Hacked By AnonymousFox

Current Path : C:/Windows/SysWOW64/
Upload File :
Current File : C:/Windows/SysWOW64/ndfetw.dll

MZ@	!L!This program cannot be run in DOS mode.

$Ҏ<ooosoononooononononooonoRichoPEL!Ŷ!
j d


@Ax`P'T\.texthj `.dataPn@.idatah	
p@@.rsrcPz@@.reloc@B`j aj 4@oPddR ||| 7@d	dpP4' @{!  @n|a	dT| |  h| '|@'A'?'5''E'M' F'47'H'hQ't4''&'H'('8'O'B'D'C',G'@:'PI'd6't=';'9'L'3'fdeq4H!`x	h jgkl@md),4D&P(nToh*||stuvw
,y@'xHz`{l|@}~ iTp ( @ X p 
 |   $  "  !!(!4!hT!rd!!!@hphp@+gg+++@+, ,+++@+P,`,+++@+,,,++7@87`29ggg9:6P769:1@:P:@@9 4 @@@P@CA`@@##$$$0$<$D$P$\$h$$$$$%8%`%d%@h%l%p%|%%%%%%%&&(&<&p'
\Iu***P*`*p**bP*`*p*****@++++, ,P,`,,,,1@2`2223p334 4P466P777@89@99:@:P:@@ @@@P@`@AC]0````` ab d0gghh@hphjjPq`qpqqqqqbad allocationpermission deniedfile existsno such devicefilename too longdevice or resource busyio errordirectory not emptyinvalid argumentno space on deviceno such file or directoryfunction not supportedno lock availablenot enough memoryresource unavailable try againcross device linkoperation canceledtoo many files openpermission_deniedaddress_in_useaddress_not_availableaddress_family_not_supportedconnection_already_in_progressbad_file_descriptorconnection_abortedconnection_refusedconnection_resetdestination_address_requiredbad_addresshost_unreachableoperation_in_progressinterruptedinvalid_argumentalready_connectedtoo_many_files_openmessage_sizefilename_too_longnetwork_downnetwork_resetnetwork_unreachableno_buffer_spaceno_protocol_optionnot_connectednot_a_socketoperation_not_supportedprotocol_not_supportedwrong_protocol_typetimed_outoperation_would_blockaddress family not supportedaddress in useaddress not availablealready connectedargument list too longargument out of domainbad addressbad file descriptorbad messagebroken pipeconnection abortedconnection already in progressconnection refusedconnection resetdestination address requiredexecutable format errorfile too largehost unreachableidentifier removedillegal byte sequenceinappropriate io control operationinvalid seekis a directorymessage sizenetwork downnetwork resetnetwork unreachableno buffer spaceno child processno linkno message availableno messageno protocol optionno stream resourcesno such device or addressno such processnot a directorynot a socketnot a streamnot connectednot supportedoperation in progressoperation not permittedoperation not supportedoperation would blockowner deadprotocol errorprotocol not supportedread only file systemresource deadlock would occurresult out of rangestate not recoverablestream timeouttext file busytimed outtoo many files open in systemtoo many linkstoo many symbolic link levelsvalue too largewrong protocol typeInvalid parameter passed to C runtime function.
FValForceRemoveNoRemoveDeletegenericunknown erroriostreamiostream stream errorsysteminvalid string positionstring too long#FJL,]ܳ_J){5A6C16D3-ECB3-4ff7-B0D5-690239E161C8}FFFF\Required CategoriesCLSID\\Implemented Categories9WPPTP00ModuleModule_RawREGISTRYHKCRHKCUHKLMHKUHKPDHKDDHKCCHKEY_CLASSES_ROOTHKEY_CURRENT_USERHKEY_LOCAL_MACHINEHKEY_USERSHKEY_PERFORMANCE_DATAHKEY_DYN_DATAHKEY_CURRENT_CONFIGSMDBAppIDCLSIDComponent CategoriesFileTypeInterfaceHardwareMimeSAMSECURITYSYSTEMSoftwareTypeLibAPI-MS-Win-Core-LocalRegistry-L1-1-0.dllRegDeleteKeyExWadvapi32.dllRegDeleteKeyWAPPIDF=L9o<{Oyz!Ŷ#'!Ŷ
'!ŶhQolooooop<pgpppqRSDSQǃdۈ%x"6ndfetw.pdbGCTLd.rdata$brcd.CRT$XCAh.CRT$XCLt.CRT$XCU.CRT$XCZ.CRT$XIA.CRT$XIAA.CRT$XIZp.gfids.giats`.rdatap'4.rdata$sxdata'.rdata$zzzdbgP*.text$di +1D.text$mnQo.text$xPq.text$yd0r.xdata$xwATL$__awATL$__mxATL$__zx.edataX.data$brcX.data$r$brc@.dataP.bss\.idata$5\.00cfg`.idata$2.idata$3\.idata$4\.idata$6.rsrc$01.rsrc$02hpq=Yh`qo=YhPq_=YhqJ=Y4hq*=Y̹$y% hq<Y̹@yy	
0(hq<Y̋UE8u3]ÍP@u+]̋UEVtVY^]UUA;Bu
;u2]̋UEUH]̋UQQVWuMuQp\֋_^]̋UE;Hu;Eu2]̸@"̋Uuw5YuH"MPE]̸X"̋U}uMhd"uuE]̸|"̋Uu#5YuH"MP@E]̋UVuV4YM1^t	A(A$]UVufFYPuY^]U}VW}t!~rStWSV>SY[~F7_^]h"4̋US]VSxt~ru+؋SVGW}jWt2Fr΅tWSQ>F~r8_^[]h"T3̋UUt+yr;ryVr1A^;v2]UVuwJ9qsqV0}tsA;sPju!qyr	^][̋UES]VW{;ry+9}s};uPEPjFKjW^t?{rFr΅tEWPQ<F~r8_^[];jQo-<u}v}*3ENj^u;vjX+;w<j_eGPMF)EME@ePE-E฻/Ëu}E]Et~r΅tSQP<jj=E~^r:Mjjjj:̋UQVMW~;roU+;w~NrEtAFSr+ى})MtuPSd;F~[r8_^]̋UE9AryAr]̋U39Et
u/Yt]@0̋UeEePQ
E&E")]ËUjhlodPSVW3PEd3ԄjYĄʣȄЄ̄y	
Ȅ$"j
ĄËMd
Y_^[]̋UjhodPV3PEdj
X
EtVYƋMd
Y^]̋U
ju\(]̋UuuuuT]UV3F9uuuT=t3^]̡ĄVp\Ą^̋UuU0ub]̋VWPh 3Ax	QQW xjjĄZ'_^̋VWPh 5t\օxQQx3QW jjĄ&_^̋U}u
uUWEu@ ]3̋UEVh"h&Pq\^]jo7Mu
@3j(uEEt+Ytc{j3YC x34Ëu]MtAEKC$x3C uuuS0\֋tQ
5VFFdxtP@VY^jo.6UMu
@3j(]EE*Yuu܅t7f~j3YF E=Pp\֋}35Ë]}MtRO؅xG L؅x3ۅuuuW0\֋؅tjp\֋4UQQ
<3VW=8JT$t=rj\օxOt$jv\֋ЋD$x+
<;rx5t5\_^]̋UuMu&]̋USVuW~
J;t;uZut&Qu=r\_^[]̋UMSIl؃uVW=r\_^[]̋UuMu&]joR3]s
J;t;uBEuL=p\օtjp\փe=r\֋E2̋UMI}]UjhlodPSVW3PEdPCP=p\փ{tSCMd
Y_^[]ËV1W;tV;t1;u;t~_^̋UVGEtVY^]ytQA̋US]u@?VW3q(9>uVh0#jWh"xQr\֋_^[]̋UM@tEE3҉9Ut"9u9Puxu	xFtVQPEup$\^]̋U}VW=tpp\_3^]3@A@̃AHËUE8u_Vuu@O&3Wx@E;St9st"u&E;r}[?_u	u^]{97u7EPEx397usWh&s\֋u|}tWu0Q\֋뉋}녋U3ʼnESV3ۉXW`\t6!"u(\PhP#jSh!\Ë؅tVq\֋M_^3[b+]dwdQj`9]t4\P0uN\VN\Vy0\뀃\P0uN\VN \V XXj9]<j@tP`h#@VP tPVP̐| h`#VP̐_ XLQhSP`QPHXu_X`SSSSSSSPSSSVTt
VT#u9`uPH5h#WPtPWP̐{h#WP̐^HTPhSTPWuvÅtVTu_SSSSSSS`PSSSVDt
VD#u9`uPH<HtVtW@k	\UQQ
<3VW=8FT$t9rj\֋t$Ћ?x vj\օx

<;r_^]SWt0{t"V7w\֋wWYu^c_[ù̋SW_;t7tgO(tVQp\^GP#_[ËU<W=8;s$V7tv u\֡<;r^_]̋A̋UEt @]3@3̋UVEtVY^]V>t6&Y~tvfYf^ËVW3G~.x6;}24(Y;w}!G4(GFY;|ҋ_3^ù̋UVuW~WxNW|_^]VVFxtP@NHN^jhsi,3uQXE3Ɂ8ËeuEt,Åu3ÍQffu+ËV6(&Y^ËUVjF@P6tHFj@Pvt/VFt
EFtEF3@3^]j$p)MЋEB}83j]Q_ff;u+ʉuuM3ɉEQDYEBËE3j_މEM}}3ɉujZEEEQEYuCE]E}܋uEutQtMMQuQP EPuPV MЍEPEPhu
x33V(W(YY3#'j<pB'}tL}tFu~WxeueNu[W|MW&1YÍA9ËUVuYt^]+p~
qjjjQdËUQSVWGPEx3ۋ9_~Gu4t	F;w|tx;w}Gu|_^[]̋USVWMA;;w;|6?u;}jYwdrw]PwtOGwxC;}?+;7GuP6PuPQ 73ҋGfH3@3_^[]j\gp%uEE3ۉQff;u+	d}jYE];wrwPEt3fÉ]]u
7fj%Yf;Vj%Zf9ujPE+Q7Ej POEPЅ]Eqff;u+QRMM]!7u97t#7;ujVM
77f@	EM]u@|#V3Wfu3(ftf;tQfu_^ËUQQUSVWtI3EύAEff;Eu+MA<O4NuVRj3Pu3_^[]@z̋VRY>u^ËUjhpdPQ(!&3ʼnESVWPEdeEEEP3ۋ4pPtFr	4tPuj_6	+3-?fQff;u+ʉA]E;jr	_=vP] I3ۉ]j_t{ft@Pȋ\uj0Xf9u3Qffǃf9븋3j_;A1PSSPyjPjS0YQff;u++‹EEv<W44KË3ۋu@"WSP#~u}Ǚ+‹j0Yf;r(9v@vFv`vfwW70ӋǃjY+ȋG;|WjS09tL?Qff;u+MPPjS0t	x3Md
Y_^[M3u]W̋U E"3ʼnEVW}f?=u/Wqx'g
PXxWLx3M_3^]UV6ut|3@3^]U$3ĉ$ S]D$VWP3hQS7L$ L$$L$(L$09t$tt$D$D$urL$ QVVVL$(QL$<QVP+D$(PL$juHD$ PVVVD$(PD$<PVt$(D$8tÃ|$tt$t$S||$t
t$$,_^[3]UQ3ɍEQQQQQQQPQQQuMt3	3;E؋]V>t6&^ËUSV3W9^uE9^u@hP&tth&PlF SSh&hth&PlF~tSSu6\~tu6\p_^[]~	ɁËUQQSVW3f;-uj' UZf;S3ۉ
f;tnj'[f;uRf;uZj'Xf;uS؉SЋʉ+AF;E~+f3fu3ۋf;t뒋3f;;us~3f7i	r
vR
tM tHSЉE+ӉJN;Ms9~+f3fuE3ҋ]f;t;us	3f3	_^[]UjhpdPX">3ʼnESVWPEdM}3ɋىMW5h0"WDžh"FWtW}3j\ZxWmt W3t'Wh4Wh"WuW+h!WPWj=Xf9}tR3EWPP^3UE}uet\3PhQQPVt	tVWcj\Z9EoPh3QWVutS3PhQWVutStN3PPQhQQQWVtSWj=Xf9u&3WPPj{Xf9RύQff;u+13PuSWNWlguuQ3PhQWu.t
S	jXt
DžjWhPWW}j{Xf9u\ύQff;u+u?3PSWy
/WMt}}tES t;PPrStS3ɋىuw3Ƀt:u6P3ɉu*j}Xf92,?tP#	tSƋMd
Y_^[M3]V
	r
v

t uR^ËU z3ʼnEEVWQP3ɉf;SPp34Pt
Fr3P%j{Xf;up}jt;uSPIy2jjSP(0jSPx3f;#	[ƋM_3^F]h$qE3]ujYQVPEhu&.VjeSW؅u
	
SWtSW؉C;s.9thjYM;r	=vPWE!
ZË3Eu>SPSVj`ȅ3ufH(W9t~\W̋Uh
3ʼnESVuW3DžjY3󫍍oƅtvPPvuQp\֋53WPV\u;uzz{j'_
ft(fEf;u=s	@fE@=r3fEtSt;tj"^fQff;u+MPPhP t@Qff;u+fMM3f
Ph#PPh#P9]tjSh$QP^
M_^3[	]̅t,t t"tPt@&W;uA;BuA;BuA;Bu3@3ËUMSVW]u
@u39u29Fu-~u$~FuzWp\։;3fz9tNGEt֋Ut,MEt1wSVQ\Ut&}txM?u@
뇸W_^[]UE]UQQMhwP'̋W3jY ʣ$(<&h_yá tP% Y%$%(á Wtt,tW_áDV3~#x\;}X@WpPDF;|ݡ@^tP%@Y%D%Hh$% 3_ù̡@tP%@Y%D%HËU
u
YtuYt]̋UQVuu|
^]UQVjEEPI
^]̋UQVuu,
^]UQEVuEEP	^]		̋UV	EtVY^]̋UV	EtVY^]UMh vEPw	̋UMu0hvEPU	̋UMuhvEP3	̋U=lhtM9t
xu3]Ë@]ËU=tM9t
xu3]Ë@]ËU]hD@Yu@Ã 3ËU}SVWddH3ۣd8d]PʉU33G;thLU3u}=<t
jH	Y\DEth5@u;r:Mt\UD
@;uE9Mt͋‰MEP3@YDG8<9]33G9}d3ۉ]8PU;thLU3u}9<j[t	j]5hh=<AYYt3Xhhd
Y<}Yu3=Ht&hH`Ytu5HSu\d_^[]̋U}u	] Ucsm9Eu
uPYY]3]j,hw	E3uEw}u=duu9Et	=LtNE}u
huuu\׉EMEQPIYYËe3uu}EuuuEMEQPYYËe3uu}EuuuEMEQPYYËe3uu}}EVVuMEQP}YYËe3uEVVu]MEQPNYYËe3u=Lt4EVVu\MEQPYYËe3uEt	EuuuEMEQPYYËe3uu=LtG=ht>Euuu\׉EMEQPyYYËe3uuEEN}w
ËUVu3;usWu>t
\׃;ur_^]%%,;
ujhweDEuu5\YTjYeDE@EEPEPuu܋M
DM
@EaËujpYËUuZYH]%$%̋Uuuuuh0gh#]̋UV4EtVY^]̋UMt*j3X;Es3PPPPP3]MQuYYY]ËUjDuHh	@P<]ËU$p
lhd5`=\ff
|fXfTf%Pf-LEtExEx|p	tjXkǀjX
jX
jXk
LjX
Lh]ËUp
lhd5`=\ff
|fXfTf%Pf-LExEx|p	tjXkǀh]%Ȑ%@%А%Ԑ%ؐ%ܐ%Md
Y__^[]QËM36M3'Pd5D$+d$SVW(3PuEEdPd5D$+d$SVW(3PEuEEdPd5D$+d$SVW(3PeuEEdPd5D$+d$SVW(3PEeuEEd%%%%̋UE3SVWH<AYt}p;r	H;r
B(;r3_^[]̋UjhwhhdPSVW1E3PEdeEhztTE-PhPt:@$ЃEMd
Y_^[]ËE3Ɂ8ËeE3Md
Y_^[]̋UMMZf9uA<8PEuf9Hu]3]ËUeeVWN@;tudEP,E3EE41E01E(3EM3EEP8E3E3E;t5uO@ȉ
_^]%hhd5D$l$l$+SVW1E3PeuEEEEdËMd
Y__^[]Q%%%%0%8U3ʼnEffffffEEDž0@h!$M3(]%<QL$+#ȋ%;r
Y$-%DT$BJ30rT$BJ3rT$BJ3rT$BJ3}rmuYËMRT$BJ3O8s?̋T$BJ31s!MMT$BJ3sMT$BJ3tMMT$BJ3J3tT$B3zJ3pt`T$B3<J32u"T$B3J3u$,(j.ĄhmUQ=0tX<W=8;s5VMt#QtRp\֋Ma<;r^h@%0_T]"Trtrrr@0@/""ss(s@4"\s|soos@5"shAA"t@t	pphtxt@B@C"t4p"tWp_p"u<uppdutu@I@.K"upp"uuqqv@Z`0v<vXvX0`tj``vvtvXv``vvtvXv̀`fdde3ebeveeeeef)f[fofffgllww!Ŷ`x8xHxXx223p3kx{xxxndfetw.DLLDllCanUnloadNowDllGetClassObjectDllRegisterServerDllUnregisterServer"@2P4344@8 wx.?AVbad_alloc@std@@.?AVexception@@.?AVlogic_error@std@@.?AVlength_error@std@@.?AVout_of_range@std@@.?AVCAtlException@ATL@@N@D,Jn\:*jT:&ؖЖt^H6$Xh|ĕ֕ڗΗ*ԓ&BZvԔ\ȓl,DN^]ȒȔȐ  LԘL>Jn\:*jT:&ؖЖt^H6$Xh|ĕ֕ڗΗ*ԓ&BZvԔ\ȓl,DN^??3@YAXPAX@Zy__CxxFrameHandler3)??_V@YAXPAX@Z_purecall
memcpy_s|wcsncpy_smallocfreetwcscpy_sowcscat_s"_callnewh	??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABQBDH@Z??0exception@@QAE@ABV0@@Z??1exception@@UAE@XZ7?what@exception@@UBEPBDXZd_CxxThrowException	memcpymemmoveo_XcptFilter_amsg_exit_inittermmsvcrt.dll5?terminate@@YAXXZ`_lock_unlock__dllonexit	_onexitj_except_handler4_common??1type_info@@UAE@XZg_errnoreallocaGetLastErrorxGetModuleHandleW1EnterCriticalSectionLeaveCriticalSectionDeleteCriticalSection|SizeofResourceLoadResourceFindResourceExW3lstrcmpiWFreeLibraryGetProcAddressLoadLibraryExWbRaiseExceptionMultiByteToWideChartGetModuleFileNameW^InitializeCriticalSectionDisableThreadLibraryCallsGetThreadLocale\SetThreadLocale}SleepUnhandledExceptionFiltermSetUnhandledExceptionFilterGetCurrentProcessTerminateProcessMQueryPerformanceCounterGetCurrentProcessIdGetCurrentThreadIdGetSystemTimeAsFileTimeGetTickCountOutputDebugStringAKERNEL32.dll3CharNextWUnregisterClassAUSER32.dllOLEAUT32.dll[RegCloseKeyRegQueryInfoKeyWzRegEnumKeyExWRegOpenKeyExWRegSetValueExWdRegCreateKeyExWsRegDeleteValueWADVAPI32.dllHelperTraceInitializeHelperTraceUninitializeHelperTraceEventnetdiagfx.dll@CoTaskMemAllocACoTaskMemFreeBCoTaskMemReallocRStringFromGUID2	CoCreateInstanceapi-ms-win-core-com-l1-1-0.dll
memset 8ePh		REGISTRYHKCR
{
	NoRemove CLSID
	{
		ForceRemove {A11DB3DC-5FF6-4a0b-AEE6-29BCAC1E11E0} = s 'NDFEtw Class'
		{
			InProcServer32 = s '%MODULE%'
			{
				val ThreadingModel = s 'Free'
			}
		}
	}
}
4VS_VERSION_INFO
cE
cE?StringFileInfo040904B0LCompanyNameMicrosoft Corporation|*FileDescriptionNetwork Diagnostic Engine Event Interfacen'FileVersion10.0.17763.1697 (WinBuild.160101.0800)6InternalNamendfetw.dll.LegalCopyright Microsoft Corporation. All rights reserved.>OriginalFilenamendfetw.dllj%ProductNameMicrosoft Windows Operating SystemDProductVersion10.0.17763.1697DVarFileInfo$Translation	000000$0,040<0D0L0T0\0d0l0t0|000000000000000001111$1,141<1D1L1T1\1d1l1t1|111111111111111112222$2,242<2D2L2T2\2l2t2|222222222222222223333$3,343<3D3L3T3\3d3l3t3|333333333333333334444$4,444<4D4L4T4\4d4l4t4|4444444444444444444455555555 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5555555555555555556666 6(60686@6H6P6X6`6h6p6x6666666666666666777(7h7l7p7t7x7|777 DQ:a:q::::::::;	;;N;W;;<3<Q<o<<<<<^=y=>A??0$1 1'1<1K1^1h1q1v1{111111111112G2s22222223#3A3N3v333333*4/4=4S44445+525@55555566:6D6]6t666666$717l7y7777788'8\8k888888929a9i9o999
:!:::;;,;G;r;;;;;<<<<J<<<<<<<(=J=[======>!>C>T>>>>>>	??C?O???????@v00000 111E1^1v11112Y223J3c333334/4N4k444444U5556a667/7b778*8>8U8888999l::/;<y<<<=G=T=u===#>8>W>>>>>>>>???,?D?N?????PB0d000D1U1\1l12$2I2P23A3Y3333484K4'5B556)7F77788*888.9Q9i9{9:A:t:::B;V;r;;H<<<=>I>>>>>>>>>>>>>????)?/?7?>?E?]?q?}???????????????`t0F0b0p00000R1t11111122!2H2X2]2222222233 3&3,3Z3q3333333333344Y4w444445
6|66667&7,727C7Q7b7j7777778"8'8J8888888889999 9'9.959<9D9L9T9`9i9n9t9~999999999999:	::::#:*:1:8:?:F:L:X:c:h:m:s:}:::::::::::&;Y;;;;;;;X<]<o<<<<V=t==========>C>I>O>U>[>p>>>?M?c?~?????p0+0N0000=1R1V1b1f1r1v111111111222!282@2222222$343@3H3h3p333333333$4<4P4d4t4444444445(5L5`5p55555555566$6,64686@6T6\6p6x6666666666666667 7(7,74787@7D7L7P7X7\7d7h7p7t7|7777777770000000 0$0(0,04080<0X0t00000\1

Hacked By AnonymousFox1.0, Coded By AnonymousFox