MalScore
100/100
MalFamily
Malicious

NSE.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 19/64 Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 797.00 KB (816128 bytes)
Compile time: 2018-06-30 08:07:04
MD5: 0984b4d1d591f1c391ebed9fb0a32975
SHA1: 309503d49abfe038551337509fda2ef620465095
SHA256: c820a7c9ac5fc8a3d6fb77a0eb42a2b3f39153f21faeb34c1d015faae0e6c048
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-30 20:15:03
Last submission: 2018-06-30 20:15:03
Filename detected: - NSE.exe (1)
URL file hosting
hXXp://[www].lebontour.com/wp-log/server-log/NSE.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-30 10:33:59 [19/64] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x38d54 232960 61a8be8004143947c24ed932daf3aedf fc8496ad5a69dd9be36fcca32b182ea2d9a5f20f
.rsrc 0x3c000 0x8e0c8 582144 56535461d88c0015269bab763379469f 2da30500f3dbc62e6016168aa9a3c73754ad6a49
.reloc 0xcc000 0xc 512 5a749f191e60e5f503c5b1817bec5849 815549f447a5297e7335f1da434fb091ec97ef8d
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x3c0e8 580687 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0xc9d38 20 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0xc9d4c 892 LANG_KOREAN SUBLANG_KOREAN
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright 2003 GOM & Company All Rights Reserved.
InternalName: GOM
FileVersion: 2, 3, 26, 5283
FileDescription: GOM Player
SpecialBuild:
CompanyName: GOM & Company
LegalTrademarks:
Comments:
ProductName: GOM Player
ProductVersion: 2, 3, 26, 5283
PrivateBuild:
Translation: 0x0412 0x04b0
OriginalFilename: GOM.EXE
XOR
8 115538
1 115538
2 115538
4 115538
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
No URL found
Copyright 2003 GOM & Company All Rights Reserved.
YODFBOZkT3VKd1R8MKMlXiHK6W48nXz
SpecialBuild
VarFileInfo
Comments
29uSMEF3HsoEGCMhWHBL7tYv8x1HNot5eMHui
VS_VERSION_INFO
Z3RgyGJgcymsGAwKqKTV
AOr
LcrKoyLCxi5s2FtPble9mmztX6SN33dV9AZ
hseLeEZ5NzUOqlf4Q9NYczs1smyjn7q63
1ldPBxmwRhiibmHbozJq7skKJyzu
InternalName
hU0tAHJeZR4LDPwO89OVwE
BqVN7fwBinHyRmAWZkvr4kz7LWH
v6phyUuY6TNzXpRbwvDSXEpW
hLWUksayIf2DFlBVPKJecp9aUD
GOM Player
StringFileInfo
8s8sAkikmjYGhWxR16mE2VshJKWOHXT
3TLTZjWzwroA9YvAsgpH1hND34KcG
vMjJYEzijl81MGfsQIbzx9Ks9YT30PDGCYkQaGY
0EoZWrgXTUZn320vhbR6tJpqrrLK5tCJ0i7B
GOM
urIYxeAKw5f2Cynh2YayoWbcINQCMOC
FileVersion
2NsNZK3Ow1Rh2vy5R4byh96dL42W5odk
LegalCopyright
2t4pfjfR3BQtFImG5BhXDTA7tIidmMzYoOVLN
PrivateBuild
QKOufRKUIe2Ec5IPjytfdb
2, 3, 26, 5283
H9UXNmg1LFHmnAbiPlRFXqgwXE
Translation
ProductVersion
FileDescription
GOM.EXE
byh08zYj9Ge4BKok77hlyG9tRxSqs80i
rCox6dXFPyeoTNaCvQ7nVREHJsdZSN1RayM9at
041204b0
OriginalFilename
Load
CompanyName
GOM & Company
LegalTrademarks
ProductName
Wri4gGUcDTCWPWGd9vKI
4ECcNK6Vf5rPGg00LANCalLysvGTLzwN5i2
`iN;
MXb[
@P>+
2%bs
,Z_<[
_Who
>y#q
%`@ <
HBQWtXz
ZXBZVP~ZZ
ue?lW Fg
Fo?O
HD3e
\ ]ESf=
u+X
Ryp
Ksw\
#\c\
D*-mu
PNG
lb\],vC
\U/ \U_
]h)]
g)hV
kgBs
k]Q
=h F c
!6:
$9?)(52;
OW _
XI]RR^t
.T6JZ
}[Exn!
AI=G3
88.9//\4
w_c\
x6f4g~
CW.[
$yQJ
b)rx
c?x
Tf5R[
QCz2Y
t.S@:
`mnL
W_LW
V^KVK
sw!9
9(?498
UnverifiableCodeAttribute
OWzPW
~Ub2:0
`ckD
_HDx8
#KwP
`u 5(
43+\
>RXC
/^De_
QJtd
@{v }
y]Z]
J^C;g&X/
nZDRZ
] t7dP
i+i@]
|/"|
@:\o
W+S-!1a
892(5(%\
Lk\W
&XSDfzSA
\O}L[
79}d='
0=;/\
Eu,~$
|6C\
38)09/\;9(
VNFN5BzUCp
bo'`w
MZ\^@NiR[\]N
TWn[
dk\\
&dj(KV&
A{f7
Y \\\\\_\
m\WHQ_y8\
C\@
+Rusm^
C }w
5WHP
V^!ZXr[VRf[%OJR
X ($
md
}oe3
jU2N2
b)e[
W:l)
<3(z
$7#&
B#
~W>PW
=2809\.)2252;\
n&}O
z/RR%
F}B,
oZJbUh
4#nc/|
ZVPG
Q eb
jh\
WWYZ
]`rU
\]pWiLCq
G7jv
NW,F__
kl\
KZ6\\\\\_\
92;(4\/3).?9\
J%WZ`
WWYW
S_%^
5EWmU
P[9poP
#@/M
TIxi
*%B/
7V@=j43
5005/9?328/\?32(52)989>);9*92(\8+
=28>3$59\
^K@e
EWCXW
5k33
Zg9?
s9%>
^&5^JEWB^>
,1dq
]_]]
8\\\\]\\\\\\\\\\\\\+
c% O
IP$@
MDq@
@;=B
MI"/
!F!iHSp^
WT0
c0`_
FWSL
ZWPYW:_
hljf
5S ]
\ZZi
/%2?
D`]Dw
M0I_Y
])[.i^\!D]\
80w!'V
2yAO Z
3U^W
(?,Z
_,??4
W]\`S
UTqTMUF
509\8+
ZWVU
'z*17
WT.3 X3
UW>Z
HK!A
^eLZN
_WS74!Z|
| *JS
p|x
;pZW
%YI''"
\\\\L\F.
C+FsDbo
a2q(
T@O
$0 s
Q{nM
('SB
+E~v
n=X?m
N+ q^i
lzp:[
={H3
LW$G
_#z!S
LsF{
6NK[
$O/R=
NY|,5
Y;Sw^W
rM=|d]
1oW6X
\\\\L\>
vNW ^
VU _
`,Gh
\\\\L\9
\\\\L\8
\\}] \l]_]\\
\\\\L\6
HUG9Y
yJR[
\\\\L\1
H_^t
M~T}6
a9Y:r
5[L_
A7GI
tFbjQ
Pf`F
.s\kJ
LX`_
cMQ[
YC ^
Z PZ{^
2/(=2?9/ 305?%bQV||||`
RE_ xUS
]Nh\
H T<9
-(J"
[{4n
\\\\L\
W.p/
F -m
kq1]
GqO`{y
TG-;v
z 9_
vslY
ICqd
\\\\L\{
\\\\L\z
\\\\L\y
|Y(N
P]VIoG'C
m%/m1H
pS{^
\\\\L\r
\\\\L\q
ijcQ//
n;[Rw
z1u]y
\\\\L\j
\\\\L\i
{{1ro
j_c\
\\\\L\f
>NChA
\\\\L\c
lOm^}hUK=
&R6m&O"p
\\\\L\[
^PTO
q*hIT
}9Y
\\\\L\T
\\\\L\R
\\\\L\L
wWIBZ"WcZ
JM OPK
<rc2io
\\\\L\G
qywZ|
\\\\L\C
L[o;{ZP
\\\\L\A
WkLW
rQ`}a
WpXW
'alc2f
2#58;
0Wi}
xZr h
3 lR
)\9{
Rl#Y
r:*K
];DV\
L_\e
5#Aj
(uc"'
1N+vj
nyhP
9W)':I
Sp9|
s[ =
(91\`b?
)2bQV||||`
_/D
IVWi[
-qW YP
KmFZ
|Dn]^m\W.
YW7S
Ws 1
9(+3.7
+'D9_
Q(OJC
L"-J
c#3G
yZC/R!
{K?R-
V^S\
\\u\?\
K'Hyr
=%0(O
B[}b
jo}X>jdjkneh\m>?9ehk?qodl
h ]q
Zpq@G
\\q]
\\q\
tu|$j
,Y,SF
<V\SIZ
uh
J4o\Wb
KXV_
u}<$
iU&TK"Q
SM/
;V+}E
I.;^
>=;4
xzv/w
8\8+
\ZSYI~S!FS
XMX^3[.`O
Ce[;}
x9
ewk S
zw%d@
D_\>5
j\b\
-'^,>'
Y~CI
cYlk
d6[e
]\@ \.\3\(\9\?\(\5\3\2\
T 9V
uYng
PV}L
\gsC]]\`7\\\\
5qJMze{
}UYv
<[QuJ
LRz!
%(9\
Od
C_XOQTT
eMd_u
PRW<_O
-)=05(%\
`_c\
c&2]
9)`>NDn
[3-J+q
Sx(@W[>
xJPi
k;7ak
GZWsC
%0eO
l^J\
AZ\T
UU11
_V9V
Vj\WP*
D_Wo
I{f6
4^ho
AZ\c
ONMF|@<
F8 6
H10$
tz/>
GD^\gV_/
2"yL]
^WvSW
B/l
&F2oC
HhF~
cOqqW
D X>
j%8Jb
_WET
pmF;?
{^RZ
^U~'Y
4[Z}}
F(R,<Q
qXWi
;oHj
QH o
^ MTt\
t/SN
CQXaDK;M
FQ<o477
xqTua
+0^=
S`^Z
$^_<
D[t1
]3.%
^\<mLL[
ZnZF
%M1t9
( KB
\ W
/P7X?]
@WfZj
g2(K
"_7*
yzY%^wRpY
wV(i
Nw\R\
[( /
^ZK>U]
:+Nq
btpP
)PO)
mtC
]\t \.\3\(\9\?\(\5\3\2\
e_ou
L m7
_VDTd
#ENK
:j)$S
zitQ
3k3~
- #^
qRNt
*yZ]O
D}03U
+'`-
<mqz^p
V#+~
IW%xW
:Lpb
xWk~W
[:7`
gk/&
3+9.\
9w[]d
U ] M
:)Pt
i1wI
_ X]_Rero
^}9&
QGSB{X
UZ =
{eI
BCR5-"
]\eD[
YY4
X\]TTW\^N
\%\/\(\9\1\
w 26,
c1s
d.[G
^:'0?
^O7RL
?WbV6=X
z[ b
.text
T{'M
List`1
\5\(\0\9\
CI{V
LfH(
wv^V
Z_;9(V^/N^
b* #
`#**"
:g9M
GetObject
pD_\
@I"bM7
> 6\_
^|<t C^{
9cjM
@DF\oIbIF\
A\m*
I\rN
i1q&G
UkeK
CUb(Ea
1S[TUB\TAB\TTN
p{B}N 8|,
l,3/
[.rQ:
t$O7N
Z/-a
$)&N5PKv|2
^\ZN
OV!A@
]\|D
rpDG
jOi/K^L
/v>f
BzKe
~] c
9.290
Q'=B
8#@?
\c\
"%Sl
zJD||\K
x@7B
sgcc
t_Od
;zW0b/|w
_.42
j5*W
`nGS=6
GW7PWx_W
TWUM
VMD_\AD[
S8Au
)((WaY
P@rY
31,509.
]X^O^D^A
Aer"%
?l3] R[
.m&6
]X\!_
4$_,
yY4-
VB~|
-v4c
+L)]cM
yORU<NI
QZqwe
qZIo
/&V^
N\ZN
~Xr(9$(|8
*+^S=
^WtPW
Hb]8moc
V.V?2
]U4J}94VNR
Ejd8
vjOp
561h
]WLS
2E>g
6 Sr
_^CPQ
V.$%
K\*Q
J{#N]{^t
9$( .5(9.\
D[<$
_rZL
;w J@
9?31,.9//\8=(=\
\]]5
i.)V7
83?30/r
R,-`
Z mX
.5;;9./bQV||||`
SOGP
_\P\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
R[lZD^LUlTD
ALML
5Ue[
W3SY]{fX|
WW.^*
}O Z
,92 .3?9//\,.3?9//
(=.(\;9(
NdJ_ce
xJ5F
&&6&
]JOq
Z@\B%
c9d8
eT-[C
Y3vH
!?6NL]
7v_}
VV^Z[O|m3
FL.
M*8W
POUn
Y X\
GWkV
T{<b
F3F&F
=] =
S?@uV
hVtH 46
Kof7i
W`,0okkCee%jjj
a]x`
~_c2u8
csU_J
VlwT
NP~\
^OCF-YS
rF1j
]<ItZMxW!X\X^
r_/,s
@\9o^VT(
^3IM
X2{
T_y[R[!(
$9?)(=>09 =(4\ .3?9//\
Cy)_$eX
o<>:
m_.]s
.51\
`\\\\L\j[-\]\
zdX(
[Uz%
6FM5C
_\\^\\\*_\\\\\\\\\\\\\|\\<\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
Dt5[
v q+
sy0y
9k(Zq
7M\VNw
pO;"
,M/a}
+-IY`L
r[U{k"l
\\}] \`]_]\\
Zp61EZD
D[\cDT\
~>^W
56RJTy
j}.DV
(W9goJ2B(
Mz=W(P
9(438
]W{QW
zTWZe
#%/
cFPm
&?4_"
-x9m&
R<%7
M^Nh
o 07
owNl
;qV
V3 Hv ^3U
Y4n<[
T@)_N
We W(Q\0
7d)/
03298\
Zr?
G}]w
eIg V
eTD{
DY?f
u%I-
N1e2
0_J#ChOI
7o$92
}5U_j
3TWSDWhZW
WWrIeqY
Psm^
/bpWw:
.mf@b
W]~E/
Wk$
TT_v[N
U+f5
6^RtW
6&J+di
TSG }
R<%p
r{sJ
kgrU
YWe[W
O[sz
WR\CL
$Q#*
O"XW$YS
e_WVX
69]\z
pVl]]f
W/]_W3Z
$pOO
Dob8
cBL>
x|SW
0;3.5(41
SO)Z[z%MH
-l*`
LyVn
0uu
9GI!zMIa
4WVP
Xkq\*
e;:oi
jm82
zVHJOOd
rm{:Es&
MQ=8
qS\ZS
%ZD@E[
}\T=^w:
kd8 `eC
xQ.`
fMShf
-G&~
H3CK
~TL\
UX{9
P;F}
dY?i
cV"W
^]\\]_]
dY?w
ST^[
^HL<
Pu_)
lOlW\}
=2;9
[EP Mi
s\\(
Gk4K
#CNt
@sYolN
FZ){
fZ95
$5(\
^TV^ZWYZAM
oDUT[AnSej^3[]][
Ek{+Q
^lSo
2:3.1=(532 .3?9//\ 5.()=0 .3(9?(
32(=52/\
P1VmM
[?G\
Lwr$
YUnZ
F BO
?+7qC
WO[)
p+u{/
SL^W
RA&^
[[-
aY^bK
%'kNRX
9?3.8\8+
Ju|
gX^CR^'
'R[gc
U\^]N
90=$
Q o
oKVb
sfR9f
O e=d
XZSViT_
+Vrzm>
]dA]
S\(k
0\O\l
#R/ %L
SB4I
U=\!
RWu_W
;k"G
WkI)e^W_^W
$o Z
+VW\^W5UW[^
(UJN
^CgX
i;z8
A@TU[IN
^rUg1
Yl]\B\Y\]TNQX\]DTZ\^@DNQXt\M$Xt\M(Yt\M
b.LB'
\ONn\]\l
_W^_
q/:ds
B\GMZ
QXZ\B
V Y(
nO=p
+Cm^
[W8^
[:%N
#8>q
I5Z_
)N_r?
QXZ\M
&jr:
QXZ\V
MXCH
NeZbi
MXCD
[abi
qNN}`vh)v
<f2u
Kb+]
o^`u~
uezil|
QXZ\&
E UyLt0jk
R_1V
V]o_
QXZ\2
IHDR
^J\|Z8ZU6S
Y<zP6
7emX
WUJP
QXZ\<
YcSSS
F_@NU
{^I*
DWFH
Q@FfFFE
CWIQ
9Y\.;
Rjw\
@XW]6
W|KkmV
,1 p
/{OB|
92O
NL[ _
m8H\7
q&O6
]^1lCZ
AuR] A
5].WQX
#b~W
System
U@W^H
VJB|P
7R_?
O%91
(?gK
V3WZ[P
AZ\z&
fD_S
kN_
IRWwY
(>cp
pv+a
jl-(x"
Fk&es
_CU.T`
?h /
(W;U
'"Oo
TTCC
\\\ _\\oY\\$^\\
XQrW
YSrWQQ
9!+&
uLp_
S\/_\
lbNuO'
JxzU
9\X9
oY&F
Mkl>
3}=y
O.UO[
R98M8N98J98N98_"
sQQ;;4
@vG3
^1X/`we
ZNx,U
MethodBase
;o%u?
=F,]
BCz>
YuJ2
Pn8
~NC1
zkzY
CM|;J<<
xdkG
%@Wz
b^K\
%Ci"\*
DGFagm
^DcT
3b}\
:I,sHO,V
^ZN]_
)ZmH
]W1P
h1RW
"7sM
j\`\
-`M`
Tl?D
'$8
g6PW
I?v^
M1]
AZ%X
qT*
xY(M\|W@
-BWW
MuKC
WKT\
S\
JxzP|<ZP
aFQG}.vl
ry^m8#
j}GD
')?~?
.9=(9
0H3hAi
'4zXPi
^#W I]
m_Qt
4}l`^
sUaO
Hsi)
{*`.],0_-
^ '=
)Us'
|b<4
d-XY
^JN_'
UWB%
LMa#M
Xw6MYi
P]F|*
a-]u e
^%m]Z
mW7M
Z{Qx-ZG
-SRZZZ
.4-b
5CCe
( s&
h{Hf R
R_Hq\WEYW
D5.#
/&=Y
m9 J
6::0
YJW^L
TRt'
^mi+u
5AFFF
:1t
k# 8R
PW T
7Vl}
lQ#m
MT()
N(!/
WH|-0
l1u1t2sd)&
1qp
[kMe
:5A'X=#xpq
\Z\TXQXZ\HXQXZ\BYuYZ\oZuYZ\
X{nv-
BizbB
cw,#E
Z][OMJOLd
~{Z_n
` d1
].V/
1 sGIOS
eadSq
9.152=(9b:=0/9`s
8;k)
m&:HLx
6fS1
ZRj*\
@5T j
z(SW'
dJfN&]
^xi8E
ZJ!=
R~[M
'wh
X?6U_S
8|v1q:Na
ZW,_Z
DPWW^->^Z
zpr0
i\\u\y\
< -2
=;V^S(O
I I
m?.kv
srDR
F gp
8w[Uc8
P\5<U
Cojl
U|^fM
\(\9\1\/\V\\\D
b_9V
\|*U
w /?%
PnsU
Z+Zp
wN'^
SWbpl
zBrQ.
-M r
DU[|_
Y|(U
qH9X umd[
@rCC
oBnH}
cYc\t
Afl
~rP\
i ^/
^Q(]
_CorExeMain
#'xv
\ 9>
)(43.bQV||`s
ACz#
@sx#
Q+.8
a7l$
<pdm
)::9.\
V!&\=U
e[>g\FO
_/E]WsKZ%
|x|C'D}Cn
TWWY
Ci|0
9a^dK
)L@M
hsq\
q|b
Fo%@
]dm])
hh\ ^\
7g5]|d
"\WyR_
}cf|
W/u]
]V
_WDU
V^8VN
|Rdy
ZtD\\Vt[\\VQMF|-
M~R%M
^sY]*l4
^\X\
"PWS
/A"\
w-_-M^
0`B~
#1n;
.%,(
pztn#}{
\]tZ
Z0\]\
Q|XDZ
T}C/OV
OD|*
=19\
Bw=3Rw
W"_
TOY_J_
z\\\\
=((9.59/bQV||||`
?1r
UWwVW
MKJF
VNsh
913.%
^L[#
hnIW
+D;[#
k#'s
QXN\
3;;52;\;9(
^Ee\3y
MZK.wV
3M3J.zz
lB> =u5
Ez!+
$[8qv
f3)E[ ]
VkSVO
H_NN]
<p15
N/&9>
Da\V\]\
|:Z+%9K
PrWwB
y6s$
'ZJ0
wS 6[j
DSex
}Ipt
@oU]m
D,[,
%2t4pfjfR3BQtFImG5BhXDTA7tIidmMzYoOVLN
Z;_>S{
J Cj
VZ Y
Hs!a
zGp
|JZz
T@9hV_
R@%s
ybX
Sz^_2_"z^
zH11@
X ]]S
(3WI
^Wmi
k g|
Cjp"
}}qG,+
70mL
;ud|
)45M
0A >R
'Q8s
8XEX
(B!5PH
~QnSY^K
4_WST
JWB_
k]Cll
(%9]CV_
!TS3
y SmF[
'`~H
r^W8_
T@M3-
Kx*@
IO M t
9bJOV
G!SO _\
=]W~YZJ$
^h\\\\\
^sM]W
~]83
wJxIt
d *&L
Py8[WoI[D
PW`A
PW`@
m#\h
{52_KT\JNS
>x8Ib
r0M8
M?51
Cg~3
9/3).?9/
0y?@
]RXV]ARY|]]O\T[_M
oWp|
1u"h
D[\2DT\
B*\WO|W T
iqrR
q?LD
Op}f#
]?Q]m
hclh
3L%!T
\0\0\/
Za6wOO
DmJHn|
t?sk
II%=*
BfZ
O#}i
pAb
m{5u:
X=U^*
[ ^[
hoxBS
w;v_
3009?(\
ZJml
$nXDNXCLt
^\dDu
5=;wf
^/40+=,5
YD]u
ue`f
TW,q<W
c7|z
QS6H
3WWBT
\%\,\9\r\\\B
P<u%
_I.<
e|I ,
^T]]w
h&*
SfmH
O^HW
H^WT~W7E
-yUT
7P43t
R73SQg
2(on\
jaeX[NHc
X[J}][KA]x
j*E]
wmI;QN
L`Kh
FbD(y
m=m
W\tqUV
GPDH[SW[TAVTVyYT[
[W&S-
{OURJE
lhkY8
[uYS
hgHr
ij\ Dk\
XQUO
2yA
\\}] \|]_]\\e
LkXM
|}\H
n\T\
_RRJ|
Lk^CV
J")
IGA$
g_B5]c`uBE[BOs
1] _
<7LrP
kh)`6!
himhqd>8=q?h:9i9m8di9l\?hnl>kdk|
_C-
L Ya
0~ '
X\\l\\\
_e?>X
M^L\
MJJ k[2
QQ1H
cmmh\
fYW)DW|WWpKO
U,L`
$ Qd;gR
0 _h9>iq=i
_JB`FYW#6(
_1i<M3
d <]
<_l h
\\Z\C
=uvFO-
_{bL
uCbW ut[ u!DV
a\\\\L\GM
(tk
_\\X\\\,_\\\\\\\\\\\\\
gG.w
YNEQu
Y\]TN
sXli
E Ly' ykn
qCY3
:j #
Imp;
0lPO
! 5|
_N[a
c1V;
76o
=QfL
( /
Tcna
_T&'"?<
]xNZW
ToArray
rzG0g
Y,XS
XEWG
ROZZ
@ WL
C<8{
SOqRW
['.u
HbH
Q*C
9:09?(532\
wo|~
\i\\\z
c~j7.
eWfN
89NR
/s U
|KRj
={?2
[{VZK
TUZ[^N
AYV\^N
AGm/#-2
^\\bY\\PX\\AY\\
J!Eie
LzR(
[XNL
tIPZZWdLW
7 nA
UTso
y7Qu
VW4Z
p-9N
@=&2
3MZp
,IQ!
[uWy
7p6(
8'{<.
00\;9(
1*NTo
.<6o
?>-Vw
4eu3c
';ixs
Yc'9
'u!u|
Q]MYVMp
'C:d
nXWwTW
@EH4
h~)Q5c>
R_SE]
[zn!
zSxi4Cu
Ja_GS
<AW;UWi~
itd'
*(j@
9K38
:AghEf^
[Fvf
]\\^tU\\V3K\\VVZ3E\\VW[3t\\VJbhY\\|
S@[R
HW!g
dT+c9Y
slL6
RY\]]N
c[Y'
</;b
YnSd[
[-K1y
ywZ|'p
\CmN=
Cd/g
fWD[
]X'j\
MHCVMHCV
c|-r
$gD3J
4(-s
ZK N
lZBj
XxU +)
cNaM
d@WE
z]L{0#>|
^C70
Z+uK
g7<,
; tC
KIASVt
a/[1h
Ly|+5
F3Yb4
)-"s
\#|U
JJOIdu
U.nl a
cFqm
5HX^H!
#=N'I
Sc-M
S'P7_
Q3=[w[NQq
\91'R2VL
N?G$k]p
WQ/qu
uYZ\"
t}Le
CWOU
>_slHW
!ZTK
x+z$;1
6$ZyR
RL[U04]K
f| w'
zfd
YTW}Q
PMuW
bO[Jz
osRu[ r
G[ d
PAnV#
X%@W
V\]\x$\\\\
jnYWa^"S
n|T3?
x<m
8TS
/e]$
I&;8
] @F~>q
kR`\
{t\%
VEij
V 9>
U4.\
9;5/(.=(532
\\u\
}XD?
Mp03%
)IJiW
M2.T
09RE
\=]?L
mbwc
$q*eH
h 4C
ee\N F
&Fhl
tWRT
LCHX3
jS>m*
)Hn!7
pG #
zp?+
bc?Q
x?8{
4iHo1
<@g~'
a1(O
kEj-
Z`^]3BEe
T5xZ NX|
6rV3Q
^t u
DOTF9
- W\
203=8
.;)192(/\/9(
mcX M
vOl[\[
#3*=
Z\ G
MW,XR[wL
YWFC
BYh,O
)|+`|
u@T|^^L^N
Mx31
Lsa*
ADJZ
+}^F.R
ZNf<zP
sV\]\d0\\\\
LcZ^W
]X\[
N*sP
ed%%
ZZrPS}
g|5W
8JqY
'o]R
TS`DQ
Hw~B
_WE_WeTO
zZTEM,
Invoke
~yO9V+
r@{F
#tl_
och`P
_v*^t
PaI+g
\oJz
Ct"T
/@by
5fNHcRBm
wt*CF6
xq^.
@Y -
k !w
6[Oi
]?E]y
W>Sd
QMDOS
PUS;e
}Sn%(}
ZWwYW
z2k`
\9J9
S`>wJW=-BZ]G
NS ^
\VD.
`aq
6[OK
zx?W
U]]]"Q
,-|w
l;6[W
$wFb\
gP-P
=_ <
VTZSBTtA
Kf}Q
IIr6_
[j:hk
4_u\]_
jf|/
FW[RF[
ZTJ@
O(D
vZ5RJPWz[
CSKt
?_Bl
-PP=
BS'
(v-Y
l [~
Ro_%^
[QHR9[\[
}H 5
R>y2
tvGy
Sr?U
Q?w
C\\q\U\k\Y\L\
wt+:r
D"+D
TRU_
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
ZwF[1yV]
^&y[Z
+Dya)J
99898\2(/9(52:3.1=(532,.3?9//\,.3?9//
:My~8Q Q
P-t[N}
$\`be
y59[
CeN>
\(\9\1\/\
*+a[
JL}D
]UxxH
.~ #y
WW0SW
/;aQ(G
KMI7
_\\_Y\\
HJJ)
3O-U
..=%/\
\\\\^\\\\\\\\\\\]\
L/Vo>
Y"P_9
Ocr$
ZXWW
HX;Q
^*f^<n
&s1'
,<G~
( yA
Z|]]M
%/Nt tzt3-
\\\X\\\\\\\\\\\\\\
Z|]]N
E_b1
'`fJ
X0\^
WA_V.^)+
Z$Fv
o" o
d+c*
J|]Ud
tAk~
fsx&
x$.N
] E]j
\%[0k
s31iuz
E}Y-
LwKf:
u@V|Y^DTAYULUL|[N
k_k
e>j
jwr^
Z/DS
=(4\
QWo/S
.#LYW
e\WVR^
I5UM^a
Y^SU
TD|W
CGp_>
\\\|\\\
K})G
"O}2|
3792a>kk=\|D
C}Z.
v#NZV9C?x
TOYE
*x+@
]SlxI
K'o,
SV ^
|NWDO
A(H %x'J
9?).5(%r 9.15//532/r
,9?[]aKud
ZA
?32\
\BZ_
^'`[
5?l5
L{t'
X|]@RZ|]N
]*5X
[mo}^
uP]4J
rkS+t
]"&o5K
\-]wS
\+k2]]\8-\\\\
XjVU&
rnY4]
[@\4bs
%(9/
(=.(),
De]VZ
{Wf
}= v
RX\]R@Y\]RN
\_)e
5:N]
O[K t
^\^\
T|^]NmM
R'hP
WMT3D
{wg]
.`T=
k|[MR
y#ZO
4 p'
.RQ_
RuntimeCompatibilityAttribute
o/bwc
,^8U
|e:
4v 8f
Rk&M
|_V!
)((32/\
OMK33M~'
J# Y
U[po
p^W|WW
PM_XS
L}2f
/C}F
X^K ]I]^]E^ZU^ZT
GAAF
u|y
Bn\*
8o);
D{^+M
yTpd
((MEai
r};;
LJ@9
PW7V
u{)8v
^W`MW
Iiuv
@b_?$
d\
H-M-
_y_Py_K~Xl
Yw\R\=[w\R\
'&V-
vWvY
.;/\/9289.\
EL\\
!~~^
3'k&
st6Yt
\\\\L\_
`PR~WOYW
SWqZW
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
zc<Y
g }9
zJ*W
`PGS
:%pa
S/0oi
hS8g
GWw^
SfiRG U
jc@CZ
.`X@]
Y5.l:
.=vm
p MX
/_^&L
QKCQ
ihpB{6&GOQ$
20w]
uu24,
]\G8@
Bef6
rA6~""
9_o?
Z`gDZ\
[$\]\
_WbW
iSGQ
XCUt
='J/[
,beq
)#*
Z]K|XF
JiV._^
#9l/g
s~>DS
+HAMv
G0"|
^Laa!
UWpXs}^
,9 r^Q'V^
=&S
4jut`
{WyRW
)/(31\
"P{m*
3A#D\
5;Uu
:r2*
7 v
jC
a93G8
Q2c
afd.
D>ijR
XyQh0Y
@tt_|.
K!:2uP
$qQ
6vS`
"ROE
v5Oc
\aY%Z
XW[YqXUPw
tw<N
[T\4]
'o.d
^L~p
d]_e
yTTTN
S2=)P
IO,D,
/mBo
TWtU
1:k;
d 6;w
Hd/[E
^Dz2
'vl|
GM_Hq\
/x/P
YTBE
&qO
0 E%
c}=b
3x2b
&9JCl
Gp\}Y
BKc9
J s[
Eni@[vt?
WG` @
g3e[
eRo]%
CW`WM
xzO
m%2\
wca3
JQY]
+WrJ
6_c\,
d\.I
H3xM
XMYIt
bWZN
Zs i
mhk=
RWCMW
S.l[2
5c=y?
6W`l
uIgE$
zQd0
| K$U2
ResourceManager
wZ/[
Eo U
GetExecutingAssembly
DW{W
\D?G
<-1Y
E__=
4e@w
+2C}
X_q`
D+Mmm4
v$OhC
ORBS
x/TG
T#\]\
>[[DM[
=Gyx
385:%
#o7b
Y%D$
h.g&O
7Itm|
A^kg-
a 9T
^ZmW
PWAM
`kmZx De
Wl`uc1o\uD
^S_(p/.
.pw`
$W9} 5
1=.7
e=?>
YSeX
[T\l^
PKmu
JMu
y;w?
c=N=
w?#3
f>$5
tVVp]
UWYT
q|9Vo
r_W5@
[?_2
{D[q
_U:G
86p0
l\\q\}\
mjcl
}WI^
UCRX2
P(Z?
\l<o
8BG}
^@^"
5 -
.;)192(/bQV||||`s
EMl%5q
Z;%)hm
!6~'X
,B_m)]p
ER|Y-
~=k2ob
@C#k
IJox
kh\[
_dx8!
NZMOVYZ`WZPO
:C=Z
zWOq`
LYuv
]\gGL
i\w:
OzIZ
75)=;6
VKV_
%Ot-H
~bWL
v&[0Jf
XWdn
9;532
w$i^a
z 'u
LB.VH
. ,"
Y|^RTTY|\M
+)VFVS
0>;B
{$Ml{o
j~K7
>
U\^N
TzMv
$<W.]RF;
KW"QW
]Z]Z@
\XDFR
[Iw_
g~F
0=/ZR]
V_@{S
lo@j
;)=t
W#k[ok
[DE][EI][FRM[G
ZW!ZZ:
X fkA
CMx!
1:2[/*P
WW H
+W'V
G{#7!
J/~
Dl8&f~
<r./.?lV{
]Q,
2]4]
G_hi
^Cbk
YCI[3
B=*,
]YxMM
;>a\v
1Cef
X\6DY\-
*VU [_
A_I[q|j
s k0
kk9v`6
_?q.
*J]NR
:V`.V
\_\kc
ZZ<JnZl*
ZT;z_
PWhYW
3e@/f
0_Cg9
QyoKO"f|
AWb^
U%XWL^
he\@
4s7'
hr% }
Ph!n
X}l<i
a]Y!K
\qUC~DZZ
,f)p
^GVY
Z0_@W
4.9=8\0,
]]\<$\\\\
KxDL
xW5z
+=Yk)
* hk
)(,)(\;9(
l}\9Q'
RWAPW
\ SY]
> 22Z
Q@j!
p8@&
{;b\_\!9
*\S8_OsR6gJS
P5`J
hBME<*
g@?R
ihAj
111F
o7>|
^e\,
gtYQW
3IVdW
L ;cz
HN)#6
}V^/
XC}j
]EJODwhMEMD
mx:?
QELwP
6tA U+
~j'e
fb.{
2\0)
{/|(
q/,I~i!
O G>
e+0w!
_\\N_\\J]\\
o+W]z
7H\
Dit$
\KRf] ]LMc]
lW .
a9'~
cUqt
"N\Fz
ymfA
\Z/ \
,^rt
emcn
*r#P
X <3
Xn^T$E'
)D,u
4M4_
9WtQ
]WMYi
_ Ix
XOYd
gC U
uVO(d
z^]=
Q9 '
Yqx^^y
.\Ow_i
e >{
QZFW
&Z,^
^WEQHN-
)..92(
= U@
'.\>#N
mscorlib
Il@mI@4
mXZbW
nX?V[
]W5e
yUOKXi
~R=#E
Of]PTtV
@[@
o"'r
4mB[C}
jSBY
LR|M
`\\\\L\bZ:\]\
Rz{M]T
Maok
C[X
]u ]
qhZ_
ysZ)
e[\]N
eW0,
KA@S["
JR_N[
U1U]
H H$
X+R.~
6v847g
.N[\
S3_;J
)Tdg!
8`nQ
..=%/\=..=%\=..=%n\
Q#p%~
byh08zYj9Ge4BKok77hlyG9tRxSqs80i
]%uLv
G@@Gn
ZMrU^V
n]!`
c#:' 7
wrxq6%^aH
PdeB
0%]oV,* ^*
kw91s
LNgJ
OolIjVz[3
]j$+
I@a+c
u`S/}
;l\9
AI-Y9k*+
$G]
n9VXV9
mi s
\_\\\XL
qWBO
G<\}Df*T
V\E],
'IO^
>\K2At
J3U]
RuntimeTypeHandle
jEwo
(Vw
A(\
jEwj
OaJ3
64W'O
?l8c
Q-I4^uX
WbK8
!@?'
l1<Il
Mb|}
JNp
GW)[W
!0JNT
xiSM
^_FG
)_C`[
^o
\\\\\\\\\\\|
]/,i
:y$9
]\_\U
$?9,(532\
UTWh^
^9D H
^K:6
`\\\\L\kQ0\]\xa\\\\L\
^T&U*
\:~
DBb4u z
'G(y}J
Wkvwo
CR]W
`MJw
?9}*
\9X\x
LlT8i
]riS
515(bQV||||` .53.5(%bk`s .53.5(%bQV||`s
ro .
W [WvRW
V4!ZuN\!L
}t4 3
D]\?V_6V_
a(OMD
\m\
n^8#
?a~b
*92(
$@W&
_%W_X_|l
]Q\p
zOvM[^ML]^
sO ]{
Jg,mI
t v.
FbG G
TDq|^^
+1|+
}0S;
!U[O
_JC.yN
JpQY,*
PWDXWHF&
TZ]TW\_ZP
wccb
)3q
XX,#
9~g( s
]Zqn+F\
>G448
S@o 5
_Wn^l|M
9@W ^+
Y\\G\\\
|REQMr
t_O[
.M up61
%lNC
[WYv
V_nlZ\UL
0M ph
hJb@
$0EoZWrgXTUZn320vhbR6tJpqrrLK5tCJ0i7B
Yu*W*
P8uL
Zc8h$
]Y*ix
Vd_?O
gv 3
=%u\
y}IS
TpXJQ
^\\\
dP c
q|-='
B\kR
$fV&
)JV.]
7W'+
r~??n
2^!ZXr[VRf[yMJR
'j9?[) haY[o
gg<lmq
BWeN
jn\
7o4w
f[]lO
zK5^
3wGM
\)\(\(\3\2\r
X[0H
09p@~
,IzJ
J#(/
O!>U
-5M5
3009?(532\
RW FW ^W
BOyIS
w\{P
Fl{A
3333333W
5HfD
kkDGS r
yxIx
SF f
E_FcuT
Cg+V
Tg[i
NW#Y S>_
EWe:
PQU9BI
y^a[Oy^u[
}.J=
BnnY
VKC
^e^{E_
Jn7p
Lmq:
9/)0(\
_-%]
J\ZZ
Y92*\
)1,\
`Sn 0
:VG}r8
FWlR\P
UYhX
qxb>
p`h8
i)4d
OMAeA
3?=0
eu\ %
cJJ3
]\n \.\3\(\9\?\(\5\3\2\
[T\`^
NT\T
{Oaw
)Sx6e:
q$xy
K pv$
!This program cannot be run in DOS mode. $
Hzp(
q5@:
Dv>'s
wQ C
Ue\
a#X5u
;[[S
^MZm
%I^;
GwrD
[Z\p
2h`L
QU^B\X|\NQT\^N
h^W[ p
[Z\x
IXT_
6f I
G{-~
\JtR_
Fy]S
]\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Ol^\I\\\]\\Mtv\\Zt
J_t[ZyV
,^FmoM PAG
%EzV
vB^t{
@ZX5E^
" c{
FC |j
X3 ]
>g|j
DFF<
.5;;9.bQV||||||`
]3VX
% :r
W(Oh
DCr*U
_W`H
}NN_
RQNj
[Z\N
w o;k
c-*V
lpXZ
%]{Qq
_-Z=qd=9mqmo8jh>i Y=h\e
[B\c
d?=>lh8[/
&gw${
`4 m
Q!&Q*
w#I[V
QPCWq
lwz}
JffOx
FPpk
ozPC
@=33
:096
JB{a&
XA{r-
KCd:Y!
O??K:y
gilkn
9.*5?9/\
s&P0c<
HW9UW
QWk@W
_^o^/
lB%Nx>I
v_IM
ilR4
9Syq
zH==?
.} v
m>:k&
=/9\0,
\]58^\
c1fM
woRoeN
~`W$V[\
\MRMQ
EEn66
wZMUB
eT7fu
X&`7
{|P/
G7r7
f7#Q
^m,M
T&',
wMaX
F=\hom88kj?_V^
Z3a_
]'[U\
[+@7'
t90}
-Sl>I
\zu z
??9//
!.G
w@bN
OJMF|
#WW Y
RYyQ
/O@O3S
P@^*QLaa
&q4s
`}Jwd
032V
X9Ne
XLMI:
n[pqe
~r q
cqQb
L*Y_9M^+
Ggi7
Y6p
E7]^W
xa!>
[}Di]uD
O{_@W
:K>Jt
Eej$
?c0eis
:54u
y_&`
HPSl"
Uhk]
gpJ^.
pTW>KZ?W
.]Y_ld[][[_
2B[]
B[BK
@Zw"o
dZc- z
U(U]
%IE,|K
RRRARUQ[YM M N
tqJPOUd[
[WAXWQ^
w.&n
ZW^apr>F
]YKCy%
^NZ:^
^W1@
I"_]%X
VQwvUO
_]N]@]z[
)C.;
Q3RVX>
Zh>3
c.v+Yr@
0 /r
Wu&bS
L)"^/
^W1_
9.>\
xkkR
ZE!
"## $""
FG/*-
Xc\t
KnX0
pK }
J G
tZ\.z
,i/(+
RX7)XWG_O_[
PWC^
^Omk+
c:.w
.#WJ
s(^5M
P^ *
Zm'*
nzP&<ZDm<zP/
RLrX
S*,7
EPYB
28bQV||||||`
/v65+
_\P\\\Pl\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
NHAYVTTAYN
5,49.
/]d*
yWp\
T]WrZ
JOZaS
CU|WQ
t.Z&X
D^W&uZ]W
HOj'%
[z0"6
6TZM
Xc\0
Xc\4
\\\\L\ 2
ZRtC
6u>'
5&9\
cGqZ
Kfh(i
Xc\
dpxHU
A~C{F
VW RWhNW M
T\\J
P}4F
~j$x5
r_WJ
|m.U
%X-\
{wk?]
loBG
*l`
`,2J
VZUK
=&|;
"LLq
9^9$Q
OLMUB
OZKp0
91c w
_WXH
TW2 *
1-[0\
[JEZ
r5Q
7bS4p?I;/
-YXk+
WW U
H2HK
]cZXmW\
d X,-d
v]*IRP
UIm^
8s8sAkikmjYGhWxR16mE2VshJKWOHXT
Z2Zw
ZNi [
=/7\8+
W3c2
+<F)j
]WoJ
|pZB
ICAZ
c|bT
Pxl}u<t
_RvY
cmX[lZ`6i
\<`gaM
nWMZ
BMV3
oQ`{
(#\c\
=-Mpx
l|_^M
^1!~
W|_W
@0~R
)..92(\
]U]4
w! s.-
-{_"
O = @`
$7Qi
?Gl,
IVsH1
?^ff
!X1uo
zK--<
\9\0\9\(\9\L
l-3!
nK9M[.
[i]N
i3y{OD 5K
Ecy9k
OuZz
UOCs
dfL;s
jm;d7
Msin
D*R3
(=.(\`be
MethodInfo
\Mjh8
7g07g
=YWVX
~:+zi.
A}}/u5
guSCzDL
eW!Y
Sc_MY
SQUAUc
Y\^RR@Y\\N
nFKm1j
_p^KPM[!K
_c\
r=-'
% $P
+}~n
(-?9EQc
`]M]
R,M5
8SH_
i]VWQ_]V
WeQA^cC|
9( .3?
|k&4h
] %]*
Q}l E
[.!v
V__[Ws]\FD
OOb_I>T
~+BM
hRf AJw*
(CW!Y
/,'*
R9e4
Zz[9RnV[2|
&"C#)+Q
_Z@M"w
-^v\
\Lql#
r!/h
31=52\=88
YZ~WkB
"chkh
>`$~}
C_sm
^SPRg
cUWSW
[Os_W
Xy{J
]][-k
SZ"7N
1E2_
D>t
V_>j
W2f1tit
; !ARd
ZPWp^
xLFZ
s!Sl4M
xj(F
hjicZ
cD[v
[*UY
R/RYaD
@\`-
6YeW
STpWT>XZOVJOUw~
=mtww
D0=%
l)>p
`B^&
ySi^,
1pM
w4[=
JD.A
EWHVW`^
02PGK
'#<8
p_]}
{Gb=|Ht
z\C_Oz\!_JOX\W
:xKS
X oN
<zPe
}Y1a
YW?P
Q3o6-
tu4cs
WGiT
%?7L
Z\\\
UM^\/
<Q%3
P JT
B[:va{
WO\{\W\R\r\
0o*;|
SK 3?
P\#<bN,3
q!;0
Z5Dz_
vS]X
yWU_
<zPQ
FnD(
<zPT
9E/~I
16Ad@0
D[|-
w8=J
qrBN<ZB
o+6.
}W@hZ ObIW
X^DL
GHO9Ar
[k:6
]%aP?I
wW.CT
\P:s
q|[ G
VOcS
W(P _ J\
mIK!
"cRB
[IAx
`B|"
k|/e
X\\Q^\\
0k"Q
U+gR4G
W@oP
Pt|
q^W%Z
"0G3
C#Ckh
B\B\UY\^^DDT[XUM4M0UY[^A@UW[ZT^N
!EL=K
@<I <
iH/%
e<k*'
6lng
-$dW1HM$
W|Wy
!*Z
#7r7
TMMMONw\MNv\\CnytS
Rw-f;*
Ph^(0R=
ed9(6
#@/-
^W/ed
cP/F^COB
eWGW
] .!
OOl\c
puDo.
X;}
";Qu
_H.rb
1%A9S
VX%#
0NNi
PW`ZFU
}ghQtW
7)4>}
p8AyN^
6udy
V!Nup
b_/ <e
f4#~
?PGWS>
31,.9//532\
?9cZr^
H5VI
WH;ti
/r|B
-$#]
6c_G5
\Ob@ Ya
I#9$N
m-il
@cgK
%:b}
|~?~
%A8Z
3b^V
_t%EZ3
Y!#1
e'8^u
WVS=*
- X@.
9AZLWI
7Kf-
\TQ[
Ue)#5
Th]I
HKDn
DYTt
y8n3
]*la
Sgsa
]ZZ\^VN^Z_|V_
0Og<
tIf6
)&{z
\ M
eWhX
faSs6
P,]\
+/{\
Z@zB
h-y
FKW Q
CKS2$m
vQ#hHo"F
)[&F
[i~N[/
`S2d
4\Re
u _'
GW+_
Od[nu
9<:g
E+9>?W
AOZSBok
i<]9
S|z}
gSW_^W]Q
9Yc\(a\\\\L\C
-CW)
vf>x
T/5c7
[]\\\\\\\\\\\
^(~R
'S/n
SUW 2
x9G
bZJo]v^t
]} *
zMz_H
_H.4
38)09\,.3?
nhr2
PWn^
UTZ[
03>=0\ (.
`u0Gk
kVrb
;j8+
p%t(+
]>`c
PKrT
vE'(Wf >
YX]H
W`(p
MTM[
/`8?
c1P
Ly<
(i_/I^m]]W
4 ]5
-e!>
=2809\/9?).5(%
lg6-&
Jki+m
C?.p?3
#EGD^\W
ice
4\\\\
uW)T
y7k
1M/]
p(
W\_WPSWgAW
,-b}n
(=\
H !-
ZRFW..
yUDIUD9TD
<ool
Y\\AN
_H.a
wc B
gK x
G]Z)-
?dE3.
TW0t
MHFMHF
GGs-
Show
J__B
z eN
%`o G
x %+
)<tT
"7~C
SRYt
r.903
UW/ZZS
YAYh!E
]p3}
M8.XB
\| \
o[.
= Wn[\`
:,-I
T,]N
MHGMHG
AIr &R
k6VK
2:3bQV||`
ZA[X2
'| /
B,-wccs
W_NW
x Gx
\\\5]\\
\\\\L\S+
2:3\79.290on\1913.%52:3\ 5.()=0 )9.%
6>]\{.M
=X3c0k
/\\\\
fhVP^/
8m\0,
^,} 7
tx99&
BaB#%
$vyT
ocYJ
X\\|Z\\
PWW_WaC
pqZZ
DZX
7HSB3
'33l
InN*C
-S_"
.@O#?4]
VW'HW
Y!_J w
X[Yp
?Qw
?D[[
_3X8=_
h!ph
X]^a\
a~qV
]Cel.uI
T%^Z_ Zr
r
?491=\\\\\^\
}:F@
wYu_9
b~j
o#5|?E)
YhZl
4XW-E
S [u
/|!*
{>g`
IAf%i
dYYBI
Wg/b
ojdL#SS
=yOFCn
U|^]M
SSW.SW3R
M7mH{1
jy&6kr0_
+x2k:w$
=/Ppg
_\_\
*5.32S
O Q6
+f>w
M-TM
XWnYWn^
TD_\b Im
W KWVO$
RINA
/g={s
#=!#
Q.$~
M+X8
7n@{
x^WAYW
ySF
^v8W)ZK6
%uZ.G
,D1]HW
}mmT
|X5]a\oQ%]a\aQ=]
#'?r\
%Q9M
j<FO
Z P
HFR[
Ws9]
AAW XZZW
31=52\
wR_ZBSe
?3KW*P3DZ
^ J9
<;s\@$
yMR*
!f=Z
A\]_
<{k
D~h
[WxZ
q;$-~
] P X
G"\^
o]FZ=W
JEGS#ZI
Yua'
SW XW
MX?q\
uHZ{
lW BW8P
/%Qw
0@fO
7]L
Eq)1
YNKz%
TC[J#
D2`E
\9\;\=\0\
i=l,
]^!ZXr[VRf[
WKCj
\IZ0W
$`w$
[VzS
J.r~
uqVM
0b y
W|XZ*N
OT[r
}=B;9
JvL0
YCMv7
LLOJ
&)@@- "C
Xr3}
8^_C
WCbD
rhB R
,qG
92;(4\*5.()=0,.3(9?(\:0
.334
\ ] \
!s?{G
w'rFk
q\^_
TFO$
EWMN
&^q\
]\\|\\^\
NW.CW
,<S|
)Mno
g^5y&
8 fMD
3wPA
IW;M $
-Aml
=O}b
^K*N|UpWU
0+=%/\
QXJ\m
][\^\
cx4u
c_MV2
F ^{
~RWUoJR
=}u;A
.MoS&^
fZAM^.
A{c8
VK4j_
T\^N
/ /s_
\\]OHCL
i#`l
FWESW
ZR.\
N,H^'z
.S'&Y
90=$=(532/
ZWlL
I@ !A
C@,`
jO$44
a}y
mV[FTtu
|[]=
~||
#>Ik
+W+r
icck
cKwz
jWaOW
X\\N=[\^]N=N9V\XM5RRM1M-Z\_RRRRZ\^]RAYY\]N
RUO5D
9=89.
4fmG
hh>hMFNGZY zYG|W
]RRARTUYIN
Fvd l
]']>a
TGfVD![
1NW[
MIMJMW
\_\'{G]_\
3a`?V
nRY,4Z
JCtE
_+.>':
)::9.\8+
SWlF
91,S
b!Ib
tG2^
3009?(532
Z\\AM
\VW U
HW?K
N]hY
kX_tUZ
Da\V\`\0
Vzr*
km@N|$
@ ^XO_I#
L|Zt
1m9:
yqt"
RdWhh
_RIq^
]WG=|G
A_,CT
!nvf
VM8)
#UW4G
!,w5b
f.8y
wo#j
NKZt
H_>YS
b7s6vqgegw
NW)~
3yLb
C,N#&
\od&:2
UXKW
'3$=t
Z_)X
D^N:r2S
SX\
fcc:W,
O,}H
y[|^^LM4TQ|XN
$Ek"
' r*
3'yO
p)a^
v.,FmI j
urs^
LYW(U
%skU
\\\\
;hNv 0?+
qThS+^we]WhU,
-}M}
r\ JJZ3
;RCm)
t/)x~
U+J|
tS+@/-
~|U3
uTH\
R]FB
TUYIN
V).dd<
309\ =(4\
@Gs\
:Pm`G
SzdXi
i<8q
\=\1\9\\\/\(\)\>\r\9\$\9\\\\\t\^\]\
,d\D
$Rx\
]W5[W)Y
y^?lOGrQ
& k0
x<g+
\ .3?9//
t[7hZV
XBGN
DzCQD{|[
XX.MZX
2nU7
3,%\
o\HOt''
XKQD
n]eo
mzPZ<ZP
q=]
XYF'
_kY;M
[66 YWfH
\?\3\2\i
_IMI
4.9=8 =.=19(9.\
vM%n^~
$p?*"sE
<c<zP
DV\ DWVDPBD|G
s%Z"V
Hj&1K
q}y3
!t1<T
$9?bQV||`s
sRGB
&$2c
QG~^W
S(>\
[hLM
VNf|
*Sb)UA=JU
#Pw]5
TTZYhvY
X]^fNC
2F :n
o?D%
PWuI
_w:~
^a\V\T\
..=%
!pn=~
ZWCOW
5/?.9(532=.%
Dr<
FZWluz
5Wo>
>#YOM
^dxb5
>11Q
Z'=D/
wLFZ
u4 p
AZj
Zo{GZ
8ZEI?d
J~6X
g%";+
}Tu[P
\X|]]T
~v/_
9=89.p|1\\\
s$XD
T'\\
SHWSX
9;5/(.%\
\^A[
kHW O
}kx
e%s
x_Og^
|M^\tI
)iP'IyE
1@&
vpLqLrLsLlLmLnLoLh
Bgo<
={~
K\=y
Z]UNQN
bK NE
3HRL
W/^i
CL(_
t4 Q_
dOck
^/]]Z_W$S
-Joh
c=p#%
mZaP
^\\]E]
(=(9\
WBmL9m)mtg
Rb7l
RlQgVUp[h
OWa)-i
S H=>
W"|O
)2&utQJ"%
Z]qO
ZZYZmZXZSW
AWlZW,_W\U
gM\D
XWXV
U-TVK
MG!X
i8{r
\\\x
67Z4
FA<
zY5cX
A^@4
Ce\$UqQ|K
E!e%
De,VN
\8]^]\\p
zd+
W|V).
79<O
[ bS
#>CzK
|Avh(M
L5yE
oPF3fH
VPPvlNez
ak>v1W H
[{m7Cy
s^CC
B~tW
MNMMkT|
O39QZ
yDTLTTN
VZ<VZ8VZ5VZ2VZ
\+H\SUG
SR([xZ
|1x{I
Zl_O~\[?n
V_<\
G=4=
QW Rs
v(RB
YIW`_
sPu(
BPQ}SQ_
N `2
W <
K]L\
\8]^]\\(
mk?sZ
R~S_
3k94
fD:Y
rUM%]^X]
c 9|
nSbp
JrW.
DxJ|W9uxK|]<x
c1],
EGWO P
h>o/
QXV\
p~^RY!
f<;w
\\}] \t]_]\\
o3{7
[T\D^R\T\@^
ZZ$W
<q $
Z-VZW
x>g<W
nJ{7;
2=>098bQV||||`
8R\<
R.Pav
H '
1>Ab.
^LcZ
;[iv#
3>F&x
3`.J
YNjh
-( Up2
qv7a7
jV\]\
;M, 1kX
(dW}V
KYu#I
MW`-J
LQ1u/#=U
u!p
_w\4
AY[\^^AYAYY\^DDRX\]DR[L]^B\RR[\_]M
8Bfh
IL)%#
xd;E
gX>r
_TW[X
l:qjo:oqhe=iq>?
Ki)s
tMnZZW
NcNac
qN^JPevT
88.9//\
t:9K(i
`UozrL
!^\I#F
avu
AIH2
DY\<D
xWiN
_@z6S[B
27M4
42 1
F:^um
W[XV_J
p3uS
yW4L
\\\\L\# 0\c\
{i'5)5
>| +'
dl\$[
/XW!^
\2\(\9\.\2\=\0\
_PuBM
]=Dq
KI .#1J
/0Y>{
]=DI
tVt(c
YF&w
jpt/
tz]a
Iut"
B?WZ
$ ;+
sML:
LWN1
Nw\R\<Nw\R\
ezP%<Zll<JPZZ4
ZW*P
Ht{M
g#m7
O"1P
\?vn]]\
DDt[Z
CZpvt
6kxJ`
h/9{
^]\\]
QS|@
//91>0%
50(y
p}Sl
[LMdR|]Y
HeD)m)
A.MA
uS0DT.
/P.P
=8Fe]'E
84wr
ggo,
[G#on<
o=i~
2SKrV
eWy%5I
XxIc
A3 ~
|LxLtL!^ZZ_ZQVZM
WKKL9
1^99^
_WK_W VW]_W
FJ {
gx=p
NN+o
@Sz2
b\\u\w\ \I]\\
SGD`
yeX)
. ~ +
op!>
MUyF
KoGHy
K1ZT.
$'WfL
2Cmj
*g#e
PMY?c,
^VOZ
56&bi
<d<:N
Di[8EZ
OZMF|<
au^~GF
^,F.(
WUa}
k' S
_wR$U
3: 3:
\\\\L\b#MYc\
x:b
9~N^
31,=.9
?OWLO
D=6'
7 K|
y"P{
9PKj
| JBg
]WVE
Y|xW
Yh\\
xYc\
F@#M"
m+6ei
l+5N
%!]58
[WULWo[Wb
Q\=cM
pl@;
d Bkl
@S*Y 30[
U+3>
5T/ZL
=9Iw
1^LF`2 J
WDJZ<e
Gk"%"
eD-^*
Qp4EyB
u\;*U
`m'b
gGu
zX >
K+JW
R(:
\G*
K1uy
oV\]\
+Vpb
^qL"
F\Tx[S
zW1
`9m"V3
}#_e
5hLaa
sFsbTOn
2^3
[W~Q
oB_A
F)_[
\l dc
@}dd
\\\\L\& I_c\t
?a$9b
.PbAW
Y5=LP
qB-E
}t
1S>x
\Vx~k
%Y?y
yR gIP
311=28by
4 `[
^\}x
u 6Xd
QcZO
ug9e1
==MJ
||p46
$9?)(9\/9(
cq,WtC
pWb^5
c/ #[l
?-bw
FD]_
)2(519r
31,50=(532
?R/A9
8bQV||||`s
NEeZ"J
]RZ\]ARAR[\^]AYARZ\]RM
}{X1cR
"=(O
'CRXSQY
{mZ8
}qs^
Q]W
OYB<
-b
dE;
a\8_
^+QC|x
}~+w
Q\BqT,9!!
^@WJ>]
9( =0)9\
hk1s
s^ZRI
nO6o?
C1]
[1vYW
V[hT
^S6EVE[JtO
ihpe
-;a*@
QX\\\\'\\\\\]\]\Q]L\
\,`_
"L])
\\]\y
\\]\z
l{ Y
"_T`>
\\]\v
50OI
W<BbY|
y$Kx
h\` .3?9//
sEKI
\\]\n
*2_2'Al<
C(M
%\=&M
(nJ3
l?^GG
\\]\a
Q]YG]m
3.1/\
\\]\]
tM[X
0PlS 8
UW_X
\\]\V
T;_v
^Tyz
Kw F
\\]\L
Z\]RN
I_K0Y
MDM]
VpI/
\\]\E
eiZP%i^zP
_Z8\\\\\_\
\\\\G]
=2809\;9(
YWbZ[
]KwHDCwZZt
*7/Q
]hWq_
L}09
^O Y
\\]\3
Bav4f'
YYdaW
QvLwVZ
4VI0VZ,\
<qWnm
^Iwa
\\]\!
rDW V
vN$;
E{F6
]\\\\\T\\\\^\T\\\\^\]X
{``^
`a x
EwI"#
id%SS
gRpb
#<GF
_WZ^eS
CC]X
lgx|
Og03;
Spw1
Mi@N
&z{~
k{!.8
(j'9OK
ZOgMg_H
!?%0}n
W6 K
>"@
M[Te
B 7P1
_q[(2mp
_c\<
J#W/
:?CL
##y|
]WcRW8W
..3.\;9(
]j\]\\\\\
_WTI
?q_
Zi_b
C-EKSZ:
\N%J
sXOUK
_c\(
|-4V>
ImD@2
[`\a\V\`\
DBCIDC|
I7jk
q?qj
PV,_"
(,c0
}B l
R,A[
IZ|+
JmM%
}% J
Z_m\
PS/^W
XXg6
KuX45
ywZ|Zu
cXdW
r$Y(
M]Z]
b"07^@
oJ m
`eq
{>]
_c\x
|-0|EuF
_c\d
&':
`t&Z-
:qoJ
]y4g
_AEx!
026ES
keNcm
_c\h
ZY y
l\3\`
zGq'M
_c\P
"1V,]
BlM5
i ;Jo
"P/
k49]
W/?*
_c\X
ZM[TU/
c _
X5;ULi
vuTC
\hV rQ
FbB
g$Q
Dyn.
HW\FWtY
y\\\\
wKBY[7rvW:B3[
8Jg,
a a
)>\?
Cw`C
%p71
;b"W
SE]
YWNY
&Lja
*K .
h-kB{
^c5[
< kf
EdF5
L~N"
`*3r
ug1ow?
p/K:
$$y
CA?A
PKu,W)R
^lX zD
]_yZX
@9"h
*DPF
W[_D]
RNsi+u
8Iy6V
h sQU
wDVUu-mF
7l"o
^]y+vc3c
Xe~Ay[/
K8o&FK
^QoXT
/?3.05>p| 9./532ahrlrlrlp|
Hp(>
=2=;9192(
m[[lZ[ca
#'(PU
5]lMO
(vmG
lmAlx ]
[;s6
Cv|\
}}ZJ
Z\pK
! WJgD4]"
qt
31,=.9\
PPba
Zk=1t
\Oh ]]\
D,]tD(]q_|["d
^AY[|^]TN
5"tg
XA]+Dk^
|r wW
l V-c
XDMDJ
9 +1SO2u
wm'}
TbZ 4990
>R(@/
S =Y
_2Kd[
vwwa
o^+3
nK/F
XN] _W
DZ8}
}{2D
@!D
cO9[}]$Oi]
%'G
U^ }]2
kFo< |(
PWwX
1kZl}P
gzW2M
n ;
U5R6S
MLX$)
krPk9
((.5>)(9/\/9(
zN9g
gb8Z
249.5(
k ?
{~T]
w}]
B_DN_
PWwv
(AG,
1BH<
3089.
k[B\
V[M\
9;5/(.%
4m?A
\\\\\\\\\\\\\\|\\<r./.?\\\
;S@>
zME
Ld\[
#[1=
5AW-
-W\rA;
4(S
2 vq
>)Cp
UW<_%DWrWW
1}\[
YVWS[B[3
sNw M
DS V
gv"f
Ee45
0!>Y
VnVeV
HS%#
r?{j
Tjvw
GS~s
Z>5]
V=CZ
EWlT
?[NN
Wf~>
ZX_S
n&t>"|
&X0 U
$I6
mOOB
GmL9m
.9=(9 .3?9//
v[i/
zW>+
qyD~
d^0Vj
=q5Rg
:qi
."S\
Vu{E
~Sy6]@
oodYX*
e?F\x
5gRl
MM2,L
@@q}B/
f 2u
OW _C
`V\]\
jyD,|H
L Fy
7R$ `
W KO
c$x[#
'V,=fc
tMlD1P@U|Z
ZVdJS
_CUT
Sr_Z[
%IA]v
i5Jl
eY)n
lwUd
,/LrL
Z\]RRU\Y^LD|UVtDM DULJ^
bTFUL[2K6
H_XYt
8o*7
%|9g!
[:WA^
| WiS.
^Uj+
{xsl'
_\\r]\\
_CU
?) }#
-wR~H
mM ]
Xem]
tw)W
R?zkq
NW ^
{%[MvZ]q
';od
dm&v
,5\8002=19\,.3?2=19\
EC&6
%0PCHX
56<3W?
^^d
^\\\]\\
R_Azr&
}p/WR
RLn^
HZ^ )9.%
bN\NEFO
_}0s
KkVp
*IVW
"lU.
CS[y
Q&$8
MW$;W}I
&3)_2
IW,I
I}$P
8B1p
*=50=>09bQV||||`
hnW%
T~RY
JLt2
h';U
9/3).?9/\1)(\
\KPF
!#0|i
+1Q_
r;Pj
kXGP_>q[
i[q?
0592(\
WU_ VLVLV~[
[1Z\g![1Z\
dwPU Y
&u ]W][W
Q2#b
[?HEF
_/5;
]w]JP|
[tfN
MM0?.
$.YA
H7L\
]u_3
ZEC|
w_Bl]
t#+"
<F,~$_
ssCU
p_Zql_Zqh~
J xE
YM,[}0
MPMQ
Z/98
I %2V,8
%,9\8+
LK }
yOAx
yCLa
)U L)
ZBC5
V2RX
F89Y
4&$S/
T}nM
Y[H 3
],MSTM8DN0M8M8N,W
NTVU
]RbT
X^ y
+V'~
25(5=05&9
O$VB
\?r
-vMv
f*>In
og7
b G6
Vx/*
7Dg7
2:3\/9(
<C<zP=
\System.String[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PA
Zvn,
SMUd
#r"9Z
j>EK
&JD\LO
8u*u
xN]GQ
V(S7M\
V|ZhL
LrO1
j$1j
yDDUULUN
m4T6
UU[XAYUN
]x8B
\Yvm
u^W^HW
WPpy
DOYMY.
Y\=W\
*oHl
SS 2
xifz
}kVtx
[g`~b
YW6YW
uRS(
Je^.PQX
%/@W
::xL
]T|[9]TT^R[
(J<
Z mN
VpRu
y<P3$y
YdY'S`
OWrS
d/{b]
Prd+e
wqD$
\\\\L\W
P S*_
Den Ub
D@nJ
t.dn|
RHHF
e'SZ57U6P
]B,A
Pd@j
E5.k
O[M[3
:JFtE
2VR5W
EHu^[
=2=;9.\
&6}{
^9HJ
zVD3[#xVKV
BUq,
F,zb
3[ ][ ]
r|%`
>s/!
STWRX
U |[
XWyU
EIOSw
j,-1b
\5\/\=\>\0\9\ \
w'Ma
:9Vu
-DwI
)cGFH
>_ i(
xSwF
1i0&
$vu&
08=/1
%A:?
VtmmH+
i;>&
U]v.
iPD.
ej\[fa
kYZ.e
`td'
wS!a
BVFjp
jrF
Z[HMO
nEQ+yY
(=m\
_F`I_
[Vaqx
4HpkT
POKU
aFLW
!Zy>]
IWt7
FWPRWkFW
C86a
%KfR)
Y_PO<[
^iP.(/
_G
VWlE[H^
V Zb
hX,}T
4_OJ
.!]\G
Al^#
hf@+
"wH+
[vgW
\\\\\
JyF6
YLEL^
Z4 _W
H:tWm:a S
"zWbp
n\b\
+)_H
W<HW
909;=(9\
]!XVS
\]\\\\\
*\PMK
w19}
DW U
[W D
ET?aZ%V
(`HJ
pMKND
>z:8
]S\^\
dZRLE
>=_O
_'@\_
O9HW;V
p8<d]
^S4Q]1Z
SW8_:
+an>D
399e
]UP[[RN
NPr`
EQH
03:VZK3;V^34Rx
U\_]N
V^,[
?h0
nVf
R^_M
IW0YW
%)p7
_^(e
ld&y#%
MEMThT|
Lil yQQ
aW.])
6 jjh-
NaE[q
/C^V
:}MN
^EpX
7 g I
9} 2
fSe0K
SY^W
]]\|,\\\\
6m$p
WDrd
Z\]TN
F'km
Q*e}V
9>); .3;.=1\
%_W-U
4.9=852;\ =.=19(9.5&98
2WA]
WG^2
:u /
2?3852;\
Q^ec
fww.
Y(4on
5.9?(3.%
FM_3\
#;)8
JpTV
_x8K
J=P1I E5]
HC|NHqLVe
~Z=~J[
*\JW
] _D
yFf=
XWXX[
bZK$
[W<T/;
nW*IZ
UjYs
V_5^
LV%-2
a[WHH
])@qUZ/
]_\^\
RLM T
GHqQ
ZL6,
pTk
qWkO
Qa8;
]m= T
Cnt#
=?498
_Zl _t
|%GW
O^a|
Y)`_*@_g
l_'i9M
/1y?5g
CWE@
S z7
[ane
j:*k
&_W(S
yY)<
\9\0\(\
ZN_t[
]\\]\
N]t^
_ZR(RH~R
2{%s#g1
fk>+
EG3XZG
{L\?z
Lq|t
7/ D
{4M9
=W.V@Rl
HL]9L
+Y<q
MW2h
[ESE
S|WAS
{^]:
56:?
KLTQn
~N<O?+d
FC7 GVCW
vbC[
Y_^?\
XI`X
@ -0G]j_j(I
^2{D?
u%*W
(.9=1\
-&|8dy
F ^Ik
JS\H
[DGZ%
.99\
tW Iv
Ml S\\\
w'nA
DM2$BM
(s/_
I9<N9/
\VE]W}p
4d`Z:d
I^cF
_LW$T
Iur&
9$(\ .5(9
<38J3
Sbs05p
\9\/\(\=\.\(\
tZKW
M;(i
v@ bFcc
Y[l
B1EG
V@\a\V\@\
tI(^
/ob\
m&PV n"S
|PrmD
v^I\,
WTmw
9( =0)9/\
v9VXI
'8?
A[h
vMeL
3opU
\,%.5;
^W"LJEW
5TpWS
M"Z}V_uD:\}_
\2\:\3\\\$]\\]\l\l\l\l\l\h\>\l\\\p\^\]\
:f<8}
WJ_W
o2q1[
3mF..
7l x
kZW3WYve^V[
)>/(.52;\
}IfX(p
kf~3
Zw F
^K=RqW
[!^TU
2#YcJ
XZ,W
XBCL
HQ^+
j\a\|
7EVB
D8OM|
a$Ek~
8[ZRWV&
\\u\-\
=R2*
awJCW
)..92( .3?9//\;9(
hJMCu|,
Cl
B{ !r
47"UO
9?.9(
V/3
|N& y
z^ KjgCr^
]T[|^DN
Xx|,
:N_ 9
YXto
(91\;9(
zb%f;
9:=)0(\
PWq[
& 9=
T< ~[
]l&=]W-A
PabUT
<, /
^OI{
e{B^
ZAaH y
^ 58
,fJh
Y=y<
Q_Gg
~c)P
JI\ e)q
2epw
1? y
5009.b>
5005/BX
YR8h
U9Xm
VCO@
-e1E|K
{7I h
:"V-'y
: 52298
Tjtf
yp|#
YXt$
1 8<|&
i}<D
]^@@^Vz
\r??(3.\
K\9|
0+b)
MCzOH^
^CUZR
Bh?j>
IlX<
b _Wkx9X
23+2
/L I
!VfN
;xwb
W VV.)
YWMTdm^
d-';3L
aK q
NHHEO
zMmu1qM4
D!VZ
~ nGW
$PSeE
MW(IW
ZoSf
C RW
KgVYO
P`c$10|*9./532a~mrl~|92?3852;a~
_jqf
O^W]mW,WW9Z
\^}W
SD:\
oS~T
BW ^e
}]"R
t90\=8*
P`]Hcj
v-"a
[=]\hK
HWsU
ICdM
&k= %];{
_ZTW
D-L[
}I[=K
mJM/
tG[U~
kXf,
Type
}P}dlS
QZ\]@N
)..92( /9.\
*%0|
RW_K\
1=;9\
wmcF
iA s#
JC")
$=]
Z'@G \
aZ_)
-Wyr
k{eP
_WwG
9;52
.Sow
e\@^O
%;l?
x[Z
X$eG"
xOvA
\ =0)9
BV\]\
>69?(
0S,}
sF9
nD '=
QZ>W
KNWfCW
oaTV
z}q
]\h \9\.\/\5\/\(\9\2\?\9\ \=\(\?\4\5\2\;\ \.\3\?\9\/\/\
^W,XaF[W
NsV4
~C5G;
$F;`
_m~3
D ;M
Q.)@
y\$$
1^1u_
Z5YC5Uj[XZ
#vsro
(.V|
3792a>kk=i?ijmeoh9lde
{s{
QXZ\
NO]^
G"?#
1@-~R @SKiFR+~RI@
o''S,>
DoVZe
S t%[
`\S1/7
sB,}_
]iWZI
pk +
W8WW
1m4-s
Aoa
S)wM
9V y
#sR=
Z0L@>
mB8aYEL_
l 6/
QN[t
32*9.(\
I9}M
F[/b
rwTucC
WRdZ
U)u_
W8SZX
pEL2!&
\RZuWvZ
Z\]N
W<[;-G
Zko
`{l?
.5;;9.bQV||||`
3Otq!
YXCZX[
C[pW[(
y_]_\[zD]_\
pO X
tDzH
:TTd '
SvBu
ZeF*
FKe*
/4by
ZRA^'!
W{{k
PO J
_[tdSO?u XK
!+'D
\=\(\9\ \=\0\)\9\e\\\H
^{Cv5
cH
Li_[
I\\u\_\w\Q]L\
]hO_DML
y[WkU
<ZPw<zP1
H%),
rc\L
\\\\L\q' _c\
5w;wFW
)+ +
oy&er
bF6"vD]
\5\$\9\8\p\\\J
g0c^
h)O'
\O}v3
$-$X
fS!P
4,XI
]a\`]
hkkAw
(}ZMW
t5J`F
1c}`
lH/V
31>529\
9/?.5,2[
9=8\ .5(9 .3?9//
gx9=
hGOVMF|p:Y
CRnZ}_O}^z
XV{L
}qEYoV^d
]qQRW)
Ve~W
_TUE<
yDYf
P#yr
i b
V{Zc
p`;z
MF|Y
c+%.
_\]hW
fCmR8
N@~7'
W -M
GG~:-
hW^i
RLiD
^mlH
'z?k
]gOBB
u--K}d
gIZ{
\W:T=
# uL
MF|x
}]2
! 1]W
\3\+\2\0\3\=\8\9\.\
\WvR
l4^eDi]
c Eyu.
SkipVerification
]_Z3
PW9S
cZ w
3qZ5]]
HxRk
R$0/H
EdX0
-][/n!
pS~w
r(9r
+eE?
J6WJ
5?Ng %
k;f
VWp/
#_zd(
_ZKW
NM$H~
DcyO
8152
bA[2vBW
69mb
F_vyQ8
oXMF
U=ZY
PT3)@
SFM'
yDL^N
C1\
X*Q]3
}P@^
NB~W=
KKhiHaY
tWr_
J/t*
5y[F W
$\4 .3?9//\0,
UZ\_R@@@Z\_RR@@Y\]A_RZ\^RRA_[\]N
FN h
]^\`
\9\1\3\.\%\7
M x[
evN3
1U)A
xSy&
C0MM
e$?
7W)6D
h 9s
\\\\\\\\]\\\
]tr9u
ES~6
(E]
vV.XY
E^N\T
L z|'
)Y=!G
dMd_H
)Ia)4
!a~ w/
KJnW
g']]\4/\\\\
HXLSUj[n8
~ hS
`.rsrc
BkN
yte\
@e\W|z^
QXZ\q
((.5>)(9p|1/?3.05>p| 9./532anrlrlrlp|
389\
].S^\,3d
\V9_OF2@5]J.
^_TZ_}l
EIB2
S-r[$FK
VXSD
\\D\
mY\[
PWLZ
JmlK
m'3X%
09*=(9 .3?9//\
!Oo&e
UDiUD
#U)lc
#c!!
Zp[:
,>E@
t1#K
i@?(
jFXwG6
!AWpAi\
R\>X
^[ s
X+ R
e>~{
?A-:
Hy)%/3
A/Mtcu
l'^[
"GL%Zm Ij
KQ=$f
dgR#
]?\$Y
cH>2
0=//\,.3?9//
_6tW
ZTZ3
Z5C\
KOk'
Wx8P
r^d(
wxF.
Y.b
^C [
@_[6
f(vLH
PJ"B
`\\\\L\gY \]\
@*#w
11"m
2/(=2?9\
T_IRL/
7:Q
:{Tlk
9.3\
W R
^TN`N
dc== v
|ULZ
Iu8'
.yRR
>:K^
MlL
C^d%
S9w
QalL
ik 7
WqXd
5UQ.eEs U
Ql\K
</_kD
3o_"
\)\2\ \
"}oj
KJ6t
hh\W#_
Yt[n
UW._
+WhBT<
?)^>
S4%^
$r0'
ANR+
Agv.
r9$9_
3N58
|W(h
]`oy
RR^AIY9?~
TVLSR_JL
5+,g
Z4WiSO
A yaA
] bo
mRUW l
l s+sd
cet
[W8L
Y|]]N9X|]TRX|]RTY|^]RR_|\DY|\N
^ Up
[6E^
Yt[=
c{qo\O.
"+%=;
yAn$
i0i?
T XW
>N?t
xG'^
KH^v
QXZ\X
+VH
vR ~RI@
_GG
XmSu%
<WS5"
~DCH
yN>_
] Y&H
UL=32
^V.
ud83
Z.r_
gK>g
e{2^
rbK Y
n.3F0.0~
.5(5?=0 .3?9//\
CDBPEJ,F.
x3k8j GroB7
kkfv
/Z<P
_5o}Q
jS5o
\UTT
.9eVZH\,4
9//=;9\;9(
sLgb+1Mm83&
}K^l
]8H
)-U
+MKFFd
GdYW
_J0U
S.EK
]Y\]Bk
[[KU_0 C
c|WOHW
I\gmpgUxg_kLgL
A,!Z
q===1p
8t^D
$9?)(=>09 =(4\
J~sZ<"s
#JV
7a>f9a
Zy V
I #3"
+%(8
_]yJW
;qxL_
K *6
o~rdR
<)f.
@['d
_S[P]rZEv[O
_[F ]<
_EV%s
d)v#
DG'Y)
'qDG
QXZ\/
^WTM
|}=
)~QJ
Husy?
9ZaJ
L[0z
R~h/
Zr&/
vm.S
=vo_
|rX:
p-WF
4=2;9
^Nij 5
]u
&DX;
YVn')
DDHATXoutz
\wRTMJ
C%DF|
E{VvZP
Kg<?
e^{kVVd
*%NJ
:te]e
b#I[~$P
Z@Xj
UWS|
$xC_\
X5~SV
1;%m
3nYV\
`Awnr
(.52;\/\
$>8h
5\`8
]L=.V
[^VZ_vx7}\
Frt3
nuvi
~_eX
d >o_
"{t?rF
vR<~Ro@>~R
\3\1\,\.\9\/\/\5\3\2\
XW6VW
el%X
\'o"
DuTV_
O=\\
X*-]l
d4VgR
r*o%
/$O;
y)tT
^^_/[o}VE6/[
[Y@\EB
>+![
_]LWu)
O/_>M>N;>J;>N;>_"
6O\{
IHmAG
z1)n
7K=
7eRF,
Ex._
yz/n
&[6mQ|t
`\\\\L\cP0\]\<a\\\\L\
GH[eE
R-! c
Xy:x
VXeO
z1xC1
/^&0_B
DGC3D@C2DA
92;(4\
rnU]
x*Vm
H ZN|
YS]_QZ
(`WF
(91\0527\03?=(532\.)21389\890=%\
WPWXOSa
yw.vh
t$Q02
7f8+D
4biaE1o
D2E^1"
OVKW
]F U
f/di
GOn3i
q2bJ;7~
V\U_+
__l^^
MHBMHB
AN@
02D9'
\ .3?9// 5283+
M6]
_Aub#e
<M!M![xI]TY
92;(4\0,2
30A#
g)MX
u<:q
`/Ie
~mdv
U|c*+
.#1*
QXZ\
Y>\\\\\_\
7BMu
) q'
j dVQW
5ijA
2u$Ua1d
+Ru;
A"SWXnHe/6@W
UCFD5
?9\;9(
%/(91r 5283+/r
0Yc\
WiMW
('fG
1(,&
_N|kQ
>M5@
N\,ZOJGF.bO
9>j4G
%T*5
TSMkE
f[g;vt
YW QW
]Mvk
S<m*
yMyj
$'
)4$R
]GqVt
KWfE
\=\(\9\
t.^Fw
m; "$@h
Baf(n5
|YWhS
=- Q
| iE6
e/J~
]yUM~^~
AFp^
L XZ JxhW
KLIY0
4.9=8
}nAk
\\\\L\9=
L}MnM
]7gZZR_
<WIQW2^Z
vk `
)(X&
j/$C
F4jZ
IqA1
B5 1
)V>{>
WM't
Pydkj
WW9y
`_6f
P\~
mH.V
UGS5U
LO;tN
K9#%
w'40
O7!}
L59VZZ5
2?<v
<VOW
xpv3w
\\\\L\n
"g.!|
|ob/
2w2x 1I
>%5M
'C,<Y
3J{A/u
ZjE<)
U`yR
=2809.\
[WnsX\
\\\\L\n4
C+66
WgR\
yLM4TN
IZ]W
LhQQ
Kks2-
PNlJ
k4m_
O@wY
$o[b
w=Ku
:20z
EGay;
m]]k
+khki
MZ_d
EM^(
\\\pX\\N^\\
m 0g
)2(519
}_ p
^NZj_?S\
o 9^~T
R./W
\Wi9]]\,
~naR
[r%I
FUb,
5T._
y:@)
/~|/
=y*kW~
jm<Wk
{F'|
XW5Ye
a|3q"
^>ad
ZrXe-gR[
y9MOMZ"Z
bMXNZ
_KiT
jQ^}T\
E |[
[B]N9M
n<5X
Op/kV
\\Y\
@{a+
F :u
528\
Ev3G
xxl;9NG
)^b8
QWPZW>R
G6LX\AhW
d#0WRA
J.*BrV
h[BG^
Gv\r{
ugQc
mk6r
v.7~
Oz^
^__Lt
\9\/\(\3\.\9\
CW*f)B&
4f5J[
D'_7:
zKt<-"F-
]Nl[[
}Vl<
3792`s
>FP 6
N5oh
#U"6<
~SWm^
zBCp
3WG &q
XW=B
SAuz
S]Yq
|Ol{*
\*=0)9
s'wM
:Of
[OTJO[w
6-R
kje_
v^V^Zj
]D)]X._
!uI!
Xr_m7
Vu"]
]_\G
ZPGu;zP
::/9(\2
u>gU
OwW1t
(v6%I,:
XW=Y
)Yi
UWhR
hb?p
%tw]
(HI@
ke/@o
^'9H HZuW
AnY]YsA l
>ZL8
BIY!
khr<L
^\?>
c+V
7Ys0YW:BZ]
I; B
0pp6
*lF]ZGR
\8uQ
yVZD
P\ d
kcsp
ZU>s[h
bAqJFE\Of
v&'Q
ZWYg
IyjN
* _o
SFIW
]\\\\\\\[]\\\]]\\\\\\\YW]\T\\\\^\^]^\SVG
FWO,^W
^D\\\\\
: xZ
:d=qh9kmqeh>nqd9hm=jm98kj]
r}p3
sTR~
zVtw
PZu@N
38)09b\
jk )
mML
.JR"N
2(9.3,
K0[&
+#t
W^[[[F
[X\oMZ!
O=w1h
cBQ&
/+%j
i]-\
!C}1tk~7Y
?-@?E
hHJD
\\_\\\
[T\ ^
%,MK
PakZ
qSy3r,
Sk![
T[_NaN
Lw_"o
_`_^
js\?^
CyR*
rO~2
RPMS
*)J.
-Vp`
sKs^X
li*p
H?9w
<6M=d
*^:M:
vNZ'
\\\\L\K*
2:3\
<bt/b
6j)7
W3"t
W$\{
\AEyF
QZ]W
JW\LWDXWEZ
6GC25
+ZWC8
"=}H
v\UX
k 03
5`of
cmyL
fJZT-\
^ e
?]l~
*@ME
( CD?J
`wj/
Rl1U
L|Zq}
KwOM
tnDZ
_WOLWG^
q0a{
Wx:C"D;
rmn
Biv
T2#b
XW$^e
^\\2^\\
xEa~
kl>Z\
# j_9
qDK
hpKr
t&V?
ySYTULUN
bN`c>6>
pyd@
ogC4V
PNtTQwiT3U
wM6
3jDd4
k$0oT
O}T(
\\]\N
R*/ySz
p^KNr
y0_[
5EPi
Ijx0Me
]JyX
>.vf
8`
1zMb:
/?928
_ZN<_ZN}_ZNaY\]]ARY\^]RRY\]RN
]A_P\Y
B= rV
4S=CW
3%vO
>`B.
6 SMT$u
@o*d
FWgE
QIMu
MK}6
\w )F
aP[\
F tth^
FU3-YZ
RCyI
'axo)}
sG"=
y}~#*
EX:az
_W&_M
SJ Z
-]3|4m^
z /=
\\u\2\
)(9$\
Tr\G\
R'`o
d3\|
kO!Z
K^KJ|
LsP8
Bs }L
BYV,
R ,H
V[@Z*\
CU6m
k{b>X
F~\2J3
2^*D/
m+WG_
]$DFU
BRlS
>,t
\C<fjc0Q
] $5
k%*JMT
yx=>#
81t?2
Ms+s
v6phyUuY6TNzXpRbwvDSXEpW.resources
}YVI^Jr^\^
^) K
WzZVV
MWAL
]K]c
?K=$
pWYU
S7c}|
;\M^
1C^%)
$.%%
CM8|]
wn#N
u6rR
5xoX
tC!f
,'CK
fpR`
Xq^dW3V.
\:p0
\b<ZZ
8`}v
SLNh
a0o,o
=((9.59/b:=0/9`s
_ =.5
}\RF
[fO\
`o.&nSO
#" ]
7b]\#
+A36
upFH
TW6ZW
IWNHW
n9/W
90,9./\
~HvqB
YsS,l
^[_ItY
0k-T1
'! @@
f>6#
c}^^
^WswC0x
fMY%
QWoFW
=/7|*9./532a~mrn~|$102/a~4((,fss/?491=/r15?.3/3:(r?31s+5283+/snllhslns15(s(=/7~bQV||`
[UBm
u[e_-
QxU)Q_]
$:sep7
xm;R
wC t
+rm}h
zU[u
>iGn
K VD.v
]V]L\O
QjU]\5[
sM1z
6k o
uQ}7
7t0v#
D]3Y
x^R%Yg^U
[ a]W
!g_qF
NW!~W
zJvm
zvmC~v'
$PS[
j9o,JBqj
{1rc3wl
O6UOb
]V]L\s
_SSX.
]V]L\o
UZ5?
qdom
rN^~
C[ORW
^n)^*AYW
xJCt
(k[_
9;I^.%Z_
~4y>
s)_0W
zyy%ee
sn%^W
R%[k
N]p0
]lBZI
ZQHZh]
.IWN
Gq<g
gZWW[
\_\_j
Z,f\
FMLm
S1RMX
8qGNp|
#4ECcNK6Vf5rPGg00LANCalLysvGTLzwN5i2
JBOD^
az|Vy
2,)(\ .5(9
%)Qj
]V]L\5
Ki_;
S+u`
VIdd
ZR"WRS
]V]L\)
-Maz
* 7[Re
An4$
E%(+E
'pkN_
C.DEC=DFC
%SSN
$f)g
EIzvf<Zv
QWc
|\o[_K
@>C`
K.qG@}
LNZ*
_0!v.x
Jey'
!*COJ
}XZ\
p:A'
A ;w~]
5^Ct
:/4L,=L
\\q] \
Y@W%|
TKHYq
tZWfQ
v&UI
Xn4W{WW
J 5(
=w1d
xGOk
X~b2
WgfM
qzDr<ZD
nH_o
A_UYV]M
)[|_RAYTTy[GNyR^SYSY[[SUUSUUUUUTUSUUUUAUAUTUUUUX[^UUY[_UTU[[YUUTUUX[^TUT[ZUUUTUUY\^UUUZ[XUUUUO[LMtUUUUWWYUYYUUUTUU[[TTTTUTUY[_UUU[|_]AYTTp[OAM
XGU'
4IG(
zdh
_N_W
=gfO
HJ'Zu
l|aM
^W"^W0K
d~%`
MHAMHA
WWPRWDA
4N@?{>
qU[~z
PWuQWTL
?=2\ .3?9//
Z[ q
VJPwAZT
-<_"
DON<
{r?[
}UV&
_,%^
8;Z`a
Z/ tZ#wpUu7W
H I%
N>>t
k@Ww-f
7.m3E
UW ]
!W@_
fW[_J_K*Q
F}s/
mkUd
IF$YQ
rTLO
X[",
ZJQ23
B]pZ@[ +S
'u]~?U
vs):
2O)Cc_Z}Z[
DsZ&M
r$ Q*P
uLWGK
[W0JW @|U_zRoL
k[\\
=R#}
[@[L
!]PK
ApUV
? p:
K%-,U
N~1#
sgyin
oX9s"
R\J^
%v~W
l9Ne
2)19.=(3.\
/_?J9
^[ShSI^
QT}H
!EKL~
I]*^0&o
|^~`
*@w'\
(=.(
#Strings
JCH8
OZzd
8t K~
RMWYU
//91>0%\
r' &
@lG }TLy
Ik-]
]-akx
.ctor
a66kg
C= h
Wj[[Z?@\
^cHcw
=D<:@
!x q
eZN
mscoree.dll
oW I
< N]
mh\]I
OwQB&~b
@WJeW
;JYw
X6bbV
]M eZ
X\\dGZ\\MF|h<
$"*S
}Wlx
N| t
A|ts#
=|~9
=oN7
7OB=|
KY$`/
[ZI3 ]Z\
G`^+F^.
9=89./\`
P] 3m-U
IQPwC[^
La6MN_
f@k\
)JO
XWPR
_oi^^
R Ia6
{a1
/'D\
_knW
=YiMP
^j]Y
jro^
PYWAEm
jCGS
Ugm)
e84T
BqX4
ZGg<
5qho
%(9\;9(
*92(\
XK.S
_ iP
Q>kY
<S5,
xrZKI
b9>G
; P?
:$KT
7Y,}*
0UZg%
"UmS_TsyH
YOdK
LWpKXdzZ
>e$xW
m8% ?
F)5
~C e
\MWMVMZ3
WO2{
@.reloc
$pD;
.9=(9\\\\\]\\*
\\[\
!~~
D{%P
O.eKA^\
@J W4Z
q[KRDR
Ix`C
K\\u\X\q\Y\L\ G\\q\Z\n\Y\L\
}P #|
LALkL;L
>_JteM93
}x\=)
wP}`?)
^u5p
~F@s
2 ?5b{U
6 HuQAi
DYJt
WlMW
pMp_H
X;w:
Xi-X
d_}!
5G$y
sI! B
KRWp^W|^ZN
W<g\
qUntr-
2 ux
\"W-X.
[5W=b
S-<(X*lZ
]UYo
(BgY
R[H.
_ u]
~Y~/`V
^\:
9?).5(%
<T:(
{^|Y
7_)z
!?& Y
@[U).V
Z:DX
=!SCrn
s-5
fq62
9Feq3}
MXk\
>~urz-]Rz|
C+,8
=) 7?A
,v^C
iTE$Q
TtNd
JW Q
Z3RgyGJgcymsGAwKqKTV
: G[
awx#
tOH
|,#+
TOW^
xiN|'L
tEhh o
~~$
YhtCB
/2c#(x
(OW,R
+ngRi{
Ky{f
r^teZ
rnk
^W"H
_K{GW[$
%x ^
=/( 52on
]W U
u5WKB
Gqt %1
`k=^
gS{P
pWdyk
W6If
"4`
W6^/3
9YV]
FL~-
ro_@~{
^Z^z
3G>:b
W1^US1^US1^US1^US1^UC1^U{1^
8')a
Pzp
XzGeZ
J~Y\
Mgab2
3r(J
.UuD
ZVJm~
,/Hc
QdIz^
0^}C
W3C^W
&rCox6dXFPyeoTNaCvQ7nVREHJsdZSN1RayM9at
8:a
pq#I
OZ"|e
RG=a
NGPL`c
QfV*
"ci,I
|[9T8>F
c0i<
'13&
Wu5
UY[^N
_ZNi_ZNe_ZN`_ZN
NgnQs
~-Z\HM)
K~L%
\W'~
RA]X
yW<)
C qo
^ 2S
\y/9
^Q8t
\@\@]T
]n$W
PaiK
nJ=p
\\\t
KW#}x
\M\
V,#Zm
k9L$
0ZY\
R(9mG
Qif-
0H>~
]i]=^|\\
Uy;'H
ZTZF u_
dKrH
n\Y\8
J]dX
0~=
]nd
^Ukw
M)N
_si]
D7/{
"]SD
~#C@
II-'8"
} >?o
KgR(
X4n$
.f:p4
b&w&~
)^*a
qC ^
7{Fz0M7g
NET\^]NAM
V\]\\$\\\\
jgDW
MO6m
dMl\`
YU|[y
C`^'
_.J}@h
d\;N
fO]X
J+)+
jWOM
n C4d
yWZ7
31=52
_gXKd
WkI]c\oSW
.veP\}|
Z*C8E
e_q`
twwG
l hbV
32VS:5\SmY C\3>6)S%
4wRX
J.4O
NMVt
/nJl#
V|QUeAU\UY[
0{#e\
ZRanE
R"WM_MJCU
DQmiStM
kMhZ
XJE
ZMzd$
.3+(&Z
YCET
ZJyH
ybpi.N
7T^JI
1CJWMe
I#LE=
0CF^x
R`^E
=I1q#
_/490B_
2CcT
MHCt
_%YL
\\\\\\\\\\\\\\\\K
F5L$
/ 3+jh .3?9//\
FS@h
= qh
8YY`o
[N`j\L\
, W^
b7g<w
W[fN[
c_&[ ]
XFS S
`OYthVMY3
8aUV
/rU@
\]\,
S"ASnY]
Zb->
8_[I
P4u,
wM].
P @/0
H`/N^
3Qy,
Vn ^s
[REu
syWx
tXZ\
_c\L
pw@D
hn!M
*! =w-
.5;;9./bQV||` .52?5,=0/bQV||||` .52?5,=0|58a~
!R`
5x29
\]\x
21EKS
*e ;
}[mS
\]\|
E{i=S
8H).
XHr`
\\u\4\
WQa}
ql) gV
A@NAA@A@UT[XRRM
CXWUW
39?g
K(]1
f9PTHSJ
W+S
t1z0
VIQ.oJY.9
8Uu]a\^Tu]
hub
ZWz^
7. M
C&h0V+
k]M
L\9S1LaV_
ALuT
&YBY
F9P"
|v'1
92;(4
ZWzN
_/c@
"~RW
tH gvl#),
!h;U
]>dq\
qHTT
M^\
TQhe
]<p:
+G35i
)0().9a29)(.=0p| )>05?
%sxs
L ]cr&^
UT,z
_Z_W=^ n
\1G,})+
J-&=
NYf>
OHNHtM
OOLw
]Z_|
cn(a
_/~Qm
)4]N
FOQ~_
CkS1j
XZU@nutW
?9 )=05:59.\
A1)A(5
UTG1?QW
\Lgb
{R.I9#F
#!M%%
S!^~G!^Q
`.P7&
~ZOsMsw
fxMn
] Y[
gNWky
O`a,
`E{
Y[wi
519\;9(
K_ks
QBSA
@=A`
Gnx9IL
Sdy
WK^MSm
K;p2
m, S
p /W
\P\#
B_Z/
r.9/3).?9/\
_r2\%b
e|9Y
)J75Q
_AZ
O B^
A;>%
*=Qy?
t"0:n
]G|NW
X$V_
yZ,W
Jd{&
%6VNXZ8ahb
t8 l(_o
JI* $
UC\\\
pJOq
W_}e
\RLT[
S"nOo
H#Yv
*!'*
N<o_g+
E@3
,iOM
C nq
pd8$
VW$Z
qZ
Tz]{
km=
232%13)/
v W.
KK+X^\
,XV9d
VH\a\V\H\
UE^tI
A:/)
.h~o
:Je1C
Pu8F
~OFf
a0y*
i|d'
t5F@m v`
I>U9
UZ3e
88.9//\0,
8<\S
NOByQ>
Zru=
MHCUMHCU
^QMQMPJ/VZ_RMT
!6zH
Vw(`
mgHeZ
. JRW
-CEd2
\%\/\(\9\1\ \5\8\9\
p5E EH
gF}=
/ukLy
]?8{Ne
78>|
_ZQ,]X\
7^cyq
pjd~}
dO'j
$L% R\O
QSsS
DM^3
CH{g
_}[W
Y7i0
>_DfKE-]
WWuuW
h2w#
_F.Rg
^Isf e
U31s
xIz[/O\N
`\\\\L\
XW!^WcY$
_O\xj
f N((
^!ZXJ
T9)@
U]U[
K\@bZ
!J 6
,_c\
Jc]*
MGc_
`P*p.[1
?sE]
Zd{^
/1U@>E>
G[v
[ ]Z[
.EXD
KWK^
DAih&
k+Gh^d
k#PO
D%]n\c\
wje
?{(D)
eVHC
CSe Y
=mbp
PC`@5
G cuG
}w*IS
YqY^/
"H'6
[+hD_\yD[
HMt[PbZPJmIZjOYTNXWx_Zz[
ZEl[
45Jm#NJ3B
Ei\[
Y=C'
[ [?
VCzx8
_6=5
N"sL
vjxTS
KgwB._'
DUX\\N
4?cH
EWdT
_Gqa
GiH)
A)ET5
Ldd
@F` x
*{y^W
I%4!C
VRWUNUE)
nWB^<p
*|N.
T9DM{~~
'XW}S
SK^/
{O2$
KR4F}
CCX+
^[|{
(6^'0
FYP-
v[iD
:G/#
KO N
3X h
V\]\
_u{ E
^WP_
t}Ql
^n(
DQE1E
qJRW
AEeHeD
~T*8
kbk'
h__J%^;
3=8\
UN[ZIN
~Gi6
R4g*
RZOzVZMO
::iij
Du X
s@W
CnD4J|5
QD}X&
gAMA
E|Z=
zNlX
HoN<
kJ z
1F; \iE
0$HU>
$yX0
(]z<O
_W=RWBR
U.(FXW
-NOCTWL[
mr2A
=?4529\
yW5^
6|N`
,#Cb
Z]ki
\\\\L\n1mXc\
^ d ]]
h^)Lk]]
XCFS
V.hc
T#6Cd
<(Bn
!egbX7r
|/Gj
ncH@
skN|
wFB
"z[[
<Q95
UFPk
HWI_
B[)jM
`hnHPe~
d*>:
D ]%m
9XfD
S4b0y
1N5$
6R5,
];[Z[
ZL|P2
MJCLsT|:
^\ W
Pa*- !
]=4Ir
s*h3
]X,Z
aV<:b
Ya]M
io :
MLZ1
:1fP
OC DH|M9
6RXc\
|EuV4=d
MIJMI
*133c*3
{pPR
aZQZ
cW1;y
P%PoV
09192(
Mi]}^8
MWG8MWCG><OVMF|
zcG
m\uM^5
#T]?C
S7xz
K'`>
hqmm
_xW.Z
(K1+n
C/ .!_
i?ijmeoh9lde
Vu'l
h|;7
\\]\
=19\;9(
V~~Y L\
9.*5
:P):
lZB;)7B
PW$HW
|usS
TWiW
[T6?R>
ZKnR
SPZ4W9FW"Y
0m<Q
]^FLN\3
sW.[WTY
T /,
!sM}
_[^ V
t,gMDs
8[bp
f9vf&
AUL y
YWk6
> '.
\\]\\\\\\\\\\\\\\\\\c\\\\\\\X\\\]\\\\\\\\\\\\\\\
[2(U
OWLIW`Z
1[vpn
Jr7p
>0!k
e=Y6o
ZPw|Z[
>y*p
}8<i
TLRLRTLTLZ][
3.1\
W)VW
[WBYW
J>gb
RWr[
Foh^^^C`6
uMt+
6z ;
'&>a
rPUH.
ZFZ}
PjeF
\\\\\\\\\\\\\\\\\\\\
h\%W
j<N
ceEi
_V/1TVOWMWK3[t\]]
`wtP[!
D CW
lUjq~
W9xW
G1d{
SijU
VK[`
8=~A
}dN_M
]\\'X\\>X\\
m} u 0
h{'1
`r'Ld}
_WmRW
!0Do0Z
LW/Q
J9 n9VXV9
uR[L
2#*&
YZOnMn_H
<N,}
ZL@T
b[ft
$@`^6c
EYr
O$-o,`
\iZNT
rTo2
S &ru
!zuka
Jv[v
llUS
[z5c
YL%0
u9ov
CLU.
QX@@e
P}Y\\
9=:24V1
7;{Z
9W"7
+ ;~
ae OB
4){KE
P'u e
kS)
RLcY
cGf;
^mjW
(!Vi
xDam
}eip
.et'
uZCu|
U^7M]
hK(Z
]|Y\
^\XZX
2EIF
MQA8MQCE><OPMVCW8MVCI><OQMF|
&,IKHJ
BUi#
w-%7
[*q_
*C#d
u8m^o>[
dqb{
^GlY\
M[yF
KFNS
(f^/
"> b
nYE_.
CWPu
]<dGM
-[f9`p
{>ANi
]^VP
YW_XZ
(.)?().9\
_W)Y
H]Wu
]^VX
;~~A
7Pui=
\/u\ e]=
_9%]W
<&<[
1YW4_[[^
d\=G
]\\\\\\\M]\\\\\\\W^\^\^\^\|FJ\\C
?`x@{pHKq@
VW{RWoV
ZENY3
)w(-x$
wFz1
fV?8'
^ ]^
7q]3
j4
Gl[
\x{6
EUn) Rr
M"iz_M
N )
|W
ZW"JWfEZ
XXtl
9Z#1
FZe[
y>7M\rO9
8;g2
VsT@W
E i/BI
l"qS{J
iM5{\ [y
^VQ.
pNjE]W
REcZ
xG[9
RTrGNG
TUY|]^O\XV]N`XV]N
YAie3
VSM~
2ox?
|52|
1j#C
R3!t
sgS"0.
BYRuW\
QWHBWJ|
a| s"
XWWF^WNL
={kZ}.d
Ox+;
Bcd0
K[xwxY23
8= @
y/N^
ry/?
mAGe
)u#>
9<<t
[T\4^?[T\,^
DOjEj
2>yh
Pk x
?B\wWtm
Y y]
>Hoc$
%wI:
IW|s
U3s!
6gs,u"g2$
HWx_!
:u^,
s\[^`S
#ZWLPW
R_mV
F!"$
\hJl
2rT|j
mT"%
%?^
.JZN
S(CJ\
/OCD|
GGl os3%EQ
K_^!
qZk2
(ZC[HQ_TATR]
}TInD
;f G
Pyd2E
#GUID
_upl
pg'Fw
,)S+
YFSl
kN [K
2J058
y%<:
ltX"
mZr*
^b\fQx
2*379b>
Y \\\\\_\
s`m:
3* ]t
^N-8R8R8B\^B\Yi^B\[x
?S1z
a:u,
[v`kl
<_c\|
BT^'
ke!B
HL[+8
Wn^W^~W
.;/\
P8KS
2'~^
49>YJ
[J3F\\VC`
?oSu
1Wo$
WdB,P^D
Qt$V^O
]Wv_O
\8]^]\\
H^-fGD
..N(.)@Gw;
Q.P.7
`K[B
u[Oy^
jW?
_UXDD
OB^l
43"+T
SFC+
8wd9
w&jPw
#fO$Q{*
mAm J
|?f4
C>PKw
i^1JW
!?.^ )
3t >
;=-Xs_
3d?:B
YWS|W
'b o!\
d?Z]
,j0bP
3)2(\
0oT
lIq0
3[c}K
bJS?R
B8YW
*L8r
biKRX
*=50=>09b(.)9`s
oK
-Mo%'
/3|`
E,'-
^_35
YPN^
|8e]W
c :
\\}] \
= G1
T*%!
\.\5\;\5\2\=\0\
ekHZ
\#jV\]\0,\\\\
Q\UK
\\\L\K
fWRi
.!j^
\\_\C
D[o$
\RCBS
!mZ1P>
ecyfs
9JRrN
yAh,
@ZpWdD
HR[F2
K>k`-
G ]R
@VUB@VZ}[WG
xd[
u%OS
uDFP(
s|yr
^S`_OsE!
_0eb
$)@Bnh8
\2\0\%\
VDD[#u
%do\F
^^1]UL
ds CJ.
2)1\*=0)9
|^c\
Ohou
End)b t
WrW$NZ
c`0\
Gg zwB@
\3\2\9\
,,05?=(532\;9(
T&vj)st
l?SkU w
\\_\;
@:~R
GWO2
H]z4
^W^[
o,bIx[J
a~K'&
BS>Z2
M#Vw
G9qe
\\_\!
0wP_>
X*9S/_
9(438\
LDTTU
[w\R\\Nw\R\|Nw\R\
YCdz
)3y?i&
XWoTO
a {_
lO-X+>
_G=$
(sxx
u^xQf
]^$,
zplZ
< &NEc
~jLQ
:;UX
Rha{\,M[VYS
C##]lt
!0b0
K{Hq
S8<n
WnL
W/^
D[|{D
dm|^^
R7%h
MHCRMHCR
A ^_
x>}V
QGS#
UMl
!'0 Y
SX(`
6TXc\p
x7^y]
QTTXZM
mmHrq"S
'}Jw
'B![
\S0e
*?43/(\
DlwY
[W,g
vWsZ
|~6
JQ 9
JAF
P,.K
$v.@
@\U!
o#+PM
kZM8V[
g;&
E-Z_
XULWLML;
sLy!
qyDE^
o{V4
O+[c
r`t7
O|Fe
`_IX
^ =uy
(Ir"
-y*CWj
yW[Y
X2{*
?TNLdC
!`O0k"
rS8)
S f^[
TCw
W[f4
rFm(g5Fq
B`_\
R'qb
YSyw
'It3&IR
I]fNP
k7}}
7IAAD
hN6P
efJp
K@?:
&P^+%r
r Anl'
=BIr
IDAT0
3S#Bl
9RVD
2n!&
S$0n3rE
c,n'
ag W
WIut
7|Xc\4
==do
R$ /#G@
|W6O4
FMu0
]QSK
y}t(
JM@
]{ 9
kwAj}^R
"KOK
P>FY
OU n
@"~R
gc<`47
B`_#
\\\\L\??
nQU,
YW-I
Bw.X
~eRD
J G
@'ow
{cdn}
5*ML
YWJ[0
)0(5,09
er4o-
IDATx
@RXNTKRX
J]];
^E\\\\\
^!VU"
W2LW_DWM^
9qWyY
pV=\z
cF%+q
VPZTz
MW,uW
wd_B<`_ RT\
D~x
Get0
G\[XW
*P+ W
#|y
ez{hW*
AUFV
. _%
_Z\}
QvBYr,8
syFKU
=19\/9(
bax[QfR
XWLX
Wyig
mUP+.\
DRDSh
qTDGR+6^
mm-mM
ih(MC
bb5e
90v ?~
hdESS
?(5*9 .3?9//3.
MWbX
MWbY
e{*+ eGi
QTJsM=
A}dW
$z.r~
+QSiH_Iq\O
.j^}*
67'
@@8W
ESR2
od~,
>d^<JGl
Xb_
ZwHjW*vQy\{nZ
LSV2
cKI:
~vH4
E[Hm
Ppl6
XS(Yv
ox/@
OQNQ
[Gi;
s`.K
OPMF|
kO6vO'
=2=;9192(\
} `n
^RO2h
3-x3Q
E^x.
>#~ t
\\_\
t{!-e
7"
qIQL
WEYW
T.'KkT
dT^N_
qr`H
[WIs
Wp\a\V\p\
_WIVW"EW
q8Ye
;s7rQgA@A
W<QWhQW#E;SiY\u$W
MW%V9LW
\-\\\L
W,zw
Pd^\_
NA_INW
wWvQ
]`.`1
\\u\p\
TZ+ l
WK:<JnW
=5(D
"%9)
\^wK
]T\ ^
|fS`
Z)@_
_vAL
YMJE
V$ Q\
RWWVW
\+R2v
D%]n\]\
$<Cnq
,!A*
W ~R![\W
H Gvl
H^t[CaZW
ZHWVS
WW\d
bJ9*+m
X[ uVDPC>DQ ]CR|
eRt7
H~DD
XR2W
d0Ci
WW\P
34Xc\X
z>MVW
JODJOE|
6(h6_/`
7){+j7
cr$O
(6
h|Vu
ZJZ$
pX|W
WD]\
J/).
@[1r
5/=003+
pmjMs/
IUT4
+gXv
&hzN~
Vtpo^
gg<Jh
w[OI
T>|=
ZWSV
LW=G
52=.%
LAYZ
Thread
^W.t
RMYZO
Yjci
L%@T/U1o
ukc.
]%dZR
1![I;
tEY>NH%
3Nul
LW`RW
S|T%b
cT`>
_|J[U
gR'sM
{v G
\2\?\9\f
S]gR
(eVK
-V]QZhQQ1_QQ
kSzq
% $<
`[v o
e"N*
kVJE*
^LPpL
r^9nN>8IR
( q#
Yh,Tw
cePS
[Q_?
CSz2
Q, X
r?\\
SRgG
LWz_
^RRO[RDDAYN5q^A\
WjE~6__B
w-IN
$_ U
?n]fd
\SyH]
RAYM
9XP^
qCY=
;ARZT
HD~|
UXZN
fUGP_
nERs
l~}
u,* Kl:^
eZ_JU
;6d[{=
)U .
]ZD<V_=
VWhV
YY^TY^R^ZD^ZR
f]lZG iCr W
&oD+.
3A
}9|&
HS &
DQR:E
mB]T
o!]h
VSQJ[3
U\XTNmAYTTY\]]NmZ\]]N
\\}] \x]_]\\;
?NA1y@
@]Yf
=$SU
fna"
%9Lq
[ L
`uI|a
809bQV||||`s
ZW&C
4U,=nw
sm1b
JgR$
XZ2C.xZ
zZN=
xOtd
8^L[
a Mwry
PJ"C(
Q]^c
OiF+u%
K?d@?
UeXZom_
)50(
UXZ*
V$bQ
g/\%T
)ZMd
\$_G
3W&O
8=WJ2
/j7p
[SMS
Q_!*zRZ
WNq{X
{d?Wwm
*bBjI
MSqT|
^5v$US
]4g*
)XxE.'
85 X
S{~!
onr80
_b\]LL\
{5!G
C3% (
q]\iD[Pz
,X&;[
9zg/sw
\8\*\=\2\?\9\8\
k;vtn
[\^N
TSPu
U]|&
" e;6R
_p!+
WWAZ
D=px@
o\&L
cmE8X
jW*z)|[N{FZ
p}CB%
)0=.
l*CKhO
XV]N XV]N
zIrGm~j9
[JVT
JCe!}
WbcA
2IoX
XWsE
#-!
[I|J
n'
0=,5L
)2b:=0/9`s =79
a(=IJ
_g UN DL
zYS@WI
8<h('
WfgK
ZQQ"u
(ZU>
qCq
Scao
1cxm
SPH
T0Wz
5\]V
Rj%x
p d
31,.9//532
yXtSHo
>VKN^[
1^W
z)`
Qb;g
v[-|
\`j;p
4)&z
*#?
&} +
ZJ]x
*ZNs
$*.zP|
vRS,
*OZD
=bDT
:*_8
PG3&
fMTBM
md=\L
W]vUu:_
amCP
`Y92Jf
)f$)
*=/(
"]{i
J_N_
G1|
_@..
o) x
TRPO
][ZIND]NPN^TN^
E$ \S
ZCRS
] %]
7cmr
TW]^W
kACf
7#T@
\F9Bp;)Bp_}\]
JOAH
.1#)
]Z!D
@Z/=LZ
!N}zf
2( (.\3,
@$EY,
H&Vf
FwgMF
&N&Uif]
V$I$L
e,T?
_D> 7
D Lc
U6u/E
.~ k
mP#2v
b:&l
R)UTFZJ
2*379\.9/)0(\+=5(:3.89>);9*92(\0,
HSR&
a&+ keE
e7$~
}lS4l
l2]y
v[Or[
QS-,
wLkX
Pdrd
-_mJY/
AKe-:
]@W'
'4].
[MKd9
~_[}~N_J3
XZf> ^i
b]\a
(.52;\
'c @
y4k}
"2/s}
Z^VQ
sGMk
8 ToJ
&Y7BYKW
HOH_V]J[9J!YT
OR\YThOu\
X`b>
u@DJ3AD3
X]C5m!0
O H<
}_*-
^_q|Xg
om^VEC
_ZesqZ1|
To}^Z[i\
003?=(532
tVmS
7Vz|
.Pz
:iWa
nW}n
=/(\/9(
UWKE
BM1 2
g19w
hU0tAHJeZR4LDPwO89OVwE
4fsO
n=1g
ogQ(J
@SUc
1X Y
ELO=
c^]\
S5z6
=U%9g
"TWq
wt%!
AOVNV"SSU
{TK!Y
W#xNH
IvzL
YlCf
WL*r
YQHWTU
PXW|P
.2b@W
.D8{
\\\\\_\
T`_2
e[im^
:THx
*\Y\XKEF
OoGg&7m
}z3c
Do[N^
R[\^]N
%p+|
2Sh^
XqCAt
YZ8WaLW
)^=,=90
yrW2UW
((.5>)(9\
9<X4
|q8^Z/
U3EU
M[X/
pS]_\
_m)^
?A
J^e]
#O;h
V -^
\d,F)
ZT[`qVR_JP^WN}WC
4=.\
Q*`YM
Wy#[^
`8h8O
Y\^^RR_\\T[\]N
bNy1
aMZ3
L-Hu
>rlQ
>o$_
>IZ:
d^~8
2so}m
_] VXXY:
pEWQZWRW 7Z
bT>O
Eu?b
N@JC
KyTM
_ZGW
,Y"
SP-SP SP
yqd+
YP[X|
,@7[
p+!]
W+Ii"(
k|7k
ACs+
b4a*O
=Y:a
Y?|$3
H)>|
:@,J
V zY
m$oC
?w}l
O*0o
ZWlhW
3 5283+\/9(
,Pom
58,^
t%}Ig
M+Evn
(=.(), =(4\
zia>IQ
309\
:aiio
9/3).?9/r
U9)h,
|tV.
~p5Y
Fim=eu
(91/\
^(.)^$
VTaZ
].=Y.
BWxX
HyFQ\
].Dm\
RwZO
] M_&
5ld0
JIp]
t 3Y
wsSVJe
:SNX
^ZoZgNr
W(Nz(
h$VP
J\Wd
0uIN5V
Ewz4Z
&js h
on*P
\(\.\5\2\;\
ZB?=S7vJ
(.52;
,X`k1
BCx&e
D][^}}\
_P`=
mWY=MNZO
\\\\L\1<
??}'Xx
p Ow
E_.j
z#Ls
%]ZWW G
4fWS
R\DS
VMU\IB
\8Xl
@\D
J|h*
#=3o
o;Ev
6ADK
^c\(
Q]SK
k|{x_J
R#U@o
^c\0
JW5YW JOMHWYQ
CMB:
/s8<>
::L>E
mSIL
DGU
6E^
^c\<
I1w\t(U
g:$N
W Ccz
R#v^-
wy-G
\\\\L\f;
%29uSMEF3HsoEGCMhWHBL7tYv8x1HNot5eMHui
eIEK#
6d j
qRfZ
9?(98
@{ +
F L
"7e=
JiW.
\.V^k]
UP[ZN
HU[t
_[^tM^VOT
;w_d
\yLzL{Lw[
@cy!z
^c\l
~d%w
^ %k@O
$jHK_
389\
zuZPD
vpgGGw
^c\@
@\@^
Z_Y]
;^Tg
T\]AN
LO@^x
WgZ\
n6r{
mMRN
yd7w
[c~_+l^\#D_\
}%%
_/E]W
OoQw
2:3\8+
UUxFHHG
xuF]
[ )ZMvL
o)hd
w0o>
{A>$D
909(9
EO=B[Z
M LM
,*G~|*S:
dZzU
E]\qVl
47OIq
sCKN
j=oW
LhL'
Q2T%
oQ^|
hnmm8Y]
E^5!YZ%
]< =
JTCM
P*c5
X]TY
]L>s
4Iym
`,g1
L9 I
y ^F
&@rh
?3.05>p| 9./532ahrlrlrlp|
=2809\
58892bQV||||`
_WmW
KOG/
^IZO
Y~P_\
fd\N
WW!R
HO AJ
9Lw5c
?3}V
0=;/vk
] =^
~V,;6h#9
,Fu8
* (
N$"8
&b4m
[tz\
WM[d
H][DeW[B
2(9.:=Y
\y @
uD5Z
Q@TT
>i_b
"f.p
Ne0%Q
"F G
XSRI
Za [{M
yT|XTDTLTTR|ZN
@/hG
KgObM
]T|X]
4}vC?
)1ZG
}zLMRWvzZ
g&S+
50>N
PW#R
O|/cu
;^y\\\\\
W~xu%?l\
Y=\\\\\_\
{q{x
0'72T
36=4
\\}[h%M
_[g;J
'R}}%|
nAZMP}w
wpC{DqC)Dr@Hs|
KJ%E
I_[.
&0|-y
\/tC]]\
^W,_
]Iq~D
]a\^T
aSIp
z-r}
y}VG6
DM_ \
.OMOJ3
Q}g=%&
_GE.
$M2&rxSb
m_?4
MZWOS
k,@o I
(|=4`
R@nl.
LZ'W"H
afg{&
=cm[
quD
]%Nc*
fTY^#
MQ/S
w-KO
)<23#
5nB_x
v#6&
`vp-
<Ld`
U$eX
9( =0)9\;9(
I,R
%,9\
N_K6
\\\\L\C)
t]3"B
Umy9j
w5W~_)
$^?'
Q=+KOZ
yE~)A
nZ[z(
Gy|2
M||\
lp@0
_WSMUZF>[
+-BW
Q#Fjl
VZ(5>505(
5/(<m\
L*gO
_Z}Q
E $S
HpS
{sx[
!|]1
%,9b
..3.\8+
[HVj
CWTT
_OTrXQ
Q#Q'
IUY^n
9*m
[hA[
Ne9rg
>Mx$
TQ^\IUE
}|Mu1u
c. \)p
|WjU
v_'.
]RGEZ:
3G{,
A?&}
I M^J6hX
\ .3(9?(532\
!hyo
Z<lWpjS
x\M]
\MVx
#CmQ
h) @
RAZ~=
NBU0
ZW$~
Nyp'
U =5WZQ
T!YpQU
[X`B6t
9>);
"9n9
2+^>
o8qee=?Z
WyPwP
_A@NQPN
k$ih"
i'PB
Hq\W4{
e5U;7
^,_'%t
`!S:
sso8
}}z{
>PG;
-T5u
hhs[
7"rDO
4_WL[W
\\u\:\
lsI[D
;o$$
>U%Ua
Jrz_
-Pd|;
OsTjZ.
;t\]N
YW_M
Qw4G
$@MWL
[\\[
_kLW?O
=/'}
, r9
hipTc,
$s[o
k|xyO
P1w'>
i[N
ts$@
Zq_Jw]K
urIYxeAKw5f2Cynh2YayoWbcINQCMOC
OW{OW
N ][
%ZW}Y"
.vS?^
w X's
Wa)E
o'!T
RZiQ
C_db
&3fa6q2&
#X-e
SG`+P
PEH^
VuWBX
.|W[k
TU~S*
R@cb
[~{JPW
[3]
#R#@
[@uuV[
3GQ4m8%S
V7e]
;x .}
'_g4
Qbl$
S$QV
w,&s
Y 8<h8
blA}N
Fz:0
s{#4C?'
J;tFG
q.aH
QYWhq
~<9o!
P ,? .5S
bW\t[
)BN|L
VRRu
3ks>
Yc\\\\\_\
L=u$
4Fl<
p` *9
xn\N
|4j
<a F
-]mSD_
do)0WG_O
mXHQ
n,ej
RU6MZ
FRMxy^
u@T|^^LUN
_.`]"p
{z;8q
]^^TT
]T^V~
XW>[d%]
Q!KMS%e[&
+z\7M\
45/|,.3;.=1|?=223(|>9|.)2\\^
#1q#
pmW1e
;^WXUW
Km{L
8 0?
xpB@
#18D,
uhClDi|
9,0=?9
ZXYH([4
Dk X
wm{|
YuQl
9&Eq.
Oze
7t]_|[lp\
{P\CM
56MX'W[8@qYX
9kohqhd>lq>>XX\
HviD7
)Ky
7V/e
_VMT
:bg[O
SQ%m
I4]K
`K:SN<K
=;pA
IDAT
VWdMW
OXMF|
B~g"
% p\
+%JUp-/
\\}] \d]_]\\
!k:6
DW.HWKWW
'nkO
5./(
="&
q}m*
_){,
?|$)1
AV\]\d
ros3
k(NeN
uCODK
4900
>69?(\
K'"3q%
\J^\<
GXz}
k#.6
d^,_
6{H
3^Ck
I y,
=,df
;zp
@cT
Q\WK
Kgqo
iGP#
4dWY_
`c '==
[gN_WcN_W.
/'['
mUXC
kbV7
5TW,^W
FZ t
pm]B
a\\\\
v6<Bky!
`${ VJ
;w L
9( .3?9//9/\;9(
@W`P
+c%8Xh
UXA_i
_\[}.M^W^.$
MjP
!^&/x~
,/Xc\@
1^.x
UtW
1'%=5M
gm-uv
G3!L
byb
UMeN
NCAPK
3iTo
Wo i
z0~P
YJZWj
'-<
}B}g
2=\W
yw5&
D\'q\
Hs]W
lNc|
|yuW
=19\5/+3+jh,.3?9//\,.3?9//
VWaZWCWW
\\]OIMF|
sYfc
33(\
..=%\
"-k g
wkz+
Z"\\\\\_\
d%$I
[sX{
J"32
F{ 0]W
Kkfqi
|F)T;
_> ,
NTUb
bu-%
` 0_
6/'s
:lg@
)\dI
xjZSNSt
VQWwWfW
]/VJ~O
^^UK
_KZ
VMW#
C?2|$xe
vHn-Y
QNQT\]N
-<G6
gldZ
#0E
0ar<
I ][
e]y\o
)SUL
_WFP
T/mt@
t!G
ZNpSw
$ FR
" ;C
d~KD:
u16
ZJ`R
XWYwZ
FB@N=At
A21R
1VV}
]2UZ,
f<Z)Y
*{5IR
B3hu
Q]PFa
e-fn+
ZiMS
M1ub
RDE
X\VMQ s
6 <z
L)CW
6;!p
d&iv
zQ"V
sD^\
Lyk^
]=2M]dS
B;';|
^k UQsWT; UG U}[SpX
E hm_
\]\(a\\\\L\
003?=(532 .3(9?(\
:?/
D[e
zSSY
d@,}
j=)
l1[g
RdiAa
,N`g~
R C
t.#-
'@WU
[T\(^R\T\$^
U6-_-
$)Ij
7z.kVog
;}DMM YO~M~C
J3=(S
7 7'1e
Y|]]NaZ|^]AYTY|\N
F "d
AHDD^R
=}|l
_V^[
(/oB
apqO
psZXQ
\ 3.(=>09
D^R*
BJ\
]ky}
ZRC@ vRW@1JRp@
^Grt i
7r/A
Rnc#
{*({R
L1sWm-<
w h
r99t
FEL
N iQOH
O8]^\
7h8+
\-Kc?
6oa"
:uab
sM_Z
@\1FG
(0m!
\'-$
h$a
14>B{O
:9YD
l* gP
sZAY@
###t
VO&O
Clh0a
[WqYnU[.A
4=2?9\
S&R&
NZj:h
V1jI
?*-N
i*Yc
9/30*9
XWGWWRL
+GskJ;
y6 YOuV6AF?
H un
UBo^"
+ )1
]^W\E
r}Pk
yCgyC
\gz
Ei,s
'vYn^@M
ouq&r
lZ_U
_VNiDzNRMRNNR
Wlwn#
n[KZi
]&_JrU
$mp6cs3sN
x8k*
PSPLRP(
W( r.
^w_KO
OYvHb
nW#^
nZ}d
<w/>
i>ej>j9ne9[
@.PYM
|W)^O
cSW
Y-0W
r{MM
-S[U
`:i"^
l[o2
,d>:
g@C3
\2\(\5\
[\^]N
wfO
j*P?z
zh ~
Cto;.
My?_
dI;yu^
^k\\\\
X(@
q9^N
;9Sy3
NDWvY
};9+0
s No
%[8,
v*=j
FjZ^
u@Z|]^N
Y\\W]\\
S]S(
"NnX
ae+jh
5009.\
^O,^29(
:a8)
lOrd
9!l0
RNOm
^V.R<
J#7).
qe&M
k'57B
VUD]I[
pt!
n\S\
cyG
9?).5(%\r?(3.\
C{GFj
909;=(9\3>69?(\19(438\
mN E
tDv
IO ] ^K
uXmX
qNv*C/ $
+);r
N-!Z
_WkX
U-]A
WW/I
TtFW
ZJ (8
nq2o
9]z\
[Gqmv
D7oJ
z.FGi
P?2D
9(9?(
vdORWJdO
mUk j
]]\ 1\\\\
7/X;u
S8_8
:RWvPO"_W
`ge
?E.0
@}Y9-
s~P><ZP
=2F
76'
WLQW AWSnO iZP
pZpCpVZQ6G
J[Kt
$WaJ
|1389rQQVx\\\\\\\
[> _WPK
\\\n\\\L\\\_\\\^\\\]\\\n\\\]\\\U\\\U\\\_\\\[\\\V\\\]\\\Q\\\U\\\^\\\Z\\\]\\\q\\\T\\\~\\\]\\\ yO
9:=)0(
xxh
Wl%][
ju Ib
5(W_
I_W"
TY\m[\I
oe47
Kyzp /O
;uBN+bMXpf
A)yO
=U]tU
y=z7
giiV
/{mX
pTWnP
[ ~O
CW8GWj^W
:0epO
W_SNUSr
FMZp[
o"w93
AWTZW
& `'
`W&z
J\vm
"?C'
*7gL
VfZ\]N
t7G
94nYF
-uEx
!Pk5
=?7A
=D9
=`cx
sGl:@
PZ(W
YYGD
gJ<kD
wO}2
:ZMKr
_YuM
nwW{2
t)v_Z"hW
t#UUh
@WHO
s$={G
@[ez
SMGwF
N[Gk
w tZU
\WT[W
{WKAWCT
\3\.\?\9\
-N_"
{ 4W`
XWiSW
ND_;
\Gox]]\d3\\\\
uFN`
"n-^
2(.% 352(\
1;4)
z~oS
2Wff
3G"x
)w1c
O\$1n
,9?5=0
VZfW
\\\\L\E%
rydf#u
WZRvH
*#.2
=(9bnlmhqmlqni
}~zD
8`eNJ
<(mH
WyJW
(2VVE
^E.0
[]\\
D^ZX]N
3aVu[
EVW[uz
%/(91
`n"
Y~?+s
Z3R
h;RMX\
5/,3/=>
\e_<L
XxD4^
DR_.$Fz
(1 lZ0
7(
bnLw
^R\T\
v8=
]f<\
51)1
JSk0Y
)DkN!h
\KtZ]
>|},
%E=*
g8<|
iM"c
uCAW
XNdW
&xW"NWOO
System.Windows.Forms
K^DVD
Qa(f
^N_S
>bb:
7k<G
U+HZ
*"32
;_l#
?O&U
=/9\
sCzr}T_.
$K4z`
^_t)xZSmXW
U.UZzX<U.g2Xe
Pc
v%/
\5\2\8\9\.\
.=2)0=.5(%\8+ .3?9//3.
5"}vk
]:H1H
UV@Cj;9
t#oLo
SW:N
]#^c_
DvjCt
IEND
"&>a
W7SWVK
]L_K
lWaj
Z[^N
m=>dS
L2tM
U=e]
_t.HS
WEKv,z
FVO:SKXG
`\\\\L\ U$\]\La\\\\L\
UWVLVJVBV
=s)r25N7*AH
x?=$
Da\V\
.3+/9.\
T\ )X(
Yl=H
[ax j
u=}.ijsC
j*}#
All<
MF|T?6
_cdOd
*}p3 I
g<<mqso
Dacnx
SO:0:U
\?[Z_
t E
%<8,&
1dD/\
7]vm
S _s
QUV[ZrZU
/s2c
RCjD=
,d6}XW
_HTE
'X\UDMAD^\yD_\wVZnDY\d
qWy_
\ ]L[
[uu#
Y &P^'
=/( ,8=
[T\0]?[T\,]4[T\(]1[T\$].[U\
!N>~j
wzTH
`Ka=
iX{^
9\_4
^W [
{oPx
cYo>
89}(
u6RT
VY1Q_>
-]wD
` 7Su
=h,.
KeuW
8HF
_N|\@
Vz|^)
kI\6
O 9u
N2m*
O"Y\
8WcV
wi@~@-
1#~<j
_d%^W
:Eey
8Jt&
0H#CU
x&~`
,2\$
\\\RC
\%1pq%
21pJ>
RO/-
/\W4Y+egy
^WJ?*e]%$6
n\\\~
aq3
OG'n
MBCBkBP
ec]#
%yJ
&[$f
U5 |
hdDZB$DW
C= \
_Q%
t "2(
5 Hu
XWTtWgQWOV[
Tea_w
'6ta
,m`}U
bNsK
3:Rl
[HEv
HP2
_O`QOeM
MH@MH@
k31qZ9jhK
MW ~
: .3?9//3./\8+ .3?9//3.
)#GD
"L -N
ce;-%
:@Wnf
I&dO
H0W
<JGG
G ^ZS
}\ZF.Hf
),,.9//
\nNX
zn.9a
=K|]C
i|l/
bRLv
M;l:t
VhyY
tcZC.
mG_S
g[J
2PPM
UWOt
(T@oU
Z=]Z
x w7B
OSMS|
KIwZ|
W1JJ@
^J!}h^
czr#qF
KgwI
^U\^]N
X.y?y
#LcrKoyLCxi5s2FtPble9mmztX6SN33dV9AZ
VJd[
^REp#j
3Q:Js
^ZQV^
uPSdVZ
M@bu9Q&y
HROH
j 6mj
7Gu1\
e6Hf
Kyh
@'BB
{SQ-
System.Security
rX/f
5(09^]^\^]
W[In
^\UD
g)t2
wBl5CD3%
^KdX
y[VIN
]V @
515(b
[WVV
Cvl(
@g7#
UWwUO
H_{5[
9by~U9
W[IV
yZZ[h
PhbJ
K@!g.
@ZU&
K7xt
[x{r'
FJp9)
c)-/B
UWVQW
y4XI
dZ{|e
)PLd
I2PM
w31Q
nj"@w'
QKOufRKUIe2Ec5IPjytfdb
S86i6
"? 5
Jg1^
|W[O[JOZw M[MZ
OW)F
gT@O t
t:Py
#T]<A
:ZO.-`
2:3.1=(532\,
pvl?
TVQU.
+;WE
U$5]WJlW
2O%_
.;)192(/by
2NsNZK3Ow1Rh2vy5R4byh96dL42W5odk
m]QNM"W
[Z\[$QXZ\L%QXZ\
WZqWwB
%Bw<
SMET*
Y J_
.JB`#
.3?9//
u@X|]^RV|_N
YZ\I
V(0^!ZXZ/B[Q
yZx_Nx
3089.\:3089.\
YZ\L
iL+
r$h q{
O!7t
WmD:
'aQH
*\\\\
6I ?
TWVX\"}F
'2?)
Su-=[*
@MY
D5>Ffx
|4v<
B,~ZW
3UZ]Vr
n+Uy
_5 u
kb05Y
d]OlW\
ZmCR
h 7FC
wW<wKVY
TlXN
.I1/*
s Q;Vqw
[V\h
5?/!iCAX/
^ZK%
^u_1
]emq
HZW1E
taCO{
/wV%
k92j"
v9;t
s,r
SL=dS
nDI>
Os]!M
_~%4UuP/
_MC;DN|WO}xOEHH| k
rUXO8x
][XS
W3HWmXh
l_G<#>C:
y3*J
\|]_]\\
X.]]\,
=% Kq
FDPt
YZ\:
qK0TZQC^A)y
7}}
S 0G}M2z:K
5 qd
#\\\\\\Z\O\q\Z\
+O>G
>_y>
VUZ|^]AY^_|\T_|\V[|_TAYTTO[QUAUAUUTTTAUAYTTUUU\^]N
^u_
_1M]
F\JNJ
96m,
/iAK
2/(=2?9/ 305?%b
cM Q@}#?
k7z\{
]]jW
V/eg
,]]W
hr%
;c'o
mx f~
Y0\\\\\_\
ool{
VKRb
T OD^
!z:Fhk
jrqQ
ho'
BC8-&
(=.(), 9./5/(=2?9b>
*(D[V
H:no
1X =l0
eE(
%SX4
1N>$
PMLN
WWHAWFXW/yWzE
q2Od3i>%D
]E{B
\QS[
N'lAG>
Wz(?K
M?md
pgWB
fV_U0
|SV@Pd!Pu
269?(532 =(4\(%,9\
O3^G
9Hj
Xz$.7
}?edm9d=m\=k9mo:\
1v-^
X?w*k
#Blob
d0q`p1
*RQZ
RWUOVR*1
;=U8
DWXXk
MWhF
u#}S/
QNWrUW
_W Z,y_
MTR^
ADNQZ\^@@NQY\]N!RX\\N!^ZDY|^]@DX|]^TV|_N
$9?)(532
kt[M
[0x|
1ugzC
arwtg
E^b<
YCRT
ZWkSo
@||<W
V:PYD
BNJ:r
jelk
V[SU
Y_WR[:
53&R~^
Nvv8ZX
*bC7
SWJ%
Kst
WWFw
'- z
n\D\\\\\
b e5&b
]%VZ#
AWf-E!IT'
xJZ_nJz_EXgJ
R"2^
4SG_W
[}ut
pP-p
zl Q
X^Y!
h` q
DM\:
^?oz
\Z\TX
bq3&
:&}F
d4_ k
PH\
\m yA
eXuO]f
De3fk;
z Kx
]\x \9\.\/\5\/\(\9\2\?\9\
mC%(
dc>s
KMK_H
&q?;
2H&(,K
}X$_
+uXW@T
[SF
d6Hs
uU
4N24
VWLO
HWAo
NEY
K"XHeL&
ka=]H6
FRSNW
t*s#
oVZ
V ~^k
t;1I
T)J[VN
D_\?D[
S)v^
TVwT
JM~\
qp}B&
&p"g
JRbD
4%5H
<= 59
\<EV\]\| \\\\
6L8SNX
$ 2y/
V@b) y4c<
TK39_
P-uN
q&8C
X K3
!@@RN
*`z[F
C:)b
_GA^
352\
wInA
^\ (.
M3Vx
L$%.
C? I
M3Vr
Z*[cj%i
Auf8!
mNw;s
lL6bs
GrH<
43$\ =
`0D
@z==
M[b.a`}
r(9$(\\\
.3$s
pp<W;
352;
Cblh
K IBb
L+0?-P?
`V`5MX
QEyf
"G)2(51
\iWJ]
MhimN
_{yY
/W~_G
~FZ8hM
tdA3O
2J(KT
atM
[ 5/5
yzVT
Q[nz
BYI(]BbK
\+Gj
bs_rq
1jwX
xIN&J
VWbY
s_[S
qaQ4$
DialogResult
W_nu
}H+U
xO[V
*RvK
LWNFWPE
@^O;h
fWG^
|y{+
i|S},
/eSiX
FDRK|P
$'7,eZ
ASf7j
GO%h
" 6x
#fmhL
K$5]
jVXS+
dY;]uL
3UgYO
<\\\\
SGb5m4
Dm]C
)U:k
~_9}X
OYMF|h
\A[]ZW
X_\\\X^\\\XY\\\XX\\\XZ\\\XT\\\XU\\\X[\\\_ZM,X
0B8"
51Zf
;wc8g
!C`~k
Z1ZR
gQ*@o
"#Sj
HzJ^
'GvogH
Itw%F
UOu(
|8 Z
$L
A;NJ
D]\#
S'R9k2
\8]V]L\
4XGM
x|6W
<F4V
;U9D
zRt8
De]K
hk#K
H""K
[SM_
Ukp>(
zWaFWS
EKJ:
TR"U^[y
>ZyN
?yS~?
@iv:iQ
Qwk'
PVTKt
<q>I
TJjC
4Wj<WLZW~P[
~8p 8
$R+%aI
vcV cU
2-0/
~]\ +^\
5@o0]
*']k
en4Y^W
}z?U!
_UNUt
QCV.
b0yO
vt5~
MRv7n$
YXYB[L
V[~d
TGlR
:VKe
3;32
GIt$E
^i^^
dR[t
wVsn
g.=
^Y[ a
|hp4
Z_6]]Z
809bQV||||` =79
,(,Z\R.QXZ\V(uYZ\
:, ?I
SW?^m,W
]oDz\
$-0&t
;"FZ*=
P5e]
@^SP/
ljnA
zJ2u
_OXwrR~
u[9t
$9<]?sX
." ~
Sgy~
:|q|J
*K@o
\Q]L\
\R iyM
.(a(
/ Ds
kd?y"
7%_>S
[Zi*S
9O%IW]JX$ s
sU`~[
H]O _UUUQNTDLVZTQ\[TU[
_J\(`
9s E
,7AB
w[\\
G'I}u
909;=(9m\`be
o^>E
;b1I
oWw~iVl
Yc\p
L% p
ysd/
\\\\L\A9
LCLg$
%ax?
F(ia7d
}Z,=U
HER25i
]]Z
Yc\D
{G;3
^RMxM[PRA
niEv
~VRWZQ
DOQJORMF|
Ci I.n\X
]Oi}
<n2a2_
JL:'K@
\@kv)8*^
%.j<
/)Q@W
]^es
Yc\8
TWi^)JG
[.HI
_>~R
^~*o
Ozxk<Zx
9((52;\
Yc\4
wYc\
7n I
3089.\
./ghQd
dq6lWJ
\h^?[T\d^
Yc\
>Yl!
\\\p^\\a]\\)Y\\XZ\\=\\\
:36X _
a,0a
X.X ^
_j]Z
?wuz
a*:$
icGq
zmZ_r
6m4
WgC#
_R\Z
:k0P[
jr@ =
MHDMHD
C]v,
\ \o\\\B
08 .3(9?(\2(,.3(9?(*5.()=01913.%\
;7G}
5h(\
" ]V
%4Rm.
Hao$
89q,
dC?'
7`(\
tuJ&
=$51)1
.^W Y
|KB
f7[2
xg D
/7>p
3FQ5u
w_c\0
s%f:
mm)
"]KHYW
\2\=\>\0\9\8\
UJOn
yDTAYULUN
+6a:}!f
'@U>s
MWMD
M>?J_
w}e;Ih
y[|_^DTAYQ|YN
_ XAJ
-PW.
QnR$@
HEoM&F[
]D\:
F~@
a*ZKIK3)H
(7SYF
{=1Wv@
7I]r?-Y
RZ\]]N
mhfnkfhhrdenelnk`s
XWUt
? !a
c T-
wk =,
UWAY
++}Xd`]~
_[=lT[5_
_2>b
TL3^\
;K"<
M^+dW
KWQ^
Ymf9T"
A]h#yo[
\/\/\9\1\>\0\%\|\ \9\.\/\5\3\2\\\l\r\l\r\l\r\l\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
^YEIz&%
]1v[
QvQA@
U%et4
<ZP\
7\2o
i-k_kby
ty(?Hy
VrVS
D_A
W>b_Js|.
Bi j
RW#RW
G[\\
#il&
RZFQq
FKx1W
]\\i^\\
sW>^]Z
SZVW
|ojSM(
j^ oI
TSCX
^\[l
#7,R
y8i
\]\da\\\\L\
mKaHK
NRg.p
d~|'
n{><
6GmF
]#WHX]^
VH!~
_iBZ
e9Yh
B8IBbT
F^^&
?e^Q2
=2=;91
lWQPWvR
LNAO\
{ qv
WrapNonExceptionThrows
[I>N
4.3+/]_[]US[[RNQNINAANQA@U_V]RY[^NAU
txQwp
nnnV
#YWJRW=N
's!kS
JWCM
*),-
5qRR
#I"5O
]\\^
B>o_C
PS CZDT^
8o|
'7rj
88A}M
[ UXZ
<}d?m:l
<}zPH<1
JWCP
2:3.1=(532\
XY+S
$[\<lT\;VP
U$o\
?TZB
nd)Y%
O`}#3S[
zThkQ1SK
VZ"W^_pO.
]:3g9j
MWOVMPOWMQOWMOOQMF|
_W_JmT
_O\ mzO
I$+2
WmR\]U\
'*"/
5$98\
"IX
wWOTW4s
_MQZ[
bqw
Sgpx
38)09\
=n2+
$GQlT
>lx -
\:D&
@Mti|
5orx&y
^MeF'
.s<tX
h9[ao889{ k
qM83
YWxS
70KhoJ
N*h/
~PJQdW
u`4 nA
@W1F
Wc^W?iW
Z"P;r
GMINF
/n_w
poSB
MK&N
T'VK1
Uw 4\:J
}yXz
TQF3
]V WI
ZWnXW
l;!(
Z67d
:1rUd<
E<Z2
=2831\
UFB~_Kr^Z}
Ma<?]
z )]
Y^\:K$h
XotV
ZGjHF
vIio
/qR"
ti f+
X=[Uo=,
w 6t
|c>Zj
Z@7O
SWjV/Y.*
n'dr
KF]\
QK@_
CqX0
cx2i
% QH
^N#u
dD[ uD
oOZx0!
2Edb
TJm[T
Z^W>Q
]\]\\\\\L\\\*nrlrilknk\\\\\\\\U\
b>_8
\|]W]L\
}Y S<^
ION]4D
CWGsW
Mec
WA}W
L?QZ$tR
DO1p[;
&R2g0
kN#i
d!+(
8\;9(
N" [
S#&^I{z1]Y
$%<"
S1[\
[MoV
P$GA@
LeE2
CP^OI^MJG
\C*U
]wIX1
P&vT
)ZzP
X"v\.@
Z!]W
P0WPW
?M\
#ULZ9
+|?
RJOX
IW ZWfX
[dt6
v\Z\
-G_"
v\ZZ
kJPB
Fm1`
?{KM
:%Gs
9\L4`g
.1I@=
qIi}
2oKT
[,Y^
A~\4Y
$'J;
/{H&
X\]RR[\^ARRA_Z\]NIN
^ U]W
xI!"
W3WnU3WnU3WnU3WnU3CUKzU3St^3
LyU`
AY*K
vj\m
A=85z
UW [W
%/px
MY:RZ[6f
;$qm`
WROI_
qU oZ
K"SGZ
OFi
KOYE
pK*FZ
:%Z89$|
&_,;
$2H
Gm^`
F1vp_
vpQU
T\\\\\X\
G0 ,
S+Sf
. KO
)f^
W0^OJ[
rm~0
hFZ.@$
4>[c
R%K[<
Do^D
UeZ_ ^ i
cWZFW_^WKZ
EUF:
]Cqj3
892(5:59.\
?a:>2
qi 9g
95cTW
03?7
2VeX
!K-
4\tj
I}r.eq
GQP:
fEEQ
Te*&
JFHt[P
`vtC
rJ8I
PW)[
Zt\JbR_W&^
v\|;
{KxV
X72;
.9a29)(.=0p| )>05?
,XCxd
ZU"Il
lBPX
[q>q
.|9t6
yW Y
m ?8
S, t
=|Et
Z /9.2=
3+203=89.
\=,,
r16#
6a$
-5eh
)mH.
*Cl.2
Ew7`M
0Vi5
WGKb
(F^"c^
Og^ _
d]ZZ
gt-o
cd\9
wEL
r_O~\)?
T3MSZ\
9'!_
cOWlZWpp
X 1Q_
,?Kr
`qJv
;(u8L
PWoTW
kWuVJE
N:JH
Kv@0
WU^
|]S(R
q}.@
GFJ:
y uo+
|c1u
*~W`[
N ?(
fr.=
yWb
Pm_)
wh?7
\\<Q
&K#K
rJ@~i
wBX=
%3|)
gjg2F&
Mc4n
o)Q)
^p]\\
< r[
Tw 4
KXMt\
|wcv
[Ob!
yo\J\\^\\\5\\\l\\\
j 3e
WwOR
a-Z4
O>1~
(Ng/
: 66
V] VC
=yq~
(,jj
+7?}
TUR[YIN
U]+S
w/6O
24!$
31,.9//98\/5&9
5X"XV\
bs(p
Fp5yp
GTP4~N
Z7t8
yZ$IYeV
ST]C
il\|Y\WfB
14fHo!C
7~OKz
m6^Bg
\\\\
NtPU
^!@WZ
MWRV
F s;
!_Yc\@
}4Gy
TFtR
J.KL
ixi
^W\LW
A~~~
5J`?e8/
bsMFP
\=\2\8\>\3\$\5\9\X\\\B
'7gv
^-9]+q]Z
<WW,
+\\\\
ZCUC$DVC
VX!LTr
RO[g
qv:O
"1pe
PDDt
`O%oy
EQU/x
IbmC
s'Bm
sCD;Q4
Xq/
!FI ?
B}B$Z
^TAU
VMN~
-xdCUDe|W
*U 4
j>FWI_4F0
WoP5P
H5\F
F.0
r."tR6 T'
]`"
=H5 K
TFFS,
cc<-
W:I/-0
985.9?(
}]LL
ZM]K
{Jc6
qS!_
~#F =
`l&~
&`%@
-iI&v
>S1XW
OaH
n<@u(eG
AuD5
~>rL'"L-
%q;
_BQ0X
fOWMN
_V[ZVsZ
e9WtT\X
112`
'=;t
Z:0\
5/,3/9\
K/0o
Vs}.
JH4. i
:U O
;J0pu&
+a!*B
rM
q~Vzp
P^*bY)
DiP(
o8[!rrW+n
6l s
Fq32
zD
YZ\]N
^j.W
c1v+
<\;M
\\^\n
[ h
IU n
UVgqNT|i*
OlpCBe
S\8m*
S80 vT
-OL.]Li
\\\\^\\\\\\\\\\\
F XaV
\\^\w
a\X0
.5;;9.bQV||`s
;/\]x|
mRP\Y]N
i^Z.f
M_os
'Q"
\\^\J
(=Q.?
@1eXWy^W
ZWvZ
\\^\E
]OYNY'
\\^\C
2M{N
]VHVXD:T
QGS#X
[5s
je ,
V ;n
DYM^a\V\M^<
OOP'
[eWb
`cuRW<6
\\^\&
,Q5-
W\.g
xp-%
WPW$^
H`^ F
\\^\=
YW2e
cnaL
q]g6
\\^\9
[;md
@s f
)0()\\\
`nDP
_W=ZW9^
\\^\
t yN
hUE\#
b}pc.
H$? #
q!Y;
(7vQk
2*379\8+ .3?9//
JSkRWpU3
WRTC\W
S*Zf_
:s AS
\\\]\ \=\.\
9\[B
L|Z]M
5gTp
?Wgb|
!|%i
jP'{w
_AAxW
JqxV
W;Sb?<'E
\=U
_S[WS
75, 9.5:5?=(532]T]\T\\\\\B]\]\
|^Y.
3M 1o
J]YZYJ_
h)-CR
\X>M
CFd2
\\L\\\
z_\F
_keq9>eom>k>jA_^P\
Au|-
)>Q@
W}SWvS-
S_E([
>uX IAj
Iur3
IW`TAR_]^LW
.5,09
o?NI`
HWA_ATYV
Ek7Q
{Sx{9";=
5uLrb
^IXWYZ
O\ZK
^k6|
GK ,
Gp`,R( B
^OTd
A^.
9f,@
^H.j
,,05?=(532
_ r(
7{3$
] 8e
CU_ZZ
YDRULMD
MHKMHK
.9+%
[^\c\F
wv F
S-Q|
@Nn^Gj
6JRzH
_V$WLx)P
.?]zv]
EFZ
U_W}WW
9I&T4
[WZS
9}`;
O[UHU
03/9\
E]dkI_r^
\ gC]]\
=@?{
XabH
Ur!>
5]GS
8e /%
F*_O
O2?5,I
zX\[-d\
Fy^*
^\Y\
~oy,
E y'
S'<w
^^S\
.[+
}?Si_2<[
-<M<
V=X4D
yW!
GL38
;Qiq.
eKg3
me/f*
2*5.32192( =.5=>09\
jFy}s
$0r
|hc~J
9/3).?9
.lLEv.
U4p
j2ki.h&?>
qCz
c(=T
_~,'
L*Zy
LOV)U[
{EWF_
IO %
m:q!4
%0@Ww
"f-P
^oTpl/
\\o_
@yY\[9kW|zMt
dZa4
!^)%
GI"[
+i }X
4=./\
yY3i
XZ]S
={p~
2:3.1=(532
\Sk]]
91, =(4\
H NFa2
h*wV-
4`f]
?5^
`}I@
$|*mrlrl\\_ZAY_ZMp_\\]X\]]@U\X^SYTULUZ\]NQMMV\_NINQRANQY\^RRRT\_@NE@A@Y\^^@@X\]]RZ\]NAN}Z\^]NA^Z\^]NA@X\\NAX\]]T_\\^Y\]^NAZ\]NyNQY\]DNyY\]RNyY\^_RTT\X]AYTDTZ\]AYAYZL]]B\UT\X^DUULU^ZUY|]UNLXZAMT^ZTX|]]TV\XUAMTUNLT_ZNmY|]]NmX|]UT_ZND_ZN@_ZNxXZAMP_ZNL^Z^_ZMPX|]]UY|^]TT[|^]NmNmU|X]NmNmVVY|]]AYX\]UU_ZMTZ|^UNLUXZAM|Y|^UUY[|_YNLUYT|XYNLUYYY|]YNLZ|^YNLYZ|^]Nm^Y|^]UUX|]]YX|]YU_|\^XL\\\X^\]\X]\]
t\sk Y
FTIN
yu'Tu
_\
XOS~
5 u
zBk"Wd
'mm
G'U"
k]AlrD[
kx_c5_jk
p_~s
\=\5\2\
7DMrdZ
4W;XW][
m{0s
uFO]N
YOU
h VCs
L}(|oI
[K J
>,#%
#k)L
$QMb
H ?D
HE>Hln
zVxO3"
cM'h
WQ[R`
2=>098b:=0/9`s
gv6n
HZP]
yo5]:
xrB1oh
5p c
8zR
Wn7lT
b(X6
/pSN
GW({r
k2X/
h[}oOx
p^?
913.%\0,
Kc(=
aMmv:
(=.(), 9./5/(=2?9\ .3?9// 9./5/(92?9\4=2809\
;_Vi
U u]-u]Wh_Zd
en@O
MemberInfo
1Zoz L}
xrx'
v2'%
jy.Y
K GpdRw
*)/j
cqX;
~`]HD
Qqdx
R]OFMFJD
W"QW
T(VTZH
{C1xW ECrxW
`{TKO*AK.J
relgh`
ez3Q
+'qQ
_W8Z
f/p~tK
6XZYZ |Z{^\Y\
c'rx
K^\^
LO<
s{ptdK
j_^O
@Fd<"
1@32HU3]
$/w"
PZYT|Y
u]]V
2jtwi
%tP'"
|OM=
_\UW
eZd.\I
TQX j
|S#sTGl>M
]-XQD
eEZ2
X:0?
+`ooQ:fi
m8V;Gc
lNqtq
;Iv?J
oL_I]=K
A],@
_,yVW
u:t5
[Rl|JOCd
G@WM
^WlW
]\\\\\\\[]\\\]]\\\\\\\YWT_\\\]N
]K`n
^AYV\_]N
UK|p
K4n:!
EWFxO
ZmidW
EvS|F
V7%n
2:3bQV||||`
(=.(),\
|15t
311=28bQVU||`
P]]@
JEcE
]\\|
32:5;) _
gJ+ihl
.9iI
9$(\
_ #ffo
kMoB6
[2t@/
GR:i
m
7Zzl66g
FJb
PE]*
AYLUU
X^WeP)r
moWsR
]\\\
_NQL
,2X"
^@A^aZ
Sn(W@
S&q);[~t9
N]X1o
|h7~;
81{,ws
$33K@RIiU
V>Dyz
RW+Y
qAtD
QjyY
MessageBox
SWNY
;ta[
&_*U
AV@ ^I$
JCV]
W/ O
\(\(\.\5\>\)\(\9\
zVW[R
_We_
iNz@
$o>M
Cp/[4z
=, 5.(
9=/( .5*509;9`s
W oNxS
3\\\\
2U3]
MHMDCS
M:jJ
E+\MYV
9=89.p|1/
^4$
TARA@U_V]^_V]TXV]AYYV]M
K:61
s=FLY
rep<
xa,'
{)y^
uJO_
W}VW{NWkpW
P:P0P$P
&zWnIW
D\^\
GGk=
i2Ww
M25=0T
UEcWUZJ/6
GrvLo
ZWi}
n-:6
]ZD<]E
#X,?n
X2R^
M^"Z:O*SW
lYCI
GD=!Dj;
Cx_>
lvnZ
GZ[o
U\^^N
5q|*f
C[a>
:Si_
MZ\]^N
oIWV
AT-x
*I"T
r(/}
gYga
cB$!
.b}E
xv!>'
XXMHt/RsO0m
oe\ \\\
lbc2).
?w2iZ
q#1}
Mu qtr
5t%8a
BsT(A
`qIi0
PW yW
N5tjT
[[M{9_
]L=79
K}M(
`]`5=
5628=90\
K,?[4
X\\M_\\
/oUO
aYmQ }j
0E[ -pO1
[K,X
aaG{
Ye]T
\EBZ^
$^'R
%rc7b
=./4=0B
^&v_:S ^m/
=))L
N9Mu.]s
uv]]\
=./4=0\
$)53
RIfZ=
]CUb
8r]#
l!psP
jMC^W
6]GmHS}TA[Mt
0T^AoE9
a ra]
QWft
BqVN7fwBinHyRmAWZkvr4kz7LWH
l aY_Z
2:3\;9(
b[{SV
W_L$\
!W~YW3RW
MRMYsT|h
+\RR$
I 631(
jZ%\\\\\_\
Khm+
,@_2
HzVE
}Z^e]
IXV]M$XV]M(YV]M
R.\.
cVx)lOPXO
W'9 a
pokxq
N YJ
S$l9A
J]aX8
VRZR_)W5J\
]=VZ5= [
vT`
r Fn
qM[c
]\\^Q]
(3Jb
Lw.
xF0SqdO
scGS
*R:!
^X^"
V1X(
1;*A
@Uz?
y"uwG
J=_P
D[\6
gLa
5q2P
{KOr8M
Vt6g"!
fFR[C
,M 3
dh\ i\
X0m]m
Wi[^
SW ^W(S
1mKC2L
z~3Fbf
w&KJn
o3{b=UFQ
-FSS,Is9
!+SMB
tOZYW@cH
]1tGm
QI]D
MoSJZjSc_0L5
J2CC
ZX@Dq_]N
`Hr7SN
Assembly
gH+#
$)0
]Y2e
XMCS
]^[]}S
!YQR
NVuFV@W
c2g>vR
\A*M
td{EJ
]ZGn
}UEx
gK`
F>
L5& R
^V%L
]+tZG
Yh\R
B^SL
hW;"%Q&
L $cc
(u@OIXSA
h"M+
7r}]Hs
S|ZS
:s2W
t`wsW6;
R"g\p
!Tn/
h-&
SO<m
H}lzY2
ih!
:MV]*
mRP$zl
u]W2V.
289$
[WwN\
Z73p
M/#ZT.yW
J/re
opkQ
!3Fo
WzHW
-AbnR
=?7;.3)28\
F b~
_y7I^
zSkyV
2ezx
55gY
&2uL
-]q`
If`[
>,O
. gO
jgS'
$Zj1,
t kY
T%|ZZ
MTZ]Z
%CL5g
QNQTY\\N
CYW$_
OVnU3
wNa9
IHJMH
^ -N
oochC
[[WTtWvZ
hkJ+
y) ~;w
i\?s g>?
- ^*E
|6MZ
gRC/s
\]\\\
_p^HvN[
[1### 100
/^{O
$>rL
Q5E9
'Q<g
\zYGTfM]
J74~
_@Z'\
/Tvi
_I8G
Q[O}
qr$p
UL]HDL_
#/Hh$#
9((52;/bQV||||`
ztifN/
]\ldjimxq9hk[(
~<!r
Azp8
5 @G
mgDg
SWGDW
x&%B
a0H
'^Qt
ff-7
=52\1/?3.99r800\\\
eZ[
-Ch*iFzT
^2shW
T,|.
F&P,
St"F
IMu.
aLWOV
#DYc\0
STw
E7W
V%\a\
\]\4`\\\\L\
Z ]-'
s9'
ul*B
r]^Y
F5X X
(l"-
VWAY
J6wn&
lG[K=
u5`p
.Ger
+K 0
`Z>~
nZERZ
(=.(\
AWwXW
z=%j
Rv,*7st
SODJ
[W?Dd|
7nbN
_N|VN
ne}Q
\W GW
wPxg-i'
,%{~
08=/1# )
!dHhP
kC|
_cF"
W]HW
&RL;.
W&EW
T4Q[W]JW
LI 4
uVXvWd
HG J
^R5]WpVJb(%Uc
AU/wu
r 3
gR2$u
#BR[
WpdMW
XW:Y1Sg^WU^ 9_*N
5>)0
$(Fv
&KL5
LwlIW
u@Z|^^DL^P|XN
.;)192(
=&'O
%"<,
OUMRK
b i;w
UWEO
DEJ$J
4.9=8\;9(
Xs>h
W W8W7W-W'W
dCG2W3\
I\<~
=*98GLX/
[mr[R
]~@9
qE U3
\\xv -R
F>=9
TZhW
\ =.=19(9.
&P1a
_R.^a
D^[E
-kxW;
TUM[URN
Mcev
QW$[
^WIsB
GsSJ
@\YS
(Il1
k#"z
Y>u
%C#I
U?tgM
<c&Q
~bS+
^\_\
pFhFl
s8MUZ
ZzwcRY
EXWrQW
[W?VW
`o87
}t\
2 Xc\
\fvh.k
HkfH
K_WEQ
[;v`~
E|\\
RiK^
Lp06
S=t.
-vG~"
:4o\
bV0_\
XCyi
VYW5W
X1t<Z
JD
u@X|]UDV|_N
5/=>09
_BmD
P59W
%/W5
8Sq_8\
_F\l_
=(]\m
x/cf
b0V9K
]ka9
T\~X
mbY!
dQMX/
taPG_
9\\J\l:
Th'M
_ 2
Mqb
;4aU
5U8j
lGt_\
wcuD[FW8dE
XE]HQ
VW=BVy
T-\]\
: {8
Z%_Zl%_Zl
T?tWlP
hWGi
Bx!!
(NUENDJXW
` )G
:S P/
zgQ
AWhYW
I@8@
;QbmF
HKC=?_
YWdP
l W{-Y
eTNTt
Q9f,
'Mk YF3H5
op_Equality
d^W)j
Tjf <
iBRLvR
OoVL
r_jm]
MVO tSfZC"
YWdp
U\/3
y[+]
oG{|%c
YN.BJ
9>);;9.\;9(
m-`ls
:ui]
o')R
]P W%
kS&
FMQ1
oX\C
'\,=
yZ|_^TTTP|YN
N=$e
?}2!c
l/eq
8_fL
w]@u
FBf
&yne
*ME]
BZzZROJWK
5w4o
7eT;
UGOlZ
ecq-
#_d Ya=~
?@/+&s
#5U]
/Qx
yI2nm
/i`P
W KW
3IDAT
Ti\
\_\wm
tw?U
sSfxY
P.^:
OKM[tT\\VMTD>MKNKtu\\ZzMF|
YJ&_
}\Vw
DDDL]Z_
YsRIMW
'2TZ
N`W!
]?9kml:>
_Ww_
KZ.%o
l:4+
:]Y'
j!jk
W|LWmY !]W
}zb7b
]O ntR
^VKaU
DPCqDQC`DRCSDSCBDLChDMCNDN
o41S
$w%b
8b&1
Ol_\=
D8'Q
$0J{
N^%p
1)38
<ZP!<zP
R;WoTS
_\/aW
pTO~
T:S2
LWnH
ESF
Fcm1
~X^;F
zyMu`*M
d9~R&<h ?
gP{x
"ve [
-$fk
h-UQ
jS@Z.
al82
4IA|
b$!!
p$wW
\\Ki
#O ^
Zi(E
XW/J
_vM;
7Wiq}
Dt_?
V_]T7]
"z]o
=ZD%YHx
Ol<"
A}InD
m0i&
JYU5
]%1ZWAW
TVa1c^
gI;G
B|wL'd
5?.3/3:(r 52on\
z&f
11vM
Xijb
'7j+Po
O|z_
SWLW
FR1NW
I|,K
bDQk
"FOyW
U&0/c
VXK[
}JCgRTj
vW `
%/(91\
jVO Ta
&gGI
23Uwfg
5%@lP
7azWo~
GRS!
;nNQ
<1^,5
oNQb
[71Z
'c{tcL
ZK09!
+`o>y
W4oN
\8\1\5\2\
_t' Q0
PM6}
P j.
?jVW
Q/]_
xpp)
'wy{
e*VR V
c@@=
,/SZVj^]
{vog
M$],7C
]ZLT
EDzA
`pq_
k$VmM
]VP\[W
cGpv
~`71
rprAdl
^\_\U
^W2Y
c$>yH
v`]]\@6\\\\
POQ\\\
x]
y+N
+zta
!Yc\X
500\
q$\_
^dWL$WBU[
HWwBWZVWM}3
qT&g
(.52;/\\\\
U _#V
n\` .3?9// 9./5/(92?9b>
W ey
]M\s
M&EE
2X@>
rV6c
iBEi*
zer5
-8jh
-HG3
ddV
MWXFZPZWZTZ^W<JW
Z 06P
VRt,
w5uQ
AnSOg@rYOH@
\WO\\\\ \WO\\\\
DW -
;/{mO
HZlt1
i%h0
S_A~
zZ+kh,,
0 W\{
Z 7E
]M\Z
(6>l@?
'G /#
OMQ|
GetMethods
_PNPV
929.5?
]M\B
&( 2C
P![H
iTG&Q
l@Gh`
uM|e
BG[l|6
qmj~cbQV`
yE@nx
}H,\
r|NQ
+Q2C
sb>k.:
o!ab
8pbB[Y
Cs^:
iWFN
{YqspS
F'O`;
v 3$Y
y#x5
% 6K`
^X\]
`\\\\L\I
!C9?x0
`\\\\L\K
Dl@}"
&:RA
\JMaM
-Z0D
VBKK\
l *J
] VZ
0gW|
U_Z^
P?9k>OL
RW*V
\3\?\=\(\5\3\2\
JS6Z\
m5pi
x`?
t WIY
:t r
:,!eX>
|\^T[]
MWVT
XAJt
DrK]+
xW$SWP[WZU
UW0_W
<QCK
37"s
509\ .5(9
D_.q!
Es9;u,
^ZnW
?:e cy
vYW*V
Wy^=Y
b#+8
U:|[8
F^W>V-$W
YXGW
5g+$
(}4Zo
m$wW0
]]\,
1 #5)
RZIZ.Z\
v6M^J2
7 d5
<RLSI
\p[X
s8WHWL>$lL?L==
dHHJKS
R <g
!8>
`8bx
Q~GO
B=ma
E =<
da9X
+;Wh
G*A9
2=>098b(.)9`s
w HF
-JGyV<
h`7&vhA
\l]pZ
5/(<m
HO;^Wr^X
bc5wW
sZ|;
>DQX
J[1`
]'bXN
5 )[2
__[w
_&e]
5/R$
RW_Y
Y/\,[
F[ X
\]Ll
e\^'iU
oCJRX\
_GDR
l'P4j
rYnSc3E
VMJF
mIa_
D8OT|
U FZ
Z,=T
S;nu
W:HW
<4\@
w\?dXWJ
4NXJN]JW
SOvL
^WFT5
>&v>26 f
C[2nlWK
dm]E
=R@T
2o'~
I!^(H
HJTA
HW"O
+7I:{
rMbu
zbu15
DuQMFZn
o]W~K
]^@d
xo3e
OBRp
-{M{
58PZ`
[MJ]VJ- KaW
Da\^T
UY[_TTUQ[YN
$e^K
9dkOR
^@wA9
28/ 5(4\
7J ?F
qVk"
29-)=05(%\;9(
Eh(_
@Ww_
njFh
IDATx^
a\\\\L\
@I x|i
v.]
/GLDOm
j33
xJ[Q
n._,
Jcj:
g3R.
^|_\x
|Ms~
IMSj
&~nF
hOO
(~H>
"qQX^
@Th6a
j\o52
h]zKZ
dc%*
>Nk4q
uL=a[[
]< ZZON^O
j[[T
"DM'
{+e
tNQ!
C\vN
vZ:Xi|
PTF.
>;"H
/x;~
uuc Myn
uG=Qw
zYj0
OS-Tz[]
*@W{ZW
_Ncq%
>-jW
_MFsQTN
P_7
v2u(
_aW%XW
L*qY4
3#C
N:+%
JCge2
{RZ\8
]x[GY
|U`~=:
UVUQ!
Bo /
s88o
Is '
lZy d
E[N+-Y R
<W?v4ZJ
]Q"U
z?;dy
VXE t
&tlbA
1^lh
nZ $
KJJ4
R7`{
FsJ1
CTf~
K<v|
|p~L
\ 5283+/
7e<ot
_cD]
QRbc
36VL:
Aeh
Q1+l
sGp;{
{e}e
iW[m
Z|]^M
zeQ.
P[T@
9*90b
+&#G
?zEMp
DZT
#o|J
_!mJ
]J F~
PW}9f
9?).5(%r .52?5,=0\ 900
D_ )X
V=^lZh
lQe;I
Lq7
\1X\ 5
/MICU
cgR6
|]\\M\.D,V.7DW.
p03"
YIwv
]/VQ7SnY
rCe-_pb\
+{7s
#7?[s
R|P<
OIJY
$\\\\
cXo:
gX.sn
0<[
ZJQf
{t fw
31,=.5/32\
1DIO\\_
\ .3(|
\S&
Hw{X
d'Q+v
rWJW8yD
0[gUQ
vR|l
VaO:V
SW H
uMu_H
ZWnRW+t
Qo 5s
pJ(#
P:<;
,E^J=
U]]s
P4u$ESFR>],_K
3\iR
&S%@/
.?=
D?z@
F\H,-^<\
^- w
W/P|
^\]\
K6`\
s\[_q6
FK*Ox
Fwjm
(S>|=
ry>K,4
U]]P
c1Z2
T$~#
L?JR
[kFu
52]k$
=V_m_
OWZ8;
Hyq!
HPNR
H"_z
eWqv
W2M+
=k1X9
lo{fy7a
v'c|s
dddo
Fb=puz9
rgw
P*Rs
o+oWYQ
v]sF
$5/(52;`s
<@Z[_R@Na[H
kw2C
Wq^K
0h<
PrOl
D_\_
yNhN^\
rj+a
$,05?5(\
\s,]9
5Y`V
$zK_
y{y]
6YQKZT
cOy%@
]% S
^MSA
||nlm
/%2?K
{$z[
=y4c
Gi8u
_IOMdW
J,.ex
C~T
r\NMN)]
;? =B
t/f':
Y5c*
l_?iV
<6<zP
]ART|\
D]p
[k<mm
\X_k \J
{R - UT
\VVpp
h'k^
v;bA
Uy~a
[Mag
uSmfZ|
fC&e
19%
H`^OYu
,j:^k
d]!T
DhSKn
CJ\q
=(=\: 25?389\2
=5 H5
^WFYnI]W
YKKl[GML
*%+<
ot!~"
J9AW
]\\\\\\
I~P&
LWMX
P9~
B]v
XW!_:S
=x,a
\]^Iub
mosO
%Y1n,
|Riz
fL=d
I< `VQ
oJJW!XW
VO,d
P(0/
BGjr[C
b 7/
.!@O
CW'z
J!=0B
>S+0W
e@QVZlGV
yRsK/)kVOJMJ
Zsb,
Y6+H
m:n=>
`\\\\L\sR
Nb.7g
'RB<P
gT|\
$I]R0;
?+F d
AV\5,(,V\
I$j^q
:c&a
3G j8
:mBRWD
}!\-
BB {
EUf
$K`^T
ZG}{ZM^
EEG;
SK;:
!DWkX
5J>l
_ZM T\]N
{ \]i
UB\B
IeA=
^|\\\\\
VjB^3
ylxX;y
2U *R o
<ypv?
Z~I[
bq>;
0'r;
GVR
MHCSMHCS
909;=(9
PD]d
x8z`'`
mOPg
/&2X=0;58\.5H^
;i"Q
0.bP
q/)b
tx]]\
@PLN
WNYZ
^9edq>8
+P//
u[,$
Kys
YEdaf
'ggt
E"%&
!1T5
.YT=]dZJDo
~NiY
(Yc\
\/()>\
RU>@u
\WmH?\>
Pe-]\
S% o
2\ c
1s[I
I&'2^
zn|o
-4ZQW
tsNl
X6rps
+,fSeeJ
$ Zb
r[-|
_9RY
#MnN4
$i(@
GPH"
'h6R
}t[N
Gvqs
]^[D
U[[-`ZP
X5mbbB
GlV\e C- M
5% ,
^ZK9cW
Yw-^
wa/>
|la
W4PTKt}Q
[WhBW
3=8\;9(
^\\ZRY
IM}m+
-|{ _
qf<}}>
T\d]S
'Rm(P_6
XTQe\
4RX$IWq
cWMjB
V ]gK
{+w#u-
h.(GGE5
vIo|
0S{IPV
XJ1OC
VW* ]:
hQ5C
%2=15?\
|$^g\]\
6>n+
5P*po
Nxf|
\L9T
R*+i3
3U0WY
9:09?(532
b09:
~DHA
^J%/
P4k*
QGBH
k7p`]
]ZJX
vwLZ^ARN
j^dW
5g/Pz
^LM!LM<
j o[S
2MBU
ZWmZ
Y%[Z
5?7/
L>,\
^>Wr|
r{B?
hLWUksayIf2DFlBVPKJecp9aUD
S''VR
G}Tu
ZWmA
EhP8B
Y\^]TTX\]]D[\\IN
T\]N
Ng &s
8' /"
]Bl0]
KW4A
yE6|
DW|I
M.y)
5X\=
VW YW
G}/U
y[pI
gwWWK[[
yp'1
B 3V
AOZ/!
z+ ^
88.9//\>)::9.\/5&9\0,
J&_SSARB<qQ
v%mK
HZqJ
N6$n
k/p
~z-4
Y\\N
icUi
RBt
LL$;0
esXig
R nG
MZs@
CL:7
xrt&
R\INI
]WpZ
S)`/ L
LN\r
i]lL
$ Ei
5/,3/=>09\
Hj'!F
^A\\\\\
,n`q
,[+|
WwKGpY
b\K[
L[;t
uX.P
KIJt
\9Ii
YiuQ
\5\0\0\9\.\
QWvX6
^;k*e2?%b
p "j
oDQ.
lU5D=
UIvSOZ[z
z(Nl
E:8L
'%&3YNh>
-BMB
`l[Go_B`l
Ze e
h/S@
S1HU
[[_N
#b3x
&VPJBvV
UKG#^
2$on#uE
-+y!
^W0T
2YWgYW
(E[Wf
System.Resources
bhk}&w
x\A1
3r:V
|\JT
\MbZ
ZE]UA
06 xy/-
HTCTGG
\5\0\9\2\=\1\9\\\/\(\)\>\r\9\$\9\\\\\h\T\]\ \.\3\8\)\?\(\ \9\.\/\5\3\2\\\l\r\l\r\l\r\l\\\d\T\]\
|-Ir
a5c4
J6[ND
JuhOk`|Bm
W^^^
PWBY
\F~O<
[*a
[{\O\R\{\
PYPGU
929.=(98
gVTJ3
]"Lb\
Q&bD
c|zr
XsL^S
b"?
zG^~
VGOR
^[%7S
a\\\\L\rS
Iz/z
/u u
CZ\[
Z=RG
%Ponh
+y&
VUP'
dC
oz N
>wL0=
]^]\\
WnAWJ_
/\i}
'm\@
To "m
p76R
CGP1n"
r]rWiQ
\\u\&\
2#:HW`
ibj&
::dO
}0xKe
AQZXW
mP4]
\IV
uT21
_ZN _ZN
CW@^
#5!N
=_V_l
:e=i
e&|)
,*LlL=
lZL1G
zRrt$fv
BBiLN
MSi?
;cfre
+((,
_L.:
SWoG
E[J4
OX^JoQ[S
_TBC/
:6cB
38)09
F$>u**=
{L| VW
">bA
cV\]\D+\\\\
Qc4K
t#rUW|
YW8K
Mu)4
]GmC
J&S8^WfS
E!16
Hxp,
c3vv
J2"*
1=eW
Vg=m
*xMx
>x8\
QYYR
03>\\\h
ci/07#
]cH^
<\1x
E tWNPes
0^,|
61}l
r\7
gYb:
zA|49
1J$q
A}99a
<3"T,
PW B
]WmXWdW
Q;dHRt
3&b;u
UZ}+Q
)(43.~bQV||||||` /9.
/upsV6
;|7@\
!hseLeEZ5NzUOqlf4Q9NYczs1smyjn7q63
yVpR^
\c\`
>fX1
PG]|-
R@."@
LK-xOXQw.
I6wH
(:qD
~/u:
V@u
QKyo3
i-b%)KW
YUu_W
\c\H
@7Jc
6V@;f
)G '?
ImJ:5b
b9I k
Y7f0
RWW$XW2N
[jcF
(pP*
]R1^^R__T9]
f$9 U
s\9r
_\\\]\\|\\\\
XHMH3
x7I8\
6&FZ
*i73&Y
]vy\
RRUZP
.GaQ
I@qAA)
:Z,^
OW+}X
O;<r
4s&/&O
s|Ix
K
ty}*
"[6oU
7'4R'
NCIo
Ir6&
~R~_ vR
LWuVW
g2,e4KL</
UA^Y
>RYO
Ozi-
b)MJ
7_WHCW
M4]o
@xp=
F401
.c;w
/`o(?
4X4U
b^cNW [oD^
jGvh
9*5/532\89>);=?(5*9,.3?9//\
W|W3U^[
@z d
%SO?
XNZW
:)l#
`T<)C"X<<
o PW
/pLw(&
)aMT
RW'Ni WeQ_
9*90bQV||||`s .52?5,=0bQV||`s .52?5,=0/bQV||`
'@7#
0V ~
dmOO
=TdG
PA;Z
3)N7
'f?q
$0n%f
Lk' T\\e
WLZWyZW
Rs]Sy
TeFba
qA =[`
D<3"N
0oDQ
y1tO
3GR:g
!S>/o
V: /
[VWtZ
Q/tihT
PM[s8
PKnL%
\9\$\(\`
\R\8
rLX_
]V]L\
*lT R
O[JOTMF|
|J@{X
ywZ|d
\=\:\9\
OUHJH\\\
,kNN
-P_"
)C{3q`
9kMk3[ |VJHt
}<mzJ[
[Un
@YA9A
/Qf!
=eq=o9\Y\
p):N
]CI|W
^iu}
"f]&
`tW=1
%YZYW
|\ ]`_&
_Wzm
AZ\K&
KwnBZ
Ss(_lZ:uy~X
V] W
k#]:w
W~Xk
"NC[[|
:4Ci
QXN\A
f"._P]~
HWtU
:'~p
^LSA)
Fb46
GW(/
Jq#mR
>YF2
_WzL
~{'N
*K*Q
T$+G
=S~^
R@HW
X$`Z
_LV_
UPNoA
9/(=.(
D_ ]NG
fW"_
O_BE
\ FXpz.
&:Lm
90RL
RC|LZZJ
]h/AK
bwW2[
.hhsN_
_[F~
VK,TW
)J6*C
\\X\\\
^Vq]vCyta
(>zyQ
*ZW5r8
e$QN
Y2{4=:
909;=(9i\`be
VZN ]
:2V/%l
nd W9.s$^FJ ^
|\qw
\\\X\]\\_ZN8_ZM _ZAU_BST^ZR]H^Z[X\\\\X\L\\Y\]TAYU\Y]AYT^TTT\X]AYTTTZ\]N
^,Rcj
EWvN
'C p
vN$zx
\P\x\P\y\P\z\P\{\P\t\P\u\P\v\P\w\P\p\P\q\P\r\P\s\P\\\\\
ChKK
WRY(
\WsS
ZKlW
c<~<
~TB]B%
W\TJE
I\S7
5PV\N
=00>=?7\?=00>=?7\
/7g
EL@ A
+x>o
<ZlM<zPl
XyZ@0
Mgv|
! Ot
AL4 t
Q/@oX
rvbo
WB7O
3S9_
k\u TK
bZUT3
w(~{
yFXGt
V38ZVS|<
_XZW_L
@W%Yu
[A1UE
D*Po_
|k/~
'4`'
<Jud
|xW,K
taI,
xUyy/
fd 1
1 ff
C;sr
xWY[WwXWc
d.o_K
U 1Y
t}zP
pdL?],VR[Xxp
QDRF\]\\\
]1t'3+U
cj2s
fWz\
!HO t
^6QX7
_MYBMMMMIb
Pm.KW
XUbh
1>>L e
JQZWZ
Z5Kly
4MOK
uVBUc
azH:a
!e>
lWlH
/?wa
9*90\8+ .3?9//3.
ixSC
fz]Thd
qi:hu]jj
.<qs
ja_S
CPON G"QFZO
!'" )
YSl>
#JF0
W&R^X!
QgE6
Kv_PVy
_\\RY\]RM Y\]M RZ\\AM
gp>w
EJI2
VxE8H
BU|
Gi ;)v~A
??VZ
G{M,
Yw/_VXS/_
}e=dx
` f
'Sfs
I|X5
~6g7
2)19.=(3.\;9(
:I$J
,<P9
\=\1\9\
YQ^7
pMT
JKAgU
+TY|
m#_N
^jg!D
\\u\ \
&F+:hK)
"uJs
$a'O~
+.YEJn7
L~Z[XX
2Cn,
KtKD
E+&R
\Y\L\3d\\q\z\
ZKP^s^Jv^K
+j02
ZJOYwGW
1J20"FG
x ?d6$
_^MU
\\L\\L\\\\L\\L\\\\\\L\\\\\\\\\\\
gMy
]g{X|
5B=N
p8W<
udx
SwU-RW
Jl}=
H{,=i
*gwM
J;W.Gk]8
MXW{
( JBD N
P^WIVGc_
n fG
gO ~
eS$d
|O }W
u=d[
ewQU
9.8=
FfE1ks
4 [
_W2_
Nk}^
T[ T[
}y1o4&K
T .5\
Tn]9+
A@^'P
v Fr?
vZD6
|ej r"
-qMq
7RC
Sa;qL9T
@J3W(Bd
Q}W
]U\^\ ]W\^\ ]Q\^\
EulXle
~dK7K
^J\prM_4]X[
oxKq
GHIT
_FQH
<_c4'{
w`5Ot
^1[T\
HNc>
0g S
2RLt
ctK
9~>$`
l>/3W5
:Qm\
ic<r
M4SVV
[OR]0W
f7as]T
b>oXJ
iQW6T
M^KlY
Xj<
q dD2
d`W`
^W2_[
S |X
P^Nr@(
V/#c
^[Z
/>|.
EI2c
sMU
'P2g(
YA^
Q"0~/`
o&V"
e.gr
\=\2\=\;\9\.\
/.Lcjr
_S.h
ZO O.
$,03
gNp~o
f07:
PBY`
DLD0"C
D~r<M
System.Reflection
L{+]
lOn0T3
9;5/(.% =0)9
^WIM
}]WaVJ
^WII
v^J_3Z
N*2[
sP=|
T z%K
F]=b
3OJ$
VWA^W$SW
ARAN
EBl8
4k%O6
Y|\N
Y|\M
LYTTSVSVSVT^AYAYUN[TDN
|[\\
9( =.=19(9./\
i)Rzh
XhEZ
#y2t
X4Z{
^\^\^\^\
<){z
{>EG
}qWw
8m:e
SQ^9[
^P^^^
HHJ(
6:o:
yFYZ
c\>t
(.IH8
}\y&
R(LM
\Gff9
pzPt<ZP
y<20
d$%& *: I
w77$
&_|!
^j\WBY
.Lud`
"Ibp
]KVZ
Yt\|
tMX_3[hx|X3
jXO
^TF|uZhG
6O"TW
CYn* XH
Yt\M
fO#V
T+(3*|"Q
VrhY:O
ZWTVW
gIP7
U ?,.
u?S+
PWLU
%x`|[)j
C0U?
7-cgiO
_\\^\\\(_\\\\\\\\\\\\\
N;c1sS
[82S
7zKj
G7q7~J
2b01\B7]
YVWJ
"+Rv
Do]J
\O=S
Ld_7
AKV6
RdW[NEPTRE[
WWtX
[ S;[.
8o49
z}L %
0;9L
G)u?A
O;[yq
Y\\D\\\sX\\{]\\
MLNO
E\ S
PO3D
4kY\
MPE8MPCA><OWMF|
9|16
\B@m
\\u\(\
fYA7
dqho?nq>ohdqn9d:okil
ZOsb
eZWLtW
kq<y
)K? +
LIMIBZ3,
!YW
_?K=[[
YO v
8ks*Qf5
JEUF\;M-MF\
\ .3?9//
L )0H$K
g{:x
$@?8
]^DW
~Hj!
z|4W
DW)P)Y_
4zt
o^W!^
qn|gN
IqL
a]Rc
UbD@>
y/E%
F [KTY[
^HP]YEA
@2K}
S`H"
4s2
@GP\# Y]
NZ]W
997\
lavQ
}g^v
v2.0.50727
C'/R
\%\/\(\9\1\T\\\J
p)`'
#GD
T&A_W
U, J
K6|WWNt
\2\:\3\\\\\x\X\\\
)Vz:
D>u!
\=\/\7\
yXn5
hsV*jR
y^8^_ZN9
>.\8
MMM_H
RJZt%9
(CWW
u_Zn
_HHD
fPo8
8b8?J
k0S5
$ |G
b48\`
lBuG
A\.*
=K K,
CGp?y
X^!ZXr[VRv[
Y7{\
]:bca
OYXr^\T
Y~J?
SVXNEA
@.G*
\SO&1
{6pz
0T8
{wnIUoJ
\\\\\\\\\\\\\\]\\\\\
MFKJHD
X&X.W
]][ s^\TD_\SDX\W
=DFF
]_]\\
909;=(98\
t1;V
p.QFN}
qW?O8F
K \
ui8yQ
A{r9
T<;A
_T,W
TE<&+S0^
^WW^W
2,)(\/9(
^RsM[
T9*U
^C{N5
9(^\\\r\\\^\\\
|-=b
eO[p
LOOayq
y+I50W!
a$oFw
Na^$Y
WCXW
!<R'
DF^K
^Q.0~q
QW4^
VZ:\\\\\_\
5>.=.%\
}G ;
P)pV o
9=8 .3?9//
tg ?
j)}w
HE>#
\\\\L\i&
t' R
z(iV
;?3j
&v;F
CR8rv
'Gw
70=B#'
)m;EUu
Hl%@
LBU_"B\_JB\
R ?3
F_K3
\%\,\9\0\\\V
8by
$ROYH
Y\]RN!Y\]M5R[\]N
zs
|?v][>
9vZe
EHwF_|
Tw_}]
TS"Fi
wSGz
CmU
tj8QuG
} z6
LWCWW
~RkU]
@yA8
V&=i
3009?(532/\
C\J[Jt
LTYS/BWA_
[wMMS.V
KLi *
[ORp
32?=(\
2siy
VWfuO
3009?(532/r
^Wa"!
YWkR2
)0(5?=/(
Aef
~^H
KtfO
9/30*9\
&<V2
b,S
D4T4
]\v \9\.\/\5\/\(\9\2\?\9\
Q_@$
YWmXW
0{&i
T\^M|]U
l<S`
9*9.\
'[ ~){5P
-6HI
V^g]ZxZ_ ]3~
U 21OGN
:JxGd
\F<B >,B
32(.30\
a\\\\L\S
9Q u"
D?~Z
8J\^9
r.903?\\P\\\\
Fx^8[
a\\\\L\K
s(2U
)G{Z
7OZ_
B[DR=
ouJX
%|,]L
cOne
~{%v
+UWcJ[w{9^W\S
b|v/
Rc9jsgc
=?S"
^:X U
\JRa[\
9?).5(% 9.15//532
WMw{
UIoi }emt
Z5cb
q Pp
)0UB
C+D CsD Vj
2?9\
h\mH
4=\)
t?22
CR7^
\Z'J
],,x
co(S
\\\^\Y\
1RKbU
eXWo^
UEKA\
{4>b
]6,^
YW2KWC_oy^WjI
W+%
_9>N/a
_WxK
6sxK.
\EYwQY
5R7W5
4x &
r(u&G3
dv\_\;e
@W=@
U]V[VlV
{GR|Im
32:)/9.
fXSqt @
apoV
V#\]\xa\\\\L\
p>R_
G,g4
LWA[
+3^gC
XO[t
32:)/98
L3Ju
R|O/O
F\ZK
"w)z
BYc\
2/9.(
_H+^
KaH8IJ>
,AL^1q
SPX_
r\Vr
.L(E
b\[k
[_rD
rW Ni-_
[RLP
P0DgSVZX,Dy\
VJ;Zd
gy;m
\W.
W3P,
@OAA
~ 5Gc
PU2U
H)\.V}'VS
{JNr
-dX[
913.%\8+
IW#@
d]%t
]j}]/
@T#c
Ps[j
B$)DD
\\Y\C
K(]I
lfrX
^c\xa\\\\L\O
b 59
o.^L
VRvJ|
^\:O
l@Ou
\\Y\a
xRn
^JLL
}mG`
ZID6
\NJc
[o?|Z
vvw
IZ"+
}\\\
Q'cI
#S'rj
F9a4.
AaZ9
KB,
_MDxt
XJM%z3j
8t>Y
nPZ~S@
Uc93WLg
=c&pc
[G}vN
UDF3
S3'@
\\]lZs--G
v>t?//Y
1K4I
r d?]
%:$
E}V|T
VWs^
TS[U@
Zw?T|
y5:Ir?
{7rb
^\\]Y]]
^J .=,
_W TWA_
UWnZW(T
km$F
\3\0\8\9\.\
SDEl
@S}\
2=>098bQV||||`s
Pg<9
=(=^]]Z ,8=(9]
^Wt_
DEQ!
|^M]a\^TE]*
pch1
'F_b\~<O
u]O ^
R f2
DR\z}*D
709{
MHMJMQ
]N9Zo@R^AVNZ
Z@xA
jMl0B-
_eU
k0:{
b!5
_:e"
x3@_MD\
49?7W
-NMN
VVY'
@4vR6~R
xwh
SwxRvNS
.e]U
]&u.
_T\H
x- W
cpf>t
RWIZWe[W
XW%I
aM"[
SVjFo<yn6
DFS%O^'[
A[Jn
&\Ml
S^+}^
MDOEME[3r
V)l
5[<.
IO0[
R5`W@w
@AtMC
ZW EW8_
n[S!
|;I
54KJOJw
JBv,
KqQT3Nl
[w\R\
zGw3
> w#S
{y%f
ulO_
73?@<
|k 6
Lyj&
ZZYG[QN
_Z@]
}L1n)
W#S@("
@'r;
KW)N_Hs\w
|vHR
Oj^XS
|S;_
AT\9`
RLUK ^
aXa1?
28b(.)9`s
\ikl
@UKxuO
:(IV
zVJ<AnJ
ZeZ &_
yM]W7^_
)^eD
1>Ux&
uuGfP(
,C1s
M^\,J
zOG=
)2?(532 352(9.\
}yz&EII
TB6-1
YZ
_ yE
Dij+
y sBv
="f>$EMNN3e
UW+U
},#Z =
Z'YYf|
c s
\K#N
@w4PT
DnT(
213Q7
~DL[
k^J\p
DW`W
[0jM
S8R|
ZOPDW=T
q3inl
JOTw
#MO,M
Mf`|0
GL&v
=z:B7
]N%_t
Zb&p
XSD_
8oOB
Fjp7
^ \g
S8<`
)J ;.N
L&\JW
l95]
39Mb
kkkY
q7A'~
ruE=1
Kds_/
Q[ZN
n9(:
x[H20[
P+cz
9:=yd$
eCF5
ddZzNY[
&e @kh
E Ed
)ZuAY
%a=A
5*3/(
'/>
&\n#
Q^%
Jl#U
"Xm,
2:3.1=(532\,.3?9//
W9wj?
m.tau
DgHJ
X|Sq
[]\\\\\\\
VW3D>
(Vml
Z<GV/
FN^9
iHP|
Oy|"
X*+
:x7 _>c
=@/-fI
pgc$
fiZV
`Wm_Z_
E R
IyWsn
un!%
_;Sm^aS\
.WVMVp:CP
8 @qq
FAf>"
QBV~
V6,P
N*_\
_(^@
{OJOW O
< UOq~
.Wz8i
TdLZ
@SXt
VZt%
qnBG.,
HrB^
e%6f
[BxXO
(JN'C
] L\
j0WSJ
5qJ.
_}F~W[V
#H.c NEOeT
>c>k
"VYc\l
l3~"
0b0"
KNZT
GGST
/_(A^[D{S
mqCwF
Y7a4'
D ^)F^
_ ]"Q
.\\\\
KVl
U![S
cd]<
W3PW.Y
o:pNL
N~$
^W@_7%[i
ZL]]B\RZ\]]LMdU\X^DULMhUZ\_DU^TU\Y^DDAYUTU\Y^DDAYTTT\_TAYAYVZ\]N
V(VUG
\w0U
45/|,.3;.=1|?=223(|>9|.)2|52|
J`px
bHOh
=/7\
i\1XH
3*`
0\e\a\
8 $^H`
TJvJ
Gn*
!a>X
X38%
LSI5
_}CqQ
I `ae( ]
8Fuiz
Sw/=
pgzJ&
7/#x
,Dat
./E[VNGY
\2\=\>\0\9\8\N
]a\ Q=\,
O_WFYW
K,1Y`4(
^J,Z3
,J(SS_
=(9bQV||||`
EN&
oYlV
=2809\,.3?9//
=9+`
3;$I@
R>:I
<W2[w
099,K j
P_\ ^
PQ\H
DS^~ZH
\2\=\>\0\9\8\o
OWVZ
0B,}
q 'wg
[H eA
yS|Z"
:Y (5U
)..92(\;9(
$WSX9
1Q@>F
TI(So
(m}n
ck Y'
?g38
/fQV.u*
31132
`}U"pgN
6Fq#
D~_
q]HHHt&0J
JTSLQ9fRuW^3=
_()$Uf[
uM[Z
:I8L
1DhL
R\QT
s<q~Y
>LWbP
x :K
]ezd
v*d,h
Fp4T
|T7ERW
<zP}[TxZP
s7M3]
rEl<
RTWu[
}IT@(o
1jn8
}:q&7
r p{
zO7]:8T
AOYM
$U ~>
Qel
T1smu2$
[ QY
Hw T.
*RS+(*j
,aXL|X
XRN5LTM
F uhe
b"S-Nm0
VS7[
U[EwM
@>NN
R $b$
DNF) U-
)=D]RtR
WV\yX
</[:
)25"_
B2RK
! {-
E#5<
h @F
PW ^
LZZhLZZ
n I
oD$
Sleep
:j$D
$x:m
c>QE
Wog
{ e
g(1=,I^?Qm;W6_35
MUC|
9((52;/bQV||`
|^O\
#W r 8^
W^aZ
"s ]
{VoZgG
mM_S
@ gO
Z>QZW
"{8S
_.V4 Z
r $!=
un\
(;RWoFWoVXhFXh\5L
vv;t
WmWGYWyXZ3
uja"
2W8^
Nmt
k(]]\4.\\\\
_W L
Yq$:_
\9Qq
G#*$
,\\\\
crt+
W[Pe5K
2#S 7l
#>ICx
\?>p
W_Rg
n/@7'
fQyd
Mx+^
W>ZW
LS7VOJNJ
P{S("
909;=(9o\
&73g
4r%Q
eW7B
_Gvp
yDTAYN
Wbbd3i
Zs ^
jkU[
-[g>
OpeO+764
r7 '
nW0Z
q ]jj
LWs2\
9=.?49.\
, w!
jBPG7v
00\ 203=8
^^nR{MMM-^
d/[D
[[T~SaX
bwCY~T
qxL\
909(9\
eVRm
pLk
\c\\\\\_\
GZvG@9Dh
r*uI
6o%{_
L5~1
z_=]
URWFNW
}q+7
%[ \
@Wz+
^#vV
z} ?
GW%RW
om3
ZLMQ3
[kfsm
MjT+9
ruxp
ezV\\
e&o_-Y
0o%wM
uPmTJS
{G |
\\X\(
7Z7g
X 5]G
_Wv|
#8(u
s(]l
k>%O
8"
Y).5@r
YS,_T
Z"cCm
0,d+C{
_Wp@W
IWZOW
[T\<]R\T\8]
_jp=o
&Q/>Q
\\X\C
"~6]
^!{M/
/A5!
W" o
%g{u
TSrPFRP
UW1XWVJ& X3SjUW
BU8[
ZCJy
eSx?
}dYD
\\X\p
q|(N
x^H\
X<P
WnX$#
S\oy
]n\]\
T<Eb
\\X\i
hgg${y!/$
W,!^_
PZ{WQZ_EQ<
k1r1
K8i~ G
nNDX
Z;GI
i\%$8
<~Dqp
g.d z
ATE
8+67
(=.( 492
LWC[
PW>v
&)`?
N Xz
wUwuwy
r5NV
sC #z
nD4[
?+1k3
Gc?f $
Gi&P
z,Z
92;p
S@Wv
m;Fu
Q_W~Y
EYA
%%|&+
u6EN
sMOo
;>~~#
V V9V
[&D_
<8pL
mW`_W
(%09\
6 W
4f$Ql
M\WYk^C'
A_@?
' @5M
BI[kkKL}LyL
Nr./%
VtmKZ3
UlZ2
sfa>}*vZ
tA'D
|x -
Xk\
:4s
hicO
^n\\\\\
0[1Z\}1[1Z\
x]c
xOFOMw
h Wz
N[X[4X|\O\
]k<~
396,'e
EMNeW
lM4a
;>g0
Qh1H
>>F
xRl-
2ZMO
5YWv_
!^p5
TW`[
.zA]U1
>]&}
d1wPW
[{{]
tH_
T:[V
[]2L
JH"5
46_5
y_ZM0_B XX|\M$X|\M(Y|\M
W;BZG
~Fjp
fQo(
,;|P
[T\x^
nB #}
|%0W
ql/.
S.E^
*`~wL
@JZCc3
9.152=(9bQV||||`
@[ m
=T)
;;7rz
qlZW
DLR#$0
u `%
0hP
VZiW
}{}G
_W*^%]
\5\0\9\ \9\.\/\5\3\2\\\\\l\r\l\r\l\r\l\\\h\U\]\
RZ W
^_*
YZUBZn
L#R&k
\_\\\X\\\
:XJE
_aF{W4\<W
d]JWj
44q_4
5 1.
sVs^
9_;s
:] G
]w1_9a^U
u2F
3fqk
)(43.by
3\b5ZZ
VNUet
>Gfc
F^l+I
J4PN]||
1q4%
ZW/p
< ]:
\ 5283+/ .52?5,=0\
GnD4
5XNJ
b:g&
c|x5
j Q+=
]E\S
4&^>
EvMX
)5I"Y
vMF|c
_W9UW
7Qe\
^MgZ
JWJIW~O
]5f<
UV^52
DIJ,
XZAIV&mu5TW
svU]ROq
f'uaK
o%Y'
Nf"=
Y0Uo~
2m.xc
de9I
9+ .3(9?(\0,:0
;j ;j
ywZ|
~5JP>
tnO8F
BgW[MYm
%,LM`
ZZ=]
TK@.
J4 3a
F]~&
_W.0
IWuR
J,t7
BP3=
"f@o
Xyuh=m
KMCVb
O <o
=1l
<[g
dY_@e\
^WPH5
.]9"u
j{^XQM
@J"#
Y !@ws
8VYSG|
&@7c
T #c
\3\8\9\
<;(A
&"Ssb>"
ZW &
G_)n
rU5
]9JW
U( ~
rXW=_S
=)Hi@FM
'6!a
FDX8y
CU'8
]9Jd
(=()/\8909(9:509\0,
UDa:?
Rk~[l
X.-2
?Eh"N
IqqRO
\;9(
i/cq
HWWX
m#QL
e!Tn5]*
[Z\{SuYZ\2JQXZ\
x^c\\
8j$)m
R9 M N9 J9 N9 _"
l#'l'
\WTK]
yL .;
l_c\
Ycmh
OEMF|w
v}-10
TW&XZ
JReRF]
r(%C
\ \/0
+^5]
S%PW
;/~R[
FAn+I
=!F).C7
EY\6
qC)6M_H
YZfWfGW
q8m,
oSRq
J d}
VLAw
LWnU
YU;my
G~1(
{\\\\
?xdolmdieiqo\\\
y1j(
W_w
GK1TEm
Y'yjT
$ {xR
x.6t
05,>3irZ
<#y<P<
svZX\
MN\ANZIzN
sodG
\9\/\/\=\;\9\
V4^ZEXL
TIMj
^V0}c4=6
:Qi$
yxjG
UW1KZ
)1>9.
w1
7GwQ
ArS,
\\\]\
Ebt/5I^t
l+#N9
nnO
HWHGO
.(+W
>^^'
Lryw`
_=]1ZX.G=]tr]_.g
~^9A
n\c\
-Y ~l
hO'|
$^-t
c+:uhE
W)wv
]i\2
1d[;
CEA,
X63U
%YL;]
LUWlTW
get_Name
\/NT
JPJ _OWOTwcMTJXsqTUMHL
$^<N_b8c
DEb:#
FjJd[
pTd%
H8l:
R5]%S
S-&_QQA
GKbmL
B}n5U
Y{lY
^NOq
p<m/dV3
uCq[
"VYc\
mSsZ
qy_9
X|)Mux
TSFZL
iW}^QU
ACN M
/CE2
3(=0
?'f|
:JKZHJ(
zWb[W {W
YRR-
XeA0j
y4e
lcbf
=ZMJ
*_\QDX\HD
Jqu"
@C v 8
%%CL S^
SW2Fc
khKI
K/gC1r
^l\X
UaO 4
J~1^
T0$v7VV
^YVy
Z}VE
p[HP
E t1
S<P^w
V&TZ
]M\&
VLO?O
]W!Y
P"gv%tAobV
dES
\a\V\
'S+IF
uo2%
qy^(
Exception
ijTj
-UC
W7E>
.3),
Zl5U"b
1VA7
{k#Y
NaRF
D~\&m9]~\
`oFp
#C*
2%6!I
][]i
kG7nw
0rp/
\\u\,\
USV}]\
YWk[Wu^W
vWtZZQZV|V
&8Yn
1\\\\
VWKQW
%\M%v
\_IH
1/m4
^T]]
VO N
519\
jYGY
d1xO
<ZDY[
TGZ
M_|\@Y|\N
n|]VO
R^ z2
g7v[
RT\_TRRM
2p(k{
n &U ~f
zk6!O
<KP~~[,V|%
AZ\~ [1Z\
$1{#I
e_OXX[
dZW<H
O^`u
32AtP0
#ME"
IOE
u@T|^TLTN
[[&Fn
VlXP
I+Nb0m
LBUrSO1Y=VS4
=+]<Im`
nzo6L
~a g
{WOhXOT`)
j\EF4,'
.!8Y
Vg2[-t
"\>#^
UVT3
yEQXM"WoSV
{Hp9@
3D_"
_slx'
]p+_
ZM"Zr@>
d}V^MY
6slu
![ee]]
C5'Qm.
so?K
jk =fth
=teYG,[M
*=50=>09b:=0/9`s
2*5.32192(\
G`><
Gg~og
$!6,
5lg x
U\q]\
DM.+
MNy&MYt
S}}I
VwMY
zWWNG
zuy_]
[ssB\
)&D\7
;L>+
4S ^
<NN\
V =;
(\\\\
f&'`(
Wv&z
C|R2~
YWIZ
aVWW
0I \
z%_W,H
GC|,
L@Z|L
CVMVb
.FOt
U[vW
21S
#B_x
\,3
3+203=8
SZYy
s_ =^
~% E
H)%':
P5v<
KQl3%
eh'f
>_;|
>'M%B^[jAo
VW [
jKyw
J~g
[\^@N
"_EHT
eFj`#
MMZ& /_Q
74%&
5NZ/
.z*:i+j
.7%a
o9:~4
Y:=n0
?^(^
gQ$`/N
"b{Yo
WtyYt~>O\o
(cW
SUV_Hq\
A,~y
91=28bQV||||`
YOiL
,lWCF
OrU=^!
]ZU5$5]
.?JT
QR~&c
]W _3|6
S(@/P
LO-z
H "I
43Hw
jWn[W
=E05
DO=AW
b}(h
DPTM
DCV_x
AMA
ksGM\8kZ
qst7
vVac
J{96z
P% /J
MzWg7
_MVm
(PTq[HW
Keb5%
03>\\\
9.u
jnn:eh
\'FM0:@Od
ch"A
BJ $
]_c\
7ysZ
94K4
T._B
Sx va
H-B{
puF
,-JC
?lW7_W
S^YRz
G!ZVw
[ v(
8U}_
a0a
8U}]
&M)^4
r<<K
R|"$
1L/<
`6!z
swk{
]V@S
=C{n
P]N{
c\\\\
RWj~W
Y\]DN
P:4
yi#Z
wxDe
uT|^NQZM
1!|N
8bQV||||||`
KWKGO
cf/ LZ
Q|`b
xb&j
<W)%
}N=UK
Iw.v
[&*n
to(I[
QO _G
WWU?
%9zeq
?(5*9 .3?9//\ =5(
v %F
[7}s
` sI
$'u$
=Emh
XWWD
%_wGXM
IZh49
E H}P)
aO'G
S]X3
XmNU
y e9
8RoA
xUZ6
^)m/+
/4a"
+ 9u
WwveM
T0nok
wNJV^
[=}z
)nXp
5>.=.%
.x-hJ
^\>E
\5]O\
U'[k4
o$erQ
tAr2E
! (k
q\p\
]_WeM
3/_b
l_FT
S"_W.U
!F'F
=\lz(A
5oZ]/S
}{[\
[3QYV
),N(B
^5w:
*%|l
p6'%\~_/
[G2'
x s%
Jx@*
^Z|^N5R@A^RX[]N
g_^{
acf5l
PUY[
ymoL
[M7M
>m^S
5&9ZX+/(.Z^
n\D\
XUjhT
BB\vZ
Yws
R_Z
\(\=\.\(\)\,\
+qd\K
m[)sp
\\X\
/TDr
(+-t
c=Rb
}z0'<
=((9.59/b(.)9`s
~^VH
5251)1
c<--p
|zr*
m3zs*[
+W8s
I$d^
{O,jW
^ZUY[][
VrmW:g
`>I.
\I6JtEZZ
te|w
u i=
929.
[NM
46R[Y
%!H
Ff\"B
7X_x
E: w
fP{hp
KSg]
@RT8R
__]M_
u?|@
=$0qo
% ]G
JpWFMUTU
RMNz+
))O5p
_W, VV\[Pw\
-hPp
"YO/L
Ql _M
ub.9sO
099,\
JX/[
JX/Y
TBRW'T
RS#Z:j=?k?km
!s q
*pWi$
nP}a
wTQ[
7ZocZ
,("
Y3Ml
zh?J'
g5>.
BA\2
JWIH+
_q9(
ytd2
O3nF
=-Kbg
W o/ei
Tv6k"1
U5T[
9/?.5,(3.\
^Pw\
a::z
ho7"
V2\\\
E6..5
VQa?F\
3jH
xrSW
Y0 [
=H}|
_whX@W
o^ n
v"E
~QqP@iy
\\ZtY\\Zt^\\Zv\\\OlT\~[\\T\\M
@Of<Z
XGk&:X3
Z"c 1
][4y-]4
cWnw
r=77
oWOL
U(u5y
G{:A
3yq
YM|W
MYv[jX
RY\^TRRY\^RRTX\]^RX\\N)[\_]N)RRY\]N%RZ\_]RR^Z\^N
HwFD
NJ<Pk
<ZPI|BPZZx
%/(91 589 9./5/(92?9b>
{>|
V^/\
PZmW
Y*\\\\\_\
YvZ Z
] 4[7l
QR0o>
pXbP
\\u\3\
(|Wh
Xg-mU
d,0 ?~W
A[8,u
j_*Z
'P>q
2*379\
W_-O=
lY<W6-
1CsC
9#[Q>)
X]KZ[M
MBzeh
s%Ik
\2\=\>\0\9\8\k\\\~
;9qp=
_R1p
a.!C{`T
!R o \
eDiF&
\[7vGb
V"V^+4ky*V.
pnD7N
Laz&
RYUJgo'
Eo%^%
Htv&
bETT[
:223
8\8+ =;9
HWQK
f6J23(Z
$P}b
)EqZ>
gUG1l
DnP&
,- `
t3to
_E$H[B>
MrB6
Tun\
;g f
UK 5L
YRcX.
%Ao&
fNaV[)
$;tG
03>=0\
Ph)ff)
Ab+I
zd;G\F.
5v!YGX
8s26=?
\%18
0j p
j%`
a>zbx~
3x&T
g >{
xG\U
LW`L
ZP9iyzP
]@g_
pP,@U
(.52;\3,
IIp.w
7cjE
:Fu^nhY
M^_t
ZWTwW>_WVQ
LW{YV
tv6%@L
vfZ3
]$m_+-^
!|^c\T
sdZ\
S@npX
w7 7
<Xi'
p3DWr
x{{K
E{u>Z*r
IRn,
]\^\^\^\^]^]
EEWB[
UD[Q^
;^UdY
`'Uc
>6(}
P>S|^
q}87
dYWwfK
?g*O
Yw%X,
+<WBzaq
^a\V\
e [jC
Lt jN
n\a\
SJ}[
ZU3-]
$_c\
B&mZ
f`>
V[_AN
RWJ^W
Z[ix
W$uW.
WPNW
Z\_RRTT[\^]RM
"ZWo
K+e)&
909;=(9>\`be
z|X$ R@+@
{Pg~
.{y^M,#y^
\: Z]A^C
t-]jh
TUW%XW{C
_GKNW
COu'
MjB S4
PMYdY
1i4S
-`_"
7Qx[
0=//9/
RGRX
woqi
mG)]
F^t Hqx
SG(V
}V._!/>
oN#\
IpDF9
ZKCL^\
4J"ce
SVYT
=F Sb
/HBP
<aLbLcL
O[|W8XW
m]9]
.9=(532
&s95k
C%_G
#{K|&
LG@<
H.: G
'vMjJYEzijl81MGfsQIbzx9Ks9YT30PDGCYkQaGY
\^]W]T\\
3]Xj
,S ^W\_
_TxnYA]PW
&=XMQ
FZT/i
xk{B
rwZ|
S]XE[
n!L{
g4nZ
}9=]
\5 U
]=mx
8999
W _Z\!S
PWJ_
P%PW
\\\\L\
|Z2\\\\\_\
Lp}r
ZWJPWoWW
7H~jOuL
97i0
;VS<_9m?
u/##
t[Qw
\Z\&
U_JmXZm
}ZUW1^UW1^U
S|na
lW I
FKQ-]Qm
\Z\)
^#~i
J ^'
*0W*
U\a\V\M\a\V\
f y*
a\\\\L\zL
\Z\9
@Ox[
vx\X\+L
[W+L
o{}<
1[;
PW#[?
\Z\
_cN_
SWgo
YQ}p
(s1yn
K t(
5LK!
b[Ut[Yt[]t
)sW.EW
]/ k
"5J%
\Z\f
.<99?
O)J:y
N_"u
-KU>
O^b|
]oD
\Z\h
q U&
^|)E
J[|
\Z\s
qdlI
Dor$
\Z\z
\Z\x
Fql *
\Z\B
\Z\C
Vn9U
yZ/W
OuLy
809b:=0/9`s
\Z\M
\Z\J
^OGQ
Vq
G'O\
$5( .3?9//\
\Z\^
@]@/A
FULt
^lu]s
r>=9lj9q9l=\\L
\,=x
LEX(
,DBED7
$U=y8
phoJ
mC8DD
^Dk{3
[%iT
HT7 C>#
se}^^
\8]_]L\
WGOWgQW
h<RZ
&MW H
S-Zs
VVZ]h
R\[U.` R\
-7"u
JON_W
r^]'
YyzP\<ZP
qb^
[LmB3
}Ec(
[WTT!V\
^[$
?J\XW@c\a3
uXZNW
ODzp(
WPVTBI^
_yvFIt
l_-v
^x?|
KOtw
Foe7
rb-!GW
]HKyH~
Op=r
mu?\=K
MWjLZ
d(uzn
)<X:
M>K
| T
^tO8[
fNxn=
"LYD
os]>
\5\/\=\>\0\9\
\mhGvgZZW
GHD!a
O"+$
khsz:*
Bv/S0_
5: M
-)=0/\
Twu]W
tO N6
|^I\h
V1ss
Q)^OSMRMSJMS
i\_6
KQl2
amU)
TW`[WfYR0
_KzS
1|4kd|
_\\ ^\\
P1i$
MlFt
<SJY
]IKT
5]nl\
MHEMHE
{GIo>
JMM0
: @n:
:9>[
rXWIZW
, ni
^d?>
y[\\
LhR[
%kY1i:+
}x<PL
&Q pO
5ikY
$0p$Z
#\\^\\\\\\\\\\\]\V\\\\\^\\\\\\\\\\\]\QX\\\\]\\\\\\\\\\\\\
[\^NiRN
VnW{DWas
_W`[WuXWO[
\v\O]\]r\_\$J
]a\zQ
X>o.
]dl
,2?^+
6 `o
] *i
XV]M
0dm
XV]N
WVrv
[/$}
Z)2723+2N
A;~\w
N)ZW
lN5l_"
@Kd%
s7;j
;/^eN
^OF^
$h qa
im(
`KQ1Eg
L\[OW^[HQ
\a\^T
??9//\>
,W@[W
l^ZS
0WV
_[T|CkQ
h.I@W]
AD`;a
c+I /
5jb!6
_WrN
J]KN#%4
` ss
> 1*
~yJW
UWcZWs_W
mwmR
c9?z
W -]
[6sr
[JkC
^j\
WETT
=yW$Q
nt=}ZN
QS>AVz
l-b>
:cV
Y\]^N
XKuH
'=:M
PZ0H^F71!
H9[d\
W)KW
13h
]=^a\^TE^3
;T@oJmaB
A JQ
|Sy,
J"rX
V+5_W
) H\
XK.b
GQA6
9((52;/bQV||||||`
twk^
,)4[
Y,f&
$ )Km&5
bnfds%E ?
G>'W
+@WZ
+aMAt
voU^Zd
W'Un\
YXX/K
\\\\\\\\\\\\\\]\]\\\l\\
`A_]
T\l]
PZ~W
KM^<
Oj"!EMl
+3'qpx
,R< )
!xp'
K !N
~Il/v\ZwG.@
.Wlp
uDn9O
<OW1
MICW
MICV
MICU
WyX@[H
MICS
MICR
MICQ
MICP
T]_-^
T 4#
K%3
+L#L
W!Pj
]8&`=
?f XgF
zNFV
X]lZFDD\NRDZ\
55| Re
nba*
V"'8
]:Rj\\t
x1rYnp
YY^
9? /
]m[.
UuDZ$E^
,[br
s`+A
d=dF
#O-S
5_pb\
>SU_
Y3ktU3
$9?bQV||||||`
mG#$F
(Yh*
"WWUxD
\\Z\
^^N9^^UTAYT^HM
/TZU
|^Z^^ZRXZN
-F/'
(N<K/#LZ
%YJg<;
-,DUn
\I,[
TWd[
ObnaL
qQe_
>Hz/0
-UWYYWKDW+V
X\\=_\\+]\\q_\\ Y\\Y\\\
ITM^
`s:1
5YWrM
OKXaEO
^W~M
MidE
^ XC
,SYV
Iq\W C
_\T\\\\\\\\\\\\\]\
UKMz
n,,jx
[Cn6/
A%]$f
[W=VW
[T\|^
&R_o
ei!,UO
D V_
>_qC
rk5z
JZ_"
_rkZ_
pws'\
\/DRD
Buu'
[qUNySYSY[[SYSYSYSYSYSYTTTSY[TTUUAUAUAUTTSYUTSYUTUTTTTSYUTSY[TTUY\]S]DY\]DS]T|^NIRANQZ|^@@A@X|]^@Y|]]N}X|]]^X|]]@X|\Ny_|\RX|]_TO[VN
f1L9
8x(?
=} I
I ^Jk
{t`e
&5-M#
HOWAY
>ZW3}
Y*t:
VJS/
9/5&9\
@]`<O
\ ]2V
fvD<xL
^WfRZ;
\5\8\8\9\2\Z\\\B
S&c:g
LJCQ
2(9.2\
DS/A
Ak5-
KOYO4W.
{c&0
U{<ZB
^HXT
U*L Y^ 9_ LWfY
)H_s
\WO\\\\
< WS
7G;u
TV-[
JW&T
<Z *i*
\\}] \p]_]\\
'qC:
Qx&G
)M/T
MHCPMHCP
x;+= |
;?MM
bg/*
JOJMF|Y
"WE^.
[W _
?n`!P
w$=x
p D$S
Xg.%
<5z*
$'?S
'0W k1
qc91v
^W2SlSmXO
^A@XV]A@Y|\AO\N[ZIN
kW H
Ny.]
[LkR&]9
S@EZZWx^
Zp^I
ie"N
9>[
zqcX
SASR
gv!KTsR
ZdX-iNIgZ
dZXN q
>v_mam
d%FS
3Y6q8
VzJZ
NnUu
vj80N
PVWAqM9
G'zu
Z\]NANaY\]]NAT\^N
1*$LU&
~RWy4JR
UWNPW
"45ep
* '
sX*v
\\\\L\Z T_c\
UWy_WZNWRH
z/7W
xbEr}
<cr3
*v8D
5t*Q
O(O=
WHIW
hF+[[
qvqHvJB
{@&UF
rs z3"
ulEp
nJ`4
Czrg
get_EntryPoint
"?HEnD
'eQ1T
k++R
9$(]Y
OWOL
IXKRj:i
ImZ*n
w[MUCP
pHYs
_"Hrk3
HC^RK
#x2v8
bGYx(
ZOX.
5>j;W_
LFnf
?WN_W
~eA{
:KZ_
a<Y9
};18
~Yvr
nRYz
\0\9\*\=\(\9\8\ \.\3\?\9\/\/\-
6oL1ym
=):y
\}Tmlj
eCLJ
Go\
f`L0
nZC.
oDy:"7&
_tEAVTV88M]Kt
U=\(
Ccb4
MgF3
Z\3-
ENV~w
?t^W
\Q:MHW
eb.^'
uIq\$
)(43.~bQV||||`
^>Gu
dwu
@WdT
rmn/
Wr=E
?R["ZP
{LVH
QZ\{U
_V^Q^3
E D"hO
yn+"
ZwR^eV
^\2(h
~#55
NeB%y
3792a>kk=i?ijmeoh9ldeI]
MxvXE
z$hk
RT\]M
RT\]N
P_Yk
[lMlN5lJ5&Q
k5Ok
1!9
_;-@
;np&|
#X^yA
_MaN
Km|.
Q%&]Km
<v.Z
-R\4*VpS,YW
OM]X
|C~G
x4f$g;
O@Wi
@W P
eTy[BV
qV\O
9[`
kxS']
I<jWBj
MNZZW
yzd:
^>G9
yzd?
,v/P
Lxh0
5628=9
WKXW
-%8X
o^4b
Id9W\
XDVVO
}P\S3
D@W0
g[WpPW`@
qj>mk
<qt a
a2`(
Tu.Z
.Af
^TGFS&
zKm]
3=,Wk-
:G\j
}<:p
5 (_
)yVD
`O n
}O?NO
?5I~
1=;9
[D>?+
KRf7'd
3Kh*,
M];[
UW!K
\3\,\%\.\5\;\4\(\\\|\\\`\U\]\
dO5JW
]W%b
K!22 ;
]]P"
FFH0/I
K:ug
l{u.v
[[Uw
43Ku
%abH
QEvm
T-]][po
^3Dn
ESP W
c85D
WDEDV_T\
mqZJ
X Oq
Y]Jt
1%R =
$5(\3,
Uy\\
,<$S
U]]
KRd9Q
T`ca
=/( .5(9\=\5\*=0)9\2)1>%(9/\
|6v2
3062@9
]9k.
Xy>$`
WW|W
r$@I
^ M
FW$AW
=//+3.8
U@F[U^N
Vl\S
E gn
p8'P&imqXS
& } 5
<Sz,
RMoj>
6D,=R
z ^fKq
iMm5
T12W
T.IW
[)/>
oT^K
%l6YZ
q?pl
feH9*
^T@@ZZ_
VT 9,
wyx|
^.-; -
SX_:
#z+9
$VVRj[A
y`s /9.
iG^Gs
)mc\>
AZ\><
:W4TW
m|,_
EC`*
@Z\f
Y]!E4X
FYULJS.[
3.1=(\
^7E^
\2=19\
^ d[;uAH.>
a*c&
A5@Kld
9MHL
\I\
8m
L^U[
$]
'8:
.kSb
wyx7
yz r
Ksa uY1
@X3rhO
;QhC
AYT[\]N
iC^'sr
/0>\
a[\\
\:DxT+
73-I
LX 59W
CcG?
x~v
e+5v
[ksX
h(K0\
* fR
ZQKJHCR. I
< %
FNW*D
(Nb{
|\BR[
PO S
2(K$
C=m9
Z/u.Z^#*
U_j=]
'Q2m
EZ&W&
!IZ"
xZxIy
^GYn
iIp'Ov
+OG=P?
z7"\
% $@
]TAYN
__TBXT][Luv[
WWTUW
. N& N
VC^0
l}d<
?qW
k $k
(=28=.8
_m)XWy_
'oD9
k8Gn^
i_\)DX\'D
gD
uO7{
3Mc5^[Us}]=
%`a
[Z]M^t
ShdW7x
Xs1t
HMH@J\,
XV]N<Z|^]RN
Z -1P]# 4
n twO
)00% )=05:598
P.9V
/[RnmI
]WBA
UWjVa
L ]W
y!>b
<u$N3
6<[UvVP
22go
G+s1J
FWlZW
\]\0\]\\\
(Lk}]W
'&X?
NR-Q
[TRO U
RRUr
o3X 9Y
1Z!vR
.n'E
E+yh!
?*|)8
( ~Gex
{Tp?
*92(\8+
Z,xt
qd)^G
\\]hWE_
qlmF
6ab1
"||[
Z YWQ_S
@nLl
sWJX
8R2
$=gF
< dA l
s[&l
PW|V
H'sL
POmwWT^WvJWCY
*cn`
J[_N\
P\Y]N
P\W|<]\
S^7f
9?).5(%r
15ck
32(52)9
X_jRF
[*ZU[ZU
C_.@_b
JW9E
(=(9\ .3(9?(\
E$Q_
(l._
U<u^
(&{2'G
24._
GTQ!
9?).5(%\
8Q Q
5?.3/3:(r 52onVWnFWn~Wn\
Kx:o
x:w!Z
KSN6
\)6z
V_Hg
;Et<
{'wp
A|>l
$%K&
HMEOIw
[Z\+
gOGj
\*In\]\(
/u`s
HGoN
\9\/\?\.\5\,\(\5\3\2\\\\\|\\\l\T\]\
S/OVI
tW1V
_4N_Dl
~PD
U^pW
jZo&
(AKV
[t[inCki
Q}U-:i
XW>^
2{r/
G FS]y\k
G*mOlD0"B|
GW>T
5908
UJ9
2tXW
ESWO
K ^
VGh7
wn#w
[[4'G)
\X=]
Y ^;
RHqJ1UY
_^cui
wg c
vl;!
P,@/
CW6Y
ZZ)nl
'IIb!
lljehj
lPS7WVP
%/(91r
f( K P
_JP^
iffH3
A*p+v
qdMR
PW|S[r
X +_
se49
G6y
TQ&v.*
S[WM_
"YN_
\KR{^V
ey-
\[syV^rV[
[m|[D
HD3
U@w63
V_ V_
^B W
7p*@ dU
ZN.Z
'S#n
iPMPK3<
91=28b(.)9`s
eQ$p
#& J2g
1ldPBxmwRhiibmHbozJq7skKJyzu
HZBci
Y+\\\\\_\
8/'>
<lh p
nAs{
+aBl\
Bp{::
9!4Jt
Z_GsI!]
LMj ^
bVA?
%,=//
_SDr=HW
,ZZR
X8Va
\\\0
/HW+SWN^
n\H\
^W>LW
%6(g
&;?"S?<
\\\B
X)PV
\\\F
f@?fA
\\\\
M /<
(."?;W?
C4~8
Mvj2qQ
>&#.+
O!^Mp
gIaf
Wkdd%
\F:Vp
#CIZ
3792a>kk=i?ijmeoh9lde
\T\8
!=93w
t: J
?k#YV
ZW%TdL
^fW_
'gvp
{//l
}]A)
3Q]p
C:KN
W ib
sv#q
^W|U
YX|\A_Y|]RA_Y|\N
\L_n\]\
<rw-
%o7
u @c
6Q&v
|\LTM
$uv"
4 PJ
P 4Wt_=
k4 e
CK|0
#IRq+
^_V]Y
eRxR*\
Foj4
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
SMTdW
!0z|
OqFX
h _{s
M_EMiDvM`Z
4 'I
oyF~
-Po,S}o
HNb`
$ L3i
aKhm
t1EVof
pScD
hC)
iSs^i~
\\\\L\N/
xw5:
K".6
\ 5.()=0 .3(9?(\79.290onr800\
VN
9 A*
tYOG ?i
1X)
@GR_
y~+o
D<<O
3 \^
NZ ^e
oU=9
WE$S
^O|d
A'h ;+v
c{a~
MDl[M
s:z_
\e\_
[J03
_rj|<M
RW;L
J,H*
0c*6
SW#x
T.#SJ
ZsWY_W
qt[usT3
r1~
1u]WMZ
2(9.=?(5*9
`ogB
X: 0sRPU\S
9 Ej
d[r\
GOy>
{;^e
'/0\
MLi8E@F0~
qt|oNM
COvwV5
\.9/\
yuM[w
xRL\[@@N-RA
c0<B@
e5e *
llMm
VPVVpJ
0\8M].\
h>\.
ZVXJ[[
%,9bQV||||||`
ZO Y
5>.=.%r 3.(=>09
?WFd
Cb1_
IAt'
`\\\\L\
KPVVNp caz
ti?q
JW7hW
C-k
$PG`l@~t-6
KR)3N
X*D-
1dfgQ%
KgY>
kw]GlpD[
!1. h
0Pt{
kP?G
kW
IND[
\,e^
AddRange
5.9?(3.%\
[JU;
`3e$
JZP[^
X1U/ -
\hI
Ivv%]
WNZqx
+z\7M\rO
%(9/ .5((92\191?1,\1/*?.(r800\>m\>n\?3)2(\
cVWcJW
@fb8J
WpXL
es&
(=.( .3?9//\,.?\
}L8#{
6 -\s
^SbH-R
IQ]ULU
&-}{
BI9Z
\SMQ%[W
@,'J
qZse^t
1Lr"
Fl[yw@
Uea'
^\zKQ-]Q~K
[PdgA
yWeD
_'pk
Y#F0m
sb^=
8MU
lq8looih
xI(@w;
#vug[
td{VL
ptxY
C<9Va
WsWW3N
I]Jm`
EEM$$T
IWsM
R ]
E#8.
AV\ ?`
$/1x
t(c/
_AR.U
UVXl\|S
4\zw
hU3F
uo#S"
W?dli:ee>qkll9qhn=hqe\\\
h\)[
(%09\/9(
j%d~
AlWl
5289.
*B5.
\\^\]\_\]\X\]\Y\]\Z\Y\[\Y\T\[\U\]\V\]\W\]\Q\P\R\P\S\P\L\P\M\P\N\P\O\P\H\P\I\P\J\P\K\P\D\P\E\P\F\P\G\P\@\P\A\P\B\P\C\P\|\P\}\P\~\P\
Fx[@
1OW`N
]r4g
|1389rQQVxNM
]2zMzMzS,
N}Fn
o4^=[
CrT3
&8| -
bXRR_^
9,0=?9\
Q09*
}\ ,
Wt hV(
1~%r}
HMKXO
\_fvk
KYXB)
k+z\7M\rO
#PU.].
~^8I
tCWxy
ZXvFZ
T)xEf
N ? +,
h.yb
mdais
].mUJ
[Vo1
U1[
[s0Q!
]O-VMWm
Oo @
+xx}(
z 1V
(Q/ ]&3+
_FdZ#
JV\]\
8(0a=
Lwgr
%g-Ws
[WW:~
Da\V\]\X+\\\\
UXBgi9
gR.f
^W_X
!IV
3*9\
+0O +
/#Cx+;
`)1_Z
TU^RL
R)0WJ
R\-dJR
X7Sx
~}(oK
hTW^y
| %s3
h(D+
Z|_@RR@y[
_wTNX
FMI6
_ObvW x
P0j(
+{3^=
h_t
Gn=Y
M]S)
wxWQy
H /4
IwxK
NPWo_WVx
D;AM
5XkX
4(3+
Y/ew
]M;r
P__eR
P ;3-
"^l=
9:er
";#
GM[D
"ZS
Oz^i
V_Su
iMCH:
*&|
fG)&
R.l)
gW^XW
DEY)
JOdAVL
A?l
_@3vC
@]uK
31,=(5>505(%
_u\x
hLO6
-X[vz
v5s3
YV]M
49DSk
\1AU
i[kdV
[OB]
pVH.
pggF`
l]_^
Ism"5
!XM\
]\tV
(O"L
<BDt'
K Qz%
)z<c
/G{\
>"QK}
'dd,::ZN
=:9 )5?7
2DWUZ
X [
gd+3
HWe^
Kj<U
KW*PZ
Z,>D
]jP9_ |
-a5[
M_#
:thf
:V_0
*OKMZ-
@4O*
Oj^}
tO
P]OTMT.hP
m\%^ZN
@ge+
]AUHB
n teO
9.*5?9/\`
|Gd
T z?
iZv\
^DApC0^
ETP*
$Uim
329\
lw6
l9vJ
69Xl
_WMJ
{k='
F_{6K
vtq#
y<fx
I\JY
u0,'
OSbN
U F
W>/[
zwGg
^AMq
_;HmF
};hk
^Hcv
fWauW
9=89.\8/(\09*90\?31,.9//5>09\/5&9
$l]*'
32(9$(a~
DeA;#
88.9//\8+
* 7U
^HO:?Zf
To_5]|\\
<_)_
hIQN9
lkcs
_VOUMUMXB
DlqXi
c/V@
Q^=M^
fS1k*E
goa|
!hxOVw
&`7c,
G`cM
i- [
6QW)bG
2.?@
Y0YJ
))|{
EF^@
\Mqz5
879%
%F<^
\\\\\\\
X9Ui}6
RWISW
:"+1
\\\\\\V
o$:oZ
W\<<
pr8/5h[
u3x/
IJBnb
TWMC
FQrr*^
=[lY
rG]_\
PW\I{
wo^
get_Message
kZT]_
_\`^\\\\\\\\\\`^h\\\ \
#iI{
<+2a
M|VAY:[P
~;,7
eJKx
>6 ;
RqkJ
F[og
#-x%
ODMDME
T# L
?V/VR
:435
Y_<RJR,[
fgPj|
]C w-1j
38)09\;9(
|CEw
},eL
G|q4
[}q
v 8L
k!@w$?
Y @
J&Z
T E~n
]Z1%
\)\1\,\^\\\F
yt&b
B^xnY
6;.
\\\\\\\\
s@sa4
W GW
=[Vi
:nKH
X]Itq
]DS|_UY9t[W
X7_d
bnp k
V]P^
7QN>h
]|!~\
i#D$
389\89>);
ugQ;mr|6
Xc3Y
\'h\&
"sZ{
@=F@
~%"n
`GIh
PWp^W<^W1eW
0_ZM\
}RK
W]XW
_M\$
s\z~
[n%SeRzP
\XP@z
#`TE
$5/(/\
_H>s
PTTZ
$mh?
i a3
~SL]
3--Z
@7 B<%
?y*Kl
\ZWC h
6Qxx?%v6
(7]\
GYI/
eWSZ
%0BK
[]\\\\\\\\\
[Ub[
BSJB
y,12
QwOQ
5=;23/(
o_?>
zB:%
XZTZRNW
|Wfpw
a^MMML
J]b:5iYTd?
~+u~
tIYZ
`)vn
R6 t
IsqL
uZ[39GRP
GW<^
P71v
8C>A
?_Sa
u@Z|]UN
JF`.E
t6t:j
T) _W
\EYw
m@my8
qx[G
9onqnk8el?j=dlm9\o=ld>nh>qhm8:q\\\
./Z
[T\8^
<[ ]
W5Y]M
QjlS
x^?w
qveyv'
@+/g
{YJ8%
0V.N@
qF`5
zIxM
TKC!L
z?}n 6
^KDD|EDFLGL@LALB<CD|L}L
(M?JE
"\m I
wCm#
\^?
|\'iXX2!
I}y.
%ZpN
269?(\
(}B
\2\6\9\?\(\5\3\2\
9$(\;9(
s/T
;{i6
$F.
p 6b
H;cI^
nVV:^'
h ?Cs
zd4#!A
8\*k7k
//91>0%V"
=$\ .5(9\
$VKv
BPWUK
w$kt
~/!m
1_8d
_W:[
X[/iY/1r
Nu5@
\\\\L\83<Xc\
UVWnOV
JrZZ
TnKI9
\\^\
|EEq
Bkd:1
$:D1c
q=VL\
0\J\
=<;s
jFA^"R
2n 1
:6LU
|V`5n
+I^nr
TJ[O
FL5|w
{GT1&`
+[Z\
II Hd
hK]8(
6shc.
qcXkv
GQXZ\
!6K
.=+S
ccOR`8
eRQ)*M
C/_8
[T\p^
M_^'
.si0
uCD|
_kE]w
2HvK
MHJMHJ
xZt-
HzC:
@Xtp[
!DO>
#q7o
Ck~22
ZX^RX!c
K@`@E
~{T |
d&'J
( "C
SLXW
T]cD.
lSr?c
FOcTGh_7)YW
tiRO
]L\Q
w\\q\G\c\Y\L\
u@U|^^LM4N
<Y6e
HIj#'KMV
]X2o
Jovb
I.=V
#;Ck
O '6
<9JRfM
#nE\n\\^]^]]P:5092=19r9$9]U&$:(%%(.9^\]S
TJJ}.zj
G/ph
D ]DY
$)QW
JEee%
pZ2sPW
c{V4i
iiQ
[(.3%
VTNI
8k1{
prB6
RVSIMQ
b#Eip
v\%~
ffG `O`f
C[[KM
3.1=(
\\\\
f;f c)r_g^
9=8\
5K6m
B_m!fb
?)x=+
\\]N8
{WAH
x[%q
_<Gj
GcMxY
Azl=
V^I_
[%^a\`]
Z^-_
NVT~V[W
ioo-
Ea9
d]+
Hab5a
qfX'J
[wd*9
'dO7PW
o,bm
]_?MX
\boN
~Z2ED$*3
(6{T
=9D+
x )m
q--&
[RNjP
=/7b^]^]\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\]\L\\\D\\
Cb3>
91[)j
8Xay
w|UMW_
`9Ox
5[h
z\^Sj2
CEn"a
MHCQMHCQ
& _c\
[Ej3
R\ZU.
3.&
)1>9. =.=19(9./\
t` x|
MHCWMHCW
SDDqJ2
z)@6
;k7`t
1|9>);;9.
@'d$
]:q%D
WyMy
\5\;\4\(\/\\\\\L
DT['
foGmD$
;3X'
%PJ@
yd7(
{W]{\
RRY\]RARZ\^RRARR\Z^AYRRLM
Sv3;
Cs/]
ZEZYS UQO)O
+yc"f
ISd
]Y\^\
D4f_
?Dy
gUpC
vW-XW
B]V<
}I8`
yJH:
ian
TH\m)
4I_"
$5( .3?9//\;9(
;Zb$
C^Zv^/[
-^\V
]Z\x
Xz7!M
(.9=1 .5(9.\
Mp_[
=X2%^W
_BROXbZ
{@GV)mi
[V==]
v[Vi
zIz*K
471u
xUJ3W
= C}
WQ!0
05*9\;9(
+> tS
_4!]}l
!6f7qx
{/}-
jX5m
EWZ^
*/O^
W9M(=5
\WG_
p|1/?3.05>p| 9./532ahrlrlrlp|
TKFVTK
OBrD2
-,0n
wOjB
;98z0
DQpM
yW][XS
yekiYo?e
^IXX }\Ol
$?9,(532\;9(
RjY~I
]\.`
:\v.
[Z;eX:
4D{P
]T[|
+k(I
".n^
z 66U+%[j
,MCD
"ZJ%
ZBZG
!e!?.
-^dU
9QeEw
9.475,
PRW7
F8VC
269?(532
DWjR
[WeI
l#ATyY
mC3R
|]b!
o.`o
~r;^
&/[@
]LXi
dy76gz
AjM[
_~bp
avV>
L]U NK
CO )"/
1Z >
\\|\\\^\\X\\\\\\\X\\\\\\\\\X\\X\\\\\\^\
eYc\H
v Nbp
^J"#
NWaU
-B_"
Dkg+
0Yy:
[6NX'
Rqa7
$OYH
\.\;\/\
X1IJ
`+-^
y<s:
Z1-^WCJZTGHT
:Izu
G@}p
jE? 8F
Z[XTD@UE[OTTTTUAYATAYTTTUAYUUUTTUD[UIN
_ ].BZ^
%/(91 589 9./5/(92?9\,58\,.3?\
l\y.^l>
O`/`/
V\ LS"F
529\ =5(
Q34^
4c\k
~\;N
]\F \.\3\?\9\/\/\
AYAYUUL]^]LAB\T_V]YP[YIN
NtD
W^W9X
n:-P
}a3Hij
[Ft`
<IDu
{x:K
|I)!;6
\W]L\
>|Asj
(_Q\&
o=Wx
\\dy[
RGWtE;
%_G}
iX/S
PE_u
:j2/:9X\[njS$i[(iF
@m\z5
^pLJW
6Iwn
}Adx0
\`c;
w3,@
i 5N
VNk{
NZ@|b
2[WJ_
E F4
%$J=g
a}8;
)FnW
XitW
_lTCaSJRQE]
[T\Z\[T
/3%x
[WD|
g6N{g
jR ZVpW
}y=n*E:F
} DS
RS_CeI>
T`oE
XhQ%
Se6Q
=(9\:5092=19\
?sj
(|%
W#S23aS
)^M[
SSa_.D
JIw)'
fU_E
&] '
JONMF|JY
_W-zZ
PWSWW{W5
XR.(
l2\s
dTY
bBJ{.
;8hJ
WKK
@]i
KUR :
M[0P`?
SPO{
}Z~WQM
eX_O
^zGBUrS;VZ1
RBsn
)]{v
-5_"
7?"p
.60.C
HX W
JYVS3
{iAd
oBb
^Hs[D
h3#=
qNQMm[|_
&[ `
'k|
uk|e
`]V}W
@]u
nvlI
9[,>
L<-$
$ 5
+W -^W CW
/8- ?
G~T"
|wJXl
V-\UW
)}rKFndG
^!ZXr[VRf[
w(8}
]JEW
G,;R
$>v,
#`V|Xt
9//=;9
MF|a_?S
mlYmZ
[/u[
]O\__
C\>1EK
dT'aX
QLb;^
;7 "
PS96*
Q`)
V^J_
o/Y<
Y0n8
WSWUGeA)9
]?\yD7\
~dF;
QXF\
E^D]XX
`b` um
dl ?{/Dz
'_m-^C
L?k$
qH9fN4
qH.gS
N@x A
-{"ln
=Y %
4et
Obaq
WRHJ
SOuE/
Y|^RRR[|^TRM
1qS 3:
JIut!Q
[UpOQe;
WY#T
oJU.9
J@o!
Gf"08
\|W$1d
~V_<V_
BCmx
-v_"
_yTM
!".B
58892b:=0/9`s
aAE ksjq
^WeS
_0,W
@[?M
Sb R(N~
h3c:)
5f.O
F]Ir
Xg7jR
iWJin-]
_=dV
l_TCqY
r @is
String
;b q
LDLUX\\N
U2f/k
3jAAu
]IT\[A
JM,)WdRpP
o^X`b
rWkS
6d0>
JPOX
u{@^
5/=>09
h';Uy
]]\46\\\\
RSOKY5
aP<`@|
9nm\
+PL9
e\&x
P%'
Xx}J.
:*b,
X\\PY\\
H+E_
[^,V
D8GC
m?SiU
oMXQT
cxO8|
UMWMY oZTA{VMDK
DM|mQ
XYUS
PZpYt
_WLX]
'Q[U
:) 9;t
C1Q FGj
s^7~$?O
r~_Z0_V0X
PWx_
G44T
_|\]X]\\\J]\M
Fj2K
}b J
["'=
&lpOR
KCje
y<e"
"ChIKR
j[ *
nV^
<C2D=|K,v>C&D?|[
t:>#
t5&}
pc#UXWU
2|F
T/
wCS|
K&sh
Jy\x
Q2o0
c/.R
+U/m
l:GB
Z3WWI
RDT5_D=ZW
5UTj5
YwUJ
'[sZy
__G`\
RWwI
W|_=]N
CQJF
:Tgg"?
jWT|SV|ZP
[1hUkKv^5]K
ut\o
P[ m
\]]T^\
tV*-
bVX|
Ua0?
U Rm
Kb]?
[x{`/
_ENEw
Y\\W\
IS#d
YJ]^
M6ZH7CxD0|
M=Bu
2q&k
y-RE EV^Y
R_qRZP?3*9.98
Q\1[2%
Yn~h
D,4%n
9uD?
) \9
Fyr9
F~^l
0XWBY
6>Xj79
yZJ6[
M|5B
W@YT
t\JVn
79!.
}Z?Z
hS.1
F]$I|M ]M-t
IDJIt
peV_
Hsw%
V>3U
2=>098bQV||||||` /9.
CUe6J RQ[V
WGvYW
DWS6_
TQ]]
~!cP
R tf
kS{r
_[OH_T
Yc\$
Yy\ d
KWh^
!r`'
$@oPKu
HN@Ui
WsXu^WoV
eoRS
tZ-\\\\\_\
Cd_(
DH{ >s
F nQ
UVQ
Z0)N3M]]Y1@
&^c\
G;\/
F[LO
zVKW
!uPI
"YWCSW
!,VL8^
lv
N,X[
?(532/bQV`s
/i]ZP"
(.52;\;9(
IW7u
5`|U
< Ux
\e[k?i?>q:m
?3,Vp
%(9/\
B\x}
3Dz_
+=r7w
L>J@~
}D]y]n]
TO1_
<?wC,
;Il&
,05(\;9(
QXGId
I#)yp
T\?
>AmT0
X[k
@sv>
xC8V
L'+j
TMiM"yf?
\5\0\9\
aLG']
1o.K
M_P$
rLHa04
r351s
gq%g<
Q'IhwL8
|^}_
$?9,(532
I|Nn
j1W7
[l^
M E~F
"I*U
#{W"@
^]@VY
Js[%*C;(
Object
#B]t
NW'Z
6,0n nW
n!I=Z
\PWcb
J9 P$
n6VX
+y^0T[
>Oc/ZIZR
r<e<8E
gUop
USFwnG7
((.5>)(9/\
_\\WX\\?^\\r_\\
m R%
[l 6
JWuE
z/W s
,3U`?E
\u''
.x1CuD2|WYZx3
_0Y,u
+a.VaZ
+ZO?u\
K) .
ZWRX
]U{ZZ
dO]B
tk'Rd
XVpX
)AWiIO
Nub\
5(O%
c-y<
tU>6
M|MC
m_OY^^
U?DE)
FKVd$%
q]T@
I=dG
#O2\CA
YW)EW
uu1<
kR)5/WWX
[soX
Z:fb
{WtUW&TW;O
[IV_G
W=S[u
-q_"
`zG
*ItSM
by|;
[JYB
:_Ns
A;?
XqdpK.N
yzMF|u
o4aGa
:WIPW
Y1ZSN^
W{ZW
LO8m[5y
0f"q
OQgE
|aK!
s)p;
nmBMt0E
Dz8n
bkB+
y]3v
AiZ
Hnl-
KQe\a\|Qe\
J^B4
Z|]ARA_X|\NIZ|\AN
<&Tl
e P6
Prl>U
C3xW
"&_I,
'So*
RRUYV]M
yTP{/
oob#W
_]fW
o!^o
|@elw
874&x
1C{W
c9h?
_W$_
T/&Ci
c'Fz
9"uy
=,=?
5&9\0,
vHWkt
KR1~
/rPF
_/e\
>V&u5
>^ =
=Q s
`L{^ nCF
vr.O
K} X
CompilationRelaxationsAttribute
NrT$Y
s=r'k
iDkGs|
ACl 5
[W~GW
zsM+5
)iRJ
L )+
^AYX[^DU
,=.(192(
e=eO
C>/
5/,0=%
bD@>
|{.Od
]ZZJ
1oQB[h
h b
N!UP[ZN
v3EY
Gso
JY_^
RWR_
63%(PE
_NE|
~IIPG
[$Fo1W
^[d!
AW)U^WsY
2nC--)
m-E{
_X.
3089. =(4\
o2pl
Mku=
3U3K:N{V
xWC^
r RiO
iu.j
b")H
[\]N
LKSdY
cWfw
:%]Z
>d(;:tb
MVMLyF
ERnPWg
u@U|Y^DDUULUS|[N
F[
\\\\L\$0yXc\
T t]
[Ko^
m- e
Z Jd
_t%~ZO?6S
kAY
L'Kl|
NM_V
-<Uj
d Nh
.=LO
W`}z7
]d ^8?jqddolq=><5^
W$]_WbC
Cx^<
rEg|
V^__Qd
m]W|E
[sNySYSY[[SYUSYSYSYSYSYTTTSY[TTUUAUAUAUTTSYUTSYUTUTTTTSYUTSY[TTDDUY[^N
L e
lb3
^W[D
Z_}Y
I{E_VKN]G
RseC
e;4f
XU\X
9/[!
F
NKCOL
.`{C
YAEt:5
> fDQ
System.Threading
GOH.?
A&l 1#
,dee#77
)2b>
5v, s
1"=-
9[Wv~W
L}lV9`*Q
v2C
UO I
Y898
RW\X]N
ZW}G
^\\\\\\\\\\\\\\\\\\\
E yu0
5]Xc\D
=:>s
V@[;o
FZP,
"~<*
Y1e0Y
v O~
V:Sp[de]
'Sz$
c3!v
yY3Y]
TTWz_W
}p/V
y.Eg
/>x
\LD\+
W@[?
#{N&
]\\^_\\
u]# f
@} US
5|x'
@[CRT=
[qZ>
^[/t/ w
BoFo %Y
{qT/
ZRP)]M"ZG3G_MD\Q^M"
%VS! Y
/-Vc
S`ZW
%P|$
`|FT
7sZe
PF`_/@
s+I
Z>Dbs
g44
"/9B
HW Q
_VLVa;|\LNLX
9( .3?9//
^KZJ
fw~FG
zrm&
:|tfss
0\D
g2,>
"fg'
,U+v
?90(
C+Zj
na/A
s19P
Q[g9Z
VWJD
I"r>
g)%Yy
2l-k
S=d-
4`~s
ZO/U]
&y_S
~M|=~b
#8D! Gv
Xj_'R
-WFu
GKr0
l:A]N
`\\\\L\. -\c\
-oaf~
8#AVZ
5Zq-
I^x$
AW.DWqW
jc^S
v_%j
gp@}
gG|/
f2}x?
,1"
=2809.\
I P&F~]
X.9; =(
fXtM7L
UWRV.J>
]55W-
ZUO^-
}C:ow
X{Y3:
Gw`SI=UGL
jD'IESN#]
zW@[Y.
&C%H
(L%r
jhJn
a gw
S]rO
)Hw#_-
EFR&
3} Y
YWw2ea
Nvtj&
_WZJW
e&Zcg
rql[q
UT[|
>9yv+,
aAYX|]]R
^pn>
|YW<m
Q_*6
/e>!*+/q
yV3[
$IjS
Alvo
$-.
S_c\\
Wb,I!
Rc$9-^ y
KVD0Y
=52\=.;/\
YWsX
+J*F/c
5 d?
,TL^
(/90:\ >?\ 5203;32\
31YQf
d%A<
ICHm
24TnB[
ZlD[
#Sl8E
\W{y.[
"%|#Ei
L@Z[
g9h/ G
;8#@?
x{jpZ
kbGFH$1>
,13gH
\^+&
]eND9Z
gW]T&
.*;W
[JAYRAYAYM\|
T[G=FrbM[S
MRegWeTnZ
IIM 1.
Z+<$
,*QL
8^v"
)fo+P
MeB2e
NY8y
<u:p
%$nZB
W|}_(
rZ^O
Dx]!
pR& #C
h{'|M
D[/<o
P9A'
%Q_
8-`?-RqH
j}lY
m^CQon
(QQce
2-1J#
dV)%
uk&#
N<mV
^Wct
%m-;
ii\\}\
[T L
RIVRZ\_
Ayx<6
rZ^
[dx
T"~
bK>Y
)s&
?WmWPY
ioq=m>9qe
vjKk
]]\H*\\\\
!iK
66Ce
R\\\P@_WjO i
^h^<
n\Z<
hUEvv
!Z,5
PFTl)Q1E
hWLa
H[.Qx
HA}n
HZ$p
>JTf
^5\a\
2tX?Z
KO[OyT
GetTypeFromHandle
8^vC
5@\z
(MKGb@
m[\\
3 xr
=<,Rz+
s86{ G
} rV
W:T jH
Q2[B
tgV?
_WjK
I jE
_\\\\\\\\\\\\\\\\\\\\\
wCNz7
FH1Td
C{yU
RT|_]R@M
_WJP\|E
w9]
u47sV
:;\.s
hj/Qo
UI_U
o0G~
WKKW![
}nwR$J2
Co]'
L"[o
U .J`:+
JOIi&
;Oxy
QZ|
JrL2K
9?31,.9//98\
joGj
85`lS=
KCh/
\\]\]\\\\\\\
_VXWt
_OjX
((=?498\
XBWECW=y
}(M?
[BEJ&_
(sVW]
Era R
UUC`
[T\<^
@]J0
]FAJ
+_W-U>
@K9W
UU[_N
x`NZ
\8]\\\\
]%Sc^
Bw/,m
>sbL
69d=
,%Ar'c
\\\\L\%7KXc\
_Ojz
?(532/|
M4W x%
we`
5[-V
=FR<N
^#F4nN/
3<\%
S.cL
beXT[s
1|0O
System.Collections.Generic
003?
D<DZ\8U
AYTT\]N
WQeC
an`\\
R2sW
fr)o
D'|[P
DPW9QW
]jEKJE[L
003+
=2809\+3+jh .3?9//\/9(79.2903>69?(/9?).5(%\
$_~+
-2&j
qccvi
[7[/[
KH7K
Cgej
,s+
~qp+
^6,W
epQL
]PR_G^P{^S
KA]cr2
ulk
\\\\\\\\L\\\\
WaPSC
)e[y]
N[)dL
;^ S
T~_E
-'4
[]\
eQ1DS.L
\\R\
@WXu,T,TN[[3E
_VP[
System.Runtime.CompilerServices
L2ZB
'0 B
yMTg
RWuT
F\AsMt
2h(V
q^\`
^w]JVZpS5
:^lA@
e"Fm
Grtr?
\ylMy\M
\.\=\2\/\0\=\(\5\3\2\\\\\\\
#x0j(OG
zsb#
u!>d
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
pcFw
T _/Foe
^W tJxQ|K|[
]^]\\S
nu /3
;7ym}
KSmt
xz~7
hke@o
\\\\L\J-!Xc\l
s& ]
TQ)D
eTdd
_W:5[
1,B^z
_WRVWsN
me.@/+
O@OHdIo\
O9V
NZqa]zZ
MOOR=
8T\\L_[
:7nXC
W|~^
rn^@
9v|
)Jp3
TSYFi~
3W%Z
Do8g
T?@k
DeXW
[T\t^
n,,[L
4RN(
oNj*Bd
509\
',(
_Q-`U
XQU{BBTd
/e /e
OZY R0
\\\\L\D(
Z }3V
[7oS^&
\\\\L\D$
=HwG
_r}J
O]!#
]M\^\
[AT^Z[X
929.5?\
31,.9//98\ .5(9
)*(0
`wkhG#d^mqq\KTJ_\
N!AM
5=;23/(5?/\,.3?9//\
\ =-=$
8/[A
i9
U T1O
vpr<
45UJp
KWpSWzQ
'^I[^ e
.IC'
5u2a
>q N
9/?.5,(3.\;9(79.2903>69?(/9?).5(%\2
DW'Xm
z=t+
% 92
;V 8=z
:9e*
_-l _%]/U
L*d>
yJL\
~f,t3d
@|iK
YVP74i
PN^TNn
\[:<s
m W
c_d@
~XpkR^
Y^CLK
]]B\AYV
8 t^H
JR{NW
UZ@Sn
p=.
$CZ4
@_&o W
$9?)(=>09\
~+!
U|!;S3
hW:AW
{ 5|M
Q]]A
Sut?
YV[OXI
q72#<$ q'
VOstZ
XX.W
eke{VK
\\\\\\\\\\\\\\\\
RZ_ ^
XX.J
_TN-
_?ET
+ W@
P_/Z'0
-c46
5QM/
^\\.\\\
WGIWpJW|B
]\OlX\
A7;6
@=WL
St^H
|K_C|KEItJ
\yD_\q
gBt+c
_Qfnp[Dm3oN^h|T?88
}Ad$9b
E B
PRz$r<s
T[G)
_JV~n
'(U=
Wi\
\OXMXK
sgf7h
PO?U
\_k ~
,?#|
qu`gn
<` S
a%tPw
0fMQc
nYc\
*W.}
3J2He
.b>
%!x(
vGki
5283+
9amJv
zSu&
6UWw
Sp5~
df\(
SIV;
LlOWZ[MUNG
@<=IJ
l_;e
*Vzb\O
gD99
k/c
EZ\]DN
]L\g
yc1Z0
>!hj@
Op|'~
UW|FW
dTJ2
f.n{
H9UXNmg1LFHmnAbiPlRFXqgwXE
{:j1
J_)0ap
J\18
Tud%
h ^F
}&yz
*&jr
VN\th||
rY%;
YYRB}M
V"wo
[M2IF
]@u :
L]Z"5)14d
3gqq
[KmW
!VmjJ
y,@Q
FJR4
JNF5S;
N\{M
3 )-Y(v=
X-Q]7
WV[WI@
S)P-
w_k[\-
\.\9\=\(\5\3\2\
C"C;&2sX_
zT.[D
+CSbC
r7<K
4d\
H3ZB
EC0]<
'I2
o^`m
_^\ \m
<OWj
tY?G,
Ht S
IEB"
_~R=
q \SEa
^;ii
hhl>e
lMJZDCK
LOG!
O@m]M\/
CEUm
3?fQPYL
%7@
QT\u\\/()>r9$9\1/?3.05>\ 2*9.5:5=>09
m?7f
8152\
Kyg0
iHgN.
zCuZ
/3U >a
{w@y
GR5o$
&9a}<
'a8+
.._R
[X7a
i 9Wm
mO^v
]8+I
Xtq)
FCW TW
j(&
S0]DW_
S#zp
l Dq
(p# ^a
(2[
EO_v
&=-M
mTo~
BUr:k
O[Tf
Kg+-
IEnumerable`1
[Hp3
\4UC\?(iy
G;l;
dFU(S
_WG^
_h>_Z^
%/<
0k8K
T!P/~
r8))
}gN
i sf(5H
Pi\ EWU}
-VS<_USKX
p[%f]
WmiB`w
5IZHoL
HFA
] Q=%
_Dho
<SY:
bMQk
WWdM
BG5&
~!R
VYN{Z}
w[W6TW
Kts&
1-FFTh/
zW,Z
nWzO
?t^vcNW
o>cy
&vd8K
*JJ$
J) X
:,.v
RWHDW
,1A^4
4.9=8\
wfR2gO
EUWYW
EMN n]oFsE
RMEv
u]dE]
.fFp2%
>qk/
#Iq
{-Kb
_-HM
F^S"
>n0e
>9zHw
uPwzY@
Xm<M_C
$x(5
+|]
p&*M
d]:(
0=//d\`
@_c\
=0Z8[
^ ,-
YVOPMT/U
j(?o
IE@ ]1q
md[-
yU|X^SYTULUS|ZN
zppH/
gG7P0
8V^[
`o@7
\8]W]L\
'+~^
6}t
KPHo
t/KG
7 X[
`qj
oBdW
O_ __S
P`WF
3mxg
MlZe
/s a
]%_em
[X7LN
ibxI
r"VO
loFzt0
q3:o
OZx3
N>y[
md*o
tB2 5
Np\T
Da|
(>I)
-pn\_
Swr
QO/h
]<A6
TWSF
UQJQ
"bnn&
Cm-x
^^#v
>J,{h
OX/C?
]cz2
|TvN
QE[e
n) )
FQ!0
v)e[
p``@
Z)T:T
Fyb*W
3HA2
//91>0%\;9(
_V.fMM~
\\}] \h]_]\\A
xB#
'w6s
%Z~$YH
3375RXS=^
^Waz
5=03;
|(Pf
*dW
.c|-]
ELL 2
W _Mt
;[BL^
`\\\\L\zX
X`BS
g"mF
YaTA
EYZF
,M6O
UZ\]TN
F|sBMe
z^3}]
yW@\
grGZV;+
S+_2
HPW@M
yUZ4
{KB7$
x$UA]T
S y7Y
W^QN_ZS
F%t~
}yp*
aIgn
FfZ4
]+ Z
FW(W
aUS
hkaEK
6&jb
)v>d
vV(t
#&~
XHzT
VECI
@u]u
^W_X5
YZ]w
0Y5t
Y_}|
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-30 20:10:31 2018-06-30 20:14:42 251

22 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-30 20:10:31 2018-06-30 20:14:42 251

12 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\NSE.exe.config
C:\Users\Seven01\AppData\Local\Temp\NSE.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\NSE.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\NSE.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Users\Seven01\AppData\Local\Temp\it-IT\DDHATXoutz.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\DDHATXoutz.resources\DDHATXoutz.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\DDHATXoutz.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\DDHATXoutz.resources\DDHATXoutz.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Users\Seven01\AppData\Local\Temp\it\DDHATXoutz.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\DDHATXoutz.resources\DDHATXoutz.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\DDHATXoutz.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\DDHATXoutz.resources\DDHATXoutz.resources.exe
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\NSE.exe:ZONE.identifier
C:\Users\Seven01\AppData\Roaming\zxftyytre
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe
\Device\NamedPipe\
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2388.4875359
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2388.4875359
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2388.4875390
C:\Windows\System32\Branding\Basebrd\Basebrd.dll
C:\Windows\Branding\Basebrd\basebrd.dll
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Users\Seven01\AppData\Local\Temp\"C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe"
C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe.config
C:\Users\Seven01\AppData\Roaming\zxftyytre\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe.Local\
C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.INI
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\DDHATXoutz.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\DDHATXoutz.resources\DDHATXoutz.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\DDHATXoutz.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\DDHATXoutz.resources\DDHATXoutz.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\it\DDHATXoutz.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it\DDHATXoutz.resources\DDHATXoutz.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it\DDHATXoutz.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\it\DDHATXoutz.resources\DDHATXoutz.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\RunPEDll.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\RunPEDll.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\it\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\zxftyytre\it\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\it\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe:ZONE.identifier
C:\Users\Seven01\AppData\Local\Temp\Update.txt
C:\Users\Seven01\AppData\Local\Temp\840493973.xml
C:\Windows\Microsoft.net\Framework\v2.0.50727
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
C:\Users\Seven01\AppData\Local\Temp\1650946654.xml
C:\Users\Seven01\AppData\Local\Temp\201350900.xml
\Device\NamedPipe
C:\Users\Seven01\AppData\Local\Temp\1168644672.xml
C:\Users\Seven01\AppData\Local\Temp\1784734666.xml
C:\Users\Seven01\AppData\Local\Temp\372828621.xml
C:\Users\Seven01\AppData\Local\Temp\1452519068.xml
C:\Users\Seven01\AppData\Local\Temp\214493901.xml
C:\Users\Seven01\AppData\Local\Temp\1586929957.xml
C:\Users\Seven01\AppData\Local\Temp\1325069775.xml
C:\Users\Seven01\AppData\Local\Temp\257899452.xml
C:\Users\Seven01\AppData\Local\Temp\1887260039.xml
C:\Users\Seven01\AppData\Local\Temp\schtasks.exe
C:\Users\Seven01\AppData\Local\Temp\schtasks.exe.*
C:\ProgramData\Oracle\Java\javapath\schtasks.exe
C:\ProgramData\Oracle\Java\javapath\schtasks.exe.*
C:\Windows\System32\schtasks.exe
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\sysnative\Tasks
C:\Windows\sysnative\Tasks\*
C:\Windows\sysnative\Tasks\Adobe Flash Player Updater
C:\Windows\sysnative\Tasks\Update\Update
\??\MountPointManager
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64
C:\Windows\AppPatch\sysmain.sdb
C:\Windows\SysWOW64\
C:\Windows\SysWOW64\*.*
C:\Windows\SysWOW64\ui\SwDRM.dll
C:\Windows\SysWOW64\schtasks.exe
C:\Windows\sysnative\Tasks\Update
C:\Windows\sysnative\Tasks\Update\
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
C:\Windows\appcompat\Programs\RecentFileCache.bcf
C:\Windows\Microsoft.NET\Framework\v2.0.50727\
C:\Windows\Microsoft.NET\Framework\v2.0.50727\*.*
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ui\SwDRM.dll
C:\Windows\SysWOW64\net.exe
C:\Windows\SysWOW64\net1.exe
C:\Windows\Temp\fwtsqmfile00.sqm
C:\Windows\Temp\fwtsqmfile01.sqm
C:\Windows\SysWOW64\sc.exe
C:\Windows\SysWOW64\it-IT\sc.exe.mui
C:\Windows\Tasks\Adobe Flash Player Updater.job
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
C:\Windows\sysnative\Tasks\Microsoft\Windows\WDI\ResolutionHost
C:\Windows\SysWOW64\wpdshext.dll
C:\Windows\SysWOW64\shdocvw.dll
C:\ProgramData\Microsoft\Network\
C:\ProgramData\Microsoft\Network\Downloader\
C:\Windows\sysnative\tzres.dll
C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
\??\PIPE\samr
C:\DosDevices\pipe\
C:\Windows\sysnative\wlrmdr.exe
C:\Windows\sysnative
C:\Windows\AppPatch\AppPatch64\sysmain.sdb
C:\Windows\sysnative\
\Device\Ndis
\Device\LanmanDatagramReceiver
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.config
C:\Windows\Microsoft.net\Framework\v2.0.50727\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Local\
C:\Windows\Microsoft.net\Framework\v2.0.50727\RegAsm.exe
C:\Windows\Microsoft.net
C:\Windows\Microsoft.net\Framework
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Config
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\System32\wbem\wbemdisp.tlb
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.INI
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\oleaut32.DLL
C:\Windows\SysWOW64\stdole2.tlb
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll
C:\Windows\Globalization\en.nlp
C:\Windows\System32\tzres.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll
C:\%insfolder%\%insname%
C:\Users\Seven01\AppData\Local\Temp\WINHOSTOUT.exe
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll
C:\Users\Seven01\AppData\Local\Google\Chrome\User Data\*
C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini
C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\logins.json
C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\assembly\GAC\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.exe
C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.INI
C:\Users\Seven01\AppData\Roaming\Opera Software\Opera Stable\Login Data
C:\Users\Seven01\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources\WLFXWNEAKWSNTONCJVILSOWEICUWTBNCEWEUZIYM.resources.exe
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\desktop.ini
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.INI
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\plutil.exe
C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\logins.json
C:\Users\Seven01\AppData\Local\Comodo\Dragon\User Data\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini
C:\Program Files (x86)\Mozilla Firefox\nss3.dll
C:\Program Files (x86)\Postbox\nss3.dll
C:\Program Files (x86)\Mozilla Thunderbird\nss3.dll
C:\Program Files (x86)\SeaMonkey\nss3.dll
C:\Program Files (x86)\Flock\nss3.dll
C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt
C:\Users\Seven01\AppData\Local\MapleStudio\ChromePlus\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Chromium\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Torch\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\UCBrowser\*
C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini
C:\Users\Seven01\AppData\Roaming\Thunderbird\signons.sqlite
C:\Users\Seven01\AppData\Roaming\Thunderbird\logins.json
C:\Storage\
C:\mail\
C:\Users\Seven01\AppData\Local\VirtualStore\Program Files\Foxmail\mail\
C:\Users\Seven01\AppData\Local\VirtualStore\Program Files (x86)\Foxmail\mail\
C:\Users\Seven01\AppData\Roaming\Opera Mail\Opera Mail\wand.dat
C:\Users\Seven01\AppData\Roaming\Pocomail\accounts.ini
C:\Users\Seven01\AppData\Roaming\The Bat!
C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini
C:\Users\Seven01\AppData\Roaming\Postbox\signons.sqlite
C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml
C:\Users\Seven01\AppData\Roaming\Ipswitch\WS_FTP\Sites\ws_ftp.ini
C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx
C:\Windows\SysWOW64\wshom.ocx
C:\ProgramData\DynDNS\Updater\config.dyndns
C:\Users\All Users\AppData\Roaming\FlashFXP\3quick.dat
C:\
C:\Users\Seven01\AppData\Roaming\.purple\accounts.xml
C:\Users\Seven01\AppData\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml
C:\Users\Seven01\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\
C:\Users\Seven01\AppData\Local\Temp\Ftplist.txt
C:\Program Files (x86)\jDownloader\config\database.script
C:\Windows\sysnative\wbem\WmiPrvSE.exe
C:\Windows\inf\hdaudio.inf
C:\Windows\sysnative\DriverStore\it-IT\hdaudio.inf_loc
C:\Windows\inf\hdaudio.PNF
C:\Windows\System32\Macromed\Flash\mms.cfg
C:\Windows\Temp
C:\Windows\sysnative\LogFiles\Scm\9435f817-fed2-454e-88cd-7f78fda62c48
C:\Windows\sysnative\wbem\repository
C:\Windows\sysnative\wbem\Logs
C:\Windows\sysnative\wbem\AutoRecover
C:\Windows\sysnative\wbem\MOF
C:\Windows\sysnative\wbem\repository\INDEX.BTR
C:\Windows\sysnative\wbem\repository\WRITABLE.TST
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\WBEM9xUpgd.dat
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
C:\Windows\System32\p2pcollab.dll
C:\Windows\System32\qagentrt.dll
C:\Windows\System32\dnsapi.dll
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Windows\Temp\Cab75A8.tmp
C:\Windows\Temp\Tar75A9.tmp
C:\Windows\System32\Cab75A8.tmp
C:\Windows\Temp\
\??\WMIDataDevice
C:\Windows\Fonts\staticcache.dat
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ndpsetup.bat
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenservicelock.dat
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenrootstorelock.dat
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen_service.log
C:\Windows\System32\mscoree.dll.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenservicetestlock.dat
C:\Windows\Microsoft.NET\ngenserviceclientlock.dat

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\NSE.exe.config
C:\Users\Seven01\AppData\Local\Temp\NSE.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\System32\l_intl.nls
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
\Device\NamedPipe\
C:\Windows\Branding\Basebrd\basebrd.dll
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe.config
C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\sysnative\Tasks\Update\Update
C:\Windows\SysWOW64\cmd.exe
C:\Windows\AppPatch\sysmain.sdb
C:\Windows\SysWOW64\
C:\Windows\SysWOW64\schtasks.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
C:\Windows\appcompat\Programs\RecentFileCache.bcf
C:\Windows\Microsoft.NET\Framework\v2.0.50727\
C:\Windows\SysWOW64\net.exe
C:\Windows\SysWOW64\net1.exe
C:\Windows\Temp\fwtsqmfile01.sqm
C:\Windows\SysWOW64\sc.exe
C:\Windows\SysWOW64\it-IT\sc.exe.mui
C:\Windows\Tasks\Adobe Flash Player Updater.job
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
C:\Windows\sysnative\Tasks\Microsoft\Windows\WDI\ResolutionHost
C:\Windows\SysWOW64\wpdshext.dll
C:\Windows\SysWOW64\shdocvw.dll
C:\Windows\sysnative\tzres.dll
C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
\??\PIPE\samr
C:\Windows\sysnative\wlrmdr.exe
C:\Windows\AppPatch\AppPatch64\sysmain.sdb
C:\Windows\sysnative\
\Device\Ndis
\Device\LanmanDatagramReceiver
C:\Users\Seven01\AppData\Local\Temp\840493973.xml
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.config
C:\Windows\Microsoft.net\Framework\v2.0.50727\RegAsm.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Config
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\System32\wbem\wbemdisp.tlb
C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
C:\Windows\SysWOW64\stdole2.tlb
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\System32\tzres.dll
C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll
C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini
C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt
C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini
C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini
C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml
C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx
C:\Windows\SysWOW64\wshom.ocx
C:\Users\Seven01\AppData\Local\Temp\1650946654.xml
C:\Users\Seven01\AppData\Local\Temp\201350900.xml
C:\Windows\sysnative\wbem\WmiPrvSE.exe
C:\Windows\inf\hdaudio.PNF
C:\Windows\sysnative\Tasks\Adobe Flash Player Updater
C:\Users\Seven01\AppData\Local\Temp\1168644672.xml
C:\Windows\System32\Macromed\Flash\mms.cfg
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\INDEX.BTR
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Windows\Temp\Cab75A8.tmp
C:\Windows\Temp\Tar75A9.tmp
\??\WMIDataDevice
C:\Users\Seven01\AppData\Local\Temp\1784734666.xml
C:\Users\Seven01\AppData\Local\Temp\372828621.xml
C:\Users\Seven01\AppData\Local\Temp\1452519068.xml
C:\Users\Seven01\AppData\Local\Temp\214493901.xml
C:\Users\Seven01\AppData\Local\Temp\1586929957.xml
C:\Windows\Fonts\staticcache.dat
C:\Users\Seven01\AppData\Local\Temp\1325069775.xml
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen_service.log
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Users\Seven01\AppData\Local\Temp\257899452.xml

Write Files

C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe
C:\Users\Seven01\AppData\Local\Temp\Update.txt
C:\Users\Seven01\AppData\Local\Temp\840493973.xml
C:\Users\Seven01\AppData\Local\Temp\1650946654.xml
C:\Users\Seven01\AppData\Local\Temp\201350900.xml
\Device\NamedPipe
C:\Users\Seven01\AppData\Local\Temp\1168644672.xml
C:\Users\Seven01\AppData\Local\Temp\1784734666.xml
C:\Users\Seven01\AppData\Local\Temp\372828621.xml
C:\Users\Seven01\AppData\Local\Temp\1452519068.xml
C:\Users\Seven01\AppData\Local\Temp\214493901.xml
C:\Users\Seven01\AppData\Local\Temp\1586929957.xml
C:\Users\Seven01\AppData\Local\Temp\1325069775.xml
C:\Users\Seven01\AppData\Local\Temp\257899452.xml
C:\Users\Seven01\AppData\Local\Temp\1887260039.xml
C:\Windows\sysnative\Tasks\Update\Update
C:\Windows\appcompat\Programs\RecentFileCache.bcf
C:\Windows\Temp\fwtsqmfile01.sqm
C:\Windows\Tasks\Adobe Flash Player Updater.job
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
\??\PIPE\samr
\Device\Ndis
\Device\LanmanDatagramReceiver
C:\Users\Seven01\AppData\Local\Temp\WINHOSTOUT.exe
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
C:\Windows\sysnative\LogFiles\Scm\9435f817-fed2-454e-88cd-7f78fda62c48
C:\Windows\sysnative\wbem\repository\WRITABLE.TST
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\INDEX.BTR
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Windows\Temp\Cab75A8.tmp
\??\WMIDataDevice
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenservicelock.dat
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenrootstorelock.dat
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen_service.log

Delete Files

C:\Users\Seven01\AppData\Local\Temp\NSE.exe:ZONE.identifier
C:\Users\Seven01\AppData\Local\Temp\NSE.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2388.4875359
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2388.4875359
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2388.4875390
C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe:ZONE.identifier
C:\Users\Seven01\AppData\Local\Temp\840493973.xml
C:\Users\Seven01\AppData\Local\Temp\1650946654.xml
C:\Users\Seven01\AppData\Local\Temp\201350900.xml
C:\Users\Seven01\AppData\Local\Temp\1168644672.xml
C:\Users\Seven01\AppData\Local\Temp\1784734666.xml
C:\Users\Seven01\AppData\Local\Temp\372828621.xml
C:\Users\Seven01\AppData\Local\Temp\1452519068.xml
C:\Users\Seven01\AppData\Local\Temp\214493901.xml
C:\Users\Seven01\AppData\Local\Temp\1586929957.xml
C:\Users\Seven01\AppData\Local\Temp\1325069775.xml
C:\Users\Seven01\AppData\Local\Temp\257899452.xml
C:\Windows\sysnative\Tasks\Update\Update
C:\Windows\Temp\Cab75A8.tmp
C:\Windows\Temp\Tar75A9.tmp
C:\Windows\Microsoft.NET\ngenserviceclientlock.dat

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NSE.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6ad4fc49\4c342a49
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\407700e0\5a03390d
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|NSE.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|NSE.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|NSE.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\407700e0\d13eb2c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4ad60644\6f323003
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\235dd0a9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\9e47f51
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\filename.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|zxftyytre|filename.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|zxftyytre|filename.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|zxftyytre|filename.exe
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\schtasks.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater\Id
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\cmd.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\schtasks.exe
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\SchedulingEngineKnob
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Paths\svchost.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Index
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\DynamicInfo
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\RegAsm.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\{a7a85eba-a2d1-41ec-a656-ba2c9221e354}
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net1.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters\ServiceDllUnloadOnStop
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\DynamicInfo
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\Software\Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PreviousServiceShutdown
HKEY_LOCAL_MACHINE\system\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\winmgmt
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDllUnloadOnStop
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\DynamicInfo
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\sc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619}\data
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Adobe Flash Player Updater.job
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Adobe Flash Player Updater.job.fp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\DynamicInfo
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\wpdshext.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\shdocvw.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\DynamicInfo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceDll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceManifest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceMain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileMinMemory
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Help
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Help
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\PerfMMFileName
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\BackupRestore\FilesNotToBackup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_metadata
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\BITS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobInactivityTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TimeQuantaLength
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobNoProgressTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobMinimumRetryDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TransferBufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackBegin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackEnd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackDuration
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TestFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\ForceFileFlush
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\UseLmCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\IGDSearcherDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2085F28-FEB7-404A-B8E7-E659BDEAAA02}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2085F28-FEB7-404A-B8E7-E659BDEAAA02}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\DynamicInfo
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\BITS\Throttling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileChunk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileWriteBuffer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StateIndex
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_LOG
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_BAK
HKEY_LOCAL_MACHINE\SYSTEM\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Safeboot\Option
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\BITS Writer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\InprocHandler
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\wlrmdr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\DynamicInfo
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\SecurityService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regasm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\34d0e38e\92478f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_CURRENT_USER\Software\Classes\AppID\regasm.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_CURRENT_USER\Software\Classes\WinMgmts
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Scripting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSclient
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_CURRENT_USER\Software\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_CURRENT_USER\Software\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_CURRENT_USER\Software\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\TypeLib
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default)
HKEY_CLASSES_ROOT\CLSID\{62E522DC-8CF3-40A8-8B2E-37D595651E40}\InprocServer32
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\410
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\410
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\10
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\10
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_CURRENT_USER\Software\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_CURRENT_USER\Software\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CLASSES_ROOT\CLSID\{04B83D61-21AE-11D2-8B33-00600806D9B6}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.CustomMarshalers__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualC__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_CLASSES_ROOT\CLSID\{D6BDAFB2-9435-491F-BB87-6AA0F0BC31A2}\InprocServer32
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.JScript__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration.Install__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\regasm_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DnsCache\Parameters
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DnsClient
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\System\Setup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSClient
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_CURRENT_USER\Control Panel\International
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it-IT_b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\1c4dd593
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it_b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\4deb99ab
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\f90cba6\74950e88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\f90cba6\736ad971
HKEY_LOCAL_MACHINE\Software\Policies
HKEY_CURRENT_USER\Software\Policies
HKEY_CURRENT_USER\Software
HKEY_LOCAL_MACHINE\Software
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\regasm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\AccessProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2
HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
HKEY_CURRENT_USER\Software\Aerofox\FoxmailPreview
HKEY_CURRENT_USER\Software\Aerofox\Foxmail\V3.1
HKEY_CURRENT_USER\Software\Qualcomm\Eudora\CommandLine
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions
HKEY_CLASSES_ROOT\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\410
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\410
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\10
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\10
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default)
HKEY_CURRENT_USER\Software\FTPWare\COREFTP\Sites
HKEY_CURRENT_USER\Software\Paltalk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTP Commander
HKEY_LOCAL_MACHINE\SOFTWARE\Vitalwerks\DUC
HKEY_CURRENT_USER\SOFTWARE\Vitalwerks\DUC
HKEY_CURRENT_USER\Software\DownloadManager\Passwords
HKEY_USERS\S-1-5-20_Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Elevation
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{eb115ffc-10c8-4964-831d-6dcb02e6f23f}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eheadphonewave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994ad04-93ef-11d0-a3cc-00a0c9223196}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonetopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonewave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave\Properties
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerRequestOverride
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Power\PowerRequestOverride
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Power\PowerRequestOverride\Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\taskeng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\DataVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\EnableBackCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\MissedTasksStartupDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksInMemoryQueue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksPerHighestPrivEngine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksPerLeastPrivEngine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TracingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\WindowSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\6BA0E3C1
HKEY_LOCAL_MACHINE\Software\Microsoft\COM3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaxSxSHashCount
HKEY_USERS\.DEFAULT\Control Panel\International
HKEY_USERS\.DEFAULT\Control Panel\International\LocaleName
HKEY_USERS\.DEFAULT\Control Panel\International\sCountry
HKEY_USERS\.DEFAULT\Control Panel\International\sList
HKEY_USERS\.DEFAULT\Control Panel\International\sDecimal
HKEY_USERS\.DEFAULT\Control Panel\International\sThousand
HKEY_USERS\.DEFAULT\Control Panel\International\sGrouping
HKEY_USERS\.DEFAULT\Control Panel\International\sNativeDigits
HKEY_USERS\.DEFAULT\Control Panel\International\sCurrency
HKEY_USERS\.DEFAULT\Control Panel\International\sMonDecimalSep
HKEY_USERS\.DEFAULT\Control Panel\International\sMonThousandSep
HKEY_USERS\.DEFAULT\Control Panel\International\sMonGrouping
HKEY_USERS\.DEFAULT\Control Panel\International\sPositiveSign
HKEY_USERS\.DEFAULT\Control Panel\International\sNegativeSign
HKEY_USERS\.DEFAULT\Control Panel\International\sTimeFormat
HKEY_USERS\.DEFAULT\Control Panel\International\sShortTime
HKEY_USERS\.DEFAULT\Control Panel\International\s1159
HKEY_USERS\.DEFAULT\Control Panel\International\s2359
HKEY_USERS\.DEFAULT\Control Panel\International\sShortDate
HKEY_USERS\.DEFAULT\Control Panel\International\sYearMonth
HKEY_USERS\.DEFAULT\Control Panel\International\sLongDate
HKEY_USERS\.DEFAULT\Control Panel\International\iCountry
HKEY_USERS\.DEFAULT\Control Panel\International\iMeasure
HKEY_USERS\.DEFAULT\Control Panel\International\iPaperSize
HKEY_USERS\.DEFAULT\Control Panel\International\iDigits
HKEY_USERS\.DEFAULT\Control Panel\International\iLZero
HKEY_USERS\.DEFAULT\Control Panel\International\iNegNumber
HKEY_USERS\.DEFAULT\Control Panel\International\NumShape
HKEY_USERS\.DEFAULT\Control Panel\International\iCurrDigits
HKEY_USERS\.DEFAULT\Control Panel\International\iCurrency
HKEY_USERS\.DEFAULT\Control Panel\International\iNegCurr
HKEY_USERS\.DEFAULT\Control Panel\International\iCalendarType
HKEY_USERS\.DEFAULT\Control Panel\International\iFirstDayOfWeek
HKEY_USERS\.DEFAULT\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\WOW64
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir
HKEY_USERS\S-1-5-18
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_USERS\.DEFAULT\Environment
HKEY_USERS\.DEFAULT\Volatile Environment
HKEY_USERS\.DEFAULT\Volatile Environment\0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\Environment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ObjectName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Environment
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Volatile Environment
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Volatile Environment\0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\WOW64
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\RequiredPrivileges
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\WOW64
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Environment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\RequiredPrivileges
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\Tracing\WMI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\ESS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/subscription
HKEY_LOCAL_MACHINE\software\microsoft\wbem\cimom
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\InProcServer32
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\minint
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\FlashPlayerSAU
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\LastUpdateCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\CheckFrequency
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\Schannel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextLockCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextListCount
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\4b\7F06864B
HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\LanguageList
HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\#16
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\Ldap
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllOpenStoreProv
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\My\PhysicalStores
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\My
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\CTLs
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\My\Keys
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\CA
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs
HKEY_USERS\.DEFAULT\
HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CTLs
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CTLs
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Root
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\CTLs
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CTLs
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\trust
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs
HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_USERS\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates
HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\SystemCertificates
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot\AutoUpdate
HKEY_LOCAL_MACHINE\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
HKEY_LOCAL_MACHINE\Software\Microsoft\Ole
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaximumAllowedAllocationSize
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}
HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings\Wpad
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\Escalation
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F8B50CC5
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllVerifyCertificateChainPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllVerifyCertificateChainPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Cimom
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\wmiprvse.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
HKEY_CURRENT_USER\Software\Classes\AppID\taskhost.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WDI\DiagnosticModules
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NameResource
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WDI\Config
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\Config\ServerName
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\CLResolutionInterval
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\DisplayInterval
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\SkipWatson
HKEY_LOCAL_MACHINE\Software\Microsoft\RADAR\HeapLeakDetection\Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\Settings\ReflectionInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\WINHOSTOUT.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{3697C5FA-60DD-4B56-92D4-74A569205C16}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_CURRENT_USER\Keyboard Layout\Toggle
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey
HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\KnownClasses
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenServiceDebugLog
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Client
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Client\Install
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGEN_USE_PRIVATE_STORE
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DefaultVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Version
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\ZapSet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGenService\Roots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\WorkPending
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENBreakOnWorker
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenRegistryAccessCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGENService\State
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\ExtraInstallSteps
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceBreakOnStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenMaxLogSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceTestHookDll
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServicePolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGENService\ListenedState
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\RootstoreDirty
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENUseService
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorsvw.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGENService\State\PendingReboot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceWaitAggressiveWork
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceConservative
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenWorkerCount
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\EnableMultiproc
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\SvcRetryNgenFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenLocalWorker
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceRestrictWorkersPrivileges
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceWaitWorking

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater\Id
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\SchedulingEngineKnob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\{a7a85eba-a2d1-41ec-a656-ba2c9221e354}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Index
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters\ServiceDllUnloadOnStop
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDllUnloadOnStop
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619}\data
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Adobe Flash Player Updater.job
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Adobe Flash Player Updater.job.fp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Triggers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceDll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceManifest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceMain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileMinMemory
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Help
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Help
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_metadata
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobInactivityTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TimeQuantaLength
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobNoProgressTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobMinimumRetryDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TransferBufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackBegin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackEnd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackDuration
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TestFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\ForceFileFlush
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\UseLmCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\IGDSearcherDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileChunk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileWriteBuffer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StateIndex
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\regasm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\DataVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\EnableBackCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\MissedTasksStartupDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksInMemoryQueue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksPerHighestPrivEngine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TasksPerLeastPrivEngine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\TracingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration\WindowSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\6BA0E3C1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaxSxSHashCount
HKEY_USERS\.DEFAULT\Control Panel\International\LocaleName
HKEY_USERS\.DEFAULT\Control Panel\International\sCountry
HKEY_USERS\.DEFAULT\Control Panel\International\sList
HKEY_USERS\.DEFAULT\Control Panel\International\sDecimal
HKEY_USERS\.DEFAULT\Control Panel\International\sThousand
HKEY_USERS\.DEFAULT\Control Panel\International\sGrouping
HKEY_USERS\.DEFAULT\Control Panel\International\sNativeDigits
HKEY_USERS\.DEFAULT\Control Panel\International\sCurrency
HKEY_USERS\.DEFAULT\Control Panel\International\sMonDecimalSep
HKEY_USERS\.DEFAULT\Control Panel\International\sMonThousandSep
HKEY_USERS\.DEFAULT\Control Panel\International\sMonGrouping
HKEY_USERS\.DEFAULT\Control Panel\International\sPositiveSign
HKEY_USERS\.DEFAULT\Control Panel\International\sNegativeSign
HKEY_USERS\.DEFAULT\Control Panel\International\sTimeFormat
HKEY_USERS\.DEFAULT\Control Panel\International\sShortTime
HKEY_USERS\.DEFAULT\Control Panel\International\s1159
HKEY_USERS\.DEFAULT\Control Panel\International\s2359
HKEY_USERS\.DEFAULT\Control Panel\International\sShortDate
HKEY_USERS\.DEFAULT\Control Panel\International\sYearMonth
HKEY_USERS\.DEFAULT\Control Panel\International\sLongDate
HKEY_USERS\.DEFAULT\Control Panel\International\iCountry
HKEY_USERS\.DEFAULT\Control Panel\International\iMeasure
HKEY_USERS\.DEFAULT\Control Panel\International\iPaperSize
HKEY_USERS\.DEFAULT\Control Panel\International\iDigits
HKEY_USERS\.DEFAULT\Control Panel\International\iLZero
HKEY_USERS\.DEFAULT\Control Panel\International\iNegNumber
HKEY_USERS\.DEFAULT\Control Panel\International\NumShape
HKEY_USERS\.DEFAULT\Control Panel\International\iCurrDigits
HKEY_USERS\.DEFAULT\Control Panel\International\iCurrency
HKEY_USERS\.DEFAULT\Control Panel\International\iNegCurr
HKEY_USERS\.DEFAULT\Control Panel\International\iCalendarType
HKEY_USERS\.DEFAULT\Control Panel\International\iFirstDayOfWeek
HKEY_USERS\.DEFAULT\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\WOW64
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AdobeFlashPlayerUpdateSvc\Environment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gpsvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ObjectName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\WOW64
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\RequiredPrivileges
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\WOW64
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Environment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\RequiredPrivileges
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{018EF085-908F-46CA-8357-98B8AA524ECC}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07298156-A2CE-4DF8-98CE-B3AFB139FC44}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{CE94B10A-8AE6-4D46-953E-ADEBB7DBF4B9}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E69B5212-F3F3-4458-926F-95CEF7E298B5}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\LastUpdateCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\CheckFrequency
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextLockCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextListCount
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaximumAllowedAllocationSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F8B50CC5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NeverLowerPagePriority
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NameResource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\Config\ServerName
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\CLResolutionInterval
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\DisplayInterval
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\SkipWatson
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\Settings\ReflectionInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenServiceDebugLog
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Client\Install
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGEN_USE_PRIVATE_STORE
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DefaultVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Version
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\ZapSet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\WorkPending
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENBreakOnWorker
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenRegistryAccessCount
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\ExtraInstallSteps
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceBreakOnStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenMaxLogSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceTestHookDll
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServicePolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\RootstoreDirty
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENUseService
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceWaitAggressiveWork
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceConservative
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenWorkerCount
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\EnableMultiproc
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\SvcRetryNgenFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenLocalWorker
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceRestrictWorkersPrivileges
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceWaitWorking

Write Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update\Update\Index
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42EF5567-14D0-45CC-8A3E-B4114DF78E91}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1266DD9-924E-4395-B18B-80FD552F9E14}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PreviousServiceShutdown
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C20260E6-0B72-4836-A956-B7481C696DAC}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94AA3293-B515-4FA7-A36B-3CFA64BA5BE3}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34F74514-1B21-45C2-94F4-2501B6B1F05B}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63D65EA2-89AD-42FC-B17F-C410099FA803}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0C106E-E557-4BED-86CF-6B54F8BB1F20}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10F1A110-2A40-4EA0-A72E-CD7B93E93B5E}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0FD1BEB-1BF6-45A3-94D8-6E0C5DBB93D9}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6369BE4A-3833-4DFB-8D48-ADFD389F29A7}\DynamicInfo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\PerfMMFileName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0C32C86-F054-4CC3-8884-E57AA9DA7B69}\DynamicInfo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_LOG
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_BAK
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\BITS Writer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49BBA3EF-3AB3-47C2-9DF5-3C494967DA83}\DynamicInfo
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\regasm_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{513494DA-44B6-4567-B247-8E8A881C4619}\data
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\4B\7F06864B\LanguageList
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\LastUpdateCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerSAU\CheckFrequency

Delete Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart

Mutexes

Global\CLR_CASOFF_MUTEX
Global\.net clr networking
Local\_!MSFTHISTORY!_
Local\c:!users!seven01!appdata!local!microsoft!windows!temporary internet files!content.ie5!
Local\c:!users!seven01!appdata!roaming!microsoft!windows!cookies!
Local\c:!users!seven01!appdata!local!microsoft!windows!history!history.ie5!
Local\!IETld!Mutex
Local\c:!users!seven01!appdata!roaming!microsoft!windows!ietldcache!
Local\MSCTF.Asm.MutexDefault1

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
kernel32.dll.VirtualProtect
kernel32.dll.GlobalMemoryStatusEx
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.SwitchToThread
kernel32.dll.CloseHandle
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.GetProcAddress
kernel32.dll.DebugActiveProcess
kernel32.dll.WaitForDebugEvent
kernel32.dll.ContinueDebugEvent
kernel32.dll.DeleteFileA
advapi32.dll.SetKernelObjectSecurity
advapi32.dll.GetKernelObjectSecurity
ntdll.dll.NtSetInformationProcess
ntdll.dll.NtProtectVirtualMemory
kernel32.dll.GetModuleFileNameW
shfolder.dll.SHGetFolderPathW
kernel32.dll.CreateDirectoryW
kernel32.dll.MoveFileW
kernel32.dll.LocalFree
kernel32.dll.CreatePipe
kernel32.dll.DuplicateHandle
kernel32.dll.GetStdHandle
kernel32.dll.GetCurrentDirectoryW
kernel32.dll.CreateProcessW
kernel32.dll.GetFileType
kernel32.dll.GetConsoleCP
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.GetConsoleOutputCP
kernel32.dll.WriteFile
ole32.dll.CoUninitialize
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister
kernel32.dll.SetThreadUILanguage
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.CopyFileExW
kernel32.dll.IsDebuggerPresent
kernel32.dll.SetConsoleInputExeNameW
ntdll.dll.NtQueryInformationProcess
kernel32.dll.GetTempPathW
kernel32.dll.CreateFileW
kernel32.dll.LocalAlloc
mscoree.dll.ND_RU1
mscoreei.dll.ND_RU1
advapi32.dll.LsaClose
advapi32.dll.LsaFreeMemory
advapi32.dll.LsaOpenPolicy
advapi32.dll.LsaLookupSids
kernel32.dll.DeleteFileW
kernel32.dll.SetFileAttributesW
kernel32.dll.VirtualAllocEx
kernel32.dll.GetThreadContext
kernel32.dll.Wow64GetThreadContext
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.ResumeThread
kernel32.dll.SetThreadContext
kernel32.dll.Wow64SetThreadContext
kernel32.dll.WriteProcessMemory
kernel32.dll.ReadProcessMemory
kernel32.dll.TerminateProcess
ntdll.dll.NtQuerySystemInformation
sechost.dll.OpenSCManagerW
sechost.dll.OpenServiceW
sechost.dll.QueryServiceStatus
sechost.dll.CloseServiceHandle
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
sspicli.dll.GetUserNameExW
ole32.dll.CoTaskMemAlloc
pcwum.dll.PerfDeleteInstance
pcwum.dll.PerfStopProvider
cryptsp.dll.CryptReleaseContext
advapi32.dll.WmiCloseBlock
propsys.dll.PropVariantToVariant
ole32.dll.CoDisconnectObject
wbemcore.dll.Shutdown
ole32.dll.CoReleaseMarshalData
advapi32.dll.RegDeleteKeyExW
kernel32.dll.RegDeleteValueW
oleaut32.dll.#9
advapi32.dll.WmiNotificationRegistrationW
tschannel.dll.DllGetClassObject
tschannel.dll.DllCanUnloadNow
shell32.dll.SHChangeNotify
rasapi32.dll.RasEnumConnectionsW
rasapi32.dll.RasConnectionNotificationW
iphlpapi.dll.GetIfTable2
iphlpapi.dll.FreeMibTable
wtsapi32.dll.WTSQueryUserToken
qmgr.dll.ServiceMain
advapi32.dll.SetEntriesInAclW
ws2_32.dll.#115
ws2_32.dll.WSASocketW
ws2_32.dll.WSAIoctl
ws2_32.dll.#111
bitsigd.dll.InitializeEx
ole32.dll.CoCreateInstance
upnp.dll.DllGetClassObject
upnp.dll.DllCanUnloadNow
rpcrt4.dll.RpcStringBindingComposeA
rpcrt4.dll.RpcBindingFromStringBindingA
rpcrt4.dll.RpcStringFreeA
rpcrt4.dll.NdrClientCall3
rpcrt4.dll.I_RpcExceptionFilter
sechost.dll.OpenSCManagerA
sechost.dll.OpenServiceA
sechost.dll.StartServiceA
rpcrt4.dll.RpcBindingFree
ws2_32.dll.#116
advapi32.dll.LogonUserW
sspicli.dll.LogonUserExExW
wtsapi32.dll.WTSEnumerateSessionsW
wtsapi32.dll.WTSFreeMemory
advapi32.dll.QueryAllTracesW
vssapi.dll.CreateWriter
propsys.dll.VariantToPropVariant
ole32.dll.CoRegisterClassObject
iphlpapi.dll.GetAdaptersAddresses
kernel32.dll.GetNativeSystemInfo
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptVerifySignatureA
cryptsp.dll.CryptDestroyHash
cryptsp.dll.CryptDestroyKey
bcrypt.dll.BCryptGetFipsAlgorithmMode
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGetHashParam
ole32.dll.CreateBindCtx
ole32.dll.CoGetObjectContext
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoTaskMemFree
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
ole32.dll.MkParseDisplayName
oleaut32.dll.#2
oleaut32.dll.#6
kernel32.dll.GetThreadPreferredUILanguages
kernel32.dll.SetThreadPreferredUILanguages
kernel32.dll.LocaleNameToLCID
kernel32.dll.LCIDToLocaleName
kernel32.dll.GetSystemDefaultLocaleName
ole32.dll.BindMoniker
sxs.dll.SxsOleAut32RedirectTypeLibrary
advapi32.dll.RegOpenKeyW
advapi32.dll.RegEnumKeyW
advapi32.dll.RegQueryValueW
sxs.dll.SxsOleAut32MapConfiguredClsidToReferenceClsid
sxs.dll.SxsLookupClrGuid
oleaut32.dll.#4
oleaut32.dll.#283
oleaut32.dll.#284
mscoreei.dll._CorDllMain
mscoree.dll.GetTokenForVTableEntry
mscoree.dll.SetTargetForVTableEntry
mscoree.dll.GetTargetForVTableEntry
mscoreei.dll.GetTokenForVTableEntry
mscoreei.dll.SetTargetForVTableEntry
mscoreei.dll.GetTargetForVTableEntry
kernel32.dll.GetLastError
oleaut32.dll.VariantInit
oleaut32.dll.VariantClear
oleaut32.dll.#7
kernel32.dll.CreateEventW
kernel32.dll.SetEvent
ole32.dll.CoWaitForMultipleHandles
ole32.dll.IIDFromString
kernel32.dll.LoadLibraryA
wminet_utils.dll.ResetSecurity
wminet_utils.dll.SetSecurity
wminet_utils.dll.BlessIWbemServices
wminet_utils.dll.BlessIWbemServicesObject
wminet_utils.dll.GetPropertyHandle
wminet_utils.dll.WritePropertyValue
wminet_utils.dll.Clone
wminet_utils.dll.VerifyClientKey
wminet_utils.dll.GetQualifierSet
wminet_utils.dll.Get
wminet_utils.dll.Put
wminet_utils.dll.Delete
wminet_utils.dll.GetNames
wminet_utils.dll.BeginEnumeration
wminet_utils.dll.Next
wminet_utils.dll.EndEnumeration
wminet_utils.dll.GetPropertyQualifierSet
wminet_utils.dll.GetObjectText
wminet_utils.dll.SpawnDerivedClass
wminet_utils.dll.SpawnInstance
wminet_utils.dll.CompareTo
wminet_utils.dll.GetPropertyOrigin
wminet_utils.dll.InheritsFrom
wminet_utils.dll.GetMethod
wminet_utils.dll.PutMethod
wminet_utils.dll.DeleteMethod
wminet_utils.dll.BeginMethodEnumeration
wminet_utils.dll.NextMethod
wminet_utils.dll.EndMethodEnumeration
wminet_utils.dll.GetMethodQualifierSet
wminet_utils.dll.GetMethodOrigin
wminet_utils.dll.QualifierSet_Get
wminet_utils.dll.QualifierSet_Put
wminet_utils.dll.QualifierSet_Delete
wminet_utils.dll.QualifierSet_GetNames
wminet_utils.dll.QualifierSet_BeginEnumeration
wminet_utils.dll.QualifierSet_Next
wminet_utils.dll.QualifierSet_EndEnumeration
wminet_utils.dll.GetCurrentApartmentType
wminet_utils.dll.GetDemultiplexedStub
wminet_utils.dll.CreateInstanceEnumWmi
wminet_utils.dll.CreateClassEnumWmi
wminet_utils.dll.ExecQueryWmi
wminet_utils.dll.ExecNotificationQueryWmi
wminet_utils.dll.PutInstanceWmi
wminet_utils.dll.PutClassWmi
wminet_utils.dll.CloneEnumWbemClassObject
wminet_utils.dll.ConnectServerWmi
oleaut32.dll.#500
oleaut32.dll.SysStringLen
kernel32.dll.RtlZeroMemory
kernel32.dll.RegOpenKeyExW
advapi32.dll.GetUserNameW
kernel32.dll.GetComputerNameW
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
mscoree.dll.ND_RI2
mscoreei.dll.ND_RI2
rtutils.dll.TraceRegisterExA
rtutils.dll.TracePrintfExA
ws2_32.dll.WSAStartup
ws2_32.dll.setsockopt
ws2_32.dll.WSAEventSelect
ws2_32.dll.ioctlsocket
ws2_32.dll.closesocket
advapi32.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll.CreateFileMappingW
kernel32.dll.MapViewOfFile
kernel32.dll.VirtualQuery
kernel32.dll.ReleaseMutex
advapi32.dll.CreateWellKnownSid
kernel32.dll.CreateMutexW
kernel32.dll.WaitForSingleObject
kernel32.dll.OpenMutexW
kernel32.dll.GetProcessTimes
kernel32.dll.FormatMessageW
advapi32.dll.RegOpenCurrentUser
advapi32.dll.RegNotifyChangeKeyValue
sechost.dll.NotifyServiceStatusChangeA
winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser
kernel32.dll.ResetEvent
iphlpapi.dll.GetNetworkParams
dnsapi.dll.DnsQueryConfig
iphlpapi.dll.GetIpInterfaceEntry
iphlpapi.dll.GetBestInterfaceEx
ws2_32.dll.inet_addr
ws2_32.dll.getaddrinfo
ws2_32.dll.freeaddrinfo
ws2_32.dll.WSAConnect
ws2_32.dll.send
ws2_32.dll.recv
ws2_32.dll.shutdown
kernel32.dll.GetModuleHandleW
user32.dll.DefWindowProcW
gdi32.dll.GetStockObject
user32.dll.RegisterClassW
user32.dll.CreateWindowExW
user32.dll.SetWindowLongW
user32.dll.GetWindowLongW
kernel32.dll.GetCurrentThread
kernel32.dll.GetCurrentThreadId
user32.dll.CallWindowProcW
user32.dll.RegisterWindowMessageW
dwmapi.dll.DwmIsCompositionEnabled
kernel32.dll.CreateIoCompletionPort
kernel32.dll.PostQueuedCompletionStatus
ntdll.dll.NtQueryInformationThread
ntdll.dll.NtGetCurrentProcessorNumber
kernel32.dll.RtlMoveMemory
shell32.dll.ShellExecuteEx
shell32.dll.ShellExecuteExW
kernel32.dll.FindFirstFileW
kernel32.dll.FindClose
kernel32.dll.GetExitCodeProcess
user32.dll.SetClipboardViewer
kernel32.dll.GetSystemTimeAsFileTime
user32.dll.GetLastInputInfo
mlang.dll.#112
wininet.dll.FindFirstUrlCacheEntryA
ole32.dll.OleInitialize
ole32.dll.OleGetClipboard
kernel32.dll.SetFileInformationByHandle
urlmon.dll.CreateUri
kernel32.dll.InitializeSRWLock
kernel32.dll.AcquireSRWLockExclusive
kernel32.dll.AcquireSRWLockShared
kernel32.dll.ReleaseSRWLockExclusive
kernel32.dll.ReleaseSRWLockShared
kernel32.dll.GlobalLock
kernel32.dll.GlobalUnlock
kernel32.dll.GlobalFree
user32.dll.SendMessageW
wininet.dll.FindNextUrlCacheEntryA
user32.dll.SetWindowsHookExW
user32.dll.GetSystemMetrics
advapi32.dll.AddMandatoryAce
user32.dll.GetClientRect
ntmarta.dll.GetMartaExtensionInterface
user32.dll.GetWindowRect
user32.dll.GetParent
ole32.dll.CoRegisterMessageFilter
user32.dll.PeekMessageW
user32.dll.IsWindowUnicode
user32.dll.GetMessageW
user32.dll.TranslateMessage
user32.dll.DispatchMessageW
user32.dll.WaitMessage
setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
setupapi.dll.CM_Get_Device_Interface_List_ExW
comctl32.dll.#332
comctl32.dll.#386
urlmon.dll.CreateIUriBuilder
urlmon.dll.IntlPercentEncodeNormalize
wininet.dll.FindCloseUrlCache
ole32.dll.CLSIDFromProgIDEx
kernel32.dll.GetVolumeInformationA
advapi32.dll.CryptAcquireContextW
advapi32.dll.RegCreateKeyExW
shlwapi.dll.PathIsDirectoryW
ole32.dll.CLSIDFromOle1Class
clbcatq.dll.GetCatalogObject
clbcatq.dll.GetCatalogObject2
advapi32.dll.RegSetValueExW
shlwapi.dll.PathIsPrefixW
xmllite.dll.CreateXmlReader
advapi32.dll.LookupAccountNameW
samcli.dll.NetLocalGroupGetMembers
samlib.dll.SamConnect
rpcrt4.dll.RpcStringBindingComposeW
rpcrt4.dll.RpcBindingFromStringBindingW
rpcrt4.dll.RpcStringFreeW
samlib.dll.SamOpenDomain
samlib.dll.SamLookupNamesInDomain
samlib.dll.SamOpenAlias
samlib.dll.SamFreeMemory
samlib.dll.SamCloseHandle
samlib.dll.SamGetMembersInAlias
netutils.dll.NetApiBufferFree
ole32.dll.CoCreateGuid
ole32.dll.StringFromCLSID
wbemcore.dll.Reinitialize
wbemsvc.dll.DllGetClassObject
wbemsvc.dll.DllCanUnloadNow
authz.dll.AuthzInitializeContextFromToken
authz.dll.AuthzInitializeObjectAccessAuditEvent2
authz.dll.AuthzAccessCheck
authz.dll.AuthzFreeAuditEvent
authz.dll.AuthzFreeContext
authz.dll.AuthzInitializeResourceManager
authz.dll.AuthzFreeResourceManager
rpcrt4.dll.RpcBindingCreateW
rpcrt4.dll.RpcBindingBind
rpcrt4.dll.I_RpcMapWin32Status
advapi32.dll.EventWrite
kernel32.dll.RegCloseKey
kernel32.dll.RegSetValueExW
kernel32.dll.RegQueryValueExW
wmisvc.dll.IsImproperShutdownDetected
wevtapi.dll.EvtRender
wevtapi.dll.EvtNext
wevtapi.dll.EvtClose
wevtapi.dll.EvtQuery
wevtapi.dll.EvtCreateRenderContext
rpcrt4.dll.RpcBindingSetAuthInfoExW
rpcrt4.dll.RpcBindingSetOption
ole32.dll.CoCreateFreeThreadedMarshaler
ole32.dll.CreateStreamOnHGlobal
kernelbase.dll.InitializeAcl
kernelbase.dll.AddAce
sechost.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll.IsThreadAFiber
kernel32.dll.OpenProcessToken
kernelbase.dll.GetTokenInformation
kernelbase.dll.DuplicateTokenEx
kernelbase.dll.AdjustTokenPrivileges
kernelbase.dll.AllocateAndInitializeSid
kernelbase.dll.CheckTokenMembership
kernel32.dll.SetThreadToken
ole32.dll.CLSIDFromString
oleaut32.dll.#285
oleaut32.dll.#12
oleaut32.dll.#286
oleaut32.dll.#17
oleaut32.dll.#20
oleaut32.dll.#19
oleaut32.dll.#25
ole32.dll.CoRevertToSelf
advapi32.dll.LogonUserExExW
authz.dll.AuthzInitializeContextFromSid
ole32.dll.CoGetCallContext
ole32.dll.CoImpersonateClient
advapi32.dll.OpenThreadToken
oleaut32.dll.#8
ole32.dll.CoSwitchCallContext
oleaut32.dll.#287
oleaut32.dll.#288
oleaut32.dll.#289
ws2_32.dll.GetAddrInfoW
ws2_32.dll.#2
ws2_32.dll.#21
ws2_32.dll.#9
ws2_32.dll.FreeAddrInfoW
ws2_32.dll.#6
ws2_32.dll.#5
schannel.dll.SpUserModeInitialize
ws2_32.dll.WSASend
ws2_32.dll.WSARecv
secur32.dll.FreeContextBuffer
ncrypt.dll.SslOpenProvider
ncrypt.dll.GetSChannelInterface
bcryptprimitives.dll.GetHashInterface
ncrypt.dll.SslIncrementProviderReferenceCount
ncrypt.dll.SslImportKey
bcryptprimitives.dll.GetCipherInterface
ncrypt.dll.SslLookupCipherSuiteInfo
user32.dll.LoadStringW
ncrypt.dll.BCryptOpenAlgorithmProvider
ncrypt.dll.BCryptGetProperty
ncrypt.dll.BCryptCreateHash
ncrypt.dll.BCryptHashData
ncrypt.dll.BCryptFinishHash
ncrypt.dll.BCryptDestroyHash
crypt32.dll.CertGetCertificateChain
userenv.dll.GetUserProfileDirectoryW
sechost.dll.ConvertSidToStringSidW
sechost.dll.ConvertStringSidToSidW
userenv.dll.RegisterGPNotification
gpapi.dll.RegisterGPNotificationInternal
sechost.dll.QueryServiceConfigW
cryptnet.dll.CryptRetrieveObjectByUrlW
cryptnet.dll.I_CryptNetGetConnectivity
sensapi.dll.IsNetworkAlive
rpcrt4.dll.NdrClientCall2
winhttp.dll.WinHttpOpen
winhttp.dll.WinHttpSetTimeouts
winhttp.dll.WinHttpSetOption
winhttp.dll.WinHttpCrackUrl
winhttp.dll.WinHttpConnect
winhttp.dll.WinHttpOpenRequest
winhttp.dll.WinHttpGetDefaultProxyConfiguration
advapi32.dll.RegDeleteTreeA
advapi32.dll.RegDeleteTreeW
nsi.dll.NsiAllocateAndGetTable
cfgmgr32.dll.CM_Open_Class_Key_ExW
iphlpapi.dll.ConvertInterfaceGuidToLuid
iphlpapi.dll.GetIfEntry2
iphlpapi.dll.GetIpForwardTable2
iphlpapi.dll.GetIpNetEntry2
nsi.dll.NsiFreeTable
winhttp.dll.WinHttpGetProxyForUrl
winhttp.dll.WinHttpSendRequest
winhttp.dll.WinHttpReceiveResponse
winhttp.dll.WinHttpQueryHeaders
winhttp.dll.WinHttpQueryDataAvailable
ws2_32.dll.#22
winhttp.dll.WinHttpReadData
ws2_32.dll.#3
winhttp.dll.WinHttpCloseHandle
cryptnet.dll.I_CryptNetSetUrlCacheFlushInfo
setupapi.dll.SetupIterateCabinetW
cabinet.dll.#20
cabinet.dll.#22
cabinet.dll.#23
sechost.dll.QueryServiceConfigA
rpcrt4.dll.RpcEpResolveBinding
crypt32.dll.CertVerifyCertificateChainPolicy
crypt32.dll.CertFreeCertificateChain
crypt32.dll.CertDuplicateCertificateContext
crypt32.dll.CertFreeCertificateContext
fastprox.dll.DllGetClassObject
fastprox.dll.DllCanUnloadNow
oleaut32.dll.#290
wmi.dll.WmiQueryAllDataW
wmi.dll.WmiQuerySingleInstanceW
wmi.dll.WmiSetSingleItemW
wmi.dll.WmiSetSingleInstanceW
wmi.dll.WmiExecuteMethodW
wmi.dll.WmiNotificationRegistrationW
wmi.dll.WmiMofEnumerateResourcesW
wmi.dll.WmiFileHandleToInstanceNameW
wmi.dll.WmiDevInstToInstanceNameW
wmi.dll.WmiQueryGuidInformation
wmi.dll.WmiOpenBlock
wmi.dll.WmiCloseBlock
wmi.dll.WmiFreeBuffer
wmi.dll.WmiEnumerateGuids
rpcrt4.dll.UuidFromStringW
radarrs.dll.WdiDiagnosticModuleMain
radarrs.dll.WdiHandleInstance
radarrs.dll.WdiGetDiagnosticModuleInterfaceVersion
gdi32.dll.GetLayout
gdi32.dll.GdiRealizationInfo
gdi32.dll.FontIsLinked
gdi32.dll.GetTextFaceAliasW
gdi32.dll.GetFontAssocStatus
advapi32.dll.RegQueryValueExA
gdi32.dll.GdiIsMetaPrintDC
ole32.dll.CoRegisterInitializeSpy
ole32.dll.CoRevokeInitializeSpy
oleaut32.dll.SysAllocString
oleaut32.dll.SysFreeString
mscorsvc.dll.CorGetSvc
advapi32.dll.StartServiceCtrlDispatcherW
kernel32.dll.VerSetConditionMask
kernel32.dll.VerifyVersionInfoW
advapi32.dll.RegisterServiceCtrlHandlerExW
advapi32.dll.SetServiceStatus
advapi32.dll.OpenSCManagerW
mscoree.dll.CorIsLatestSvc
mscoreei.dll.CorIsLatestSvc
msidle.dll.#8
wtsapi32.dll.WTSQuerySessionInformationW
winsta.dll.WinStationEnumerateW
winsta.dll.WinStationFreeMemory
powrprof.dll.CallNtPowerInformation
mscoree.dll.GetCORRootDirectory
mscoreei.dll.GetCORRootDirectory

Execute Commands

"cmd"
"C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe"
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe "C:\Users\Seven01\AppData\Roaming\zxftyytre\filename.exe"
schtasks.exe  /Delete /TN "Update\Update" /F
taskeng.exe {513494DA-44B6-4567-B247-8E8A881C4619} S-1-5-18:NT AUTHORITY\System:Service:
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\840493973.xml"
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1650946654.xml"
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\201350900.xml"
C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1168644672.xml"
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1784734666.xml"
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\372828621.xml"
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1452519068.xml"
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\214493901.xml"
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1586929957.xml"
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\1325069775.xml"
schtasks.exe  /Create /TN "Update\Update" /XML "C:\Users\Seven01\AppData\Local\Temp\257899452.xml"

Started Services

SSDPSRV
AdobeFlashPlayerUpdateSvc

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-30 20:10:31 2018-06-30 20:14:42 251

3 HTTP Request(s) detected

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 5.178.42.136
  • Port: 80
  • Count: 1

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86402
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://checkip.dyndns.org/
  • Hostname: checkip.dyndns.org
  • IP Address: 162.88.100.200
  • Port: 80
  • Count: 1

GET / HTTP/1.1
Host: checkip.dyndns.org
Connection: Keep-Alive

http://www.paulocamarao.com/wp-log/WINHOSTOUT.exe
  • Hostname: www.paulocamarao.com
  • IP Address: 10.1.26.180
  • Port: 80
  • Count: 1

GET /wp-log/WINHOSTOUT.exe HTTP/1.1
Host: www.paulocamarao.com
Connection: Keep-Alive