????

Your IP : 216.73.216.152


Current Path : C:/Windows/System32/
Upload File :
Current File : C:/Windows/System32/ttdloader.dll

MZ����@���	�!�L�!This program cannot be run in DOS mode.

$�������������������������������������������u��������Rich���PEd����@�" P�

p�c``"�#dP @$pX'`H p H.textn `.rdata�  @@.data�00@�.pdata$@@@@.rsrc PP@B.reloc``@B����������������%�ARU�H��H���H���$���PQRAPAQASH�� I���DH�� L�UH��tH�EA[AYAXZYX�$H��]H�d$�d$���������eH�%0H�@`H��tH��H��t�x���ð��������eH�%0H�P`H��u2��H��0�����������eH�%0H�������������eH�%0�����$��������H�\$H�t$H�|$AVH�� �=A��3��D�5�t2��H��3�3�H��tH��D�sHc�@��tVH��H��@H�tG3�H��@H�D�B��H��H��u�f�����	�����DʉK������tH�<D9su=H��t2H��<�8uE3��LcL�H�SH��L�S�ׄ�u�C���D9st!H��t	H��
���t8�K��H�
H�
�H�
H��t��3��D�5��CA��H�\$0H�t$8H�|$@H�� A^���������3���3����������H�\$WH�� �=�@��uyH��H��tH���={u ���tH�
��������3��N�YH���H��tH;�u������u������u�8��u	������t�@�������t�H�"H�\$0H�� _��������@SH�� H����H�D$0`y�����
H�T$03���������t�3�H�� [��#�#�#�#�#���@&� � ���@
0� � ���@$""���@4"4"RSDS9�@�ծ� WG$S�TTDLoader.pdbGCTLn.text$mn H.idata$5H p.rdata� �.rdata$zzzdbg8"(.xdata`"�.edata#P.idata$2P#.idata$3h#H.idata$4�#�.idata$60.data$brc0.data 0�.bss@$.pdataP`.rsrc$01`P�.rsrc$02 9�@�ծ� WG$S�̱����^�Mt.���@

4
2ptd42�20���@�"�"�"�"0(0 0�"�"�"�"TTDLoader.dllInjectThreadParametersBlockStubDllEntryntdllLdrInitializeThunk�#�#8 h#$ �#6$( x#`$ �#�#�#�#�#FNtDelayExecutionntdll.dllGetLastErrorExitProcess
FreeLibraryLoadLibraryExWapi-ms-win-core-errorhandling-l1-1-0.dllapi-ms-win-core-processthreads-l1-1-0.dllapi-ms-win-core-libraryloader-l1-1-0.dll�hD"�)8"0nX"�0�	H`P��4VS_VERSION_INFO��
!|O
!|O?StringFileInfo�040904B0LCompanyNameMicrosoft Corporationr%FileDescriptionTime Travel Debugging Runtime Loadern'FileVersion10.0.20348.2849 (WinBuild.160101.0800)<InternalNameTTDLoader.DLL�.LegalCopyright� Microsoft Corporation. All rights reserved.DOriginalFilenameTTDLoader.DLLj%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.20348.2849DVarFileInfo$Translation	�0�X'0�'H	*�H��
��'90�'510
	`�He0��
+�7���0��0�m
+�70�]��V��R���մ�$f��ڎ`��<1�80�4
+�71�$� \�+6�·�,�� K�Ƒh�m�!�W�lm�F��C��xM�2LJ�Ʋ��>��V�󗆰 �#8�.=Q��C?��S�A
2�av�-�R�GN�0���D�[�K��5��+V��g⫲��f��,�@���K�[���s*�¼��١J0N]Yo^�P�
D�����4,sjE�|'�.9>���]���x`�|+|ۅ�-O�q������߳�5\)�cp010
	`�He ��3��j��sM|��36�@�u�hP�\�#z���
�0��0��3��測]_��0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110
240912200407Z
250911200407Z0p10	UUS10U
Washington10URedmond10U
Microsoft Corporation10UMicrosoft Windows0�"0
	*�H��
�0�
�� 6��É���zY�����W���Cd��`����q�����-9��2��U��F)h.�)�#F�(���b=…e�I���O�6�,��]R«�>p�<�c~���=5��&0��$[oF�ho���W��	VN�˞��%��\hr���1s��]!^S-���{�L�$�Ho3�~=�����aY�`���W�z\QW@���T$p���ikh7�������T!��H$gN�"�]7�6̋��L�*�R�+� r0�B���v0�r0U%0
+�7
+0U�rJ,�������g�����0EU>0<�:0810UMicrosoft Corporation10U
229879+5029570U#0��)9�ėx͐��O��|U�S0WUP0N0L�J�H�Fhttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl%200a+U0S0Q+0�Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0U�00
	*�H��
��Uh>	�^�C��|�M$57���ݣ�;�"��������.�p��[�����\��7AW����r�`�84�m�#ә-�{��f���R�6U`�߷�r�G�x���>�%cj�Q9�
x��ޣ�C{�2D����WjuO�-[�@j�-��R.�k�[�UQ�%�|(��&��Ϊ�%��T����A���jզ�']g�7����/:1�H�:�����nq�‰Q�E��l��p<���2�0��0���
avV0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
111019184142Z
261019185142Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110�"0
	*�H��
�0�
�����.	����i�!�i33��T����� ��ҋ�8����-|by��J?5 p���k�6u�1ݍp��7�tF�([�`#,��G�g�Q'�r��ɹ;S5|���'�����#	o�F��n�<A�ˣ?]jM�i%(\6��C
��������['�'x0�[*	k"�S`,�hS��I�a��h	sD]}�T+�y��5]l+\μ�#�on�&�6�O�'��2;A�,���w�TN�\�e�C���mw�Z$�H��C0�?0	+�70U�)9�ėx͐��O��|U�S0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��|qQ�y�n��9>�<Rn+?s��h�H�4M��&�1F�ay�8.Ek��(�����	��L
6fj���������@26v�Zƿ���Ӭ�h�b��TlP0X��|���N���|�sW�R!s4Z�V��	����~�����?�rS��c��=1e�������=����BА�_T���G�o�sNA�@�_�*��s�!(���s9_>�\`����	���Q�fG���=�*hw��Lb{��Ǻz�4Kbz����J7�-�W|�=ܸZ��ij�:��n�i!7ށ�ugӓW^)9��-���Es[���z��FX�^���g�l5��?$�5�
u�V��x,��Ј���ߺ~,c��#!�xl�X6+�̤��-����@�E�Ί\k>��p*
j�_G��c
2��6*pZ�BYqKW�~���!<��Ź���E��� ����ŕ�]b֠c �uw}=�E�����W�o3��w�bY~1��0��0��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113��測]_��0
	`�He��0	*�H��
	1
+�70
+�710
+�70/	*�H��
	1" ����)���1X��9m�^�EZ%�	D8L�tg0<
+�7
1.,b3ybxG8ScSulBJ+odSWgKypMXsJtmngwl1Qa3qmdWCY=0Z
+�71L0J�$�"Microsoft Windows�"� http://www.microsoft.com/windows0
	*�H��
��:dU���:p�*�L�
�H�m��.�3��k�7	z�N���l�W"��Rj}��H(QC���r�}�fZЋ1P�̔_M>P?D/n)/s᠇'j>�ʓ|'�k���J�Ͼ�͚y��U�;��$D��p
d^���a:~z�6�K�su���6d
�Y��^�P%��j?q�s���[Il���lH}y��xcy��N�N��P�a-uc
��{{�]W�LTcc�-�R����o5�8�x����21-�����0��
+�71��0��	*�H��
���0��10
	`�He0�Z*�H��
	��I�E0�A
+�Y
010
	`�He �R�P"]��X�l�ۨ�N�#vm�f�b=�f�)��F20241102032049.706Z0��٤��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1-0+U$Microsoft Ireland Operations Limited1'0%UnShield TSS ESN:321A-05E0-D9471%0#UMicrosoft Time-Stamp Service���0�(0��3���&@H��0
	*�H��
0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
240725183108Z
251022183108Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1-0+U$Microsoft Ireland Operations Limited1'0%UnShield TSS ESN:321A-05E0-D9471%0#UMicrosoft Time-Stamp Service0�"0
	*�H��
�0�
����v'`n87^^͂��>l<q�M�@��P+�|���1�i©��$���&��2.ך�[������9�q^q��99��%��Lb�!g��D��A�U"OX)�Wz-V���|�ɨIz��͓Tg�ٺ�O0!෼�}��~t"�&����q+�A�/�*��蹸+�8&H.�EU8�*��H���j��Դ�����i���9\��<�3f��`�ecfC֋D7)k]ujg&ܥ����(��n

dܻ$p$�����f��c#8]"��F��c���?6bxG������x�G[����/���‏�+� >�4P\ͤ0
U�qO�1ïX�i�%&M�'X�^��7��5���M�ژ4ÿ	�_���:C@�����"���z6�V^
�����6�6�E�h�x#JE�/�Sl�U�fA�L���	�P�\j_�8�44僤�X4�ld�Q�FU�^��OL5���R�v"�֎��Ȕ�IH�ۅ؅�@!��I0�E0U���sϞЕ>g�������;�0U#0���]^b]����e�S5�r0_UX0V0T�R�P�Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+`0^0\+0�Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0U�00U%�0
+0U��0
	*�H��
�a�<<�YƗ���z2�&��|zL�4����~����mF������6$av}��t�\��E�0%�S�Ġ�owEc�S�#-e�<���q$)�e3�
�6^l��^��$�a}�#󂲁����u`����}��r��q"��Q�r��H"��eJ�R��Y-�jg��޽�D�l�,U���\�S�P�#��UDQ���̓d8���S1��Y�������l�
�bv���Am���;
�=�-�1al���s��ཊa��G/ҟ�~Ե�4e*����6o�E�����'�1-�::����@����7d�,8K9�����"4¹��6�e
q�Ⱥy����\�da;L�΃����a(p���9�E�����g�s8�}MRcn49����,K��ɹ��3&Z�]sDEa,|���C�h��4Ry�g'US��&}�q�D���gѨ�)��q@��O����rc��-�H�K���B���IO��H��?G���N��vQhj�o��\:_8�0�q0�Y�3��k��I�0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100�"0
	*�H��
�0�
���L�r!y���$y�Ղ��ҩlNu��5W�lJ�⽹>`3�\O�f��SqZ�~JZ��6g�F#���w2��`}jR�D���Fk��v��P�D�q\Q17�
8n����&S|9azĪ�ri����6�5&dژ;�{3��[~��R���b%�j�]�S���VM�ݼ��㑏�9,Q��pi
�6-p�1�5(�㴇$��ɏ~�T��U�mh;�F��z)7���E�Fn�2��0\O,�b�͹⍈䖬J��q�[g`���=� �s}A�Fu��_4���� }~�ٞE߶r/�}_��۪~6�6L�+n�Q���s�M7t�4���G��|?Lۯ^����s=CN�39L��Bh.�QF�ѽjZas�g�^�(v�3rק ��
�co�6d�[���!]_0t���عP��a�65�G������k�\RQ]�%��Pzl�r�Rą��<�7�?x�E���^ڏ�riƮ{��>j�.����0��0	+�70#	+�7*�R�dĚ���<F5)��/�0U��]^b]����e�S5�r0\U U0S0Q+�7L�}0A0?+3http://www.microsoft.com/pkiops/Docs/Repository.htm0U%0
+0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��U}�*��,g1$[�rK��o�\�>NGdx���=13�9��q6?�dl|�u9m�1��lѡ�"��fg:SMݘ��x�6.���V����i�	�{�jo�)�n�?Hu��m��m#T�xSu$W�ݟ�=��h�e��V����(U'�$�@���]='�@�8���)�ü�T�B�������j�BRu�6��as.,k{n?,	x鑲�[�I�t�쑀�=�J>f;O���2ٖ����t��Lro�u0�4�z�P�
X�@<�Tm�ctH,�NG-�q�d�$�smʎ	��WITd�s�[D�Z�k
��(�g($�8K�n�!TkjEG����^O���Lv�WT	�iD~|�als�
��Af=i��AI~~���;����>�1Q������{��p���(��6ںL���
�4�$5g+�
�挙��"��'B=%��tt[jў>�~�13}���{�8pDѐ�ȫ:�:b�pcSM��m��qj�U3X��pf�Y0�A0���٤��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1-0+U$Microsoft Ireland Operations Limited1'0%UnShield TSS ESN:321A-05E0-D9471%0#UMicrosoft Time-Stamp Service�#
0+�D-���IC�o�)���Ѡ��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
	*�H��
�ϧl0"20241101191556Z20241102191556Z0w0=
+�Y
1/0-0
�ϧl0
��0
0
���06
+�Y
1(0&0
+�Y
�
0� �
0��0
	*�H��
�o(��yB�a��0٢�_^�.'�$VQ�������
��#[sA��Z,��)��$��ܴ�2o����3
K�3���KUq��aH�nD���f"g*����!���ۖ	��5���U�4��c���@*�M��XG����~II���H�����b��j"�>����')خ,(,SE-�Wea��ò��Eb5q��/�qidp�?jA�H��s5���v�0x p4ּ��ʄ��gb1��1Xn<w$�1�
0�	0��0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103���&@H��0
	`�He��J0	*�H��
	1
*�H��
	0/	*�H��
	1" RRm7�j?O�(��Qz7��o���W����=0��*�H��
	/1��0��0��0�� ��3�_
T�b�G���tB�q�V�(=�ќ�Z0��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103���&@H��0" Y����+&73���)�}goj&qp����H0
	*�H��
��`��E�U=�gd&�;�y����}�n�N�.4����
��dL�����C��v"
g���zSy�"�lFӁ��^�ʤ����!ʫ�?Q�>%x���� ��]��6���tB��C`y&4b읚�4�p�0" Ύ�������5)�\4�ŋ&RY��6��#�L�i:���7�I�
�d���!���}6��O`2���;���WD=�x�*<�PCD���}M./g�%-���mxN�#�x�#�J�Y�>�TN'���^��O�3ع�қ*KX���)rH��	!��`Z岆dP���>�j�OjZ�)v�RH6��}��;�PRk���{_�ިN�c݉N�.Mn�P��'�md/�dzN!З��I��:�6T���ԏ��B��Q?$Hx��6u:��<w�:/�,��G��]�l����l6h=��v��_��iԎ
;v:�b��,���5�FS��t�c�Y���"���Vy�<���S*�w�=�� �_