MalScore
100/100

Quotation Sheet-Products,xls.exe

Is DLL Packer Anti Debug Anti VM Signed XOR Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 1308.50 KB (1339904 bytes)
Compile time: 1988-01-26 16:35:43
MD5: dfb8998ef0e49c09947af249600bc3a0
SHA1: 5ed40039abd4cf57ef3402962761c676020ff28b
SHA256: f69a9975289cb56afa3c53495beaa9aa567d188d4822178ea78ba6f5849b140b
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 'g?/DF .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-07-30 12:13:48
Last submission: 2018-07-30 12:13:48
Filename detected: - Quotation Sheet-Products,xls.exe (1)
URL file hosting
Antivirus Report
Report Date Detection Ratio Permalink Update
No report available
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
'g?/DF 0x2000 0x1c44 7680 2cdf8496cd042196a48d407c616c65ec 92daa94749598ed07fe7f4a2d0bfe6784b74d148
.text 0x4000 0x1442a0 1328128 4c438bd094b01ed04e9dd954c1206602 a869e2871f92f3b534e2105389cd1534f574a533
.rsrc 0x14a000 0x608 2048 efa1af8850d2b817962777c1fd555de2 e0a7be31816a2064d06b52d10b1234933463082a
.reloc 0x14c000 0xc 512 1782f2aabace236b30bf960fc56e7d44 291021db82428015464f783835f1b33856cecf13
0x14e000 0x10 512 6d88d72f5e07006e2414309934bda840 2d34ef192ae09d8fed98b8cd64a34bcc49722968
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x14a0a0 892 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x14a41c 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Engie Global LNG
Assembly Version: 0.0.0.0
InternalName: RICHHH CRRRR.exe
FileVersion: 12.3.11.4
CompanyName: Engie Global LNG
Comments: ebigaciqoguqad
ProductName: FastCGI handler
ProductVersion: 12.3.11.4
FileDescription: FastCGI handler
Translation: 0x0000 0x04b0
OriginalFilename: RICHHH CRRRR.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
Ii.dll
\vgjn22.dll
mscoree.dll
KERNEL32.dll
mjcnm32.dll
IP Found
12.3.11.4
URL(s)
No URL found
String too long
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.exe
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.fm.resources
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.Resources.Ii.dll.mb
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.Properties
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.Properties.Resources.resources
InternalName
! " #
7f63ef8a-07a6-34149
7f63ef8a-07a6-34148
.0.0
7f63ef8a-07a6-34143
7f63ef8a-07a6-34142
7f63ef8a-07a6-34141
7f63ef8a-07a6-34140
7f63ef8a-07a6-34147
7f63ef8a-07a6-34146
7f63ef8a-07a6-34145
7f63ef8a-07a6-34144
7f63ef8a-07a6-34401n
LegalCopyright
File
7f63ef8a-07a6-34491
7f63ef8a-07a6-34490
7f63ef8a-07a6-34356
7f63ef8a-07a6-34357
7f63ef8a-07a6-34354
7f63ef8a-07a6-34355
7f63ef8a-07a6-34352
7f63ef8a-07a6-34353
7f63ef8a-07a6-34350
7f63ef8a-07a6-34351
7f63ef8a-07a6-34358
7f63ef8a-07a6-34359
ProductVer
7f63ef8a-07a6-34193
7f63ef8a-07a6-34408
7f63ef8a-07a6-34409
7f63ef8a-07a6-34402
7f63ef8a-07a6-34403
7f63ef8a-07a6-34400
7f63ef8a-07a6-34406
7f63ef8a-07a6-34407
7f63ef8a-07a6-34404
7f63ef8a-07a6-34405
1.0.0.0
Ii.dll
7f63ef8a-07a6-34219
7f63ef8a-07a6-34218
7f63ef8a-07a6-34217
7f63ef8a-07a6-34216
7f63ef8a-07a6-34215
7f63ef8a-07a6-34214
7f63ef8a-07a6-34213
7f63ef8a-07a6-34212
7f63ef8a-07a6-34211
7f63ef8a-07a6-34210
OriginalFi
2018
lTrademarks
7f63ef8a-07a6-34323
7f63ef8a-07a6-34322
7f63ef8a-07a6-34321
7f63ef8a-07a6-34320
7f63ef8a-07a6-34327
7f63ef8a-07a6-34326
7f63ef8a-07a6-34325
7f63ef8a-07a6-34324
7f63ef8a-07a6-34329
7f63ef8a-07a6-34328
FileDescript
7f63ef8a-07a6-34107
7f63ef8a-07a6-34106
7f63ef8a-07a6-34105
7f63ef8a-07a6-34104
7f63ef8a-07a6-34103
7f63ef8a-07a6-34102
7f63ef8a-07a6-34101
7f63ef8a-07a6-34100
7f63ef8a-07a6-34109
7f63ef8a-07a6-34108
7f63ef8a-07a6-3452
7f63ef8a-07a6-3453
7f63ef8a-07a6-3450
7f63ef8a-07a6-3451
7f63ef8a-07a6-3456
7f63ef8a-07a6-3457
7f63ef8a-07a6-3454
7f63ef8a-07a6-3455
7f63ef8a-07a6-3458
7f63ef8a-07a6-3459
7f63ef8a-07a6-3427
7f63ef8a-07a6-3426
7f63ef8a-07a6-3425
7f63ef8a-07a6-3424
7f63ef8a-07a6-3423
7f63ef8a-07a6-3422
7f63ef8a-07a6-3421
7f63ef8a-07a6-3420
7f63ef8a-07a6-3429
7f63ef8a-07a6-3428
7f63ef8a-07a6-34378
7f63ef8a-07a6-34379
7f63ef8a-07a6-34376
7f63ef8a-07a6-34198
7f63ef8a-07a6-34199
7f63ef8a-07a6-34194
7f63ef8a-07a6-34195
7f63ef8a-07a6-34196
7f63ef8a-07a6-34197
7f63ef8a-07a6-34190
7f63ef8a-07a6-34191
7f63ef8a-07a6-34192
7f63ef8a-07a6-34278
& ' ( ) * /.
7f63ef8a-07a6-34392
7f63ef8a-07a6-34393
7f63ef8a-07a6-34390
7f63ef8a-07a6-34391
7f63ef8a-07a6-34396
7f63ef8a-07a6-34397
7f63ef8a-07a6-34394
7f63ef8a-07a6-34395
7f63ef8a-07a6-34398
7f63ef8a-07a6-34399
RICHHH CRRRR.exe
7f63ef8a-07a6-34446
7f63ef8a-07a6-34447
7f63ef8a-07a6-34444
7f63ef8a-07a6-34445
7f63ef8a-07a6-34442
7f63ef8a-07a6-34443
7f63ef8a-07a6-34440
7f63ef8a-07a6-34441
7f63ef8a-07a6-34448
7f63ef8a-07a6-34449
FileVersion
ProductVersion
0.0.0.0
OriginalFilename
7f63ef8a-07a6-34433
7f63ef8a-07a6-34432
7f63ef8a-07a6-34431
7f63ef8a-07a6-34430
7f63ef8a-07a6-34437
7f63ef8a-07a6-34436
7f63ef8a-07a6-34435
7f63ef8a-07a6-34434
7f63ef8a-07a6-34439
7f63ef8a-07a6-34438
7f63ef8a-07a6-34240
7f63ef8a-07a6-34241
7f63ef8a-07a6-34242
7f63ef8a-07a6-34243
7f63ef8a-07a6-34244
7f63ef8a-07a6-34245
7f63ef8a-07a6-34369
7f63ef8a-07a6-34368
7f63ef8a-07a6-34367
7f63ef8a-07a6-34366
7f63ef8a-07a6-34365
7f63ef8a-07a6-34364
7f63ef8a-07a6-34363
7f63ef8a-07a6-34362
7f63ef8a-07a6-34361
7f63ef8a-07a6-34360
7f63ef8a-07a6-3418
7f63ef8a-07a6-3419
7f63ef8a-07a6-3416
Ii_dll
7f63ef8a-07a6-3414
7f63ef8a-07a6-3415
7f63ef8a-07a6-3412
7f63ef8a-07a6-3413
7f63ef8a-07a6-3410
7f63ef8a-07a6-3411
Engie Global LNG
7f63ef8a-07a6-34370
7f63ef8a-07a6-34158
7f63ef8a-07a6-34159
7f63ef8a-07a6-34150
7f63ef8a-07a6-34151
7f63ef8a-07a6-34152
7f63ef8a-07a6-34153
7f63ef8a-07a6-34154
7f63ef8a-07a6-34155
7f63ef8a-07a6-34156
7f63ef8a-07a6-34157
7f63ef8a-07a6-34482
7f63ef8a-07a6-34483
7f63ef8a-07a6-34480
7f63ef8a-07a6-34481
7f63ef8a-07a6-34486
7f63ef8a-07a6-34487
7f63ef8a-07a6-34484
7f63ef8a-07a6-34485
7f63ef8a-07a6-34488
7f63ef8a-07a6-34489
7f63ef8a-07a6-34297
7f63ef8a-07a6-34296
7f63ef8a-07a6-34295
7f63ef8a-07a6-34294
7f63ef8a-07a6-34293
7f63ef8a-07a6-34292
7f63ef8a-07a6-34291
7f63ef8a-07a6-34290
3cab3c10-0d98-45
7f63ef8a-07a6-34299
7f63ef8a-07a6-34298
-1K
Copyright
ebigaciqoguqad
7f63ef8a-07a6-34479
7f63ef8a-07a6-34478
7f63ef8a-07a6-34477
7f63ef8a-07a6-34476
7f63ef8a-07a6-34475
7f63ef8a-07a6-34474
7f63ef8a-07a6-34473
7f63ef8a-07a6-34472
7f63ef8a-07a6-34471
7f63ef8a-07a6-34470
7f63ef8a-07a6-34208
7f63ef8a-07a6-34209
7f63ef8a-07a6-34204
7f63ef8a-07a6-34205
7f63ef8a-07a6-34206
7f63ef8a-07a6-34207
7f63ef8a-07a6-34200
7f63ef8a-07a6-34201
7f63ef8a-07a6-34202
7f63ef8a-07a6-34203
7f63ef8a-07a6-34330
7f63ef8a-07a6-34331
7f63ef8a-07a6-34332
7f63ef8a-07a6-34333
7f63ef8a-07a6-34334
7f63ef8a-07a6-34335
7f63ef8a-07a6-34336
7f63ef8a-07a6-34337
7f63ef8a-07a6-34338
7f63ef8a-07a6-34339
7f63ef8a-07a6-34114
7f63ef8a-07a6-34115
7f63ef8a-07a6-34116
7f63ef8a-07a6-34117
7f63ef8a-07a6-34110
7f63ef8a-07a6-34111
7f63ef8a-07a6-34112
7f63ef8a-07a6-34113
VS_VERSION_INFO
7f63ef8a-07a6-34118
7f63ef8a-07a6-34119
7f63ef8a-07a6-3441
7f63ef8a-07a6-3440
7f63ef8a-07a6-3443
7f63ef8a-07a6-3442
7f63ef8a-07a6-3445
7f63ef8a-07a6-3444
7f63ef8a-07a6-3447
7f63ef8a-07a6-3446
7f63ef8a-07a6-3449
7f63ef8a-07a6-3448
FastCGI handler
mpanyName
7f63ef8a-07a6-34389
7f63ef8a-07a6-34388
7f63ef8a-07a6-34385
7f63ef8a-07a6-34246
7f63ef8a-07a6-34247
7f63ef8a-07a6-34248
7f63ef8a-07a6-34383
7f63ef8a-07a6-34249
7f63ef8a-07a6-34382
Comments
7f63ef8a-07a6-34420
7f63ef8a-07a6-34421
7f63ef8a-07a6-34422
7f63ef8a-07a6-34423
7f63ef8a-07a6-34424
7f63ef8a-07a6-34425
7f63ef8a-07a6-34426
7f63ef8a-07a6-34427
7f63ef8a-07a6-34428
7f63ef8a-07a6-34429
7f63ef8a-07a6-34275
7f63ef8a-07a6-34274
7f63ef8a-07a6-34277
7f63ef8a-07a6-34276
7f63ef8a-07a6-34271
7f63ef8a-07a6-34270
7f63ef8a-07a6-34273
7f63ef8a-07a6-34272
7f63ef8a-07a6-34374
7f63ef8a-07a6-34375
Translation
7f63ef8a-07a6-34377
7f63ef8a-07a6-34279
7f63ef8a-07a6-34371
7f63ef8a-07a6-34372
7f63ef8a-07a6-34373
7f63ef8a-07a6-3496
7f63ef8a-07a6-3497
7f63ef8a-07a6-3494
7f63ef8a-07a6-3495
7f63ef8a-07a6-3492
7f63ef8a-07a6-3493
7f63ef8a-07a6-3490
7f63ef8a-07a6-3491
7f63ef8a-07a6-3498
7f63ef8a-07a6-3499
Lega
7f63ef8a-07a6-3417
dll
yright
7f63ef8a-07a6-34169
7f63ef8a-07a6-34168
7f63ef8a-07a6-34165
7f63ef8a-07a6-34164
7f63ef8a-07a6-34167
7f63ef8a-07a6-34166
7f63ef8a-07a6-34161
7f63ef8a-07a6-34160
7f63ef8a-07a6-34163
7f63ef8a-07a6-34162
7f63ef8a-07a6-34284
7f63ef8a-07a6-34285
7f63ef8a-07a6-34286
7f63ef8a-07a6-34287
7f63ef8a-07a6-34280
7f63ef8a-07a6-34281
7f63ef8a-07a6-34282
7f63ef8a-07a6-34283
7f63ef8a-07a6-34288
7f63ef8a-07a6-34289
|<:
7f63ef8a-07a6-34231
7f63ef8a-07a6-34230
7f63ef8a-07a6-34233
7f63ef8a-07a6-34232
7f63ef8a-07a6-34235
7f63ef8a-07a6-34234
7f63ef8a-07a6-34237
7f63ef8a-07a6-34236
7f63ef8a-07a6-34239
7f63ef8a-07a6-34238
7f63ef8a-07a6-34468
7f63ef8a-07a6-34469
7f63ef8a-07a6-34464
7f63ef8a-07a6-34465
7f63ef8a-07a6-34466
7f63ef8a-07a6-34467
7f63ef8a-07a6-34460
7f63ef8a-07a6-34461
7f63ef8a-07a6-34462
StringFile
VS_VERSION
7f63ef8a-07a6-34305
7f63ef8a-07a6-34304
7f63ef8a-07a6-34307
7f63ef8a-07a6-34306
7f63ef8a-07a6-34301
7f63ef8a-07a6-34300
7f63ef8a-07a6-34303
7f63ef8a-07a6-34302
7f63ef8a-07a6-34309
7f63ef8a-07a6-34308
7f63ef8a-07a6-34129
7f63ef8a-07a6-34128
7f63ef8a-07a6-34121
7f63ef8a-07a6-34120
7f63ef8a-07a6-34123
7f63ef8a-07a6-34122
7f63ef8a-07a6-34125
7f63ef8a-07a6-34124
7f63ef8a-07a6-34127
7f63ef8a-07a6-34126
7f63ef8a-07a6-3474
7f63ef8a-07a6-3475
7f63ef8a-07a6-3476
7f63ef8a-07a6-3477
7f63ef8a-07a6-3470
7f63ef8a-07a6-3471
7f63ef8a-07a6-3472
7f63ef8a-07a6-3473
7f63ef8a-07a6-3478
7f63ef8a-07a6-3479
ion
000004b0
oductName
FileDescription
7f63ef8a-07a6-34251
7f63ef8a-07a6-34250
P-`
7f63ef8a-07a6-34341
7f63ef8a-07a6-34340
7f63ef8a-07a6-34343
7f63ef8a-07a6-34342
7f63ef8a-07a6-34345
7f63ef8a-07a6-34344
7f63ef8a-07a6-34347
7f63ef8a-07a6-34346
7f63ef8a-07a6-34349
7f63ef8a-07a6-34348
StringFileInfo
7f63ef8a-07a6-34416
7f63ef8a-07a6-34259
7f63ef8a-07a6-34415
7f63ef8a-07a6-34414
7f63ef8a-07a6-34417
7f63ef8a-07a6-34311
7f63ef8a-07a6-34411
7f63ef8a-07a6-34410
7f63ef8a-07a6-34413
7f63ef8a-07a6-34412
7f63ef8a-07a6-34419
7f63ef8a-07a6-34418
7f63ef8a-07a6-34268
7f63ef8a-07a6-34269
7f63ef8a-07a6-34262
7f63ef8a-07a6-34263
7f63ef8a-07a6-34260
7f63ef8a-07a6-34261
7f63ef8a-07a6-34266
7f63ef8a-07a6-34267
7f63ef8a-07a6-34264
7f63ef8a-07a6-34265
VarFileInfo
7f63ef8a-07a6-3485
7f63ef8a-07a6-3484
7f63ef8a-07a6-3487
7f63ef8a-07a6-3486
7f63ef8a-07a6-3481
7f63ef8a-07a6-3480
7f63ef8a-07a6-3483
7f63ef8a-07a6-3482
12.3.11.4
7f63ef8a-07a6-3489
7f63ef8a-07a6-3488
7f63ef8a-07a6-34172
7f63ef8a-07a6-34173
7f63ef8a-07a6-34170
7f63ef8a-07a6-34171
7f63ef8a-07a6-34176
7f63ef8a-07a6-34177
7f63ef8a-07a6-34174
7f63ef8a-07a6-34175
7f63ef8a-07a6-34178
7f63ef8a-07a6-34179
7f63ef8a-07a6-3430
7f63ef8a-07a6-3431
7f63ef8a-07a6-3432
7f63ef8a-07a6-3433
7f63ef8a-07a6-3434
7f63ef8a-07a6-3435
7f63ef8a-07a6-3436
7f63ef8a-07a6-3437
7f63ef8a-07a6-3438
7f63ef8a-07a6-3439
ProductName
7f63ef8a-07a6-344
7f63ef8a-07a6-345
7f63ef8a-07a6-346
7f63ef8a-07a6-347
7f63ef8a-07a6-340
7f63ef8a-07a6-341
7f63ef8a-07a6-342
7f63ef8a-07a6-343
7f63ef8a-07a6-348
7f63ef8a-07a6-349
7f63ef8a-07a6-34463
7f63ef8a-07a6-34189
7f63ef8a-07a6-34188
7f63ef8a-07a6-34187
7f63ef8a-07a6-34186
7f63ef8a-07a6-34185
7f63ef8a-07a6-34184
7f63ef8a-07a6-34183
7f63ef8a-07a6-34182
7f63ef8a-07a6-34181
7f63ef8a-07a6-34180
7f63ef8a-07a6-3464
Copyr
7f63ef8a-07a6-34226
7f63ef8a-07a6-34227
7f63ef8a-07a6-34224
7f63ef8a-07a6-34225
7f63ef8a-07a6-34222
7f63ef8a-07a6-34223
7f63ef8a-07a6-34220
7f63ef8a-07a6-34221
mbly Version
7f63ef8a-07a6-34384
7f63ef8a-07a6-34387
7f63ef8a-07a6-34386
7f63ef8a-07a6-34381
7f63ef8a-07a6-34380
7f63ef8a-07a6-34228
7f63ef8a-07a6-34229
2018 Engie Global LNG
Assembly Version
CompanyName
7f63ef8a-07a6-34451
7f63ef8a-07a6-34450
7f63ef8a-07a6-34453
7f63ef8a-07a6-34452
7f63ef8a-07a6-34455
7f63ef8a-07a6-34454
7f63ef8a-07a6-34457
7f63ef8a-07a6-34456
7f63ef8a-07a6-34459
7f63ef8a-07a6-34458
7f63ef8a-07a6-34253
7f63ef8a-07a6-34252
7f63ef8a-07a6-34318
7f63ef8a-07a6-34319
7f63ef8a-07a6-34257
7f63ef8a-07a6-34256
7f63ef8a-07a6-34255
7f63ef8a-07a6-34254
7f63ef8a-07a6-34312
7f63ef8a-07a6-34313
7f63ef8a-07a6-34310
7f63ef8a-07a6-34258
7f63ef8a-07a6-34316
7f63ef8a-07a6-34317
7f63ef8a-07a6-34314
7f63ef8a-07a6-34315
7f63ef8a-07a6-34138
7f63ef8a-07a6-34139
7f63ef8a-07a6-34136
7f63ef8a-07a6-34137
7f63ef8a-07a6-34134
7f63ef8a-07a6-34135
7f63ef8a-07a6-34132
7f63ef8a-07a6-34133
7f63ef8a-07a6-34130
7f63ef8a-07a6-34131
7f63ef8a-07a6-3469
7f63ef8a-07a6-3468
7f63ef8a-07a6-3463
7f63ef8a-07a6-3462
7f63ef8a-07a6-3461
7f63ef8a-07a6-3460
7f63ef8a-07a6-3467
7f63ef8a-07a6-3466
7f63ef8a-07a6-3465
$this.Icon
jdy
JgJ%
u`.P;
/ a+
*AWp
`D(
^5^s
cUcU
GetDelegateForFunctionCxfpvcp
Ca0
^w6
T=&0
E@I7
PNG
F7] 7
[c\
/s6i06
*Rvp2
T98d$: 0Ux#tsAI)B9=[]Kv;*
cq(n
ResolveEventHandler
DlY#
S-;C
Z5v(
FG8E$
G$EF]
-h\Cm'b
VkGf
T :
UnverifiableCodeAttribute
&y(7dj <)N
b PsL
]NM0
#hnh
Qom0y
zW\N?Vs
F+ S
;`4x
S-u^pB
A-/
q7^l
O.,SN
c4![("F
$OY_k
{@u0
r7gtj
"RaVk
pM2F
"qZ!$H7
+QvD
6is1
LxLT
CryptoStream
if5W6L$t
\v n
) ?:?
,B`>
l|G:
%$DcY
I% Oj.
jhe6
gBy91m
NwU
i,MH.y6
t;-+r
4-if?
5R/[7
T*WU^
g;sh
wnm_
}i=b
})nf
(#z
3
fbq~
5'j [A
=y)M
.<Gi
^R<
92bqb;
E3K>o ]}x
!PsY_
=0 @
[x 4
:d $>
[gNe
d<YTn
^dm+
h>:&4
Z ^1R?b
\1t#oi
tZ74
l3kP
Recent
cQoR
|;Z3
eQxbamT
U0 #W
Kg(o.P
/zIU
db~c
c{lavi
#cwI
VQ"v
^hz
g?W2
P-vI
;j-@
B2tK-
pYu}
tu^ C/G
J@ s
PuAY
#L8=
xt&S
AZoaD,
nXaE
*iH*
j )l
Rm~=
ioe@
M[`)
R=sEI
X Q-s
D?r3
U=>\F
}o=z
G{6R
)2rFv,_<
99p3
HP P[[
Format
gxh19
EAog
QRQ=
a]gc
6N^
6Xf/
=.%yh
086DC6EE6B30B4B2VS?,1437838FACD165AA2F01
&jRdL
tvfw
fbss
]uuOz1
{CyaM
B9kP=
\d8q
<!
dYlO
![<+
`Xv
9mE4N
K]=P
~61/
?Mv_
K$I}
t=$|
,3B@
>5l4
x+.E
A;Q~M
OpenSubKey
;=ig
@15
$4l:
PXQ;
fVt@|
kQF&
: LI
>r)1
DtcleworkDisplayName
;qq:
?9
UD7'
#0%<
Rm5\
XpGq
set_Text
qD+u
.yA0
muZ6p
*[a(
,?}LY0u
S8yd
Ro3}
[0~z
YA@'*
dMK/E(|c?F^Gp$00[d?;xPn{"
Q`w3
iSourceFile
;*,!!
1Kj
mC|x
)54QY
yW'>8
k 4I
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
)=?V
xE^F
(nD}
L}Gf
ZP#h
X @
^n<4
_!f
cD.l
_a|E
Qa693
j_ <D
aj4+
[H#X
+VKK
IFdz
Z UPO
QK ]
nabd
@D?e
DefineType
ynpPI
Ie.g^
#1Na
,h{PMV
O`hx
Qi7=
1ZwS
qhUQ
IU |
O? 2L
Jm&
QGe 2`
,3:"
/wrv
"7HbHx
3<QX@)%i
Char
AM e3
u~h3
\oy%
PA %
r}!6l
z-k"
Waig_npfjg
7wHg~p
GetValue
(7P`@
-.6H
LDG&j
*<d{
D%_
XW o
{@:3PB
| ss
IDATx^
.It~|WD
$=*OsBQ
PX(Z
qo
V }C
h^\v
GdD{
<S[2
<z/rs
Pb}lghvTser
zc ~
HIYM
/^LV
[gWx
~#zte
NpSBWi
51fX
4;V4
$K\Ap
6#aVI
?14IW>G
t:0-
Data
Gvc[{ovR`th
D=c%
',~r
&'._x
#*"D p
d|yv|
GetParameters
Qa|'n
nCK5
`5%D_
vc/I
aat<=B
5Nak\
4 k[
.text
[vK_
=S2<
pcqtlt
GetObject
;L s
lbCq}"
nv@tffer
K PE
)aI98
WrmkeakogModes
Setg~ayqDcre
DG.a
f=pY
object
'bsk
]\|C
uk?N
'
oSrff
+@h&2K
je'=
Rtblic
PZ^V4$
CommonOemLinxd
S|bg
U M2_
o$zU
Z3?,
&E&,[
sBfQ`
9'CL
9LFN>
^v}mjgn
Wy;n
6b"/
,*UW
C=P6|
[[lC
7o:{
IP7mf
Cu//h
{;-fa
IrmX0R`
.1n;
a&Y0 u
Pmm`.
(Ee:
+.sH
$&-%
nV@F
rZZE
R-#l
@\[h
`f2g
.S5MQ^
RY8-
gml
a0 l2j
JuC0!7J
4Ra(
$ 4<
561
|19w
+"q/
\pyo
p{ k0
zc1
+gff
8MF,ey
ovb)U
Mb#f
kAuE
|cnt
/Xye
kccq
lnT4\\w
1bKL
_u!vs
"5 #T
<%Wa
RN=w
>|87
DpYMU
Cf2 ;o
b y5
@(Q @
LocalAppData_xx
PublicLibraries
ICs,
BH *
I=S:
w}_SnHDL
.ctor
get_CodeBase
0Ez'
#z`rA
cLf-
|r /
+%<}
rM@
[ar G
5'uP
S#/
k -&
Settings
Rfc2898DvefhgD{ues
rBq5D
SjxkhgQInvokeMethod
SsTE
JC)[
;GPVVb
streamBytesTransur}lgb
Z 6}J
1'[&
ki1&
\S\b
RI3
7j%*Q
DY'T{RX@
rNI ,B
2g5X
i+ jS
gT6<f)p
Qh?f%
#f]s
-o $
d= @
l@223
D2@g.
\^- i
]2|zWU\V/){!5Kj=%Ui,d}/4&
mucc
X /Ml!
G;pa
T&-h
H#V7
$0(Vk
F9>2
l_t;
p$'c
:b(Y
xh]HB
MCM
TargetFrameworkAttribute
H<{
+Yp(f
11mM
SearchHistory
1Y6f1
=>5Y
RnmuoAlbums
k EUZ<
, EG
6L=5
ZW?U
}&7 fm
w K:
3W9d
,h(Z
c-EB
<ih_
get_Assembly
$+GY
MsYy F
;k V
Y,/
mU`z
hcn h
z+u0j
[EGHo
u4;,
@K{ @
:[lP
; |b
\VT`
4^kMz|
I)v|
w bG4R4
AXl(
!KS6*Q
No~7w
7u<@K
FFR Kk2
i@W%
*!N
9gNg6
(Er6
oh>I
weg
S/In
+p,;
3jo]it
Fi $
Su nL
OHfA
Pr!.
X$De
!0~r
B *|{3
j2sd
\Jl@
rS;
?D~H
s} yY
\&Ty
6 @!?J
LddO,6
^H'Bwj
H~t
IHDR
,#HVL:{
4Bmz
7/'J
v_"[
ygr]Lodule
HJ>t
=bd|
,bB9
C!RDm{
I2jA
-;s"0;3
ao SKe
dUf"
]\6B
EPR(
^Y3=
System
f%lp
Application
ZEt"
T+h[
OD8!X
'7 W
aq-V2
'ToXW
l hxv&h
JAZ:
dl }
E 2#gb
*T8(Q
|+4D
C( @
^`qi
k;d~Z
vX4Lc(
>DyF#
52P
yb=9
hK n
`{Ek
-@"VH
G#$fGM
Zlm~
~<IH
MethodBase
C<w&{ngSP
X@t{
@wnC
Ly]n
eQ*X
FAfw
+;Zi
V{WM J
%_]Wc
FY<Fz'
-Bt
DF)g
h)5_
b3x]
weT.
AssemblyTitleAttrzuzjg
a5 B
p ^J
--YW
17#q
1a2D
B7 g
u91=
width
2jyW
!,![
0oOl
Py;#A_
&kY0
Qoa`p
]29I
}D?x
dcC"j
CD{L
uvIL
Fs,b
LuOQ
4@G_
{u3P
g"T$,
g5r#4
R=c*
I]wY
EX,A
; =T
0@[>
y#Q\E(7cF:?
oY^c
fLOq
{zF
|*vU
y#Un
<lYB7N|
[`n<-R
b.@.
fZal
"{.K[P
lSystem.Resources.Ar|qwtadReader, mscorlib, Versio}*;02(2/0, Culture=neutral, PublztD{{Rmjen=b77a5c561934e089#Systvz!Lgumtrces.RuntimeResourceSet
,@ai
F3ED
Mu&*\C
4zD >
NRa'
;.RP
]M .9
}@i]
C }T
/a~
D 2`|y
Z|nu
g:Q*
cU c
O]qx
@ _ |
(4.>
wmjC
$OSc>!
zmZW
5,43
mu::,
PbH?3p4
U Z0R
qt*q|
`>d@
*JE
=6.Lh
Desktop
ph/@
m(fS
m"xV
U8Q#P
ContainsKey
3}v!}J
ZMyK
[rSSR
:g?K
' }7
VS%a
0 vY
P.5f
M$\
&s0Gz-V
/r-C
QhQ=
2k:kdw_
{{`UHlQ
/X[e.X
er^[
W~_u~
B`~W
'\/)
m}lV
|{STA
2;a+
ck (
8n12
eTm"CM-
) R pR
E6JhC
{q/f
],5Y
W,93
14nBN
nS-PblR
H^jtP}
QAFN
KH6\
PIP k
GileShare
UgfLG<
r'im
;*1IS<F
T%aj&
VZ #U
y4Mm
$JKu
*&"
^B`EB
:I?s
a l2Y#
aiv"y
av1[
* f"
!sg:
eq9,
zRC>@ l
addres`
_}U,Z
Nxqf
rvH1
I@7n
SHGetKnownFolderPat{
[^:o4
&j=""
&8}O
saw}
PAzY
hHBc
_ yo
}n%?
z`,d
<r_{%
?18Iwjo
b6m+
mgU
6;$2
2>p \
&A1B
nVF0
;c"<
cq?
Af$+
f"Sx
J]T
l&@)
+O#}
"Bn%
/;K0O
][r4
b"; Xzai
syDO
.}ih
5s#l]$c9$
} JO
bZa(w%
e!p
set_Name
Py Z[
[wXk?
Default
xP.!
2`SS%yfk
][*}
U? O[
Fhspose
tv*.
ya=
s6yC
B,9k
y1-q,
>w]
[(<
x=Le8
<b: E4
Y\%c
TWW#
+]\!
<(n3
dTc}
;#Nh
ia)8SG
]-1B
8]E9
(CG;
d&z
'J`_;
defaultZy|jchad
MI_ea
cG9.A
wZXT
5{U/
V_5R{7E
_Y%z
4pLZ
4_5z
?Ct#
Ng+.
8T6~Nd
G wS
F(Q,
ry]em
-5?[
data
VfGd
{0>9
!m":
E&D6
GY*bw
;ln~H
'"*?
4
D1xW
oh<<
"!D8
5c5{9
k O!
#h:u
Tr ,
Gw0f
XIUo
K t35
BQD0s
\ Co
w%rg
az0FV
)wwG
;>UHBQov
HbHu
_0W1
?'b!
zQQJ
Zy={
i.45
3 K|
dQ=A
[ZMe
> ?yK/
yTUP
X2UX
X`~
s XgF
GIMW*
Y W8s
c
&5.:#
6:m"
0rm.
5h\c
ClyH
XBMo
wgq]/E
l:B
}*%
$t*9
<@ +
-f/=
lMe`
I(%X
/;m@
y!W4
HLKI
.$&/
x
sh+i>
@xm~
'nil
T-
VB|u
4%m_
U _Y
-@$
E \!
c>%:45
o0$ yrx[
|t!B
={VJ5
=EEU
YX./G
Y#(X
)=D$~FiH
V`&D
4SMZ
w4/g
ri N>"y
&uW^
,Mb9L
vp1#Yq
((wV
>xba
6rf^Z
SettingsBase
?sNuA
QL'd
64k[;
en !d
oukyQ/v`1_
]\e&
>G{l`_
4{|$0S
A :H
QzeD
PLB9
Pk4k
4=m/
wngvhonRelaxationsAttribute
iU\C0
QFE
\gakoInvoke
pIDxt
;p:N9
`l'W
|2=R
S}(rB
9=}pp5
History
?D|k
Ne77
l VX
AbTQh)
;IA
?[qo
5@JTr
q6mD
`KkW
ZV(
~ K/
kjP+\
]{cb
NCCx
b}?U
k2^vi
)mfL
O\Yy
~}S2
;UHM<fUY<fY^<fY^<fY^<fY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jYb<jYb<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<jY^<fYQ<jw+</3
i@te
DX~
Qc>.Lu
#Tm<
o&n]'4
Applicag~`pQnmstcuts
zQ4$
eAH|
\Y @
NVfV$
buffer
:o(l
l}>p
7@~
(tsM?
=Z3*>U3H
BA-?
B 9$
rMv>|
gA]]
,Zmi`j
v^ TM
U b2
3bc1=
~9=w
KZ\s
+#X
Array
W#so:
N^oc
/ %UME
RqK_
K=*U
gf)|
CbX^
AB`t
#YW
) mP
E.{3E
Z0$f
5qHNwjF
OHG>
4cG)
tX~d
ceW3L
hex+
;,re
z94Ec.<i7
C5&i
|),.D
ef"p
pf4/c
:U0#
dm K
ug4w
FinalReleaseComObject
lhG}
d^zt
Microsoft.VisualQv|wa(AnmpilerServices
a(1C
N?W 4
Y)9>%]
hnO#
oS8a
FJuw
lv5;:
okmV
ujl
Qg~+@P_
a<)O%
lpAddress
WRRc
_ 2h
oXp+<
*eW{
.,Mtn
LAOj28?)
}w4k
b]13
X=L`7
5kWwJqKc
W"-3
kf,
A V.
*bOm>
p'-9v
*)^we
?T4>
Directory
q t(g
I.9g7@
Pjpz
3Eg<
*eW5
P?sz
gLX:
K]htAM
-gbk
F!^fw
,q}O
] QH52
1.BLM
7It*
F?_'?
(BA78?
ReadUInt64
N`V^
[oFCc
^\~;|
-xLv/
oqx 6
.|Hp
.1R&
C1R<|
RuntimeCompatibilityAttribute
dwh{
1 h:
3008
<z9#
A`djs`j{EescriptionAttribute
LE#%
z}2_]
-*Co
GetTypeFrom[vaznc
^p S
eR^7
j~Ey
|jJSX
Zl,
$odl~
}Q0?
2+6/?7
msT^
3rGQ
"o*_
v5v!!
jzkn6
t`7X9
r#t?
,}@a{
sLuk9
5Z4Q
m{J5Al
= ,<WV
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
kn\UM
Size
kZ_8
`ip4]
F#ZN2
OPKy
aS r
Jw7p
$4`
Le]MML
eE[>
ReadR{c\{rgr
8[*C
`c.
Seplace
ChangeVo{{luknn
DsV x ~*
X] +u
N,g:G
Yz|3M
6Q)
I}c<,
IContainer
n,sir
Z{ut
~c@
lpEnvironment
;D~
%r
4O7r
#PL/
aGOE
+P:r
?q|}
VWzy
|}oME
m/'-
Qrogram
tOi
D{*)
z~h
E2'X
*:cD
|PhvxT
>,hk
ip<P
4H.v
$do<
J -c
{1 L"
67zM
TBW$
}Uy\o
Bbanp
qq-m
X<W;
EA)>
DVVE
`s*G
[1E)
8q7qAo
De!|
r/d >
+cV@8
Z%[)
9/`>|
5Swbrq
FsC=r
wC7!g"
9w]
wNk\
2.h.
GetExecutingAssembly
MS6T
2AeY
\?2~^t)
0$03.T
}7`P
YgrDsames
Y2"'
8
&OMY;]
nxjr
,$?#Q>>
ContainerControl
8BG!
]{Q?t
=27>
K;N Na
FrFH3
FRnZ+
ToInt16
Q(w>=)
ue}}
]X{a
Z~cu
\S=ym
0~nZf>Q@E
EX_}
M#]r?
_y#4 M
&fik
H 0J
>\2L
,K"#
'fK 1n
|Yg7
UWPy]
M.Dx
pp$,
y-ax
.)zl
TL$v
PY0
G8F
vEE,
hThread
Z-Y(
&p/A
Fpkrk`lize
Q|Qv
K^B>
(PB!
&Wa`
@l+DQ
2j=
4:13qC
p5u,
C;51
Empty
c5$19
}5{KQ
1nq'
N)unqR
h-z{
v!v
q4I
s] =u^
*{"F
2r]I B
}aMe
mIY*GQw
s^q<f
n~th
}BXD
\w)}
3M1 V!Z
Xh/
j)SX
*>_F
bZ !
t7,6+
_1o!
{9zE
1T7BA
\E R
>jzk
Close
$fYqR
B5[=
Z3FS
op_Inebbnrkr{
7& }~"N
{A]i
h :s
xBZz
n =&
.DtG
>8LC
@B2w
y84=
e)AzS
tN'S
Read
nCd7w
v6R$^W
\W e
[6k}8
2Cs
Us~|
j?#d
[4Z{
dGg*;
EjtR
kE.h)C
&!d P
yfM)
oAEs
lpStartupInf|
lYTkG
tGds
] L`
xi@
Hvw`
__Zj
zYk/
bC+J
&rZ
Onvl-T
=aL#
<|TAe
: `+
\ f#
*wsD$
l6$
}O%9
%% 3j|
yq$4G
Chk>
3iDjb
SSYV
u1Sg
KpOZ
ps]w
mscorlib
K6@}
)Zbq
FileMode
gKV|
&:+#
&0d
z(|fYU
{OIIp
1ZiU
6[M~
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==
=Nda,
,p)H
!: UQ
JF`)
A_#G7:
iD,3/L
Z%4F
newpath
GiA[
U*?#
fm,U+G
gY_9
>Eh)
Y4*
RG8
I2d,a
pl^ft
*vP#
VHSvr
R@07
MdWl9Q
XRX;i
=WRHz/Og
u(>_
VUSU
-=>u .
3] n/t ^
5|rL
ILxR
AM<:
,>&9
U2?%
z'R5
P,!TU
H {>|
El%U
rN4F
RuntimeTypeHandle
DH3C
)HGf2
jQI
iEUE
insgvcXmjfdr
5Vcc
#aA]
w`\wxc
AssemblyBui
i a)(C
+ gh
Qgel
S;CZ
NS<=
&.Q`
](J
AyTLM
J6 .\
UInt6'
processAttribfcjm
Hir_
l[8._+
lDW
z(dX
TtR%
tW"
UserCe`ypgoGilesCommon
M2m>1
X#"o
Z!gAi
^v x
f8PN
yV9
JI.o
R13[
Xtc@8
,0UUUH
)3^`
wl_q
`@A
,YVM
.Nx&
(`zS
!}d=
/c`s
npl |&
-x,|
]b4H
h-Ty
QCoQS
8vSG
`ki .NY=Wn
f 9H
u $S
]w'u
DC2?
2VbgI
DvqfpgB{oamicAssembly
*"_K
BJ#H1!Q
Z\]rG.
3}qg
dfgiv
oIM=
DzvcqeTgrult
DjOs
N!l!
RnFKp
dTG,w%sf
z?}i
*=(V
>X@,R
#
eqH-
fQOT
H6wh
L1L;
AMR
@.rv{`}
_d-`
tF%?
J,GGwWE
D` o
Z wQ
e"Ae
{`WP
Y /+
C09
U~TXD
F5;
U>#~
*~(!
:5HDzK3
V!gux
dF-c!
!This program cannot be run in DOS mode. $
X*M4
=da9
c\@f
,:+tub
GKDM ON
Dispose
lG4[^{Z
J) O
m?sD
*XD5
80G}
j{TB
A$jA
_LLb
3) Dg
4 q]+
;8\2
MAY!
#p\xo#
GI;(Z
ky\!
'`*8p
+{ - W>
<%Y>
(E4G
mh)q
rkCB4C
&4; -m
set_ClientSize
$@F s
dj>"
uE1XI
VBcJ
z8ON
Bf^F
kG7T
|S<
Ke5
---
63y/
Bl{
":0c
[JeXndM
Al@5
+f<C
Z&swZ
uX<a+
Q=t?
4"{#
tAQs
*uw`
GetTycrIlmkAMSID
sS~N
RegisgevHcjwdKind
[eC]0!
'gf
\8+s
)*(!i
"HvKG
Odye
2SEE%]FO
^>L(
G7?
acX]
;Z(-
QrogramFilesCommonX86
wY:Xt
UAIDz
Y9#t
y|Gkr
%lmY
}IT|
<8$w
n6L<E[
f5*DY
mTB~]yD
o6BxY
g<`eZt
:Y@o
Jvee|2f
y+$b
C4<+
xD_:)
4 ;fu
>PAyZ
E`^)
Aaeng
,NL*
/(-<X9
System.Linq
E'RQ
=ij9
8x(=
2;V~
7E?5]ibJ6Z
Ih;}.
jb"[w)
k?K)
2 A-
{bV
Ev }
u'>I
'yi[
Q;zq
\YQeOoiEB
Prou~c{
v4fM
X\J8#
0l<5
xN`#
p|r @
O9#a
W4fd
Zli .@
f<i
t,rg
`)XK
qX>A
r=KR
t,t7|5]
Mutex
U)E fj2
\k6~
Jpwkgsable
R``.~
Q\bm 7K
NU5v
W;2spt/
(
g2y3
###I%!
tJE+`
{cFm
JEd$
*idMM
set_Key
!q1+r
cC?H
h(h.%
T:&
c8gy70
]ji{
TyS2
vD9F
hW&Xd
"Znf
iJ>n
Boolean
Io!*d
\W/Bca
4,s
w5>,
1CB XHy
,]?zi6%=
}r @
/4p(
CJ0`
! B
UUK;
~;Ot
eR,l+
MethodInfo
q}{u
ttU
CompilationRelaxationsAttribute
=-(B
k|R5
a` M\
A5mj
MemoryStream
tusg|
a!{?
g[MCI
E)! E
x2&^%
4/::
W{IE
k_BU
)rq12
inY-
#iO&F
$}6 n
mbs;
B, )
B`Y>r3
<s
x}_9`0
? XF S
G @b
~2:/
EJR/c
)wF${~
4#^=
h?-}
@b,Go<
*Dwl*
n8t~
<#"<C
inheritHanw{jm
y$R\
r4?'S^:
a@l&
hboV
Nw8Z4
2/e M
[/z;
~B D]
\+Q
{G45.
5zk!M
A_bE
IIos>R
Qyz|b
Assemq{v]mkr`nyAttribute
G@o.
t (d
4 X &\/
[;fa
rHh~Iz
Qk]J
7brz\
=|B=bt;
OuW
rL#gudC
F_N@
Nh<&Ta
| ]=
ICn?
gdZ

eDX+):
r IU
)F%(
a.&3|-
Rectangle
|S;-ek3
3+_~
h.
m)Q-v
Yq }
[1d
CHNF?#
'5;|# f
nq9h
]4/Jx
b7x^
>5KK
Concat
t^,2 B
E,P7g
IA @F&
}Zy/
-g'C0 O
r, <
*MdJUQ?
- /U
\heAr
.q!\
: 3(^
:] a?
XX@a
m<G>'
vi.BtK_
fNs(
m,Ev
4NU,
x2% }/
8xEL
uWDB
5z_D*
"fs
ZM_a 5
fy/sY
6rbWIBA7
ua^N
Q>{w
lF# RR
;1]>
<i$m*
Favorites
?bem
60`T9
w& w
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
< < < < < < < < < < < < < < < < < < <
System.Text
zXJw
hwI
LC5W
L4QE
~<l]
F&4 n
! L<
XE`h
z Ww
GQ%
T\A6
}29%
^sNM
"` Yn
\~ CO
4tru
OwoajLaunch
8'W5
S\BM:
WU"fS
"bG
System.Security.Crypt|p}
L V}
)T#!
Rk?ZW
)x`y6
jfrc
E7!f
z(@^b=
U;yZ
%1);
v71&e
!L21
fy=\
_}/ygZ
_ +m
lO7U
vqxd>
Tv.-
EdtProcessById
_w @
Tdq0
3rKy
Qay43
,'9Q|_C'.#
}M _7
_@;6vH
BZ<J
Hba^
0lY<
z_bU
|kt
qt^M
Q#NB$
>d|Y<}
%Mcnk
gk6Z
B1 _6
SO$~
_CorExeMain
DebuggerNonUserCodeAttribute
"Qp!;6DW
o&Dt[
bXp+
Ppp#
k1 '
XNje
$,cEy
08JgM%
$K+e
Xe)2
2&'+
ISl'
s-%,
h{GG4
by:!
sfX:
DebuggingModes
jo*;L
m? B
get_AssemblyDirectory
sz?e
J-tg
=RzQ
HTjg
+#qQ<k
O(Y4x&
9G>E
F Om
m/vQ
8 f)
MethodBuildve
/6^U
h_vH
uvseamSize
~IDx$
rD|V
5zI9
,_15
H|6 1cVNl+
vq4;
F G<
dH8%
d v`
T!9x5
System.Runtimv9LqovkmerServices
Copyrzpgj"
~ILqc2
uM{W
u;qM
eR9L%:
{#E)
l1tl8
Fb%6 ^ZV
swj
Pkr(
c[A?hF<
EQ[O
+ 0R|.l>
X_}b
%6u"B
gt#v
c9.J
b[:4
zs_8
?<d+
)IbD
D|=~~$
J0I;Sf\
"d!S
Vk~-
glAllocationType
.j-
c%%. s:[#
\ r>
%Q9x
wkR[
"H4#1
V09\
&1WHs
,GZ?
CDw+
Sd ^~
p)m @
#o;l
^#:(V>^
%o-\$
4U~5A
:Jhga
W Af
kl X.
NtKC
ktoo>:
1cN#X
k]C Z
*{Sm
9pR2
=VfC
jhsZ
w4j H
DirectoryInfo
'0)_P
s)DC/
fO$%
E[w<
HuW#
2vgm3
t@r.N
get_LocalPath
Zy{/4
+ v.
6A"*vOL
'owY
q1~;
i 3Y
u5%Q
z%=U
Mb}=
MSDo
ea&2
Ftx
/07]
-2CP]m
f+LgJ
~^^Be
{Go@
,Z!P
9;n]7R}
ta--
}Cx@
O.cV
En$>
'q4 V
gegHLkptgotDomain
LSo.
tf2j
get_CodeQv|{
>_]Q
mm.ujr9G
ZJ&SE
#!ag
|YLxls
D~0{S
U 8{
V.AY
x2D @
0kfiba
t}VM
Pa
8K)3OX
!L.h[
<;03
SkyDriveDocuments
F xA
5'*.
aRx+
dLy?
["p
DXw\
Ro,_rF<9
s3!@o
RmsM
nH:3
System.C|{c{arknns.Generic
k,k8ZnV.
A118k
@Eu!
0I M
;cv'2u5
G:WY
tD.+
h&'
Tqwq
isDmkf
/w?T
^#e
D*P
K8wx
?rGT
1.0.0.0
P5|.
8#oA2
Ic5h
I^\`o
wHBYgANx\
=S'o
RoamedTileImages
Q&\8)
/^~0
Stream
%d);E
x&X5
D("SY
y\DM
g#P
d/Fi
<N?cF5
GetAssembly
8BW
,B>uZ
JP)C
z{x^
9}Jnt
I 'c
0o4[
& =;
O Yu
2$sC
{&$_
1%~{hj#
3p924
_FM&
xpu,
F6jAv
Haf\
u QtBxn9
+-G
F`_X
Zxc0g+.V
}m,U
m(bFiKl
v\v4
c`|g
EA1#/;X4EFGC10797D568BBD9F24D7B8185#.M-6
*N+
rS]d)
R]PLl{vvnServiceProvider
wk*D3
lU<+H
.4%y
r[8*F
Rw#C
BtR
fhnT
0p&)
}=A
0[((
9Qc !:
}MuR D3
avv7N
+RgN
Wu3Uj
T+x2
f f
j'hO
j-D[
+cf1[4
6Av5
6+Yv{h
ImplicitAppS{x}jasvr
bI6AH z
Yw`M
4yg*
yf|b
RR\.
t'
tkCK
sFzjTj>(X
C_94
6k=5
o`M:H36SM>2/]D}0((jU)P6&
i]Nx
_+B-
pM0|
CreateType
v^LXZ
Ay=43
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.exe
vm7Q
,|9h
U _"
+ GJ
6|7>W
'G=t',qg8
6sRX!
L>9}O
b0N$
W'>[y
RC9
5W#;Q
bEMf
h~ @
C/Pp
>2Q<+
)GfbG|nO
k B
O-+bw
IlUvbl7
r >/
ModuleBuilder
3System.Res|b}}gu,Uools.StronglyTypedResourprMkkjfdr
^PTIfS[
o_h~7
xo`Cl
|5k}
!7Ea !7zB(<_e-3<V`=WI'W7
)F?j(
$(>%ni
S Cv
uJ! J
(~7e
w>lk
xC6y:
EDln'x>
} V
Dxt ?F
'taD
`. @
set_IV
'[.;
Hn[Z
f f f f f f f f f f f f f f f
eF*
Vtpr
mUI-q
:}]
%|X%
/V'4
,6ES
1JVKp
nKq>
*I42
}FK;
t;G)
Cg/U
BP`B
^t1~:H
3Zt=
[NVs
S^\=I
q<wg}V
jdY0;s
~ Vw
B.6 B
'/T9
;-:}
{+I'
"#K.T
\j"u
<? @
z"7F
k4yUN
vEQj`o
f&r;cT5`J
9~Qs1
0v
h6p)7
G>f;
=llG
|=2=)g
Program
c|y{{zr
QoX|
6!0\>
RieM
T5um
dT{ZLwID @
!U`$
*Fm9
qrm
V1o.
(}ki~
O!W%
z/Y)
*{7j=
5/oF
1&>20
N_Y]
W4f5x8$H
d2u,k
cgfX
!<vW
7M,
)w#@*B
/1?C
+ >5
?? ^
+ ~4$
d!2U
set_Length
i<O?#
+yq5
*N,jk2Z
> VwKj
`+J@
KoG=amxh
Q#~~
y2\ s
/> +
!eAc
-^y
]u*dm2r
`]VL
]<hP
FK9$
bMo
Jcrt
Ci C
/$"3%
g,3j
syOB
2L_z
y*f{
RJ[_
{"o
Hf%=
PR;rp
>:GM
*|kb
z @P
\(lk
I3oi
so%t
Q' hE
yi;^
:O5w
&`b
R5fq
ReadUIng$=
$wmq
jn=+
Iht
Tet5
V: FJW
OB}P
rP_!8w
TgnteType
}h_I)@C
Q$<K
*?kT12
_V&=
*By
~'EV
e{6)
[8c{
J/L+87
?MyL
[-4(6}>dg6hIqQrqBo[4k7G3
handle
0ib1M
1UZYdu
[&'x5
Y&0 0
}bzEU
SF"N
/+Ma
0dS0
9e.
)z)Fv
DVH,
-W0b
X) @
3=h:
<N;A
X{Pd
;UfT ?
)AUt
WlJB
L61?Hs+v?
=EME
Y7al
5;k
~&dJ
K<.;U
_UF6
s;Txf
set_IsBackground
IXwR
7|pG
KK_I
(/w=
a~'$
qday
Jq;R
X#g/k
SampleMusic
cq:li
%\p(w
*Tzk4
AJ-c
u9a\
1]EA
4.[m
o'0%g
@-aqd
$X8=
lAE9f
Op|p
!0h-
|[_i
AsynpTnrndcbk
IDisposable
{-1
QIe}4E
)YkQ6_ F
<ugB
SsVf
d!zg
FDT~D
v)Lu
Rj2 k
rl^)
2& @
kGx(-G
C?KT ;;
e{, `
Y]U6L
[42K
')*d
PZ @
Stap|[lceg
Z7,(_
e$ r
u % z
$x9s
}O'`Z
F=Bv
_X
/|[w
qVf<
ca|f
M;Ez
AVy'J
3l/]v$
)X!
~ VlR
k5u(
up(Oh?
~?PpU!d
u@B]y
o|V{
Rt2i
^h}1
)fx<
jpCH
<`Zc
C>}Cc
NLjD
p^y~b,
5)Bv
* Q P
:h4L
Jke0
GGPwh.
l1)9
e_g r;
( pfCY
L9T D'
.%\tB
-G@`
G#%g
|cug@ddress
&@P__
,7!R
wi6`x
wfOAnUUf
yz^A
C)^)8
`ay#
7 `+a
,u.8
rip:
X95Tk
pG)f
&r`C
- ^5~
9DGq
xm%8?0
N[;I
cryptBygr|
E <382
KP1J{
peiZ
f{WX0y;e
,[[W!
L}S
_p$N7
[uCV
Lo+H
g 0ZT
iTG""P
Eoh<?
StackFra~r
&6X
[ (
x1H d
E^k h
(&bP
o@1n
_CUB
ue>D
;95F
0 M;
@ol`ryReader
~{$1
/}B
#6UQ
CR6#
N b6
:{Dn
LWa
,rX\Kp
!V> @
AQD
2nuu%ggh
sCl'.p
ccEP(r
keYl
CGPLex+
9-=v
?;*l
WEO+
E x>
S E>
sgYA
/mmh
,{ }~+
d/ _~
/:Z}
PgF @
WKvYSy
R]\7
_jnC
YzU>
Ov <
P.#\
&@N8
get_Spva.
:^$[j
4C>V
;:PR
o'G(
9z_M
8i-C
iVnn
?$bHM)
u+d8
{0N5
{s#1
InvokeMember
HO+Q
f-e
`vzFl
ajTAd
B\e,
6^9j
'=Sd"
pAt$
Fz;aG
@N"6
e$?
%Yp2
GuLD
2M[Xes
yXX4u
\f;kW
+Nc+
O"g)B
c;T[Q
Z-rd
{g5R
5ki-
Qk~Q
|-4EP
~Gqm
v$XF]s
yN?3G
!7[9-
&%,0
installUxczgt
l.@.7{
2018 Engie Global LNG
hF5J
B}L
zNAM
~B!2
O]pY
f, @
0 `n
-TDrU
l&v 4
/3Ce
f>IGK
0(d
{6sf
X_R-h
G(M<
/]>QaKn
@o$e
.HP]
jpFDWCO
$ne(u \
tFgwH
H]*Z
Pz @
D%I'
E/Ks
NAu/
Wjy!
)AN^
4*6y6
GeneratedCodeAttribute
_R4
u1/
4[CM
89 t
-q(zf
uA)
TI6Niu
L5Z,
Otsx
)ajM1
l)l]
tHIB
G& !l
% @R
##84q
\7wt
_10B4
tte~
~o?.=
[}
_Id
h%@E
AZBPa
PR5e\X
!U2w %s
mo F
80"*
aS~TN
%:--m
Sh ^6
YB$^d@
B=d=
:U^U
0/{&
=ci-z[
'~!>
+zV
6^5
+J4~
B]~A
b{|
A/`p
6 Pb
dN ]
-=H)
7CaF
QORvn
C@n*=
{u8=B
,>!mk
Substring
X)l`J
*A{{ /bH;s
{ r`sDa92
AuvN
<%UI
1piD
_oE<
49<t
&)ibEg}|Af
o]Ia
2p5,;
/K#H
w22G
},A]
3 L1
Invoxr
s8y3
{[@J2V
]=z
kcbBtY
+E&[
+]=2
Y0c"
Dvmvco/Security.AccessControl
Marshal
6Ky\
{j/!
fhIs
%\8C
Qx#d
To"<
Q~+eh
6~\* ;<
Rm{I
E6Wi$
?>^:
2MI2
! 2J
I\Wi
3~`En
(D
1Cm[
RvJS
0f0y
]d^I5h
: ]
/ h\9,
1xX-Mo
d+Lb9V+
WFy
-l~X
3) q
v=J+
OMy!Wz
BI-<\
1hdK
&9C
$C19
7qJ-
$I|q
,l+/
RtblicUserTiles
D 3I
GwSC
ff+%
u_s(
hq["}
CDBurni}p
1c1
vK_O
yx& -
_WR
NZ;C54AA3F5EC98E04FF99E0EB6AC3'';Z26F2F7
]!;8
MvYD
eu4j
`!b&
AssemblyCompanyAttribute
startupInfo
'0?_
|x8S_
VdLj
\f5.X4
_ -
' ?
(_D
T9'Z
/n,`
!lOTN
[\+R
X\:e
HvR
NpKt
~)7m
&S)l
>r'~
X*'R|
AppDomain
Y 9g
Douq{j
O@{!
: K4
PiHZ
}>Rzh/s
% ,X
!Q"Gu
n!1zX
B8+X`
>!4
ZhKbt
rag
2D(p
rae
Iz2G
<xZm
s2%
C?!:
ARqO
5"rp
<4>J~
Qhngle
, v+tZ
< .Pu
9qQJ!&
) s"
nsfu
`*Md
d9[p
^Pxo
(g@p
nlAB0
-S^qe
s *
aK #
*(8h
lugCF
`p %
u<8&
CameraRoll
oI X
Control
(Q 5
9DAH
sw,
Y\B{
WS0>
EVp\]u
?c[7
s,@n
qae
ToUInt32
xzBY
R{ZD^
cjfL
_/vO
q7I!
VX?D
k0*[@
f1_P
IyU
~6$^
(i<2
Type
Rvgl
UnverifiableCodeAttribfcj
*J+
Z2)~Q
BGr`
/!IZ
3<GG
<sCL
Sf3J`shData
!nt-z
t U>
0BUc
!-Q1W
$2ym}@
Z**, _
2]D1
FZBW
A}y^d
,e&l
aG|]
ivUS g
Iqbpv
dLC8I
_\FJ
6G "
vQ@"
4 v@
oTfP
3cbfxc
$9CQ
?fIoU
\*yiy
5G
/O7
o(>@
S`3V
8H9b>
%% s]h
&-;qJ
+qHE
pLPC
'0w|
originalPrcg
@o^=G
)>t-
Dj! T
j[l)
9Ka.
292*$gX[
An-(t
:zW,<
%Fsk
[!'Y
+4vEF
, -Lr
{$s
5&ys
z4 Tt
'"Kn|\
M+PT
(Lb<
{A0 W
i { @
}rr.
GetString
#rp
UZTE
"(1[$
zEeI
"o }
j}+.
IDB!4QWWm
];sE
I4s_
GT*q)A
|j`I
7Kt#If
DDtv
or-\
v$Rm
}I8F>
^s1'
SkipVerification
{/,N
@gil
]f][
`n<}
{!c#5
L, ^a
Monitor
8 (
)khL(j
XC_r
eJ*E
=Module>
,7hG!
XtF
`3kV8
w@B,dO
.K#iv
lZ]{
LGb
GaY&Q
Fb
GI\D=I
EnS/
y)VH
|lv|
mnlD
:c sR*
\B(3
S,lJ
c8~bF
z2z
~ ha
?sd4
Ta)b
b~no
mG @
^g;}
X1!]&""
Z[j9p
`.rsrc
3`N-fI
KB>!Y
XSJ+
Do.&
LL c
RwBsf$(
qY$k
6 hc
*LQ9
1mX/
>zg
_ 'RW
__Lzp
CVoC'
a9Qy
hkXF
Z0}
N;*&
Cr2,G
>\x;\
hSB3
w?l'
)8IH
7:u
q=B13
3+\C65
' ]5B7on4
zv6s}-
`zKkrmAttributes
Li2e
W-?vN
y1M
X_{T
H9,[
T`pagv
&>Br
' i=9
$r;F-
5#Z"
e:Y=
=~2s
OgqD
HvrO_6
[F*\
znIA
:{En
Glfl|J
L ?q!
<sq5
WebRequesg
^W9z
K;@
?])Pv
<!Jh
NetHood
g @
/tCG
epC#
8"a&S~
*u UI
x.r"
U;OE
^)l67
hyY"
(
XQ4k
Z8s!`
E` @
;/!(
,5 C
f\ 6
.;%
3OK3
Sk@''
JgqiAlgorithm
N?nwmP
fDLw
O J8\y(
?C`t
,bL{
qX5>
kernel32
Show
()>n
9 Ce
R`rameterInfo
set_AutoScaleDimensions
l$({W
dRW2:
J!mS
c! bg
1a|
,z*:a
MIw=`
#{Y
Q&xJ^L
{a@P
Tt8F}|R0F8
$`gam
$9a2b9547-5549-4d03>.k-7+:cb067ce242e
VCl]
K noi_
\NINq'-y

0i9\
Nf"y
R\EZ:
Pp31@
)Z s
0Thi
;s^TL
Dufe
pB\0
FlagsAttriqb{{
ZGMge
@MP:AB
4KHw
Z?(.
Ld @
GYH&
$.GBo
Lx21
G~O^
-<]q
InternetCache
'm'^)k=~}F
M DE-
j&2]
W0XN
3e
}1g{
GqremblyCopyrightAttribute
6$g\
Er]/([
=.I5
System.Runtime.Versioning
J1z
HQ]$x
PV2V'
wbPl
IconSize
@Mjfz
5X 93jZ
qzAD
p>=9ir2E0
?LXz
6y$n
z\
gui*I
Tinu
;6]_
q9](
gN4[~
n,X1
KGg7
&?[b
M;:
s4~u
sy1@G
\+We
5X,
?Cmg'&
xZVc
Lc#O
Downloads
4:68v
ProgramFilesX86
B(_@
n:5?';
ohHz
wea
:EtM
4[((
\vgjn22.dll
#Strings
yIwJu|
I v@m2
Image
9:/{o
F4KR
VjT0
Z:olg\p*0
9-L+
?bbE
Tzz8
00!!m
]""*
dewX
~^%OyS
M!7)
#T hJ
{vpcceHandle
t6YBP
%vBD)
#W18&
TaoE
7{3U
5hH)d
n uK
|K%#
NJ@\
7<)^T
8OkqJ
@brz
%s ,>"
0wG)0
iW%*
S z.
eoYS(2
YFt'
SLNN RQ-
_`|:
WRr o
IlCR
e| *
TypeAttributvd
"=&M
\gqrgl.Net
add_AssemblyResolve
<*D47
DeviceMvcnzcrcRtore
3e=%
3evZm4$
x&i&
:US&
(U'#
(mV7
;J ;
G @
cuyW
'B;84
$,ET
-| <Y
br~!
01R3
Fym%
b/pc
Qe;G
L X
AssemblyProdft{_vrphbute
{/(b
Df)s
J[dlv
w!BVI`q!
#q;fn6
HGr3
KN!<
|7Y J
G:p2
T;C
Windows
;t<T
Qh2'
Uj6}
Zy`E
((Fh
D& WM5V/]
j}^8
_g ;
U83h
fU5!
!ga@{j
AB~WBO
q:@E
3Z y
t{2$
Va\-
Rq*N
WE;!
h-|gu
OY[/
SUsSystem.Runtimv9FpvcpnpServices.CharSet, mscor
HbyD
7"XO/
L}/p
?%j?
c7^
O*p
y&D
RcTb
K/$r
) };j$
pFH*
Kn@N*
_=%~
]'oc6u
OTpl
J $
j>5f
QMIc
b 0a
e'<k
#",f
K=T!
DQRL
iTTF
B$;Y
WvjYK
#w,s
#eu
[=-$
Q=8hB
'<IS
9Dy~;
u>g,
nvF`ta
m> N
J]y>Od
*x<~
Ln_|G dZ
<\B
+x7k
!_pw
f`,
Q\:B
hPK=`-2z:-4wDwVA 8,5V!bE+
3no.>R
j|v
sIVd
(RhY A
Jjtg`d
oXK@
RorzfpeGrqData
sIbV
&Z_~zI
WaQP
Ldyc?P
Form
DzEDf
?|8NIfOY
sf%x
."4W
ptg]
o^;C3
MemberInux
??Q<
-fq8
{mWj'
-X{y
01e
R&BF
Delegate
#U(J
m>*<7
knM>
+y"D
sWPI
<+_$
_($B6c
LI1
fAfI
i]-(
Vk10A,t
#D'H
n )IJm
Z~!znj
CqplicationSettingsBase
p?lp
u-hp*P5"Z
get_Bmp
[KTo
p?lA
<]<8
ibF
"!?}
# m{
dkDT`M
e:,G
B]b&
4$4 1
AbajkkgIelpers
FUjn [pq
9*T%
3R~F[
.<v}V
aK %+'
NnckBits
ogaS
;{$[
)+eI
9 pQ
?Dck
kd4/
d0#b^Y
<o2m
Z~oz
n:MR
6h=d
Contains
tx :
ResumeLayout
CSQ!
JRm R
.;p9
sblm
^NZ j
!?rk
V3q|
6t\w%
ValueType
NYd^
System.CodeDom.Compiler
v$&w
} bQ
Gob :
jKn*
j1=J
5xoM
sM/r
@L4e
H(,%
a$<g
HCm+
.xe'
x"d
8T5f
BGg;zz(n
d"`?
rJ<E ]
BI<F
k A*
[lH
g-!I
setL@fpfiuRtyle
{B}P
[g @
ASbuOX
};?:V
Ri[C
Dvqnknr
Dsv{
fR/H
1WRbb:
+%wp
(f f f f
u!B D
i..3i8..i
`"[\V
vA{
2X yx
f +1
<JId
t^6.
9c8
jZMR
gM"Z
v~xJ
Kh5@
2dzO
jt\S
l5
ToString
eR\:c
7(e~u
E$z zL
U{rtem.Windows.Forms
}! 3
xw_*
J~Giv
>aHQTe
c2xM
Er>,
5DQV3
Qgtd
(QVx
}RSt;
}vd-
>bu>
'KlT
$o6BN
PxhP5@
RoAB
"&S
<JN'j
Videos_~mlct{
dEu
(15[
get_StatusCowr
D~XB
D,kW
)R7 Yd
7t}-PeuQ
Z{OB$*
e!/0
0(N
ZWlr37
$dS`
#M#M
mw`YN
pONi
Yx 5 *Ui
oletricAlgorithm
EA1{#
*]6C
6^rM
oRKRh
7um3w
s$|:
d 55w[v-
t4|-
Videos
y"P'}\%
v `
J,=u
u;~G
<\$
~/Ri0
xfa%
MM5!F
1Yr #W4
x9Yy<
%UmF
58&3
9*dE
,-n)
B=C
ry13w3YB{WWU(n+aY>(^;wra$
n,^Y
|j{:
_<IaG(
Pj/F
QublicPictures
A xW
:Ku?&
!Q<
]i d
i^P
`T|\
^{IN
)9eog[
;\`t
B<Y`
tYyk
CA5L
b; 3
~}N:lhD
x{ L
|tS[
\Hp F
Y}/
2ZSZ%tin
>fAL
DsomBinary
-"LP
Dw!
mscoree.dll
YP2*
flProtecg
dXFK]
EUX
](sf/
G*r}
ZBqBe
M0iliq^_T
Main
Sguq`geBoxIcon
i8,4
Wrc{vcDhle
uJr8c
,a3a
T/M e
%E v
5D;U
+8l!
"0=1
~t~C
eca7
H3U C
R7K]u
@:*D]
aGxz
+PIl
s`nyE
f#^wE
XI?e
8d0)l
!vaI
*FR
2T#F?S
vANJ
9nRN
tmFAa
NSJQe<7
'*E*
7dkcs
T|[`igt
PublipPnsgRcrks
Module
6HsvY
Xm1l
ou1J2
}~NN`
b9>T
}Hy2
os_W
c_Wn4(m
KPj
PAkc]GeC
${>w
85Ey
/c|j
HQ}{
@.reloc
bL/P#
lOjt
,v @
L/ R
?K8i4
&Jbs9f
%g%(
[$eK
&L$|
aB,oK
Egoq
e^Ru
W,)G
WriteAllText
b+"uQ
hk7w
uZSUE
z8`F>&7
+Yml
%um&
_"Yj
8y+Z ?
n[,
m[UT
sZG:
/xh8
qA]w(
I3zc
M"wI
mp^D6[
HTiVq
! 2018
wt @
F)5f
~!Fp
4T\z
W 6=
M:xp
a9H,
u+5D
%%&P
Z\_A
"6vV
~: c
"mwB
%&=3
Ni-i
K>Rj|
{mnkgi
f:[
g!B}
ojJc!AC
@ d0
In1:
PublicRinggxa{q
Cx"k2
o@kmesCommon
<Qss
>8u9
z"^sh @
m!&
\"e
;hr<2
K> qC<
zuB
rw)"
d_gG
2$pC
f ##c"/2Y7
*>+
RLen
po e>sZ7
SQwf
4He\
IDispo`vmrg
*hfXC
T%
xKJ/?
| OF
]nmrtPath
LBJ^
bEEs
,ky!
sYL dG
-5+9T
o>4)
Nw/
)Fy8
Fv "
FileStream
[kVt
CB01E0B0B937382A7E8CCWVN*2@11CEB9ADD9A77
|msg|
7rwG
_`]l
({bgn
?)r(#
D ,c
IoA6
AH,J
Clfq
)7[
|{*P<
'nz|
DR;]
}0aLAi
tB3q[
}K:/
Z+ba
ISfx
Ya`"
I?+[
dh1J *
_CPs?b
hRa[gL
8/%#g\#
#t1n
#9BO
ReadToEnd
^/|M
?gG?H
Synchronized
J#|C
E|BES
ObGT
|7u
%,#C
L^Z2
a`6|y
c`jcjDhleSize
O ;,
0 c,^
q1"=$f
StringComparis|y
u0xR:7)
eM-5
@hE
TQ g
[WfC
THu O
nyk>
CIUT
W:QO;mW
in&P
[X)'
mCkt
x- ]lRKC
W!\]o{C9=
aBZW
GcL-
\KcsK
=r}YQ
System.CodeD|z!]mkrhler
vkuT
ffyoPM
mcc 6o
26>6Ct
/[E<
YawSe@
gV^r
N"L0U
PyW|w
)4n]
MKw."qaf
=3nE
75"3(
l$rQ
jv%=2
jnp(
S/9/r
|)\#E}
ae|-D
#-%Ddx
q>Z%
WHOu
\I,;DD~P
4 /~
jRK)
o G+S
y2<W
T%($
lpApplicationName
OW)Ue}
s)t'
Cr-
\{rg
JR W
AOCV
l\3>T
_jKy
x$:
;=`v
RmBhar
K`KY
,CrqH
{nZ^
M]ZOT@
AfL0
wynO8
7/qj
/9@@4G
hBcF
LG>'
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.fm.resources
#zc'
XP9e
K1Z
XU b
h,P4
|3Nrw#
! _h
K LSX
{w!g$$Ep
*&lo
Tt#%
^ L
zx/{"
oiF(
zHt1z
QdndTo
-zE~]7
{|tu>
0 Pj
w\RK
&\ac
=GH
h.xG
|y(
]v)h
B"Q@
; kr
/Gf l
yegh
x'}x
Xq1[W
~+N"
*F!m2
![OTF
`YbA1S
quem.Security
OeWB
n[7f
5#?x
.?y
e) h
'?EGu
VW9y1
\tTn
6Rt\
QCI4
S2C]
MeJT2c
_|Aj
JhK5
>DB}
{[ ~W]
[xYFr
%[ 5\
\_q/
;o[&
\31z
pD[>W
*s.!$m
IczD
`)?_
X)t8
F*C?
C%1
$D'[
Mbwo
R}_8
$_nh:g{
h`$
.NETFramework,Version=v4.0
{`+v1
r &G
,._.r
&? T
P&>#
u @
g<n
'aY<
+ARi
I?+,9l
07)N
)Bmu
w702
#Oh/
RorzfpeRkmes
Xuuk
F;X_H
Lv =S
\S'Z {
?SZMI
CreateZy|jchad
value__
D`P<
8J4t
'p(|
<_&`
!&z
6:(Qr
bb"(
+7eI6
ProgramFilesCom~xaF42
z^K:
w7m'
E_/
Registry
;8#,
r'|
@Cia
oodD
61*:
/itASW
<Bwi
nEMw
^ Oa_
Sysgrb0Qcatrity.Permissions.SecuritjGjlooqrionAttribute, mscorlib, Er}mkil<4.0.0.0, Culture=neutral?7_k`jkbKeyToken=b77a5c561934e08*
b-.Se
kE9S_l
Og.px
'(7z
@ar&[
`T+
3:u3
%l>
\EZP
h[_Pc
ilMi
oXdb
X *W
pVd'
]WCK
|uTF
KE|d
efoO
StartMenu
7wnU
{L\a~
*+&h
*&$i
[5DR
eym!
sd_O
k<)db:
@za\
QoF ,h
*@dd
07VQ*}
'usK
Hnk;c
U8?.
]mkonnPrograms
[vY?b'
V*r/M
^T3n
sn2#
XD~Q
cXS
;gnK
.yOCi$a
oe#Op^
}S Z
br'z
,EpT
U{rtem.Runtime.Versioning
pb1.
Mj47
@:{
k%SF
.W>a
T 69
M&Xua
6Va?
ZHuBm
cmtN
H9X)
}7S\
MonitorPackageHost
N@3N
W8?
YbH<[
RCH6/
Sb
cf'&
GQ\J
Axb>
xn7j@CJ
GjQI
[g2?
t=1G
t>A~
A4Xa
?ms}L
FkZA
0$<|
)%gh
^,WG.
= 2
/MGT
nIa[
:+oT
4x,A=~z
@ J.!
>Bb8A
3 ~
8n@
]oN@m
\ r
L*?0
F_56
MsP
nUUt~
!+}"
KYZ\
q%y01 Wd
^ToJ2_k
_o(k
3!<Xp
G{9BZ
@\0]
~Ah]
]mkonnAdminTools
ME .zb
~m2"Pgssion=4.0.0.0, Culture=nefc}
ydKE
+:\
R3!P{l
!rmG1C
el@ Z${
va^x
J=Ze
apt\
/u "MR
K&|jI
T(N O
]F9]
:[DS
3)>>
(@Tz
ReadInt16
MulticastDelegate
P\(pV
|%
|d7E
Wfm&
qsVy
~xX<
Nn u
DQ '
.jNN
~[#
##M\'7`;
gUymSZY
Z^wf
}g>8**
A V|?
UnlockBits
/'_
I WE"iH
T|b
GetNonZeroBytes
oz @
Fx Zh
aLc_
O$1h
p EQ
le'q
MY'cD
U_7_
idPA
:+:p
-Ux#s
'O#|%
qH&U
t Rw
\XVo
$J7\8
D9;m
Op6{
[B ^
S;+\2=
SHSetKnownFolderPag
!Bkk
=V9-aG6 @
1 DB`
O_j+
?`0,
bkE=
\9F'o/
\#UOy
.q0A
#dd$
m$l!
RX_
3F[Ufn
<]g N?
{&qk
;z$U
r *1em
&^mg]
X:uZ
8)!n
?D 6
-14U
pE:
]!,
!r<S
e]QO
X6h^"
48@`
Engie Global LNG
wCIY
(Rg`
cN|o
2Vx]
>5I+d
3P`K
gT}>I(
AZ[2
l _D
4 ^[
Jd5Au^
3\9
O{?,K
s/?[
{?z()
k%08
M# b
Sysgrb0Pcdmection.Emit
cDJN
fz{jsmbg
/K+[
wI{8
00 @
Rya;P
QcDQ
9Fv
{7hPr
FVHDS
;3t]
#CC(I
PADPADP
=4$9
Delete
kZ :o9}O
|u}E
KO1Q
nfj5_
OM6G#
XY{6
<3Y2)
e$ip
n:wD
rVEs
X-_-M
G"R3x
@bx-mX
~Yv^
&`83^0
'f4i
Mv-uj8
O u3!
c~'`6d
%?@C
\#N\
?=U[r
0~zRIv
_a'M
".ZY
NCV&
x'1u
TN&&
7|#N
T@mz
F06"xT
G68I
M1)D
Y^F*
Microsoft=AfmwgnCasic
?PSr
I W
d|f
vc+
|(cv
w!
HPP>
bommandLine
J6~>
>VRT
:m^1
8+J^
Yhn/
Qp~V
9U q!x
Add
QBQ=
=^:G
N%yH
[kzK(*
g#xHRw
Sb%,F
XldK
rjseadAttributes
T,.ywA
9zj)
;h7
M^'U8
#ot@Q"
zYQ
/ZH`
w Xw
-fP[
( 2o
`+3;
oiDq
iS%(j
_|G{
oe^f" m<
zd;q
KMFY
Xiw%P
Nnup
,%N#
|fS
.`*
?KH$"
/GxK
{hbj
Si$x
K9TQ
"-k
\,2A
{3GRJ] $O
&f (f
,Iwf
P!h0s
'Y"V?
!+R@
BYqb
zuEpdationFlags
4DtA
_IBZW
xXf;
]/IP.
t 11
%/5N#K
xG~c
@mR:
$mZ5
~QN.
>9"Nb
fF&W@2U@(
T q)XV
qr;Y
4PKz6
\8^R
,%?
5@#e
Cylyiz
)"M4h
g^Uyl
EWf)
v(0iE
Random
o K
=7i6~>.
3 ks|+
S3lF
zp-Z
L[KSj
c#h[
zxxU
< 2?
u&Lp
+- "
|Rc 4
mJG`J
we=
e1Rh9&
<M^4]L
qa:c
N=v*y`
71{
`Q(Y
X==
A!^.|y
!RXb;
{d adL%
V2U~
a- h
`*Kt
*Vm(
BPJA
Tujr
DKLR.
3RP4
0L q^
pbA.
^~}bD
6snCN#
o!yobfKu
3###32223
VvrrRtatusCode
4 YW
}2 nt
^T3
=}8p
2%o!
HRO?
[#Mch0
*Ix3x7
\ &e
MXaY P
YLN
,I T
iOL3/pg
%eFV
15.0.0.0
pe~
C:LY
%;YA
@R|q
;Wz3
Kk7J
{H2P
y*W{
?xe>
/LcCw[
YQNL
FetCurrentProcess
,RbaJ
% S
$<@E
Ho$7D\
@nwv@msExit
CAa6
03J2
h|^1@
^hEv
s>vi
FxI?m
T}{crgEirectory
:0&@t
WEY
ldS(
z.z/0
(|Is
S=';
wo_dn_HQ
JH+}
^PTIxfk
Ps;[
{TPs
Y<,L
Resofel{Ogl`ger
7`td
F99?
+ [RP?}Y/
Cw;&
Thread
Hb&4
>2U,V
t*sA
fVfFz
_+y>p
%o" hil
y{3G`'
{]jSwy
Z`5tbh
GetName
nIc.
lJ]v
*:+
j3*|
\)!D :
+[fK-En
@4|{o
R;C
:maa'
Wrigr
4r 3
45ev
~POWs
ToArrrn
ReadInt32
">?TT
$^js
%x<.
E<4
-\Y[ q
uO7L?O
! @@
v4.0.30319
#_sQ
9|!D
G<|
wK/^
R"I BG
r 84
-M?f6
jH}X
<#2L5
We @
SXj>
r}z4
>(9#
eyxg
8UDW
QpUC
/.*JZ
3ga3WL
a7l?&z
Netdx}uAtgeential
d~!z
4H
o`[|
O!Z)N
I *
+<d
~A {a
Hu!>{~E
ZI\:pS
Xxp=
uVu]
UV @
CarnjgUwcKey
i92C
Tv}p
I:^v
4\}R
VFGG
ImageLockMode
Ok p
XM 8
MgKT
+}^
8dztxoZ
~ v7
Usve_lm`kmes
X~\o
YV'@
B:]Do
;:bS
~jQ8
`q
0|Q(
1r**
R^I!
*j,o'
/!vn
3~<7
EWwes
h}x0{
1Eu^l
DChB
5Fl-
|]'+xf%
~LfT
")kF
@Wc)
0OplK9
mF?7
"?XvA'
fx\.
R &q
n:0y
9u7?
i+P\
?N>M
>)P}
Xx<
8 Wa
!Pb-0}n
Eo!%
Xi Y
1yu7
Q"a)(:
Mp^N
BvJ&"
.ajd
]pccueDecryptor
U R
No?p
R$~E:
_oK9
VEfv
n H?
/]bXf
fZ7m
6T!-n
Z&glV
Lzd{~3
tINYV
#;l]
^ PW
? q7)
0Bf:
lb:6
L !sM
)|Gh
Z2Jb
GetCuaejpvKguhod
nY8etu
QM,"
Xh=4
yagG
C>:u
PW]#&
2W*
F}WK|
_[O_Y
r?b?R
AqX`
)#C?
_0cN
R= -
G<_A
+U J
e s$
EventWaig_npfjg
SnEP~Y
,;PUJ
5#zp
w- *?\z
x2 P
^0S z
w@qZ
:E)y
oMi]0
E-X5
WYGmN]
N%BAy
Tqs*[
ns n#
{el+
d@e8G$
GetExecutingAsse~ucg
8)o%
+dep
@ 9!
#G e
_WH3
-bd,
.!'pw
r9!U
"<fWQ-
GetFileName
H us
ComVisibleAttribute
/"og
h &<z
HJ=Np?
}@`D
?P,U
ComVisibleAttributv
FG k'
Z6vgd
Q}OW3
'055
u~U )
L]tl-
Playlists
U C5
sD0`
>=d>
O~7E
[8: 3}
Tycr
:c\1v
<>_r
N?vAA
:B`p
aNn?
Yxo'
no7a<
SearchTemp
Y3U2
~ J
*+(
rMjau Sybd
vS
8yW &
+^/W58
*d'e
, 01
1A)9L
F-89
Q^3!
_Mxql^+
+eH_}+
t0o8h
KMzt}qqidu.VisualStudio.Editors.SegcfpeuFdsigner.SettingsSingleFilvPjpgtcuor
ym{v
c\Ku
a:CR
8J x>
*O%?Y)`A5
?zGwF?`{
WebRespo}dj
VEV[$
J3_C
9\6`
IpX,
?"SJ
p$e
k,M./EC
Z9t~
PIah
RunPe1
.WrW
l'5n
-y+l
7 3X
Ma
j< +
5tA
PV ob
W71i
k?2? m{3
MUiJ}
JjLl
SaIZr1)
?\P9
ZfBM
4O<c
Papd
z3Tg
O!el'
`u5Vo
_:s%
mNp`P
BHdA5"J
k[VL
? 9
GkVJ
F{
:!]Z
^PTI{in
5eePG
?f36
%+tV
VWZd:
6wri0
&MzI6
|WRX
V$`*h
8F(?|
,X1Q
}JkGA
{3FE
0\US
1sO;b
$ g
pZLx
L^$Q8
B# u
L/&K
.NET Framework 4
rV3F
jergFq>{$
Y'm5
PNHuD(
h"}w
n<=r
e9xF
9T~|
0FXu,t
ca y"
'R 1< ~Oc
I'Q!
[ZXW`o8
>?-e
O"x0
Sy Co
a|rQB
y2F{
P `l
tv3O
ug&g
r45
dAlr
be|a
'Q[[
7ls3!
VLNP0
K-_=
4^H
~5NP6
swF2
xfDY
sG- e
|L:-
@6}9
GetHINSTANCE
v[b@7
V^J7Yz
Buffer
or'd
2I
e7G
.7i
YYY2
Ho)_
Jf f
|<d\~
STS>
:ABnE
:fK6
\mGAw`
elRwCD
nS|z
Z\je
cCTj
~^/n
:HzX`
g}&W
UBvb
_;TID
] 7{@
6}/'
6HSy
ymPTs
yRNj
]Zei
xt`*6
93LwW=>
kPK[
>u#
n I
Gt^l
7S95
!myLU9
O^~S
/X0\2
86G;
49-)
A^sE
n)j- 9
& &2
:#;M%{
xJh|?
kP"N
WKv,
9a!G
q~fX
Lh JS
nm ;+
^91
v6q34
M:*#
I{[a
cCKy
Q K6
sBx_
Cu:0j
gZ%C60
$C[,
i{Y?
rbg
#_2
<9b
):v"
AV4kg
LD"=
;$z
X=e*
Mem|evMvtg`m
F@}*
Protensq
lpBaseAddrvd|
set_Item
2gg`%
li~w
<Kn`SR
PemV;
''u
m\l]
kBP|
P<C
XdSA
+1VW
Exception
"U8Bc
kw,Y
WdB_g
(*e>G
i KE
VM%t
OE/h
<xu~
<q".
?z4Z
applicati|yA
cnRtmbessInfo
Iz#3
->F{
^z@!
:%[=
o/ R4
8"#`
+e;u
7/Q-IC
LNNJaN
=k^w^
Ijyw;
DL w
Ac%9
%.K>Y
V[ayzd
:o=d/
vMZ2
QeYK
C64
++4%
P!Hv
W65,`
GC,}g
TN'-6
B 3$f
dJW'
M#JNKqPpLD5oy^GWX `G!g##"
N8K=
:61`
HAm*'Y
\ G^
bNv9
a)1U
VRR?
<{{X
d:xK
`_nFZ
:<n
RasTJ
mj~{0F
IDAT
`Bnbd]
JqbN
]AWp
mX74
(iM1
YB&"
xxG4
kyf9
^f:[ho
DfruQP|
UoN$
Math
X` )E
)ID4
UU_@
procvd|Wl`msmation
;|/r
$w'
!!3k
@:{~t
" @yx
&K#6[C
kX]q
A .=
/N5*
cmdCopy
QJ"(U
FreeCoTaskMem
S; &
ZhAO
CFn^
i_,}
pp8n
viR]>}Zr/{
s]zA
0<]$
S%Kt
T+B&JQ
)5i3D
lpContext
dDiL
QtrToStringUni
:ml f.=x
Z.&%!
7=z*g
yJ(/
8tt}dT
K-/i
FU"6
Ea!^@
\0@D
WaitOne
t'{'
(]JB
D/c7
fc:
Ig8BM
3Ki7\b
N#TPoL
Sn>r
p"9C
pR;
\~p
[-R9
R>-?
x1lH\
9 ? H
proce`d
*2j&5
CC?c
gC&Bj
@4Br
JP9m
Music
k2(
`HP!
O*G-
AssemblyProductAttribute
s{pNE
bj6sl
QQs,v0y
^PTI|jo
,JF4
FHlS
GetFolderPath2
Di@=
chh mm
A&:L
<Module>
jUl>
cU 9s
+KSn_
{tWL
n KEBX~
@O l^
vjL*
bE~U
uGh}
;7h%
-af
xiT_
pNny
hp`O
No %
R'u?
EZ`6
!FYW
SizeF
A /5
3 3 3 3
Ri @
SamplePicgb}{q
j,{I-
$z+HAY
[qc\
<RNF~oQ
2PO7
N=A-
?8cl
rSTg
_efQG
bjDrn7
`hN
*a ?
_O>#
SidebarDefaultParts
Y|uu
3*SK>
/9o3:o
8@ARY
1uF*C(
ND2}
k<UqR
-O[T
{,uy
C0~'
?$_g
7q1p?w1
j1op
VIKM
y%u
56<j
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.Resources.Ii.dll.mb
EndInv||j
<5!
T\+'
7}!-
nwG~^
,{qt
UUahF
L_~K
%V%
f DY
l2*|n
/Ygz
aif_
QMJ~NvUM
O{B~
jo449
}g*5
o+,YO
/*#^=x
tWcO
7VxjP
W2WL
NV :
g1REB
Cookies
SetValue
W7"!^
`b
b-&Ra
gZ%K@?
. )*$_
_eh:
;hD*
vyxHg8
fap
0bC{08
X%}!
Ho!OA
WrOj
{BH&
c%e'=
$;1C
dg,b g
a%|.2
]+2s
S ~V
Bhr @
8Z '
D~e3
1[ FfTI~
/.6m
Nmolu
<qqh
{27M
C39<-
H/?oa
p} ]
r'.=
>]`\BW
9);f`
76F5],RO)
fileNameA
oDr!
$ c
QG\/*
ProcessModf{j
A}W;cg
%86O
^dl*
t{S[
set_Icon
System.ComponentModel
iq?t
jY%
_(,!
` .9_
evZ5
vo!wOt<L
ML(:
n*"QublicKeyToken=b77a5c5619 #j.:?
n=u~
CjL
sh^kp>ecI[]%_Zg
y,dY
dYNAN
F])i
C#Z#
|d=@
RandomNu~ujlEcldrator
T |!
]~H@z
'Vr,
j^E4
*,_}
~qp3
{!sK
}9p@
=<.I"
Ew$-
!{IV
]{AY
'eM}
8^PE
<!S4SW
D+b;
U\J1 >
ii!f
A?v/
System.Windows.Forms
5c}:P
}DS` #
fU7)u
#!v1
Y))h
V lO5
+k%Q
y _A4
b,g$
RegistryRights
lZ2,
b.Ec#8
Y&XL
;O*-
Sa<^[
+O ;
LqovkmerGeneratedAttribute
!*2 5
v&%q=
!B+X"
da1m
FbB^
<!hbQP.
)^0k
M"G\
_||au
=jh|
- pt
F41Iuhm
p }r%k
b,g{
RJRSJImAjT8Ao!*Bp\1s 9?/$
-#'y'T
sJzm
"Pw]
jrTs
g?~3\e.p
5r'I
m=(d
SXWl
"9|R
LikV
}|lT
ocvdrType
eefaultUser
xfse
PyD
#/XS
5sgf
C:S?+
bcuAX
BKfVx
?2&fC
QDa\
x>?B"h
\?z<:
n+/d
A8$4y
Rs.>
G|W1
|9')
e^IM:-
X/#2iX
|9'<
}<nP
O7\Bf
|->Yk,
mF@TUB
%a{1
L)5x
([ 9f
/ 6BP
d Ln
+F0T'
f+++f--0fDDDf???f
-3k
Q~F,q
MocalAppData
Hos%
!93G=
/$,&
@5FGN
"VI=
JjJu,?_
*^+
h0Y~
KD:bcr6
whcSyW
ePZ0
qvv
Vwm7n
aycI
q4Kr
Pn|b
bytesWritten
+]#7
{g`;
#{Mi
3R{T
huV7
V&)(
P &
@28Rr#3pJ
0G WHQ
c{Jh''xe
@N,8
B(N9
_890
;V`r
+oWk
rOL(
+rk(
?;kYN^:
K'B
c^Yt
9AMon
[?6>
\gqrgl.Runtime.InteropServices
H,U
\$ @
Ww E
$9f2b9d7b-483d-4b90-9113-6456f236746d
8FXo
)\][s
nAOu
p!#CP~x
l7lVv
|bFx0
D 4:
w:x&o
TwotimeFieldHandle
ugjw
x#}3B[
7zK\a
YW~z
+bK
VV-4
X\(}
op_Explicit
ssN]
p_c#
System.Security
f [iZ
J ;0C
G/ (
&c8
^D&&QP3px
@d(j
K-b=.
$ Y
RecordedTV_~mlct{
s( lZC
w^\9
f`}^
type
d~$r7
lpProcessAttributes
''&q
>2DZ
l(+G
SetImplementag~`pDjcfs
v;5(
-2mVR
y-:cp
B.0F
7\~A
3'o%
X\VL!<
tk~v
r$"=
K&[I
5 s{Bp
0Zrp
p_c_
c'NOY
S;|9x
_ u{
=`N&
W5z}
`[&
5!b@
HV8<
A;g&
k/"n
G2qT
)z9qF
"Copyright
I>)1
I%ii
:>@F
p_K P
_^~Q
YULw
z !M
B}s8
rlxz5fo
8t9F
*BT
{,]]jc
UDFu
`HRo
Uzxdcp
mC=T/p
i^IqWG
{o}-
767p
get_CurrentDomain
Ringtones
XMUw
ub8K_
(F4Y
W\5G
L ^$M
dbZ[$
VX1|
"6U@p6
sC+!&
rlfW
_{u^
zP5y
5*@lj|
b&+U}Wh
(]X3Q
mD[S#:
B1rcl
Z9.8
>eXb`
][/C
V@n"
PublipS`}wkgots
b#E*
t6} 1
(l0~
m!k7
Path
.( e%t
|wB%
X,|q
ocV`sks
2Pq$G,
5;3T
rlf
Wr}wtc@xtes
j~.=
1Dte
i#[`
N|377
#Blob
Sk07
/&We
&\`
^CL=
7Qwk
JZM|
F2[J
A[>"
6&\NA2
Qag
Q;Hr
!MPXR
">eKy
[IU
2|U%
N$3?
{ dB
cW~m
(TG|
c]lx
q-l)
q =*kX
rv:N l
y,>>
Z .~
X}jL|
PGZ:
:c 8~j
~9cTL
D\yGmxHE[
.EhZ
hS5K
p`d}ePW
pt#N
iF)w
$a g
#zj
9.":
/RRC5
swRk|h=
/%QR?
X=&-
| EH
set_FileName
]#Wh
AL ?
'"(+T
MdU
/Y^:t{
Rx\C
crqS:
><'W5
M.Af
^dba
,+OgU
1G`
Y"q#
PmQm
K .H
-idYP7
hpZ<
J<K<
3a-
) VO
(H;$P`
vlEA
HnzX?
l_|.u
b[F'l
n:Bl
"\<U
B\%cYS
C-%w.
i--<
q82k
H>5F
o-|GX}e
P47L
e:h:
U0Ob
3T$M
UCp
Floor
x>b.
fNx7
mhSf}
qEW6
PublipZzmke
" Q
;l>)
8o8}3
Ii.Propeacf{q
~Wb-4RW
l.V"
UWmfo
ra7W
n-vg
q-$s
wY+116
O_/
y0)3#
E,gV
+(gy
cPfY
GetDirectoryName
'['=
OM^7vH>k[
I Rtl:
I3[)B
eWcl
System.Configuration
jWEi
J]~8
-%*z
{ya1
Mh;=
ICJ&
ecv^BaseAddress
*&Y^
+jn8
Y7
i{](
S.4(
N-F?
NextBytvd
iw#8-u
ix3A0 x
2xAj
qP{C
q=D{
2 r/E
)SLy
!0"w
GetFolderPat{
-{cU
<@*
mo8tj
S =w
HtFZO
9VPo1
\9{:
P^P4
:Kk{`
eSL)
}Hf
fE+c
*Y>V/
R);f
$J5O(%
BS{]
qQO `
QHgQ
=5@d>
psjxw
Il -
" +FVX(
H?)~
v.CD
X "
IconData
vW/5vwt
[%&b
!4p]
c&QSs @
HhGL
`+;A&
YgrOdthods
8vY!i
^xvb
:ZOe
9S3D
0KBq<
aT^V
95\s
!~b}
z+ch
A6~
/F;Wa
E]Rw!
|Xw*
BBk)(
ybaP
hZd}
55>A
GegSflgevnryName
1=6%
zD\9
c}%l
lx$_
jPOJ
(26C1BI
"<NuW
height
mJzB
JSSA
L`%'
},q?
ysHqI
B_ 6
(3UB|
(oC?:T
N87-
H|Yp
nx 3z
vJnieX
@V(r{/
/q5Igg=
e^95_
^N>~
>PZ"
m)oU
~qlV
Sc32
Io<e,#
psD+J
#d41
mUJ/ze
`om~om
>kzI
G u-
CGJ<
lT p
"Ay>
$[zz
N Zl
9j:I
BJ;~
Process
qyCL^
NWjx
K<:o0Zo
{iVa[
tB~{
h^K_ A
Combi}r
Sjd{{o^:7
lFmtc
M{uvdm.IO.Compression
\n!^`
.| o
L$'V*
Q7d;
AZZSn
{f;s
ImageFormat
zB<:
>LgQ
Ru8+3
wV+7
IWYC
jDty
) ;+
vO V
1|K+v&
15.3.0.0
]O !3=
&s,I
EQ!b8
2Y;RLlJK
Licrosoft.Win32
Ezf^
System.C|{c{arknns
4lVij
:54by
wWL;x/
J`a
z,d
get_Q{`}iUk{e
Ommp
System.IO
WrapNonExceptionThrows
;W:3
19R2
]t|F
c~LR63%
c)*<
P+!S
G)^2
tg;T
$84N
I _r
IE9;
^LwnO
Bj_M
]t(DI
Z(vQ J
ZCd-
B9R(
(zKX
tzT^
EZ\A
la2>
^NcD
=YXc^d!
gdt }}g
+6B1
}w1U
Xdz*%=
wDuQJ
h_AU
'Y"b
~L0![
5M<G
M0g|
,FKKgThv
;` G%
!CE
y['T
5JF
jw}M
mlYq
&G =
;8Y@
PjjOcviodImplementationFlags
jO&S
op_Equalzcv
;jf-
}ENSV
<b`8
$"&{
`*CM
\gjpPcce
gwO
.8Su-
3]vo!
:Ym$_k
\e;w+#:
Exter}vc[zegqtion
YR3nf
_]'@)
(Yzt
)K-
SNCu
Ac9;{T
i3^@
DxU8U
ved7
>4]@
bN$ i
*o~
|Q7#
^)"E
5 xAd;q
Jwx$
']9<
< s
9x\n
#@w#G
VirtualProtect
2`SS%{in
fLs@
x*9
s%[/
a|V
Iu/B
a \8G
bytere}
@ T
)Z_2 %
D2 )
(h'l=
C_M`
94 ~
iX;|
G3dpA
j8zY;
FAz,
System.Diagnostics
4$:Cv
*^U4
pkQVCm>
OriginalImatr|
J4<x
)+j3
5 n|
~r|*
"A5ae
ldFUvQ+eGZ"XT86>mAXKYL0<"
8'=y
xRBx?
>7a^?:
(>8*
]`!*tA
AFm
/++pTv
#(q7
'C5g
%nWm]
-~(+O
SHyO<f
>YVL
U<F_
1];O
R;%Hc
QSPh
.9S ~
mAXN>
K0%@
1AI ^QG"
aWXhV`
"T\'q[
`54q
\ Q+
upyhO
gZ4x
_z"g{
&r:q
CL&C0
WnXQ
3N&M
t4Ub
4/hU1
kb'_l3
nJT*
e f6
,5SW
bInheritHandlvd
AJq'
n]TdB
tOrb
XEtfS
RegisgevUg
*6;;
RegistryKvn_{pkkrsionCheck
get_UTF8
0X6;cL
Gky%^
SzN5O
qH}-
61Uy`K
<rb'
{j"$
,@]I
Iou~
qWB#U
(/l{
yLEQ
Yd2/J=
%X-K
'&0L
>sVY<[e
&m5XV|E
Zs ]
<XW#
jlFt
gVF#n
|W`{
UXfA
l[Tx
SQjxXMd&
W.9NG
zsR$!O
%T'(C
3id#
z^ ;
s 8E4=
]b1x0
.?'d.
FastCGI handler
: 8
3209
>,<g
,^. v
=<oL
4">"
&6-z
H.Sf
&/3m{X
;8Ew5
(`/K
)qvc
2y9&
v'>w
1 H
Scym
sZ+3
\O5{
NGuF
uFSZd
*(2W
F6^
eapQ
E}t`zkhe
R"-$6
gjk _
VXPz
/dpC
;;%|s
epdationFlags
d#mj
<[vE
A -0
@H^#
ygtM
`Gxog
v+ M
L]/4
F4q'
2`($
vw0)
Ailwersions
JJHZQ
+)eug
[} &
#/\e
* {EyY
vdC,
';z.
bwwV
1GC&
5{l$
LwhvhmeTypeHandle
n2q"
0"M{
j+o<
;9c4=
"##8
Ex=bB
em +
vawu
\&+VLF
Q!x!
DII8
k2`:
U*B%
t[F*
B%cK`
9dqNJQ
UO^s
dvXX
XIp
}rZ[
AESDecryptBytes
z7opJ+
nDnTO8
$n
`-L+
ZM+4WJ
M_o#
17yO
kQ5p
M\+4
@vS
ub2H
L Ipd
V._G
21;7
2PT
Tg/Q
H80(
Qi P(
FLRbCe
[<qF
x`Xl
9 E,Hhv
Z(} 6j>g
GuidAttribute
!<Z%
EC
){3r9
fT+1
aT)K8X
sWXA' b 7
I0p&J
nLps
PNMs#0 j
R:w)!
s@+}
YX"l9
)-ej
"y +
k;j}o
B=Q'VC-KMzC4/SO7dBK;Lr{s!
rWW\
A 7DVM
`` *
6Q @
^ &N
jWsk
$<X5~5
oq @
BMD8
Us5lGM
R]U>
#7"z
G[2
)r]O
ydm^
=w?Y
lSv9
saltBytes
V{X6
X-EL#5
tC.o]
x0c7
5Y^S
?~b}
`igu|
UInt32
Y,p
ag!#
Vr_-
>5-}#<
j5/&
W\z~
MwpK
WW4R
x6M|
5$ZR
UNA+
R lZ
J9\`
h"P4
#s_\
}#`x
z.-B f
&/P%
\'~0+\
6umrr
]9OuS
RvpA
Z4#c
v= 4
,rDu
\T!o
PicturesLibrary
e$K4
&C]W0C
gfo(*
GK @
Z~El
U}&8
2,9X
qigA
.8!%Z
&Z hD
g%hL".
@_n8
Uleoa
*/~
<_2q
FN{,ui
s:X=_oCi
;Fle
$gX']
wRDZ
NS W
|ZbI^
Bac~=
AssemblyTitleAttribute
E$\
mh Op+
ebigaciqoguqad
L$ 3
u>EQ|,
y \|
[T91
D^ *
7|U~r
c Cpx
_gDX
nrri
a ~|
`7"vXR
[LOd
LU*\
a1Jt1
&/ e
{Z MC
sS @
jv4&9f
Kb Ne
UJ`9
1&.Q
pSSG
c*?8[
Iytf
!$x[
$7dy
rWr|
NS+{'L4?
{(. ]
}!PiQ
Q~Uj
D%!
7[y0
zbI
$OhM
iSe7.
j'/$
qsE&
pTMI
dJ}9i
=lm#
Int64
owgc~=
:F&Q
bK8&1
J.Pd
`B'<TQvq
a@_c"
4&/O*I
r?nj
GTEj
-kD.
cTA yt
!S =q(
Qqlit
^)$J
3av
Nam"
du4D(
O~ W
S^_7ky0
"2JK"#
0a+Ih
_88 e
4Diu
@M2/
(:5-0
)^<9~S#
DZzbbBD
=, &
_ _2K
_%JL
I6r(
)OVwHf
^Vu?^
gWY;
u!1-
s@F]e
he?FJrr
v- ~
"B4P
P'DD
Sy`cjs,Emofiguration
-&z-_)
U=J
AcM7x
eS>j
q{CuE/
FrameworkDisplayName
iW={,'
MXY_
Zth<
"12!
C x[:MrSWCF&&P~U`6ua~1lX"
gnD
djj]Gpfuments
R#[f
gvcPZg`ctltNetworkCredentials
OIM2&
cw-
l]Qv{
N8^e
I_8B
P&gv
GEAH
'?jgV
J},o
AU`
/F3[
ptQF3
"Lb}
^e~:
get_Chars
4P[D
="c/
h9uF
A5jX@
bM\Dp
4C*k
DL5Z
MH &{=
b72W6
^J!e
FA#^
s rW
8D2v`
ewStreamNumber
VS9%+
nOoc,
fyg
RZEQp|
~ut(8$DexqmB&\+]5,5=S05I*
Nxz
qK5p4`+W:\
bQDY
H9Y;
-A7T
thN
+Fi6
FUXk
NA P
FTya/
,)D]
t8iggj
r>c30
x 7
ESC#FL
}BYN
;f2O6D
Sd5?
%f>
5Nq!
J cc*
!`qF
1SOeFn
ch1a
u{o4
_M: @
hHzF
="0d`
K0E
B=O8
G6 @
$[c^
-> .
_UO
zh.b
~`{[^
kRj.Y
5Hxh
xwZ*#*K
@KP7
4f@EJ
URX6
VaF
H-q=
Ph3 \
N{VR
ZzgY2#
<LB~
"ZI eKL%
{sL6u
Ee)n
$~$'
Z i `
DMM
Assembly
r {yt
}o#X
D4F481B8E487+TJ-65D2DE3626769AD50050AE50
h"M~
a jq
Subtract
bYEk\D
get_ReturnType
8qgI
System.Drawing.Size
;J"q
`LF7C{
3N <
SuspendLayout
+lXE
.[I.m&$a=
'zWsx
:af)q
z%6s
0TU u
ew<\OT
Y}L mc
X. .V
y%]+
uiU
?<|7
,H"%
]=9zY
;2M]d
set_AutoScaleMode
3 v)}:
m|-SI
?",vw
1EZo
$qr\t
UkING
z7Sy
^} @
aEj1
0QGe|
9m%"
aO/Sw
ParameterizedThreadStarg
p m?
/ '5M
UserPinned
O<U.
mAs~
g4}%
dw3K)z
.g @
GetProcesses
:BQ[J6+ S
q\o*-
ALe)
rEe9
_-](
vl/ H
(lHH7
9B#Hb\5O
rs"t
Q5H
DJTFem
q' d
knownUxczgt
r]^]
b },
vT(3
param
r|IX
AW|pZlm
AS}#
(2?&
CNv+
l81A
YNm7n3
N~ik
cGtu?
>Qq1
JZsP
GetResponse
3OYa
iOYw
Y@}/
p9h{
)GIt
y T(
}u&3
WZLY.
1A>
<wo,
o+d*~rz
F)}A
*OP~,9
<=)IEv#d
/p]Uj
DUi
k>YyJ
^3S70b
Mg?A]m
5s4
!lx
=CAj
?Gr,
9U5f?VC
othE
LRWIN
nGD!V
ih-4
p,?t
PdK
YgrOdthod
m%/ _
:=38
bYI yQ
Hr@B
X|vF
SavedSearches
J7
_Rr}U
AssemblyCopyrightAttribute
dmzS
WNG)+
1F0)
W!\P
Bwld
A]c.
Y~d'Mi(SkE
UserProgramFiles
nc8 W
S<+M~
VS]W
sxq(
Documents_~mlct{
m"731
[^.9O}
ChGO
;/sM
>\ @
_gBu
CC7G
5axx
<Bi)c
jVZf
AUM
xZD?
7F Pv
SizvXi
[vA|4
];Siu
< Q\
U{rtem.ComponentModel
^ypFx
'p::
D9RG
#r2{lHD
2>07%T?E
4!&[
@8%wov
2xfn
-}UZ
I\y1
`+?j
PdV
o+P`
:P'W
mscoarj0fjn
=Xke
(#.!G
%@y~t
DeqbhycdndAttribute
[Gu{
L:MnX
B~\F
Templates
Kz=a
c""1rk
!Jmc
bRo{
W-pu
t=Ry
*N
M4 Bd
dT4^}f
ga||
\x_
w"?Mi
XIO
)r==[&
K<0r
T+13|R
zK6F
]qxQ
? 1!X]'
Pxajcevr
(q}$
0OC
AXt}
-T-nQ
+SGq
Qlm|
_c~$
|D|.
nSize
JaD5k`
Fv?D
7-63
Aa64
9+rJ FR
j%vw
yIi
}z$yJ%
Up<g
Ra37
K_F$
?138'
O0:U
87 Z&
cBN|Y
b7 J
gq|u
ResourceDir
tL9|
.cctor
=7w
Y&-'
0\p?
Y,QE
Zg<
Sv c}
sxA
QjipVerification
UnmanagedFunpcfqlVmhnterAttribute
A8*h
hTCd
l{J$
s*V.
7k+
ILAG
f>c39:A
6sHm
KnownFolder
%r N
;| \
qKw[
B:q,W
dS!df
{X}}
YTPVx
Aa6D
D$SFb
Kill
x|#l
O#p}
ag07L
ls*,
^~|\j8V
{!n36
MvgoWrite
(hV;
ji7^
get_KeySiir
]?i"
$efd
l6We
fo1"}%%
System.Reflection
/#k5
Fxe9uF
W35@>9
^fF<
qB4~
Ip*v
n2h3
Ayi
=B`F
u%HtOr {
^m-R
G`Ne
k pn}
q>Wb
\N@9
MessagvU`f
pYz<z
sY @
T]AJ
L/04z
;CO -
Wmru
aU,,Ybs
;B#H"
2d `
E< (
0B"q
hProcess
!wsx
s]o9
k/A0
12.3.11.4
mgr]Uimeout
j|}T1
YqiG %
ah$*
/a G
^3 Gg
1r!0Q6
?9YT
5Lb5/>
}eE%C
U7lq
`.P=m
a3PS
',x%
r 0
W7oT
{} F^$
lAP&
p6uS
`n">s
sH9P
B"7Z
Asse~ucgAilgigurationAttribute
I(130
.'Z(%
HwTm
TY qn9
|5MX
vOAp)ti
sd V
dRAPN
Oh.fG.ar|qwtads
YU)c8u
#ZrPM/=3$
K" $+
6;D^
=kWX
)&4'V
}gkY
kqborlib
a|5}K
"[iP
P>7>
B#ZK
F6v81
e$G[d
/lDU
_HIa}
v];z
=k_H
4h9X
$U"+
M`azB
*kgI~
T]-
+H$}
dUy7
eP4>
Vaf!
n 5`
JI 8
iLdL&
5blC~e
Z*+^
v`{m
)Pcp6{
n] ~
WTqy
eEadK
<^i<NPq(7a\MVC7|Yls(q5MA%
2bPC
Q/>A/\
a1zP
L 6`(
19>r
qyf{
d+I+
NKgZ;
tLH-
x`.]m
urR[sZ
h?Tzdq)7
%4u*
baaV
AlVft
dfr-&
}GAn
k(/$
1*} 0&
u\wS
cZ5o
/} wwz
hm^Q
j[Hk(
g3R=
dbFIy!
8T'~
pOD.
tz}!
'Ae7[
17(Z
{alF
(IAi
'?K:G~
$x<e
;NP'
`$?Q
WC{Nt
AesManatrk
5_&X]A
')a2
f&g-
& y
{D{ues
GJ%l
D`_F
`'Ti5-
2?V`}
ev}h
#[40
mEUk
)5"X
D#;;
8b}3
?N:R\a
G;_IC
?@hh
LJ}
15416AA105229A98F1484A178VTJ(GDA7B9CBABC
hAs;
V] @
~bMJ$\/i2"(B*
'|y$ 6
|3t#
LC37
@D6`
<i[m
*EOm
mXBM
!T{F
qZ'P
2s8%
d6R5
A9UR
QqO5
;M.i[
2cN[
1WE7
]68
1aB[E
(aKwmv;
TfI(
aZF9
P@#eJ
E2jWR^@
9u9m
N'h>p_
mpd,
.Mn?)
d;6T
BP*d
GetTickCount
CR37
M/X]
#@UZi
sAol
DGer
4AISm
*|D/zp
e{$8wD-
K?|M
5''U
8=Jd
{'ab
JD$|
(LDTFramework,Version=v4.0
{rVU
*uVR.
oE^0,
9uTy
FileInfo
fRV:
n._x
jy>%
uP|)*
d>H3|
E,Xr
d $9
?fw]
VVxx
xcLGL
get_Itvz
GLlO
|7k @
hL}
PUAD
.1W{
ji'`6;
+)A"XW
vaX2
[# 0
B84]
wQ:CnRIB
N&t@
3/Wg
"^]^B
2O% @
>A;T
h)`,
(ydDD
q0_2
'<R
,9!4Ut
JOuN
ToGenericParameter
s$jH
EW/o
#rK)
f#l\`
Z [P
0@~4
UdM+ y
AxGGY
C]=pPc
NQ,+y
8-M3-
);nE
u0& f
Rd+Ia
9f @
T.f,ml
<+$h
?dIH
FW,nG
k]Dl
kvTNL
M:A|aADB'\
ReadUInt1%
0HWw
5jjt
%~z.
#V[
Tt`Y
3\Q~+
A-v?b
~Q\_
ResolveEventArgs
%|^p -S c
E\5X'
J}hP
"n:8
0JEd3i
`>X
Yba70
s1@9\[
&Yqs
0Fqu
q/)}
,XPlyiQ
~xWB
<.t\
>@2Q!R
s:PU
e TwZ
=$M^
0L#i
Create
rri@
G1ZD]K3|
i7^(
$d=7
S- $ D<
7oVO"
GetDefaultPat{
L~{~
$s(q
T&$V
UK\
L]Fv
cE?M
h*qgj
':C]}
=y9T}
c"9]h@
8U=R
<PrivateImple~rajcrknnDetails>
qC V
yg*?
K6,J3E
-h}
s(vs
M P"
{a2g
-qOg
^. 0+[
:r 8Xc
jG:V\
NQo
pxSf6 @$
HmdQk
>(Q3_
(3;C
#6v;aY{KJS>t]^C)"@gtO"~~+
DhvA
v^vO
d57>
zCgt
p5\rV
"bko
N7+P
A3'C
_9C:I
/~|Ve|C`
v; tnj
F Qe
Ow,]
1=Xp
v 5[
c~j>YC
Mbzj
tPgl
7T{5
3w3$
/r`]
V^:? %
ReadDecimal
O?!t
6bWp _
e.FFn!2v
>z5|
iBj.
QqpN
y_>ad
KO$5
iLy
{Kr.
b =o
Q(TY8"c
_C;vr
!$1-*
>_^E
Vs@z`?
<Bjf`
reO
)~Xc
Lf(YMWiF6
9ma0
-zw "y
1FRp
@c>7
m&JF
Copy
.N wP
w*p+"Y
AssemblyFileVersionAttribute
(y/@
M#0EOX
\*Wt
]M243O
Nt?9
<g$@
System.Resources
SVM_G
pp'r
&`FRd
B)`k
[XA#
q a&
E<"M
totalBytesTransfeaejz
?Upa
aa `
8)1]
~FzcL
}en_
>{g1
U5K&
)-
gAd!
uzc
"$EmG
?4 u
`!_g
5}|r
$VNd8?W
Icon
AK9
eH8T
wK9P
&$t
WH&R
_~ }/
HGVy
ResourceManager
h64O
vH( F
}~pq
+w:.A
C m==
cN1q
hSX4
sqIk
M&r
PublicDownloads
a7|'Cc
~gA
NVT/
=Gv=
mW>`
\xm-
2DDhi
4eM/
)mK3b
% JM
JrvqWebResponse
1u3#
{?~yNb
GenvenjgbAndeAttribute
X nn
r 1~ h
wdAw
/+vs
$k%h
87q;N6
bY(8
f:
$c5B
>xop
7O$Y
Jv(#
G)aZ
C4c\
3$6;
muR|
#R=iU
& !0w
| .g>
`0t6
C"B2
-sz
s)U
|N =
.c{4;f+
,]HZ
uGJm
7rI}
2/UpT8
4mq
UZjKa_w=
P3GB
pUo[G
,$]E
[Xl[
co/H
=yTC
ReadDoub
~9Y3I
SgrjndAttributes
}pRC
p/00
SVd&
r!49Z4u
YllnJ
5X}+_
mGiZ
BallingConvention
ejv:X
System.Drawing
4vv iD&
Y\aA
S4?p
D1W{
8v&|+m$
sMy
3L2+
KB4>
FKbm
nq8
Ii7Aw
ZzwS
atKv
V@c]u5
pbeJ"
+d,m
t[H"{
pwz
=RzSk
DebuggableAttribute
2Y[.L
6|S.
z=ye Y
zPa m
]ohc
aX[NU
CZE4
`ZNm(
| \U
ReadQn{{q
n=Ru
cE$1
D.vFy
*EQB
#86J`
UMG4}
SmGfs
#=<p
`/-m;
&>t]y
&W6q
9\"rOc
1-Z?[
e( &*
B+a3
@QeO
hL$x
Q 41
Y T=
RvNT
fI:A
m hY$
>,%Y
HICH
wMPqBHb
T%v]
q[Z:/<r
DP{z
& S
2;j|
M} K
!("K
xdWT
4GBJ
bd,X
H?m`-
Log_{
T^x jt
Cn p
Read@c}wla
T0e%
2A0}
~"-G
3IXB
LCcu
VaGz
gL,Ef-
T9+A/F
)I-S6
GetDomain
.siF
StartFile
tZfQk
SkyDrive
EditorBrowsableState
AssemblyConfigurationAttribute
< \.7
r%X$"
4\nNZ
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
sq9Y
CultureInfo
Heyhj
B$M4
LX6y
Hashtable
TU,a]
L.%w
A.2^E
Q3`m
bZkU
@sgGGr
XEK?
GS}j
f%
*. bH
z8l-My
=f{] X
5Q ar
wo_dnzhm
/Iekj
^sMF
S#(hi
K4fl
LhYN
<nc,L2
LPtB
[(UhD
IsNullOrEmpty
YB J
8P
~uE' J
?(I^|]
%CwY
zqkn
p<@1V)
:59l
13H.
U LX
|C_sJ
v4ut#\_
/3L;
< &
BbW +W:
#?pbelp
dd&df 7
M 5(
(1P
VN_Y
*iAD)
iZ ;
XP]_W'
UF#\
iy0j
n4 ggjR
,>Sa
ProgramFiles
Z j|
Nask
sw
D4jg
`A2Q
E@Bn
p'g*
Oeq*J
_.Xw3
;cF&
`lI7
iIH%
] 7
JD&U
N| Z
eWWpX
cMG8
rH lN7
ejy'
^e!+;
R'
C
-,{b
set_Credentials
ua8H
a!2Y*b
( ab
!F0J
yZ4?/;
7it )
Z1xW
~{yr2
Zwl4
K]*
BinaryWriter
S\||e
8+A#FL
8~.1
WVFK
}Puw
W|cyR
a H;
1Q_u
`nx@
G6|p
Hhgja
EQus5
s},|;uJ;
A+h.8o
Kb?]h
]yzt;
vrU=
sZ'A
>wyC
6Gv*
-nsEq
<NJl
kAK
uve,
M8rp
7wL @
A\J@
System.Px}{
9W>bp
W|?.q
F _d%
g\-a
po<
@ ^9
TargetFrameworkAttriqb{{
66SO^
=v?R
6Ct%
='Z#t
uvjguPdad
lS s
nhT?
>dha
$VZl
-kz8v
7+1\=
>Z)c
get_UtcNow
PrintHood
Q\Fh
+2 p/
<g&L
{gSa
-wolJ=
i_Xz
:Z X
[+AJ<
kL``
^lXX
])DM
LfyC
|@qFy
fg2b
d,o
Pc v
<y_i
Q9Y[e
G. q[
2\@L
MD5CryptoServicePaxywfcp
ll0A
+1nx
=< a
'%Sq
EFd0H
-4-oH_T2=B9"Ly8PH}bFq'Z2$
V:.!
77(>
\yU1
8kj,F
rY&Pi"
|].0
E-#[Ji
)"{7'
7A-)82
ot-{%
3VWQ
't70P
o YIj
?erF
8j1R
Yj %lx$B]9tL}Rc2'U4qb'0G&
NW*aP
arIGeU0kn)F
4R;r}
Lg 7
q#TM
TEL
R mJ
$McT
_8bq
FJo%
) lx
lT o
6 ln
y>IFIt
=7&t;X
wQeH
iC;'1
{(l
* Jf
5GJ~d
"[5-=
+`|
ZjA y
"tx
%7]7
/XT
f5v|
]2eI
E; V
'M{$
4}+f
ohM=
ef;q0*
`8fh
tAVi(%t,
7#u; F
*Q`(
BwN~
+N.
<Uv
K2kD
Flush
+u\I_
;%)G
?KQ"u
_5^]
Qxstem.Reflection
-"{D -
wqfX
{ U~
,.7L}p_T
$`U
1g".&
LYF[8
bLvz
%HI\QI
2Br,>
N% N
y QjCFn
9nYq
iQ/2
jI`$z
Lpd3
$"@
e* @
R \N
Vb\ST+
FcD3s
nK(R
p0dL!
V3kO
7:OU
'|n
lhN-
hAwi
{,DG
d&0}[
qg+M?
*x9|&U6
U18Jd 6
W ?w
XC#}5
3K-:F
.9:
yYnAl
7V yi
J$l<=
z[bkeM
8 MAo
o0l5
@A0 O
`Q#6
bPj:
>&1@
7c
Sro QE
0][ H
ntdZ
#KgL
RKn(a
m ?a^E
k1HC
6qi'
G8 7
pR3$U
SByte
:#k1
Zck*
hB%IM
mu<wi
:7u'*
]gV/
V9DHz
3Nu4nA
c0FN-:vQ
jF_+i
v4Ng
Kg$}A9f!
Y mM
u+mz
+63(
$& h
@aDh
}Y.
H 9 uEU
^)R2
W$Z
){cLL
Xu6n
r4}~
{Jd
P ,-Z
v[}{
h: oY{
qbwa
",Z35
0WZw
Gp/%
qG
o=Nz
Exists
<=$U
T2*)
eiYLp~8
g(f"
@>5^
J ]I
ejTh
@XKL
;<7E1
n{lq
##s
{ \6
?0E-
i;hl
0BKb
N="e
O4
.-JrNs
?dUL&
x7T{ '
_Ak^
zTm$
t/zH
Equals
t5d-
fq6%0
}MhU
r }W
k r
1iS|}
ComputeHash
GrYf
Sl/\
.6bg6!
A}wb'
value
Bitmap
2} uV2
"/2F
dVVV
x&-
p? U
.?q
CgNK}!
g{WfPa
0v={
>],Z
+2x}
X{lbx7
%Yk}
N tc
dN `
0v=B
B^N9
pB|j
>ie"
u H3
ZE_K
a%%sN
.D@@
SkyDriveCrzjlcTmml
AS@P
pJ{2:'"_
uQR`
*&&-"
?]<@
p],w
D%Zlp
w--(-wfhiyhmi|hmi|hmi|hmi|hpi|hpi|hmi|hmi|hpi~kpi~hpi|hmi~kpi|hpi~hpi|hmi~kpi|hpi~kpi|hmidUUiBI"i
%5 ^
~qc^
W[!-+
Do NQ
6 3z
rBZKF
}[T
C~ljwtgr
#=#d
olL6
B`uQ
p[9r
cL+
k7;
Bb';I
ApplicationSettingsBase
)r ]A5DO
}|%=A
ohhL
-,}o
9hFK
a-so
Y r2
$pL-L
i}wC
>3 :p
_qg{
G^2
67WW{
O<bC
3iECD
Kbb9G=
8~,9
t.7Q
b+$[cR:y
=B{$^
RD2#
Te
]49]RqoVY k
a6S5B
WhH5
O WN
1ZG5
[ '
i?Lo
B:Zb
H_R n
t57 q
yjtQ-
-qgb
,N2@
Documents
y 3@V]
T>1F]Ra
el(VT
#^X%<
DgHF
n*nt
Y("Z/
h: q&
-uGF
72JC
(&ub8
&b_s
F uO
[d G
'YU{I
0/0
=4/SLsI
wKh#
0dL}
)-Vr
KK31
Be7
[*e.
iB1R
G0F;
G%@*
Vp#z
a$lM
_G>1
9W '$
o4du T
Xt8
sC1Mz
`Dv_A
RF<%Pa
C$LHA
Q*p4
>{k?
5{^k= }
#Fo*
O|_L
8oma
Za0`
C= P
Fleq z
z}I=]
)}WEU TguvZaQm4]$h*P4K@%
*73,Q
>jp&E
l!U'h
sG<%&| W3@
vy%O_v
a;0i
Cw4Vv
<XY[
#Foi
Ry*B
Hozo
/x)i
gq2c
c"hZO<
miuO
cPro
\]F:
:9jc
!p!xuT
DNXLv
Rp&MA
&8O
J2.>
A9ok
p~|s
"h9d
gCZQt
TkY
1Y~:
NbP}
C2]$
I0G`y
ECGDt-
!D`H
zPkE@W
f f f f f f f f f f
%U8y w=&
(w`%
zEAU
.bRh
|6U*
/)pH
sxmQ
ReadSingle
AssemblyTrade~v}uCrvsibute
< -4qd0
aKgF
` .:ga
J R
eFw
D'q|
4rP9
Sleep
ym}*Y
UDtc?
1u7t
D{;O:
t['V
O;oD
V.ac
O8>N)
l
4Qi
DateTime
_@\4
CredentialCache
&08h
DWYUx
)vG9
M4n
4d++
?m$b6
13>$
)M/w
\5u8
zi +z
,vht\t
/FLMJ
|6.`
B EH
5Id(
7.M%
.MF|g
+V^:
4Xk@
>o!"(
5O0(
1 /_
puH
NjF<
` {
j W N
SvN{
\d"&S
gU L
kernel32.w{c
RS'o-
x<Gz
0(Vl
o{Z?
hidV
=ANGT
,61+
U#f
jV^9L
<3rRY
Me$ ;
VVv/
c{7}
[q+ t
pq Yy
":6 @
"0IAc
F^+
Pz
Compres`~`pOifd
hP*}
/yqU
FCuA
path
v{{q
DeflateStrerz
tU,3G
lpNumberOfBytvdXlkrvdn
ZD4
b|xTT
1We;F6J.
2i|
0:uAr0
ProcessStartInfo
@>K.uB
#m\0
(*.,o
RuntimeFieldHandle
F$r_}
5f,u(
n)uF
T{*#
n %2~
Gg)bG
KTtB)B
u@l~
>B:X
m -NX7Q^$$O`ET2K,mf:>QB"!
(j C
Bb9
A$ b$
yF<~R
1aA!
;3Hd
YDj T
=0B$+
/'jn)U
:Yyx{*
zSY]
Font`
!M [)
DfzgdcsParts
1? &#
dOC$
Libraries
@Rwd
3EhV
B2 36<.
3ux
tI v
SK[
gdb2$@
Ad~q
8c6vg
a.}u
-Z:#k
lm:Q
vehd
Al }X?
ix!x
*FL2r`
{U8fpc
> . C
63kuw,
?B|t
e|]Ahs
3F#J
pjj]Uk{e
j</J
o@kmesX64
X|M
;
D[V O~
rgqrBytes
LrL`
`$G
Wlv:\
r_!e!
]z~P(
Gaq[p5
ISa
)we+
7o/!
K' n
}J,i
'#XXT"#E
Q@F_
Bs\"K+ K
E/PH,fEP
0kINy
jpef
d(t
H.Bs
80^^
5U.59_
#P[I
`)p=Q
AssemblyTrademarkAttribute
:O:f
[+ Z
s %r\
x |qz0
$E4X
u,^v[c
t%;WE
c|#/
&5PK
k8f@q
zr35
Y7$<
=$C'
#i@V
) b^?
vvw6^
i>&_
YQo==
Ny*H
"neE
V,l_
&2Q>Z
UguI
kYkq0
R8ag
\/(Q>
Ng0D
jKqD
XOC8F
EditoaU}quuccleState
iMa]k
"h.T/
M]J.
cG'_
y-5.
O3=6/
Zx(,~
`Onf pFZ
get_TotalSeconds
+v>Kx
k{G
'zJ I
7tZ)ef4M<KTLr|Y)z8Vm#>c%
!d<|f"
'$x2dn
@ g~
u9];66
Sbz
~z3
~PdFO
CommonTemplates
y"A.s
UvPC~o
f hc3
:PCv
UriBuilder
/ s
ea/nT
$52n~
)rv{
JC~+
~NSS
{(iY
23Ydh
<KjC
5Y4%_[|
BB${
CommonStartMenf
get_Name
=a ?
x88D
XVg)
1\nvq>
L}D
Z!wq
pE-V
F%DA
jG+ y
CopyFileEx
Igi:
m ^.
=cA?4.
o^t
IDATX!
!)yC
_ _
*p2
Ut'x)B
y#p~
5>}%]ebJ
f!1ZJ
\+qt
w"ki
4i !
_9Wc*
LStQ8
ZTZZ*
g a9.
BJ4R
q<Ib
WAIg
&f (f &f
?7Ga
~c$&
H9 6l
75 @
*v,`
pE-
^@W0
<\!N
WZ::b
;m%6=
&o G
/_w x
D|C
rBmGN
4XJ(6
EYk:
`oLD
*G8&1
YS $
[{f@/
AssemblyFileVersi|yNjvtkcute
Urmm
0/Y(
"r9
Convert
T~uI1
SQ 2.
oz*&$z06&z$**z&*(z$$$z
HliR
qj,yJ
_a+a>
! @~
ezXe
+ &]
rW4}Z
&p2kx
Ht<w
>h"$
i7c0
j"lc'`2
&QBh
g]c' @
>WNk
3<cY
y{GXp(
#5/H
LO%
mwz
<8 m1*
0KbW
(wbb
6y_>5
e R7C
F4X,
rSD Y
qSiOC
}hb=Y
A]K "
eIIU
+6&n
?9 p1
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.Properties
'mR#
f{g_JJ
I} NV
7Yrf
n,v{
hGa&
b+tyD
x/v(
\v Y
=j]
,6t-
FTUW;|y
LR~!G+
y3Hn
s$*8
cu0D
J I4
)P/f
-s< ;L
\8f{.
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
!]BG$g,{4
get_Default
xL]_
1%ZZZ
V06&zu
KqyP
kernel32.dll
o@m=
|o$O
get_^vfpOiftle
TG#+M
%G|j
[#JO0
_OdT
rZT{
%^&4N(x
wkC
!y]
jX\
Asfa
O \q
g]R4
cHN{
$ ~Z
0 j7!
AydC
protect
n"V
[lso
v:|)
.V?E n
#ww|
r+H8
bJ|.
qA&u
wAs&=
lZ
GqS*
z~~Iqrs
bq,\
2"""%&"
)dx}w
!ceRR!I -]
`[}YE
pXEi
n("K
^cE
zO*
LI>FK
Stv
GetPath
`9*w
S+K*q !
GmM,Q1
/3eE
GetBytes
Nh {=
GW23
(@rf
M'su
+Uu1E
? Mu
LP_
FileRtl{qu
q4@J?
d:V?
yyZm
Write
.L,j
F:/$.!B
Uf-4KU
)vYv8
jm?y
2p|p
9jI>
b),r3
lGiL
-Pu&V
n4O(
zjiK
<$)D
EyZn qc
Z |'
PublicDesktop
JG+6
'?&y
aw}P
kwSGe
$,DV
ZaQO
n M5s
C{J.
m_Q 2
)NlbH
V/k~
BharSet
ec{Z
ToCharAravv
AflK
1 H0
?(d(F
RuntimeComprcf|kjkuyAttribute
FW*{
maMv|@
k<$>M
%<t
ww96
|"\F1
lM r+
LQCa'j'
e^I\E8
<3C_:
4+:j
3ZO\HW
a::/
1vHL
5qvN
O?\lL
1vH2
qR'!
UcXS+
wB>|rnS
y6fN
System.Globalization
McX_
E<).rn
d}C>
z*W~
/z?fP
%P!>
Xz\j
j]8_
a8 !
mgKs
u` O
Ni%iV
t*="
Bz)~
<@IcA
KKw
1-Ej
- ,G
*C8>
VpngramData
System.Drawing.Icon
#4n![
jp{U
x?]h
oXL0
Ca!=
p.sj
5Y2R
P<ze
K;=\
SZ|8
z.{|w@
g@qH
+9Rb
.i;8
CreateInstance
d$(X
d+nqK
%Esq
":2
SE:Qu.
X.~A
n `y
.L/Y(H
U>WG[
7B]
-a;
}vB/y
7kN&a
\P u
H<J6
[u.A
QzuG
Environment
-(Ak{
s2pC
z"Dq
.Tg$
*jby=`
>2M6E
pyn4Sst
Ot6i
/"E6S,
{5La
C zey
,hb\
</ {
2Q o
t-iem
Wd^uz
dCf>
=%#x
S!vx
xcBL
Decimal
uO x
PD #
/DFD
aaK{
Bi"P
V!\AD&
t<+QJ
HTw_
P#0<
3t+4GmZ
Qu(J
qe8z
z .q
V>QU_
pckg
X [0
kNst
+#y 6
6AZS#w
L7]
WC!W
#t|I
AssemblyDescriptionAttribute
get_Path
,t2C`y
7ZbRk
\$u~
Activator
9rXmY
ll@MK
IEL*f
! M*u
lP.Y!
A23Q<
:Qk3
vpay
wK(t0
]:]L
!*i_
M R
ReadBoolean
KIB&
:v~+
Vp/a
h)Kc
6&-
>1*J$v
A{0`
;p<I
23GM
Intern
g89 @
E8.7aW
lr%*
q*.`v
8Ce|t
A_SP
?uAXw
I\=!A
SeadByte
1+Q2%U
I jg
B^4U
lcuQath
5bnS'
j'F
environment
U|q^
v 85
U5Cl
mvTQ
8 2Yo
=nm"y
t Lc=(
]^&;r
FL8
&N>G!f
6QAm
_+h~
|>@
i41#
VuwjRl
SS 76
JTCo2&
duvs
4qwnaq18
hZtu
1466740f-ddd5-41.Resources.resources
Ln+M
=i[P
"#52
Qxstem.Text
(rc)
icLO{N
mM{8!
lpPxbschfMine
]GU@
o?%o
iz kz
nh<=x:
{'[2
`c?!n3+
Nov/
Rr- D
f-}i
At{qtoStreamMode
hLR{
p-`
%Rd&
AssemblyName
#?O1]
t<GKs@
n7M:
+^ei$
uT:r
RU[8
}4l
mi;
)vJ:rT
"f<rV
:]GJ
Fv.H
Tl x
;HP`
#GUID
:GSb
Dm"f
=a[-
ppw%
{3+K}
!+]
^1pf
hTat
TypeBuilder
V|{x
Evade
YTF1dG
qf:y
+p Y
.h;D
,]@=
VirtualCe`jgev
Lpey#6&
Qji^d5h
g}wV
get_Length
_" @
x+mU?S
C.[
nn}TC>}
B9YHY
ROvJ#
(XKXT~n
0O?!
$Fle/
62":
'UAn
T|a='z
FUc+
U!@.%]
Nia`lizedResourcesDir
r+Ox M
G
?,KI
~C`O
d;8^
d3gE
clQn
Ywof
bogo
s'tP
R$tB
R@?[
vs>j
R.uk
DQ]gpw
vq@
O\zY
`KphS
o{^\
%?i (R
, C
&tl
@X q
}E g
V,T38D
']IUZ
SEet
8BWh
GER~
Z: ch
pG7>
,W.\
>$X;
Dn})
GT'W
Op;~-8&a
e:s(
sWML{
iF[9
xE=z
$8
Fh.o
RnP$.
9'\\
U;jAY1zT1
reC<
,S/
J`Q~
WVSjw'
=VP'=
hnmA,V
S3!r
XWvz)|V
ZAp 7B+a
v$[>e
mGp
N6o/K
IsJ N
AdminTools
<F}_-o@
m:j
`\i
Iqv|
;j\.x
Z1h3N_
oXUnX
}{%2
ZuB$
8DD?
Nj,=
| Tp
r~g[
/M~F
KB l
}GTVX
t }9h
<FTU
Sk
~T0M
D ,$<
/]r[8S"t3
BigT`ptcpuer
k[`<
l0E
CSa~
Z I
" ?d,
w[Jk
esoLs
}#<Q4
[P#P$^
Strerz]{cbgs
0;"a
Start
i/WW
mS70
%+O
EjdD
iX @
MW K!Q
F'&1:>
W|
4/W *
:J\c
3m#E
.2oU
K&
-qRx/
;s
i a7
S& V
MzEQ
; 3y
:aa
R_hW
H2K|
w|
get_Cv}
Nqx
FP/B
F Tq?{
DZvs
Gl-?G
ajK3
P`^LW}r,*I.a
0WgJ
7G9q
QPU[!
YI I
a`gF
LH~X
%jTa
6V v
s$3
.NET Frrzjimti!4
\\G_
(A\74
swh.
iv5.@
a$?*
c6g~
.RZ%.Z
jjkU.
m#k
4,- !t
/#t;r5
b0rv
O1Ve"C
{ 'Mx,x
dYTw
u E
U=\z
uc*o
#~tLl
9-n J
3V#sx
N>"]9
#e}w
vzH~
ZBR
7jJ1
H0xF
0vYXJdqLbgWyFB+FwmBSL4s35hSWJTWi+gs3sg30ZdFS+d50l2+KYI8aZwLAVtHsGfpzElMkrajwYY4TsTOK/9mry/pYaf4g0Vbi3leFANIriiOexnpP+ObTRaYNzHXtCA==.Properties.Resources.resources
n` *
IP9B
XfjI
vpo]
?m[\JH
6=?EC&
d5) v
&Rgs
v*9A
u'59
0[%^X
(lvi
4oe/b
EFAWv
Byte
%<j7T
70n*2
KT|,
24d@
{7<J
cr_&
p \P
|mry!
`jO#
$uHX
x tC
8AqB
lP$(
5MN&!{
E}c]c
5=DC
}\\Z;v
? nF#B
i< /Z
,,%E92/
];q%
*ie%
NA1?
Q2 ^
HGH)
VNoq
~]H*
wA|AxYU
ij*S
"U].
7{ zSL$
KJ$m
z8w2
~@Bk
PaE
}>T
*X@q&#|
B\[M
Sjd{{o(Fsawing.Imaging
fi}'~7
/mT
2t.#
=`Y/E[
BG-
lScs
pw y
,y z
d)s|
nu"!
%0,:0
E55D
FreeHGlobal
n4(V
!@L9'
H?lm
VB @
;L
A,"c
,v'vcO
rC{f
=cc|Gq-
{d f
tG<;
BindingFlrp|
L <U
V.k-f
x'b-
",80
Ul:Z{
bI [QW<
y8QDK0
/w4E
8Gav
V <F
:/
;DO+
<Z Zk
+pVj
JIuv
^?@8
\>bJf
z1 % L
set_CreateN|@fpfiu
FO5W
^!r
r`E4
`8~`
dP" !
DefineDynamztBqfsnd
sJ*_9
uABG{
QvjDJ
!Ed_
Q5[B
Wsco
P 3"
f|j
@9;A
Open
)9vA
H 4E*L
_+g?
+ \4
FST{u
ucKE
[lrgs
Sou.
y4YX
5HV,
D2:X
W<Xla89zL V
IeP[
Void
9.5(;
:1gX
tjH
g[^<
/(H)p
n6 3a
Sg)kA
4<Vs
*-vP
Lj%4
\e!M
XSgA
wz@{
y |p)
NY_y
b nq}
=R @
+7cf#Q
p^w'
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
gYlB
8ruzn*
Uu]N
a|]A
]VDW
)P (
MnT#
9VKuV6
e)4Q
*ZN?W
aJRb
H Et
6eV)
+7aBB
#Dp f
~^WG
dwCallbackArnmmh
tOBk
= gzdU
/G5y
uF8#
! l&a
P<a
m).Kr
V|"H
h6D
YJW!~1
:8T
iP$Z7m
zJTt
`Noq
b_S3
**:0
WEs (
~e>:1
Ah_Gx:
EV{b
2?1b
SecuritySafeCritztnrCrvsibute
AiV`q
h(j
&A}j
&9zV
rm(K
iv*O8
BT|P
|&-[
V$<x"
Xr(B
'Hk9T
,T#%
[zA;*J
`HF\
d&F+
Q)-]
ReadByte
CfMs
c~^h
~2me
U}6k
t(~/
^348
C Dx+
nC#:
AcpxzpvVkbtures
2e 3
by{
?Ypsn
/,DX R-
& j1
;4(S
#Sp:
AllocHGlobal
XDO/
UBZ
dymZ
,{xu
`\ Wf
K#jD,
ARlP
BitmapData
2`LE%
_ 6
Qa~E
J-aL
;tJQ}
W`HV
;M,`
,' Q
8nK30+Z
7=~^
anE[
& #
GMQ
@)V:
r/X]
A:C=
w :@W
J;z1
ReadInt64
7qWcE[l4
5{@9&
ou
TLkn
<!8M
*#JM
PublicVide|d
HY^N(
IndexOf
7WX~Ol$
Startup
GX5
*d``
i04F
' t`
jun
36c2VG
=f GrxuXT
_e;3%
dzRw]
REp*
~%Pi1
9J[ks--;
Hz '\
8
7E@O
.zmC
I :"
56G}Fdg
f:/]
get_Declaa~ayV
0 c3
ComponentResourceManager
n=lY
TuVzj{
[I1-
PzwfGvuribute
3eJ"
e.bB
~!d;
Screvy|vmrq
F;;Itch
CQ~s
2nSL%aI>
SHGetFolwr}Ncrj
`|%)
GvcIwncL`meWithoutExtension
Z\pr-
_\}
{RqG
AutoScaleMode
duoz
X RG
X09R0
t"ij
U36j
xZ>^
$'T?
Xkjg
? U)
Y?2c
"a $
j>. z
%u"=
HS/ca
#+mL
3IUNl
h"~Qr
fSl:
P4v|
[Sjmq'd}
.|zRqe
G"i
LWd-
2<8R9
CharSet
1x%:
1`Nq
Qw?l
f ]v
.wNX
r[1z
^4!N
Jiw?
=3lj
H [ m
d9q8
fKx2RTB<
C[<
|:y`
8!JS
{+%t
*OU=
R7WU
.R8%
0._Y
1 TZ
^' H
yBF9
ga*x
_edI}
o14H)5
<(%~N
Pr|p}
v0=~
gH%V3
6Sc6
nHh]c
s(akW
SampleVide|d
^)Yn
"}?c
EventResetMode
ga*4
4Jq7q
g]k
[qV$
+H/
')Q~_
Qwu
NJ=_
op_Equality
XXyW6
H}Y
KtyE
0@h" 7Y
"Rc!
4toa2k
e|"
"JF_
\6=K
`^U)Z
7!5LQ
;!nYo
T zt
FVL U
++At'
Rq{&
wb'Cz
! ni
@]k3
agu_ProcessName
m 3f
!z&((z&&&zGGGzVVXz
~vy7
^\rCrDJ
8.:!
~P 8
L==ET
/ X*
tE Q
$`Id
}R3}
(\=
M/Y0Sj
1hm%
DHT[=|
v[c._
_ S=
&-
YJa?1
A~zUE?
=`AK
_h?#
3 YC
hDestinationFz{j
LuiPS
SkyDa~y{Roauures
iG c
CreateDelegrcj
%m!b
2-m[t
3[Ql{
.KMc
*e+
-`{)
m0;2
d`af
QVp)
8#ibX
ofSE
&m|^
e1v6m
}Z0'6
.9N8?a.
i'HX
,fjDGq.
s3 9
^zX8
m``.
nm Rj
[:g.
Qz!v
hG1 o?
GetBuffer
Sj}mkrsess
callback
9C/Y%
L<+[
47r*
{ \ d ^
HttpWebReque`c
[Y1B
v{$"
BgcuggerNonUserCodeAttributv
F#l\
])j
jRiT
||| }
Dw"&
1 @S 2
:l+3
~cYW
+h$1
C*UY
r0%yZ
pJ1e
5.GV
S$6z
+2P[0b
Io_q
kAr/
RB)e
IH&&
]K*>
6 [i
)ty1
lhP4
dDQ1
a hC
LC 4_i
|b~i
NK,
=T-h
[t)
g*Wy
aK2Y6s-
R'rl
Dkcv
sw u
^b|waJkcrary
x1~*NC
jnp
wA @
(xl<
7z]9
A=6
G_<!
x?DL
*AYx
C6)8Qh.
BSJB
t7pw3
9%, O
)`8a
Dv/X
,w9xl
Pc3!7:
Po3*Zo
"y>
`HE@
=dptI$
Jr n
mf;
*,KFc
3chrR
j=}hb
F}P7<};
P Is
03$1
j^js$SV3
u:+W
IntPtr
OiLa
thread
q3]"
P2u-
W{r-
Jsm ,V
wQ
DvVa'
BzZ>
@@8.
ZgG9
R2nl
[vpcceStart
5kbi
}0?"
E}JgY&
gIcg
wp,Z
InvalidOperationExceptio}
JkTO
xF'
LHeQ
r ._%5+
4;y{
a?!f
]By)
qT35
J @}
W,.~
?AlJ
OB:)
[1$B
AohL
fxg"
kd,B
L ,Og
X=-
} U;u
e=K.
s c4
LaMl
oe?$
. m
wlo1
Tk5@a
\^\D$
)y_
SW#@p
j1U*
TimeSpan
C iHt
eOp >
!"5(6
UPD-7
=17uS
RmHnt32
P, D"
,lbR0,
nx;$J
= .`Sz
v1z;
agu_FullName
o*l
|bFA
3b'0
3d }
u21VV
#4/~
Z[S
` x)
',mm
@n|jgk,Flobalization
UnescapeDataString
i1X
uqFC
cPOyQ*
8K9t .
D;lv
@ji9]
McV3
}Yeb
1O][
Anw\
2q @
%3@4
6="?S
@_\f'O
){dX
*P]T
o <T
Ny"t
.t45q
^j}h
y~T+
2`U6
I3ZU
FX%Db
UP[&pa
dw/ eKD`{jN[:<+J7yINFUt<"
c>X7OJ6(
ds`SL)
f| e
phj 7
2+Q-
R?Y-_QC
oSx|G!El
!w+'
C0F*
+/ o
^C9!
[|Ev
L5A'
"Fk,T
q-V8
fWc
YOOMyfl
[6;.
ri'
va|]
ag ~ k
12Z`
<8@;
_Wehzu~9
$=6QH
J> @
5=7i
SnNEM:
WoXW Y
Y)^k %
%AYa
HjqKLN
q8u3
s`]K
lx=n
|k-'
<*//
6=Fc
Ua#=lu
iwO>
IEND
tgW2
c,&W
GetCommand_~a{Cter
2A%i
X8u;
hQ{'
Sr`H
<7++<
.\D2
W{r(=
[.S!
i+A@#z
bXa)D6
XW8ta
LaPc
Wo%W
UO
#9^J
tK\I
BlockCopy
q$"$`xUb
g6VV
IL8u'[?
|!W<,-`VB?*O]kl)9K)w?'\3&
f'le
CallingConve}cfqlu
BC$j$
oOspa
!;S:^
rvcf
UoqO1jH
?jTqw 6
9U dA
dw61
E<(2?
bNsc
K2/L
TL\Xk
I"]z
s<jI
J$m-
O?D 1
w%0r
*[1y`
tC\n
*&*I323
? 7U
_CorDllMain
OCg;
zTDA
CompilerGeneratedAttribute
33-|
J %-9u
Q;-T01
^'rDa
U5+
@%-K
s+a-
EditorBrowsableAttriqb{{
HA@Hp
]hNN
2<h7
D#Jswv
CtW;
7nS#z
8<9#e
*P~}
Q'XY
'B c
xfz G
ss(i
g)Oe
rN8a
PLlE
e]sR
N S]
Insert
L=<i
& ( }f
*UMk
HH8KcT1v%
J>*T
'8kp
WyuV
9-z^Y[j<KQ3TX
E%}4
7] ~
dagvN
get_Id
V::A
^bZe
J2l "x
$shV`
Wp6*I
I1U@
GetElementType
uWV
hR~T
;jwI%
>T\P
!/fZH
;wl
y[K5
A[A@q
s[IA
25cw
%KXv
n0g[7
ba3]
aav`
Bg{ swy
uR_ nj
t=dW9
v&L8
< X
,uext
Qez.
iV+
;s+a8
znh[:
* ;-,
OXrZ
GRKC
TB 4`
m\Sf
4M#"V
p.Vg
jF!G~W
R4)%
xK])
`~3y5
fj$y
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
#EZ=jP I
)(Q}
tEdm+
d"FO
*O_P
String
m#'Uu
z E{
a +e
SlkA
t2GY
FG<}b
>(2&hx
[r:C
>>"{
XN=>
xr+/
xM)q
E2Rg
^ Pr
#TZS
+?[u
i0F"
^/Zo
InitializeArray
`N#{d
System.Diagnosg~lm
R{J&
a*qP%
k*mZq
"QW}
t39h
xTD
t $(
{nz1
JiNn
"B#-
EditorBrowsableAttribute
iP M
L *'
R|Z^
o8`a
i9EQ
* cMngq
ZF]j
=B{3
J,ck
e^IWB4
iRg
`.sdata
^&{ @
mjcnm32.dll
NU d
20Ek
7u 2Rbc
l -)r
)w'K
v|TL
EK\{
4/NL
X<FQ
Load
3]}v
?vFU
F>rL
r%Gr
]0pOk
w6ELB
(hLRpu
N 1p
=$+H
gY_">t,>
+GbjV
MnHC
~!M/
M.Nz
5 4#
Dictionary`2
mQHL
1n i
r\Jc
wvd
TT`n
fQs"d
_{'?.
F=x?H
uG @x
[fpiu
R[.L
}#b @
a6E
.- T
\W:a
-"O:5
RZjsQ
bcod
FLSP 8d4c
MS:U;
d:C
bh(b v
vcmV
saZNI1M
UkLI
wwFSR
RuntimeHelpers
[6i2
wdPVVEX
DEU%y*
V!IH
Hq_9mB
mx+5
u!m5
SaveData
:W(!=
\ngek`lFolder
qgiT2
< RMv\
gO>i@
*v9(
KdWnz]
* a\
u7t6
bZYT
`%;@
?0IW
!1 *
>>h
]3Qr
l{"M0 @
Object
C/-Cg^
q0zOU
G."
x;qj
,3K],E
5iN~
,|Ep
{PUk
R0eE&
P"WX|
3System.Resources.Tools.StronglyTypedResourceBuilder
7o%>
~Kgz{
mgSS
9I-q
D+BX}N
Ig~@
lq^
p!kqn
eMnIDG
>WES3d`
ginB
O82\4JP/t
d*)]p
<Sg
msGa
V`txDBMB
_ ;gTt
[(|<
Hd~$
JpEi
".;n
fE,Z
uoIN
j~/yHTWcK
_ /#
y%'26
OGI,P
3!Mx1@
OGh'1
F{?
hE?;
5< B
gSP)o
ZOKA"
%J9+
VP3;
iw<~
dF!,
&PWn
OQgF
+ Z
_Zr|
t&Q+
,- m/$
}1}h
%yZi
KZh4;
~u6V|U
<hWkN
P )"
~\p N
r P7'
!:,H
af ?X'
% Gh:
Qy-c
\P=rg
&wj(
ws \Y(I
bo}R)
1Mn{"N
`K\C
LVEZQ?
ius]
3;Cx
Exit
E^&
;A4I
PL5a
baFex t
9IuR
Ab0kC
[jtx
_jI
]G`M
b?B"
4s=U
Q.@&.
&`:d
oCi
mhoia
&Ic
$ n.
5B_ (M
LqokmoStartup
U}zc
Tte@ht
0*aZ{
X7,(
gKE'
I`_u
GJD
SQ$9
:G Z& E
& ~}
K8N\
rmT_
dx.
J1<kZ
ux5<
.d^&iJ
[.&k
8-r
q``.
i',lN
tjq5
/tZ]
4RUr
Qf *
#^<@*
z\9X
+qm/^
c,->r
iku+
_:JZ
;jlu
i_.k
^jZhL
l$wm
2$Al
)_&4
|ISzor
L*mF#ax#
.Tp\ssNC
C [^h
A_ou
o!=O(
-B]q
nvW)
a$M@
~yyxw
-@T?=
System.Threading
sbUx
_xO$X
oqWz
AqY1
pyUd "
w""~
J{*+
x=\* _
p6k)
QK*A7H
@Vd
/mK"kj
k'9N
t5.0.30319
QK=
Ycgm
swC2C7\~
Hwf3
lxTS
#oqV
[dLD
@ppend
AU};
fz`
xOP&~g
' 44
jU}L>
G;n<
6RfZZI
WV}%&
f^N1T
RCzq
3>V
uJqh
kkzbf
(1}kuei
_{e#
>hUH\
Skz+
49\Q
T\T8
AY+
QjJAR
Oczf
JCe
k+]q
:Lo+L
`N)
Hq;
medyP$
+qV1
g)]Zn
ijys
"`zPP
:d.'
Indvo@x
NZVH=
s <q
w`m_
q^^ 7A5
33aEJ
|IWl
Next
vi]!
2[U @
Twi
M;f
.\gu
N4aQ c
ca{lm
eL)|Y
V8.-
)<@Q
SeadChar
TM" B
_@vrB
.H*$:
eM >
*}7 U
3\T_
ma'
@-QH
2Lua
*'eT
# 2u
pa8d
l ML
S=j_
aDf?x
T3*!
qIhBZl
~jOA
StringBuz{k{p
L.^A{
M1t'
-Zq5
bdK(
4ayb
@oleer
N'j
\'*
<^;\
#V;
gw h
,6%>Z
]jf[
xD3ii)
\:C,
k.'
Ho64]
s,S,
U"r*
%S
{U7}f'
]wtpdntDirectory
K1CrP
^xNi
qZU6
?RU(
[{zrPdader
7#+J
v2gh
|HQ&.5
GetTypeFromHandle
IAsyncResult
r7FP
&c$>
`w5U
J!Kd
qPFS{
1wAE
7g6x
#W\+B
%WM
HGex
2lZ1^
3|xd
g%gr
=Rf'
hEuy
*JKj@\
g2d1ni
(@tf
E :`
!F A
8xe^i
1K%Q
}Wsn
_AdC
ICryptoTransf|eb
4=)eny:P
R.Hy!
*~s@
8,Q7
o!W]C
|C3HF6
.7+m
gIoU
9WsEY
=W~|{
System.Runtime.InteropServices
fm<w
`~AO
iD:
OJ\!
P& @
ReawDMgvc
JbAs
PHN
dTms
X3S
{%r=|
j6>K
. `IH
/, 1
System.Runtime.CompilerServices
/x *ei
F[nc
o[sbO

ND"Jr
m)!Y+
Move
4Pm/(
8oX&4
IPejzghvhals
q eF
Cd]v
Q`mplePlaylists
X]#E
a:07
5)^{O
fMn"x
>9T6OEwF
AR#8
Zj
~L]!
v$2?
tlu:
n@hu?
J5cR|
u]w~
JF>n
UCuk
dfAk
RS8/
"6O#
NF>b
CMRwz
~?]K
VW:q
ZK|&
WY,6\
_ d|
Z/{Am"
NCn|
jOLl!
G Q
Z !_U)
P#rt
3U\?
TiSc?
H+;J_
%i(
?!w
}T0?
=0 "
E5f[;
ve_z;z
-K,*9
>q :<
~$Tj
A5P_[
Al8*`l
bGlx
&)T
# H1
IWH<6
Hc u
J.;$
rF)
-rq(L
U]{z
SVL7
NKN1
V=UtRW
}]z~
=SSN
nJDt
%+V
>||L
-?"CG3
.E'R
!This3g}qetcl cannot be run in DOS mowr!
32 i
_Z|g
:tAs
uwQ$
q;s7=
{S"h
WyIQ
G&*y
F<];j"UH
VD>R
548C150Q%=+DG0@ECCA589EECFF429A90351ADC$
6Za4y
<XJ\
U ` Q
A0% A
?#vjx
m8R0
qK6D
,nJg
K,&{
\w.o
1ht4
;fz9
kpVK
Mg>7
Usv=
o-Z:
9D#V
>V"$
AguFullPath
BEwy*
bufferSize
Q[HH
s |
<dhb^
n 5=
caN.
eU4C90
F")m
9YcQ@
ProcessWindowStyle
.-&gB2$
;Zfa
s$(8;
GhyM
.(b\
k6~&6
g "
>$&-
u8Sh
^*F
y2_44
L4?D
/}!'
VNXW
&7v{
EI".
}ST9
n i
S<_1
g>j"
JUXd
"TrZi
[*<l
<A%?
x!%(
$7Bd
/O&Yms0y>:Q
p*mS
GqremblyBuilderAccess
2{ C
l# (
BHh1)*pl]eZtBId;yH'+q8; "
cfe}{lrFhrectory
X?""
SEo
ex)<
>wd|'
_z-w1
wp R
57L61f
$>S2B
YMTz,
z?M*
Qgm!
)k+@!
Sn4-g
3 xh
Encoding
MCvf
)^n3%
76|z
B*(2
p6+1^
];y
*Z+
IEnumerable`1
^ |W
*Api
*J!_q
get_Module
E/5)
gX_Z
Y0HQq
J!fK
xtl
7Q4
WZ$@
4],y
z(|<
*,3?
?;GN
JVHB
No
6.4w.
$sjT
B1ns
cn'r
h|-!
?w:U)
`$tn^
Q:a`
9]7]<
MessageBoxButto}d
"{by
g[vpcceAttributes
m &j
Zero
D_L.
+@B>
#6Xw
J#Xt
EP'+$9
&hN
!Fjvn
gXGW
iuRc
"%Zn\
#iX
Qcqg
BIGg
/+ ;~
xl'n
'79U
Z-I,
!C-^
Xl >_
8nXR
}I$Q
6Jm$E
M=0NM
IK d
xBG7
VvBcA!
vr )
.rsrc
g`%kWO
bj iS
McpgeGames
2o/o
rb2b
xQUa9
88b!.
!@"W
&):q
%`y
5O4J!
LVEQJ
0QEV
/%~"ga
-8r,
%&OR
R=IYn
|l*:[
b#FO
cZ9`oS
E Jr
B/Z?
8j=
System.Drawing.Bitmap
PixelF|eb
-&*@u
KhO]
m`n8
0_f
7ygl
|j%
BGw
-:Q#qy5*$&
/yW1
gdU7
E6!u
`Mh
(c%9
NVR
+')1@;u
}5Rrz
q/ n
F18IZ@K
dOrO
MAQ6
= B @
n) @
oWG
ISl);
Unl6[y
]f&)U
n,Gn
Xt d
Kx2P
kQ/DT$
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-07-30 12:10:52 2018-07-30 12:13:45 173

4 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-07-30 12:10:52 2018-07-30 12:13:45 173

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-Productsxls.exe.config
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-Productsxls.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSVCR120_CLR0400.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoree.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.localgac
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ole32.dll
\Device\KsecDD
C:\Windows\assembly\NativeImages_v4.0.30319_32\0vYXJdqLbgWda521015#\*
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-Productsxls.INI
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\Microsoft.Net\assembly\GAC_32\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll
C:\Users\Seven01\AppData\Local\Temp\Ii.dll
C:\Users\Seven01\AppData\Local\Temp\Ii\Ii.dll
C:\Users\Seven01\AppData\Local\Temp\Ii.exe
C:\Users\Seven01\AppData\Local\Temp\Ii\Ii.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\BVTBin\Tests\installpackage\csilogfile.log
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\62dec581cd40afd680502a581d529b7e\System.Xml.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\62dec581cd40afd680502a581d529b7e\System.Xml.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ade5aa3c89481539adcaf7d9526dc8ac\System.Configuration.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ade5aa3c89481539adcaf7d9526dc8ac\System.Configuration.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\rasapi32.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\ws2_32.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\winhttp.dll
C:\Windows\assembly\GAC_64
C:\Windows\assembly\GAC_64\mscorlib.resources
C:\Windows\assembly\GAC_32
C:\Windows\assembly\GAC_32\mscorlib.resources
C:\Windows\assembly\GAC_MSIL
C:\Windows\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\*
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC
C:\Windows\assembly\GAC\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_64
C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_32
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_MSIL
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\oleaut32.dll
C:\Windows\System32\tzres.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\shell32.dll
C:\Windows\System32\it-IT\tzres.dll.mui
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\iphlpapi.dll
C:\Windows\assembly\GAC_64\System.resources
C:\Windows\assembly\GAC_32\System.resources
C:\Windows\assembly\GAC_MSIL\System.resources
C:\Windows\assembly\GAC_MSIL\System.resources\*
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll
C:\Windows\assembly\GAC\System.resources
C:\Windows\Microsoft.Net\assembly\GAC_64\System.resources
C:\Windows\Microsoft.Net\assembly\GAC_32\System.resources
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.resources
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-Productsxls.exe:Zone.Identifier
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-Productsxls.exe.Local\
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
C:\Windows\Microsoft.Net\assembly\GAC_32\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
C:\Windows
C:\Windows\Microsoft.NET
C:\Windows\Microsoft.NET\Framework
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe.Config
C:\Windows\assembly\NativeImages_v4.0.30319_32\Reborn Stub\*
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.INI

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-Productsxls.exe.config
C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-Productsxls.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\62dec581cd40afd680502a581d529b7e\System.Xml.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\62dec581cd40afd680502a581d529b7e\System.Xml.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ade5aa3c89481539adcaf7d9526dc8ac\System.Configuration.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ade5aa3c89481539adcaf7d9526dc8ac\System.Configuration.ni.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\System32\tzres.dll
C:\Windows\System32\it-IT\tzres.dll.mui
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe.Config

Write Files

C:\BVTBin\Tests\installpackage\csilogfile.log

Delete Files

C:\Users\Seven01\AppData\Local\Temp\Quotation_Sheet-Productsxls.exe:Zone.Identifier

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v4.0.30319
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v4.0.30319\SKUs\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Quotation_Sheet-Productsxls.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\NGen\Policy\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Servicing
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Quotation_Sheet-Productsxls.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Quotation_Sheet-Productsxls.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Quotation_Sheet-Productsxls.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\FileDirectory
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\LegacyWPADSupport
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\Quotation_Sheet-Productsxls.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F70525FC
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\Dynamic DST
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Display
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Std
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Dlt
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DnsCache\Parameters
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DnsClient
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\System\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSClient
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 024
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\client
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegAsm.exe
HKEY_CURRENT_USER\Software\Classes\AppID\RegAsm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\LegacyWPADSupport
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F70525FC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Display
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Std
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Dlt
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_CURRENT_USER\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951

Write Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotation_Sheet-Productsxls_RASAPI32\FileDirectory
HKEY_CURRENT_USER\(Default)

Delete Keys

Nothing to display

Mutexes

DBWinMutex

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
clr.dll.SetRuntimeInfo
clr.dll._CorExeMain
mscoree.dll.CreateConfigStream
mscoreei.dll.CreateConfigStream
kernel32.dll.GetNumaHighestNodeNumber
kernel32.dll.GetSystemWindowsDirectoryW
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddSIDToBoundaryDescriptor
kernel32.dll.CreateBoundaryDescriptorW
kernel32.dll.CreatePrivateNamespaceW
kernel32.dll.OpenPrivateNamespaceW
kernel32.dll.DeleteBoundaryDescriptor
kernel32.dll.WerRegisterRuntimeExceptionModule
kernel32.dll.RaiseException
mscoree.dll.#24
mscoreei.dll.#24
ntdll.dll.NtSetSystemInformation
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.GetNativeSystemInfo
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
clrjit.dll.sxsJitStartup
clrjit.dll.getJit
kernel32.dll.GetFullPathNameW
kernel32.dll.VirtualProtect
kernel32.dll.LCIDToLocaleName
kernel32.dll.LocaleNameToLCID
kernel32.dll.GetUserPreferredUILanguages
nlssorting.dll.SortGetHandle
nlssorting.dll.SortCloseHandle
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
kernel32.dll.CompareStringOrdinal
kernel32.dll.SetThreadErrorMode
kernel32.dll.GetFileAttributesExW
kernel32.dll.ResolveLocaleName
kernel32.dll.CreateFileW
kernel32.dll.CloseHandle
kernel32.dll.GetFileType
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
kernel32.dll.GetCurrentProcess
kernel32.dll.CreateEventW
kernel32.dll.QueryPerformanceFrequency
kernel32.dll.QueryPerformanceCounter
rasapi32.dll.RasEnumConnectionsW
ole32.dll.CoTaskMemAlloc
rtutils.dll.TraceRegisterExA
rtutils.dll.TracePrintfExA
sechost.dll.OpenSCManagerW
sechost.dll.OpenServiceW
sechost.dll.QueryServiceStatus
sechost.dll.CloseServiceHandle
ole32.dll.CoTaskMemFree
ws2_32.dll.WSAStartup
ws2_32.dll.WSASocketW
ws2_32.dll.setsockopt
ws2_32.dll.WSAEventSelect
ws2_32.dll.ioctlsocket
ws2_32.dll.closesocket
ws2_32.dll.WSAIoctl
kernel32.dll.FormatMessageW
rasapi32.dll.RasConnectionNotificationW
advapi32.dll.RegOpenCurrentUser
sechost.dll.NotifyServiceStatusChangeA
advapi32.dll.RegNotifyChangeKeyValue
winhttp.dll.WinHttpOpen
winhttp.dll.WinHttpCloseHandle
winhttp.dll.WinHttpSetTimeouts
kernel32.dll.LocalFree
winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser
kernel32.dll.GetEnvironmentVariableW
clr.dll.CreateAssemblyNameObject
ole32.dll.CoGetObjectContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
clr.dll.CreateAssemblyEnum
oleaut32.dll.SysAllocStringLen
oleaut32.dll.SysFreeString
kernel32.dll.RtlZeroMemory
oleaut32.dll.SysStringLen
advapi32.dll.SystemFunction041
cryptbase.dll.SystemFunction001
cryptbase.dll.SystemFunction002
cryptbase.dll.SystemFunction003
cryptbase.dll.SystemFunction004
cryptbase.dll.SystemFunction005
cryptbase.dll.SystemFunction028
cryptbase.dll.SystemFunction029
cryptbase.dll.SystemFunction034
cryptbase.dll.SystemFunction040
cryptbase.dll.SystemFunction041
kernel32.dll.SetEvent
kernel32.dll.ResetEvent
kernel32.dll.GetTimeZoneInformation
kernel32.dll.GetDynamicTimeZoneInformation
shell32.dll.SHGetFolderPathW
kernel32.dll.GetFileMUIPath
kernel32.dll.LoadLibraryExW
kernel32.dll.FreeLibrary
user32.dll.LoadStringW
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
iphlpapi.dll.GetNetworkParams
dnsapi.dll.DnsQueryConfig
iphlpapi.dll.GetAdaptersAddresses
iphlpapi.dll.GetIpInterfaceEntry
iphlpapi.dll.GetBestInterfaceEx
kernel32.dll.LocalAlloc
ws2_32.dll.GetAddrInfoW
ws2_32.dll.freeaddrinfo
kernel32.dll.DeleteFileW
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
gdiplus.dll.GdiplusStartup
kernel32.dll.IsProcessorFeaturePresent
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipLoadImageFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageType
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipGetImageEncodersSize
gdiplus.dll.GdipGetImageEncoders
gdiplus.dll.GdipSaveImageToStream
gdiplus.dll.GdipCreateBitmapFromStream
gdiplus.dll.GdipBitmapLockBits
gdiplus.dll.GdipBitmapUnlockBits
gdiplus.dll.GdipDisposeImage
cryptsp.dll.CryptGetDefaultProviderW
cryptsp.dll.CryptCreateHash
bcrypt.dll.BCryptGetFipsAlgorithmMode
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
advapi32.dll.RegSetValueExW
ole32.dll.CoCreateGuid
kernel32.dll.GetCurrentDirectoryW
kernel32.dll.CreateProcessA
kernel32.dll.WideCharToMultiByte
kernel32.dll.GetThreadContext
kernel32.dll.ReadProcessMemory
kernel32.dll.VirtualAllocEx
kernel32.dll.WriteProcessMemory
kernel32.dll.SetThreadContext
kernel32.dll.ResumeThread
advapi32.dll.EventUnregister
cryptsp.dll.CryptReleaseContext
rpcrt4.dll.RpcBindingFree
ole32.dll.CoUninitialize
oleaut32.dll.#500
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
kernel32.dll.QueryActCtxW
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
kernel32.dll.LoadLibraryW
kernel32.dll.EnumResourceTypesW
kernel32.dll.EnumResourceNamesW
kernel32.dll.GetModuleFileNameW
kernel32.dll.FindResourceW
kernel32.dll.SizeofResource
kernel32.dll.LoadResource
kernel32.dll.LockResource
ole32.dll.CoWaitForMultipleHandles

Execute Commands

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

Started Services

Nothing to display

Created Services

Nothing to display