| Current Path : C:/Windows/System32/ |
| Current File : C:/Windows/System32/shimeng.dll |
MZ� �� � @ � � � �!�L�!This program cannot be run in DOS mode.
$ ��H�y��y��y�M ��y��y��y�M ��y�M ��y�M ��y�M ��y�M $�y�M ��y�Rich�y� PE d� � � " P �
p �K `A @$ | �& < P @ T ` $ �! p 8 H! p .text `.rdata � @ @.data 0 0 @ �.pdata T @ @ @ @.rsrc P P @ @.reloc $ ` ` @ B ��������q:_0#�@�H��(��u�F � H��(���������������ff � H;
� uH��f����u�H��� ������H��(��u� � H��(���������H�\$ UH��H�� H�e H�2��-�+ H�
Y H��t H;��� H�M �� H�E H�E�� ��H1E�o ��H1E�� ��H��H1E�� ��H�MH3EH3�H�MH�E�X �EH������� H�� H3EH3EH#�H��HE�H�
� H�\$HH��H�
� H�� ]����������q�����H�L$H�� H�
M �/ H�8 H�D$HE3�H�T$PH�L$H� H�D$@H�|$@ tBH�D$8 H�D$XH�D$0H�D$`H�D$(H�� H�D$ L�L$@L�D$HH�T$P3�� �"H��$� H�� H��$� H��H�O H�� H� H��$� H� �� ��� �� � Hk� H�
� H� H�� H�D$hH�� H�D$p3�� H�
}
�� �� � �H��� H�Ĉ ����������������������������� �������������������ff � ����������������������ff � �%� 0 � �0 � 8 0 � �! � �! � �! � u� �! � �! � �! � �' r( ^( @( �' �' ( �' $( �' |' h' � � � � � � � � ` � � $ `" `" �
d �" �" � $ �# �# � $ $ RSDS���&�^�d�۫� P�� ShimEng.pdb GCTL � .text$mn � 6 .text$mn$00 H .rdata$brc H! p .idata$5 �! ( .00cfg �! .gfids �! p .rdata `" � .rdata$zzzdbg $ 0 .xdata @$ | .edata �& ( .idata$2 �& .idata$3 �& p .idata$4 h' , .idata$6 0 .data 0 .bss @ T .pdata P ` .rsrc$01 `P � .rsrc$02 ���&�^�d�۫� P�ǁu�M>���� B
4
2P � �$ h$ �$ �$ �$ % 9% _% �% �% �% $& U& & �& �$ % *% P% v% �% �% & @& r& �&
ShimEng.dll SE_DllLoaded APPHELP.SE_DllLoaded SE_DllUnloaded APPHELP.SE_DllUnloaded SE_DynamicShim APPHELP.SE_DynamicShim SE_GetHookAPIs APPHELP.SE_GetHookAPIs SE_GetMaxShimCount APPHELP.SE_GetMaxShimCount SE_GetProcAddressIgnoreIncExc APPHELP.SE_GetProcAddressIgnoreIncExc SE_GetShimCount APPHELP.SE_GetShimCount SE_InstallAfterInit APPHELP.SE_InstallAfterInit SE_InstallBeforeInit APPHELP.SE_InstallBeforeInit SE_IsShimDll APPHELP.SE_IsShimDll SE_ProcessDying APPHELP.SE_ProcessDying H' �' �! �& �( H! �' r( ^( @( �' �' ( �' $( �' |' h' �RtlCaptureContext �RtlLookupFunctionEntry =RtlVirtualUnwind ntdll.dll WQueryPerformanceCounter GetCurrentProcessId $GetCurrentThreadId �GetSystemTimeAsFileTime GetTickCount �UnhandledExceptionFilter �SetUnhandledExceptionFilter GetCurrentProcess �TerminateProcess KERNEL32.dll 2��-�+ �] �f�� ) $ @ ^ $ d | $ � O $ ` � ($ � � 0$ 8$ � 0 � H `P � �4 V S _ V E R S I O N _ I N F O ��
! |O
! |O? S t r i n g F i l e I n f o � 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n H F i l e D e s c r i p t i o n S h i m E n g i n e D L L n ' F i l e V e r s i o n 1 0 . 0 . 2 0 3 4 8 . 2 8 4 9 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) L I n t e r n a l N a m e S h i m E n g i n e D L L ( I A T ) � . L e g a l C o p y r i g h t � M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . T O r i g i n a l F i l e n a m e S h i m E n g i n e D L L ( I A T ) j % P r o d u c t N a m e M i c r o s o f t � W i n d o w s � O p e r a t i n g S y s t e m D P r o d u c t V e r s i o n 1 0 . 0 . 2 0 3 4 8 . 2 8 4 9 D V a r F i l e I n f o $ T r a n s l a t i o n � $ ��h�������(�0�8�����ȡСء