Analysis
| Category | Package | Started | Completed | Duration | Options | Log(s) |
|---|---|---|---|---|---|---|
| FILE | exe | 2025-06-12 08:39:59 | 2025-06-12 09:11:18 | 1879 seconds | Show Options | Show Analysis Log |
procmemdump=1
import_reconstruction=1
unpacker=2
norefer=1
no-iat=1
2024-11-25 13:37:15,053 [root] INFO: Date set to: 20250611T17:13:05, timeout set to: 1800 2025-06-11 18:13:05,386 [root] DEBUG: Starting analyzer from: C:\tmp_gell1p8 2025-06-11 18:13:05,386 [root] DEBUG: Storing results at: C:\SLtSxJVgsX 2025-06-11 18:13:05,402 [root] DEBUG: Pipe server name: \\.\PIPE\TCjHsIkvb 2025-06-11 18:13:05,402 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32 2025-06-11 18:13:05,402 [root] INFO: analysis running as an admin 2025-06-11 18:13:05,402 [root] INFO: analysis package specified: "exe" 2025-06-11 18:13:05,402 [root] DEBUG: importing analysis package module: "modules.packages.exe"... 2025-06-11 18:13:06,089 [root] DEBUG: imported analysis package "exe" 2025-06-11 18:13:06,089 [root] DEBUG: initializing analysis package "exe"... 2025-06-11 18:13:06,089 [lib.common.common] INFO: wrapping 2025-06-11 18:13:06,089 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation 2025-06-11 18:13:06,089 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\WinWGetPortable_0.20.exe 2025-06-11 18:13:06,089 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option 2025-06-11 18:13:06,089 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option 2025-06-11 18:13:06,089 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option 2025-06-11 18:13:06,089 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option 2025-06-11 18:13:06,277 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser" 2025-06-11 18:13:06,293 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig" 2025-06-11 18:13:06,324 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise" 2025-06-11 18:13:06,339 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human" 2025-06-11 18:13:06,355 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops' 2025-06-11 18:13:06,355 [lib.api.screenshot] ERROR: No module named 'PIL' 2025-06-11 18:13:06,355 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots" 2025-06-11 18:13:06,370 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump" 2025-06-11 18:13:06,370 [root] DEBUG: Initialized auxiliary module "Browser" 2025-06-11 18:13:06,370 [root] DEBUG: attempting to configure 'Browser' from data 2025-06-11 18:13:06,370 [root] DEBUG: module Browser does not support data configuration, ignoring 2025-06-11 18:13:06,370 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"... 2025-06-11 18:13:06,370 [root] DEBUG: Started auxiliary module modules.auxiliary.browser 2025-06-11 18:13:06,370 [root] DEBUG: Initialized auxiliary module "DigiSig" 2025-06-11 18:13:06,370 [root] DEBUG: attempting to configure 'DigiSig' from data 2025-06-11 18:13:06,370 [root] DEBUG: module DigiSig does not support data configuration, ignoring 2025-06-11 18:13:06,370 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"... 2025-06-11 18:13:06,370 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature 2025-06-11 18:13:27,902 [modules.auxiliary.digisig] DEBUG: File has a valid signature 2025-06-11 18:13:27,902 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json 2025-06-11 18:13:27,902 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig 2025-06-11 18:13:27,902 [root] DEBUG: Initialized auxiliary module "Disguise" 2025-06-11 18:13:27,902 [root] DEBUG: attempting to configure 'Disguise' from data 2025-06-11 18:13:27,902 [root] DEBUG: module Disguise does not support data configuration, ignoring 2025-06-11 18:13:27,917 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"... 2025-06-11 18:13:27,917 [modules.auxiliary.disguise] INFO: Disguising GUID to a8eaf468-9af3-497e-b845-83cebf5a4c23 2025-06-11 18:13:27,917 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise 2025-06-11 18:13:27,917 [root] DEBUG: Initialized auxiliary module "Human" 2025-06-11 18:13:27,917 [root] DEBUG: attempting to configure 'Human' from data 2025-06-11 18:13:27,917 [root] DEBUG: module Human does not support data configuration, ignoring 2025-06-11 18:13:27,917 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"... 2025-06-11 18:13:27,917 [root] DEBUG: Started auxiliary module modules.auxiliary.human 2025-06-11 18:13:27,917 [root] DEBUG: Initialized auxiliary module "Screenshots" 2025-06-11 18:13:27,917 [root] DEBUG: attempting to configure 'Screenshots' from data 2025-06-11 18:13:27,917 [root] DEBUG: module Screenshots does not support data configuration, ignoring 2025-06-11 18:13:27,917 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"... 2025-06-11 18:13:27,917 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled 2025-06-11 18:13:27,917 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots 2025-06-11 18:13:27,917 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets" 2025-06-11 18:13:27,917 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data 2025-06-11 18:13:27,917 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring 2025-06-11 18:13:27,917 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"... 2025-06-11 18:13:27,917 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696 2025-06-11 18:13:27,949 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmp_gell1p8\dll\696.ini 2025-06-11 18:13:27,949 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor 2025-06-11 18:13:27,949 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor 2025-06-11 18:13:27,949 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor 2025-06-11 18:13:27,949 [lib.api.process] INFO: Option 'norefer' with value '1' sent to monitor 2025-06-11 18:13:27,949 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor 2025-06-11 18:13:27,949 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor 2025-06-11 18:13:27,964 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp_gell1p8\dll\KhePLP.dll, loader C:\tmp_gell1p8\bin\ktypyZOY.exe 2025-06-11 18:13:28,011 [root] DEBUG: Loader: IAT patching disabled. 2025-06-11 18:13:28,011 [root] DEBUG: Loader: Injecting process 696 with C:\tmp_gell1p8\dll\KhePLP.dll. 2025-06-11 18:13:28,011 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'. 2025-06-11 18:13:28,011 [root] INFO: Disabling sleep skipping. 2025-06-11 18:13:28,011 [root] DEBUG: 696: Full process memory dumps enabled. 2025-06-11 18:13:28,011 [root] DEBUG: 696: Import reconstruction of process dumps enabled. 2025-06-11 18:13:28,011 [root] DEBUG: 696: Active unpacking of payloads enabled 2025-06-11 18:13:28,027 [root] DEBUG: 696: CAPE debug - unrecognised key norefer. 2025-06-11 18:13:28,027 [root] DEBUG: 696: TLS secret dump mode enabled. 2025-06-11 18:13:28,027 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542 2025-06-11 18:13:28,074 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable 2025-06-11 18:13:28,074 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0 2025-06-11 18:13:28,074 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF822E30000, thread 1488, image base 0x00007FF60D500000, stack from 0x0000008EFABF4000-0x0000008EFAC00000 2025-06-11 18:13:28,074 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe 2025-06-11 18:13:28,089 [root] DEBUG: 696: Hooked 5 out of 5 functions 2025-06-11 18:13:28,105 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread. 2025-06-11 18:13:28,167 [root] DEBUG: Successfully injected DLL C:\tmp_gell1p8\dll\KhePLP.dll. 2025-06-11 18:13:28,167 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe> 2025-06-11 <truncated>
Machine
| Name | Label | Manager | Started On | Shutdown On | Route |
|---|---|---|---|---|---|
| win10-2 | win10-2 | KVM | 2025-06-12 08:39:59 | 2025-06-12 09:10:57 | none |
File Details
| File Name |
WinWGetPortable_0.20.exe
|
|---|---|
| File Type | PE32 executable (GUI) Intel 80386, for MS Windows |
| File Size | 2534064 bytes |
| MD5 | 5f1eeeb2bacc01b9cb1f5a1802329c55 |
| SHA1 | 204208e0a4052ecc1afbfadfceadd2113141eea5 |
| SHA256 | a43f9205c2a08397981b7728afcd3819e5b70f9d67100bf5d88b115e6badd82b [VT] [MWDB] [Bazaar] |
| SHA3-384 | 357d2cb0a1a884baafdd21e4f9328ea390fe6608c01925e81784e46d7c88409830e6dd347fbdb7ac4b2d59e49d4df48e |
| CRC32 | 64669A92 |
| TLSH | T14DC53366C281DD47DB4373F166A80EE27FA87C669D620ADB72257A0B1DE6101CFB8503 |
| Ssdeep | 49152:LL4j9XKhKYENHWc53cIrsjDP0yUECNpBOlKbRpllw5Y:f4xAKYEt3x5TXolq7n |
| PE | File Strings BinGraph Vba2Graph VirusTotal |
vKT>n
?\p-nZ4
l*Op-~
%Oz$U
XeXw]72
@.data
5E}F@>
c`8w?
9sWv6
ZXH8l
kjx}|
.(Std
O-CkWj
,z/o=b6
`<6;H
{BOso6Q
mwP!d
Vnq9#;
`&(.F
w^H1c
W5`2=/
kN):{
Rpp-*
8]ocX
k2H&:
D{{9~
6m0v_
puaY?
:zp,%
_=-j6
6G3qZ:}
CW|)A
Urt2,
\4$sJa
5VhWx
m!0U=
xK@RY
El<dc]
[=;37
PQ}hYx4
S2?k3
KbuGc
/;w`A
R}a[6*
Zvl=/FM
w(i{g
pj@4pE
TmxdO
Z~`?,(x{@a
ek~`JN
\}FC^
v-sM;&b^
5!u+j
K>k0<~
g2zPIv
#"bq4
wsNNA
I$@9b
:W08J
*,Va37o
u~)A[
Bd.z(
fcaf489
u~^S`+R
$Bq"d
})Cn<k;
J-emX
_RtF#*
USERENV
3Lj3F<R
CreateBrushIndirect
6D3m1n]
`<`3nl,
#^p}T
t!aZO?
nmKJA
or~7K
+FS1{qf
qaR<DGdd-9
?^b>G`
hl<io
tRZ\F
Xojm&c
uOgq\
&!DOB3
[q;qJ
040904b0
BumaM)r
"0D9`
vmX;~
181102000000Z
|g~}.
3>|i|},
*<f0z$Z
l=Hq4QZ
1D)6@Y0
qk~0@
tF<J$
Q+t{k
)>/q?
8[+}mTUd
?5Ew,h
afCiZ
=X+{H
H|jd=
`mT&Y
rpJ3~F
3No7/z
pRkISA
AF+>$Q3
(aUp|
+u[((
'2d"W
|^K`PoT
NV@qL
S*<]U
5%-M(
R^5j(
QWl][
OysD/
$!x\]
E@P(|
Otj&kw:
}\icc
u:MAHn0
#^eXp
XH6Ys
r2;<){
}kuZ/
6@9bT
?pm&>
SSzNA
>`u@'
n&8!.\
"[xxv
fyK*2x
X'WNB
DHQ\&!f
6Dz+[
ei"Lamt
fi-`7
aJ)p[
U(J!^
]4eKG
Ly^w=
3(g7]
I$V34
%u.%u%s%s
tj>}KS>
G~R!zS
F]q|[8
bRv+^6:
4,vf`~;
Y/|t4
l{<f3
uz:VMA
DKg.b
&7X]k
_W*CGKd
D#!U\
qKl"r
P/<O8
:BJss
OPl&(
9YpuA
qy^FK
F^%5w
T<*}K
NK&)1
t[*Bl:JR
o|A(7;
T0/~Aw
)s6}r
ep'r2x
n'txc
/"t6C
FfjE5
\WF!H`
qSk9Q
{-o%!
sR!v_
,bfdVG
RxZDS
3A('_=|
Jvb(s
ir_0m
5{l!7
jB9pD
.y@V9
M($Ix^ c
;/l.i
2/F+&
[R>M{
99|Voc)7
=%Z7Q
3SBlU
_K!1$;
pFT3Y
P-<h%
w}47Es
4e(qA
o(^Bvs
\.lu#
4#hSO\
sBLo{
]n h=
}o&>+
m$joD
Xx4<|=
H.W57
`Wrb!
OPCsc
5'{VaU
T0RoZ
_x&mxSH;[%
]ghF>k
\^KCG
Fq-SQQ
3vTS_l
?i#eL
CH5^W
XuBz}[
%R$o%$
TizFY
4BG)9
L-!;|
7ts-=
0rBZ)U
n+a-gc
bHgs+J}}T
,TyjJ9
\SYSJ
)TbRP
&W!4!qB
B 7if7
e=ZYYr
kS gV
^38:Z
0;;JeT2
\9 NDb!
:=8KX9k
+P]Lm
>Vx6Z")2
KDw,-i
Lu-Fv
~\`.1
Kr^02
IPM=!
[oqDj!ry%n
mK${d
i90h6%
<AaDplf
|m.[B
WinWGetPortable_0.20.2020-1.21.2_English.paf.exe
ddx9*
_5jYt
3Zb?=
i7~).
w~OJg
qX3As
nD`Y2'vln
lB5%S
Q}]`q
N)L/H
mUo10A
?kCGl
9CZ{z
t9Hze
Bd&86
cw nqB
C`K3K
HBM),
%3xI|
7L)e!2
Sfv%d4
[I]!
{W(,f1gU
v]Bfl9Q
U*&X%E
-Yy"d
ilae_
5&{joL
eZ0Ft
!6io/uY
iT=Qm
`FKv1lVc
Qx'M7
Dy/GSe|
DO6.Wm
\Temp
Fo4Ao
]}S|'
!+X>_E
QTEK?
j-HLN@>
NY11Q
~/.nc1
]c5`g
RBXiq5
CompareFileTime
p9l{*k
)m"ep
2q+i{t
q&r#[
+)P.6
?}4>X=
eb]m{
{m@>+
&/g@X[P
%:~VjH
bnch6!{;
WJg`*[
/cowC
_m9#l[
http://ocsp.usertrust.com0
r_pOA
)=&{X6:pi
RnXxcB
BY<Vm!M
cL(/y
9gM*
(l/]J
L+'<)
{t1X
o5^ J
Kh tf
KLumhj
qShL0
xwp`0L)e2
I4~u|
*UTe_
t^XR-
IB^_Al
pV*dp
,f+}L#2
fW _G
%.=rQ
4!hBJ
7D2:5>L
J>ck$
,Cs?~
DaHx
bOgKL
'BUd"2$
-E}&"
IOl^7k
=#_|R
0o~5|<
<#o{E
#pYX=x
3i$>O
m!8iA
{~(/M
Y2K,\nl
Yx&kL
lCHE`
fvVPQ
4QDd6
_"D*"
|h[03
u/Nw2
l^37v
J.^HR
m@O^
"p88k/R
;W|l@;
@ M!~
#`c={
lstrcpyA
XV^)j
x"V*jpS
&(QmOn(
uJ4>m
'$NI&
Fw"C-
>$)=A1
HJ~dmy
8*d43
AdjustTokenPrivileges
]r?-
JjC0B
|L-|9
bY<tK2
)ck[%G
Y{d'-
9",2#
MG>BJI]
wR ([
odN8\ip
?L_%5
fh8N
,4ep2
9,(JQ&
rtj=3
>)wsI
ap&3kM
5Z]-K
A0=T/
Fw7w}
&tV1u
^0Cau
${)*p
I6aW{
A]>Ni
W:=Gu
[3<XD
!fXUN
$\&R9Vp
.TbU^
m4-4#
WqNaR
FovS+Y
S,3A'|P
;DVmz*7
I@Kl*
?lgD!
oJNW"*
eM`lna
b=g__
`C4l^=M}x%
AKye-
E\_I0+8
)5[Yo
x';l>
z4[sc^
?]7AaF
[Y/E{
5a{a<
NkR:%
#}sZO
:+}9)
,|}<&/
CpD3l
d7mx/
I@Nh{
"[9FH-)\
*tNm=
ZAz8~
?96yC
_"Hc}
b|!-w=
Mqe-U
k*{%KG
bsLlJ
y+<6d
.`#-}
[;*\o
Ke</?
E<cbv
4FU>"
T4^]d
vF(05
iC#N6
7QpRh
ZA+nY
.,G,Y
v9-7J
/6l~(
-x;},
4'S!Ee
'(p>
xRCjP
6$6!k
/)'{R
!2~7=
5qdC*
hHBhN
]@_S:
b>yJ"
6#mX3`
j~gQF~!
5<=7b~
Ho,s`S
D/!w@
C~!*a
}nhYE
GTJObRY
\m8Td
|{[F7:>
_ZIP*
8kM|v%
I',CQ
9d^Ik
GGg]OQ{
AET6V{;
X('Wr
su~r!
*P5\p
*wk{u>
a"b}J|*
5t)7F
q4bOt
hw21O
7)V\.>
y'wY+
X,La+
SHELL32
Zdz)/
59CL<
96pfE
/3mRQ0
3cVt(`
zC/(0
()g1G
GetModuleHandleA
%-]f<
OsJb@
?/OHn*3
`9ooY
v&`!k
{E.~A
0S"HK2
7l!WYO
+t;L)P
3fJ1,
qKhO@
TA&P+w
#Wt+4v
3pv\W'I@
?7Ix3k
nkj`a
',}AzO2
"x#yp
pVQ#<A<
$G{BC
5V~XiC
HfQW;
.rsrc
i-Q%7k
\/*]ZO
sy.6G]
"'f/EH
PM.@%']
Kwr]|'
H a;Mv
t/+zl.-
N(i?3
+@_a"n
Omi]?3
DcP1b
chDY>
#={SQ=
`u[Le
0c]6J
_!t!\h0o8e
qcjKx
*8C,9
z6jL'
IIO[!
h/O:H^}
H!7qW
OdH4<
>K{)2
:~B%`
aH4[L^
C6.y(
}wIh5
h'hDm
Shz+?]
ofLT.BD
#0GPQ&
"q+cyu
Q4`K=+
2=IKs
cK!oo.
rR$!7?`
HWyu.
0B>i#R
$K@HZLK
@k['=
pqF:*|
$|rt+
QHSS}
M],LD
HKA-%
F_<%I
A,#8]
?$9&5
qq83+
.Y;b3
2GQEZ:-RW7
kT *La
O6er9
>}KZ7
V5x!4R
tc.%E
'%&X<
GetFullPathNameW
) 1l:
62i]h$w)
`JF.O
S*ml=
'k1;4
r -<F/
=|s(k`
-,tY$
<!<c`
?bqiG
uHgA9
'fz&k
|ez<=F
#[]s7
$^CH#^fC
QqnIC
\y!qk
c<o):
!G*@'
C$y'\t
#ywZk>
oQ2vL
{.*eC
D"QA2
;:C.FD
WGZI%#p
1,UOU
Ur@\|
=+a:1
F{*M0
|#D:4
#BB[.
@l1m<
-*Y||1
f.lUwC
O_0[k
"nJPI
- -;`
m2Xh5
1e?MP&
M5n,mL
)I.s3
?0uUsGJ
t#SSS
6_<]{4
Me#J5
RegEnumValueW
l<sJtJ
SeShutdownPrivilege
u9nbE
{i$m'
#zhR?,
dwX!.Ycc_
Gaq;2
T<e&[A
IuDr6
6)"f}
r?{%IT
Z7W.6
#?Pb0
IBa!9
a%%<S
SM{el
[}|N!VJ.
1N4vx
TSe b
g#l|C
~W *)
w7PWe
`c@.,
a5Of+2
#dBpGV
g*?|j
NSIS Error
".cZS
GYER'n*Mo~
Pbi=z
>{O!3
OYV&V
CP;>i
UNU!V:
?{52*=
SyqcT
e_43"
NUk}Q
j0h0?
Z{VkbKq
;)M7`
~xQSg
d{\V7
[04@q
zLtEN
`=~;g
{cxv3h21
"?1[;
eZHS*
.text
1'&+#
'#^^_
#$hV
YAX=F
Of=1_
H,4FG
}RrH<
Kw(;G
Ux"X$
eKm fc
Yz~B
pr3a_
w,sx,>
%Q<L$
v]KAF
d45GJ
jmNcS
p]%M;i
|CVrX
3GdX^
ynwc@a9=
]b~n=2
H^p(G
+ANxm
aYNde^RgHB6
kxom#
@h;!q
&bwhBWS
wcxIj
@Emp:
%<x]
;u!p=
x<5E}
F'DksD
R!fx<
L"c(a
(!_4`
`{5~$~1
f}eokT
<"#sZ
zMZRn
B0QgH
#&N/_
pLK t
2\Y8r
%epInW8
M$7)S
xkw|^
/B0q1&:
< t\,
>"XkJu
rwRGv
1~)vnW
dznv|
UekHS
^j\PN
m+Bgh
M-iOO
2*#cw
%wUuU
VcUdd
v'f"D
K1#z&
:@K$5
Tv^_)
W*zkF
Pem{itdC
kCSdF}
A;lFX
pP|TGH
;O)a2
=X`HKk
{pr2}
< Sc /~
<BkOH
:Ph?}
7e2j.
s}J77
?n('<
Tydlw`8
HeRld
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
m[gD8
1x(j*asK
;ZI\y
D?<JSRj
S>W6W
@RDk=.g$
f~a]8#z
{6_#&
wM2)c
+jg:p
W:{vH
[$k|X#
&oH6m
r1B$7
*}lj)
hw!sLAf
k]dkB/sC
aJ|5Ky'
Ap"q0Q
x'0_&+x
vdb>I
jK>~z,
4ZInv
Vq!1(M
)}m+@
4vt~s
l.G>;
g-Oq/`
PILzXa,
=|F)p
^:slH
w+{:r+
8g%k)
Ij2=pN
aM:FV
4rvP(
j{Y%T
#b`xa
!<|-;
l,j*:Uwuef
XTgrLN1
DeleteObject
,[D<k
OpqE{
EmptyClipboard
DrDkWr
abp88
rS>/a0
^f=Xo0
N}YZ*
{T5$5
`n}rao
##,X)
[+\g.|
_Q40<O\
GaY3 \N%
@k3^93N
O}Yk<
hfSn`
ut%b}
aGa!$
!7C f
<>NX&
c%!k~
-IqT8
Hvm%@
sa?3l]
do["N
0JheFB
Ke($E
5=gJ4
p/1Ib
]E+--
J0'qeL
RG !/E
<Nap\
^\s>>
AsGtP
p=ln2F
v3iz1
%USERTrust RSA Certification Authority0
rB{py
&J;a2
tM6@#
FUw#>
GD~&Y
eh>@0`
mF:G|
x{[N5 i
e[d*p
JbWhl
PF79t
n}%?<
rZCIC
4(>;Y
G 9,h
[j_>W
~7!lw
#W/[F
|}VBzs
6lBor
WgWj3|
=mOIgb
{%5z;
<X~o$
=Z.h!
6^tl5
0pUwRj
j[zK]7PAYAY
EndPaint
}K}EH
q0B17!w
It6s;
'kEB-
OH+RZ
~=+au
@}",0
1s\KO
J#dVt6t
Gu%eu
~AMV4o{
pR_dn{
-maOci
&9o4Kv
oAIQ,
Z@8;t
.y{L<6
hgbkrV[
C[[>g
^*1"Co4
-*[5*
-G }ex
KzEzC~|
M]0r|
L*A)x
yldB!
IHHN,
H}aM'
b>fY$
w?NxC
G`V+!8
&[5/O
rD,5b^
El!om
,K`wA\^:
lF'7V:
8\?*ey[
-Y`Xl\:
w?(<x
X]tN^
}&I"
LGm7EYqs]i98%^
vE%]I
.DvpP
J\n0;
8F(b,Tad
L)nCY
`6\Uu
|Uvq[&H
<WQLKH
of.X&
MXwO<Y
8&(!hp
m&j%k
40q<~6
*=zVk
M6L9#
e\i!,D
U&P 9\
`;B6@_
<C=vj
[Vqet
GB0>V
gni?b
Fg5/%4
s4td:
kU;+6
Xxa$BBt\
8Ws|5
"ejU-
p(SN}
lBIug
UlWs7g
'@U$Y
"Qe)?
`(%c>
i{S<!
pjMBv
),CLj
S>'r3
Ay?@y
{1IFW
?t1Rd
,/+B#
'G*_<
Jp&+1~
=/6q{
h\XMY;
L>NC+X)
XT`Mp8
LegalCopyright
}OC"l
#7cra _
SendMessageTimeoutW
CY!yo%9[
ATTyf
\R}.w
LM4J'
/?:Pc
ol\%T
i|KU`-
Dm}<B
4iX;)
`tfD+
!{8'A
SetCurrentDirectoryW
|=DTFe
|;5b!>
>k,[|,
Vg_7]
7TN?J2
wQ=QG
T/ihbrt
>p"dw|=c
-*.~=
1rM;/
i*k,<
"0"rG2u
cbRof
<+e=u,
Sghv~^
tCU=L!
,N9:3z
) K?\=
}`ekl
'l%2/
,SqiP
9r^+,
$y$"(
'H3}Oe
plm"D
m-F*J
~/|u$zb
VFP[%
g/[V#
:k>/-p
GetMessagePos
~(F$?wJ$
FGes:
tAg?~
y2R9Qg
+s"Ts:
7<U:Z
'JPA>
0*arqJo#
^Lp+'
:!^m{J
7| >jG
r %QB
1VAq]
]3t5"
G7aHx
Qwfsac
~7w"V
{;@F[
NuSD7}v
LU^0%
(l`pH
<v1m%~
i~!&#u
JrlUB
Knds4
Hn,"6b$
21x80'
ih$4am
ck>h3
iZ;qR
cQQPAG
]xJ6t5
1*OC2
ImageList_Create
IW9A}
.:SK&9U#
v{BsF
ApJ18
q-dF<
9-Pe6[
0DLL?
eC"4p
gi4blk
g|`l_
PrRKg
X)}@^
]$8jCy
LNRV)
C(j]X
]XMRbC
ulD,h1
ZbP_=
V'cq>
SFnZX
*'yN*c
=svD0
HwZQM
G]1f%
jP1~z
h4sO|
:s_g%
P;hzU
TNfouF
!saa(
&cdLo'
HGl.hq
~9&"2<
P@P)/
<n}Mm
piKCT6w
\]7{J
tpo&l
DI|&N
[:}i:
CsNE36
zb.^by IQ
G[q?Z
7iMDH(
!mj*h68|
QU@|:
uD}U/.?
Xw?r+
RIqpA
J&{ux
x-|V5
ZPXUY
^jM_O
}2{.&(e
)9cos
6c2u'v
`9:t7
(GH5O>WCe
*Z[O
lm%kI
^vcf1S>
y)t>x;
}&{K=
ieu5QnM
d1qOKm
Un73!
&hFGK
Ie>2:
A#mND
oHU[6
|`f)%
rMTq~
K%:0n.
YTeXw;Ku
lRq?:
lziGJU
8Kkd`c,q
uGeL?
yy.gN%y
qX%zKm
i(;[Q
UvZs%r'
|Auh3k<e
qy$T?
L!9SZs
/U:Gmuf
m`TeO
|9EVSg
R2#WKR
[#8mP
=@x_#
uA"^H
\Gxj A
&SId}
b2JbJg
%Jf;
gK-x{$
gXJt>$H
Bmiiw
LX*-*
cKp@c
I| 6r
F&v%P
^)^@K
p7!J.
pe&9"bRD
}54+k
X)lV)
HcNmz0
2Z351
+k:9+U
@}hR)
\FGZrcq8
h*v/H
}HLB(
7dlsd
!IPgL
aQqw
/my}Z
ZW7mJ)Z
n#{Jx
v1bje
oN#9m
CSxcn
x9BGG
s]go`Q
6TvNN
FgXR~
;"y2zW
WXXD1M6
LfE\^@
c/jWk
WVc@C`
ak=NS
T%b+Qz
IdO[r'
58?bi
YmPCv
zSx.E
E#jmg
6E;32&
OO^<k
|dn.N
<wcw4
Ff4xn
~etx}
O)(3>ak
For additional details, visit PortableApps.com
i)~B?
NQ3T[]
.K,},
to![H
7w2i|s
Apj]z
:hW2e+S
GINK{x#
+Qxr}
O$qUy
uR@$*w
$w8}e"+
o,;`N
`zO`v(
]N`2)
Nu]SzE{
)`Hp59
t.?]E
=UM#B
vs}3.?
no.K$
GJyN]
71?RK
'a)oR
QdkX3.
:H"s%
{vW/h
< 1S5&
2-"P[
2:os3Z
*?1m'
E*;3`
}nrkP;
]C6+,y
e]=WH
mC^avi<}
X@_}r
vYuXf
s9TML
`~X`(^
msctls_progress32
JE8g>9,3
63uFW
SHELL32.dll
I:u)!
"_Q*rm
W.'2K
^CoVr
vZTb"RV
jh.b)*S}
ho+P;
a;,T<
.XlVq
?0{NvJ
Cq/S)
(z5vi
UU9F}
6Zk_\
lpkO^hm
zAIhh
ow~s5
1:erE
/~vb%/G
*thI{
%c~R|rW
Kt|pX
)'s]
~V~dm
Q2r4j,y
r%<L1
?SDNb
"03.>
T)h3S
VZT4b
|og:haI
Crr"S
40%.qh\
|V%u|
s}O+yQ
8W*&~
J|38}
WinWGetPortable
GvrSC
N8pg4Y
kSK[{[
_~>=.
{1kSF
9\EW Y
-TS)U
qDEf0
~.r~#
U6[^i
\V}.>6
WW\$\
%M6pUYy
(o[id
{T'p/
`uHkW
.I..RP
rf_T<
V=W"z
||M&3
.<~NH
UvA'7
F4(<$}
SgNlK
Udc!e
t7./N
%ihr>
Bv\Hlj
M!B+1
0Y3Db
/ P6pL
CreateThread
SetBkMode
/4%We7
uI+7F
1kV+b
vMn0c
k$9e4|
50@jd
E=Ie@
=F4Ru
HbYu f
vQT/c
Mm<Pr
-~@U.l.k
c9aA~
dYMFd
:8pVa-
^h4*k
ic/x;
]XnK0-
a9G1<h(
Ar}t+/
`bV6n
x~I}.
4vW>|
05UVn'*
l';8C
?^"Ha
>H`P1_
@U{mW
4$>9&Vk
{5Y`M
-K:[:EC
Q=R`y(
0szfd
dnAY/
/m5^P
{O)jhB
e-v#]
E &JGp
yoV^D
#U3;F
'u"+@
/G5l#
+H3)m]a
`Ie|x
ivxd~
C(Qima
@)5R%
5|nE&
VmDY,
Q*@W?
vV-K\
)}@?^
:0(LN
Vk[$(sdk
6elWU%j
|@}uw!3
9y%FE
YAN'?W^
LK"x)
q:FH<
s&2CH8
+<(4=>
@_3)J
qrc>.
8b1zCU
U7F!v>g8
0='0O
%d15s
OE.:\
BdXI:e4
X$#D+d<
./I`|N8
GQ)wn3L
ubZ~TO
GetUserDefaultUILanguage
B.T;C<
o7/_3
Og57\
h}\3YY
D9m44
r96]*
</>w0
KC:Mq
<%Avp3
C='^u
kmO"h
9_Kl<
(sutV
KF@zlo
f:'9Bg&
'9o->
^"8US
eR#Jy
7$;wpW
&e7`/O
Wx9XxY
FMqva
-T|i^
[E=r
n|v5L
CC4RP}
/-P?pR
:kHs'
PortableApps.comAppID
GJS8(
1G=%v
Ew)b
FindFirstFileW
!2;vq
z9-Ux
6?V<Pt
D=r0I
=Xi8:t
N}=mM
\$vu@M
8$7Ed&*
wsprintfW
WRM0nE
7{Ql'Y
"@aGLr
4'y9;
=}SK_
=yvlIA
V%)M3#
qxo?j|
P[y1U
v&-jt
G~ 3-)`
`ZOIKF:
47Irf_
% D3t
_u7-q
sgXU;
u&Vvni&
< a'5
Ot"'py
GvYQl`
"+N){
Ff5dd
MR06l
C&qJ9
/lpLh
y#v`[=
\kLx+g
rh`/q.sCo
r-=~:
kG:Io
K2l(Q
k?UY7
U82?stB
PffuEZ
p~[D,
hHT^V
D/{|h
T4kr>m
US=dz
&bI9~
G_$7p
"NzwU
oZWzy
Z{1pk
8^'oJ
dc/~qaU
pGiT_d
j8WUHBYs
{Q//#
Pf[,3
*#<tl
aJ85[B
_(l5.
]DB>)9
2"!5C#
)5da&
H^~>}u
Qh2U@I*2
*cV a
8y.iI
6(i4E
M7wBu+
xqsJZ
MVt+rE
}_D(G
4:iSG
q8XqB
@O(ro
DWgaw2
^U;oC
eBLW'1y
pc>Id
>11wh
^D_q$
)1Ttio
qM$d;
%)M$;2Cg
{Sth4;
190221000000Z
MP~:4E/
g"`Wo
NeW:V
024Z=
7G*RCs,
9l<x@j
UVacU
g,S<$
"i}N%J
/]Bs0
SUNL|
QU |#
^v`R"u
Bna&w
<SV,
zEF13,`t`Q
|W'S+
-5"rQ.
IDATx
Mc/.Ls
},TVh
| {)h
4W':>
/;YyJE
q=<B#
j<F7E
am~<B
-OvMI
hKsLL^
g):67
`q\S6`
AI/@4C
MgW>q
m-j{:
|QT,T
"^uuC
2(Z2A
:k t!
5Nl?_
|qyX5
6z1!D
G" 4r
k%x.T
{7_$w
S1BiN
6H"pJ
ReleaseDC
ghmNx5
r+T|P]
hMs2ca&6l`
=$MY~
~zSyB
[y'3Q
sTBZs1
+1dL~
@[:IJ'
).6J)
22mt~
s+r.5i3
l[CEU
/cD1O
P`-Z<O
5P@Co
bZN6i
jC}a%
untK'r
!}[V%:
S1];hb
3,{%5
]a9kQ'Kx
0hr3U
7}XgL
c/)(M
>Q0Hy
e)ni%
it{mP
3fvM|
&EFPd
E--|Lv
Zx\FOe
)l5/V!
w8m30
f7Y[Ii
.p<>D
bl)E-y
WideCharToMultiByte
}3s.R:
8b{kw~
VarFileInfo
X]bmW
X5H6IM
YU50v
"LQHu
WkV^9y
OIm-aY
OS)rH
b_ Ol
Oa-TQ
:nc;A3
fDa2_
VyViD
<H%0W
p\p4d
@To+<
G@VK\>
xZ&uzB
}\_Vh
GetFileVersionInfoW
<>Iso(!i#
Fp+?s
w5zV9j3
<w!dB
{M@E^
[fQMz
_%r#d
piys*
CreateFileW
{Sn+c
JmFp|
4)AfA
BRsog&<
zaO1OY
,?!O0
gl1b^
*U%4Q
qn%y2
=<^[_a
p^vH[
kg4*y
Do)yvOF
CopyFileW
bS2?v#
3VtOc
[ D9+"
LWl/[m?
O IC:
v{w3A
7.oRV
8%m];
|gtS`D[p
g|U>S4
<Or`a+
T{gZK
'prVh
8?P"i
$y/;73!4
z9XZ4
lRLc'
Us<SC
SHFOLDER
d;b@fY
`zCmJ
H1-8CY
ZYe3
d^0ow|
Nz_:ad
!\(z3
wO_7{
lVrrn1
,0Xn)
WmF8:
J1%Bxr@
9R5Z>
1YYO,
(}C*i
wlm]Z
',g:@
TQZo`A
(\Dx5
F68Hj5
&/;%{
&cbbab
oA4sF
jo_Zt
wuk57M/Zo
\~(b<[
;Ky{g
p1FFZ
uN4P/
6M@o}
QAO!P
1TI"a
QATJ*
G*`\oC{
k=BMG|
-Ry`<,U
5A<PPB
]2AXC
mDRo]
tSle6
|N)QJ\Tj
Vm{F<
VO/;E
0H|%t
GetDeviceCaps
us/UhJ
Y</%j
KQVU4
Uq4Y;\
380118235959Z0}1
^xwY=
Nfm~%
=KT\a
[hL={
n("&@
%{<oU5
<6[&z
YQ`=RX
nkkxl
(/H{r
f8y|
D;(NW
likJL`
oMP?g 7z
Mck,tY
GvdC5
j"~r}
@3b\Si
.oI8\
TXmA,
8g:S1
Uiy4"P
@b/A_,
<+oUf
fIO)Y
d<6lR
0wMtR^<
Fmt}|P
5S2t21s
)BE3%
KERNEL32
/[W[*
YAk.V
f7.]b
H3JX^0
_0#e;
4xal!?
p<$l.j*
BG+{;
nl7J,&?;ql
>!b]!
UcJn\
aH'&1I
!5P{Fk
IMM3{
;*,*{
G!E6x
P&PMN
V[$N"
1C'wS
/"4S)8#a
Cop??
MLE7Az
||GG0
&RL2c
cwjh'L%
zR_&!
MFFF/F2A
1#]mH1bE
>J3S;@
hcu5:uL.TIo
%Ri9w\<Z
;Q+at
)hn5~k
16!=A
rkG,^
)mBX]2
}X]#)
e1br?G
\u f9O
[sZ]
(4-HY
LS_.'
p/+%O
%rvl+
jh7_0y
_Y%i&#
C5:H:
,cY^d
e"{!>
~|;Z`+
SHGetSpecialFolderLocation
jIlUC
H><A\
[Q3]+A
+&1DH
^b?56
I_'LZ
`~.*T
e37,YL
4O+f3f
I/wMb
M~%.&
?(Q\4
OFkrm
g_XD_k
p2CN;
8FrdWCA*
UWvxv
`}pK&
_3x{<
8,j$&
oco-`
)3I#8
3_!/7
vX$"-
EPQa.y
UJ|QWrv.S
^}Bz9
oESOfi6n3i@
3/[v1
/"=)7d
[@'p}
Pu zic
d#LF\
OB=;d
yAbXW
%_D-f
2!|:&
Zk?ZG
2|A>l
2`^F{J
u6X6<
a)z0c
r0Vmwy
O)=@$
FI5rg
M'YVA
z5W0U
*uAF_%5
G>efv
0tf/p
z$Z!$
:aaxV
Wu"nQV
It,j9
=Ki5zH
,=&DZE
AE@%CG
O</zt
1At2)
33syCRk]1
*v3-B
jDJ=]2]
I,'3(
PcQ$D
jA{\DW
&k7l\
:'RPb'8
$1$VvR
Z">gl
<;69L
^\d81"
,c08kR"
5 wV&
UWvOw
o7BIt
oXC@S&k
/(FXX
8$K P
1S[Q)~
B|~T5
R_Vi<_I
b!bw8
^!3rN~
+`E}6
epzR|
kiFeQ
Tn>E`
sfk3G
Ye;,][
zK\oH
({M^}q
l,ykS@
_wTIt
BDvuL
qrftJ
u<4[1
!EL=h
D.ZyQ{"
|5D_:
}?*<K
y^!`*
LkdN&
8R"T=
/['e~
~,fh8
@()xh
gM/4A
;9<59
l1" >
"K$e//
On&})
s&kzd[
%3Sw:
olj}xyGK
k<c9]
)9D7z
492^^b
1cgJk_
$Orwt
M,q73"+f
-B-K8
')V7E
phIOd
]@rzf
+[G>R
n}Id!
"?B[k
62*KB
n"OEH
C)i!i{
u-o[HC
Salford1
*{]MWTk
RhK=u
iKKOf#
sWY9iTF3k
7M:Po
6UXe0
:-an7^
opl['
^A3wt
Md0=M
\nnSx
6a8-^):
=Er*g
+]n2d
U1S +
\=g**
.ij(>]A
>3)+-
.pwU'
\+lXC
]i,wn
wDKOuC
JLj'G
":h$/
Ej>Ez
?y7W9
Vno}^
J&ZJ%
k:R0S
DWW/>
~ii|c
/;~%N
@6Bg0Z
P^J5!l
)5>r r
;M9ok
z]<5h
F#acFA
XjsB1>
,$<h"
wqj(t
kr[Ni
fUky;H
@^R;R\w
O;AF&
hTNBU
Y:X(E9
6AWkcZ2a"
SetTimer
Fo,.b
3Lyp%
178A`4-
Jvm#B<l
rAZV6P
).K2/Kvz-
\w?vh
R=OC)K
jz"@n5
b\*`H
Mv\ q9
B!dF'
W?W7_
r1Ezz
RxX#F
"t>GA
N?n8m
sLGE;.Dzz+N
1J:y]l
[|')f
|*hY<
unBCe
K5B~oU
3F?=:
04\BS
Lb@|nD
5&7I=
{&:#c
_*D6W
>0dDx
GDmAK
/#/N|T*
Izq$T
b41YK
vBbcf
XbaLO
r;g]qNgq
1b<3;
s|h9ge
H1Vfgh
VDE9+
9|SI:mI
)*GQJ/
4P&y?$R
U9sh,
GetWindowsDirectoryW
]c::rLDd
DefWindowProcW
g=+6u
MdV_g
~eU*`
of6o@
t]g|2
)c4A
f"%4[
"D?2j
=x0gk
Q n=Rkr
1*||K
zfB-z
0WZHBMko:.2
7{{-N
3KV?/
MEAdf
]ncS<=
vfBg pjGu
GZ95r'
j>6iL=%Y
ECiSW
=PV7$
LXEWq
GetDiskFreeSpaceW
)^ 0}
AOVh,
={5t@
9%?St
)=}s2!
eT}^:!
dg*rx
B!oC-
,kl\0
t)9t6
3kc'[X
Fy|4K
Nni"A
GR?=_
zF:Nk
Ga:[2
sQTDXT7
d,B];
r)2KM
Y{u78i
@t,9M
e-F:?
K'ycw
tw5%*
mc0wT
H^*9:&
B00S3DrY
n5H\">x}
&w|4#
7m_qq
^MPzM
"`1q2
Kh.om
G!Hrdv
3Z^&"
r@GU+
I#A?2
SA^P}'
V"-2H*
9,[wj
PNyUWb{]L
%hIW<
TRa-E
XIssdy
XR$m%
fW9jmJ3_
tZj\V
20211011173011Z
$3y8^
]D/p9
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
8;6p%
UZ`0
5p[&-
D*bf7x
"^i@)
~ayIR
=s9zn"
cqw12
Vy>y;
7ltWQ
*'.q&Et
8R^QsJ\N
b2"Gek
~-G-X
&T#gYt/5Q
KPWM>
_jlvzyxb^
'XTMr
vdJ[c
c=.q|
gh?Iv
Dls5y
p2W}l
j<8ug
KLN:c
cIoIc&R
B|5Q(
/_G{LZ^
0XPQg
[CcmS
BnS ,
6P!s~
}a}7t
\FmT69K!
q)t8?
=>AT>
yUL{zh
!fH=Jn,c=
x7i[M
&rHE]
WNXHrs
l(8|Ga
|j\bx
7xil}2)
D&FC[6
M)k;^
D8}0fI
WXktK
q8KE
`j"ms
+@d21
s**<h
xq nizO
5e(e}D
\R!I>~u
WK1lB7
X*n/s?
%?L)n
T*D>o
'~[oG
c!WnU
sJexw
vGk^
=HUI-?
7xV|p
A~,uf.
!L'EKB5
R1j%A1
Qk%r+
>m%q\
c"_#3m
P M+2
6<AwlQ+=
bd>J9SSs
77(k!
.GO_A
`e2h"
GFeO@
K1V>"
i0"<\
`%59R
Y>.(}~
s:2t"_
oR"C:
:.+B4
2G/$pz
a$ TV2
MoveFileW
17Q?y
l0a~z
AtBmf
http://nsis.sf.net/NSIS_Error
{y[${
?7-r[~d^
Qaa):
IG/fc
KUMv_
jYZ,B
9]g^O?
&Pm2&cx
B%~kK
.}6j+
#p+1Z
I,2|R
8Tgv@h
Q<Q\N
EiNQ[
!ESip-
;0(BfEM
kMw3$
bg|r>
$Y*36
G (Y9
JRkWf
civ/~6b2
T/>(Y
IEFNlD89A4/k
BfIGG
]P)7=
mS)ql
?&c=t
(u23w
R|#O,
+7aubh
9ZfZj
vn:y8
Z\eN(M
e:qnw;}`
\tAi3
qy4Dd
^duUw8'1
N_=.N
YoLuH
)]@$2c`%
$<(w'on
ze{}D
yn^cAm
v/3QT
RUMh2
$Fb.RC
}|slh
9-HgE
B!AV_
`&dd9
<PrM.-
9}N?U
"rL?1
f`"g(
X}?byZ
M>Q(i
zhbS#
FVUp)u
&ONy7a
|exO5
QQK4}
g[U*%
2jeL4
@G5E#
.N6<UI
W]?|V
WF9D7f
?LF%nZoDG=
%jNe|
V?xPr
F~MNr
Om,TG'
h5oXj
^{qJr
yE3Vrr
ikKIr
-{d!G.42
SV0i5q
9Gf76
i1=MR
GDI32.dll
CuAyr
`b -kH`
%Q<'-
{g*'{
%$8Vf
vCHS}
%@, j
k9&QH
/}6}+
'{eK(Waj
5td ]
{{Z(c
TeW+
Z^T9:
;;G=<
?|'1}
BaA*0-
67baU
gZDxh
N\YK|
z#`>]
%6gO-^
m*Ns[
X`&]g`oF
P3B+W&%$
41JVa
iEM0^
4G8k#
W)Y6:z
H08f#
~7N=%
lSjvP
x0:e4P+
anRhuUIi
!Cq\N
eE:ab
4s1HJ
P}j/lP
oCZ3(
-df,B
;RFUe
@^A7X
c3i12^
9{9Xb
>M4~
m,n%q,
;974-
tk$yu
e*^5CF^8
t6%XF
N2^ia1
j7{nKx
m]TM{_Q
X",hD
8OIU,C?
sMXdW
AZF<TT
ZU00L
Qu+z@
lE%pS
XSxu(
)[w^Q
t_C:G
Lir6h
bwM3uJ
lzs=Bd
4&KEO
NH6sIF
u:FeV
T+e7S
-{B=o
l*R}(
imz)0
>Cn?q
:7_sT
h8~+g
Y<#0o
C}6pi[
im[oZMz
LHOA.
I&vh`
XU_^RL;
Sq%I.#
D7g[Q
W7|0"
C|(?:w
SJNx@
M}U%s
*MH!Rf^`8
_OWl2
|k&|n
0k,UR
@dm+#
{N}nAW
~f/8^
-:ew\T=
an<]FHM
x%Nb8
g?&1n
6LYTLg
@wv]3
M+$]|1
KRD0J
]:+-}9B
;3F{VSa*
[UISaYNd|sg
!{jQ5
;ffq6
CHgEx
#?Nad
i3jS3
~*#N~
RA[dGv
OQak(
DDEi5
Igxzy
C.y}u
tFy7q /
cHH02
]>v?K
w5lf.
:9@Zq
RjeuW%
VKDT[:
J@-(1
RLImW
J/Ruzb$
V)dR]
Tf)qd
&>4hqh
:GCbeu
QqMH#.
Axs|cZ
Gu6:Zs@;
|LV%Hb
K4uyX6($
k"%o[hk
:tmD5
?n|/R'O
>BQ kBu
RZ`&c
V{BQk&
)).q$
t<\bzw
`pMRa
-fZ"=
R9Lf,
eyZW$C#Ld
= 'vZ
rp~9"
zrq66
V<[&N
UQy[?
]<vy!V
8`!x=
\Pu@{
D$ \"^3B
cWEnl!
VCs6?
x5}0E
F}>ra
/\|%yU
J@)XP
#V3%;
*%4r84Cp,#
&$w4>
Psc=2
9/4ya
$5:6BT
K1O0V
^"$(%
X2]cP
#9a|P
JzyqZIy
6=yn}G
PortableApps.com is a registered trademark of Rare Ideas, LLC.
g`fX*'
k?Q[#
EJF/c
OaXh4
GetDlgItem
F[)9[
uUI<$
&ODR2
\WP6p
8~1T~3
%>Ijv
99Xrw.
LOKu$
P]|ie^
;,|4<
q:27G
(%Lu-^
'^nm.
2-{Y1
n]2M5
7} 4v
dt*K^
_ RV/QzV
f0+H?
[mp{{
m*JpH
}?/qV
!Z<ctA|0
qEnOh
<4*F:5L
l\2Yv!r
;97ch;
!This program cannot be run in DOS mode.
PGCTl~aD
{`Uxi
s@O~(
ZCDRX
J~;zt
E)PIy0
xP45L
5~9|TN,I
:'VU>
Z/x1]u
=-hwQ
kk+=k{)
JpW,q]
S$h,_
&f&=*
@;>n3&
8CG9*
8D9fI
%bm=M
MQI{I
&?HG!l
UR-U#
'KB*I
-|deX!
;'z_)
NE'8d
#S*"G
51r~+?
Xqm"2v
-kBRu
|uCy="
x'Vs9
b(.fn
S&l}|Lk
d$~Xw
9(f]sY
Er(OK
Vo&6[
{8E;U_
Uv6<V
p*>1E
7p9@F
BPnI+
uj!{C
x6:"u3
SpP!R
o@'FdR3@aPk
Y-H1r
,Sted'
vxu5}s#
"Rr^R
JZJ!5[
YdFn]
38fE`5
!fh;q
F5(CI
FuM)EX
b;VuYr
Q{,S7 E
0y>#a@`}%
8T7[
/CPT]/
*P<>x
JIE5k
!Fhf3
4jO"J
RegDeleteKeyExW
LdESOl2
vpT^t
=vdqH!HZ
E1&mt
=IZ4)
z-l:i
u_*#_
MN-1A
20p,,
tn8b"|
@a6l&
H-f$c
d]}ES
}.sRL=
WYi/E
Yx(ga
E,gTK
:A>DG
Di]X@
IHDG1
(+;G~w
#H&u8f
WM]& #o.
I:p1r
NdwelQ
1F+34]
v~yme
)]6j>Ql
,0xqC
0MSb@1
n{j(@>
i&Q;P
ft@ae
Xq9:Y
LK_N%
G5NF3
R-0%;
)sAZs
?y/+B
'IZ0PZ
}uz`Qi
e,Zuo
s$m/i
4!n_Y
rX#kwS
6;uwx
'2W"E
9o~].
hs0Or
wa)DZ
QBAm?
tJnmF
|rof{W
r|l[D.7
Dkg9)
`3Y}]
^~b,?
QWQq6
1E,K_
>H0M-T
Rxh+G
z\60Z8
u(Ix&
U$eswv*
$3BBC
luvcmi
nHG~-
c /6|/d
IYgi5
]J =Y
!erNX
!b'eK
$[-'B
Y:$_)0v
\`\bm
V}>{ED;
jPOQm
*(YdL:1f
A+q^6
~3i;Qp
Translation
tzg:n
vhmlF
@<n9E2
STV5F
9{H-&
vO|~w
"AR.,Fo
f4d7h
M$|[X
PRFllf+v
"pg\Tf
]HGQXX
ld9;]
rKJgM
XB"9`
Z{y6FM<
<+T2#V
zY-#e?
01g|N
+YR84
z{nc$
"mL*!
WJr6M
WM+Xh
`(2a`
suGx];q
X@_2H$,W
r@Sub
GnO|6 =
3csLS
NDn.Y
3v_Sy
k}Nl-G
[N8B4j
')])]9L6
mER?^V
enp=e2
@*1BA
YmJ},
+{n[
UY!y'fyC,
_l#:L
C+aaxL
>5)bY@
MFV6)I
rRj;B7|
P$bPCs5Y
3#LX5
]oaob(
<%tBCQ
!>*Cc
s[Kgk
ABk|+\{
ty9[?;
J%.0!E8
=)a&n
sB?PK=
4"%?{"
y+^q7
S!P"{g
)E,u `
>t9cZ4
W0d#f
{\>~]>^
p>!<,"[
%{}.i
a:Xf*
.lyleZ
3\fS6
<x=&n>
Z3=5:k
w7\)/
u{U:t
,JyUh
1I 'S
n;s@d
Z0r^V
\Jy>Mh
s| <^
~*l7l
_h$Qo
@*1G`#
Sa;A<J
M*~n4
Jf#0!
U_A`A
CRN1_,j#K
)@~EN
->p0KN
xNweM
D>Fz/*
8JN}|Y
|^C_j
|Nw6:
QQ&:0M6
fN2GY
QqDY}
_)=(e
S'_\l
I@jV.
R=CJ
:]K}|
1v_3P
K{zR%
%g[4<
/sot-F)
D3]=z
-)hAn
:SG1L
o)]$f
)eVR7t
]h%Rm
_Am3FU
AZe1`
Y5Ue^wH
,6'8d
U|/Vh
9"(!t
'"@~q
5,\nZ
n]c[0
3dq(o
pvjA"
F="vJ>
pga*q
'8$e2<
g;DKi7
:jJ G
3SySq
nx6c|
;>#sG
`"Dw>
" #y$
qJvly
kf<I,
-2%<C
E;Tky
4:$z{
knDhh
5\"<~
1R}tG5D<
Hj\("
NvWbk~
Y+/q#
N%fq&*
2sY+F
DJ2Z_
SHfrog
bPW#?
]4GY3N
uY VlX1
b(,vx
QU2^`
'Q*iP_2
~@"9g}
CbNh$Ra
A1%#Dx
Zxq8]S
Ww@dF
y9%q|
#(?8.
[ZVSc
.TgxuH
,y)_Y
-G[B[
:Can2
BsJZ6
I#td9
q_i-N
zjM~t
i8a'M
<lE3zq\s
(/?`G5
b,QPrwJv
X2T2|
?.\`x
uG3O!=
WpI/,{
]|e88
.&zvi
9n$75Z;p,
i)t4b
AwTOJq
YL\_;U>
t&$o#
R ?2`
M.Jai
|F(]"
MS: Lv
l[G#+
kFnL.
#$=_FV
sckHq
e)~`K<V
F\[3r
Lj27MQO
0!vBv
_+;g*
V8<vk1
{)FT_
S;P]ko2
GM%`)
NRB"?
)2(}
?#d>zn
Mg)X(>v
A[<r8
.Km&*
7]$i>&
Rn@zw
[-%@l
D!1:Z
|huX7
BTrW8
U@Nv"
~gO6(>,
|7=<?U8
h,CL-
xB59Ks
X JQ){/p
E8[T_
r4"Q~"
A&".n
ol<!j
T@b7U
|k-^@n
I&)=k
XTbsF
`"!W:_
UOVbb
-/sLw
%]=.$:)
I/L:Q
~5R82lL{^
ux=DS
]EV_w
z_'Z*y,&
c?St?
884B=
hil~$
G@~U0L
y`hmd
X/}gM
`{M>q
,Govi
%uUmG)v
~`avO
`4gnH
5:xL<A|
M";7C
h657o
}_(+0X
O-;qV?
}dQ\$
C(Oh/
Uqiky
0e&~w
?Pi6*
dt|s;
2<gzJ
I]HmObE\}
VfQh:
FeVB+
MIy}S
X+,t|
pQ_XI%
?MGvR
`9y{JE
Za3YE
#lfu=
|ykMC
Woh"u
%USERTrust RSA Certification Authority
td/}6
mXvtO
DWemZ
QQoMhi
3Fn\x
j!$?[
X&cuz
~[YC[
NC0sU
7DM_tg
Q{ht^
36p6:>y
lm?US
OfO[-lGK9y
.qDX.2
uyW<U
LYc)r
D{]91T9^&
f/AJW!
xJh=/
>"}1P
DhctD}M~
QX~fw
:KU:v
ILK\D
DK-|
dIb)3
{rOt<
,9*ri
^K_pe
O `10
x]"U3N
W4F9#
]_n2VA
&(Wgvf
a$^\}7
)iVnS
>?twfB
[S 6c
rwJqf
f/>6C0
JBG{f
:\2YT~@
pC&(B`
EndDialog
BUN/W7
T=d=S
X:B(VY
hSz}5
[`>2u
eKJ<)a`
1eBOr
>Ro /X
_L|~#
F{MMv*
N?mCK8HM
`OPMPE
7mMj)t[6
(rh%4
g>'!E39;
M/?rG
h926*
zAvZM
cT8+7
0mhOg
g?,r/%J
BU8a1__
MHy<Uh~
te/B\
IW'gh
1-h>t
{dp-M
HRB0{
w\ONw
wP9BM
:(TuYt
t_UZX
=! Ldz<
/g{E|
aL'Y
|i!~h~
&/To;
tf7J8
lV@YgZ
Fx'Ne
bxW-5
i[4,)
x\#y@
BRiN4Rvn,
nvcPuk
f{)ZB
uCxqd
~afmf:
{q^(I
G #\T
-J(]
Bbadd
<%zmhC
`/`y%
+kH'=
ez??We
:7?o
Iu:#@
,Vg[EY-
O4e(~
}<R"1
8VD\BJ
?)r~{
nc>o2
c]sWn
9]Qn~
~7*%-
I|Yf7
6^wd@P
=g=6U
8+;pWv#
:[aEgJ
Bf2Uw
tSA&[
|"YLz5Wk
&4qnC
au=zVk
[jBY@
HXbSKb
j]]Q:
08JV}
zyz&8
I_=dP*c
Z)Fhx>
U;9)dc
L|F99
9LJDFd/
^D+0*N
1-fyP
F}OgC
SV('=
=Z8}ce
{YrU9
68oS)M
x1J0)
hi2 t
.m"V[
O+evP
-I,sW
USPK.
}|qZ[
ND{s^g
iHawH
`Z,+@
79D4-
b9 C*
Aavn3,
yS,jd
Q|x%$
l%T;>$
?;A>#
RKRhDh
8&LnT
>.wTW!
IiK+h
verifying installer: %d%%
}o#AM
h!Yy=
~R\8M
Q,6T#
h'gBw
contact@rareideas.com0
s,go?
L{ I/
;EWh\)r
] {nINkg{"Y
N4up,v
[v'Y'
/2?J+
O1wO%
?@|+q
{S@?f
7Z>^yI1
8|)?N
+,D.c
m^"m>
T{GX?
!baW(
:DfS[I
k19K@
.{$y42
=u:p+?
2#j)E
L#agY*`
mZP-/>
qXn$A(A
pMSMw
1b#P/%:!
A{gkR
H>BcS
* XkJL
k:MRk
ig]cx
pTdZ'
#8!tj
.EpKeg
RbSB}
:,JtU
ua9QeDM
eJ?qZ
^"hVs
EFE7x0
A)dY~Gk-;
$"/aU
E`=y$
29jlP
}H~L6
:qw` 6
t2$LJ
u77z/
m&6%'u
jiO)#0$
nk$'5;x
yGQ]Mc
vA%=O
FsP/(
U=~Km#
SHFileOperationW
/42D-Q
O,ca,
fH3)I
|p=j+
\]1/0
m'~0FT
9jm=P
ac.Kz
z0RVP
V7/_'
aLM;!
0/HI;N
$o3uV
vjaw-|
;EyNS
FPWWs&
lPeykN
Eo7)#!
1s4A9
W<I`5B
Umx;z
qeH*D^
T~t4g!
KHmU(7
(feiaD
+'v="C
l)DvD`
(;?=s
-lC#^D
O40HVw
o+E=rJQ?
d~EN$Q
r>~@D
5H7%U
:R/Vs
={Z"L3
4A52[
.[jM}
k>5cH
kBQZ\
hAAl=
GetCommandLineW
7\IE,)
'!;"00
)xPl)]
hQ=Lb
f[b.!R
=fqdx4
'O\pr
`:SmjG
/$'4
>!Ko>
Epew(
Tz)\{j
H{AXC>9
FmE%bG
3s<cJ
vG'@~
c+7Fv
:3( g
OpCmt
}^6kjZ
dB5B![
<0:S]
7-NDQ
WzXL?L
Uc(]ejn
rkT8Uc
rc9kj
~.=uJ-
2K.uQ&
{QM:t
a^Z/e
{,omn
]DQ!F
fhB:,
&:XoC
E!Wvu
];Au
%u/83N{
'yUM]b
@h[2whvq
m]Z3{
8wyk,p
R#>`~
'u@kf
Pgp*M
}I$rE
W8R],1
CreatePopupMenu
t3%M(
cp);o[
o2-M}M
Vuq\d
FileDescription
}5|f"W*
`XZ[&
Q}_vA
<9`#}%tP%
$Jv#f
+f>N6
BR:VG
Ui>~v
yf1r2
C:6W_
/Fs<&
E/ L'
"!,BQA
yiLT@
]n']7E
j'_FtYDk
KZq))BU
[VNd\]
hyWI*
D`ZV";
Go6lo
F+n,f
(0!Xx
ClMb1
_*Q|H
^pdIDXdb
6I&9>
5*2#lp
-$,Gb
mGe1!
,V:vf
WFE|
/q"8p
$w(#0
Fy;HM
]m]2P
JP\7QY&
Rrf*W
O(F`y
j_9tt
iGib'O]
S+TSx
Kqt:s
WZVRS
SetWindowLongW
0"H50{*
1Zh0n
<a1Xw
JB"Ua8
V%_yK
D?Uo,
NSYe4
GetFileVersionInfoSizeW
STGNe5y[
Bov5Tk
:Ks_H
"B0iX
<']Mo
`Vb|mb
k9#QAU
~nv?g!$%d)
|!Dcm
xn&B[
*?|<>/":
%LC>F
LF}R\
F#a-hf
yvFI":
N.jiiw
`|k-F
O|'o8
AQ.QX)
u,A}f[t
f!zT\
LXQcr
Q#Frn
zD~Mz
t"Pd+c
0mDvc
Q~LU`
`)V!J
pSF0-
t/.xa
Tme`G
_-cAc
1xjjM
MfyK&
GetSysColor
7Y2[Z
CharPrevW
&fRS2
~+)="r<
-+_J$
2V+[B
3,;VA
.HoFB
M\G?B
e__j6e[
Rare Ideas LLC0
Ya(^,
Q9q`S
"i(hl
HO;$df
InitiateShutdownW
R!NAkX
vs5foS
,NfN)
nXpn0
HVxJH
6""KY
[Uj@"
@:f8vP
%wSc
UMoV3U
L*fg)
rIT}u
a}B:I
t(L;k
n:@D&
Oar^e
x@<[bBK
N2xHe
*eY,c
h~ZET
".&Kb7$.'
tCK0#s
^-2+#
CTQ3h
[N` f
^Gw}h
+{xVW6
/jI&6!
n]?#p<
, '-c&
Y?cY(?k
r5g]F
PiAHj
v#d}#
.NlNX
..*1L
H"A^:
D.RY{
~;l]T
Ip^^{x~#
f$:u-:
&u<Hjzr
k_S%Fj
b{mDlCF
l{mK2
\TaSs{
uh:rld}i
+l]qf
Z.;3w
na!8t9
\M'>8P
@U&PzV
;^m?^
e,moa
MQ*WF'tk
:}k~d;
&OO;Kj
bJHWm
ZT>8l4
QwMao
srzywe
/=/[\w
x;OC,mm
~mfla
RwXmF
pXn7]
W4F~8I
Z:b~u
RI{rc
|J\i@
fR>CM
SetFileAttributesW
{U@Gj
`Kb-w+
DJk7?
SetDlgItemTextW
QkOZb~
+`?Z`?X
jyITU8
{U\j6Nny
L!#py
K%RBj
U% cF
VzVMs
q)>ES
/7"yh
GetModuleHandleW
L\Q7K
l&5W@
klCDx|2
+TO,W
xKodQ8s>
vi6}l
Yuh,O@4
3mO6%/
]xG8+/
Rf\Hg
YP4^7
Q~RY5P
\D=$v
ifRAws
7A_;W
$Ku&{Y
d{USi
7 +dFNrt(
KSQ!k
<kWgZ
|Y[~+
VDC<t
0BVA=
ABp`1
JvKlg
*bf-^
eMv(B
h!VrP
`mp>K
z{^1bj
X+Gt'{[
"[}l&nRj
K"se(
{)g6i
lPH&#
>^Y6@
I(XH!"`
:7w()
220220235959Z0
gE I>%2
}u(P.
Hewf3
Y!I<z
k?4Z%1
H~M*|
~d4=|
nmH8L
IDBD $DQ47
jk(ja
ceUjk+
eT[o~%
V;%}g
h>tv/
"Zn*M
OtP?/
(b! uJ
+#}8R,
T aF<
5)=n<
7vetn
tLVv(
siv?Q@
*j,SJw
k^W,_t
*cA*'L\
FWXU5
tX\)jg
svO52
QcF8n
]$wO'sF
Rb%9r
({m~m
9BLCbm
:@qD"
!:5<~35\
m=g2%
jT$ob
J=0,F
3F3_^h
.-).w
~2CFO
A84<^
()tXH^
Il$D;N
:z$p?t
cvSh[a@'
0=SXAb
|o\sn
kG4|~
3[fBt
B]T3_
[XY4+
M:G]G
bwi9z$
33jSU
C<9KA=
O9B(E
[Q1q(
L}Us'(
5qI@J
_IXx>
gCwv#
tqhR2
)siSD$
}=6u)
Hy?A.
.D@,,
MjWUI-
}(OBG
W^H>q
w!^>p
:~J~NGo
x8IXv
]K~xI
bIi#&
P>)s:
FP2Yx
u<g,-d
w(N1H
O?`"S
s6qWX
jQs4F
&SyeA
%Y;p9
kR\1ja
~=j9f
!Y;yo
MT)lG
TlAhZ
58v>)
,'-~+
lstrcpynW
j+_}-
'i8Ge
oVsY\
v}P_rUqAZ
z()0~%+
/aAA^.
UTzd0X
~0xW>
,Ie"1=:m
,W9;I
4mv+m
mVOF1&2GO
w(3gz_u
i5fj^
K]&+}
GetDlgItemTextW
`='O}
/?k.\
Nosf1
]7Ery78
tQUv&
JHTfe
Xp-$s
QV(6e
?`I[(H
Q^^$1
*6C.mQ
apgl`
RL]=<T9
C(ZhT
eNrfl
7f}u.w
Q/%@rR
fW}jt|
n:0i\
rppCEn
)WG_<
:ML!!
xfA#p
I Cp,
oTQKQ4
+=CZ'r
J?:z"
5cj@eh0
)Y,1.
WYYR#R
1za~Z
jOhyR
wbU|P!
cWWh&
$Q@y)
f6*(c<
)MP{&2>
yq7Xd
tWf="
\RbtZ:
P"Pn?
pkV(xg
:t$dS
}X4ZV
5ATq'
9'\g?
:99\|
NiGY=!
jOQR5
E7D<:
6onRv
S`v"c7
f-WQ9
I/Pz;[9
vFIiM
xAQTMy{'
:mzK_J
+Jm=[
=ATgZ
N-M]__c
4k$jk
|K3U!h
pjX,LH|
niM48KWREBm
/hUHo
Q4z}L
EMHeR50
o=r<t
x]N*Jr^$
/f@XR
n=Rp%A
<"i*=
[N$W`
,b>/o[f
z%&6"
MessageBoxIndirectW
2@Jq5.
qQl:u
e+aIw
+K[rx
_l?g8bj
yVr'~{
p+;Qn
~yX*=xo
27v>h
`},29CX
q>L4,P
0@jV~
q5K!x
FNr< y
`JSxL
3h+z-
%^U}GC
More information at:
b"fSzC
,`*^v
wGcKI~3
91Dh]
Y\JN6}q
0{p`.
#,{15OC/
QeL,E%
:ocPM
AeGgR<
w^92E
DHs>]
0#xKS]
Mh%&8
~i$P@
Z=e)
46WXLPw
<'B@eY
6{:f1:
Ndp4D
H*wQz
06A?W
FKs)fIA
7j-+Ag)i2
DAQf8
`mD.k
3R79'
A;Jh\+
5T8Jo$;
<>BS;
k:Pm]
C+`SW
Rf+Jt
][.]'
j>uYr"
nwTxA
(-=[A
EFD@D4
qnmWb
hrB~7Y
rr1.'$-
Mq=.C
DNs,+1
.A=<v
{ZVdl
XxDD%M
+ZU1>u
2?;y<
gV;|:
e4nU'
F$-9n
]:?dy
rWYaheq
PrE{'
1>C]A
6G9C*
\@),kd"
_<tEGp
h2)P\fRH
f~zH8'
BHfzp
F?$34
g*`{[
RJVs)
35lvJ
x?<el
[Huxd
(2NOz
2MN/F
wQ'"d
/F,ew
bNpTyK
K?^Y,
wfaRv
U0~`W
SetClipboardData
&H,r'
tv9!g
F9s_mTB
ZEV(*
,,l[I
>1'm\
O>!Tw
}"9qt
xc_x0_o
?onLr)P
-F(Z*G
gvDg|
h]kt_
?n!D]<
/(bq9
NrN7l
/7W^"
SU()7Y
*v5e+
ZOq/cv
raP.,L
!i%SP
KZCC9
:DDs7
(f57e
CreateDirectoryW
>]Hf-
-@xG9K
74~pI7
i|a.gv
(dzF~
%Qih4
ZOIQ'
NE.9)A
r3(ALQ}
|-JvVU*
E,]zy
)`oAdQ
&%gQ'?
Fh+j+C
js\B9`
*`@-WUg!
]0;S;
w2m.p
aOz>VE
M6B^w
,'6y
eeYY6
`Xd^x
J,H|r
"U)>R
bU~?=
^=~o*>
dSQ?5
cxn#yp
cWy'*
H?,VQ
b"<J4
p)I{+
NRy#|
Rr):S
aT%WY
W+2,W
&l4Q8M
E&`^v
OlqH3
y^5cMnQ
dqHASa
'XgH&e
W^-4v%
YAHRqE
Ljdm$3
Q>jkhQ
K6:1j
#k8XN&\p
{JJ@L{
%+yr=
1-]U<)
zy%BIk
Eh2%?
GD)K4
q28m;<BXh
3Q%#bh
Q7p|1
8DHL`
|&/28
/:Nl}
Z~n?v
kXwO,
t!*?$)"
8m+]u
eU[Pt
2TN7j]
\xebz
lHTk6
!/6]+
wzhMOYG
V>3+j
nU`wh
QS7yQ
_x_"v\[
<^vS#,
A.#Zv
l3P?e
] up0
b>kwy
+W'`0,
Y0CXw
Y`ka}
os"[a
_(?2Y@
<BHo'
,_e3iq
ak\~"G?
9"fajG
=4_;\
5i7.Ni?W
+1Ue+*
UC8t"
&mnMnP
7=o6m
3^?}x{
hUqU|
TL2_U
/.At+9
L"L<>
c-"k[
ay<yf
mu3<:
,YE''
67&Ee;
(t0(~
/Hhi:
~Oi58
&Hb9X
S%"Fx5
ms\AY
b&*ll
EtH7|
WL<7P
!'^&w
!*HZH
;+z9IY
:|)=am
[wa>_
kh(h\
We\Ts
Tn3|K
*SRGf&
fSQa>
\j7Y7
#+bP&
E^>"T
O&'&C+
>~}7G
::{xXw
+)Jt"B
k#1%3
&Jk=)p<'H4
]9UPJ
Cj`[]*
X&2A\,
.DEFAULT\Control Panel\International
e0?!h
}\QtyV
JpU/~
PH)SV
^^O*|O
<+|Y@9yf
^UCPW
<=:<r<]'
rShB3
97(?86I
DWghm9
sqgPJ
lstrlenW
n7lTF
N^Nv_
im-<O
T1/9kE
zgCka
&#^[NG"
,&T#0j*
mb1x;#
}"14EI.
!lQfEq!
T~kf<
:Kj=b<\}
23 Oq
0XMEI
Comments
cUr[X
7hk{ax
P7*{s<
(8K rq
MWN.i
-iXH,
A#LP"f\
%~hP6~
:6MOe.
(Eefy
VSu{|
;l4c
6ey*8
0%<C{
&1ymH
Bj 9;
?=]9t
N28h`
N U[_
F_0:v3
T^I/_
;LrseM
_Sjl,
.5uh<
BGp{4?7
nCSV]
~Vze-
=: w-F
i'Trm
naed4
;hLcT
3_+_q
SetErrorMode
p;w!-
4#!yx
Z&7C#5z
FKqy0
i2)Jp
*ZN+e
MDj'5
k@"kd
A/,CD
_A>VS*
5yI0V
hR=Lwk`
I%@29
OG>>R
SHGetFolderPathW
>,+"2
3[v~BH
C`S6.w
jPG{iqDi
&i"k,
n\gS)
3#PfY
SgyCQ
_<m_L%r
AbbL]
\aUY{
U6JB3GR
e-17}
AVdTd
d*cN6
544S$
rA7UP
NiSf/
KTlt{
p=JS"tn{`J]
Oqhy:^`
ziy=b
xWb~I
j:zka
j-9W>^
0G.Ob
KiT*t|a^
Bo?lW
Q<Gkfz
Yx,{<
^B],S
+LOh~
OftC/Q
iC}qbt
N$*Fn
,PcJsO
C W<5d(h
2qD$L{
t0yAs
'E5\*
[\\H7
`tU&v
2hEW&g
`r-"]
AI$R`
>Yp|d
fIrYv
:H|y<i
i$Y&2
ca6'.
oqFb)
YvKl#1
ev:7//{Z
i$=^F
n_x#U
jv1Za
d!+0"
[[mt(/)
]!N@m
v6byV`
\L(<>
80bj
.m_u)
?Vru#L
k[c4`
jv $7-(
E@ICX
ttp]i
\J5Qu
,6(A\
mmf97
A~6`GS
H=f^'Mb
S5On~
Y<9Yz~+
c0a;l
02S{:
FVK}7
A(*>B
~M4wrt)Nm
F!sS^c
.f\%\
qD)bd
t/]WH
{D6Ium
9+rv0
]^Od>I?
54uv)
jLwkP
)B8='
v/aM<
"_` `
?hO#-ZLt(
VERSION
Y=H|U
*#5>0
&`!vb
H{Ki,
w&5w>
hl81LX
T$Oj?1
Y6{[{Ip
oe9*<
{5/&>'
/Dq}G.
P`"BrJ
'5e]5
%k\@Z<
wnp)7
U%g}{
b+&?J
s?a9*
7_2|@
T\:O
J}yZat\*
\H|Zz
Eoc&{D#
.4dzj
K#_ZC
o{I{N
,hji>'
=hL+h
e%:9w
{fN/e
fT0nC
sXyD7
DR|h]gZ
cY$Zm
=f#oy).
]wuS!
HS{^w
{v=P)
7zl,\
L8&/G
aC3+E
QIioJj
BwiQm
|nRKN
:@m/ka
zAyS1
,0O@n
Lp(vu
5B`Vr
1H"5n
w2$TS
uYxq$
1HyXq
g<SiPm
J@6.Ms(J
]]{(g
;"OBt
installer's author to obtain a new copy.
-OA%=
TvdJj
'Uz"h
0!gsi
w}Joc
#3"7DK
B|dx_
d\3l|'
wU!1j
{DWk)6h
S{\iCvx>
FR].N
t+}U.b
1BHI`I
E/`c;
c682_
Sgh2Q
gyyiT[
cU"P"_
ADVAPI32.dll
`o~y.
*$HRA
cN;Pn
evfn?6K
lgf-{M
H\{~S
}cwp?
i7~0Q
sp|U!
A|KBpk
HHn5.
jsf?z`67#q
B!{L}
=2rfv5
pvl&b
1PS7>4
c:/NA
7K#'B0
fxlFLkj
I[?ak&h
$+/*h
N}4F8
%y\zj
u*e_7
}o1#<$
7P7l=
],m =I^]F
)9fP|uV
YfRpq-
.|Jf[!
d[ N=F
DN{T #}
#~V+O
IE5I*
SR#`d~
.6tBR
r1sbDZ
q{<:n
vDxa;e
tBAH-'
p._TB0
%h[<r
b%A:PS
#X#-z
73& #
$p"b0
-Di>EV\
R/p:4
6^O;&
eon:p
,]9@r
Cg,=J
x %Q.
bwD\d
0Ai;y
,ku5woP.]
'([-\
k14.M
^zeC&
c<|Xk
??l^m
\S}b8\
sHSeY2
7M50g
8M=kE$
90u'AAf
>EztE
4|)?G
N9hv]
lEv(X
6BOW(3
N|0a#
@MG ,
pv~)0
&hj/=
_SW-0
~lNJ]
<flc ~
8*Am5'
ShellExecuteExW
XJ PR
=FQ[L
WWWWjn
(pe;"_Y
N+bjW
:QuHS
WdGq(]
/V$,~
p0k\[^N
}v[Zo
f4Es)D'
/ GU!yxJ&
{S!]p
NRw3j
Qe$XK
'V(&a
[vsC;Fm
%%Akk
,d/x%
\Av51
&/sml
3D}m!~@
h[Q+B58
LZLg@
8n!Vj
M`E9s
8aI3Q
u+iJp
8r^3l
(hs,{
DEC$X2
1H~vG
U_ta A
m.{tY
49{mV~-
fZ_75
D$,+D$$P
p4~p,
b}A9y
(6@!`
9vC#5Ni
uOx<&
SC)\N
.Q6';t[
AJCSs
]s]L\
~)fC9
jM;sK
ItIsV
R }^HQ
aB ~e
l~|Z|
;o%^M
7}qpb
bY~D!a
=UW%(
b_j&*
1]lBK/`
#_,_S
BFyqi
J"NG?_
+m]EHQ}
=Q;u~#F
2LPg+B
>\$h6
TBOD=
Nj,~U$
S3bDO3
(!AJ<
,O,%)2Z}
dkvt1
,rkfS>
((L0,/d
SHGetPathFromIDListW
KJ4|x
vh=2A
,<G5{
w/Xxo
3cF}y
Y22?y
vg.Fe
$TU.05
`7NkAY
l[MB"
"{tdP
pl(XwX
E\#j}v
r,Wp=
<9xU+
:)h]l~
sbnl5~f
D=}3q
R>`mf)
dS<l,
r)}p&Qd
sB$\YD
33IzS
G^<rv
"|2?H
/77o2
H# p-
Pa6\!
yc+@v}
J#JEd
v3GQ?,
mcm.*
'o9|"
0 Qo;J
]d'~G
o}Jnm
FJ&D1
|WtcO+
:QpD>
v]vt/
U$[b\n,S
*gs~e&
.\kj{
q;nYdI
vi^|rF
MyZTA;
Eh_mk?
{o(.PD
suyn4
1ehf,{
YU*pa
-&/q*
HNDZS3
,`LU=x
.c>>1e
,e~HI
'4CoJ&
_y0*3*H
{|l[*
@mRTZ
Vq@.gz4
1Z[wl_
o:0&,x
.}zNu
AgVWf
<IVR4a
H2}G|
H_. }
^cPGM
lstrcmpiW
/W/{rk&
>$ACP
BL,0T
b^<-[
w`<tt
B>=i$
5"OqRm
,hE6W
ADVAPI32
<+"Ll2
?P&w}R+Q
tBdt;
4_ALV?
]7pj@
TB_$c
<PdKy
:-a~j
dByx(
LegalTrademarks
*L7 r
Lt,a$
^4Cmf
D=,'7:e
SHAutoComplete
P5hhx
3`EjH
M$:t(V
k)Q+h<`{
154Dx
_AE:H
&45<v
m2;CSx
D.w&}
b8HDK
n"bA`f
FFC;]
ReadFile
=~]7B
J&|1;
M/'FF
[qVgk&
UV]%Mgoy
=_\f4
{S6|NY
ta@[$&
RegQueryValueExW
D\&C|
JXAHkce
M(8!qG
_b,|!Z
})NRA
LNv$:Wl~
9 ~=4
NulluN
6!(,[
Czg4p
1n^pmCP
UT,ts
DrawTextW
rdVL^
EtG1x
'!pV2>
E^9;b
DO4I?
5)QSJ
&hjrB
<fo}6J
%-c(O}
ZXDAN|/
p0uZp
LM\kf
r"4?*z
X& 3O
@cf9Q<Q
ObUm(o
SRmPc
p('?N
6upo3f
J)=r))
b{}s#
\4=#=
<}U@yq
L??up
0F:?cI
>cS%?#
z$Go=
<$/Bk
3QazCWe{
2vY0.>
:;coAD
[c+)rW
GlobalAlloc
iSX-k
6'<E5n
PROPSYS
-'a9r
f)`4G
W(2# -
039T'Ox8
=hagM-
$R;^z
A(*6M
k.Tu
*nIJ*df
=#8/-A
=Frj,|
[CSxn
Q+|<S
@5}us
e$S#@
Error writing temporary file. Make sure your temp folder is valid.
XvvTu
<A#8x
lJG _
U$`C_
@Ue,q%
^ d,"
D7mx=_
"[Movt
6VZda]
BSGhL
*kABb
DE\qM
[(Jy!D
HP@Jg
]=!9UFh
Nov-\
Cb&[_
[[#4=
Rj013
0:c;*
+yK1\
.M"I]
PfD}N
={'[p
5Kf$)
Y "F^
>/zBl
VSX\il
<RXgc$
o=U`"
ce t~
vpbmt?)
86=qSZ
/Qj\Q./l
/)i_P
m#8J>W
jY6o+2&
fBx$[
ZZ=n88
,(7CTD
{$h:va#
6pYw(
u?gV0D
i~_t`p9
=}-k/
EAq0)o
'hX5S\O
4_-Nd
Py$*c
S4,4\
jXU'/T
E5!rqe
j>&Zuq
fn]aB
w^ZH=b#^"
(-@RE
26 bb
0{&2]
{4ioN
wo<S
b^J4G
_K2a?
>+{Ib
:?hm(%
<2mx/
HwzO5
71RY&
!|:g4
}X8w*
gjK.kZr
`q^{Ii
O9KA;9>
GO/<H
SLu;/
@&fZo
%H/hD
*"!z-m=
X_a=Mc
WjOAu
=QR]9G
UCkG&
yNKfgv8}0
7hiuU
rVVUw@
c5d-mp$
aB<9u
j12(}k
(?tNu^&
[ddf\[Q
w;wA9
T!jhKC
< 5eakk
?2<H#
Fi!=C
=ogx.
eNfN#
3YT#?u
$T48g
U5VC(
L_z2S
52h|7M
b"#tAgxK|
t$dDI
t;Q@b.7
cX\xPc
L.0}p
X%s"T
@ku97
.$iaX
`z67x
0wY5{
24hHv
W6.-H
}>JFz
'K(Vf
]8IB.
P$U|<VMW
nvM;k
=4b!w2
;fi$d
_"prR
Mmmy5
%? E>
r]S&y
jt*/Q
}L7e1
e ?Z[l
KT]9c
F?,wG.o
5\8vGW
7d`r8
<oT2;
S&u<'
.'WhP1
|^C'T<
v-4jL
S2@V>b
:<3rs
(e~a)%
2C8c2a
o-*UQ
H?oc)h
cuKNk
|rhZ[
C6F|0
SetWindowTextW
U]ZlLH
opgH._
I=lu[
COY11
[\-R5
\/Vty
A>N+,
|@&&p
C=>TwU_
,iVp;
= DGu
x"7&Wn
I\\x07
HO@DFFDD'!"
M\n-B
1I}QZ
Tf[K^
qO@_}
d}9ve
cX=*1,^K
EnableMenuItem
Q0#iW
K>j3@
U|{gx
2E|gZ=2
YJvIv4T4
H"aiz.
qBgNYs|
0-ID
js-Zv
FkaMBv
8||)ve
I6+YT
}|5qy
ETnj,
L&8_{`%e
/R=BM8
1$;ad
QJ}7G
M!@|J
#jyqA
jS"5b
iQT)-
S\q;o
rL+yfV
8XAPH
b0}Sd
S<=dg
.RxjN
k$x:g
T7[_.:sW
|4YN!
i"}M!
ole32.dll
%bOEqM
4tuPu
2a6*U
=1A{z^
'z[)e
Df\yU
^){|M
J9Hzr[l
5/4'|
JNkX<
:cA*"-
JFar2
lykxC
u gJW
-<>$z
E:LlJ
yFe[$
VfmiA
kX%03
Gr(# 5
+F5FM;
GlobalUnlock
&fwC?
IqEJ3
FC9XC=
0"8eu
s3Hgg
e~%ga
L_@`m?
x&D<|
2"@4=
|D('n
Y9ZPQ
Tk*!L
0DI"~-
! TJL
+]6bO
F$rq8
*tEEWO(
I tX#v
%oDVd6"
CniWRO4T
X$S?I
2fIF]
zVs*L'4
XV^S0
`0{/n!
lOG'I~
[+tPy
{nbgd
]i6;<h
*0 =*
o2nM)
NVd{
%]//&
z)2}aa=
#Wx7`
x[OFf
M.>}1E
!%r@C6
/6XE~
483`kby
E1Oq}8
_F9("F
K4=Jc;
assybogh
[@ogO
N2WUIBIikK.28
xgPSx
G\llG
QrXIc\
Ho_XZ
lz,EEL,#
djM$7
mo^St
Z\rMM!%
`Qr![
c,6a4C
/qXY|
|u21K
Ab&wPU~
D-Ie\
+DQ>T
28[aw
Zx5^I
Ufq#$
P(.&N
c_#:t
rr;,k
N$VpC
S^1Z[
( G$t
&8)!'#
dG#te
JnhLf
1+1/mfj@v
^Qmz9
{~n*v
a)L[W
LJ'VqWe
>u2-Y
S"+>y
+:k(X
hrkf
"H,c#
H1g},
3;<0A
NYtpI*
,?j:\
f&Xdz9V
$l!v,
5YF(Y
V3$F*
Dep$>
+E._,
O)&13(
e?$oh
`.jLk`
B=#$@9
u$<eLi
*vgGw
]S6}eU=
+rx(P
#Mu#@#
$f`Xg
;C[2j
e3Q:1
G=<]k|W
HMt)"6g
"ksVp
I$0e9
Q~*"6+T
wnKdbk
GD=0f
w^g{d
7COI{Ib`}
q9.w=bw
f7f{I
P!y^-
AGylY
Kskk7
u3(IgN
0ATSd
xE?ds
KERNEL32.dll
=rX5K
'^u_0E_wp
9Jo,tj:
R~A@B
g4flZU
Z;PX?
~6)63
PaNb
!hni`a
<^Y#X
<d[b1h
@v>g6
/IX'qREC
O*^RFb
=h{%|
9#Pf]
v[S2I,`
b1ON3
|<V0L#
cAN^<?
P`&(#
p4I;}
*n\Ca
?1,b(
?}v'r,
iB6~B[F
=2F($
IDD]t
s^f^k
Aq(%$
v?%_o5
p2]KV|^
CR$!UB
`Ax7"
c74$pf^
V!-iE;
=]ar$ezGc
Jocz<
U.<:MWBwbI;
42X({
,iq]%
LzR*/
nBim4
C=1V;6+
0Tic,:)
4\x$N2
(9_q3
A0+wC
R}.[s
?MOv/
V,}{wT
7Yx^"
t;c%c
F .e$v
=51kzL
4%0b_
vFp9sK
p3*)}*
83_{N
B-f9fR~
2r.S$
7fdtpQ
s~HcI
UZJ@[
8RfVj
Vj%SSS
KyGWBE
/1/VQ
@34Mr
+U/~u.D
udNmv
Da1@-JH
3 qp1
fW{o4d
Uu|Dg1}
SendMessageW
@dwE:p
A|Y?)te<,
}rHYY
92wXB
&y@5Z
0E6Ra
d\N4IP
uR@l%
/\ T[l
XM7%->
%))fS"
+wv(U
T&%+3
9,S' 3A
SVWj _3
+3Rm
zq51*
pGB/7b
JeN?0
K9_TO
y/&I<
(.k&|
'Uut"
1h"M2'/z0
r"h02
\v?X[
cf,E@8
q'@D"
}g<$0s
eGw\d
i,V1b
7'|)]
;][3aI
]3BB9
|fmD_a+
@fl>P
fV*+Gz
s<3M-
{J4ET
)0{ZI
]$=/Y
p=30{
8}o }
~0nuG
J4^|m
U.Kt
IsWindowEnabled
['1b9Y
|(]5Z
Sa>!3
ENyJ=?i1
GP}&hG
<O&q
$vgU-
Sd>9Djo
[5NW**=
f ync
.?q0r
nG/P,S
7hx3O
5I&:[%
O;HU]
O8s=l
E>K{?
N5O]@
e;kK*
Fy>%Z
uMzG$S2
nmVc"y
&dFv(@
u*]5&
Dd^q|
|vYl-
_u?c@;
0!qQc
z8aBr,
Zw5>!
UF}//
A2#D)
-8OU=?:
P/ML5Pl
XZf=Cx
i-TK(
$t{CVC
Z0M<~ou
iS@;2]
T7;\~
u5N>}?
ftaF7
zH{dtT
k6i.<;
/4kpy
7kId5e t
wI0s8
KaGa[bd
[l_set
.]9qF/{
"cadn
jnX-g
h@Byx
]xzI@X=
lc2h!
f1'TR
y:`X1x
zMG`}
R9"aT
K20y~
FileVersion
:H{nV
O1FB3
N>m Vw
eHBo*,b
|Ir:7
h@FQL
zQbtCO
?ZMJ?c
<GW\4
r;1la
/iTqYYk
}<V/9
?s42dy
GG-s~
khSVG
QNSfef
S^F)T
'G9sx
%P<O>
8XnT0
zc~?R)t<
c@G0Ln9'
3yMPY
Jk-Lt
aY;h[
h.K;]
"3i=[W
_5nCC1
Q;,I%
ri]$p
+1SU.s
JUVIJ
z>nM|Tv
a&{E!
fo?6W
]F531T
p%[1?
LF\vo
(KU82
}[KK{
o>A,<
^ j_9
(}ve2\Q_
sTSV#
D$$+D$
VaL,Ku
ehv2v
>'jxD(
_7GA9
!Oc-)
7g[!)
s?gn:
WinWGet+ Portable
cpj]7T
?R>XR/_
;,S$s
"sgJ?
Ay\\Y
{&d';v.<
S2O09
$1\ug
P>`"~
D(?6.
>0VI<
P=3Im
OkwNXl
Q\+,X
N#1Xm
muLRP
W,\"T
P^~#wf
Sc:^0
X!I4Z!
g*H'O
{Q)=ihe
Zh0x&i
QWeID
CdTttt
CheckDlgButton
-#'k]
["zR
1-RZ
/I8Yh
=*QEA_
'53/ej
t2uuA'a
%f;dw
62'3j1'
9nM603CIf9
\V:Obj#
d+(]z
pZt}t
9=8gD
68lb|
G|-5;
\j`xR
aA`u"
w/['>
DeleteFileW
;T#1B
NTMARTA
,:2kX
k@C,a
(D6O*#
!Exs-
F9Hh?
?:kHK
D9,u,
2GW<+}
%;y[`
InvalidateRect
[&l!1
3Xp.1
T'k=P
GTW69;Z
A_bcB&
b-;0Mr
`t#Z'
k_xaV
Z4864
8<e_s
+ *4\
F|?t6
uKf0E
fiWWg
@+h^w
u;MgM
7Y!Sg
q8Gl_w
`5@](
=9t^t
? fJ#5
Lv!\2T
|~mtZ
3LYfu'XdmtgK
nR1p.
@':4L8cD
^)fh)f
yQd75
@9%HE
BmAS}
aR RS
_E{C%
T*jYc
JU5/)
o#E=Es+
JYspE
}9wCX>D
_OC .
K\pG\
4mU08
mc"pc
6oej@c
!:21q
V'pzl
?2Fcw
_ii"9
hbP@4
>)<0B
V/U4"&
O(uL3
l{p}|
=d>t1
w3<"=w
AU"e)
GetDC
L.LAe:c
kyq`1
lQPv58^gv
cjG*t
GV(`kZ
G ||x
K@fam
#9iA.
5(x#9
qTK(P
\8(xH
;8*wEZ
nc6q6
L+u5;ae
@[M%1
~Be`@
_Qh_*o
i`:+m
;C\k"
$wk/-
i7X?1
7Pv}G
FindClose
Q2c`g
_M`o9
CYf#z
<{,Y4
xTK`w
MulDiv
:e)0s5
c;yl]:n
1?BNe+
[=oF5
6jSSN
rDWx;1C
4=h-H
,GLMC
hx\nb
\m5_NE
aCj<#
HDG[X
o4M1>
%8w cy
P%+GW
59bP]
RegCreateKeyExW
vX95h
94[YY
mf>F-gVuZ
O:fLu
B1:N-
|#t3,K
IBWKt?
w}vSQ
")X]:
&17%X
Rf>tB
]Z($:
uTC0>E
s495
0xdT?X
Ju&2^z
l0KJX
aUTu"k
crV&%.
2N/<nu
_:tzF
JQ_i5
KOgx"
UBxY1
SETUPAPI
,#U_7
9$|?S
ji>S2
vSH@al6
@-5&C
Brzw\
vpw/}
V/@:0fL
CGzz}z
-.;m>
)7\[9
9X8%3
l5z:V
lPjjG
5/l0SG
}W]8~
OA]]5w
1w\<;T
L_dBF
/7JMZB
<0:08
'vtwDJ+
DGX[s
jKel_
=7+1JD7cRL@
k@gam&y.
6'H,63
YkCr=
.,nKB
oKIbU9z{
k(z:c
+_Np%
WwtC'
+>Hac
L3kDU
x}cBN
+2NbR
,-hyj\
?$H)!Z
8CN`O
mMBdi
ekID{k.D
>3b"U
5r_h%
?31d)
N H]4
CoTaskMemFree
AN0'
~k=>M
Ia%z2|
<YQ}Y}
[k5#9
[_T>5
GBy2m
u*(0,
$Y}'<\
ST8n9
%Q8]'
]P%i+
M*a+uR
r6 Wr
zw63$Y
##gxK#
{|#Me
c)[[r
5K|10
&rIe,
qQ]0\
4FR.q
3:^Pm3
GkEZ
7qXG(
M3)R
GetShortPathNameW
Jf;tw
\d z
]^]# !1(
/PySlv
Qc_w<z
|H^3k
/6Mm4
w.&e+
>Rq{e
0g3m@P x
@Af]WY
*1TcM
hQS'^
lxC(w
[QHJW 0
|Dqc}d
$rC^V
50{*Z
3<OqW=p$
,C#JN
]2Y"0
&9>um
}nv=f
0.20.2020.1212
fP">0
Yier<H
N*fF~eEA-
Op{zg
8uDiRB
tM*0d
p}%,\+
IH&Y{
:{Ivo
@ chC
)Kx"S
EW<XU
H'7=]
ZcDdx;
?(O+%
6pl#<
7'\@_v
hCB}%
kXlLY
Q88k0
!W<3-z
##e7.o
o(MPT
5?/)p
z\%r6
n` 6f
6(t37b
mr8Wo
Qo7E5
APPHELP
0k>VD
@Gatoc?
-[ow'
@koLm
BmxcR
746!%%A
.my=#
dKvC\
SVWj"
5UcKlaY
)_U5Z
6([Sh
?%9y#
1"+L-Rf
^xr99?
9kPx^
CreateFontIndirectW
_j*]ltR
P|]YH?
.!io&
7tK3#>
OwrJ=F
$9j?!
LoadImageW
b2QX.
\>"S8{
}=E29
CnpOj
X7V[J
Ew>|RJ
hINw1
q#1j x
}s+n#
ZP&'#
mI|;R
9p,Kb
XE)NM
!~qr}
x/[L/Ob
jM{A}
t (5+
| 2l=QE0
%LHxx
HZn~H
q}W6&=
;/3G!
.8[ <
>_4d*
gd9tW
.ddBx
J8!rS}
@vi^I
)-}N@
ZN<dq
?JIS X}/7W
p=G?XW
[4$qW
dKSYt
{\(195
f7d.Sw
hw!LG
h7kK7
6=Im>
O>L{zK
.{]ZMS
Asym!
ffRxl
T7y;T
ns/?9
]|`&M
eVU ?
#iAqa?
("B-f|G
/O5Y}
@UKpC
ScreenToClient
/0POB
7vGrg^
-068$
SpqJv
IS9bMk
|et4"
zXLNZ
"dJRk
XPvwU
d&=2#
mxe#Q4J
P|8 |!
H<//xq
%s%S.dll
>fM2Ci
AUCOw]USB1
2z+_XY
r|4HQQg
udS?}
O}=;+@
n>+mN
vqecr
EkAm2J
MGm^U
Z/@BT]
~JL_"$
M)*^7
nMBA`
CWVWin|
FCK{YY~
SQHVR
kgW.-2
^Vp^'
ET(e%
d|7ui
D^uJ%
,qbSDK
IW{3a
{Y*LwZ
Oj/4$%a4
6@l1V
x`ZP
'Q]ZObbh
ProductVersion
F&/>$
g0e0>
W4R"R
IK.PI
;:+_]r
pE\Y]{
ik"/6|1g
pO =n
<_/Yn
3<q.yC
GH$.R
}pwGy
+-]q8<t
).Oz2
+i<6x
_,Hy#
)xr6ZJGCoy'
@P0WHj
"mxK#4
);)Za
RichEdit
^OJN-)
;onDw
Mvx?20\
"\h#w+e
xE}\vNa
o-U'#
x##Q!
zf9$LC!w
baDfG[
-.Y7)
<pS3
Y'w :C|P
IkBye#E
|{!aX
VzZz;#
q:',i
F1@I[
y]4Pj;M[yD
STe|^
>J3I
67P*8>/
XJ@1q
GkcPUU
61a-k
XsmG
_=_!q
.2=,M^@
DPlF`3KgUa[A
4Ojt7g
!l|]R~!
J,R)RX
Jq`gHl
:e+wM
q2IcE
t<jo#
yXjrO|_$
~e!:X
dVhW,
+|/:
Di3)8r
CoKU >
Hoz.3
tnyU6E
;xjLg
r+s_]5
C#85Bnc<
CI@!M
[+RG,
$ S.I
w?ul5J
No}dsW
@g 58
Tu{|r0
FYmJ#@
=Z5l8D
![@lU
h;]{Go
L@(IHB
YuvdO
_J;D'
*2~-Gr
jZ %g&j
T2fJ
o>NWE~
;II3*T
G$A0m$
IM].f
+{^Iy
D2l@R
:/M`D
k*&v~
%WLD/
9J3Lca5y
@l@=+u
_*D-"e
rI7Z{
4GF.m
X)^{#
pI{"E
\Z},P
U6kOc
,+vkR
sW^OH
&\oH8
+^9'O
}V/7gn
gNq}B
:lze],R
c[$Yj
\ji%)^"
d4u1v
E"2qIm[
CI[|S
W?g)P
52fEu
~{~.q]
Nfp^8
kT@=L
8HsG(
;*uj"
m!`eS
Va`)`
)4y&}
GH}M'
p]^OR;
(9KZ~
lgv@]8
tl3*E
c.+=\
DZ9l,ao
nOTM0
ZCk>gp
.QWjW@
nD=a"
+_0dB
(1O4=
MP!AB
T{B_x
RcuN<
pNH'i
hdD-l
SFP97
*a?T^
i^s"L
s/ ~2
Sectigo Limited1,0*
[r0s8
&[9IB
'Cei{
S^={h
h/|~{K
Lh5HV
sclcf^
?+dNl
B}_2!
s4R-T
%b?"r~
AmiMr
#,m@w
,\mo9
\u3Rn
,]kmoSt7
J=.90g+:
nxp@{
$O27hh
>7CZl
_Ie'>
+67s2.
z2W}I4
^eR6f
5d[H(
.e4{w
*Ujrj
O@ntBz.
r9R]Gz
&B$}&
Zcj#]9
`Likr
"T|Fo
n)Zl<
_}[Jt
EbROD:R
}as&"
K\:i-38f
ShaQ]
4?>i9
<U_jg
m]iGfp8
{PUad
=\f7O
X<qn%
{7<or
.Z?{0
[n2.*
1J"vx
=D9w<
`.rdata
4y^mt`S|2
E>&4C
LnKs&'
#jYhRB_
l6 8V
'+V `
t_}sE
]=q1&
a(myH
V[&E4a\
S{+,T
RegCloseKey
%H7X{
A1KPR
P%|S:
aZKYA
"~(L,
Ks6&Y
pDQ#pDpl
]5vCP
w7U*S
>g8Zn=
pg/9'$
|6O%H
ux]6-
GM%T\
]PB9+J@]s
hgSpG7
P1Un1
LMe;E
| W?F
s6bn_
(gvFXx
=f^x1
P^Mo+
*ba'?
7m:h-
x{6|d
p%GDN
MwP^ZI
/.Ka6
B9 t&
J5MuVW
K<EJ4o3y
15Y?*
d_x|c1
%GN?"
c?PIJ6
oB.no
5VqXZ
iyF22
,yMm
\2X6N`
79Rf1
m[aYW;dr9
|xiLd
y>yAV
RL]Uy/
0IY%ZrY
wF.2b
f7b.TEH
#lu2N(
):g^7<
]Z_Dk3
Omrgq
-:"L4
oDlQO
[f<aT
$q\VK(j?
Ua6"@
g;"NN
AiuOM
pmQze
n&l3s
D (%d
LC8tT
XXH+(Z
ta=M>
WB_$d
we*RIfp
rh/{li
WritePrivateProfileStringW
uxru~g
zb58`
2.MDya,
(z<U/*T
Q-o4q
Vey%K!
zOo]H$_
ThyU)K
Db?[c
|9l*V
#7{M\
AwQo:
W\J#(
7,(f+
E=v72
*mN^g
2A:S-
jixj}s
IU[YQk.$
`}&4(h
\krd?
6.g>e
?%QVp
]RYaJ
\`.A9
3ns',<
(5GCvog
'_^%=
k#[jsW
Gx3cw
`9pmM
New York1
p._[;
?(w32m
,!T"m
(x&W%
#[#V}4
>Sy@?
ucG(T~
pe-R{
QP{t9+
BSHBf
Om'|M
-]Jk|U
CkD)l
aq4j"K`
>6;UJ^-L
SetDefaultDllDirectories
msxE*
DO0KK
F-6wI
ATp0o
b"njNa
{Y\hh
>leH(p5
YF~Gon<
&3x`^
zPQns
Sa)&$
5][j*
B?I;@;0
} 4 C2
lq6Q,
22Il*+X
%ls=%ls
@G2_l
*&NELr
~:+#*
/Qz]_
7>Fp&.
i0^ig6
ZKvH'
cXv|/0
xsF+!
dpB?IZ
kd0,E
d|~O%
@LSy<)
\IXaN
t *94&(3~NJN!
;i=j5
}2yss
SysListView32
6V^8D
jMr_Z
vE*w~n
o>pB+q
oC\.:%*Y`:
.nQwp
iXv+D
C sw2
YAV-:"
_I|1p
MF2NV
^#a5 a
G.A n.W
_U^IUr
+y-Yow
]2](L
gB{ty
&9n|`
6cyxRg
|gOaP
A@fZq
x/}D:K
**dwW2(
'f[_19
<FpRD
BZ({[
8{bJ2
+hjtk
;04R<
sG0a/
DMm't
#CfW]
zCN,/(
6">J<#
W[}GA
FCL)+}
dp& c
2UO'EW:%
pf$:P
/CuqU[
ZKOmV*vbee
U\H K~
6$ea5
v?^V%
#GTYp9N
=^!xN
unpacking data: %d%%
|gOVK1
h+rmG
.Eg!A&k
E>Shu'
BENsk?
;?.kf
k,MMmn
&r`%l
2E'`c
lMHH=
Ur p$
IWM1/a
B&=^3
W+RpW
b(q/mX
KM;6[
c+SyP
Lz;R&
u~E12
XTNc~
:.e=?%
mKybo
"w;@"
2V^C6;
tqO|2{
c;g%G'z
gnfg}
|fZt3
]yZ@P
QXv+iz+
&dj|2&i
fGu(2
\toI,
shY_c
SbBQQ
mt^Ju~
aWE]W
-A]k%
xu7A4{
n4Ae5
MoveFileExW
ei;B6e
&,-|{
"YX ):
y}czU
"`]M4Tm
W'&3L
)Ef{*
uj6zy
t=a"ZeKwd
tBJqC
XHspp<
m(m`~
s'?M9m
,{bL+g
~*"xR
49zE;?%H
bY07^
jVhgs
rr2C6"H
ye09_
;-6$]ZG
F/7Mt
piNR#
9obs9
B'h}u
3[:7kG'P
E<V$q
=p)+Qd
5o=b@
alQ7w
Nr!}_
&c7H^f
7A;5w
76+[%
T0?!a
RKApD
T4d"P
)Xn7ob"
6@2',
j6:@K7
t-Bo'
}8F+yu#DC
3JIge
h0+gk
66?c%g$5
}@|@W
'vbC?
301231235959Z0|1
@P6l>
fm0]f
{>2A.
wX9vj
Z*jvk
+aSW;
NullsoftInst
V# [4
bA.[V
Y=f6'xc[
t$,VW
=;+Ri!%
EfhMF
g_9[{
hBir/+M
mv"ymH
]K|tUX
;d,X#os}
-7?eBW
pvz"=
`]ig?
/U3on
RMMRIB6
^b0q>!7
anQp]5
gu:v$\
ml*qrw
I0G0E
'59\t`NAn>
3Fa8B
.#~~B
C,c'R
GWO7K
Nk+y#
%/8f8_
$CvYk
(WaQxDg
Zv3zF:
HO4h\
%b%&S
Zsw_%K
)`S`7&}
qY+KV
201023000000Z
xyQU~q
2n-Y\
LEVJ{
Ls=}Q"
5;EX0T
y+^o:2~
Z~}x-
l_7RYz
VjU1P
Xq3x{@
,RM2:
TpdiT&
3K7{C
m#7{I
`+fYV!
58&Vi
A7&s2P
Kvs~:
9};Lyq3
n4eG$
u56?<
w=#\c
"*:#
7ZvqC
<`48 f3
5b{ .
y<^lw'.5
_*G`1
HC3ta
+)m#R
w?]f+
K|2r\k
9RBmS;
:3Pw.S
;8(hL
GTc[n
9/UMj;
>OM,.
2(x!Q
PPngAw
X^Pe0
z[)b
;Pq,v?_I
)Y*(5
+;b@b
K+0C]
rQkJuu
[+LOr
zD:Y1
ZWz"w
_E0Ro
kl@59
}620:
l*si,
ZSbYP
aX~jC
-=Cy:zG
J?!Z?
FcGU-$o
HNFX8
g\dLl
ae,A{
Q:zFq
hvJ~A
Rp<H4r
lsWn_
gR"a,9I
[H5o}
J(^gGf
a;TW8l)
PhwV@
E<z;w
1SER*
T-S51
ejr+';E
a?!u.K
g4I6n
A[9}o
~BXFl
gCeJ%3)
!#C[o
;j+9>L
U]84$
Mpu/,
-wJ%M
ec*eaj/
1Qw8I
(K]dx
0@LFZ
|ccI8
:v# X
D1A.)
RNJ&
f<+n;
rx,}9
Ed`!z
D_ ]Q
5O-ve^
3^ $m
EJ~EJ
_Kr0Z
.27&b
3U:n'
!{@_+
2aj2.
*M~=.*L]:
gx7+JG0
{ETl<&
7_0"M:
5Aep)
B.,?t
SM5%a
Greater Manchester1
Own&(
KOs'xS
ghM 5
}B1}=
(!qhq
#[K.
o}e-k
cPO/U
4;&U[
){mnvk
>L*R"BV,
yX,IF
=|EDY
^I&5vTd
,*)b'
>ctzO$
:iH'y
gOpJ|
6o$yB
K*CZ]A3
gV',:>
jQg"-
xE\1{
!at+B
tMq#]
|L|KA/
MO;>j
3~sl}
"|CU^
m/#tZ
?(hd_
^"|Wc
cw&AL\
W_!_m
XCK/@
"&y1v
DG9P[*
+BhaTCf
FL/TO
Qkk<H
7PhT?\6,
QLxH;
f`nrS
,LC$g
Af"`K
+s:Z'
~f'0y,
8Kd01
q-S;6
h`M^!D
8+6"3JUI
<$o{vy
+_/Hi
o{e$M
2<Nys
6l|cB
vk;5O&V
6V"tP
tcsgx?
l!l]=,1
;BxH"
a$2f3Su
zX.BZ
l;J'M
e RNtc
?5\$.r
RJ*<1(
"m.'6i
@FJNIdU
l2DIuI
mHW()
j$*^mO
%@1j(A
E4hknU
ty*Lm
o?|K%
jA)N7
gX"o
I?Ezf
pJT<G
o}/"%
!r\#@F
13nL05n
Z[7R0u
qV@?'
NCq/\o*
AWRB$
bBDbV
O'2|!|.
a`"[0
kL`hu
k?Ko\
2HjeD\
o5Ek
)&z",&
:F15>7H
E44n#
M [3W
-[WOg
d=!Si
Qrh*C`},&}
z@x/W
V:\\-
p4f6 Vx
H/AsF/
Si&tQ
T9~1#
ehE7b
[e}{`U
^}4q>
B<^9J}k7
:W c7
,bnZ@
@/@ao
0hPI0kz
*:)Q#
e2"Bf
y:M=C5
8'> +
7q$@(
VKiMVh0
OriginalFilename
5On6C
q4B^7K
;MM%b
m|K4J
4Cn@pF
%du%YDJN)
EPye/+
~W`:<9
N&emiG
d%ton'
)s0JQ
9!^xSn
MUD"E
a8t30
aGNUk
"[%jOoF
(nVPEK\
E|Ln[
>eAAU
?:^.J*<T
n0Rhm_
}<F-Gfg
d/SkUB
S^8C:*
LI#u=
o}z'D
iHC(6
6iakn_
fZP}w
CWd0>
R1 v`
_$xaTc2
6?1wYp
m>bt9
BD|LRS
b 3w)
[c]xF
';9DSn
nV2V^
h[1\!
&R68o
ELJs;
c4Z@4^2
#Sectigo RSA Time Stamping Signer #20
*!\vf
IQ-LZ
9H7:"H
+Um55x
<a2NB
#%lHmS
"iqE/
phP{]T$
HT_$n&
Kl\&P
k1waM"2
)r8&:T
tg"*U
v+}KK
C}6R0
{EOcL
*tjk4
@#$]0b^
w^}CB>
v+9IE
K~sgN
2007-2021 PortableApps.com, PortableApps.com Installer 3.5.21.0
gS+.*U
hz5Yh
)s-X5
36M!F
rwTG%B
d>/nv
R0:Vc0
3C[@x
JteJZ
<:;t54]
=mkW4Q
BV@t,6
F9v=V/
1An?E
iLC_0
1I!SM
VWbRNf
~HZ_@s
3E4.\
t"qoM*U
P68,=
$t.CM
zr,l/
/FNrO)
d45Jk
DjJjs
Ck^PW/
TU]USQY
x#X[+N6
HJp+S
M$2B:
cNdV/
zF/ J
D?CL&
CharNextW
;Fr]Q
8X+x&
o0^9c
1w:1S
JG/hP
Z^N,?
p>MZeY
PZ:XF
1x@+G
+"jj!
ib@m|
Mp:v's~
|h#E\P
yk[P.y'
BUP]H
cYo7d
2r|z6
YW'GT
QUoL!
n>cgo
P{nlmP
o."w]$
,pD:b
I$&=%O
7`X3r
OEg]<
SetWindowPos
O|{Kq
7"u$E
nZC&ur
$7c*`
'^^C4
;a]wy
cb.mB
lmg{yl
8kQ*H
{LysO
^2\{j
=0;09
:_4F0
@R!bO
v5?ZN
3;IYB
O9zoFC
(0W=\
}B8?Ol
UO}ui
]U~h:
sW.-L_
Ewoh$y
s[1#s
>?D ?G
0q=N"
a'7,_
rMkDh
MhN>|
plb]K[L
dcDTBd
)f)Y56t
kwBE2
}zvSE
0*%=GS
%zmH.
=F:?c,
2GlC|
[Oc{0
@_^[]
"6m!eg
G[,<W
:;TG(
,1=2_%M-
duSYi
_y(^+
pl`.M
QZp!e
{8~W7
te]0Wr`
'0o?-
mjqDo
H@2S0]
pOU6l
:.Sh0
X"A`7w
\-;hZ
(*^cCCk
/&D~W
gtV6S
{1X/n
Vx/!Oc
Y lyP
+s' o
P.0Y<C
uYC:1_eO
"k{%!
sz-kSw
ip/}`Em
@zDYH
myBcU
{^CR\
]b&arx
$9b{o4
9BSNx
wjw1^
'4JQoEC
Yxc)(
A7v;z
';Ghr
)koR0
zR3>3
#D%4k
]FuTQ
#^pv<
qVr-K
/zK#z
t,C8cBZ
IVmli
Zq4J)
Og:hXa
'Me]a$
2&-jWp
BH3kZ
\m(dt
NgC=Ma
:4|\~
wR).jn
b\SRK'
iJed:
n8t59
Ir0~6
w&t5~
MF`FV
$ 6@`
w}J`L
Qm\A@
D&f\N
z[,[Ic
S?M//#
TijO0
(Cf@&&
{oG|^
I3.&t
{:QZJ
mdXt/
qA.AV{e
/=.;q
$qB;W9
)a::F
!|Gxs
uiK:,
]-f>a
G"Em@J
x[.f[$
~W'Zl
\2,2!
!|Lej
05asb
)FjFv
<UxPC
(eCY2
,"Y<n
wDav:
abbab]\
McWmw
nq`s$
7{,yZ
>Q}fZUk8
:om&M31
dzh$F
yPHS3
=>Y;$
cVMOe_
yv2w%
%S1Or
D$=U -
d(GX&
$=&To
GetWindowRect
.VS4p
:(WLJ
<S0I*|
yzY?B:
Lb^<[
%$#8!
ZvUtqr
W5#4v9
XIZVXF
|,i,:
s|FA3|
(I(TQ
aA^T`
;pO/h
IVr`2
,/KPip
v]P:?X
Aqu8j
Au;AN
u_f0I
cnAxBx
u`d?e
Fz2f
B'4YV
d>";Q
T;)k)
d8R0(1
7Hxa~
SI[r}
6^u#Y
s9Q2Ebv
ZiIJs
/Z/^iy%
W9?"z$
Cf`SA>`
H6_Y2
[0mW>
>GnRN
&~>ZXF
?DCr%\l:u
2+mTMh
F@!)DH
b!@[/
O*&:=
Q2ql7
-)dmJ
LIvdH
j [f;
M7Ji\w
{1_'-
b]C_:
L`8Jd
C dr(
y3<!:h-
jP.mi
bsz[P
y[QKH
c?|G{
:OgJFq
OUpS6l
WYJl0
xgki1
xnDal%
8>t`NP
$[S!s2
~kPv{4
=x>J0
OLh=1
]U$.S4[Fj
7?zh=S>
[\bCZ
bpR!]
S%2qU0H
m'QQhF
Q7CL-
2)2y#
sN5q=
w-t{s
|Y?h8
6Xl90qaD
$lp5W
^DI>;
U/K5S
Z{wJu
6_[D^
yh(B9U
x{~.P
:CYAn{b
IZ3rb
RoJOk
Q~h`m
[]&iu:
~N\:a
^N%l(
g#E3<
7~<PII
`5er2
(b(]*
R=\<$
)Ei[*
D (`s
%VAi7
h?\?m
4cUiq
~WM]f
hLbqA
>4I@37
%3N3\We
8$_^\
b>J;I(
\svqk
Sm-2Qg
IB1$]_
X\12
e5@B},
9TYb)+
JyJXi
XO!-h
G#Xmleyn|8
sD-0KcX
fugBC
foEs_
p<0e:
y!0\4
R!m5@lB
GmH ]
G&ppx
1z.)w
U1V<6
gIMI,
3bt+n
=qpk
{]?FzXE
+A3t)J
yo?!z}
Icig+
X7$`=
19gG+
dj359AGVWd
`(@A4
h/U[G
=]\Za
bB:_D
w`1%!
((NE~6
vAQPr,
H0x@xP
e,T|
%~zOy
]|=JS#
^|D.Ne7
cVYKG7
i[+&-B
zx-:nW
,`RB!
xF#Qp5so-
?k|UE
@m8Q,
ZQ>7u
0[8~)
]q6$+
9pVPr
yYf~v)
g0%Z+
`I(h3(
#<Pr$J
w|v/y1
l{q^B
`N7"7=W"
SaHMR
Sectigo RSA Code Signing CA
0Ve>U
x"ci2
G50l%
UlLJ!_9
dbA0A
Z<nbm
.?CAf
FXwHS
<OYTy
]M>:/
q_;^)
+l: ~
>dT8B
3^=N[>
TNl:Ko
\[dCxp@
KUUm>
C4Cm^
`[QR(=
D:|,.
\`.E"
7>lHg
iT=vo
;Tvd+
wUF:fG
OEU+9
[K;zw
]9{Fb
%gaGx
6nh[15
PlV .
)~%m6
New Jersey1
=|gf)
uAiVF/
CMHMHl
i$nH?v
5E+d/
iTe}J
%&bb
*2ny?
WoF^E
v?7Mc
kuV)I/(
v4,I[q<
SystemParametersInfoW
UM3;y,
N0:f&
]#uS$P
4z;MH
Q|FjIB
n~G[T
w'R}f
ib~"(
SWE*:
cDUYJ
U!m\]
#^q)X
320122235959Z0
?/ty#
EK5r(G
SHGetKnownFolderPath
#l_8n
H`.6J
4i_~b
$"1=Z
~i$9v
|y"uw
V#4TO
]4V^M%
Y4N(k
ct:mJ
*H/PI
uDWWh
5CaL|
V=Af<T}
]5.d_
<FK{x
_17s!-H
i223-
4h.VA
HDGPC<&
%!eDo14
2K6=^
d!{$T
t^!$c
:(:C|V
XT,bi
PXk,.
qE*Ht
Bq8,5
KQi,r
>k Hc
U8GH!
190502000000Z
>&Go0
%Wm9u=
W#m(?p
c{hdt
:)h}-
t8j=V
m$Sf1
)Y|ABvN
({X*s
6o,R_`
P&;eF:
/ Y#:
&@{Xr
IVoSm
Mr44<
\)p7JbK@l
1=]Bfdg
s('%K
nErOh
TyNT+
@ ah"5
kN.F>+D
w=]fY
SearchPathW
b+&/T(
Rr-(h
80.D#
T//dp`
k*M3$;
_He}a
B5Y==
XqArN
Y%WPD
q1q+y
p2T}`F
#f{5x)
GetTickCount
84>hPfiE
:Maq#
aRY?=o
ez'W{
7yEfLO
_@Z6-
!-_x6
Rc[HA
xT%l9i
*H@ 7P
_"EaTX\'
,)Ri~
_.ZuC
c]{<=
-\9:Yq
0;iZb(
v@F1)R
?!qD"
+32aQ
45)le
/cT_k
O#mF#g
I/)-r
PA`d<
Mw]zy\XI
pm=]d
moX!F
Fua|R
AW:q]
rbc+,0]
'jZ7M
MultiByteToWideChar
XCCw,
z]cW(:>
t[TGI
p9W3t
_PKky1
ih#uw
ZFl(~
sB@Sc5oe
y(ngs
l<:]+
a~X,15
e66^[l
i2A|x=
*/ut5
BKmbkh6
x%^:% !
;g1!+
'(%PI
http://ocsp.sectigo.com0
7E-@X
O"a~&
-d]~8
4ocOY)
~jhuF
((gvv'
]+Th3
>A0"XZ
c(%%^NM
;I#a(
0"'mgmYB
cx3e+P
pk?8L3
<z-y{
KA(\<
&`4i)Dg
Qn\N`
z~aq/
+5] bM
<t0lJbP
7Yq&,
'W Sog
<TrzUc
2$+Vcx
AY:6h
7I?ST+X
mXC!>
T/!\CMJ
*VCWs
s341;D
MV.1\jO^h=h
i|;Xm
j8QJky
dMzl_S
9h%&Zb
uRgut
f'EGX
EW7.n
J[hDI
^~7*O
2Q,i{o{
f,JvL
,f%}4
?3*e@
3?2KR
;*vo"
%s!X$/
o[GG
1p`H.<
Yge,L
`^^^sS
2CoSTI
#t".N
CreateProcessW
]-|{A5z{
5= ;0AV(
2/`@5
Pmbec
cyShf:z
rX(`E
6oyyz
vN}0Ga
Oeb66
D!8yX
... %d%%
+jQ6a
DDcok
xh&$jR
`2/H_
^U00_
k\Fu$
a:pH$93f
*<Vzb
5,J+)-
;rPNhj
YpI3m
@?/Cf<
bLOFO
QJo`v!
LJ<VJ
C=@4WYZ@n
%l1L.
>JS%8
.lG&}
(}g>,
WQSPV
mJUUa
Y"+V</#9
&a2,}
-7d$~Jw
@x(l[
W!Wc$
e{d!I!&^G
&3@}j
UUUUW
al;kI9
Xrn5+
ycO+e
TrackPopupMenu
I<]70
>2B0QN
!psEh
dC>~!=
F"C?N
ny:G,
=UuZ%
rh2<S
?!C;-
lstrlenA
: e=g
(u&]y
P7 fM*
f7b"!9
*1.X.
y,rsK
#2'=z
wdN"f
3iMb$
7eTNuS
xV*0B
zas{2
o$r@i|
,Mg-p
R 4[P
GP9"8m
Jo4K#
UHJE]
9%9NVS
=W1^D
7#uMmA
0NDqx
}xS!!
p2{FR
5 ;vE
dse'A
~cg7c?
*8P4->
Y:x}0!
V.q@q
p]Dm6M
MFn'p}
~d&pKN
JfFz)
~GW)"C
ZyN]b_
{; LE
"V3`%9
3CG?}
Sleep
+A1^ySv<
?6HgE
8$X :
{Y1"a
hQu+4iW*c1
8V+3-
`` \%
g35*l~dI
Cmqt\Ua">
;"'krZ
bF)7I
GlobalFree
}>3][
X8'pXJ
gLR[1
Ur5N)
pf_Lm
pZmIg(
e#]fb
GetDiskFreeSpaceExW
K5[[D~=
~/jLG4
*lOv@<
6hJ'o
Xq.BE
Xe]I\k
OOHg=q
{_g8}
0I^(~f
!xiHLo
JJxX{bc
cj#U,`
IW`.:
FSy8Nwx|
q<H*b#
%21t$c
frDqJ
Pew1p
RegOpenKeyExW
DBX><o
1"=L:6
WUpKN
d\nh_
l{:zP
OOhEo)@&
N"(bC
!~Y9Z
Yrt91
f(7N>`
N`?P8%%X
http://ocsp.sectigo.com0
@l^fm
42:7`u
:cVhp:
|&-CR$
W8(/w
mXUwF
LGpC=W
z@2@h
TV|6{
POy@u
.*|uTv
/B45#
.~r@L
T"Yh(
@7SV@
X{uSq0
v>S/D
iJWnTM
<RLQx
N1)Et
6(9-=
N@P,,G
u".Rt
S:ei[I
pxyO%R
\Vdm]
M~riC
; *ic:
dOy5'k
++H~*W
6:++zq
(N.K>q!
R1$M*
G_u{.
G~C2t
r/PWM
,@"*>
"yW 2
>4+f'
YoK7V
n7r=eu~`U
ejE",+
|p!23eGHv
#kpc{
k>!uo
4()E10N
\kA6<4g
.miC'#
l9GqC
pLSw{
biE7n
=%yGi
@%T3Y
'N^B:
)L}Mv
*5-=3
M76ICx
cSF_c
y_jV#
j,Gee
T#{jy
pY/!>%
]Q'w}
/ekkz
qLG_I
O+pb|
S.Yg]\m
clo,!
d%WD]1
5u}f-o
yX=PA
_M6?}
rknpliF
AppendMenuW
s_xlw
I.fNfi)
3ei:)s
k,v_O
e2oC-
./9&G
c%2H.
SrYj8
H8v;N<
7GxV;
<TU8\
zFc}QM
/TT_+f
4wV7a
w^MN/
DiDJRx
QsSQq
F1j0,
?L$W&sQ
?L#J4S
Hx:/B
?FUqRu5
WtQHq
I9RX J
v^?{z
rme?L
Z*nw_
e7_b,M\
5lQ?6
s26ao
,Ii..
os%xY
5xe7,
R~Q8Y_
GCH8e
CornD
Gsq#v
VI ;B0
u2/1r
c%v%,-
1{9L*G
K+x$Z
]buxyubO
ipvud
RT9Lk
:uxVLI
%(efY
h U@k"
j-aD*
xh&Z
zVb+
Lq6F~
^y%/a
Qyl5cM1o"S
iVToAL
?E_WL9
qLw}p
i"Ks<Gy
S5it,
|}M,k
Oj2#n
kVvj
Zl4k(
^9nS!
h\A06
_-w$~l,
0?P~zw
cFoqX
h6or
QN`:j
'j=Su
7;@FX3qbJ2Zs
N0(3&
NH=!$&`DQS
>o~tL
s{iD2|
3^quZ
V`\9ywy
AhuPt
lf),`b
Jps{8
u+XDA
-bqV%
(!:]T
a=2U*
J[]m]5]
o,16V
V|qC
*Cs`"
("_rD3
IT@7_X
GetClientRect
xXAh#
(<d^yQ
-PHx^z
8G\#SD
^&XN[^
aZ]2J1
4ia!_^
`k~:1
9~ (^
xp.'+
vJ-lQ
33YiA
[?}SF
=xZAj
1>iAti<
n*xye
>\jr&
S&M7wd
~{+fo
HUUt<
h.u*6W
?&40Y
XU-_i
x8,=T
{dcTU
MeBHZ
GdFmW
e}5{(
T1WF#
FhKi#
7Q5vg
ImageList_Destroy
ZPsd>
7@lG)
rDxx]
c&{uF
vt~}{5
_p^F
A&eBL
8{DXk
L/QK8
l51Xh0
$>Yzbk
H,{pK$
xBRl#
AABe/=I
gaNUK`1X`
l!qk2
a[g~o
v|~{p
xvhdo9
X{fu\
PDRpf
8`R4gk
\N*Uc
9M_)6
83('[TH
zGVQ-
KgxH9
99x&~
O}@@Vc|
'2$zB
ExitWindowsEx
*_/FM
T1s V
\+z!*
&Pk^*
ivPg,?
V*Vuy
5z9l,t
LyMw&
P+P5Z
;KM/F
O"B`X
IykgH
0h?s%%
x.2CS
}aM{?[
Jersey City1
YJf-P
O` _|
k/_qQ
Joy_yH
c%3pH1z
1n `AH
l#3Zzi
f$#P+
V&'i{w
J,`E(`
Su#[.
[W?%,
/O\gO#
TD_'c
lP."~|W`v
6H;eW[w-2uYvmq%.
%6xJb
_?-x7.\
9oeLa
K*;>z
W;~qx
bf6o:m
L(,[N
xvKsQ~
~|_cI
?AJ5I
6!YN.
xQ.Tu
+.9{r*YOE
s MPa
3Wh65
t[3Jc
:D=cr9
AnogO
9RXctX
!XM5(
:r.[3Ry
I|L5D
(e|rfi
!OQ*Z
:m-eoBc
Kx(-?E
pmDu@
BGlK7
8")eNq^S
k,8@%R
{L!y0
T)pK}
Z\=aC
l&,O*]mu
yx|S(
%-kXJ9=
DQBE-
|RH"C
9@!H)!
Hn]+O
$]=AF
GetFileSize
$zXs%n
PCk&8
zxm:G
nY>LD
W1st&
JMV#}
^,h_W
8lxo,
9KV[S
gU4 =
bH8rMi
Jx]i4PVD
Ou&P;(B
XY1W!:k
e/z6[F^+
j&U W
}C~E;
Z}fBI
!uG?#
^'+Z[
+R;;W
[.dQ@
NRL^h
TS>Cn
F#!),
G'nWM
^CYot
[p}Dt
ar?n'
,B3![.1
rVJR4
Q^J_Se
r(t'PN
4S,>A
7tb[[y
:309c
e%g.X2
[W-/1%`*
%&o#M
feV*yd
6PA'.
I<z]AY7X
5X!1#
klzU9l4:{
&gd:%b
L6AB,L|
Ak\Lw
cb|\dA
H{Z]s
qHrd?
/18)x
k('2:
vqr/R
_9b~1Z
B!*z
4{(?_
!OP}?
Imsqm
j8.T"V
ptp_l
?jI{u
+EF%Z
~iFP$
d7l2V
}!hQJ[t
=rnae2*Z
<qcJQH
]o*ra
Sectigo RSA Time Stamping CA
0)iq!
<p?{q
dOx1F
dvOiw
E[cQ6
NHCi'
Hzwud
5L;`m=
xyLqM`z
EzMXt_
GetVersion
Q=$"-
kgf,8
}ll_m/;
f/~sLxr
cN`,i
I_2!T
R4Hz=e
$>?2N
Sectigo RSA Code Signing CA0
aQWqM
g76j4>3I
1$g,)O
y?@P|
/Hoy+
Jm"0Y
J\,X|
_G?^'
?EW0i
nV@V6>=n
>5JE|
CVO\t
}d.O'I
du'KU
>i+fT2S
o7xmy
x\PI)
2j>Ps
aIM5c
}e%;R9
D.HK%
c?2PQ
%?<aO
7C!U_
LoadCursorW
y>2t7
w%(Z.
?s<~A
H#,@F
lGdad
@Z}+f
;vq3J6
n(BH
Pgi?Z
o %&R%E
SV l}
8w%iu5
MUJ@)
BB3_h
R'> Dh.
p?+?!tB
*{clm
(3evw
PWMJMeU
8nxUT
7t+Njgb
U~n}.
xyru9
~3U7et
{Ba<N
7Hrhls
StringFileInfo
[F!~o1\
YUzSe`D
=:5I:
/Zww&
(~uH1Q
({v|a
f?i J
SHBrowseForFolderW
Y!1Do
}|j3$J6
Z9*J{
ar>*B
"hfW&%
>+ehLEQ
)'2_=
df;R3H
PY*j$z
] }Ui
.?R&U
.1qNx
,[X~1
CL=JI
)Pq!c
Txb)'+i6?h
BrIeB
*!:Gg
QQC;?
?Sa]b
K1AB$5
J2*jX
4Sp5c@
=>X~F9
h9A&D
qE%+h
f0-,n
K.I(d
PuCQYo2
&Y=LW
GF,d4
E4UAd
n?>XT
dJ}F{
+ ^}*
hG5*$
s&zy`
h)t_:0Z3'
5D`JS
+p3?D
QT|= Q
v^LX-z.$
/3 Rs
:Qg3k
Fa PL
HhP>H}>(
76d|1
q5Xqy9
8^b>~
)P[/F
3>~m!
|[\=s
">i*1
uTyq&Td
a*{[c
7Jz0=
>I*lT
` rKm
(2nS%
C9Al>
;fn,r
H*5h! N3.
'&gl7
:`/U$
9b`rJ
w*pp(
1(1=r"
B.}58
Q;[dLNM
|PW)o!b
+60_[
B/lGJ
MaMA\
Wl#UU
/ZOMX6
!3dE/
yjjqh[m
Z1JBPX
5am'8
j7+8Mq5
*?,Wh
)[HZ$
(!M?U_
6}b,qZgYX
G!3;d
R\yz:
f9=HgD
jc=3d
}gf@`
,{MNd
YpFL0
=(MYc
<T`k)^
P 5]f
s0S*${X
\pM#K
LCT=%w^
unz*'
pCh+qDz
D6t5
ArbwY
Cfb[r
5FrX3K
i?_f|5N
Z3Wg`+
PemWC
msWKG
:'nLT
~{01;
w3)P
H|cNi
.E$cR
aBM1}L
=41nR
K$x[x
10I}l
oT@?U
k@l`<,
CQsD<K.
YIj&hnB
2}3 0N
PTQ&c
>2diu
fyYQ"bX)
2cWTGhK
'l|*pT
|^RM{
)l_\|
OIx.q
5$nCsr
mS}+{
{[j>|
k"|~k4
20n2EB|6"
$T[Qt
];lMc
]jdB>
H6eW6
>._fsH6
sfqeP
p(meZ0
:qXSN9b
Kr0cg
>/O+r
z:([<
j+ri6
1KmST
P: e_
SetClassLongW
bGrzH
zePdu|
+4|vu
qn9OG'
>x$d`
uA]Nz
Xz9,.
hX!a@
+^*8j
U1 ^"
lstrcmpW
K+Sb~
aS8Z(
[T X^[
Wzpp:@jA
bFn}c
RichEd32
OleInitialize
w8YDGx
X{ZKR0
<^Y+j
'Z<!F
Zg5w3
f-Js(
UZ!\CenQ
]LcB7
b(v(7
n![5|
`+5>tB
RH5H1[
&]<;f
)0Sx}Y
211011173011Z0?
m\ yl
K^zs/
KNSuXhn
-A S6
UwDzz
95-Aln
5=+dRd
.n)(&Z
LGGNMKg
>8|cq
VKRk1
j\t7(
S,Y54v
%-Kz6/
-r\Y=B
:H<ga{
J1>,!
\{dTY
KKXZi
GetSystemDirectoryW
B+!*,
}XBqCk
79%J|
c(w%Zx^
g4yv?
0+-D9
(@"/D
#Sectigo RSA Time Stamping Signer #2
O(!dX
&s"PNH
M,HWC
W3b[nb
X3Rvy
zWe"Z
](SLIl
:jWH|u
j-aEPg@
r/Dm@&y
&^SEKM
PostQuitMessage
1b:$9`
GEw]I
-ue&k
sEo_H
6cBmn
C_3fj=
"99p@g
D?zBbn
h6 {_
Td@`Oc
@m7G_>=Nx.
9.e!V
2<Y%*
v91|J
;Danw
/z^O.
G.|sG
NY!Cr
,3avj
|S1W1+Z
toi{D\"5
x=`c+m
==-i}
iJT8(
OG)M}
y|X*_
Vh:>(o
lHj5vZl#
rWSzu>
LL/R/Ex
lrTd_
8a>tz
}{I1g
osDt]
7MY[A
)kKi*
1yU`-
XzIG@
@zF>L
m'd}E
J9O,T=
j^7Z9
GQ0+Pw
K!VJ1
>RK~8y
6J(&#@?
h:vGt%y
m?d>|
H1UIu
'3/)dV
2W/&o
tSs K
Sectigo Limited1%0#
mMrZm)
WJyeRD
czf-Ed
Z0j}]
G:!3>RG
rIej3
GetProcAddress
M=*-L
:b<XI
hBgxp
0&DiYlB
ttzIu
s.U_wx
P>L=D
$)naK
^H=uaP
ProductName
;4F?>@6.,
yf`+K
J)7oO}
w[(pJL
4FS]5S
v#KP]i
ePrr9\
/sNx,u
8bZVY+
nv<a~
-oHC:q"
XkQdm
Pc Se
~;MR=
$R;(k!
g&!]D
*nw/
S+[dU
'{]vE%
SetFileSecurityW
Wt&]^
>{ -+$
P`Dbz
tCNJ0
^%j'q
4mxSj
pHJY0
~vVP$
YoBsN
YtfhE
zW\)c
ZYSYWYl
T{&3q
Z@k:>L
B2C%(a
Tag$ai
SF}0R
_C]=.
;N*Q<0
`:`2i
|<$@W
8u_TO
\L^[%
}Z&E=
t1?;f'\
S8m *
\0E>I
kJj~9
a!Z5uV.-
K5iH[
p2:_z
,3EN(
]IMrV
G_%ML'
T3NTi
MZ `y{
l^,+19M |
&]=&/,O
Rk>e@Z
|`l,B>P
7cVuF
B4R\B
b_EmAW
V]C8N
Ij,*T
6OP\FZ
skPDInX
g1Yxo
:VO}Ld
"z|<&
|{S8f~f"
4ocHe
z"79Q
}>pf\
&+Z8b
&M?j&l
P]Oa}"
^^CK{
Z&m\x
@p~~+
05N2s
3mgfo(
nS@|r
,a|$^K
j-a@8
gG!9My
I*w_E^
SetFilePointer
eiqW&
S\z0k
9rMQyI
5j_PF\
z2w1a6
@V*l@
:i%65
dE#6Gi
<pe=>
>(7vl!R
RegisterClassW
aNrM}^I
+>:h"
aj7"r
RlWbAY
G-\i)g
IWcQm
'@/s(
?1yyK/
8SNo<
jUlw}
pmVv~
;fLx
(/iTG3CJWf,+*
Um{5",
PE[r^
hjE,w
NIakQ
Ab<_p
-9Ru{s
5T#A7
IGZ*j
Yji6c
s'L)JH
-QJ\8
{U/Pz
:Z9Lp
oMj;D
n;}xHN
bK `6
DZ&mQ
r|)st
s40ba
IpDd0
SKY_0
LRdP~9/a
!oJb\
Egl`w
`}|xo
}cn;V
P0GYZ
="*K^
%EmfX(
3']X-
~uJW"
@xC>|q
p$B69*?
lstrcatW
~>'[vr
Y_Oj~K
Eek<)
Z?wb_
#g{=j
R&p2:
m%0Fh
hY0AY
t7y!c
DhaM1
la`U]IP
gmA%r
y",; p,
vp6hM
1.pzl
vHY[~1
F"7<B
+FE?n
#R7kV
23Qe:?|
_eYnRT
);!ir
dVpuB@
CZPKUJ
3Qn(z
$73M-
`O(kq=X
g9S5G7v)
5>yA/
2http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
e^asyr&f
f[1q9
TgN#H
T!5!2
..QWN
]ddCD0w
o.\]k
SWGb#>
s8ndM
)Si64
}efFL
^|d]X
qsk0]
/n#x#|
`pBbD'
WR)R9
OdiFG
0"lke
Fe~!rJ
b>-ie*
[M-P7w
3ski/Mg
O"Pkmx
9d8G7
i;L +
=G(,x
yKoNI
"(|cO
C=/dPd
8SeaM
Software\Microsoft\Windows\CurrentVersion
imaF~
m=GcSEE
? ~C@
CVu-5
yP<1?Y
- ;N/[
SetTextColor
y3chk
n$zvF
ggG'-
Y1D>b
+>kr-
y+IeM
*8wH-
LNF*U2
HXn#P
c}5UW
X.qWr
?6"O2$
\'i^O7
%=fK6
/2d~H<E
P|S5v
,/bKl5
Jvz7^
kE&^>
E:pn&O*
KB6p
9GWgoR.
.MGM?
D$ Ph
*VI`*
l{TXN5
GetTempPathW
_R$LM
Zvk u
[!<_:6
>?gSW
162S8
4za:"Y
|,,dF
3{Y)#
156Y0
GS@j%L;
L[)Uw
c8Ix+
<\TNe
g_0|K
6TU7J
/z$<;
d@H,u;
oAO$p_
&5,v=
ev|NX
bT|.B
5BB22
6=_68$
,N&F`9s
j-H`R
A:[bf<"R
4}6J/
#9],*
|Xr`&9
J7|Pn
i1hp4
gRuoS
YNFig
4B;c3
M2p|lO
Om/fXG;
wtdp8
7=!-s
XX;}[
+&Vr<
(hKoDi
!%DsI
ip52\
S`|;VA
\b:wi
QHJvM
K:(@R
Z;z8}h
tKoWeaBJ;
"LY+f;
1Y%FD
A8bZu
I#8&c7
0IM.1~S
KZp{J~
Kdpy
)r~lH
;2b<}
K`CnQ
7@}MA]xR
o1M!
3!Xd'
ZkYDO
djdih
HY)!,TFD
<uc-m)
.-m3%
~Sx;Q
b8=/9,V
w|9_j
w9UjqL
MS Shell Dlg
sm^#n/
>Zk*AS-
4xq&4
LrYb)\!/
$Cq#?-
g+:x7
V>wx7{
kBmqi
P}pNG4
c0Kb7lR
H|Cmp
&3CY#
Y"V5"U
l:9wl\Ei
61!mqjKL
"R(k?
%8nQ&
<IY2{
1x8n^
NwaMq%
]=ch|E
V+D0d`
oZ%pb
y7(Ic
KPMbHB
995Q?
W}YjK|
X-Li&
f itf?
=pAxd
F9K`6F
ZA\/a
rb:u@
3Ab<$
OlPq\v#
=TqS7b,
/eJEn
AV(`4*
t/LfW
qoOD|
i4G_!
{(cM?E-
?LdEKQ
nV:R5
powdI
VNtW!
wj?w{JX
bi!q-
3J,kI
D!jcLAZr
n$M,{
YF(<'_
WO]J?
0P[Vm
-ANNv
MihY(Z
S(s-K
)kcw;,
a<$~#Q
$Ps>9
z4uy@
7x`%t
-PunH
7,!#j
vzjjF
P5`H/Q!E
!p_bw
~?rB;
)ki$.
FEW|3X
6~?$i
ll*.C
4`QUu
/u`b/
]=^Oo
c%zc?
A8zx?
'x{Qr
&\Fo95(
D~d]W
!`C|p
bCg;i
zE_qf
\ir'{
F|PNk
DUW3Y
ibsa0
8WTuG
E\S&:`]
sc{86
p-%<S
c+[cy
SBj'('E
7HwSe
WFaA}
3 GAm
lstrcmpiA
aG]9~
XNg/&
3_?Lj
/T%~1W
r#xCy
8l'3.7
pre5r
wgs`2
B'4b0
=DZM<
@l9+4?H
zgNLAU
;KKQh
ajpVNM
C&FY81
5tFiP
pFOOHSNNSMFB&%
kM Fm
SW2I1
SHGetFileInfoW
w`R)#
tga~W
"K8cf
^8%S]
m3[fg
yJ]^o
t';2<
@yPA=~f
kwhyTQ
-MRW/'6V
fu0&/!
NG}4A
xTo&B
`kOSYFob
a!0ol
MSs34lw
nbbaLy
kH\[&
(,XuS
uL;pi\.
a1gSC
z`5G]
-MYfO
cPmvh"
%f&WfY
b,_kS9
Du[uy
!c`3_V
XKpm
Q4@JG
^M}$
M?UnjTz(@4'F
>EK8J69
hU6xqN
G(*hbG
IadRv
8NN7:
Qo(l6
UhP#a
w1n4R
&HHK6s
`"8ujf
B@8PS
?lbv?Uq
?p<vG
9kC**p^k
U7ePQ
GetTempFileNameW
(.hq7
MV+ikZB7}
T~@K{
m9c6*:
sF!<'r
119e<i
As-Rs
K8Va[
ye3s5
K6#hqHx
%QjNg
B^\2J
y*oGXN
D#=z;
r90H)
!0}\\
s\O*!
~'nDw
23mZM5
faZO^
RZdBD PS
S[q<,k
7USW!
xK1>_~
l``EN
mccA6
Pl763O~
f5lAi
=xk7F
7"a{D
Ey]0%"
5*A=m`g
!7E+j
n8#3#
F]L|1
Q$D`%a
{~y>W
Ip::$W
:yp?%L
u/N}mG
M8[Os.s
{>B5|
aQKV(
&XF8?
)#L~
eNLCj
bG_iY
DPLruQ
c5tZhB
h/%Yvg
Z4NiD
ZDxj^
'mF z
&e\p9.'
`S9$<j|
Ti1<5t
d(ntG
mP(Rp
00X_+
_:9OS=
*F7\G
f'.?r
AYMbu
Q>*W\
:[n\V
FV<U%t
Hj:r)
Bkh8e
ih<($
YZQWu
lT, A
^6T|F
<9L'~
[!~\|
VC59E
;y<)b
Ct]Qu[0
s=/r@
NI!$bgJ
zA]-$
?RfM[
V&%C{
CharNextA
MPdZQ
&md(H
"1?2,1$
oSQ=t!
[{5hC
H3yY3
s]>zj`d
lbkj"3
|`@L1
8SC"n=
#`Bae
Y>A"`&
QIj9n
-*?J-
`-D?!v
S(rEE
^6VOzA
E(8J J
RR|l5
vP&\I
edYdz
2G'N_
BR%AK
iup<F
2cLu~
`{l?OW
[Z2cwC
e36aAWLN
;OWyMz6[
@UZ.p
ZQ""x
_p:tB
nl1`#
(9^5e|
w))-9
XjdO=
a1,E+
W&ja[
C#Z0}
!z?L-
i|^>Q
}BPVZ
c)444
;-*<f"
oEdF!
+,vYI#6
g-HMW
v+U3Ns> wQ
/EQ2G]Gl
dEo{7
RauV,
F6[p]C
9'jpT
qK":1
' m\n
3v})dN/
*4'f`N
ON"xa3
vGqk:
i4eW<
J?F//
>R'Cd
4NahF
5+(OIy
WqbD^
zoNk%
T7j[mN
*{DE|M
CAgJ7
(\@w8
-=4pU
R:?K]
;+W\R
;Vz,P
>>e{D
IFcb/T
_}JLV
f$Dps
J|k[Q
@lFgU
X1?Y)V
&akU"
c',WIKd
e"6n+}
6wH~,
wqz_Z
v 83!
"s[OD<Qx
WL};W
<<n]W=K
FrStP
6,e@3N
z1Imp
\sOe?
`RGDD
g,;dC%
'\`}~*
;2]s-
8YO,S
'Q'! a
3Q\q~2]
g(%Z9
2K0D
zjCs\
N49G!zs
&|3<c
.Di]d
{~JRg^
S!r[L
hV*]a
{}]=do
C5@Do
@fCkX
>19vTn
`ie83
Xv8/v
p`!,Y
0Af`?
>XrWL
22?PmAG
]a]a]]
Q|+[l
cfQ+D
Prc+f
|pf*+[N
nSvp6
GetSystemMenu
Zs-Wc
F/T^4
]|S[|
*X)vz
uUFQ!
[qn%7
#_6W^_
?E(T30
`~pLI
5r"qE
WR8S:
<9x:+
~n5eRB
VhF&Mj
:]i.t
[8v8Z
]F_p~
TxyJ|
ivn@{
#6 M,
)poSQ
9N3Q}
CV'}W-Q
b8vOS0
SelectObject
30FwB
Fy"FQ
%B8io
.]JVas
|7S..8
cILo[
fO^}
k-i_DD9
Tt;-y
*I&sn
STqE9
1_rQ$
7'M=F
CLBCATQ
;jKoo0
Znp/c
2Q:f:
6SIwP
l"+}=
.#J^m
g_;^z
mlGlt7
1f~?e1c
+vGOu
bP1".q8
)SAmt
p4}I?
z-I@'K
7Sto
UgG^\
*mSrU
r<>r/
+D<s>oR
c-2IV
z5Kq
CreateWindowExW
V5fa&
++2Du
.i9EX5
Fb30M
S,gGg
@G4%z
uiZd9
E:p(*
SetCursor
RegSetValueExW
a@=6A
L:wAA
g:|;j
ZL$&a
&eQk:+
@uDiO
>KN,E
)0L(U_
E$nt"
7L#i:F
J;;XY
by9vJ~v),
? tWW;0
^XQ8k
_i3t"
~',ik
h&wcUP
uOqG|
':gge
:Yc[o
}gqwi
Eo<QK
ro5-s
QSj31
;I[>;<
#B*4N
U"6K|
"A$lP
\BA8N
y`evM
+mqt3%
{GzM^
GY:odt
zn zQ'q
4Ec<Iaci7
U/HToK
JaDXB
h=*/U
pC+Op
CA=(n
Da5V} #
L?gy_
Msg:b
m.8FA;[
B-o@mm=
:N?/~
*l;W*`8
.p/g;
~b;}b
BokP,
kh/e*]@
f'-K4
Z;Cl+
W*B0t!pf
Bk_rUJ
T&add~
_L3W_z
re>ZuG@
LoadLibraryExW
8s>>f
D`Wh;
;-}H
<`jnT
jPa^(
D6:art
$03C5
2b`^#^5Z
LAB""S
?EXxqK;
:^ |K
77ok"
MuV7`
2<(|!
p@h)>\
x{DQC
""AL:
/t~'Vo
jPOPLXmjVKKWMEA'n
qd:#;@
EB31
!1ai*h
>a~dEE
E[sV#
$P!&U
1.`Ta
AT'VN
VlT1"M
uV85.sP}
&6vwY+i
ipEZCmD
Y[734E
pN|GO
U|!U[@u,
GZ:*y\I
L*97U
+IOhN[
5hjJrw
n;n;(
J5B0dH
9J)]p
& G3N
)@abF
s;H;V
Gj)R|a_
m6RSi
u+!O:
{X7.C/
tcU&/
. V7h#
AT3.]
'0"'UH
'Cw10
Q6hK[
lk<{G
?@51w
:);UI
ZAqTU
CLe#JEg
B)f#vT
'xwnQ
:2NL1
k|/=k
F!&=F
:wH&!
Cz>'||~
I_wE8
r?Z>'
b^ tAr
~A5,|
JE 4_
m?D5E
T8u'p
:JuN:p
PRX*P
+A_FP
|X{o,
`Jpu
Sectigo RSA Time Stamping CA0
qyRy9
EX68F
<DZL-
)H\Lg
x:P.[
eMrj(
m/*p4
FillRect
R#|^%
~e:yLC
Eqf3$
Q3k)7
q-x1C]f
s{X^eF
PdWT@u
cHi?k=s
R&8;V
[-r@d
wshVJ
Fh:aF{I,
MSOX3qy!c
&!xCY.
{wA/~
V*bDB
#y>91uY
1<,Px8J"
d(k)b(
W1\NAzy
?9>o=
|gbo%
?QTn:
Ct;sz
tEcLxUV
(v07`
rJyEMB
9,6N}
d!zLD)
k6fM.
9NA<m
r2Dbh
~*(;@4
(.~6r
=bd(\
&/wZzS
v4qu@f
8]z)5
{qxnD.
|h87O
jCr[=
ZGYet
a.hfoP
Q_d-A
w+oDO
B[(^@
*t<]4s
H.D')K{
<61W:=l
\WF]3
sPmOkV
0gjtlK
}K"S5
bg.Yq
@0a(@Y
1JW9t
lWLxG
}aQ2{
3KSnl
l4#NS
Jx=Ji
Ty&W^
`+YsEj
O/FM#L
:W/_p
G|c^|
L4/0'
3jgIS}
pD?>A="
e4(d
4vH|F6?x)
b0n7H_N
/-ZbQ
t+nx-}
z?m&)
]yjV/
cEXAn
okb>U
JB|N&
b^[K(+
3(G?qZ
=*vP>R
y@}NM
=p?7w
)8:Jf_
(/ H3
]oyoFJ7
c d,'
{(>Y0b
CoCreateInstance
olRz\
b'Fjj
i_k/z
u7AX9
dNH/V
KVk}$
&{@Fo
I'Qk{
<m`8z
UH'm.
w"3Ox
y(qK?
k4s}J6
_h?KU
\e8-,'
MVs${
\bvv]zz`
s=DJ1%
GetFileAttributesW
H*XQ5
<%=-"1
F~@@g
)E1>v
}mK%OJ
PortableApps.com
SY5l4T
\JE4%
I_#a
8:+C#-
~1*xk
ql$+j}
gcXQZ
P;pd"
o:HHI
R0.Z3
4x8y/
@{U7JQq
%(!FGxP
_~iv8
VBJt=
s:xxb
BHi x
KthQ[
LcB3e
~lgg:Vs
:G{9.
hsEkN
7D/qM
Hf#sJ
*((ym
8|~lx
DispatchMessageW
!0M!?
moVD0
`lNf&
ST2UP
e<Pho3B
#Vh+/@
DZCo{<
dGdgh
0Jq?{G
]%-(:eb
S("uU
<1armm
N)P\1
bV#i $
!jC{1
^]LmF@
}URDZ"g
vs]5ij
Mp5r|
5TLvqW
y+Uf,}
Lyr/l[
xtI3:
?qm])u
@Vj~|&
https://sectigo.com/CPS0C
;^M ;
d`<De
?$`s@
#_~c|O
J169-
)$obi
Hr[hZ
>1iT=TkD~
(-X'n
^q% /
B;F||
StUS<
dI5H#
BeginPaint
jcv'M
](pl/
?*mE8
iWo;;
5X3p5z
e[Ox2
Ij9C4
S,1^^\
1s6$n
>&YGRlX4
=A[8RyJW
e(4vjV
/5$1O
+ur D
7DJG^
9pNOSG
{E@D=
M8UQ=
^u0)#-]
<)Nmx
b}.ON
5Z6M',
% 9NT6
6O[u8
,c?#KO
q=W2V1
Rfm?-a{
F}zivc
TnC=h:
^^^kBN
4S&;m
|dBQH
byKM$>
ps"Q>
Uu2[]D
z59s?
~Qgog
muNNX
4%qXXfq
?FVvT
]:5jn
M!X}n
|Fz}^I
@$szy
7p$l?B
"w3=wB
!0w:l
jzN_9e[
+Jhy*
=,a3R
7K;gzu
1&<_RyA
olw'z
=tM0"
R{!7Eixn7n
D}#h"
aL[W.O1qi
@onyR
V#Av:
k rV(4
Cr%{n
`qXGp'C
-=v:2P
!6.bg
/`|#k
K!C>d
HS;X4
rUBfIk
Dg1xy
5V%s5>7F
v:A0^i)c
NX5sy
vzWK&@
Sz[FU
FZ1BSm
~TFGh4#q
p~lm%
?-'31
Z#9<"
gRvY&
$#&`M
'2>SxjVWc
:GZ"/
.N7mLE
rW3w-,
IJDok
un3\E
*gQ5S
,O$[7-
?Wl.W
@99bvK
@bTf#'
n`Jvu+
VHbE/
L_]{kO=
^[L)HNC=
xiJG^
,H_$a[
HO?`T
)^f'C
P5~]g
CM[Gx
E =:U
;uc%/f
F!*oP
hHA)KYC
@<FxD#
^='u$
%KTTQ3
N<$X4
U&m NB
XQCe,h
Ta=ysx
sGD<h:^
V)G`V
V}PMY8
=$eO=Z
b_5/?*
BBL#%9
x>zz7
01L^dDe
U>DM22
P$D$T
Si]6o]9
c,2N4
M\d!t
3[oqy
w,`A1
gc2<-
>P(bG
-B;z|
oh ip
K%g=OA
C`[MD
:l{C^
2<j2gTALE
S-<n`
&gU3pX
J`fQr8
<W/~$
*Cw ;
IK1g7
2g\^4
TyPl
!95a54
jCP=a
aoT qA
I37NR
dI7=$
v[^v Y
N6S8+
]FvXd
o?0I{^
"!Ef`j5
X^F8A
o0b`h,:
q^Y%D2
`BJK_I
c&: /
w"DBc
PxiA&
Eh91l
[GR*%
%^p_1]!
LgymO
%(R\c
>@4?u
]j"M#
6J)fT
a0"Ck
Lr=Fc
W-\;3D
^fIZcy
!^i5%
lzV)3
[C]e=P
3T]+j
>d|UK
rR|YS
A>J(7
X5:w
8oK40
eB&X/
-4^IJ
`YAGu
KVDm@
J*i'dz
x+~9l
#[V%rHC
Et7/aIg
el"Cw,N
RN@%7
r2,Kr2
!k6U%
(rZCh=SM
/zNYg
xhOoK
's9]herQ
Q;~=;O
"cvT~u
mzDnt<
uY!xg{JWW
Qk"A@
(Zqh<
|t|c$
c<-LV
||Re^
)[.G;
Vu"^i5EQ
KkiH*=AF
T=d 5HD
}nxBHNu8
_wX5&
}ptB?
R|C[bu F
E&%Qq
\NwJh
bGP0S
{T}!uZ`9
^9l Iv
=,jzP
e1q$c
#x/? BxD
sG.tI
A*"Y/
?'3y/{
:B/dM<
LG-J-I
p:Eu+
MqT~x^^c
,,|Sk
+H=}GS
EJ%ws
p;;+FL
aNwa=q
aMN"r
6F[^jM
N#t:]
p\cOdK!1
7Jw,c
]No3K
DqU53e^'
R:`[01
0fq+v
I(jSQ
J1juE
Gd:h]9
xW&68
$.jOX
VB[`E
_3o41.
jNIH*
wk1ZR
G{uxj
V~]/s
iWsC=
EnableWindow
pZG /;^
NN++\
+?{jN
\Microsoft\Internet Explorer\Quick Launch
gFD!~
nWUHPRm
?<raC
}OAJO
I?riR"
GXK+&
wug/|
-ohc{
tyi=U
KmkrL
o-i(>K
;:ihd
zM Oe
bM"%!
_%/NRt]G&
E]nm3h
b+R0H:
CloseHandle
->~4W{
!;p,M
dY%\6t
!zcc<
=;)Z9
ervWE=
=`bL)
%]T&Y
V1t{x
>pQ}^
Hdl)C
5-:qy
-YIfp
U-+k{
s^cSs
ebn1?O
p6VNt
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
6UU!SJ
#N$=t
X*G?zDC75
<v*VA
9"FnK
Y(d`K!
_4L,Op
Vw,|U
@]"O-
o#ge|
xGs*V9i
jTfW``
BqwG^C
IAQV3
n;2@vtn
Lom"!
~D#%1
&}h.#
VveYD
,Y_X1
Li*T1
|]'QwI
6'OL0
adV'[
q!TjTg
Q(V.X
Uz3wa!
(t:^
Hfw.gB`$K
\\4{f
hmfbn
s/L14
1 5gG
i4Q+Ih-
(Dc(>
p.[`F
otmSV
NBh'\
rLhF}
Fmr!ic
)g{xeH
8C`Km
]OL/x
#M1Oz
+M=SL
vnBOP
,bn?A
*"m/$
?t5U~
Q$KIi
6mnC
5rKEx
w4kk}
oh}Y8
$Fv$w&
Z](qj
P1}Cp7
K.)>u
`;VFLV
(dXXo~"
t{qOYR
&##V?
:s(8M{
ReqTa
n7>a1;
:no0e
%{E`N
V86Cf
r%K8Ap
a/xy/j
^$U\A
!JVse
lwUu"
vfuM9:5
K:\|P
mH;ek
Za7Ur)n
6s4G[`J
gKlnp
Xu/(#
5p~yJ
`~0Mn
;?~LIK
AHe"z
)vxkL
`V{I`l-t
9|gLVi-
xMvFu
UwiUP
<sI@
my5I;!^\$B
*+n_8
8jv"q
z~8 _8
Sz(|r}'
{BHMv
*KS`+
uZj ?
`4uQm3
P/RJi ;
EA&E'
?G+P`
7L!Ek
KuGXW
!GE[~
9!U\#D5
-*f 8BlI
f>P7T
&gaeJ
V$X(~
4p]Hm
0[Z;$J
pwCcd(
w]Il\
{x8J<
QV}IQ
l4Wpr|
vl wj
7 -Co
\9!`}d
bd3U4{VW
x.3>M
}nw8s
lSxVq
l&-Qg
B[Y__
ipJ%[.
b>'T\
-w_O6AcS
pz4^6
G$0B-o
SX}<4
Nf0]W
ht tn!]
7QkgL
?Q##r
9Q.yV6
=Q{GB
:==gbsV
COMCTL32.dll
>FFf;
Qgs0Vq#
;>65C
}uO/l
!n6wX;L
g:\Gs
&^KZ&J
PortableApps.comInstallerVersion
#jK:D
(4f?
1MLmsz
6xb^Z
<GW<W
@ON|(
?:.O[TH
Ay&GF
)AV;V
)xQQ"
d{g5~:=
~14Z&
YO&EMr
xae'n
DSh)Q
K"{t+by
x95%|
(g/3Ze
?SS7z
oJ-54
Rdc(31'
z_Jxt
O6Ypf|d
RemoveDirectoryW
!u:hy
SwV5k
5BQ5Uvurp
Edq4D
o?K)k
tEW2=+
hF\Ag~GSV
jY1lQ|
=sr%
#rlT`5
6j;4F#
WPBbt
7bUs1
a"1?H
ev?Tc
9Oh>:
C,D+
ogt]P)v
Qny{6
pqHZ'
cD!'n
RegDeleteValueW
#P!4u
gL30Y|
DY$a:\q
=Uc4zn
fIwa^
_lWpv]
/Bi.\u
e>gb
-J>gg
SH*19
+8'Zqx
MN{]@>i
uz;,C
4m"u,
zGQG.
6Rjsa
GstTC
?\J(r
`A<b8n
=e~5
:^qED
_63k?.L
?W4E4
U{z;3
b^~=He
w*^p7
bT#'C
RegEnumKeyW
nP t<
8j)JUc
!>Vm]
CRYPTBASE
xcN5.Cc
.4!(t
h/$hQ
m)eG^
gh]$O}b
[+VUZOD
t|)1W
Bh0Wm
zK:voy
vLWO
.+[wg
-sF'k
IsWindow
<l`D*Ca
9b+Fa
OIfx<
ln;]5v
}11p18
K2MKF)
a5{KNx7
.PfKK
)%;G\_.N
!MLoP?
0g["@
&]Xrp
k&!i>
j?,s?
pOcr>
0-?,5
}UJ${}9
V^|"Q
K4i58
j5gXh^
*48ml
./d.3
zv'EK^R3
!;gu_
iAHqi@
]v,?I
|OuFd9C`
{A}`7
FL1HM
aa%j1
EOH'wFPx
[R"tAtU1
G"l8o
+E!Li
v;a7{
Y)3_;
.35N1
n$[>d
7RKP}
c3b4k
fT)I,
IsWindowVisible
ap(*&d](
/p8`M
hB^2:.
fdI-@bY
Mx{0D
Ax<kt
":q\v
x%]lN
KH5RH
>OVvqG
|4l D,M
BpFnR4
~S^Fjf
aY@e*
h\]8i
|y'^y~
H #:UghtMp
Ayg#i
s&IA|=9
y-q1W
4$*Kg
/<m?%
Fn0V"
c##X+)
U(7U"KmRb
#~gO[
@Gk3o#
}6X8(W^E
uZL4aG^
=7`P{2
N,Oe\}1u
I2s-+
`nh_7K
VX3U$
b8G<)
'Nm!nsV
\,r=#
kceN_
pyO><5
h:lk;
BdU[{T
Gp.w|M
?SK`z
cL1phU
&+y`l
MA.l^4
{EiIT
*> }~
,wbdA
LELES
X1;'K
}H\zg
c|;.nF
PESY-
evm)k^
w_sP$
Pi=Ca
f!>_^
.ok#y
<bD!3
CallWindowProcW
Y&TFG
TFt1b
Txw2H
N(d{B
O6 %-
x!6DY
RA?pv
5+N}(
JmRYd
*A66H8
foo,Ya
^LW(f
&79l|t
?BZ2T
o9[,Gi
a|xh&P
rJl2L
Jul#f
avK-lc5
:;=}:
U^[uO3
3W>aiN
q=rDE
+?C!p
UVY,a)
mW~*x
D^+x3x~
Kq;ED
y?{;8
101181
WPWj0
HZM"V
-](}Rj
N0:)O
(dk0x
EdebtY
MXw7{
:K?JWWAO
^$h;l
,!Vrl$
zGczn
:_\^^
Dh~_EEe
+{4?>
$,%'G
RegDeleteKeyW
9Z?+}B
R.>"nyrV
>a~y|O
~p7b7Y673
v#Z7K
\xJ9N
0+~NV<e
%'TrP
`ZcuT]
Bu5%[
3o_m*s
_2!bT
%x=oPo0
T7395
J~z3[N
]Hx!:
0g:tj*
NVEPQ
KnG7-^S
T"j#~t
dE4WF
o-{Ru
ADk s
w!1`v{
rj@{7(6
2OycS
Vxxd$
WaitForSingleObject
^1&h'%
WcxXxc
.tFcFwjgH
m4Th?^
I-r:U^
\>S\h
~wWV'^
:8u}m
)@R94
AaF)N
wd-8:@
+`nQp
~aT^[J
T5`@e
d>CI,
ZQ$K'
DO@PYl
E\SsK
OpenProcessToken
Ju*'/
daFfD
JDhRb
R$/!6
Jm"E7
><H?o
wRJ8$J
3tIA
rSp(u
\!~1q
1eB}2O
L6MZ6#i
vD}r13
@]8gz
n{CpA
Aq=3,
x hDj
du\Rso
z.(om
a'@wt
I'N'a
.:q5G
Va8YQz
09c1_
s)Ih#W
t-vmTz<<>
04&lf
,B(DE
"y~Zp
}&n!E
SetForegroundWindow
NV[fckO
J1u=LWA
h}dG7Lx2f
}A>5z
Z1%W5
+5@'=
Ig=v^c
Ja^B+
?[=.[s}{
pg)~2
.mJ)<
[\g%D
vU6eR
LfK}U
y8vxS
#JHfd
K.&-S
5}2*E
9qwF7P
Op=cv
$g7}1t
[+4MS
c=b[3za
Smx*? i
nt=Z6kx
8W'k.v
{"N{FgCFi%
nqU;E
--r=]qq
)^V2D4
Ka&}>
@klUr
6|M]2
-3Qf1
e 7;F+
!!`9yoAru
~NZ~Mn
d[J\9
nWy1
[Whjbk
usUEJ
s nsP
ExpandEnvironmentStringsW
E]Gu,
.LRH\8
6%M{I[
?8E~:l
SetFileTime
,!Vmn
8$ F=
gWA%
A[UA@mv
.])Qx
eKPf"
b.@r}
|2Yg7
G?z%V
*y|(`c
Z2{@N[
;-)xS
;+>DC
c_Lm-[
>:F0(-o
]DlN.d
}PV|V
V7w|<
WkKXm`
e]eh \
v$n#9~
,W*D0
kEni`N
=j;zq
SY4T1
HU'}b
FOor::
!jvc{vx
tc3q]V(
BAD/5
\ZkMO
M!T-y
eSTQ(H
Ryv6\D
=U;AK
5\Kv'R
1'F6<A
j+M:5
<0T0h
9 i?S
V%p!$s
SLC '
Y{C&vs
>&uf*
}0TD"
:G#qj`
O5ij]aDC
;!9d:
LA\Vi3
zaqshG
KZ[yz
]AaY)f
ThPY+
NuNrX/\WB
@oY*v
WAZNe
4/Br5;
:^py%
]K8~.
\eZc$8I
N5gWj
C@cx=&
4drk5
HOjgOF
sK4|k
softuW
I Y^N
?rUFZ
lR}x>
W>dBh
*LZ_.yZ
91jw_
j8:FNY
(6Gd}nS
sGveuR
m@h$i
c#7y-Awa.
#qpzP9
<Y$6}oB
~:%#>}gi
w3|B7%i
c|xS8
9>\^X
8jXG^
buuu(
&gJi~/
8T{{;
x%JpYN
-)?eBM
'snTF
{:J2C
PMB~J
"Z3$6[
8AC{&
h8_FY
f<V_-1
#)?u_
eU{g:
~-Lj}
8U^fY
jV r=}9
M/;G&U.J
F|b:g
<B!/]
p 1.TF
YgFn$
~%2(/
I'oC[
&I]:f
R&=:1
|pbVMn
8:B)T
PczF~
0W^,l
RE;I@
P,nqP
HahY^}
ux({3,b
HXJ'*
;5<w%&E
e$S:
]^Zo)*y%"V
tzK.x
Ph%^?
n5=[;
0TO%.
vZ"3e8
z](T}/
,6O8B1d
(A0+DR
5f82~
8,wf>V
=9m\mNX-
?FWhK
O{%qw
34!z0
e\sN<
zmp;WY
tcbX<
W*&JM
O>Yq|
Ndb);i
m\8K(
^\7.fsu
J1&m{
ve 0t=
tMmOg
"i8F>
oGPEA
DBTH,};"/]C
^mD_l
EWnG`C
.<2H-
E*8f-x^$T
(OZWh##
90705
Z|_|q
<i7fQ
fT6`y
F4ryx1n
>;zb-hg
DialogBoxParamW
FreeLibrary
e[?4T
2f MnNMS92
SI"+%,
E!l-P
>=IBQDeu
~;i`u
`dR@<e
;i:Ld
sYyMFPz.P
[B=U-
pq_ms
w12,2
=1XJp%n
87{0n-
KaVAB
n/8le;
"xT]3
1|`-,
#'fHH
Xa9L'
xv:K4
D3W7Y
h TD~
Y28Yucg
CompanyName
4G"uK0
B<1Y44V
x|'x1
:p'@S
Rare Ideas LLC1
U1ZR"
/"_(I%/wj
)[71)F
a_U{D
d8!&pP
WN.tc
Y},f|
>R1Ex
t\'Li
{.S4v`
ou`o1
GVit/n
o~M"4
c3|?
Y.Pz|
")wnD
kYEX`
(PtDG*?
md*p
tU|T~
p+W,Q
%K*W=
Du/54
a>8);
#y>4p:
P]V~J
BT+Qg
Eg"/,a
)Oabt
qxM0l
5[N^=
*8:{f
>>;,33
!.R8n
.[ dd
U}\DN
}J'VQ
G`0uP
'F4)'
m,MqP
&9_g%
Aj"A[f
WA6%&8
:27Q6,4N
M,N}g
XnLW+
pFIOB%~
<f<;O
x>D2V
CZ"Z48u5
1Es_f
9y<"h=
<j>ICv
@p;yZ
https://sectigo.com/CPS0D
G$OCb
?D_(p
`u8:jQ
g11.
iZN|L\
jl}<>"
q[W&W
k!8TC<
.]^3ytH]&
fP|5V
SetBkColor
-R;Io
"g*K&4G
}@|o1
#(Vy/j
:!h,
NjV)\<g
)i2IU
hOcgJ`
Jo Kx
U8<9wB
ZCwJf
9:`~=
OV@@{{^W
s__fm$
KxmTk
?']O]4
#wtej
a(O,q
#LX^3b
*HDKkF
zH@1#
New York1!0
8:/$^r+
O7(-o
aI DChJ
zI&J|
Do0l!
>kQFm
OKgNKC
;#6&B
#G.jd
'iYpS
3{C4/
H_387
/he&a4
Y`"Q-S
~USu:
tw-ezo
cX~+n
LohOyr
,'5g&
R0v-[|
fD.Aj
50@QC
L3O[d
qBg)8f
CX3H'
t:|Uu
k3:~=
S.%x
m{c[=
O|d)r
L|]w$M
_knh9
E\-$vF
2XsqR6
R=U#b
-,kyV
bfhit
FI1Pob~
',CXW@
Rn!rP
2j4_u
i_oV{
FcB&l
}t|):{r
Q0kP8`%
Pr+mM
+>}V9
ny"ge
9F!{
4Jy!qs
szXIj
<@Su:
5 3(So
u1E.X
sO/TF
ImageList_AddMasked
w4rhX
O6dJA
GeCaT$
4-jJ ;
V@J[)iM
g7liU
PhP ]
$Uuq$
t,n$g
%Vr8g
3C.^W
Ry`4P
@qtL:9
&cl`HW
*"'oL
eZ%sX
fmt_x
Garjl2
:}jqBf
s4\Q,
qV^`c
!m>h_p
|cv=6
(,zxX
6L5W3v8
%UR8ma
i5;+5
XLa%Le
2Q}Sp
$%'hj
>lK$W
N>epS
-n.ikw
eE%6e
+Q)t[
aN`JC
dWJAc~
@>~JO
H"_rQ
7?I|U
!KI+OF
x:&py
_'Y`B
hH=2w
wF8T,
X%},3
FindWindowExW
eSZ3'
#QN$l
|W?<}w
6b00k
W%E2;
dVn|3f
B_rJX"
27sG>
?,rI$
(EgS}
GZD@wVC
zV@uM5'
xA>H&
RJg4W
AZL?*wH
PeekMessageW
6&;m6
7sl7?Q
rNZ(u
KsPU=
*oL5GUxZ
w0 bd
.Hd>v?
:j@Gc
qmV6^
"_VYg
C`f~Y'
Uq5#:G
oLrZY
Qmql:
r#F7JR
T~UL}#<
)l2a?
0;}e~
!ug?J
Vu\34B
4^F}7
BoFiM
,:ezA
`3'0f
'5=KiY
qqV$H
A-@|=
6c3:q
SetEnvironmentVariableW
4n-Yf
o'};b
mP U@q
FE``U
:3V#E
&\f4@#4
MtJ,{
oi'vMCo
,&vQ9
wsprintfA
K3d_0
h/}&]
UU`RDX
>$n,,G
UB<6(7A
{RL^Nb
'%c0hQ
Nqt0C
%{9hub
x,"mV
RtE/B
@Cw|7
gaP"7
f)PcPc
YZn?2@A^
I+v?4}Gk
)E(qp
'qwt=
l^GBR
#lNEZ
jm*\7
18t1o
o AN/
~o-;<
`4.C+
qY{dS
G;_m*
7'W7;g
?pvNB
ph<s=
jMA_)|
Installer integrity check has failed. Common causes include
>ejxR
\%1NM
r!QHTR
7Cx!X
?Da[+/
@0 &&,o
ICCc+454
jm[+X
E4p_/eD
O:;j|UC
}tKJ"
&&2N.l!
<~r.'/
;^ }f
B$+T`
H5M'z
jDp.7
]WxIL
xLg$I
MkBZB\(
]rM`ENPw
Vq]5 "m
5^zy!
c\5F3q
Z,v-?
X~\mSwB
Control Panel\Desktop\ResourceLocale
O@yHCh+
b7L5/
&(&1<T;f7
Apwv9gN.sO
Ez;YZ
t[h^5
7!;^T
4G^[m
5i2mr
'!tGS
"YwwD\W
v$n0k%2p
$U20]
@rSjFv
i:6?)@
V VQE`
{AW17
VUM^1
v=`Ta Z
8;>*a
p{4-.M
NT{p,
GetWindowLongW
TmeY$
ik.HZ#
j@H~o
;u) O
c,hWe
"#ozU)
UjpNuj
Kjbs",
:lkBMI
lJL9{
|o!8K$L.8
"}K\
%U'rN
|,7fF`R
MsDJ&
bNst%|
bkrj}
B_HO3
zZ""6
X*ND&
-y4Or
5gg V
Eu8;,
O!@(0H
.%T6g
ii+Qz
MHPy]w
,7ZlU
A4l4IZ=!
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
0[F (
{055M
lrgrR
yRNB#
(*u7Y
Z}AN>`
2u+$sU
0[tmV
PS9?7>.
80K/c
;$cU|
Nh-*\$
]Ob8[
F)HKF
iyqN?_
2}9[U
*zZ*=
Error launching installer
k3)XtW
s'Y+QQ
gc)_V
P}m]d
>0UA~
vdMU9NE
t3Wqz]
7e"wh7
rOC-B
W-op\
V6+9*G
G:<WwT
#*MPp
.\T:Eg
-@*c)6
-b &M
WriteFile
7g 8g
jds[XT<8,
4B+}5
>R?}[2r%
~@F->
4<k[~
dM[I)
U~6nd
DestroyWindow
*H_ZR
*4jUq
PyU"ZIe
FlPj^%
IPa'P
S=WZO
yr<6J*
\kq!K
6sFL ]W
ri1z36
4jG3L
~lk5'mK
|~54X
D)KsV
6+J::_
0n8zy
>3x$#(
e)5*-
+Ji9R
B+Z6.Jq
Lui)p
Jo)Y|
Ni|Fu
P Ea3
d''+G
Hj\4l2%
~<_pp
,lG\S
n7*2!(L
>.sNP)'3
cC>9U
go:1[b
fbDB{z"BWc
[b/SL):
b{GBb
VSUbOI:
EW/y71
[Rb:Si
{9GTC
g7?=u
p$=ud
SQWPV
RDgz@
%]YJ3
p0!Z\
L)ND1s
qj5d|
M/1_/
j8Myi_zJ
*5c(x%J[oc
;+7yQ
h*l#"~
VY@mZ!
.F2QxG1#`
W+Rg=j1
dO;e`
J|qY7
YP[tw
9v{_@'Al
NSh4V
VZu^%
}ljN8
04}#h
Q{SJn
[ $tX@T#
OfYtIP
"pfe7f{
@V;:5-
Ixo(yw
|r0Li
8gz_q\
PVW@U
+nb^c6
k[1Hc
6}":L
u9d`I
)mRfw>
|xeX#
U_n^:
6ke3Q
uUhS'
@$b15
|JE0p
c* W#
RichEd20
f(;'I
c>:mL9
H=JQy
<asj*}
jHjZV
sztv#
E8f%l
!JHQ)Ql+B
mvEGh
fNEq!
:78hx
,x*{cd
4MPkzx@
p)){Y
PortableApps.comFormatVersion
a,.5>
U[>tZ
.=4Qb
j/P=
Dgs5"
}}yqwp
I'{1C
Hb2P+
YOWUDk
js.k1b
^5ND.
K:lQ\
[PL4i
c_vRr
46x%wc
_\^qD
<X~TJ
'TDfg
0//8}
&6CX!
C6LbxeF
sqV|4
xi8>x
c[;hq
[ACz+
ZFaV+J
$zaU.
fdG*w
SPgUU
1@aZ/
vZW(Y
+*)H}
][G>3
<N_}#
}WR%[
AD/%O
@g)#]
dUeyFu~
~e*N%
(yIGs
;%:_E
nDS {
KV0uY
f,L.y
2(*aN
F .5xK
Pbt+mpSV
U&KK-
9u/Hk4FqHr#
CXcj0>I('
Z~]ds|
L=^aVQ
'5td"
F/ph#p
ojI4($3C6f,
OLEACC
p-btr
fY5M^
H!De=
/U{`1#T
X>3tM
W-O@o
v!rv/6
@lOL_
c$PG[
`F9D+
(+:-rA
DqVw6
bwF0$
D4=>E
EeUOC~
\VQC~
c%>3A
CAk~o
Dy^39
r/s+c
h0f0?
PtOY4
7 x|V
2`GrH
8Gd$&}
HROK7
TImkZ
z[\x:2\
%4J)3
IQ+'E
(OVt2
.1t.s
QK?I^YM
}w(4Z
~eX.>
v*A0kwx
,@2H>%4r&
T|V\P{
C>Fw7
2Ug^%
*Pa1y
3_Cnl
6lZa{A
Zlp)p$
/5-J9 H
qiZucx
r\@I>
P?'j>
3.5.21
qyjZ;W
E>{*D
l+R=]
3/,Xz
{Fl7u
SX><A$
/A7<PM
A1]r&
%ZO~3
rkUI/t
td"tT
K>dd?
IP/!t
GetModuleFileNameW
"%SG,.V
we9KH
sX-04
42?D%'L
2\4Lo
i$~^]
Yt2d:'(}(r#
3X=Z^
SY"x9
=xW<R
TN@:b'
,P8AZu
->B!w~,v
=j&9\
6$qu@
r_otC=
}lR.#
AY\KTGs
A.eAp),
u}z/p
;z5(7
t3w-[:]
</oT_Ga
Sa#IX
BB@6I
-Le1D
.1i)O
?+db1d>
L'C4"~
8W,9+p
a&,p{
<M%S4
98qAj0
zX>F'
Z"59c
dLqdehnY=
3D:LJC3
bRX<%8
}YD]e
'3?1tb12
-i%+\p
C@u70
Co]@n
lK.oca
_9k[GZbB
5wwuj
ZP!LJ
x_/LAE
w3?drU6r|
hc8(t
+_JQ^
?i,J,
V|Jkr
8N6nX
ch\JA
^3X@X
9lQR
#]}hd
9As(:
OLM"j
feE\5`
|6vuG
kwVb.
5CqM\
|DNT\
vXzOS' l
/y57&
&s%UD
?Snhb
TQU`"
~vZ+*
&[d!*
XWd-M(%
^0f{GV
pb*re
I(* eL
-+-V,+O
=wt^^
c1Z>C
AOD@(W
)jo2u
KQ~=\
"%PDD
xD"VK
>_ym=[
jCX6pb
Xpra&
g)0M,
P2Ey4
P22<w
[azGJ69
'OMe
MRh+t
z!^%c
e\;a'
VS_VERSION_INFO
IHa}?<<
/k}9L
d-!Em*6
s)8~1z
baP`g|
pXoXoJ
TAv=/
L1Hk255
BG~;/[
>*hVh@
c\DfG
P(f.(
9yoF~
kr~6E
2-BP\w
^v#6F
"pWY$
9`bej
gG?n.jhj
zg~dR
gJE`XH
ZIy-$
zUDkb
|-<6
#|_#[f
mmA .}{
TKKr7
Am2{MV
Q+@,g
gJ .Bg
r6nO)
VI6Ff
NKqn19
~yw;kn
ja'=R
qFkvO
{49=Ii
q$bi6
tVc5G
2tEp1
n6;cq
F|Gz]
',n}va
PP['x
OpenClipboard
\'8]S
,b<L{Lt
tE28D
toE~u
'Ub&l
;$ U^
!LQQ5
$.fE8
K|Zh2
yU3nr
6ubxgM
3Q.{qf
^5}*$
t-~zp
3_-ty
{MtQH
$$!im
mjd%Oz
qK9(4
n%~U -
y}%d6
SdV0D
!A$ep
a;zU\
Ol+1(
`>/S]
SMALHB7
OP{&;
?1J,U
}=oU -a
<@P_l
:.N4l
#)o*i
Xq&2D.y
.--k$
r]r|d
pzS15W
AaN2&_*f
aRKn3
zuqYq
T}XDMB
mp;$1
3Rq6C
]L^g=J
fkj0h
5g ="
94**wma
PX[lF
D'k!}
b_P$~
=nl8G
vI'XR&
Cxc^d
\3&43
Z8Za~
h.tLY
J<T8X>
EoEqs
)>RGZ%6n
YKeef
Kppv?
heNhV
1*Y4.j.
gRt+{
ExitProcess
DBTb>91
OlP:q
9iyc]
9=4gD
yFZ?R
Hlq\Nn^
fWcN,
^9c=-N6O^"ws
4mD`,
H+DT;_7
4d+&]5{#
/I:]St
zU"@6_
S<NRBeW9
4EZd'
]+G[u
BUb[gb
lJrN%
$3Z(!Ah
w=Ss/W
n+:IR
*K7,*
i=[,}"
5'Rb7
^3#T~
xWu&"
gW8Z37
(?1Gp
95qN{M%W
+k/G~
|~%Ka
;H>aR
1cRD^4#n
UM(x>-
Please wait while Setup is loading...
L@/6/l{)j
`rdtd
g<\"6
?y_;F
O4xic
f15fx
-H9NW;
Ilg31
c{~%,M-
Ji5g:wwQVFN
D[CMf
-i'+JsX{vE\
b$kK'
c(?qi~
B]1uD
4e'n.
oh_fiF
%]ZS7\
CreateDialogParamW
>jteC
*[cKR
G%01$
(bQ)?
4vTYu
CO7''
Qm(lx
G'G*_
!X^=Qxsd
GetExitCodeProcess
lA<xV
?-D4Q
3.5.21.0
U"Ren$X2T
afS;
,$j6=c
LGLtPPp
[Rename]
xi~^
Bn<ib
mb~[+
G8YA=5
TiQd^
v+G,|a
eG3GS
<L }Sk
P_*~+
K`@"<
CI\yM
C|LD{?
;T0iI
eiRl$
D0;u/n
\EnK;#@{
zPq3l
RichEdit20W
T\Zjid
2oZ'Xig
Iq-m`
)${76
Q8BQn
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v3.06.1</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/></application></compatibility><application xmlns="urn:schemas-microsoft-com:asm.v3"><windowsSettings><dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware></windowsSettings></application></assembly>
']q|C
0^s}9
qSsKI/
pPBn)
M668S
(/Op[3
PlHY(
VerQueryValueW
iMxW0
>'xn|o
YM[?#cZ
f-,WC
_3c!&
;?@]#K
W={!o
rOU]0
,.tbe
Mx(~"#
A+aVZ
2QK&m
]M.OX
L`.u~
(f9Kdu
d_4Vu
C[Sq
Kq3Z&a
,w?-H
SOb%<
GlobalLock
SHLWAPI
Ec+5`
;LJ&p
}Ie"F
GetPrivateProfileStringW
[to|Hm^7
Si10"
tiP-j
,q=P0
$SW0R
m^Bod
cFBpNWuja
$Cc=I;0
a#PHZ
{'0&,f
S>eXA3
hjFUN;
/V;sy
-t,-nH"
>>Ll)
vfndY
(nu~z
O^^3Q
Vm8h0
%Rq+p
@8!&b.Fy
hR09k
"*U>$
"0)Xr@
Q~]b7R
Gpo/U,
&w'2Y
xU^QLw
/,>ms
d44r h
pR+{J
f"<0{
?!EuwV
R ^%B
nZCs5
jj~M@
+l6<"
:*1$@
66pR:=q
W+5g8
$3?U,d
!{6,i
zzr+N
BlFVqt
P.]O!
<2'TRO
&dI1D
XM|35
InternalName
.bM;B(
^Sh%`
dS;<;
Qu6?n
OgY,0+}
K/q8v
wM'<^
;6ecKU
x4`0H
2crVd
?Z\hR
$0U,#c
~3Fi!Y5
z%?M<
$3*yxL
0#-Y%
1b+J
Sy'KY
wZ=@6
qR15`
s1> i
TqS]l
ESOO-&
W&Vxi
&,0yX
`^K<r
HCIs&%
i,CcU
iVA)ozd|
O03'-p
oCD[3
R+;gU
FindNextFileW
*z|P]
2mUG,
AsXy?L
*f>X}{1
bNwC?
oxCn-;
3.#'p
:!:0g
BLn%c
TsJid
N/]oW
B[r;^0
v`JQ{
?`DHq
O9[Qcl
qFiK<
JV=sp
`LU6)
7vug]B
2~zWTG
T1zgvs
T*PG:Y
W;>4b
;Ol6.
t{rQC5
{ham~
h`]Sh
MmC54+
SB6^b6i
b7A]2
o~K>4
incomplete download and damaged media. Contact the
Sl.e.
I{$&u
B<0crj]
V&5Uc
F=.g}
g$srr
re.m6<
L*B!L
~(0Umwo
&ojy2`
\V=OoB
)+;d[4
>+c>Y
.,SdN
N]K`[
'/2057
#..V"
gQ>OT
HXYNrw
$~SSCaWk<
4sP6(U
-tk2{wf
c)){u
rJC:~
GetSystemMetrics
Fc?m~
D$$SPS
h1mj)>w
H'Dno
Nyj&U
de`(^
WjEuFr
e:BOeJ6
4Mf-x
MA{79
.?1kp
)$L<5lNt
{`\<@G
"o_SXM
T(Fx2?
CloseClipboard
`+J]j
26u`-lb
Xwo,"
oNZIW
cY!ak
0p-{x
m"[h%o
c[5dS\!
C %m7
1It`{R
tjAuP
4=RVoO
rE;}F
y])0L
,~oM;W
l.G##
8lp%NL~i
L*,i3
FQ#v*
rFhPA{R
c<BnjF
*-3r.
,)fG>
]6jB*
Sectigo Limited1$0"
?%O"X
gG~FR
.W9>
27/!zv
k$a<@
lGLWYm?
hxbP\
)aJ8j
VVuM2
xQ0c?|:q
iv(<t
/x@&@a
UW']eg(
a8S@B+
7?MCwC
,i7Ln
W% {U
F@'\j#3
klSQ|
!;0~k
m|"Zv
]&*>Xmv
P[7ps
CRd:{u
x*!p'
NrCB
a-X`X
}(Dwe;!
;KjZT
pKm!U
19`PkF
_Drf(
3N~0W
~4x,I~
p+)ko
USER32.dll
1}B=A5
*L5m3,
WPHL/a
`D]1G
g~ag;
,%c_?p6
(i!!w
_<r ?
>A+Nm
^Xn\1_
0~5Vin
l4zKv(
g7O+P
}ZGv%$
Mg!h!
2~b[f
y(-O2
}q4C|
oZB0hB
sR|vQ
_LORJgJt
Fh0{]
1:Sw2
%m)AO6
8)O]8
<s$:O
dq))2N
8~4f~>.
!I]+Y'
[VQM+
]C?8=
350 Fifth Ave Suite 52091
m>g0F
[`]ZX$
aQ_tA
gL)<\^
a^!@B
pgjyZU+
._0<8
d^.J>
(1zOt~
l-3U"
|3gNB
^-~_H
&3;72
_bi6\+
zac03
)1Jw|N
/N''G
8oa/m
TeYwt
%`>~K!
D+8]6
wE~d0H
(4zsB
1lL)B
*9&!/`
]*Z9&]=
G-(^k
/r))R(
PNyBX
GetCurrentProcess
v)tLu
bX)>z
*":kk
kz^oQ
zT2mY!
$@RHn
^hKj.
"UPc#~b@
rEk<g
QBy$C
`Z V.zdU
n:pqe
/; r>/
Nau}O6
@=d:V
H!%q!
q/bv>
.ndata
co.bEu
/+pqbe
|A:IB
^cA[)
GetClassInfoW
\!\pu
DM2dG
#Mu"l
6iY1|
{g)36>
}-u!&
qnI|6P"
YYffD
QLR:sQ
UhV_TB
n|h1K
GA=;KJf
A1]=ei
mvJwT!_
?'r]{o
9\oGs
Wv<b`
P`fm-M
lwM%!(|
(V0P,
LrS/H
|<YC^
dSp}$x1
z*_sf_
S?r5nh
mNxXn
OleUninitialize
N/cE=hG
b&Gc28')!
}&^&4
Ys5sQ.z
|*wlU
g)R#p
7;kAh
c"m#U
NY(>-T
HXfiQ
bfiIa
<\1/D,
<P;x`
2.(1e
N6)6<
!SA_3
T]D9"uMrE8L
dd"Ab
Wa/PY
0je?Hp
(ACfg
@}AX0zG(
?M0EP
vmiXO
1p{kv9%
Hq?>T
dIX=Y
xY_]"
!:N~-
t9x1b
RLtDX
wt!}7
8u+j!
gzc8-1
Instu`
7:$Cw
k`<y5
a?0$W|
wxP*[
);UCX
av.-{
wJ;ct
-f,t~
t`4/2
ShowWindow
F$6g{
tO2gb
The USERTRUST Network1.0,
,U!8Pg
N{%GJ
/ /A3
Ijt-\gW%
C[?O2Sk
lbx>?x
\/Lkm
vF2QOqAI
WAHRak
lB|^s
0*"?%%B
w$9dH=
F'7R.
B&jrW
5"yM4
K]+Vg
8efs;y
DmlNH
P,,-KM
:hbTi
+)dA!X
hS28!
\:`mC
,U}w1_z
l!M+~
:7pKyW
by/1YZ
+Ze!R"<
Lm~Ma
\Sr?P!]
U=dZp
UXTHEME
r_ImH
k*'_A[
mr&wYPy
8=6}m
Zz:pW
o_*p>"
a&'<d
-0L_v
85HO\^
@9<ua
un$]CA
}>)(563o
%`+_~
#F<><
Ib_xv
5BVaN
x&i6wbZ
n0qNw
DWMAPI
=V$4*
"%QDy
/8oG_},
nWy5V
U(:'r
3~67g
Z4`<#
LookupPrivilegeValueW
NPJ2;
J0rh&#dV=
oM}y"
IEf-^*
UE#>'*
aEfeB+
[ikM>
]Oj#s
HNA^-l
UWn=D
OMBkk
PhgJm
Wd8$)
Oa7;G
P-X^
pm4{d
n<nd_
Na.42
"Gxw@Eo|@
sY7Ex
sFC.<u3Y
8<epi
o"5my
fA P|
38rWd2q
UHV:XJ
MG@.USd
ak}jwg>7fWK
IIDFromString
Kbl$6
=Pw"/G
WN}3B
$esx+
f(g(EEg
~w54)
s:*x|
S30S1{
xI "zH)9
h,n>uR
#>+k\k
(u9;S
`R"G0
f58ksIN
E;+fk
\.VS=
;<k,;
K[\qdH
VJJr%
xq|<#
"e[Nn
x!XH0
sMRnP
E4!^&
=D9cH
GetLastError
^!@]&:
Hzqi[o}qj
toM~7
*~Zfi
pIkv#P
_/D@N
ugLOT
P7:/X
]/|_@
~=Lae
:#I(`
D>]"H>
r$nqMV
eTJ@W3
39o~U
wK6l*
/FI0#
.)^(b
nWXI~\
gO-hi6s
`dT5~
$FlP$Q
A:i2s
x$j(x6
eZyZE
jNmJy6
),VMo|M
sT:>K/
VoD~g
\`{hK-H0_qRM:
H7[u#?h
uL@;>q
-Z\Mcq(
ZC=a/
+&/d,-U
"]}r}
cw*Yz
1hYOU
Gv-cO:
AzbT#;Dc
N2<&x
/{9igy
J]/%)
y"Zzv
`O.nZ2\x
s=!8rE
2DQ*&
BW'_Wx
}<3X*
2http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
MjZg5
HtknT
[5|9;
I/.kC
ma@;R
96-$"
Kpu;H
!`+<x
6)55\
qjaq#
XS)-h
PREBy,#(|f
=!:J
$p(`(
mE@iF!T
W!VY@
lF8O!
P~O]\:0@'S
`u;QS
.E7T"
=k4W-!c
z,kUc
PE Information
| Image Base | Entry Point | Reported Checksum | Actual Checksum | Minimum OS Version | Compile Time | Import Hash | Icon | Icon Exact Hash | Icon Similarity Hash | Icon DHash |
|---|---|---|---|---|---|---|---|---|---|---|
| 0x00400000 | 0x000035d8 | 0x0026c62c | 0x0026c62c | 4.0 | 2021-07-24 22:31:33 | c05041e01f84e1ccca9c4451f3b6a383 |  |
2c09465cc979677d65781d9403176c31 | 5c00f471cce984e3b873ef9ade242aed | 71e0e4b8cccccce0 |
Version Infos
| Comments | For additional details, visit PortableApps.com |
|---|---|
| CompanyName | PortableApps.com |
| FileDescription | WinWGet+ Portable |
| FileVersion | 0.20.2020.1212 |
| InternalName | WinWGet+ Portable |
| LegalCopyright | 2007-2021 PortableApps.com, PortableApps.com Installer 3.5.21.0 |
| LegalTrademarks | PortableApps.com is a registered trademark of Rare Ideas, LLC. |
| OriginalFilename | WinWGetPortable_0.20.2020-1.21.2_English.paf.exe |
| PortableApps.comAppID | WinWGetPortable |
| PortableApps.comFormatVersion | 3.5.21 |
| PortableApps.comInstallerVersion | 3.5.21.0 |
| ProductName | WinWGet+ Portable |
| ProductVersion | 0.20.2020.1212 |
| Translation | 0x0409 0x04b0 |
Sections
| Name | RAW Address | Virtual Address | Virtual Size | Size of Raw Data | Characteristics | Entropy |
|---|---|---|---|---|---|---|
| .text | 0x00000400 | 0x00001000 | 0x00006572 | 0x00006600 | IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ | 6.45 |
| .rdata | 0x00006a00 | 0x00008000 | 0x00001398 | 0x00001400 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 5.14 |
| .data | 0x00007e00 | 0x0000a000 | 0x00066378 | 0x00000600 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 4.09 |
| .ndata | 0x00000000 | 0x00071000 | 0x0015c000 | 0x00000000 | IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 0.00 |
| .rsrc | 0x00008400 | 0x001cd000 | 0x000199b0 | 0x00019a00 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 7.53 |
Overlay
| Offset | 0x00021e00 |
| Size | 0x00248cb0 |
| Name | Offset | Size | Language | Sub-language | Entropy | File type |
|---|---|---|---|---|---|---|
| RT_ICON | 0x001cd358 | 0x00012524 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.98 | None |
| RT_ICON | 0x001df880 | 0x000025a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.17 | None |
| RT_ICON | 0x001e1e28 | 0x000010a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.51 | None |
| RT_ICON | 0x001e2ed0 | 0x00000ea8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.70 | None |
| RT_ICON | 0x001e3d78 | 0x00000988 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.65 | None |
| RT_ICON | 0x001e4700 | 0x000008a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.02 | None |
| RT_ICON | 0x001e4fa8 | 0x00000568 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.67 | None |
| RT_ICON | 0x001e5510 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.84 | None |
| RT_DIALOG | 0x001e5978 | 0x00000120 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.56 | None |
| RT_DIALOG | 0x001e5a98 | 0x00000200 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.68 | None |
| RT_DIALOG | 0x001e5c98 | 0x000000f8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.91 | None |
| RT_DIALOG | 0x001e5d90 | 0x000000ee | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.93 | None |
| RT_GROUP_ICON | 0x001e5e80 | 0x00000076 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.80 | None |
| RT_VERSION | 0x001e5ef8 | 0x000005cc | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.47 | None |
| RT_MANIFEST | 0x001e64c8 | 0x000004e3 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.29 | None |
Imports
| Name | Address |
|---|---|
| RegCreateKeyExW | 0x408000 |
| RegEnumKeyW | 0x408004 |
| RegQueryValueExW | 0x408008 |
| RegSetValueExW | 0x40800c |
| RegCloseKey | 0x408010 |
| RegDeleteValueW | 0x408014 |
| RegDeleteKeyW | 0x408018 |
| AdjustTokenPrivileges | 0x40801c |
| LookupPrivilegeValueW | 0x408020 |
| OpenProcessToken | 0x408024 |
| SetFileSecurityW | 0x408028 |
| RegOpenKeyExW | 0x40802c |
| RegEnumValueW | 0x408030 |
| Name | Address |
|---|---|
| SHGetSpecialFolderLocation | 0x408178 |
| SHFileOperationW | 0x40817c |
| SHBrowseForFolderW | 0x408180 |
| SHGetPathFromIDListW | 0x408184 |
| ShellExecuteExW | 0x408188 |
| SHGetFileInfoW | 0x40818c |
| Name | Address |
|---|---|
| OleInitialize | 0x408298 |
| OleUninitialize | 0x40829c |
| CoCreateInstance | 0x4082a0 |
| IIDFromString | 0x4082a4 |
| CoTaskMemFree | 0x4082a8 |
| Name | Address |
|---|---|
| ImageList_Create | 0x40803c |
| ImageList_Destroy | 0x408040 |
| ImageList_AddMasked | 0x408044 |
| Name | Address |
|---|---|
| SetBkMode | 0x40804c |
| SetBkColor | 0x408050 |
| GetDeviceCaps | 0x408054 |
| CreateFontIndirectW | 0x408058 |
| CreateBrushIndirect | 0x40805c |
| DeleteObject | 0x408060 |
| SetTextColor | 0x408064 |
| SelectObject | 0x408068 |
Usage
Processing ( 35.58 seconds )
- 32.713 ProcessMemory
- 2.691 CAPE
- 0.164 BehaviorAnalysis
- 0.006 AnalysisInfo
- 0.001 Debug
Signatures ( 0.06 seconds )
- 0.008 ransomware_files
- 0.007 antiav_detectreg
- 0.005 antianalysis_detectfile
- 0.005 ransomware_extensions
- 0.003 antiav_detectfile
- 0.003 infostealer_ftp
- 0.003 territorial_disputes_sigs
- 0.003 ursnif_behavior
- 0.002 antianalysis_detectreg
- 0.002 infostealer_bitcoin
- 0.002 infostealer_im
- 0.002 infostealer_mail
- 0.002 poullight_files
- 0.002 masquerade_process_name
- 0.001 antidebug_devices
- 0.001 antivm_parallels_keys
- 0.001 antivm_vbox_files
- 0.001 antivm_vbox_keys
- 0.001 antivm_vmware_keys
- 0.001 geodo_banking_trojan
- 0.001 browser_security
- 0.001 disables_backups
- 0.001 disables_browser_warn
- 0.001 disables_power_options
- 0.001 azorult_mutexes
- 0.001 cryptbot_files
- 0.001 echelon_files
- 0.001 revil_mutexes
- 0.001 modirat_behavior
Reporting ( 0.12 seconds )
- 0.113 CAPASummary
- 0.007 JsonDump
Signatures
Queries the keyboard layout
Enumerates running processes
process: System with pid 4
process: Registry with pid 92
process: smss.exe with pid 384
process: csrss.exe with pid 476
process: wininit.exe with pid 552
process: services.exe with pid 656
process: lsass.exe with pid 696
process: fontdrvhost.exe with pid 784
process: svchost.exe with pid 808
process: svchost.exe with pid 924
process: svchost.exe with pid 976
process: svchost.exe with pid 1036
process: svchost.exe with pid 1108
process: svchost.exe with pid 1116
process: svchost.exe with pid 1204
process: svchost.exe with pid 1240
process: svchost.exe with pid 1296
process: svchost.exe with pid 1348
process: svchost.exe with pid 1392
process: svchost.exe with pid 1428
process: svchost.exe with pid 1452
process: svchost.exe with pid 1544
process: svchost.exe with pid 1552
process: svchost.exe with pid 1676
process: svchost.exe with pid 1756
process: svchost.exe with pid 1772
process: svchost.exe with pid 1788
process: Memory Compression with pid 1844
process: svchost.exe with pid 1864
process: svchost.exe with pid 1940
process: svchost.exe with pid 1964
process: svchost.exe with pid 1976
process: svchost.exe with pid 1364
process: svchost.exe with pid 2024
process: svchost.exe with pid 1692
process: svchost.exe with pid 2116
process: svchost.exe with pid 2128
process: svchost.exe with pid 2136
process: svchost.exe with pid 2144
process: svchost.exe with pid 2252
process: spoolsv.exe with pid 2340
process: svchost.exe with pid 2384
process: svchost.exe with pid 2416
process: svchost.exe with pid 2568
process: svchost.exe with pid 2580
process: svchost.exe with pid 2596
process: svchost.exe with pid 2608
process: svchost.exe with pid 2640
process: svchost.exe with pid 2736
process: svchost.exe with pid 2756
process: svchost.exe with pid 2764
process: MsMpEng.exe with pid 2772
process: svchost.exe with pid 2800
process: svchost.exe with pid 2852
process: svchost.exe with pid 3136
process: svchost.exe with pid 3772
process: svchost.exe with pid 3912
process: MicrosoftEdgeUpdate.exe with pid 3080
process: svchost.exe with pid 64
process: svchost.exe with pid 820
process: svchost.exe with pid 3692
process: SearchIndexer.exe with pid 5088
process: svchost.exe with pid 5940
process: svchost.exe with pid 6084
process: svchost.exe with pid 6092
process: svchost.exe with pid 5208
process: svchost.exe with pid 3440
process: dasHost.exe with pid 4544
process: svchost.exe with pid 4576
process: SecurityHealthService.exe with pid 4392
process: NisSrv.exe with pid 5416
process: svchost.exe with pid 6748
process: svchost.exe with pid 7040
process: svchost.exe with pid 6580
process: SgrmBroker.exe with pid 1796
process: svchost.exe with pid 6248
process: svchost.exe with pid 572
process: svchost.exe with pid 3184
process: svchost.exe with pid 3180
process: svchost.exe with pid 5236
process: svchost.exe with pid 1572
process: svchost.exe with pid 5020
process: csrss.exe with pid 6676
process: winlogon.exe with pid 780
process: fontdrvhost.exe with pid 4680
process: dwm.exe with pid 3860
process: sihost.exe with pid 2360
process: svchost.exe with pid 2216
process: svchost.exe with pid 6832
process: svchost.exe with pid 5524
process: taskhostw.exe with pid 7156
process: explorer.exe with pid 640
process: svchost.exe with pid 4968
process: StartMenuExperienceHost.exe with pid 4628
process: RuntimeBroker.exe with pid 6224
process: SearchApp.exe with pid 2060
process: RuntimeBroker.exe with pid 2732
process: SearchApp.exe with pid 952
process: ctfmon.exe with pid 5664
process: SkypeBackgroundHost.exe with pid 648
process: TextInputHost.exe with pid 676
process: smartscreen.exe with pid 5572
process: RuntimeBroker.exe with pid 6932
process: SecurityHealthSystray.exe with pid 5404
process: OneDrive.exe with pid 4508
process: SystemSettings.exe with pid 5096
process: ApplicationFrameHost.exe with pid 4160
process: UserOOBEBroker.exe with pid 5852
process: audiodg.exe with pid 5596
process: dllhost.exe with pid 1856
process: svchost.exe with pid 1632
process: ShellExperienceHost.exe with pid 5964
process: RuntimeBroker.exe with pid 6872
process: conhost.exe with pid 2892
process: upfc.exe with pid 2652
process: svchost.exe with pid 6156
process: backgroundTaskHost.exe with pid 4400
process: CompatTelRunner.exe with pid 2664
process: TrustedInstaller.exe with pid 1536
process: MoUsoCoreWorker.exe with pid 1380
process: TiWorker.exe with pid 2744
process: conhost.exe with pid 2236
process: svchost.exe with pid 228
process: sppsvc.exe with pid 1404
process: RuntimeBroker.exe with pid 3076
process: SppExtComObj.Exe with pid 460
process: RuntimeBroker.exe with pid 6588
process: svchost.exe with pid 6584
process: svchost.exe with pid 1768
process: WinWGetPortable_0.20.exe with pid 816
Reads data out of its own binary image
self_read: process: WinWGetPortable_0.20.exe, pid: 816, offset: 0x00000000, length: 0x00268909
self_read: process: WinWGetPortable_0.20.exe, pid: 816, offset: 0x30785c5e6331785c, length: 0x00008000
self_read: process: WinWGetPortable_0.20.exe, pid: 816, offset: 0x6531785c6331785c, length: 0x00004000
self_read: process: WinWGetPortable_0.20.exe, pid: 816, offset: 0x785c263938785c09, length: 0x00000004
The binary likely contains encrypted or compressed data
section: {'name': '.rsrc', 'raw_address': '0x00008400', 'virtual_address': '0x001cd000', 'virtual_size': '0x000199b0', 'size_of_data': '0x00019a00', 'characteristics': 'IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ', 'characteristics_raw': '0x40000040', 'entropy': '7.53'}
Yara detections observed in process dumps, payloads or dropped files
Hit: PID 816 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'
Anomalous binary characteristics
anomaly: Entrypoint of binary is located outside of any mapped sections
Screenshots
No screenshots available.Hosts
No hosts contacted.
DNS
No domains contacted.
Summary
C:\Windows\System32\kernel.appcore.dll
\Device\CNG
\??\MountPointManager
C:\Users\Packager\AppData\Local\Temp\
C:\Users\Packager\AppData\Local\Temp
C:\Users\Packager\AppData\Local\Temp\nsl427B.tmp
C:\Users\Packager\AppData\Local\Temp\WinWGetPortable_0.20.exe
C:\Users\Packager\AppData\Local\Temp\nsw4357.tmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp
C:\Users
C:\Users\Packager
C:\Users\Packager\AppData
C:\Users\Packager\AppData\Local
C:\Users\Packager\PortableApps\*.*
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\System.dll
C:\PortableApps
C:\Windows\System32\en-US\USER32.dll.mui
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\modern-wizard.bmp
C:\Windows\System32\textinputframework.dll
C:\Windows\System32\CoreUIComponents.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\WinTypes.dll
C:\Windows\SystemResources\USER32.dll.mun
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\nsDialogs.dll
C:\Windows\Fonts\staticcache.dat
C:\Windows\System32\TextShaping.dll
C:\Windows\System32\shell32.dll
C:\Users\Packager\AppData\Local\Temp\WinWGetPortable_0.20.exe.Local\
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
C:\Windows\System32\imageres.dll
C:\Windows\SystemResources\imageres.dll.mun
\Device\CNG
\??\MountPointManager
C:\Users\Packager\AppData\Local\Temp\
C:\Users\Packager\AppData\Local\Temp
C:\Users\Packager\AppData\Local\Temp\nsl427B.tmp
C:\Users\Packager\AppData\Local\Temp\WinWGetPortable_0.20.exe
C:\Users\Packager\AppData\Local\Temp\nsw4357.tmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp
C:\Users
C:\Users\Packager
C:\Users\Packager\AppData
C:\Users\Packager\AppData\Local
C:\Users\Packager\PortableApps\*.*
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\System.dll
C:\PortableApps
C:\Windows\System32\en-US\USER32.dll.mui
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\modern-wizard.bmp
C:\Windows\System32\textinputframework.dll
C:\Windows\System32\CoreUIComponents.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\WinTypes.dll
C:\Windows\SystemResources\USER32.dll.mun
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\nsDialogs.dll
C:\Windows\Fonts\staticcache.dat
C:\Windows\System32\TextShaping.dll
C:\Windows\System32\shell32.dll
C:\Users\Packager\AppData\Local\Temp\WinWGetPortable_0.20.exe.Local\
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
C:\Windows\System32\imageres.dll
C:\Windows\SystemResources\imageres.dll.mun
C:\Users\Packager\AppData\Local\Temp\nsw4357.tmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\System.dll
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\modern-wizard.bmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\nsDialogs.dll
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\System.dll
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\modern-wizard.bmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp\nsDialogs.dll
C:\Users\Packager\AppData\Local\Temp\nsl427B.tmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp
C:\Users\Packager\AppData\Local\Temp\nsq4386.tmp
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\WinWGetPortable_0.20.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\AppCompatClassName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg 2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg
HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer
HKEY_LOCAL_MACHINE\Software\Microsoft\Input
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts
HKEY_LOCAL_MACHINE\Software\Policies
HKEY_CURRENT_USER\Software\Policies
HKEY_CURRENT_USER\Software
HKEY_LOCAL_MACHINE\Software
HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\AutoSuggest
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Always Use Tab
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\(Default)
HKEY_CURRENT_USER\Control Panel\Desktop
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\WinWGetPortable_0.20.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\AppCompatClassName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg 2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg
HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer
HKEY_LOCAL_MACHINE\Software\Microsoft\Input
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts
HKEY_LOCAL_MACHINE\Software\Policies
HKEY_CURRENT_USER\Software\Policies
HKEY_CURRENT_USER\Software
HKEY_LOCAL_MACHINE\Software
HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\AutoSuggest
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Always Use Tab
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\(Default)
HKEY_CURRENT_USER\Control Panel\Desktop
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\AutoSuggest
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Always Use Tab
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\(Default)
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\AutoSuggest
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Always Use Tab
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\(Default)
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
Local\SM0:816:168:WilStaging_02
Local\MSCTF.Asm.MutexDefault3
CicLoadWinStaWinSta0
Local\MSCTF.CtfMonitorInstMutexDefault3
DefaultTabtip-MainUI
Local\SM0:816:64:WilError_03
Local\MSCTF.Asm.MutexDefault3
CicLoadWinStaWinSta0
Local\MSCTF.CtfMonitorInstMutexDefault3
DefaultTabtip-MainUI
Local\SM0:816:64:WilError_03
Sorry! No behavior.
Sorry! No strace.
Sorry! No tracee.
No hosts contacted.
No TCP connections recorded.
No UDP connections recorded.
No domains contacted.
HTTP Requests
No HTTP(s) requests performed.
SMTP traffic
No SMTP traffic performed.
IRC traffic
No IRC requests performed.
No ICMP traffic performed.
CIF Results
No CIF Results
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Suricata HTTP
No Suricata HTTP
Sorry! No Suricata Extracted files.
Sorry! No dropped files.
Sorry! No process dumps.
Sorry! No process dumps.