Hacked By AnonymousFox
MZ @ !L!This program cannot be run in DOS mode.
$ UJeJeJe/He/KeC UseJee/De/Ce/9Ke/KeRichJe PE L Pv
d 0 0 @
W4 @ @ d X ' 0 T ` q @ .text b d `.data h @ .idata h j @ @.didat @ .rsrc
@ @.reloc @ B , . @ @@ @ @ @ @ @ @ @ @ @ @ @ |@ x@ @ @ ! @ P 0@ `@ @ u d@ t@ p@ ! l@ " h@ # d@ $ `@ % \@ & X@ ' ! 0 `C H M O pO O O P S T ` a 0a a a e e e f o @p p T SvchostPushServiceGlobals SvchostPushServiceGlobalsEx S e r v i c e M a i n S e r v i c e M a n i f e s t S e r v i c e D l l P a r a m e t e r s S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s e S e r v i c e D l l U n l o a d O n S t o p f ServiceMain [ % w s ] LRH:6&ű@S o f t w a r e \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ S v c h o s t E n a b l e S v c h o s t M i t i g a t i o n P o l i c y S y s t e m \ C u r r e n t C o n t r o l S e t \ C o n t r o l \ S C M C o n f i g
'`4cwնl2hRC ؘ; WldpIsAllowedEntryPoint W L D P . D L L api-ms-win-core-com-l1-1-0.dll K F[ Fn t d l l . d l l C o I n i t i a l i z e S e c u r i t y P a r a m C o I n i t i a l i z e S e c u r i t y A l l o w L o w B o x C o I n i t i a l i z e S e c u r i t y A l l o w I n t e r a c t i v e U s e r s C o I n i t i a l i z e S e c u r i t y A l l o w C o m C a p a b i l i t y A u t h e n t i c a t i o n L e v e l I m p e r s o n a t i o n L e v e l A u t h e n t i c a t i o n C a p a b i l i t i e s C o I n i t i a l i z e S e c u r i t y A p p I D C O M _ U n m a r s h a l i n g P o l i c y C O M _ R o S e t t i n g s D e f a u l t R p c S t a c k S i z e R p c E x c e p t i o n F i l t e r M o d e S y s t e m C r i t i c a l N o G u i A c c e s s D y n a m i c C o d e P o l i c y B i n a r y S i g n a t u r e P o l i c y R e d i r e c t i o n T r u s t P o l i c y E x t e n s i o n P o i n t s P o l i c y C O M A c c e s s P e r m i s s i o n s S D S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ D i a g n o s t i c s \ P e r f T r a c k \ T r a c e P r o f i l e s v c h o s t NoUrlMimeFilters Pv $ P P Pv
t t t Pv l p a c S e r v i c e s M a n a g e m e n t ETW0 + @ ? LowResourceCallback serviceName heapLimit
notifyService
k ServiceHeapUsage serviceName aveHeapAlloc
maxHeapAlloc
currentHeapAlloc
singleServiceHost state LRH:6&ű@@ Microsoft.Windows.SvchostTelemetryProvider sPOωGv NtQueryWnfStateData [ % w s ] [ % w s ] u:Au|:A \ P I P E \ n c a c n _ n p RSDSiuJ~I]_W svchost.pdb UGP .rdata$brc @ .rdata$00$brc .CRT$XCA .CRT$XCZ .CRT$XIA .CRT$XIZ d .gfids d .giats p .rdata 0 .rdata$00 .rdata$zETW0 .rdata$zETW1 Q .rdata$zETW2 .rdata$zETW9 h .rdata$zz P .rdata$zzzdbg @0 .text$lp01svchost.exe!20_pri7 0P .text$lp05svchost.exe!50_coldboot Q # .text$mn #T = .text$zy `` .text$zz q .didat$2 r .didat$3 0r .didat$4 Dr P .didat$6 r .didat$7 0 .data$dk00$brc 0 .data @ \ .bss $ .bss$00 .bss$dk00 X \ .bss$pr00 .bss$zz ` .idata$5 ` .00cfg d D .idata$2 .idata$3 ` .idata$4 L .idata$6 .didat$5 .rsrc$01 ( .rsrc$02 UVW}GPD@ Gp @ GP@@ u 7`@ O Wj 5x@ @ _^] ̋UVE WE E ~WD@ UN uiEPEPEPj hh@ u@ uI}uC}u=9Fu8EEPFp(@ t!Fp@ F@ uj @ W@@ E_^tP@ ]ËUSVWEE Ph j h@ h E @ u:EPh VSu@ u Wh Ph@ u@ 2 EMt
Q@ EtP@ _^[]ËUX0@ 3ʼnEE SV3EE E E E 95@ m W3$ @ jj4jS0@ tF@;5@ r7 5@ ( FPD@ d U` FEPEPEP } }Eۅt*t&h`@ D@ =d@ h`@ @@ EۋM MĄ =d@ FFP@@ Eۄt'
d@ t } F1 AMP`@ ŮEۅ1
ȃ@ ̃@ thX@ RQ@ 1 uu`@
ȃ@ ̃@ th@ RQ@ 01 FE PE E D@ NE Ph j h@ h E E @ u=EPh WSu@ u#EPh Wh@ u@ EԋMt
Q@ EԅtP@ u0EPEPEPWhh@ u@ u}u }u9Ft[FP@@ EȅtP@ _M^3[, ] } 2;0.p EE PFp(@ tFp@ F@ uj @ dEԉE3E3̋U 0@ 3ʼnESVWhEXE d33<3@DHLPT|M3ffGDž8 ?tPh Vh@ h t@ uIPh VWt@ u)|Ph Vh@ @ tt
Q@ tP@ 0 h
V5x@ @ . 3fpPVlDžp
Pj h@ |@ i. li. f9 q. h PV@ Qffu+APQPPh h @ pDžp
PVlPj h@ |@ . 3VP5x@ f@ h@ 3P@ 5@ @ tTd$ N $ ff;" ftfQf;P fu3K. 63@ uh@ L@ f9. Offu+KI ffu+;E Pj5x@ @ x. p ?p NRPVO3+ PPw + Gh@ D@ @ 8@ 4. @ G8h@ =@ @@ 30 G|Dž x@ Pj xPh h@ j V @ 33ۋxm Xu@ 3Pw(@ ). wujVw @ . wh PjSj j 4@ - 3WWhpO@ h@ @ - Wj Ph @ x
- 8- SV@ 3. j @ h30XPs(@ s- h Pjh@ j j 4@ tQj j hpO@ h@ @ - j j Ph @ x
- h@ V@ j @ d338 XPs(@ s- h Pjhp@ j j 4@ tQj j hpO@ h@ @ - j j Ph @ x
- hp@ V@ j @ X338|tP@ - - M_^3[4% ] x=/Pj 5x@ @ PWxPh h@ j V @ * ύQffuj j +j j APWh j 8@ t@Sj 5x@ @ t+j j SVWh j 8@ g* pWj 5x@ @ ^9XuHt f9P* G|33+̡@ u*h4@ @ (@ @ @ u
@ jtj5x@ @ d@
@ H
@ H
@ H
@ H
@ H
@ H
@ H
@ H$
|@ H(
x@ H,
t@ H0
p@ H4
l@ H8
h@ H<
d@ H@
`@ HD
\@ HH
X@ HL@Po@ @T@p@ @Xp@ @l a@ @p0a@ @hM@ ̋U$0@ 3ʼnESVWhL@ E fE E fE @@ 3d$ @ jD@ Pd0 j p@ * j@ QP,@ @ j 00@ @ r3@ @ @ Ed0 S@E<@ E@PD@ Pj uE@ a* SPuL@ ؋P9* <@ u 70@ M܃@ujD@ Pd0 j p@ P@ ) jMQP,@ j 5P@ 0@ j 5P@ 0@ h@ h@ h @ H@ j@ @ D@ Pd0 j p@ T@ y) jMQP,@ 3S5T@ 0@ j T 5T@ 0@ j5T@ 0@ j5T@ 0@ j5T@ 0@ j5T@ 0@ hL@ 8@ M_^3[= ]; ̋UEE h@ h@ E EE H@ u-PPPEPEPL@ h@ h@ D@ EP ] ̋V( th`@ đ@ V@ + j Ȑ@ ̋U 0@ 3ĉ$ VWjD$D$ Pj6j3P@ ha@ l@ jp@ @ h@ x@ @ @ @ @ H@ h`@ H@ @ hȃ@ WWh@ @ ' @ m
h D$j PB! D$( NF _' Ph@ D$(j@P h D$PjRؐ@ PP@ D t R t=F`u%Vj 5x@ @ $ _^3 ]Pj 5x@ @ jȐ@ ̋S܃Ukl$<0@ 3ʼnEV~ t
F<t
Pd0 pX@ t pd@ ~@u @ ~D tjj jԑ@ FLtEEjPj@ FPtEEjPj@ t NTtU ~X t$jEE Pj@ j jh@ @ j j jj @ F\td0 @ d0 @ =@ vj j jj @ j j hH@ EPT@
@ h@ h @ hO@ AEAEAEAEEP @ $@ @ u
@ PQj5 @ 5@ @ Eܣ@ d@ p@ t@ d@ iE D_h0u h@ h' Eȉl@ P5@ Eܑ@ F\t73E jE؍EPj4jP@ y3^M3 ][ËM 3^ ][̃=@ tS@ tJV Pj5x@ @ t)W=@ 3Ʌt@ R@D!@ A;r_^3̋U SVWEPh j h@ h ]@ US u@ 5@ 9s# @ 3f9t/I Fމ5@ yffu+Jf9uSj5x@ @ =@ tG]5@ { J# f> t.G7PH@ ƍ@Pffu+4Ff9u_^[]̋U@ 0@ 3ʼnESVW}P3ۉ @ W h@ jDž Dž Dž Dž Ph Sw V@ 3j j j j Dž PPV @ ȅu <GFt~ u Pj 5x@ @ ЉO ډ ry5@ tof> tiQd$ ffu+M PVS Qffu+ KQffu+4Nf9u3j j j j Dž PPV @ u<Qffu+M PPWb <GFt3f@ tPj 5x@ @ 3ɋ@ 3ҡ@ * st
f8 P@ u GP@ i u 9tO\P8@ B u 9tO\P@ u 9tO\ 8 P@ u GG P@ u G G P0@ u G G 0 Ph@ Pj u3w$V @ y @ @ F@ F@ F P@ u G4G4 P@ u G8G8 P@ u G<P@ u9uG@ PD@ d u 9GDPd@ = u 9tO\3 3 twHP|@ u GL tGL P@ u GP tGP t1t @ P u GTGT P@ e u GX tGX P(@ Pjk S@ tq_`3ۍPh j hX@ h @ uaP@ Pj u=jjjw 0@ u#O\
t
KtSj 5x@ @ tPj 5x@ @ tPj 5x@ @ tP@ tP@ M_^3[ ] ̋UVuEPVEE Pj RQ@ t^] }t ̋USVu W}MQj MEQh Sj P E @ t _^[] E;Eu]EtVPj 5x@ @ Et9MQPEPh Sj u @ ؋E8 M_^[] 뒸
̋UE 3҅t==w6 S]VWp3EPuVSؑ@ x;wt_^[]úW ÿz 3fs̋U VQ Qffu+SW<M GdPj5x@ @ ؉] WKd3VQE 3 s ft2 I f;t f;tNfɹ uۋ]ft3fSt+ʍyffu+APRPRh h @ - d$ k ft)л f; f; ]- f f;u.Fft-f; C C E- 둸/ f;tŹ" }f;g ft> ȍ{f;tf;tFȋfu}]ft3fE- 8E FЋf
{ ti C _[^]ùK f; s f;t0S f;t&p f; CH - 3볍C3̋UP0@ 3ʼnEVWE E ԃ@ P_ 5@ MHMHMH MHM@EV } u5Ą@ M _3^I ]̋U03SVuWFFF FF E ? E EuЉEE EEЋ}PEP6 t M ;u3F_^[] ̋UVu EV#;t) N~ uu
^] 3̋USj EPj 4@ E EPh j hx@ h u2EE PEPEPj h<@ u u []̋U SVWE E E O\G`ك { EPEP33҅P3Ʌ jP @ EPh@ jj h@ @ W8 =@ v EjjPq `@ xoj w j w wj j ju@ xMEjjPq `@ x0W4 t ERjPq `@ x =@ tYMtQx`@ EtPd0 j p@ EtPd0 j p@ _^[xY ]j$h@ W
t U>
ERjPq `@ W3먋UE SV3U0EWM3E 0EPjؐ@ P@ EPVVju@ ud@ z EPj j ju@ ud@ zu MEMPd0 jp@ j_]W@
EPuSju@ EPuuju@ j 3W@ Ej 0W@ h@ @ X9uth@ @ 9u 9u d0 Sjp@ jSV@ h@ jjV@ } th@ jjV@ u } } ubj VjW@ x E 83E033ۋEtPx@ _ n _^[] h@ @ *h@ jjV@ u h @ @ h @ jjV@ R ̡@ t+j j j P@ 5@ @ @ ̋USVWd@ +5p@
t@ Mu =@ p@ t@ vXe d@ څx ϋ+
h@ 5l@ uu Iw _^[] z =h@ l@ @ - ̋Ut 0@ 3ʼnESVWDž@ 3GG GGGG P GWjj @ ؉# xMG j hO@ jwG P<@ 395@ v 3ۡ@ | u3F@;5@ r苝;[ ËM_^3[u ]ËD3QhO@ G jwPPx@ t
@ PˉA(y, lju7Dž A(A,39A$w
r9Q sQ A$Q0A4"<3j jdRW- o;6 j 5x@ @ ! Wj 5x@ @ ̋U 0@ 3ĉ$ VW39=@ v.
@ 3@ $ | T$u G@;rꋌ$ _^3 ]ËB( B, = @ v&
@ 3 2
@ =@ @ uD D$ ̋U0Vj,Ej P E ؐ@ EЍEj j,EEPjj E EP@ @ xU
@
^]̋USVڋN( F,Mtj3ҋN,W<EF,EEMj jdRW) _~$ F(V,wr9^ s
^ F$ ^0F4 ^[]Ë3̋UU Mju uuu ] ̋UE EE Sڅ } } V3W95@ 3@ jj4jS0@ tF@;5@ r 5@ p ~WD@ ~ jj5x@ @ ȉMt]]Eq uEjQh @ Pp@ M39 E FF 3W@@ _^[] ̋UE(tAM US] t6u t5AMHMH M HXVp ^[]$ h j h@@ @ @ th(@ P@ @ ̋U5L @ u 5T@ 5L @ uh @ \@ ] ̋UE M +]̋UEH0E 3] ̋U UMEQj MQj MQj MQj MQj P@ d@ zuwEEEEEVPd0 jp@ tSMESW 1M<1Mƍ1MQPEPREPWEPSEPVu@ C M31_[^]ø ;
0@ u Ue e 0@ VWN@ ;tudEPh@ E3EE̐@ 1Eܐ@ 1E`@ 3EM3EEP@ E3E3E;t50@ uO@ȉ
0@ _4@ ^]ËUj l@ uh@ h ؐ@ PԐ@ ]ËU$ @@
<@ 8@ 4@ 50@ =,@ fX@ f
L@ f (@ f$@ f% @ f- @ P@ E D@ EH@ ET@ @ H@ L@ @@ D@ P@ jXk ǀT@ jX
0@ T@ jX
4@ T@ jXk
0@ LjX
4@ Lh@ ]%@ %@ %@ @ QRPhq@ ZY@ @ @ UQjEMPj@ ]ËQVWhS@ Qj Ѓ@ j QQFVh@ $ _^Y3@%8@ %,@ %4@ SVD$ uL$D$3؋D$ Aȋ\$T$D$ ud$ȋD$r;T$wr;D$ vN3ҋ^[ E3E3WQM`@ UˍQffu+ʉ]E E M EEPjhX@ 5̃@ 5ȃ@ @ ˍQffu+ʉ]E E M EEPjh@ 5̃@ 5ȃ@ @ Mąt Ui Eۄ`` y h Wt=lt #f9 u
h PV@ Vj 5x@ @ Qffu+HPI\t/t uYމRFff;u ftfPf;Qufu3yF ff;u ftfPf;Qufu3E4@8P @ ؉ud@ 3 )x Wj 5x@ @ Vj 5x@ @ d@ 08@P @ ud@ BGHtt
Q$@ GXYd@ wd@ 3TP @ $9=@ tg@ `tX\QQVj`@ `yȁ u9\ | d@ jj s @ _sP @ J9=@ @ @ 2hPPVj`@ Ӌȅy % = uɅ9hjj s @ sP @ J9=@ t @ fdPPVj`@ Ӌȅy % = uɅ.9d
'Vj 5x@ @ ,+S$@ j u@ jؐ@ PА@ .`QPh@ D$,j@Pg@ f> Vs0@ t$Qffu+4Nf9uG7PH@ Pj 5x@ @ ]tM3f]ùP f;qbNf" f;tFfuSj 5x@ @ 3EPhԃ@ jjh
`@ ԃ@ $0< |5@ }3 EE Pj jjh
ΉU`@ <jj j EȋPj j h @ h
`@ )wN}\@ $u\@ t t3 u躰f@ }E ue@ EP @m?wL?;u8@t F @E@ `C@ EˉEEPE u9 ~F F t&tE E E [@ B@ G
> }r39]e EWjPq `@ d@ . $d@ d@
d@ d@ d@ d@ d@ d@ d@ d@ d@ d0 Wj p@ d0 Vj p@ {j5@ @ YWj 5x@ @ | b
@ 3ҋ% ;@ T$Z;RML$=@ A(D$A,D$ A D$ A$D$$A0D$(A4L$PD$,D$@ D${ D$D$d D$`D$ D$pD$($ D$$ D$D$h D$l D$t D$x D$| DŽ$ DŽ$ DŽ$ DŽ$ DŽ$ DŽ$ $ DŽ$ DŽ$ DŽ$ D$0 @ Pj. *@
uj Qha@ EP@ Ex Ej Pu@ MEE)M!t
d@ $P@ uj 5x@ @
W p$u$Su uuRu u`@ 3d@ d
0 Vj q@ W ̋U 0@ 3ʼnEhO@ QE0 E E E E UE ̑@ t MQP@ M3<]̋U}`u
UM ` 2 ] ̋UU Mj u uuu] ̋UEuW P @ 3] t3Vr ffu+BPQPQh h @ ^̋U} Pu E] ̋U]%$@ U 0@ 3ʼnE=@ VWu:Q,PQ u"uV] 3M_3^] UQSVWڋuUu EUPuQVv u5@ t8j W`@ e@ E P _^[] ue@ U3E 9E VW P3 t'5Ą@ t jj j EPu j uW`@ _^] U@0@ 3ʼnESVuEWUP @ MHMHMH MHM@EtSEPWjVu`@ Ӌ$0< u43 }EĉuPj jVu5@ ΉU`@ M39E_3^[8] UE SVWt t3 }3 R֍Mut t 3ҋE39MAtt _^[] tu`@ UQSVWڋI uEE}P`@ ӅtM;uָ 3_^[] UV5@ Wu8@ uh@ @ @ h@ P@ 5@ u9 uuu j j W`@ _^] ̋UE SVW};u :u:u3%Ƀ ȃ ʉ_^[] ̋UM Vu;u3 3ʃ03ʉ^] ̋USVuW} @ у3Ƀ_ ;tM v+3Ƀ HNH&_3H% _ w;sӋGANH3Ё 3и _^[] ̋US] VuW@ у3ɃS>;tL v*҃P H&?>S3H% ljNj{ w;s CA H3Ё 3и _^[] 9 t/Q © u ?u 3ËV~0 t v$j @ P@ F$ F ^ËU$0@ 3ʼnES] VWj4]j W} G M3E܁ @ 3QuE @ EGPQMuCEu Mt
=# ~ 3Ґ s E;ss tRj @ P@ Vj @ P@ E܅t&MuQPGPQMU܋ډE=# t Q 3҅0 ( MvG f{ C @C C9M CE ft- @ E @ EEPj EE PQMU܍K_OC@G 39EG ;uW{sQC @C CG 43E } _KˉOC@G M_$O(u 3w,;G03tRj @ P@ EM_^3[] US3VW]K3ҋsMIMteu쐋]9]uJ} t){ t#Au8KRt EAuE6qEAE uAuB ;Uru3ۅ ]} t { u Kt ut ut utE uM3-tMEG G$?GG t
t
t7 U3ɋER@ t!u90tA;rG G O_^[] Ud@ iE D_h0u h@ h' El@ P5@ Eܑ@ ]ËUd0@ 3ĉD$`SVًW\$ ? u @ q@ k
@ uNi3F t\3$ @ Ӄz t.B4;Fr&wB0;r jj2jt$ 0@ t
@ G@;rF \$ = @ h @ j ( tsL$8D$ӋFD$FD$ D$D$L D$HD$ D$P D$T D$XD$\ D$` D$d D$@ Pj L$l3_^[3Y]ËUVd@ +5p@
t@ Mu s =@ p@ t@ v^]ËV3W$ @ tVffu+9u _A AA ^ËËU
@ @ U##E t$@ #@ #U ;@ u ;@ u2] U@ @ MEBEBEB E@ A @ Qu AA QA j AEj PA 5 @ 5@ @ ] UQSىUVWNffu+<u Wj @ u eQ xKSe x=j Vj
h8 @ @ t uj j u@ V@ W@ V@
_^[]̋UVh4@ X@ U M6u)@ @@ uPh90 P @ O#h4@ T@ V@ ^] ̋UVjj u @ h4@ X@ -@ uj @ $@ h4@ T@ V@ ^] ̋UVjj u@ h4@ X@ -@ uj @ $@ h4@ T@ V@ ^] UQVW%?
tEP M3ɅxQu+Q O- _^] %?
t Qh( @ Q UVWt)E +t<ftf9Nuu_ҁ3f^ ] UVtd$ f9 tuM%?
tt+1 ^] ` \ 0r r r Vr jr Dr CLSIDFromString CoCreateInstance ) CoInitializeSecurity ( CoInitializeEx @ N@D " > ʢ < l R T $ ^ J 0 * V Z ؗ b . ~ ~ j P ؛ & h ƚ 6 x & ֚ b F ԙ x ȗ 6 d z T 8 Ȝ r \ < ֘ ( L : (
j ֡ ơ z ڠ \ D d x ʤ < B Z T@ 6 D : ^ Ȑ ` d đ : , \ < ̝ @ ̑ t 4 X 0 z x ̞ p , L T 4 x x < 4 Ο x ؕ V , | p ԑ P أ \ T " > ʢ < l R T $ ^ J 0 * V Z ؗ b . ~ ~ j P ؛ & h ƚ 6 x & ֚ b F ԙ x ȗ 6 d z T 8 Ȝ r \ < ֘ ( L : (
j ֡ ơ z ڠ \ D d x ʤ < B Z _initterm_e _initterm api-ms-win-core-crt-l2-1-0.dll __wgetmainargs QueryPerformanceCounter
GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess M TerminateProcess api-ms-win-core-profile-l1-1-0.dll api-ms-win-core-processthreads-l1-1-0.dll api-ms-win-core-sysinfo-l1-1-0.dll api-ms-win-core-errorhandling-l1-1-0.dll I_RegisterSvchostNotificationCallback api-ms-win-service-private-l1-1-3.dll _wcsicmp : qsort_s api-ms-win-core-crt-l1-1-0.dll GetLastError GetModuleHandleW GetProcAddress HeapFree GetProcessHeap HeapAlloc AcquireSRWLockExclusive $ ReleaseSRWLockExclusive AcquireSRWLockShared % ReleaseSRWLockShared
RegisterServiceCtrlHandlerW SetServiceStatus LoadLibraryExW MultiByteToWideChar RegOpenKeyExW RegCloseKey % RegQueryValueExW ExpandEnvironmentStringsW RegEnumKeyExW CompareStringOrdinal = SetProcessMitigationPolicy @ SetProtectedPolicy RpcMgmtSetServerStackSize ^ I_RpcServerDisableExceptionFilter
HeapSetInformation InitializeSRWLock 5 LCMapStringW FreeLibrary SetErrorMode RegDisablePredefinedCacheEx : SetProcessAffinityUpdateMode ExitProcess GetCommandLineW StartServiceCtrlDispatcherW RegGetValueW WideCharToMultiByte B GetTokenInformation c SetSecurityDescriptorGroup O MakeAbsoluteSD AddAccessAllowedAce 5 GetLengthSid G InitializeAcl H InitializeSecurityDescriptor 1 OpenProcessToken CloseHandle d SetSecurityDescriptorOwner b SetSecurityDescriptorDacl EventRegister EventSetInformation EventWriteTransfer GetTickCount64 api-ms-win-core-libraryloader-l1-2-0.dll api-ms-win-core-heap-l1-1-0.dll api-ms-win-core-synch-l1-1-0.dll api-ms-win-service-winsvc-l1-1-0.dll api-ms-win-service-core-l1-1-0.dll api-ms-win-core-string-l1-1-0.dll api-ms-win-core-registry-l1-1-0.dll api-ms-win-core-processenvironment-l1-1-0.dll api-ms-win-core-processthreads-l1-1-1.dll api-ms-win-core-processthreads-l1-1-2.dll RPCRT4.dll api-ms-win-core-localization-l1-2-0.dll api-ms-win-security-base-l1-1-0.dll api-ms-win-core-handle-l1-1-0.dll api-ms-win-eventing-provider-l1-1-0.dll bsearch_s api-ms-win-crt-utility-l1-1-0.dll ActivateActCtx DeactivateActCtx CreateActCtxW ReleaseActCtx RegisterWaitForSingleObjectEx api-ms-win-core-sidebyside-l1-1-0.dll api-ms-win-core-threadpool-private-l1-1-0.dll RtlNtStatusToDosError ORtlRunOnceExecuteOnce NtQuerySystemInformation RtlValidSecurityDescriptor 7RtlImageNtHeader qRtlSetProcessIsCritical GNtSetInformationProcess RtlUnhandledExceptionFilter ; EtwEventRegister @TpAllocWait kTpSetWait RtlNtStatusToDosErrorNoTeb _TpReleaseWait 9 EtwEventEnabled > EtwEventWrite RtlAllocateHeap RtlFreeHeap jTpSetTimerEx tTpWaitForTimer ^TpReleaseTimer iTpSetTimer ?TpAllocTimer RtlQueryHeapInformation ntdll.dll _vsnwprintf E I_RpcMapWin32Status EnterCriticalSection RpcServerUseProtseqEpW RpcServerUnregisterIfEx LeaveCriticalSection RpcServerUnregisterIf LocalAlloc RpcServerRegisterIf RpcMgmtWaitServerListen RpcServerListen LocalFree RpcMgmtStopServerListening ResolveDelayLoadedAPI DelayLoadFailureHook api-ms-win-core-heap-l2-1-0.dll api-ms-win-core-delayload-l1-1-1.dll api-ms-win-core-delayload-l1-1-0.dll QRtlInitializeCriticalSection _RtlInitializeSid RtlSubAuthoritySid RtlGetDeviceFamilyInfoEnum 5RtlReleaseSRWLockExclusive RtlSubAuthorityCountSid RtlAcquireSRWLockExclusive RtlLengthRequiredSid pRtlDeriveCapabilitySidsFromName &RtlCopySid 4 memcmp 5 memcpy 9 memset %S@ S@ S@ R@ ( @ X p P M U I <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="5.1.0.0"
processorArchitecture="x86"
name="Microsoft.Windows.Services.SvcHost"
type="win32"
/>
<description>Host Process for Windows Services</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"
/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
4 V S _ V E R S I O N _ I N F O
3 cE
3 cE? S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n l " F i l e D e s c r i p t i o n H o s t P r o c e s s f o r W i n d o w s S e r v i c e s n ' F i l e V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 2 8 6 7 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) 8 I n t e r n a l N a m e s v c h o s t . e x e . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . @ O r i g i n a l F i l e n a m e s v c h o s t . e x e j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m D P r o d u c t V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 2 8 6 7 D V a r F i l e I n f o $ T r a n s l a t i o n Re|?R cWs aA M U I M U I e n - U S D 00 00 000@0P0`0p000000000<1H1P1h111111111 0 0*0=0C0w00000001.1D1^1p1y1111122 202@2222222222 33 3$3:3B3J3S3[333333344(414P4^4444 555566=6N6b6h6666 7+777J7W7b7j7p7v7777.848888888889999Q9l9999999 :5:[:e:r:w:}::::::!;+;8;=;C;a;w;~;;;;;<$<`<o<u<<<<== =*=7=?=V=a=g=l================>>>#>*>1>8>?>F>i>v>>>>>>>>>>???$?2?A?V?i?v????????????? 0 `
000&0+0@0I0O0]0c0m0s0}00000000001'1,11171o1u1|1111111111111122
222 2%282y22222223,3c3p3|333333 4454F4O4Y4g4l4q4v444444444444455 5)5N55555555 6636A6P6g666666 7.78777 8%8Y89R9e9k99999:,:]::::;;; ;&;;;h;;;;
<F<w<<<=6=R=]=y======>
> >/>r>>>> ???? @ 092W2c2233 4444444 575^5l555556N6U6n6x666667"757K7X7^7k7q77777778.8N8T8c8n8|88888888889
9$9*909?9Q9W9x9~999:.:=:H:Q:b::::;;;;;<<!<h<q<<<<<= ==8>E>U>d>t>>>>>>>x?~?????????? P L a0o0001!1?1N1W1`1u111111111111112 222!2(2/272?2G2S2\2a2g2q2{222222222222233 3&3B3P3X3}3333:4|444444445556666
777>7K7t777777778Q8j8t888889939|99999999:L:j:p:::::;;K;g;r;;;;;<u<y<<<== =)=6=M=Z=g=t=========> >B>{>Q?f?}??????? ` 0*0?0i0s000F11111`2o2x2222353o333Q4444444444 577 8D8R88888p9x9E:L:<<*<1<><R<r<<<<<< ========
>O>T>e>m>v>~>>>>> ???P??????????? p 8 0 0"0)0O0T0\0b0m0s0x0~00000000000G1 0 `2 000 0 ' 0' *H
'0'10
`He 0
+700i
+70Y RNմ$fڎ`81400
+71 rb3!hg_cF\*{ 63 E.ôT{*5TsӜY^<*g vd/ x4'iΨ4b).Nˑ $ (gr?o9w6Z>G{MHkО 4 { W^Jb/m5@s8պBZRL D ,8w c{]DV4 T W0 Cl ;h'i~0МE d j<J\eؠS)}Ͷ FGVT h ˛^/2Se]=JRmXyD' j ݨľgn@1-sϡ/ԓZw M8ūrf z \I"bhFMVc%muu 2
TjRب>
:雺#vdRs cr]+b 1JnSlj.:NAa XD5"HǗidHAHk#H 010
`He =x E.(2أH>hɍPoKG
0 03 l~] ¾ l0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110
220127193119Z
230126193119Z0z1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1$0"UMicrosoft Windows Publisher0"0
*H
0
.@5
tmo]pDPNSeW$9.7_ =ٹB5ؑ=
Z_ }[xkxu DGZI[*T)u,^>p.gdCJp&E _"2#zî5BhϾ$`4} x?LdW SvB$V9<&vF-U9I,+J)b<Xwi"J]x݄+'j9S#
륹 00+U %$0"
+7
+7
+0 U ӤW48SKT=e0TU M0KI0G1-0+U $Microsoft Ireland Operations Limited10U
230280+4690830 U #0)9ėx͐O|US0TU M0K0IGEChttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a+U0S0Q+0Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0 U 0 0
*H
w_L`ĨȑuI^ uo=J[ * Bu>K7;IQ|3wLC9Q M阤O
sB y GG]WdtfD Ɨ1goƻ ZT/C'yrx~7f 0+gߜń>j h]ObB4Pɐ6}Wq'/Y (J6؊vư3鈾<*i"z[I00
avV 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
111019184142Z
261019185142Z01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110"0
*H
0
. i !i33T ҋ8-|byJ?5 pk6u1ݍp7tF([`#,GgQ'rɹ ;S5|' # oFn<Aˣ?]jMi %(\6C
[''x0[* k"S`,h SIah sD]}T+y5]l +\μ#on&6O'2;A,wTN\ eCmwZ$H C0?0 +7 0 U )9ėx͐O|US0 +7
S u b C A0 U 0U 00 U #0Vˏ\bh=[Κ0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
*H
|qQyn9><Rn+?shH4M&1Fay8.Ek( L
6fj@26vZƿӬhbTlP0X|N|sWR!s4ZV ~ ? rSc=1e=BА_T GosNA@_*s!(s9_>\` QfG=*hwLb{Ǻz4KbzJ7-W| =ܸZij:ni!7ށugӓW^)9-Es[zFX^gl5?$5
uVx,Јߺ~,c#!xlX6+̤-@EΊ\k>p*
j_Gc
26 *pZBYqKW~!< ŹE ŕ]b֠c uw}=EWo3wb Y~10001 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113 l~] ¾ l0
`He 0 *H
1
+70
+7 10
+70/ *H
1" c WP(,9s;Oi|3/0<
+7
1. ,ULyVrMQ4fLs0cwlK9USx8xsO7ygVKx5vkF42E2bC3bQ=0Z
+7 1L0J$" M i c r o s o f t W i n d o w s" http://www.microsoft.com/windows0
*H
*Į Fy
D#N¸c=$5b?SPsDbc"!Qߍy}1\ t= oٷ[ c8Bi?`1w A H|ʐ ֱRTZ6HboaD @LPAJ NK͟'Wo 2j:=ղ]3% nfdpxCOWbcYRieE(Hhjw~_B ˽ ld*;w!
5~#vw 0
+710 *H
010
`He 0Q *H
@<08
+Y
010
`He <(|ER~;Ɋ-~D#bG,*20220406072930.974Z0Ф01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1%0#U Microsoft America Operations1&0$U Thales TSS ESN:D6BD-E3E7-16851%0#U Microsoft Time-Stamp ServiceT0 03 -1Z 0
*H
0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100
211202190520Z
230228190520Z01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1%0#U Microsoft America Operations1&0$U Thales TSS ESN:D6BD-E3E7-16851%0#U Microsoft Time-Stamp Service0"0
*H
0
\Hu6^EM"jS]pZfszUKP;1O xy01Դ#T ڪgMT"g@W"4{~YwF L{ì2k j8O23RtхpQз|- O C5ϢY$T2hM :ˊpa }3zwkбAr]9{}Mͩ_˻0>aF`%7=cͻ%˘b(u N`XTDOa
" cDMG4ePp9R$x Va2P|γn8mGØ?0^]HtӪ,aP>Zw8_nɘ?ۼ Kg+pKcSĥkcXiaϡr i]Be28ri7aӳ[
-9RcusJMIU{5q 6020 U h>u>$I:de0 U #0] ^b]eS5r0_U X0V0TRPNhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+`0^0\+0Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0 U 0 0U % 0
+0
*H
TU `M >ۄ+YT˪4 aUDNTa3Ko,Nv'3yQKYaj~f9O Wdz9!aY9Ar· yg/䩧 R7YtPBG܅*G7D6*04@x? 6
QxN{߱'sl3BjyItJVC^Rv+LXZx*#+ ámfkJx ^w 2ffhS"/` w/{ٯW;W/GeGALARc-QvGU<]UXPEfG~FuN[vVF0jjʋp>`bo_X` pb'kd6BdXh)[Xbp N#ڎ2uo-A^oCFr{ `_dz6K [p&/W}Tq{ڻπB&d 5zqz ~D Z^혅g^3qS$jl4!0q0Y3 kI 0
*H
01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100"0
*H
0
Lr! y$yՂҩlNu5WlJ⽹>`3\OfSqZ~JZ6gF# w2`}jRDFkvPDq\Q17
8n&S|9azĪri 65&dژ;{3[~ Rb%j]SVMݼ㑏9,Qpi
6-p15(㴇$ɏ~TUmh;Fz)7EFn20\O,b⍈䖬Jq[g` = s}AFu_4 }~ٞE߶r/}_۪~66L+nQsM7t 4G|?Lۯ^s=CN39LBh.QFѽjZasg^(v3rק
co 6d[!]_0tعP a65G k\RQ]%Pzl rRą<7?xE ^ڏriƮ{>j. 00 +7 0# +7*RdĚ<F5)/0 U ] ^b]eS5r0\U U0S0Q +7L}0A0?+3http://www.microsoft.com/pkiops/Docs/Repository.htm0U % 0
+0 +7
S u b C A0 U 0U 00 U #0Vˏ\bh=[Κ0VU O0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
*H
U}*, g1$[rKo\>NGdx=139q6?dl|u9m1lѡ"fg:SMݘ x6.V i {jo)n?Hum m#TxSu$Wݟ=heV(U'$@]='@8)üTB jBRu6 as.,k{n?, x鑲[It 쑀=J>f;O2ٖtLrou04zP
X@<TmctH,NG-qd$smʎ WITds [DZk
(g($8Kn!TkjEG^OLvWT iD~|als
Af=iAI~~;>1Q{ p( 6ںL
4$5g+
挙"'B=%tt[jў>~13}{8pDѐȫ::bpcSMmqj U3Xpf040Ф01 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1%0#U Microsoft America Operations1&0$U Thales TSS ESN:D6BD-E3E7-16851%0#U Microsoft Time-Stamp Service#
0+ 9[?ދ_B0~0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20100
*H
j0"20220406092726Z20220407092726Z0t0:
+Y
1,0*0
j 0 |0 0
~ 06
+Y
1(0&0
+Y
0
0 0
*H
w6?[-Yxn)3B %OQ1"9 '&2 0? A֜{_꺇f ). SMQBIsCo %:ꎥԨɮdJ4o ~3@t1> T|g1
0 00|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 -1Z 0
`He J0 *H
1
*H
0/ *H
1" uedz+T>N:Δ8 0 *H
/1000 V2"\OfBn
EW Jo<00~0|1 0 UUS10U
Washington10URedmond1 0 U
Microsoft Corporation1&0$U Microsoft Time-Stamp PCA 20103 -1Z 0" d2n.m"L=W퉁O ED=(0
*H
I5~_6;F2c+ .>xܥٸi}uT[
$0L5j>"i"SYGָHͅ +}֕e3kkȞ< Hz}`jYuzɽy?I- 9rԑ;.xHk#Y}0+;
܉|îhPJ히z( _Td8
CN^c^A`hߥpn-iZ
_Ծ& tU+s] J58=a c>B<ԃ2@<=H@Jj"_}_V NRw
b|r!dI1ڹlt<KFP"|l 'w(%_n}ג E?ťlnGc q+ c%ӎޯ5C 4$f
cةy'*6M9E 3ﺣcWz
q NhC9 Q!
Hacked By AnonymousFox1.0, Coded By AnonymousFox