysBProductNameavast! Antivirus> ProductVersion7.0.1474.765DVarFileInfo$Translation 444455I5]5l55555556#6+6o666666U7i7}77777788N8_8899999::9:`:}:::::;2;D;N;Z;;;;;;G >z>>>>>>>>>>>>>>>>>>? ????$?*?0?6?>D>L>Z>>>>>> ?*?A?H?N?c?}???????? 0-0N01162\2e22343D3P3Z3h3r33333!414N4Z4s44G5s5529K9Z9u99!:):O:]::::::A;I;o;};;;;;;d+>=>G>S>>>>>>> ?????0400W0e000000161I1R1g11111222D2N2Y22222222 33p3w33333333333 4#4-454K44444475<5f55556%6/6;6666667.7P7b7w777777S8Z8h88888888=9S999999:!:I::::: ;;;G;g;;;;;0 >*>5>>>>>>>? ??&?/?9?K?T?]?g????@0030N0j0t0z0000000001 1-131~111.23292B2H2W2\2b2v2222222223333333333344%42484D4L4T4Z4b4h4n44444444455555"5'5,52585A5J5P5V5\5f5555566 7h78g8888Q99:::;;N;;;<<>?? ?U?r???????P00*0I0Q00000001*1>1I1_1y11111112 22$202<2I2f2233 4*4445#6,6R6666667 7727L7d7777&858R8f8r8z8888899999999::(:5:>:G:O:W:}::::::::::-;@;W;h;t;;;;;;<<<#<(<2? $\_MWy_g80*QFX_Q @XoH}U~c6P^~7O&jszHʶP`ϼNfI5-Re?ps=)<>\R|NxUg.$wA8 B ɆreG 0+՞>=SkO͕{0!0 +0pEOpq}00yBٸ>0  *H 0S1 0 UUS10U VeriSign, Inc.1+0)U"VeriSign Time Stamping Services CA0 120501000000Z 121231235959Z0b1 0 UUS10U Symantec Corporation1402U+Symantec Time Stamping Services Signer - G300  *H 0Yft=}zD{GjUNPG 8Oix vg f-̵sY{3nfZ^R7bђY5EYM$hBr:hk"-NƯ䠫<(#rSgwQ00 U003U,0*0(&$"http://crl.verisign.com/tss-ca.crl0U% 0 +04+(0&0$+0http://ocsp.verisign.com0U0U0010 UTSA1-30UI&`es8ͿWo0  *H 'xrm5ĈmK-盋?9 f\TNoeg |RkzȬB|,=fsr֏Q Ѝ1RO^}JuN+)+]~n'{#b)f,ν'x1"ijGC_^|}bM "Vͮv M٠h;004+(0&0$+0http://ocsp.verisign.com0U00AU:0806420http://crl.verisign.com/ThawteTimestampingCA.crl0U% 0 +0U0$U0010U TSA2048-1-530  *H JkXD1y+LͰXn)^ʓR G'/8ɓN"b?7!Op18UN$ҩ'NzaA*^ݻ+>W~ +;R8'?J009% 0a.+M|0  *H 0_1 0 UUS10U VeriSign, Inc.1705U .Class 3 Public Primary Certification Authority0 061108000000Z 211107235959Z01 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1:08U 1(c) 2006 VeriSign, Inc. - For authorized use only1E0CUU%705+++ `HB `HE0  *H Z YbNY8Nfӭ m>J c^.*g3 *׉V#:YE5[fPmWxWKɎ~ƽ00 a 0  *H 01 0 UUS10U Washington10URedmond10U Microsoft Corporation1)0'U Microsoft Code Verification Root0 060523170129Z 160523171129Z0_1 0 UUS10U VeriSign, Inc.1705U .Class 3 Public Primary Certification Authority00  *H 0\Y@WjE@ 3X%*Dx#}֬cEr'Luq9OBu Ǝ o#_p)6Ɇ籚 S=}$E3vqdLe.hE#00U  00U 06 +7)0'+7щNלӿn0 U0U00U{wߞ ?.iw0 +7CrossCA0U#0b ![Cn TPkҖq0UUN0L0JHFDhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0  *H F;Eu~_CFˊGAt9QG{W2|?B!JCJo\KџLUn %qNg˂׎U7>n.aAHu,(I$s%<̈ (LeT^,Q:G<5ITJK}yϿ5\9QDD4*\;)N7~uմ nl#qgqNt LX^m9ˆ?2mב6Gx'*hONg?-@aH1s FVI) ڣ`TY(TfLۦg.Q{49AŒh&$ 灎 -/HoSIdx] U&ﺍѥ/Zka3b$v/C|4$(UuN1+gc׫s Y?*Eb[/9_sG*CbU==&}bU֔4Me0^0F qd;c!1A~{?0  *H 01 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)101.0,U%VeriSign Class 3 Code Signing 2010 CA0 110131000000Z 140130235959Z01 0 UCZ10 UPraha10UPraha 410U AVAST Software1>0<U 5Digital ID Class 3 - Microsoft Software Validation v210UAVAST Software0"0  *H 0 q״-78):i_sH+imݘOhmAŊ2vxMnUK0j+eZ|o,6%g f5#"}WASz9/P"KA&7C{yt=sh{Bvzn%4(@A2$~K=i\sR6W'0| m𩷦w>x ||)ǰd1DP^k*A{0w0 U00U0@U9070531/http://csc3-2010-crl.verisign.com/CSC3-2010.crl0DU =0;09 `HE0*0(+https://www.verisign.com/rpa0U% 0 +0q+e0c0$+0http://ocsp.verisign.com0;+0/http://csc3-2010-aia.verisign.com/CSC3-2010.cer0U#0ϙ{&KɎ&ҧ0 `HB0 +700  *H UUQ?ԃ۬9ۂݕI3iH:Pִmhmɉz!6T6㒔Ϩbَ8yAۇsm/֟%|)w+=ͷFxM.Gd8T&
s5l }%3iINC H# ll-D:.'"O@ٚd;!bՏ^bI  i9ӌ!ձ`u=3'(f&~+a0 0R%VK30  *H 01 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1:08U 1(c) 2006 VeriSign, Inc. - For authorized use only1E0CUߖqU&J@<& m%{Ͽ?/wƵVz;T0Sb4Z(LN~[uGr.4L~O =W0֦6րv.~4-00U00pU i0g0e `HE0V0(+https://www.verisign.com/cps0*+0https://www.verisign.com/rpa0U0m+ a0_][0Y0W0U image/gif0!00+kπjH,{.0%#http://logo.verisign.com/vslogo.gif04U-0+0)'%#http://crl.verisign.com/pca3-g5.crl04+(0&0$+0http://ocsp.verisign.com0U%0++0(U!0010UVeriSignMPKI-2-80Uϙ{&KɎ&ҧ0U#0e0 C93130  *H V"4aHVdٌĻ z"G8J-lq|pO S^tI$&GLc4E &sЩdmqE`YQ9XkԤyk Ar7" #?Da̱\=ҍB=e6Դ=@(#&K ː]L4<7o 4&ٮ Ś!3oX%|tXuc?1|Sv[퓺]!S‚Sc P=TR,=.ǓH1#0001 0 UUS10U VeriSign, Inc.10U VeriSign Trust Network1;09U 2Terms of use at https://www.verisign.com/rpa (c)101.0,U%VeriSign Class 3 Code Signing 2010 CA qd;c!1A~{?0 +0 *H  1  +70 +7 10  +70# *H  1>A i -rʐT &0L +7 1>0<" Avast! Antivirushttp://www.avast.com0  *H !\UsPjwф!hvw?vOW"vS#;_27Z!^+]}PgQ&sMwB&$b6"p)"#= u'98O'@0 +]0 *H  1  *H 0 *H  1 121030225158Z0# *H  15mnU`:0  *H -ݜkN ΁B$8ŦAR`-em1 ]|R>'DP?ZHII&ExfQL :SJ'XV_$þA;>k.