Edit C:\Program Files (x86)\360\Total Security\safemon\SafeWrapper32.dll
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ?????????????????????????????????????????????????????????Rich???? PE L ??b ? ! ( w- 0 p p !I @ ?: c (7 ( P ? ?F H? ` L ?0 0 ? .text ? `.rdata ? 0 $ @ @.data 4 @ 0 @ ?.rsrc ? P 8 @ @.reloc ? ` B @ B ??U???u?u?u?uj?? 0 p3??????]? ??????U???u?E?uP?EPj??0 p3??????]? ??????U??QQSVW3?3?9]t`?u;?tY9]tTj?u?E?P?0 p??|A9]v.?? s)9^t$f9tjV?E?P?0 p??uG??;}r??3?C?E?P?0 p???3?_^[?? ??????U??U3????? ?J???? f?:v|?y-uv?y-up?y -uj???at??Au^?Q??pt??PuQ?Q??it??IuD?Q??mt??Mu7?Q??st??Su*?Q??wt??Wu?Q??it??Iu?I ??nt??Nu3?@]? ??????U???0 SV3?h ??????SP???????- ???E?Pjj?u?0 p??;?u3?? ??????P????? ?0 p???????# ?@?E?9]vx?EW?~?E? tg???ta?M???p?@??u?+?f?E?E?@S?uf?E??E?P?M???????u&9E?t ?E?P??????uj?E?P?u??0 pC?E???;]r?_??^[?? ??????U???u?EP?EPj??(0 p3??????]? ??????U???u?E?uPj ?EP?u?0 p??}3???E]? ??????U???u?u?u?uj?????]? ??????U??QQ?u?E?P?00 p?EP?E?Pj j ?,0 p??}3???E?? ??????U??QQV3?VV?u?E??uPVVV?u?40 p??|?E;?t?M?3?@?3?^?? ??????U???\V3?3?j>f?E??E?VP?u??A ??Vj?E?PVj??<0 p??}3??=Vj?E?P?E??P?>?????t?9u?t?Vj@?E?P?u??&?????t?MZ f9E?uE?^????????U???? SW3?3?j>f??@?????B???SP?]?]?? 3?h f??8?????:???SP? ?}??Sj?E?PSj???<0 p??} ? 3??? ?E?VSj?M??Q??P??????tu9]?tpSj@??@???P?u??j?????tZ?MZ f9?@???uL?E?M?S?j?E?P??V?@?????t0?u?Sj?E??PV?u?&?????th F pj ?u??????E;?u ? 3??/ 9u?? 3?F?E?SjP?M????QP???????? f?E?f?M?U?f?E?f?M?U?f;??? ? f;??? ??SP??8???PR???????? ?} ?? V?? F pP?E?P?0 p??uU??$F p??f?@@f??u?HH;?t?f??\tf??/u??f??\tf??/u?u???P?@0 pYY??u?E?C;]r???}? t ?E? ?????E?E?3?E?;E?????};?v? F pV?0 p??Ou?M3?9M???^_[?? ?7?]?????????U??M??u3?? ?A<?D(?]? ??????U??M?3?S??u)?Y??u f;?wV??? f;?^w9Auf;?uf;?t? ?[]? ??????U??} t/j\?u?D0 pYY??t??f?8 th81 pP?@0 pYY??u@?3?]? ??????U???u?H0 p3??????]? ??????U??Uk?S3???C?????V?u?13?"?B??t@3???C??????1"?B??t??3???C?????2^??[t??]? ??????U??h ? j ?u?????]? ??????U??jh ?uj ?$???]? ??????U??? jj?E?P?E?P?u?80 p??|?E??t?M??E??3??? ??????U???XVW3?3??u??}???j4??E?VP?u?? ??9u?? VV?E?P?u?P0 p???? ?E?E?E?P?E?P?E? ?u??E?@ ?u??u??L0 p??E?P???????| ?E?P?0 p;?|=?E?M??M??H?M??H?M??H?M??H?M??H?M??H?M?H?M?H 3?@?3?_^?? ??????U??E??$??tf?8 t?M?Qj P??????????3??? ??????U???83?f?E?VW3??}?f?3??}?u?u?}?????u?u?u??u??9u?? ?u???????? VV?E?P?u?P0 p???? VVj`jjh? ?E?E?V?E?P?E?Ph? ??E?P?E? ?u??E?@ ?u?u??X0 p??E?P??????| ?E?P?0 p;?|e?E?P?u????????9u?wR;?tN?? ? wFS?_S?????E?;?t4SVP?? ???E?PW?u??u???????t ?E?M????u??N????u?[9u?t ?u??T0 p?E??3?_^?? ??????U??Q?e? SVW?E?P?u????????& ?{CTCF? ?{ ? ?C?M?;??? ?{$? ?? ?{ ?? 9K(?? 9K ?? ???3??v ?t,EA;?r??{$????? W?????????? Wj V?? ?E?M?0?9??S$??? ?8j%Y?s,?f??K$? ??Q?K(?Q? P? ?{ 3????9sv??G8?Ejd?u?u?\0 p????t?E F;sr???E????8j?? Y?S?????3?@?S?????3?_^[?? ??????U??Q?e? j j?E?Pj?u?<0 p??| ?U3?9M???? 3???????? ??????U???S?]3??MZ 3?E?f9u ?K<?9PE u'?QV?L f;?t?d? f;?u??? ??? ? 3?? ?Qx?I|???? ???? ??Q?q ?U??U?UW?y$????f??u?U+Q;U?sW?E????M?I3?U?M???v>???E? :u??t?J:HuBB@@??u?3????????t?UB?U;U?r?E?_^[?? ?E?G;E?s?M?U????t? ????????U???tS?]W3?Wj?E?PWj??<0 p??}3??gWj?E?P?E???P??????t?V?u?Wj?E?P??V??????t5?E?;?t.WjP?M????QP??????t?E?;?w ?M??;?w?E??E?;?u?3?^_[?? f9E?s??u?V?u??(G pW?# V?u??(K pS? ???3?f??(G pf??(K p?5D0 pj\W??j\S?E???M??(??t???t?3?f?Q3?Of?HOf?GGGf??u?jY?81 pK?Kf?CCCf??u?j??Y?P1 p?90O pu?E??0O p3?@?E?????????U??Q?ES3?VW?E;?te?M;?t^f9t[f9tT?d0 p+???E?uf9t*?f??t>P?????E??7P????+E?YYuFFf97u?3?f9t?E?EGGf9u?3?_^[?E????????U???SW3?3?]?}???Sj??E?PSj??<0 p??|u?E?;?tn?@;?tgV?pD;?t^f9X@tXh?1 pV?!???YY??uDh?1 pV????YY??u3h?1 pV?????YY??u"hx1 pV?????YY??uhh1 pV?????YY??u3?C^_??[????????U???( 3?Vf??????? f??????3?V??????h( ????????????Pjj??<0 p???? f9??????? h02 p???????]???YY??tF?uh2 p???????D???YY??t ???????tj?Qh 2 p???????!???YY??t ??????tj?.h?1 p???????????YY??uh?1 p???????????YY??tj^???3?^????????U???p SVW3??E?P?u?u??u???0 p???4 ?=|0 p???????E? f?E?3?f?E?E?P?E?P??E?P?0 p?????E?;??? ???E??? h?2 pP?00 p?E?P?E?P??j@[?E?E??E?Pj?E?P?E? ?u?]?u?u??x0 p???? 9u??? ?u??T0 ph?2 p?E?P?u??00 p?E?P?E?P??E?E??E?PjVV?E?Pj? h?2 pP?00 p?E?P?E?P??j@[?E?E??E?PjVV?E?Ph? ?E?P?E? ?u?]?u?u??t0 p???? ?u??T0 p?}??u?u??2 p??}?u?p2 p??}??? ?L2 pP?E?P?00 p?E?P?E?P??E?E??E?PjVV?E?Ph? ?E?P?E? ?u?]?u?u??t0 p??|~9u??? ?E?P?E?P?p0 p??|c3?f?E?? f?E??????E?E?Pj?u??l0 p??|8?E?E??E;?u??u?| ?E? ??u??E?j?E?PjV?E?P?u??h0 p9u?t ?u??T0 p_^[?? ??????U???( 3?f??????? f??????j ??????h( ????????????Pjj??<0 p??|$f?????? th?1 p?????????????Y?Y????3?????????U???` SVW3?3?h f????????????SP?]?]?]??) 3?h? f????????????SP? ?500 p??h?4 p?E?P??j@_?E??E?h4 p?E?P?E? ?]?}?]?]???E??E?E?Ph ?E?}?=x0 pP?E? ?]??]?]???;?}?E?Ph ?E?P??;??? 9]??? h?3 p?E?P??E?Ph ??????Pj?E?P?u???0 p?u???T0 p;?}3?? ???????? h ?u??????P??0 p??????j\P?D0 p??;?t?3??????Of?HOf?GGGf;?u???3 p??????????f?@@f;?u?+?????OOf?OGGf;?u????????????????P???????t?E? ?E?_^[?? ??????U???H SVW3?3?? Wf????????????SP?]?]?]??W 3?h f????????????SP?< ?500 p??h05 p?E?P??E?E?E?Ph ?E?P?E? ?]??E?@ ?]?]??x0 p??}3??? 9]??? h$5 p?E?P??E?PW??????Pj?E?P?u???0 p?u???T0 p;?|????????? ??0 ph ??????P??????P?????????OOf?GGGf??u?jYh ??????P?u?5 p??????????OOf?GGGf??u?jY??4 p?????Pf??(?????t?E? ?E?_^[?? ??????U???8 VW3?3?h f????????????WP?}?}??? ?500 p??h6 p?E?P??E?E?E?Ph ?E?P?E? ?}??E?@ ?}??}??x0 p??}3?? 9}?th?5 p?E?P??E?Ph ??????Pj?E?P?u???0 p?u???T0 p;?|???????u=??5 p??????f?f; uf;?tf?Hf;Ju????f;?u?3??????;?|3?G??_^????????U??QQd?0 ?@(u?= G p t?E?P?E?P???????t3?@??3?????????U????e? SV?u??Hf?@@f??u?+????f?E?E??f?E??E?P?E?Pj j ?u??$0 pV???O?????tSh ????^??[|?E??3??? ??????U??? SVW3??& Vf??????3??????SP?# 3?h f????????????SP? 3?Vf????????????SP?? 3?Vf????????????SP?? 3???`Vf??????? ???SP?? ?=?0 ph ?u??????P?]?]?]?]????H??????j\P?D0 pYY;??d 3?f?H??????tv3?Vf??X?????Z???SP?[ h ??????P??X???P?????X???OOf?GGGf;?u?jY??X????81 pP??U???;?tSh7 pP?!???;?t??3?@?? h ??????P??????P????u??????????OO??tjf?GGGf;?u?jY? 7 p?????Pf???????uZh( ??????SP? h ??????P??????P??0 p????????OOf?GGGf;?u??f?GGGf;?u?jY??6 p?f?3?f??????? f??????S??????h( ????????????Pjj??<0 p???? ??????j\P?D0 pYY;??? ?MQ?M?Q??????Q??P?^??????? ?u?;??? ?E?Pj?????3??E?9?? ?a ??? ?M9]?t???u#P??? P?????9]?t ?u ?? ??? ?=?0 ph ??????P?????P??j@?u?????P??0 p??9]?udh ??????P??????P?????????OOf?GGGf;?u?jY??6 p?????Pf??5????E?;??? Sh?6 pP??????E?;?t|?u??u???????uJ?????P?U???????Pt?????;?t,Sh7 pP????;?t????q?????th? ?h ?8????E??E @?E?;?? ??????h? ??hz ?h ?????u?V?????9]??;????u??W????F p?(???h? ?h ?????3?_^[?? ??????U???, SVW?( V3???????WP3??? 3?f?????????F?f??????W??????V????????????Pjj??<0 p??|=f9?????t4f9= @ pt+? @ pP??????????YY??uC??i? ?? @ pf98u?3?_^[??3?@????????U??E?0O p?EHu? G p ?2?????t3??3?@]? ??????U??? ?e? VW3?h Pf????????????P? ???E?Pj@j?5$G p?A????=$G p?(O p??E?P??u?j?5$G p? ????(G pV?p???V?\???_^??t%??????P??????t??????t??????P?????????????`??Q????a?%$G p???????U????e? S?]VW?S. p+??E??E?P??(O pj@?jS?E????????t?E?P?u?u??jS??r???_^[?? ??????U??? 3?h Pf????????????P?? ?????????u%??????u?o???P?8????$G p??tAP?K????9?u?b????u?L?????t%??????P? ?????t??????t??????P?1????? ??????U??E?0O p?E?Pf?@@f??u?+???= r3????????t?h(K pj j h(G p????3?@]? ??????W?????th(K pj j h(G p?????????????% 0 p???????%`0 p ?7 ?7 8 .8 N8 f8 ~8 ?8 ?8 ?8 ?8 ?8 ?8 9 9 .9 J9 V9 `9 p9 ?9 ?9 ?9 ?9 ?9 ?9 ?9 ?9 : 0: >: J: l: ?: ?: ?: ??b w $; $/ n t d l l . d l l o l e 3 2 . d l l u s e r 3 2 . d l l k e r n e l 3 2 . d l l ?0 p ?0 p ?0 p ?0 ps a f e m o n . d l l l i b z d t p . d l l - - t y p e . c n / . c o m / h t t p s : / / h t t p : / / M i c r o s o f t E d g e C P . e x e M i c r o s o f t E d g e . e x e 3 6 0 c h r o m e . e x e 3 6 0 s e . e x e i e x p l o r e . e x e \ 3 6 0 C h r o m e l o a d a t \ 3 6 0 S E l o a d a t \ I E l o a d a t \ w d s a f e l o a d a t \ S o f t w a r e \ C l a s s e s \ L o c a l S e t t i n g s \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ A p p C o n t a i n e r \ S t o r a g e \ m i c r o s o f t . m i c r o s o f t e d g e _ 8 w e k y b 3 d 8 b b w e \ M i c r o s o f t E d g e . . \ I m a g e P a t h \ R e g i s t r y \ M a c h i n e \ S O F T W A R E \ W o w 6 4 3 2 N o d e \ 3 6 0 S a f e \ t p i \ 3 6 0 C a c t u s \ R e g i s t r y \ M a c h i n e \ S O F T W A R E \ 3 6 0 S a f e \ t p i \ 3 6 0 C a c t u s 3 6 0 E D R S e n s o r . e x e \ s a f e m o n \ P a t h \ R e g i s t r y \ M a c h i n e \ S O F T W A R E \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ A p p P a t h s \ 3 6 0 E D R S e n s o r . e x e 1 0 . 0 . 0 . 5 0 0 0 D i s p l a y V e r s i o n \ R e g i s t r y \ M a c h i n e \ S O F T W A R E \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ U n i n s t a l l \ 3 6 0 E P P X Has360SignExW s w v e r i f y 3 2 . d l l c u c o n f i g . d a t t q c o n f i g . d a t Initialize P7 ?: 0 ?7 ?7 8 .8 N8 f8 ~8 ?8 ?8 ?8 ?8 ?8 ?8 9 9 .9 J9 V9 `9 p9 ?9 ?9 ?9 ?9 ?9 ?9 ?9 ?9 : 0: >: J: l: ?: ?: ?: ?NtReadVirtualMemory {NtProtectVirtualMemory ? NtAllocateVirtualMemory ?RtlImageDirectoryEntryToData LRtlFreeUnicodeString RtlEqualUnicodeString hRtlAnsiStringToUnicodeString ?RtlGetVersion }memset z LdrLoadDll &NtFreeVirtualMemory m LdrGetDllHandle ?RtlInitUnicodeString ?NtReadFile ?NtQueryInformationFile ?NtQueryInformationProcess N_wcsicmp ?wcsrchr ? LdrUnloadDll ?NtQueryFullAttributesFile ?RtlDosPathNameToNtPathName_U ? NtClose ? NtCreateFile P_wcsnicmp ymemcpy ?towlower NtSetValueKey ?RtlIntegerToUnicodeString ?NtQueryPerformanceCounter ? NtCreateKey ZNtOpenKey lRtlAppendUnicodeStringToString ARtlFormatCurrentUserKeyPath ?wcsncpy ?NtQueryValueKey ?wcsncat ntdll.dll ??b ?: ?: ?: ?: ?/ c/ ; ; SafeWrapper.dll Initialize0 Initialize RSDS XN?>BF?????? c:\vmagent_new\bin\joblist\630009\src\x\x32_safewrapper\objfre_win7_x86\i386\SafeWrapper32.pdb s p p s v c . e x e R B A S C l i e n t . e x e ? 8 ? ` P ? h ? ? ? ? X ? T ? ?P ` `4 V S _ V E R S I O N _ I N F O ??? ? ? ? ? S t r i n g F i l e I n f o ? 0 8 0 4 0 4 b 0 C o m m e n t s . C o m p a n y N a m e 3 6 0 . c n 8 F i l e D e s c r i p t i o n 3 6 0 Q?v!jWW <