Analysis
| Category | Package | Started | Completed | Duration | Options | Log(s) |
|---|---|---|---|---|---|---|
| FILE | exe | 2025-06-10 18:53:42 | 2025-06-10 19:25:01 | 1879 seconds | Show Options | Show Analysis Log |
procmemdump=1
import_reconstruction=1
unpacker=2
norefer=1
no-iat=1
2024-11-25 13:37:15,209 [root] INFO: Date set to: 20250610T18:24:48, timeout set to: 1800 2025-06-10 19:24:48,153 [root] DEBUG: Starting analyzer from: C:\tmp_gell1p8 2025-06-10 19:24:48,153 [root] DEBUG: Storing results at: C:\prTihHii 2025-06-10 19:24:48,153 [root] DEBUG: Pipe server name: \\.\PIPE\DeZAgRk 2025-06-10 19:24:48,153 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32 2025-06-10 19:24:48,153 [root] INFO: analysis running as an admin 2025-06-10 19:24:48,153 [root] INFO: analysis package specified: "exe" 2025-06-10 19:24:48,153 [root] DEBUG: importing analysis package module: "modules.packages.exe"... 2025-06-10 19:24:49,246 [root] DEBUG: imported analysis package "exe" 2025-06-10 19:24:49,246 [root] DEBUG: initializing analysis package "exe"... 2025-06-10 19:24:49,246 [lib.common.common] INFO: wrapping 2025-06-10 19:24:49,246 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation 2025-06-10 19:24:49,246 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\7-ZipPortable_21.07.paf.exe 2025-06-10 19:24:49,246 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option 2025-06-10 19:24:49,246 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option 2025-06-10 19:24:49,246 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option 2025-06-10 19:24:49,246 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option 2025-06-10 19:24:49,527 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser" 2025-06-10 19:24:49,574 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig" 2025-06-10 19:24:49,637 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise" 2025-06-10 19:24:49,653 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human" 2025-06-10 19:24:49,653 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops' 2025-06-10 19:24:49,653 [lib.api.screenshot] ERROR: No module named 'PIL' 2025-06-10 19:24:49,653 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots" 2025-06-10 19:24:49,668 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump" 2025-06-10 19:24:49,668 [root] DEBUG: Initialized auxiliary module "Browser" 2025-06-10 19:24:49,668 [root] DEBUG: attempting to configure 'Browser' from data 2025-06-10 19:24:49,668 [root] DEBUG: module Browser does not support data configuration, ignoring 2025-06-10 19:24:49,668 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"... 2025-06-10 19:24:49,668 [root] DEBUG: Started auxiliary module modules.auxiliary.browser 2025-06-10 19:24:49,668 [root] DEBUG: Initialized auxiliary module "DigiSig" 2025-06-10 19:24:49,668 [root] DEBUG: attempting to configure 'DigiSig' from data 2025-06-10 19:24:49,668 [root] DEBUG: module DigiSig does not support data configuration, ignoring 2025-06-10 19:24:49,668 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"... 2025-06-10 19:24:49,668 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature 2025-06-10 19:25:11,090 [modules.auxiliary.digisig] DEBUG: File has a valid signature 2025-06-10 19:25:11,090 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json 2025-06-10 19:25:11,090 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig 2025-06-10 19:25:11,090 [root] DEBUG: Initialized auxiliary module "Disguise" 2025-06-10 19:25:11,090 [root] DEBUG: attempting to configure 'Disguise' from data 2025-06-10 19:25:11,090 [root] DEBUG: module Disguise does not support data configuration, ignoring 2025-06-10 19:25:11,090 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"... 2025-06-10 19:25:11,090 [modules.auxiliary.disguise] INFO: Disguising GUID to da52efaa-94ca-42bc-b9ed-e09355c09058 2025-06-10 19:25:11,090 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise 2025-06-10 19:25:11,090 [root] DEBUG: Initialized auxiliary module "Human" 2025-06-10 19:25:11,090 [root] DEBUG: attempting to configure 'Human' from data 2025-06-10 19:25:11,090 [root] DEBUG: module Human does not support data configuration, ignoring 2025-06-10 19:25:11,090 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"... 2025-06-10 19:25:11,106 [root] DEBUG: Started auxiliary module modules.auxiliary.human 2025-06-10 19:25:11,106 [root] DEBUG: Initialized auxiliary module "Screenshots" 2025-06-10 19:25:11,106 [root] DEBUG: attempting to configure 'Screenshots' from data 2025-06-10 19:25:11,106 [root] DEBUG: module Screenshots does not support data configuration, ignoring 2025-06-10 19:25:11,106 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"... 2025-06-10 19:25:11,106 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled 2025-06-10 19:25:11,106 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots 2025-06-10 19:25:11,106 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets" 2025-06-10 19:25:11,106 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data 2025-06-10 19:25:11,106 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring 2025-06-10 19:25:11,106 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"... 2025-06-10 19:25:11,106 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696 2025-06-10 19:25:11,137 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmp_gell1p8\dll\696.ini 2025-06-10 19:25:11,152 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor 2025-06-10 19:25:11,152 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor 2025-06-10 19:25:11,152 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor 2025-06-10 19:25:11,152 [lib.api.process] INFO: Option 'norefer' with value '1' sent to monitor 2025-06-10 19:25:11,152 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor 2025-06-10 19:25:11,152 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor 2025-06-10 19:25:11,152 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp_gell1p8\dll\AxNZEQJd.dll, loader C:\tmp_gell1p8\bin\cOuiwzfo.exe 2025-06-10 19:25:11,199 [root] DEBUG: Loader: IAT patching disabled. 2025-06-10 19:25:11,215 [root] DEBUG: Loader: Injecting process 696 with C:\tmp_gell1p8\dll\AxNZEQJd.dll. 2025-06-10 19:25:11,215 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'. 2025-06-10 19:25:11,215 [root] INFO: Disabling sleep skipping. 2025-06-10 19:25:11,215 [root] DEBUG: 696: Full process memory dumps enabled. 2025-06-10 19:25:11,215 [root] DEBUG: 696: Import reconstruction of process dumps enabled. 2025-06-10 19:25:11,215 [root] DEBUG: 696: Active unpacking of payloads enabled 2025-06-10 19:25:11,215 [root] DEBUG: 696: CAPE debug - unrecognised key norefer. 2025-06-10 19:25:11,215 [root] DEBUG: 696: TLS secret dump mode enabled. 2025-06-10 19:25:11,215 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542 2025-06-10 19:25:11,231 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable 2025-06-10 19:25:11,231 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0 2025-06-10 19:25:11,231 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF822E30000, thread 3124, image base 0x00007FF60D500000, stack from 0x0000008EFABF4000-0x0000008EFAC00000 2025-06-10 19:25:11,231 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe 2025-06-10 19:25:11,246 [root] DEBUG: 696: Hooked 5 out of 5 functions 2025-06-10 19:25:11,246 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread. 2025-06-10 19:25:11,246 [root] DEBUG: Successfully injected DLL C:\tmp_gell1p8\dll\AxNZEQJd.dll. 2025-06-10 19:25:11,246 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe> 2025- <truncated>
Machine
| Name | Label | Manager | Started On | Shutdown On | Route |
|---|---|---|---|---|---|
| win10-2 | win10-2 | KVM | 2025-06-10 18:53:42 | 2025-06-10 19:24:41 | none |
File Details
| File Name |
7-ZipPortable_21.07.paf.exe
|
|---|---|
| File Type | PE32 executable (GUI) Intel 80386, for MS Windows |
| File Size | 2880728 bytes |
| MD5 | 558b055732edf3293ae2200f2362dd77 |
| SHA1 | 6823abc4b6abd035937b911c665aa41cfa93a7f3 |
| SHA256 | d6820254f4911743b71ff428691d8ab7c1f164e49c1f11f7c725caa620c7d903 [VT] [MWDB] [Bazaar] |
| SHA3-384 | 6a804e4a0a683a7ebae5bdc0cf99d1d0a59cd55440effdb02af10e9af605b52d7a1362786ee1c6b071cbe5572c8f2a66 |
| CRC32 | 7434829C |
| TLSH | T1E3D5339AFA41C402E5AB1A7419E353B3A377FE43C001E60F7BC52BD732AD556C62B44A |
| Ssdeep | 49152:Xa9fnQmbDquYIw9+2/q7KUXTtcousSLEhK2qVcMEz0hvsjGJGbgfWmfD:XK1WuE/6tcouspCcMiosjGJJlD |
| PE | File Strings BinGraph Vba2Graph VirusTotal |
U!*i
?,:35
u7S8m
@.data
9mT!^
?pHa{
"MU[\H
xiqLa
r}O!IZ
aFv1$2o
x>D"Z7kX7
KqO_6
pV@v|5
+Q~!:
8iuA<
::q6F
;aT0$
j_SxL
W)|R?
TC'yT
q]5ob>
"K7 |
nG:zi
cj0:5
0|_2GEq
D{{9~
Vu($[
cJ6&b
Fdt,c^q
@H2Rd<
<NCAm
u@1k-
]11f|yu
{vSR~
=I.k*
ltStO
*-i>I
VFIP[
4t5H]K|
TV}{{
2#s>0
c;_0}`
ZE*?h
rR<-n
F?5{U
74fu+
O)^&"6
A3tGa
I nF,
:iXHw5
NQ^Y.
g!=ve
[2 T4D
d:Zg6
/}dCH
Z~|i!
{A?&j
V(B#y.
G^P\c
p2)Bi#
&)<hB
LEi)A
Y,WNQ
JrCP?/Qw
mAD)!c#
;9\n(
B}sc0G
YPrs^
T-a[a
X*,;h
"~LEU
*,Va37o
4PZk>~5
G*pr6u
-=+4NW7A
emZ-W
/nch!R
7qf"y
Pk}$U
xT%js
#EA?@)=
~>]nUU
oKgV$
}lm*2
r^s#;
~cYbSK
USERENV
>%0{
CreateBrushIndirect
I[%D;
IF7>23
uNU6,
<[FiJ
r*MPe
=%Zr`
DF$C:v
nHtee
DR+~^
yJ.8]c
tf.1)
,a\&BRmtf
5P)jd
);-iTf
L)h%c=
040904b0
Nrb=\o
9$4D*2
Rg,6F
|#eg ^XrZ
ApM#o
[" V#
M&3Vn_
*<3D*~
+7?a*
181102000000Z
|g~}.
XQ2TO
Z[|*,
ww:Fv
D,;g9c~
;yKq9J
`_fu)
}U5F|
"|uS3
)W8w~X
Q-@$zC
J&Y9F
xi)$F
#F(^z
1s+\F1
Iprj-
~MRIk
cqVmj
.&~:q
hvg^C
j.sc'D
5YL^
8dMF$
Y>=4D
\fru7V/
S*oV:
DEH%RN
2@p7.s
jPv3]W
wOgo2(kj
4(Y2;
JBD;t
KkWsj,Q
EL!Od
NXH&}
#10?x
X423:
anzLxL4=%
>'Ry5
gFT17.
zMm6}
x<}u;
}ZPy[!y
f`^Ni>
^iYA=_I
&|hM)
kLouo
b V!
l:GjZ
_<u!r*
9I$[Q
%u.%u%s%s
dq4 p
$k`t;o
7gK-Iu
uL*hW
pUx"B
<Ufd_
9+OK9
_mJt\
#,,n.
uVyET
;($,R
>^^.rX!
5T>:X
F4t=s1l
5Yfhv
6"oN@
JB.EK'
2/c=n
<a3R"
lKcm&
T0/~Aw
Gm%ckh
&pAVnuV
F*n.\
E^=6A
x#(zz6
ar2P/
a/rZO
cF}27}+
+Tv@w
-k4VC
AWORgG
kY9UR
K.H )
XF0rJd
XkMdG
YV"m6
pN~pr
T0T>"
Rp,]|%o
L&}5k
0nm[:1
$9!!O
fP:eK
5"?8$
V'C>T4
UCOde
F*}cz
kfM:
Qddg}
=RXbWm
Gwu<F
O)m>w|
G#)Z!
zLU]VrE
BMk;s
W?6ky~6
M)_>T6
TN]^>U
G6u<_L]
cw^Js
zuz-sP.
*~~`=H
\I-ZC
MqRh3
GEh*J
PYB5.
6refe
XCfeE
~&P]=
s>u*qF4G
>cqX6
9'5GB)H
xZkAc
)TbRP
BX<J)'4
{jSJ*iVa
GHPK7
)?4dn^[i
~3Sam
hl&ARP
h8s\(
NQAcuP
hAo7_k&
is2gMy^
{RFxL
1]%Pbz
urY~^$|
a6S)'9M
&Phf[pX
tjBwfb;9
U;|r?
<p$]AL
MI6OHV
Aq7e+x
_^"w
Aq-E9
Jfq9:
~4c9H
_`xRG9
QNi!v~
EGyBU
]FH<8#
Xqp%O
O,t_4
C]XX0
p6]Gl
SOW2V`
Uu@Xx
nOuf9
&`CNtN0yG
'.y8w
qA:J)
l}B0-
AWRzr
HV@u]
|qy/r
h-:po
G'Lfe
u`A!!
R#<0_Np
I-u^8"
t$8l&#
8*19{
Yh%nn
pGY~:
\,IbF
8\o?e
5'^G5@8
e!)aM
\Temp
rC$q-
\_$#CgP
0 wjc
t|p~
z>i Q
_fV}Y
l[=w]X
givJd
*k5Q>0
CompareFileTime
)b>RM|S
fPLmiF
%XUn&N
{ndQ
[~b#^
aw&UL
%h1dp
w)UI'^jB
"$=bn
{IzbR
|j"Z=#
<+T$s
http://ocsp.usertrust.com0
%b4iNp~Nu
61k>OZi
s7A +
cqkZB
ywZX{ys
C-xcX
cL(/y
{F0iU+
J$Gt}k
k*#-$
'_c'oH
Y*~Oj
y5!R-
$Y8.5Z
i|*[*:z
bK-:sK!#
JCqga
|,Cl?
KLumhj
oB=1]
j`2fG
+85SXf
4!hBJ
vWdlE
a]C]q
5K.WY8N
_6/*P
EU,(P
uMgq_a
<*aKA49
D/E;`
Vqk&H9
{i]iK
wUcO
cf~|y]i
'}l@_
h|g'U
xVf"^
EXkwq
@4TL6
=@E ]i
6EM&{
yn{OK
*:3f1
{j+@
Rt\+tR
NHEhx
%l7;H2r
xb#VK
mEWH"+
Q;PAQ
F0>jF
<\b")%
1)I*{K
`zQk0
Ma1_(z
#lQec
oS*/=
o!(wbN
$O_1:_
<I~)YI
/zaP-
%_BH2G}
eBA|4(<
@@xu0
7Vo'k1
@1+P
V.?a*`
R Ql%C
ZK:sF
VfNYd
rUWF6
JQ^PC
@AC!-
^D!b#
dW50z
4T5tTfH
?*62d
S~.eO
JF]T
r(S,I
%%Kwc
|gh{P
54[^E
#`c={
lstrcpyA
|CP9`A
ArrOn@h
^<-D1
8Bzx2
ZS.Vs-y
EP-<a
)DsC:!
EQDJCy^
XIf[Ki
AdjustTokenPrivileges
AA5fM
{ YTo
6$EQay
|4CA3Au
N!mT$
!:H@I
^OSuT|!
dUUd-
OY-=T
z;lr^%
MG>BJI]
(J?;F;W'
6NCU-
Md}l&+
h6gQG6
MlrVA
l_a4lU
\Y]v-^(j
W*$cb
9aEIp
5Z]-K
4irHU
%p"O.
${)*p
/ZapZ
M((eB
JK_Wr=
Qo_,eU]
v(lun
fEY*L
:yl,|$
Rb?/<
`+K?Qp
<P"}knL
,/^ &
A$^Z>
`sDTC
I=#_u
#X<<
4Z0vd
r>q,d
el,@4,P
;MCRx
~Dh_h.
8")Ds
*D(co
uW7{,
p}*p*
uZR!SO
8,>+s
y[iF(:*
liXF=
5a#&j[
rO0C)
1qHO5
aHK`t
.f>3
eJ^q)
N)+bM
W'*5WRT
\;Eyf
r8=+5
;-`{+
)_2u.
XIm(#
oq<sTeEJQu
D8N)&
mSZ!>
w&fY[N
EY+@i
Kla#?
c-ls1
%nz>X
!Ec@ed$k
lKKX$XPa
8{Xj1
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v3.08</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/></application></compatibility><application xmlns="urn:schemas-microsoft-com:asm.v3"><windowsSettings><dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware></windowsSettings></application></assembly>
V?;81c
GbBLX
vOp63e
T|] Z
\pDjP>
S<}!C1
>%2@}j
I:Zj#
0URI8
H#fG~w
IO'GZ
CY.IR
Oi/d;
@lb;_0
4z9EM
iM/k>
D/!w@
<UUiB>
MJGIM
):((v
J5upfl
)Sx^]
Gmr{=Xy
ag/7[
a6`n9
i4Y>g
I',CQ
0*sHd
f\m@ox,
GGg]OQ{
Pqfh7
D-"kJ>z
kq^9#
Ba|\R
:y5SO
f#8k1
7b]J/
$s'yP
Sg&5{
e<"--5
z6*4]J
WP5#s
TMrY^
*qJin
{VD5Q
.*rW1E
_`C)I
SHELL32
[*t`P
'kX$T
B<|rP
EI""4
ii"0i
wXWb:"
y1y{1
Cm(p3
fH&O&
Gvb4S
uNjCk
Gt\#cz
B~ja#^
GetModuleHandleA
4N),>
wpv]!
{cc@U
mRnYHG
,;IgO
C~~JF
6i J.'
Aw{'t
^~*z"
6_|%ht
P8wen
4W{<P
xJhS8
2fU>{
le_u2=VG3
iJ9|k
$IJ2^iC
9X?xE
_V_Zx
/>f?^r\
wIYx\
u1]Y/
aJZmSy
!1L~-
"fI0gS
To.'tl
E(0(;
N;b!5y
5R/1H
Zu5Gtg
knqmA#
{kaYp
8u@7'
B#}p-
.rsrc
"'f/EH
%!|Jy`B)
e3Kh]<
,:hwOh
_mt,tM
<s\A*T
Qxr=z-
^~jm8
TqN\S>
#K+Os
=yweR
>f70Fs
#<[v#
Z}*R;&
kfH~~_
!HaNK
6[9n_fv2
YE|*j
GIW:(
&WDf@
*)%5e
)9DV(
$*Udg
odu"n
h'hDm
lYa`%
)2:g9]
E;v9(
)V[Ks
mxi,_F
7TsF^
0B>i#R
&^M$`a
CNN-o
6uWIa
6ClW^
QHSS}
_v!'8
$ vD-
P2g7GE
^~Pr&u
wZ$+D
KtKfZ
I5}sc
zcbh#
K.&pT
&sN5LA
d"44'
$Dd,;
V5x!4R
lyM2C
P00HO
aDry@|
3Z0%S
GetFullPathNameW
5*Hu8
l"^84Q
1)eUC^
^N'NS
"mOMN
:\(Qk!JKh
-EIGg:
/_*WBH
+Um-n'
+@W3k
j1ov]j
&<9"w
>)EN2
8 Zy7
.fpEl
k"BG!
g`ca{
g)tOk
kFw+4
wZ??;q
h1,U?
_4hAo
XJYQ(1
oQ2vL
\UO{g
D"QA2
}:k#7
;#.m=
;h\P.S3_
C`B>:ksZ
i.sIH
iZZl*D?
xNx>S
Pd;]d
6F>ch
@1Y)ZF
g0`7s
u]8O9c
'}>5[{
5S!vbVu2%P
S#}vL
jvI)z
~ubZ@
t#SSS
1q_m)
bl)|QU
RegEnumValueW
-f=/@
SeShutdownPrivilege
w7bel7
9x2AU
F>C"C
/y`^y
Z9L7>
?Z_`1$
+J-)Z
w:UQd{m3Mia
4ses.
Q.G\:*=
bUxyD
g7+;M
&_<]Q~
Lf!MJ
6n[|M
g#l|C
N!RU=
|q,0~
x04H3
WW$Up
9QC}q
NSIS Error
O*UTYW
".cZS
4j]`C
ghT'v
=<RhMh
<>S\p*
8P8r/
#ScYa"
j0h0?
Uq>Ff
<?}y?.M
7"c5E
iI5Lom
(t9#r
StspeE
gx=j}
K/d~4
B'v{$k
t"s k
v%Xjc{
<2%0]D
.text
QgDVs
hm`$?
CV{_W.
KF~CY
`O5:L
$K:cOw
OnGcVh
H>JPey
HtuM3du
p?X*n
#pKrN
UH1`hn>
q!e:q
nP7>1
I5&*V%m
t_tcH
*=Swl
Sxe6)
QdE?eh
-D;Y2
%t<D8o
_aQ(m"
A?jPG
F="SX^
aYNde^RgHB6
`dr$)4?
7kLR@SC
1@96>
@Pq8~O/
:5K[UXt
6S[SA
>/V`e
%J14)0W
Fio^T
Qm?^T
+_;r*
Ntp[~+T
)KI,U!
FR[,Ye
I0u6<
/uQ e
]lbh2
Oq@z5Y
M(b+
YJ;G$
m*JlF
wFdGb
{3%YF9
y$sqs
kzXwYC0
yo$syz
H=k\V
("WL4`
(!7+Q
,}?tQ
CFx-{]
uwcCI
hr3}^
P^H=d
^j\PN
m+Bgh
M-iOO
3WL!#
v'f"D
@<F&#
Q*)NAMeQ
=W.Jh
B.34y+
z%!l]
[N@(R
s}J77
\kmBp
X#q=$;y6
xF~==
s`qSL%
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
?+n2bC
D?<JSRj
5<j#d|E
Y'Pfn
b/.O'
rP@tE|
^63u@|
@#vm76
"?q30
&S)Q,
hBH;d|
qv]6n&
69K<-'
6"B#m
)/^Q>
I7|T5t
9RiB+K
j4gZ?
S*yW8
mR$k]
b9kDb
(90FA
lIY?|
a5cyV
S(upU
v%Ww
(s6xui
85AD<
iLF&+
*l4qRe
tcV/v|k6
k|n?7
s)VFW`@0^
Hr5:g
8qLak
cyt,h
)O0e%
(V%?C9"
M )g&r
u0[6q
tE*e%
M;![mKt-b
:3IO<&
`%yr7
Elo+ _
YJm~5
{a@d?
@D z{
?)[2M
m?<6B
L"]3I
9xZ=@
RTmoG+q
]{yy`'
9nGR;}[
2El\}
z]7%r
bN[.\
?]=^X
<Tv}9
%y9v_$
5P;T|I
DeleteObject
.ti4bp
>4CwV
>0@;8
.z7T+
D,pMR
EmptyClipboard
i(HpT
8X-PC
:~~4T
zMtqg
>1[Nr
8Blgof
F/[QY*}w
k|5IM
S};J\
(\if_
JmEIJ:v
bW4E)
8{ZoO
vhz*a
aGa!$
q2+Mz
D'k:RB
J-!-$
y"PH4o
N685\b
n"#Y8s
=CxgJ
o4DwM
R-M;^
M=~Pz
z(6@}
z~Qn4{
RG !/E
7[CZF
X"d,u\
2k?:F
bLNCk
c,mf6,
.\(k5vfE'
W@o7D
%USERTrust RSA Certification Authority0
+kcbd
Hag\5>Z
@|!$d9ju9
@$Kk`
km^AaU
*F=v?
;2%CHx7
;{EwLRZ
.{)q4
?:d;4
]U0/yGbY
Anj_!
ZMlm$
9_PNc
dQ<FD&
}p!Z!H8
!&2Z l
_gktZ
mlz#-
7*DS_::N
^#syI
Agv@vb
Y5,NOf
}#C"x
TF^F$
1[V<~
EndPaint
~0#Hs
5$DK2
lJ;8$
]j40A
6@blK
o[]mS
`?Z9X#
+E"&R
08V}X
R?"\Q
bK`12
U.P?Z3j
M{XE"
jaQ>q
xxRmpE
|)B#u
A:Z'n
gxlMg
C[[>g
orn=?
-*[5*
)lzmL
VUvO-
-/\Z|g
]<-y]
!tm!W
^p=tA
!UWdSBy
Zw %J
FLS "Z
6sE^d
>VS'{
(vhNh
SUXlm
3}TL3E<
XR*8z
S`y6e
i$E-*$
qmSeM
B$g3Cb
hqKRe
;mNVV
%Gt]7
\/l-f
.[/#?XD9
piwtG
SE`kDZ~Ic
50T[%K
:pB/Hx
GsH^1
n-%HB
Js%Rm
z8Z+w-
,.2>d
f$Ke6
gnz.E
52;KE
{n[>,
[Vqet
Oh 5"Y
m'{N|FZ
5mWv'v\
*'#pMF
4|Kl?
D.p`ka
)>nvj
Q,'H$
q-\-pZ
*@c-A
MkrZT
@4U]%
*{aN"@
q*m.^
>dB^rq
5S[Q&
3aONU
^re6P
q;YmDT
n2hid
T="Qe
B*n"@
F\Mb^T
2x5f8
wq_{#z
rd),w
2fE29o
QojIsrC
t .gq
zV]8m
ki{*Z
IK&;
;yF;S
l$],9
;}s&)I6
@7=>wM
,/+B#
_G\#:&(_
kGrql
O~A!P[L
8)sy$y
q"p9"
HUINM&
{_u#+S
.#d9%
LegalCopyright
L&"+=
LxN~C`
7^^/:
O<QrO
J%t\h!
SendMessageTimeoutW
)6)xD*=
7-ZipPortable
d2kS(
L9XNZ4
CjBE2#
x5wo3
{;?XA
*Ps%2d
{LA!bm
{%AXlw
SetCurrentDirectoryW
1hZs6
(*_|p7
?3XqIW
9L=$_
+,oN<
$Wk}*
]#C8`P
aOd.'
?SKQg
RR#L&
b`.&F
d 3b/
]QIyZ
o SY}
Fs>3g
I;.&V
"V+ $
zP{PY3%
bKd-.
S9PeuS
&v9lb
6xm#B]>
r+0$W
caXid
$7MXi
xhp"M
Sghv~^
8eJ`x
&`aYT
D~tC&
2OXjy
aKY>{yi
Y8}+MI,
gi${i
\j?p:
f/<Bgn
~#\Y,
EX.vb"
VbAc{'s
T8.w'
;~yvax
oAxH5*8
5eL(jF
{Wt:`
~xB[@
4'"L@k
GetMessagePos
wPdP2
;.mv"
U<,F;
v[T#l
\{)R!
]yKsY
,0IEa
=j^#<C
[=OOC
ydBY_
^cCa;
WgPTN
`x'U]f
: SJA:^
o,t~
8CT`_
5@Z^T
o^|)l
9t5%@
@9%46q
jZ<%x\
Y5KsG
OT+9e
dq dd
v~:`G
1!PmBc0
Rho+c
!H=79
p!`u|W
PLy"!
|VNk/
T7me|
zum.z\
D-&5N
SJeNu
T)N7q|P~
Ue3Ao
iZ;qR
B7U&J
x-CCe
{*j^C
ImageList_Create
Vzolz
4s9c,t
nM'F/>
V(.8R
L.m"!PhJ
O+0^H
1rk#{GU
@oLaJ
D-bakM_
SB6TIYY
#>aa
PWs2W
{`8P`
gi4blk
QMFD8'a
7_e3so
ZSV>p
../vzt
!ea)2
LNRV)
D9Gl$s
}N/jW
F(w;S
&6eye
UjyFm
,6O$T`
BN\%I
_m@Y;#u'
75VW/
T[R2r
T%H)-x&
798i #
2!bpAK9
0T"BL
e{_'\L
k]*C1
q+c#!;
.[n0X
5~,Dg
*Oc;P
u|-@q2N
uZM%B
t:I -
v&nnJ
@!;30
ovDUN
zP[yq
82Y0Rs
(dDzA
FP@W^
ZXRrI
Y#6L^
4#$H'
E/VNqe3owJ
4TVmk
J~9sD}
KxX%3
A"&B6s>M
K7j0M
]!pT^!
^DAi:rR
rNIv^j
21=TKg
]>G+.h
0No@=HTN
&m%nnN
}:\LTR
1,O`Fm'm
7!9Cab
+"t+2
avm`t/
PcxVBF
DC,2=
Z!4UJ
$MTJ+{
}P%|S
"XvAJ
jXn=d
_6wc~C!
\[WoZ
8)&%i
Vc 3ElGh2
)_ZI*
~O*_[
yu+PpJ
<xHjn
f'^jAN
<vhI<
^OA3X
*@ t(@
L 8)fk
dn`ps
@4m^U
]W8)lHA
ra*1ma
^8t"1I
T:PCV
p7!J.
xvRbW
t=Ye'
ZOm:F[=D>
}QJYzPX%
syYx}
fBcL5@C
*w 6C
s5Lwh
EL_5Z
4:qj"
oW'YC
AX.CY
#R=6-
(9:fU;
PdG5,
ZbBvN&
+48NV
~D~5g
,c47O}
@dl6)
X$~cU
Q3:F|
oDkHk
8sn?!<m
s]go`Q
vX7Q&
aH>p{
[V-#c
q483y!
KA[e.]
2%ZZzb
_{H{=p.$
E"<1V
~7$~}
.d0>4s
(n-[3
sKH?xV
dR|*+D&
-rUg~
@uNybd
l~6BL
Zr*gu
K%CD|
>95AG
k[$Z)%A$
,Xm -
069Q{
&FQXG
t7"J|
llCI$Y8
yC=<E/
g,#qF
EJAhU
For additional details, visit PortableApps.com
6?U'i
NQ3T[]
("Glw
oJRb8zS
:hW2e+S
vx'=)
ru^@F
/Z,k
H T$X
cx<ui
vPmjXTC;
/2AtC
hEvPt
-TYPv
l1OR>)[}u]B%
*J!1F
7!v\p
Xo^[6B|
j6TbCK
*-IFp
OR<c2
#=?s6
.k!"N
9A%?B
SOh%vI
>FO7o
?r/{N
dmiuj
+#RU)
2Wm6%
msctls_progress32
JE8g>9,3
KpxHXU
SHELL32.dll
?+>F5
`6sbD
lTMM)u
K<r5O
rph2FV
5r#.T
`pIOSg
A~s%.
l$k(6d
7=gC:
$`Pp?#
jh.b)*S}
z|@_$T
VwIl?
[ck*@
]6"M W?
=Af?+
+S!K.|u
?&7W(
"`*0MP7
O,]y<
o2VB
s[#Uj
LKbWe
Hg:nJ
nbx}!
Aq)|C
f^o4X
VT8DB_im
oYM.+
6btbnq}
:enT(
D8mwZ
H3wr,
8:Vq]R
NmTVW
c:`^Q
h-?hC
:s&3mZ
AZ!P;
NY1>8
Q{~`A
5+7O$S[
LDlYK+W8
1>q`ZC[t
40%.qh\
MD2xf
;<a_cR
o#=]dP
b8K\7
ken>n
th1o7
{#Tv3G
`v%R}4
|%wlR
&ZnWu
?-X/m
c/)9Z
V=%nz
S2I}o
/N0),Ef.W
z5! H
Zzlp.
fm.t#
):7 U
m^ta4
7MW&?/
A&sot
mVF;v
,;UX1$
($G|`
_(5^i
pyt$c
::(!H
xOV7P
anAz`n
c('IWu
Kr'qs
ICEzUqx
D>Zui
+k'|e
b"o4d
tiw7m
JziT>^i
9J6S}2i1
KX&K7
WjD!O
c|s)#2
WJV=F
:j^mQ`*8q}
`F8f
CreateThread
/ P6pL
SetBkMode
DsWiB5
<MjMT
k?;a%.
5j? !
;%5v9
"ER7I
KMp%myy
Xng,h
?]PZ!
PG3d'
_wSq4[WJ
a9G1<h(
[{o_JF
{7K$&d
)X6WL
I&-rz*=
8ze4m_4T
x7ot1
rR{R-\
<U>q%
h[xs3
&Syrt
0f#+8M1
=\Y95
^QNNI39t\
cVz],&
D+~-s@@g
<g%cf
DWdh&R
i(WQ~
Uz#-?
Wzg1MbFoU
W<I+&4
re+]c
b,0Wp
#szB}
\x,F/n
XMh!~
H1m)vX*
WpQSv;W
4=VBD
mBT/
Rp*z^
)OYR^
W7#7U
Q\Q#N
g%C=yf
t#j"^
*8_!P
tcPTa
AE\;j?
*e6/Gu
rieb@"N
B_v2Rd-%
Q*@W?
>4?GF:`nMA
@7?t
^A*MU
J5Iia%.
TKEu67A
|%?om
-az^O
g{sV&jXY
qoae`Q
(^H"]X
7 ^kGkh
0v0 k
@IAxA
(>"WU
7`[Et
X5ezzH'
JzR]h
.ZS1p
M~>+
@@LvL
Ii*t*
A3'5W
J|:u1t
{gCs=
s]%UU
GetUserDefaultUILanguage
bSR)t-
&s*\uwF
}WqTON@
j#+Ok
,Q9Bb
K#vT4E
Q:3mT
r+d7E
Bs,p?
ABp3}&
oYl6Ux
=;N\l
SWM&Q
5:mQT
tU:|,
stbEMu
9}&bgo
}BG<Hv[
aF^}Sx
UVcwz
CsjWK
XDHK
/-P?pR
3N2@ja
AY""z
OsQ(*
;-(3u
@?Q{h
BH8Ci
VZ|slA
PortableApps.comAppID
Gz(i=
3PQeG)
,U?Co
*_o{OQ
FindFirstFileW
o3lVP
;U{J8
wsprintfW
mDacL
$N\ICBqMV
[*-M0
ieM<V
$[D0y
DS^NDe
|1F.f
;R]&9JQ
*huqq
4(#>`
sflVL
$'8!}c
`ZOIKF:
{^gkG
@V*ssM4
.~@)L
% D3t
'm]6R
$c0m-
7xNyh
b2*St
AP] u
q+GGkHFZr]
(kWf6
Gc#hXX[{
bB#_`
L /Iz
IDCjV
y#u:j5
} $;w
8118v
g6/!y
Q='SH
y#v`[=
. _>j
M@M)(
s@y^L
"#=DQ
`g~?i
&tEb-l
brK%!
/r0'KK
s^MB\
lr)sV
I:!D>$y
Qy'7zD
:-wCb)
5,YsM
SU_'e
Z#0&C>o
tB.7O
a#`l!V
D/{|h
~If8oZX
1YLrV
#/X\cf
!Elgp$
0OBtYd
@5:TB
z"EWi
ja$I`
(j,bM
j8WUHBYs
\H|GU
^tG0{"<^A
\!vUc
kun'4
;?"0'i
J<>em
H>{BV
Vkux23l
L{/CAA3KJ
V%A7o
1zhk8
ai#'q"y
piZ<f
r5y0A
TS-Xw
*cV a
{#ILF
62JLd3
j&GG1Q
f]?1%I
tEX=T
{yszP}9Wl
4:iSG
Ehg~?
S]A"Y
A's=Ie
@gqWV4
vdo+]
n~'PW
|7! R
X~Q+Y
#Ga+X&
/8.CO
j;($[
190221000000Z
69Ds-
Z4BPB
P))mC1
5kK/y
KRQU&/
9l<x@j
?M\>X
Byg"'
9wfp6
HU+|}
$f.~u
iS*[3
=H7fI
r_#v7
:Y-4j{n>Rqls
3o}EXI
S4Vx]l.F
aHxu"
IDATx
CuJ,k
4bj8]
J6Szl
:xQBy
X^e] [F
!_]'Hd\`
{k)gA
L4|z0
jF8%N'
g-CI.r
)/HQ[
"s0DP
uE]@9v
kv]pN^
c6/7T@k
D6)`8I
$"#dR
ah6+o
Nc(Dd
wY-"k
lyG+a` +
MA^si}a^
G" 4r
a4$_wo
>U3:3n
$-(/S+
ReleaseDC
\>lX5%
U*0\$
kuwDY
>%^,6 H
%/;o8
}^[#K
?X&)d
tmhZi
Z&@o1
q{L7U
X#@Y
7`tKY5R
5a-fr>
j2\SR
{f"av
k^P60d
~%$d>
27Z\dh
pqq=u
^4pI2=:G
T#^nfr T
jV@+?K
|Gq~O
(k5IG
/pG)sm
/\Q~:U
#@%J%
f,p`"
9Z<%D
3,{%5
hnQTKl
SGhsfT
|rw&d
N1zS|
/EQG[)
#(OF<
+cDUW
u&r`wJ
em$ko=
L3BAR
QD3k{
Q(]3g
ca,M:
|y=#Q$\
;sDxv|
w8W`S
`! w%
BzRC8
In@cs
P=A7p
)wKEQ
qMAy6&JZhk+
&EFPd
P:43:
*mS W
#2RYy
_#{yQ
S[$CT
g1H@=
],m)W
xiuz*xq
.0=K*
|2EX9V
*Bik<
CIEu 8
&xCS:
~]6^d
y}.d7G
WKr}J
h~&+`0
WideCharToMultiByte
T]s[}
r:.|mZ
8b{kw~
J_( ;8
&L|{$
Y((n_
VarFileInfo
FIpGQ
BJD]S
58Ue,
E]siV
y[K,>n
gvCVRY>
57_^3X:\
qfqv!
Oi)"`
S{#7"
!NJ(+}
\Y^$E5
%Z"H'
uWSFx
"<RBw
zvI()
mC(VxN
,Z1Y 8
YbRoE
cz|z}
ad>M~
%jSq(
s'01;0
lpTQo~
nja0MRU-
PDK5r
GetFileVersionInfoW
1i%*w
]T2LZ
5t4C]
.G;A(
,mwMK
nf&i:
E}KOd
s(FlC"
CreateFileW
sq!y"/Cp{
T8m#hJc
"f{oX
VJ+95
TYHZJ
[?@6D
*L\MTZ
d5Tz\
?hbf8m
Br6j'ka
xKK<x
(QHAr
KRe&4h
=<^[_a
`]}NC
L)'@V
B[=(:
p^vH[
/jG*wN
%$`W>Dp
CopyFileW
18'[JOmY
p)btP
l`H/c
Y%ZCb
/uP)LT
*6s+^
r:\X&r
qO)Xz
R@?za
qg8PI?
%g.j+V
ES_.o0
2q/TP
6Xg[m
,{gJ/
1+?GR
*D6kI
{3`H<
/_\$U[
GCoZW
u'K,I
"~F_w
$cEO3
(/$,~
]^LxFr
|xH-/ayV
7DqeA
SHFOLDER
O(;WV
r?t%t,
vm5gw
gqlvB
UD?62
Z[3Rv]
AgXXv
;Cea+i
N5N|b[W
IXnU\
kTYH
g!Rj9
74/sU
F!WoU
wO_7{
X7vuz
vHU*m
SCF=tO
55pDG
k6Ha$
0@F6k
23>~r
A]K{M
BnL]$+
HNa80
D]4Hs
TBD7+d
zQB";
s}@3S,A
]8[]m
IU;]l
;B~+P
F68Hj5
B-24vV
}2?2E?
!d'Q4
_+Ou/
|Zb;y
T,ht**7
5cVur
\'k/
Z,)]>
g>F\v
*\H#C
twzP?`
IF)Wp
a:5vv
kWOyY
nhj_>)J
@:R;6,?2
+<A"|
X[9gmM
{B}Gi*
IGz+S.
Y:yezQQ
5UWsz
.+EjA
GetDeviceCaps
#p&k,X\
B U7VN
F7x^y
HQRpX
A'lu;
0;`za
f`cp@
U'cpF
v9dPZ
?PzSO
_>F&NX
AIhRzkD
380118235959Z0}1
'#%4Flm
G@G-$R
"v=t},
FtvOTUcS
{;%PjX;
ph7^2{
_M&Mb
F@TpP
qk}.7
u`Q?NgP
SG%4,
`H-?ptz
~zKP)
&5.@s
Y:Tpm
9D'xz
CH_!>4
?Rpq>
c3d%~x
TXmA,
D~<*C
fo#Qh
cgp^U
Hw"J&
>&w2q
vbWSQ
Rno<n
i}G>P
3I`],
q?(m~2D
U n e_
x&w.'
fXP"e
r6lPc
KERNEL32
F&xr_{
s|jR#
zazQ9
d<kBd
PUs73
~@^;Q
GDKKc7z2e
|Zw})
#G>IC
eaOT/
YC2=I
9sEs]
oCNE,
7w7z}
5Ib\e
[<7@w
IahW1
~G@Zcy5=
>s=cL
Z[`AD
0Ia K
lo`2,-
xi 4*i
c`=`$
J>O;Lp
DutJpW
.Gl9VUq
:QQ~r4
EC9W.z
Iiaf;
6H:>I
@FEY[
Bq<NT
CsQZ&c
Ds,/+
:(~;$%
2D *H
\u f9O
Z=9H.T
Cs6*
+-rh%D
I)hk$
bUJ-d
X7}+p
P5Ni}
I2A(!
NGgTq
VF+vX7
-yzUR"/
+U=#x.
6m77G^_
SHGetSpecialFolderLocation
4+t=K
s~0rA
z|H/G
F-H-
V4d+\
p2CN;
W"&(Q
yG!C'`
A|290
q)\rio
jVAa~
Njx3S"d
UWvxv
8hV.Ya
LUJR%y
0&i@)
cvsyw+
Ao&Vm
[{E%W
v~R(1
QYQS_3
_+@Of
U/4P\
<k!NrG
`N770
IS^(p
dk0=3^F
S1,)/BeU
[I2<0
jg4-d
Bj!")
)yLCDf7
[`%%$
(sP6q8g
Ijm'Dw
5Uv%#c
x)rhEN~
jJ;_~j
A%wcJ7
+VRVU
|B,bD
5ztsFI
_p>~']
m%DgE.2
.c[P&i
Ij+tgr;
\f|6Y*l
PuNiRr
:|^_i
dq>7o
mm7PA
mBHhK
r6~ds=3
hMZ"(
&B853
NE5D>^=
}o-#W
nT+Do
)=up;O~
Ex0]gI
:PUf46
rrwds}
8a@~t
n'Kh:3j
! dbG
Fas;
-E$G6
L)i0K
,3fl)
Lz5<f
U|7Uo,
zO%-|
<sa%.V
2\pbHJ
y,l%Ev
715HZ
j9.Pl
axU<_
}vJh(
v 6N&<
VH2_}
DA1|{U
x9"k<
:.K.wX'
~AIEMcas
<3/YH
d;|>H
LW{3?
o3MV56UH
W;G$pg
22Vvm
Q?%R7
G(q q
ac0lV
YEb5m
/w){ufeC21
HAOL-
<DD,4
|$j(>#Y
(M|kX
k4*!z
zm8z7s
O%5qA
`cY$:
8MP!Qe
3o,UQ
,;L5\
J:l"p\
)Wlb-
m("hZ
)mh!+
O+vCh&)
le\Ntq|
a/0#H
|#Y%5
'(p s^
b*-#.
c?K'O
*H|/.#
}9A.G
'By]8
7_?Gy
M;Rir
;PQ@-
rc7A(
oLh8<,
dXAr;q0
Gz!1W
P&S$v
olj}xyGK
}]}%+O
iasx
'U[;m
7Q3sg
"5"%2K
_K\/3
"%K?e
3Q"~ij`
)`(P-1
cZqj:&
},vC2E
EfwY]
aIZh/
Salford1
|,*FZ
UpNn&R
(:FYp
t"xRW'v\3~ }a
Z6N<]
6[tc7cQw!
q"qw~&
-K'$u
tR+aSN
RMY2rbs
GpaiKia
Ol@[9+
{NG<q
VaZ(N
`R\[\
!~SSz
:,HTC{
v@"'^
0X_fj
T?hn4
.Eb5Yw9
/ynEJ
Y!4Ut
#\E^z
}t>Qx
+xX<@0
x!RA;
jOZq,
3Jqdn
K#hOj
F:p[OD{
afolh
np>h/
PJSX!
a{?ER~7
VR+o|
LU#Eks7|#s%
Zta,^
][PCo
>$s@a
$H;yi
SetTimer
x5i~,
S%wsm
{=(0!
H*a7|Y
Rzo4@
}u((I
/}{3Q#
PMwuS
vj3N1
a309f
Mx6NL
BnXB+
ojs"i
jjLi'
5"*?y%
W7so]
J".|y
Apd0[
l<p6NI
~L:Ce*
CQ|to
9kdH6
(a]c
>(I_h\Yo
v9GcS&d
M[J6nz
#QeO$
y3:S#"_47O
CSeRfHu,
5j`1qi
%s~!(
<cN$SV
-&Dhs
07VWLO
._,}Q
IY2'A[
7%6Lf
"p%$@
*YoXy
/p4l1:
H1Vfgh
&,'NYJ
}};pC"
_'MzB8b
oJ_J4
mQbBj
GetWindowsDirectoryW
DefWindowProcW
E%;Z#
t/;Z jf
&%f05
cxsUz
"D?2j
(CQN,;o*ks
>stpJe
#E^#/
\Fe"%
ZY=G%a
C1a rD
0WZHBMko:.2
v.KO{
d96eNg
788Ma
99R,j%
7DdJV
y(t%Z
dh}wW
F|+dx
"JLd/
) byy
azpkY8
GetDiskFreeSpaceW
c%kio
rc%cM
PX\1mo
al0LDL3
$(F3Mj
&FVg~pb{&"qJ
uJ.`+
i(,78
L wXR
>qpcKz!}Y
}^y*lg
_tdbZk
L1FP6p
9?#PxR
9z1YE
Gzd--
-eLdQG
131?w
bNF{+
\4/#X
PrdX}
LiJa5
|{k#9
. vViZ
?1gd}
LcK^es\
:U}?<
8*YC9
Fm*@'!
r<w2+
U,~~z
a/'_j
YTmdY
z`ip\
gV"ZS
uD~LYOa
udda_
WkIc=\z|
XR$m%
BiOsF~l
tZj\V
I eS]
AuG*7b
AE>]G
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
'5]\.u
\9o~]@
I={fWy
8l1bD
)op,F
YGML!;
pGkt^
"CrnOD
4yc2R
m"LTN4
.O~2Q
A|s[.
8f6Za
Vm?n>
_jlvzyxb^
GeN;"?\
?[:X+
NWb`6
<"~<L
qgYk`m
X%}Vm
-,V'T
'@{sD(N
t5Cp]
o@Ifm
eM)uV*W
~j#JN_
\FmT69K!
R":#E6
TgHJJ=
<k4%;
wOrbu
4[l&Ct
mgYc>
L5,|?
RLSwY
t2JT&
ldU'v
"I9Jhl*
(w2(o*Z
b~7*pZ
HH$IW@!
!-[90
n?Pa`
}j2J+
gWo$r>
wri=p
V3kg$
0BvvM
r-H6_b
<c-dv\^
mGn83:
9<jd""
Y~s2q
j.hs+
M]OA8
}0%KK
O5^y_
)S@t!Y{
5ji}H
\cw0LW~Y
8o`]X
Z[=eRf
[jK?,g~Q5
Ftfkv/
rT\xB
j{0@G
%%}z*
|<E]Q_
|{~7N
dF^Yj
}k}"S>
X|)j2
nFz0.DK
1Ojev
G>'0P>
&^F4{
et'0e
*A2IwMB
R!jS^g
qgG;N
eg'[1
?ZQ!d
)J#^8
&Q7^w
fK2X,c'
tJXW>!
w)f]|"
eYScQ
E9uOE
[WBvl
Sb)(q
(j)&}
b9o=6
Uyk&F
GFeO@
Wj;1j
-JS$'E3:
-R]0A!1
A/9D_
^HcSn
/-eBY
v^d~+i
O%,}[
#D?%??
7 w`Jt
k@:6h3/
0qfDr
?&99MxzL
MoveFileW
/5JvG
6<znA
%7P/L
KN8.]Y
http://nsis.sf.net/NSIS_Error
*rZFG
PDN$Y?
wBR-s
r=O W
v;{ez
~8,:9
A8.ZZ
fa'89
,eUh0
WL2^2
P H:t
F:WD=
1Y"=*D
3G,&|O
M:8zs
1p\,*W
(FOz@
hK8}>J
wN}>a@
~9():.
Dednh
;;C5y
G3]PX
q3th}R
:DRiD
N6;v@t%
}EYC !
:3nyz
\\c\F
Oye 2@
.<hS.
|fj9X
m&?)E}
+0Xw1
e5<A#2b
:8[:M
GG~6%\
74V F
t'*CZ$
WrhLS
=FQ!
Ew?$D
C}.PD
ZBUK8-
AO_ES
zAex4
]wI{*
x2|+5
D*NC$B2
IEFNlD89A4/k
wW`}zkS
H/5.G
^l]?wU
8|=(p
Zxi(s
5^R^G8
@4mKz
:)_H|{
D~xPk
6jK]6
a[!,!
9H0}fW
hP7ye,,
n7m=?&
+1F|$
BZ1#7;
zU~;A
)TV5C
w=cAj
)]@$2c`%
g}>A(
fc]*^O
UR :X>
kr_td7
zK5BV
eLmgs
Xowm,
.Kms*
_5^8)=
39<4h
9-HgE
[+UQg
5U\*ti
r"@:s
^d?/e
EI6FY
xsoo:L
.CQnj
k=MOA
C>#gV
g_->Q
.l"&L
A&qr0_
]E]*h2d
+O-}%
y|PaF
u0y.G,
rAhVb
qknz5RI3
cP,X!
aH@!a
UDguhw
myk*B
U|~F!
7~pj@
\Od>9H
SU.cSQGY~-
|aahg3f
ZB=->`'
Ol~K6
&'Mx<f
#`8Pyv
"iS8u5
/\M^[
\OI{(
)hg~';6
"!GO+
9XmIg
xm={-
(#.=D]h5
GDI32.dll
]F^%*
xu[+"
j?lX\
wT{S+
k9%'=
'JAy5
,fAj}
"6(gn
"N)thx
2lc{3
nn[D|)
Ay1kR
O&}lA
5U+YP}
-<Hwb
=Gy%?
_83f{
-b|jB
VJl3D
ETRxH
mij@:
1L=ir
lT:T_9
if/G/^e
Nw<gR
:2<xG
B[!~l
D]NMO
# Kufh_
D7e,e
w'qt.
dky7Df=&Z
mKCQ2
UN3%:0
Rizce
NN4<T
?3_cU-39
8'="U
`G3b:
1* eTk
rG6s[
Ikz^lh
F7cI5
K`:=G
P9_b[
Z3[tZ
D-H0^Z
A3Z-2
r]JMV
h2H/}
O15w"<x
@&,;<
CAG@)>u_
r,XgeVCH
%Gf8}*
YNy6O,
X*H;
{LAlm
?Q:L,q
,M<i/
Hz|s8
7anG:)
.7^Q=
G)$Vy
! ZBZ_
hdi4>b
u:FeV
^6TpG
;G|6`:
mO]V#%]
WZ'1;+
(;wt)2+
Kwd:e
XU_^RL;
;V3DJ
BG==ex
JJ0`#
/O3r3C
tW/l+{
aqWO_,
ki7aq
PGc-}
Ae+yf%
Tn2~F
qkyP^^
q.j!T
&X7u%:
-=J}h
K<|_JB
O?c5,j;a
yf"Bn'Kq
Fk?O>
[UISaYNd|sg
^09Hc
*/s&c
nMGZ(N
Jn/5r
`FX[?
:31Kc
y|'r3
nZGS?
WLCsF2:
qw9c&
7sS_z
B#~3`$
2%A$4
+gY[nIfRx
2zA@Z32gc
#)O<f
6$<~H?
dn,"5
cI!H)
kN1T"
5wwn{J
0$jjN
`xdZH
DIId)
+ieJ7
)Alx2
4mo=CDD
5sqPl
l|oZW
Gu6:Zs@;
")vA-
3l7MDV
(vKy<
h(O!B>
}]V2$
'*P$eN}
R"$S0
yK"=7o
&UV`I
Wk<{z
UPPa~
OroY>
9Uou8h
-_& t
WJ2@a
!1(gmY
w#YK.
_~YHT
KQ;.f3
gqeNM
3 g)G
U4KXB u
i$nkQtX3v
cWEnl!
fC|Ko
Te"Wr=
x5}0E
m%.Si
x8|"n0
&)$DC
$bJU(
IYh% 6
~F$ce
2m-0U
*%4r84Cp,#
L^_H=
=rb~sy
3f;0fJg
Psc=2
YV:Y4
!T\B7
S%3^o
mK0c!
*Lc,p
Iobh5j
T@]H^
7ApXAi9
0|Y<{
%jL+M
0}H~>
x+I0,
R7_sn
zBqDf
PortableApps.com is a registered trademark of Rare Ideas, LLC.
B+2_[#
!_oxp
uuoOS
XV~ej
/yq{1
HQ76{R
GetDlgItem
@9iZt
-H|<s!>
htNeI
H~+R0
<U4U?
PH/Xb
~\Ml2
kQ'I7
RTXZw
Rf.JV S
)[#Tn46'
eYC<c
q:27G
AvYno
"d,o;
'^nm.
2-{Y1
^w ;J
m*JpH
_a7A#
h l:8
TYY"qr
j]!b_
!( %k
osxmy}
`~&;[
<4*F:5L
Db:H~
h.5$<
!This program cannot be run in DOS mode.
PGCTl~aD
`riDqm
+'1Nm
#?_)Hh
Xbo-O1
V+E8g
}(VCo
_bmh7A-5#
ACG6|2
_2,&N
ylySHC
N [OJ
G|q/dvQ8
)745v
VbL\C
N#E0o
|H0)^[
P)05>
b4w72
@;>n3&
8CG9*
q/$<*-y
O%S#T+
W/4,fF;
[4S!\
V}x0)
&+A:N
7PX^3
\J!`1
`j-;/
AAbs4
'%;A.>^zX
^(|~M &
-'b\t
wFy^GY
Eo=Vhg
8[xH"
ly>U7
cYxc{
JR)Ys
-Yjw-,
q_o51
P[%:'
EP/?gB E
\oMAf
`T lK
zP;$g
e],i<
O{do1g}
=T3ie
*kcnc@
?d5o/
gkdia?U
$xMLv
fBR}/\
.@wrL
"Rr^R
JZJ!5[
._I/OA:
t~!_*(
;!<)V
PQV#B
)_?0#`&\
j0WU1
qakx7
NT )4d
na)TZ]
G2mdL
BJ|N{
Oq/{1b
G9,TG
+0LT0
)e"fl
whR,0
'SYa%Ik
1 gJ@
?mat[
$=Wn'r
RegDeleteKeyExW
&uQ^=-
i4NNI
e<]~j
=vdqH!HZ
.cI_(\
'|-jb-
FO%)[
!"KKj`
ms^+|
-^IGB
#,bwW
D*[8
XFa'<
OH["U
Dqmv-
#kfvmh
%|H<R
#7"YD
tE_%y
+{/$;
!tv*2
h:)#~
:s@X%
cjO~*yY
=!"S?z
Lsax0]
;G5DIw
e5Tb{
| -\C:5
$3=ay
l%<vH
ON7cO
Hn?b{$
#5jqr
hhJCb
CPMT3QX=
k$3<s
sL;(9?
/.Dkk
Wmq%)
v~yme
{rydB
aqQ|L
4Wn=J
E$g#'f
o3YxC
)]~FK1
e@xbDyU
;.*}_
@cTnn
J@vy]
oX?)
5t@}>
d5Mr\
!v::A~I3wc
r< 8C
RkO;<
?XrsU
+D8s$Ej\
QIC{Y
iM?Xr
AR2`s[
U]F,yG
4WxiT
IJ_wgW
_W'z\'
#9WB\^4
(0yJF
?/+=s
1qB[S
rEP)enu
U{>Q_w
O#/T8%p`
wLjP8
>Q}8Z
Gu_(\
56G7;
@/<9,j
"IVpl
2,%dm
WDES=
QaA@!f
Translation
XlPI/U
6+{eK
'p@^`
5"}zr
vhmlF
6uI$~:
+sNXG
-@b55
]}egu
6Sk q&
F*_z[\dJ
J<e\
-gUQUw
%['vYdP
=ccg<3
v so;#CO
y(lT_.
GSp'|
XS>Ld
*o7w-
?6RY,J
Z>9][v
T8i/W\
6#uVuC_
\2%!e
k2>&Yld
}Q$10d
ajc<&
jV/j)
JE]m]/
G`pp`
N:l->
t}"}}H
&KiCc
dB^5S[c
$N#$6
3gx*5
fP}e-
WVKz!
PKx:F
,:?jt
Hz[c"B`
48Pjt
;Y!20
ZM`A+
h*Smz
>]5?H
u8BEq
x"qdE
rRj;B7|
/GKm#8j
w~>+_3
jbh}1-
4:86$
Z?]]dI
Xt-ws
mx"nHtK
r7]Txw|
=)a&n
`kxK,s_
\N>Ra
#5[_?'
:CYqu
1Ys:u:
+ bHuJ
u){.WwYZ;q
Xf8WiW
S\Za2v
"i(`j
W3KX2
b0Qlh
=P}C=
y/:1<8
u{U:t
q.B3{
[df-/
*;3S`X
ba}0/vy>rx
wn7(H
=GA>x
b9f}3C8
5q:}
1;26b
)@~EN
Lk]m0
GleB(
;uKcC
D>Fz/*
]m@6q
8|D\
U4WN}
k..-K
_)=(e
W,NJW
oe@/w
n{pA_
s~0\
&FHu(
TpC*LRBL
|)tf9
,dhwV
,o21bRJi
QBsI^
1O`oc
o;Pz!9
4qkb>
"YhU$?
!Miid
tl/e0
O^T27
V|@fyX
x {g7K
z$a/}
`%E*[X
EA-W:
dtO7}1z
hmNW*
uY}!C
?@I6t
+!pcJ
Lr.~2
~sWJa
\?*fW
\xDY
9^Wq9
.Tgy03
<&`-F
Kx;xF
)4AA\
j8&iH
C(fW &
qJvly
X1-%E
-2%<C
XKpQa
.&*xF%
PcC?s
C_1G7
Hj\("
$ a/d
32+l6V
}l)1SH
\I*!l
Dbr1K
0w<~L
@7,f)y
8i/*D
<oqbj
{*U-d
Z6ho,
[f|0"u-f
9s)\J
P<S~'
2sY+F
Pw}i7E
Sc!6'Mm`
*p.Uol
b4(?k(F
4nR,*
y\"v E'D
S:xOL
p{4cJ,mXLF
kWQXF
A0<|w
Cjy^I
}7"EW
qf;Q-
2BJ=!
RuKjFo
p. +T
g1J[{
C^ugb
Xp@],u*
,98+?
nb*lgv&
x`}F
Xq!?h?
hnGk9I
6+H+,
f}2P|
WGjS;
JB_1JQ
@=Rj L3
-VK>WJ
a>>.0
)$uPk
&)"/4
J(KOx
0;$I"}
)`4DF
j2b9.,
TMp@F
Y9d/?
zX9KR
ND#=v
k1S8~5
;h\73
h>krqN\
%b.L1
5\c6Z
;;xe~
-h%N(e-
U&~C~
n2'j6{
~ {Pt
wFP?(
Z0(Pa)@Z$v9
W'>OP`
lo&#--
b_x1v~
X,36_
hE6+G>n
1b^^?rm
"EEugP
[qqaz
<&Y.t5&y
$[dzQ
;[Ndf
n4mG_
MLD")
5f`ol
"c(>=
QgQ?%l^
n0+0W
H9P\h
wiYn*
kK,q:
i?4OI
gJca#
%h>"W
BLE}{
<yQ|S|
MdAYJ
{:-y0/J
k[5W^
uI<o=
2m.TN|
884B=
@B9_w
L<_KUt
2<cI-o
V]0'E
B&,ye
q?V?\
-A,PO
Z0(:,
?Zv0rM
ywQbk
J{g{p
qT""HIe
5:xL<A|
q;>$<z
$[1+T\B
O],K<5g
DMjfv84
58JKAd
AJ0b6
b}&&z
l@59M
X[Q6"b+f
~2&r-
(|FbYv
^2Xiw
uBT*3z
X!KJv
1r \!
iCp3%':
%m"]V
0S*Lo
B[BQ}
ATjZO8Ixqc
w)8kO
GBR_P
%USERTrust RSA Certification Authority
AZ]+je.f
.\)tW
T'0#/
QQoMhi
l18zr{
C>c~7
E-*8gP
NL'P*
MuByM
!fO~F
^Uhg$)J
qknFg|
5"VBGD,O
36p6:>y
9:'Zt
CUTz#qN
k3n`
;9?;2
hRNO8H
yMGoR5
H1S%X
9aP#f
8_Gd#n
dZ6%-
az0eO
sn"]{
Ji+Z1
y]]dA
5PgHg
>j4>
C3AXo
tTL3rW(
8u*TcJ
<ZB@O)
+:3-s
?8VoH
;g#]/
Qv\wt
sDPXh.,U
'5P9I}
S;jjE
l]pJA4
]rk3iV,eq
.]('F
8F+''V
Nr$#C
EndDialog
+WWe+o
l!jAC/}
H>X=~
iH6{)
A5'@;
=KnJ:
NK^4|
PAH&z
Z-Xt5
$w$Cz
}\4X<
xZIys:n
iSM@p`
dh:IB
Y:\U}r
MZ@pz<L
fuUN ;
r*XY_S
\~ies
p=@77R
(.q$8
IW'gh
pCrj!eH
CRu6j
O@cTUE/_
t3TTi
6lUlr
nJl<=u
PKZ&(
wc;Gj
3 `8P
8 g,{
t\n]x
;w`au9#
xFf:v_6
hEhrv
ouoiQ
a3p8-K
7*:,^
,UFn]Dn
)UmX?P
%Bu]5
+iPbpY
MFY*G
$E(hrK
X7I? 4$B
,`6;I
B<$##v
=J\kT
KN?r\L
:7?o
21.7.0.0
B3Y<fJ
;)7oW'_
\-?Cc
|C}4:
"M|kI
pD_oa
kb!e4
\~H7{
U1k{7
&>aso6
mKu12"c
-nkl*C
-U[;'{
O HO"fa
lu~bi
kkj$W5
P_h5S
cFavc
@dueK
@e*\ |dh
X^ wn
caOW5
uU'(:G
<@=RYW
%Kb{7
6MrTV7e
jFJ}5
r:t"kL
F(!fr
-gTGH
YHIVK
t"[ex
'#F;G X
DADAGe
Es|?[
^m]6MA
!DYmS
RY,U]g
Dh([KR
t2'n|
dgBN)
m A2 J
BFE:`
GESv9
.pud.
f3jWp@6
mad^5k
-|-+<
Ey1F|
USPK.
e`~<4&
&5Lw(
MmuR/bm
Kn5dsnc$
%'d$/
bse_>
krCIxIC
bhbRp
tv-VN
ob5#<a
e`_,/
]'"(Zr
FWGJd|
IAINp
*<mw_
>SmeI
ad=kn
Phv->Vc
?C+ ,
1O:Sv
f<Z<o'
?w.ax=M[
?;A>#
verifying installer: %d%%
5l )U
Y+b:g
elb-@
contact@rareideas.com0
e %'2
SO=FJ
2/Z70
~t){^
4P.:+
ahzY*q;
x9HwW
M*Y4}[C8
^5pn}I
snyIH
_N+nE
OJmaJ
f+)m?7
Po]o,$
>bJ":bxl
>tL[Xt
;g$O@
ZKD:79
V6~"hWU
jS7ZY
#Q2/X
BC_Z2<
hy%+O
#%_cA
!c<gl
{XA&^
6K0ScFl
6]J7J&NU
7;%P:
R)Yg@
uv9B,_
!ed)2
(Gha;
rvlUN
^isX1
f[0J}$ej8K&
[Iv<-Z
oy%G\
=d@|O
fkkXj
N_\F]:/
~WPrs
7(yF<
xJz,%H
8@VXV
f=p!,
@&3+V
si>+'|
y6]V8Dg
KHg=JZ
nk$'5;x
]Q()5
SHFileOperationW
axeZu.
x[L?~N]
j2#RMx
H7T`lH
Wr -Tf
`2he]=
Cp` .bz
4~[,'7
]iRFN
7Sy'E
}wpJ[
a]P,\
Pc{h0
;PZZx
,TCxi
T[jVp8
.[]2`6G
oY*nz
yHFic
s\oU.
;EyNS
D5Mdc
jxa8}
L{g}gkG
DL P,
~/@?$
2ZnXbG
o,a7+
($9)}
N37s~
dFP0]
%v:d8
Qnl +
nIbsq
#3k#"
}.V6v
tQT8%
}PL)R
eMVD$9
s0s U
5Y~6k
4A52[
wpS!R^_
WoM4K
aq?@!
1y&Ug
{/q9]
`<%LtD
UoKW;X
S{6$1
GetCommandLineW
CkHUi
\s0lE
y*9$5
7\IE,)
~RcN}
'!;"00
PM8>"1
DhIZH,8p
NbyVytt
1T>1>,k
B=H;?\O
2r{Jg
C? o@
Xb1`%k;~(
uS2<?B
El`Xu
)1LgK*
a{Nu$+x
Ns0b.
-p"MM
UkJyg
oEsRH
9?Ft3
d'm$3
_NrHM
1kE'@
4)e*nf
z-{8v
I4Cs{
lMzZA
W_Xm%$
IuH-$
XG(E1
adw-$t
]XCyA
upCJ2
^g(w.+
`jQd:
.d_&8
juiOb
jeQ/j
E.zW8
P:w%T
[wzo1
QxB$D5
54tXO"
F{Xva
LLzP6
nV^s^9
oE?2*z
5lj%q
CFl~c
F?NsO
WNkk^
}H$9`
B8Kpc&
g'v/*
Ro#^R|
*m>2hM
b4UDA
b;gN[ZM
O!Lr
gcYoK:4ja
02k(P5
yl$\-
M-*CJ
,@{e_/%Lq
K7(1G
KI2Uw
CreatePopupMenu
UKP&K
'&$ok
I6cff
@D'>W
FileDescription
RTYm\
ie0%g9
matfD
gHl}6G7
TMo[!%
,b8XZ
YWvas
~2]m"
wMY<q0I
cXHhFd
7>&/W7L
)EnCQ
It;nY
exSCY
OuGif
~7]B.
#+AN"
&>&4GM
j'_FtYDk
TJ0ru$
D$]7z
F{2`r\ d9
IFwoI
/('Ebo
n,f`M
EU/sZ
Vx7{s`
tWfsJ
cX>|0|#T
7[glCi
l8h"w1
DGy-l
\3=*=
-) ;m
mGe1!
Pj&+}
!T }1
6eg`7
E,sLPB'
!Tw}+
R$|]@
+"P1~
s'qCM
CDZaA&
$ZwNn
d=O`"
ufhrD
x_9aP_
sWM+Z
u7ru>!%
JQ*xY;v
R[^gd
@O*)NJ?
m^Ne_
SbVVE
SetWindowLongW
'#KfY
'p0pj
!^;iE$l
8-"~B`GV
SayB{
vv!S~
Lsayi
!1gg
GetFileVersionInfoSizeW
+QldLh
GP6w.]
<<sM+c
ki)DK]
@/<CJ
FYsoh
;RB]YS
?`x}=
o4:SG`*
3"O_=
Vb.\X
:Z/?>}
mdw4Ar4
'j{oN
SEbTO
qkG1eXF
Z`%q5b
ro'NZ
D.Dc6
)~~PLtQ
*?|<>/":
\Z4OT
Ud1q$
` ;}^^
T`o!s
jT08
tW"M:
Xg0<3
!s*i]
.:{oV
yS\?c
PEHs4K
c<n\*v
1Qj[\
>4 }LH%
zD~Mz
tundwB1@P
T!VUg
Y>|ym\o
t=^~h2
H4]A)x$
F&.\(
eu$&W
')W@#
Fl5QZ
Gv4Dj?
dvV'!
?Ri2D
z)\)6|X
Mf>!C
yIQ<Fd
g`MQ/
2joo"
G2Pl:
GetSysColor
_|$,L
CharPrevW
s{qrED
/o"V+2
o"F\@
cIq6>^
wTv>t
YQe E/a
Rare Ideas LLC0
=_ZBt
lO;BH
XM^3'[
J\eAa
M]{Ze
=h_l|
y4Ika
"!X1D
X(M;=
CWU.8
InitiateShutdownW
!v)a(P
?fXc<Dz;
<#q{'
U'@"Xh
>@'Fb
p)on.
<:?cV[H
`FkA7fH
}3lCF
-k~KA
KJw (d
|L@$@
{FP?d
:2FKS
k{Nss
KIgz>
, '-c&
v4]B~
>DGcY`
v@O]/^*
]-Fz>
uRtig
_.NX7
lwN7Y
JY KU
f+:sS
8E3ZT
0lAal.
V:<a1!
F(Z08
]>P),
?ux=R
^wJ`0
iUp#X
M(JKeLbMka
Ho cMW6
u2T1=
YB+W~
~'l7c
3{Kb{1
9>nKV
dx[J@
co@r&bG
:0@cR
]uusRSM
ambAz
ZJH+e
3'DM/#Y2
vH\@")w
qK Si
15G[
\3D/R9<T
%:'ze
t-Vq[
XAe=]B
\p$n!Dq
9)=eD
OH$fc
[$6Tw
L=%3E}Z
D5hu<
qx@RJ
D9'guB
:|n?a^]T
Akpr;
2KA9B
-)%)d"Rl
SetFileAttributesW
c1giP
SetDlgItemTextW
)@`-~
KKu2k>
i;5*4
BMiws
b]A?>
guw;~
fPYJo
N}}ve
JKGqa
ZDi\w
D4>;&
#dn>Q
$TnagrkN"U}
~ "_,
]jl%I"
x_"PB
GetModuleHandleW
L TAI!F
o7N!2
I{hJ+
"$<Ic`Ts
#Y)6ox2
Um%Wbc
R4,by-
qwnA
y$ea(
"kY$(2
oUno4R
te2i1fK
kXl4|
Rf\Hg
FW.amn
-oLE7
)77ml=
jI4UD
#ruh`'GB
eU!h;
*>v|f~hA
'h>EAwfKEK
aQ'd.
,UqBQT3
P>Du;
l/v@6
ih+ !{
4Hm@G
>Q<7Z
j.reur1I
+i1l6US
8b8=J
&M/Gnz;
wU;hu8
EzR-w
'%s\;
5dTg.m
2#>=GA
{%&gn
g*5O]
r(#r&
ml."eD
^$.Fg
9piJ]U
S4iD)w
dpMjFh
vef/4
UaV)[M
\r;v\v
`v!Xu
Pw+\x
hQAyK
A/Z,4v
220220235959Z0
Ag|uW
0C2%V
OM:L<
>F!=;
&Wo, 9
E}DlCn
d?~tw;
BwM2h
cA*Pq
IDBD $DQ47
u}>+5.
Arf4J
T5=+&
-uICA
h>tv/
yi4=]
Na'zk
l6f\(X
"2%_7
jt'bmRi@
gK}w4
Ak3zK?
Ao\+L
y(shN
+.V(G[ieX
iM~!:
(#]tW
A>`8-
TmDQ`
)#1Ar?
q{W2+}W
nW4~z
tM\x7
0:#Q&-
7r7=N
ySH~>
rIKZv
ueP';
$w`Uk
u*{xw7
=|F'#
Bf]nWe
Q9l /
+V3pu
5hP=q
xU|XH
{(!EU
bnp{Q
Eawy#
)i6Dy
!:5<~35\
(B'2n
~7O}z
:40%91
fw}-X
Uk"vq
OL%.f
$]kwa
dm.j"S
wM8CK
i+P8QK
6k.d(
+mxJs
HZGH"7
<&~c}c
'ipSq
=DlIp
a{$`x
h*w<i
l$/4&RQk
Dt/bT
p3Zdm
C[(1z
0sD?+
|+sU@
eH'/#
f#K.g
vD't]
XZb@m
gAHG,d
ygOpr
)A}Gg
* #w"
$d*8z"
9Wc.&
@5\*I
kd1cb
nuc/)
c [|k
9V`\]l+"
->ai+
@QZ%!c79Yh_
G3HXm&
x7Lq37|
KuKb4f+
G|9+\$
zWqyg
VeW FU
H4Ok_j
XJBxx
ZM@.htx
y^+<wj
AHuxf
+?&406
vdpA&k'
GY#6Q
C@'d~3
lM3b"_
9&x+e
2^<I3
8hnTx
yvCAX
,z8\f*'H
v'h!B
iV.^t
w!1St
xcVs't{
MuM1^
T,$D4D
g'&cgS\
bf9jk
TlAhZ
O`p$8$
oufj^r
lstrcpynW
:=5cT%'
hT'L~
x#bLz
<<*5uC
+$'88?
wDyhj
"K,._A
D"~zX~=
X@(8tOr
)&%9P
<f,^MI
ki@FH
ep iS
}Ng"ufV
JxsjR
C`nPUP_
CJp)j
#*,4|v
u!-KX
T~jR;
GetDlgItemTextW
;EGv#F
1je}1`
BF*YH
1Kl\-
Ii{(xe
{s;{9
<8s1a
05LWy8n6
Dt(6=N
U tYc
Tfl ,
KMr-V='
z2y@p
/K}LAz)pj.:
mt@H+k^2h04t
Gy)el
,9:_W
CW%nLo
kTg>U`4
]Rv=C9
K#Y>QS
'n)RCu@
i.G(l2
k}=${
[Z\tY~
%,DX A'
xfA#p
`1\x
53c!I
q<u`D
h8h*9cI
jxG!a:F
rE'I"j*
/';c@
0T&_w*
fD9+R
!nk_d\
tWf="
Ia4zs
TGszFY
%\u_gxe}y
tP9Z5
0S/v0
K'{JA
"{`O7
;3+$o
q c\o
(}{so$
WzY7O
WOFs(,
:oLLa
Q8N:N
w*4]pI
oYJS/
niM48KWREBm
*wx;
1KTsAM
5u\T@
s{#@q6Tx
{}>MI
1+QDC
A?:JJ
mIbY(R
{izLm
MessageBoxIndirectW
NCF7+G
>6nB|
6_?/a~U
CN;HVm
glc>~yM
F!>5#
bB4^+
e+aIw
+UF@_
KYY@P
*q${h
~weIPe
\(Iai
Rdw{P
Jtnz_
S|Cgc
_3h.u
5v*P7+
XIqNT
,?p8p*
_A^u{
6nq5yA
<gsfTdW
WEUS|
\?J$}G
Q>hZ=
DP*w-@
More information at:
aMSi^5O
4(Q11
Ek~MB
#]0/U
ZI&[I
qLqz<p
&@y`8
cl&q-x
-o@Eh
>RbP\BX
L!ryK
71`ts
vgvv?1L
Np-eh
.9fP^
Bn,v{
Z["&x
.@) ~
f71D<.
73L5$
ul#*c
GUA4W\Y\
zoF2V
H_K\]
Fqc<A
=P^+^
hg}w\!JL
2%9US11
..a}5&=
1\f$p
-9w=u
DAQf8
Tt#!m9
IUgWb_
-dh5Qf
qW#*&%
GtN}s
cx1vM
3$Z{18
{G6:cr
TEA$1$
c-$/
M*>tqP
TyU7Hf
%N+-I
(+3$3
Nz8[~
d| ~Vc
MyU[
0gH#C0
e%kc(
ZYhQ
'q6tC
z-ace
r"7;h
ZNUyI
:.xfN
E Wd%
3J=Zm
8(O,<
!?<2Y-
V{G1^Y
$cGqs
B0"E8
VxBY#
Os8sYr
1Km812
N\_Qh
*@c`$T}d
j(YW@
`LbAC4B:
E-I$])
!~.k3C_
Z=%5vC
:Dk^|
F1A"8V6
WmM)o
OU*dD
?/Ut-
H uBU
DU 5z
$@{)+
B1]S2Q
y'}Gvb
z|j#d
4>N8/
+a]>]
2C0d^P
saV"<bA
\Hl`O
IART#
g+Ts)
W:W4J
_NPC5d>S&:
`?,3j
sR0q<gV+
R'^?;
w5ch^U
Jt3%Tt
Ve$P(!
oe4O>3
UdXqXqu
Y6Mu:
Rf*N6
Ud5DY
s@Ih
X+Jzu
!/6GU
7^7Y;
xkEu3
r.W\O
SetClipboardData
<k@h$
\7JZ<
s=?c#P
#}LY?Q
kcQI2
{t"i~f
UI:+f$
hHcmd
3{t]UCc
-tUOH#
GDLMd
b,?F^
em"1M
w4_}x
/(bq9
\NjUe
1-A S
i#*jXkj
_"?,a
bHY3U+WP
$;j\L,
?`9[4z
g8Y7.
CreateDirectoryW
w%]*%
w\2QFd}X
LuQ12
y5" cC
;y5KS
_U@'9
TD-F\
whaTa
_ZL:Y
bV!u}
IDY2|
_:_G#WM/o
S+0cj"
C:a/G{m
Ko@Ha
6;'Db:
yPZ`.<
QGpr'D
}o?;<
{IIDrD
rc*=Y/
5l)b7
jgtO$
?`JU#z
^_L`O
Ejo!aF
]t@g73aA
64WJ0.
Ys\?vr
3,mE&
Y%{t3
uBY#Q4@
wlCrb
?a'3<s'
D8mr)
_$eoV
p\Ue&
g.WSh
)>'&)
8H;F8O
:XP#:z
Vu"fkSb3
*UX$y
1UKq/
o||ERJ
#OV32j
E&`^v
-1+e6
*>/Ut4
^M.}|S
cc-UF
Yzu3Oq
3Y0Z3)#
7DHll
">}[e
bEh.R\#
YAHRqE
}/84u
5y9ky
Z?g\e
1;ERh
\P"r4
21PUhv
%mM1+n
Ka8e!
8DHL`
8L|9a7
*7'R[C>L
NKl%@
#V$u*2
{V-a_\{
[W<R\
q/@7>
C?6*EF
_P 3`
\xebz
md(7|
$'^;<
1h=su
rSnF'Nn
,#ZCsL
4b"Kq
C#<O-
@}00)
%tP{Y
, DuQ
-.F6P
2Hz%z
Cs;ar
t$;V1
8%#AUxy
EK{mM
[2B5yuT
LhAY]G
6Y^=-,p
Td9@O(
pvou1!
DANVcU
'EvF1
i 1Jl
0Xwg^
IW(S:
.Lj9E
;M|?Sn
PV,pC=V
:dl T
3iTzzdI
YkjbF
]|!'S
`!07xS
i$D}
<W`gQ!nHx[K
|yX+A
f\3Rmt
m})+4c5
,:S7=
Lyvbs
.d5p7
Dbzn2
oBfmQ
2ObCr
0%3LwE5
xllu2tz
5eayn
M$|Yp~/P
b}Nw]
.FiM6
_uSg)>
{=G>Y
-8Yo9
XfBM&
oWK?!6
6=}kV/
Se+_1
xd(5G
9R =/
j6. ?3
ga[X0/^?e
mu-+%H
C_W3M
lQU?N
F3MEW]
e#4t5*
Xye#.D
?z,QI2Oz
O&'&C+
>~}7G
s"}WR
xpxH]
4'Idh
.qYL'1<
PsI/r
/[.QJZ!
-qWbr
\GW<q
~:oAK
w ~}M
,O{H\
XxpBA7
~w||f0
DtWuA
Q6E7]
U}@:F\O
IL+K[Hhj
8:=0\
.DEFAULT\Control Panel\International
2L)JFt +W
MX$q+k
97(?86I
W(4_^l
o$$p`
UxA1D*
[r~}G
/oX^u
lstrlenW
5$`V-G
=-y4=
HT"Ac
kE}kop
831{?x
L!xvG
!jHSS
3<"jh
"vEo>G
>lC`~`
Comments
TpH@p
e1Ja8
yMA;w
2ITk2
!zRGMISi
E<XS@
2kk2D
?2,)%
NCCpZ
aY0uQ
pdR>DZ
,~rQ^
>~G2,
afR9zTZ
&prU/y
Bj 9;
-mBs}
{{{@6
ehU\7
R$^\S
jZg:z
Uo:Nj
:Z#qS5f
fpo`*4B_$
A-ada
AYg%K
YgOo@
!hua\
]q`j&
nCSV]
b1W!{
RG[\e
EQSj3}
`s5 F
SetErrorMode
{ER"AL
4#!yx
zb(7$
~sfg5
5])L5p
CG+q<
[g(bZ
rX>cM
Ss-"-
)tTw
/^#(t
Hl{v%NF?+
c5x.t/
:oaSz
_A>VS*
*v7*<
22!IBcb?
|z4}:N6
SHGetFolderPathW
cmnOc
X1.Ml
WLC}h
PG!kiSr,
lU3gX
(nP&i0F
`n/S3
5h>~b
AEF@z
N;6r>
ypa=X0
$T<u^uZ
IK {K:
pMu2I3
544S$
Cb%Gj
"kh=j
hySOm
q%?HG
*DjsY+
jWO[Qj
KiT*t|a^
N'X28N
nLH.Z
3A~~v;
@/s F
iv?6{!B
5l2 2
4ZZJ!
0yIl#
:V}C&
3vp{7
DphK9
3-3(F
%r<)-
sS^cP
P(S /
zA\iY
Qg<?c
Q|-ngL
)<5D
s$65z-
yofi<
HV_"lHHtkA
[KQ/-R
N;Jq5
+guy)
coaR&
kjX~O]-
oF<vB
a49 _-e
0WJr<
VDWY|
WXgrOfL
Xpct;
X.h*0
X#tH<
sa w?
0Yln$N
5;|&F!"<
gsk/A/
)5v`S
arR2u
a!h$sF*9=
6z{.H
a{k*0
^`,OU
zHno-
?Z\a<
u}d/Bv
jG9F^
y{wnU
s(Y:C
Yk1ab
MVWKD
>34TFq'
HE;t8
a1wk4
.?Dx,
t%'{Z\
k-zTu
{D6Ium
/:Z8J
E{/{X
3);Y{z
7F~[6
Y}WGT
"_` `
7|3L,{
(s[9Q
VERSION
&`!vb
[mV~k
@yv}
59-&x
sIW^3
x.eNUc
Nc!u&a
3M9$9B
u1g4i
}.IQc
dkw^"
nN->J
K{Emi;=]
@a$Wq
_kV_j
KNmv@Un^|
qV)yV7K
w5N-?
9$TmD$
x4Dle`
ye%eM
Quty.
s}V:D
Z!=8a#h
O.&N)
hiusb
Fqc2=j
${i0`
ER2&9
_)V!z
P>+#}
2SRq}
e$|3UP4,*
$9/I!
Bcyf?P(
u=7@~
p!0/b-@
mn`sO
#2$^|s
2sCA:
"[ew6
p)i?)Dl>s>
j(B_N
7+8+,
vsB<!
w$[tO/
q3.Zs
."rI}
GSSW>
61vA4
p$[-I
^Di4)
]?lg%o
(Bp/T
fznwG
-7_!,?Gh
51F+i
(q;8^%Y
6%_J-
J@6.Ms(J
nd!ym
CpqQ
:[rH7
*}88;
S_@6"Q
po7J"
Mj\aP
8^sQV6
r8:NG`Q
installer's author to obtain a new copy.
?'Wk%
GWLzdI
1pKl|J|
8la]m#Z
iRTbih
fQD{s
."S+e
$5 ?FR:
ri0jXdk
JP;0F
#$Vm$
VvxB/U
,j]T'
NDwOM
ch\o;
W=UCK
e/ocn+
zA4%:~
&Hi[|p
yqW|a
rE*b=>`
ADVAPI32.dll
.&vXO?
jkI )h-
dHL)[/
T-Vw%
)Qb{W)
;YY6w
L8`#^
56cH3
T]zl/
m{Z`/
i>4Fz7
Mr$IIa
c;O9]3
vC4aZ
~L(ZB"b
4c;KR
zKSJR
*!{NO
X,P_./
W>h9S
K%$:Z!
C.OhL
<[E.t.d
a|m$2A9
4WC{m
`qJ:vdt
w.bl"
_}R7,
iD8vH[F46
-0yA:
ES/`M
e@$<%.
^Nh=E
BEFmN
'ZVY\x
QuDlu?
=Ft C
XsxS?I
Sn/><1?
9C#M
M^{Cw
DF4[x
*lt6>
ifKDa
79!P#
yaR"c{L
a^VSs
rN*:O
HVDo(
P^)~-
73& #
JCb|V
g.nee
M`Z4-
=N-0Wu
;5l0.E
#5iVqLz
x3F$^
;0cW}
"4LU
PH"F'
.FUS2
=<|!.
<.4$g
^'>Vt
u_C ga
HrhH{
[ZL=%;$
BkzkP
~k/7b}
bf9Mi
f"G.ae
%c$u#
:P#a"
VN!Du)
TL(1U
)9B%OI
?JsQ3
90u'AAf
&+M+x
l%^}u'
<Z`Wb#
DB9q@
5G4a_|*
\E:Ru
]96(H
cmI.bD
zOs<K
bfGFa
%T?56
0_g&0~
4$'Vw
q\sPt
62#3}>'
^/->qZ
ShellExecuteExW
Y|y %
G&lUSW\
PxxgB
/PY8/B
I[zo
<=g|:
rDs80
42C;sL
WWWWjn
\R4g-q
=U(l1
2X-G_ni
'OXHK3
<mOyC
:a1[.)
wObNwi
"9z+H
GbPvv
4Ea3@r
Dw#+ty
-h/2^=
0r6J
'YD(I
Tk94[v?n2#w.
6/EeB>
e5LBp
wKH_3
q~AT^
dPXR0
5p.qus
bBd0`<
0kXht+`qP
-7%Aa
/'ID*
$9wrIDn
Oty8d
dfstAo
Yo+jS
*M2l8^
NEA/.J>
D$,+D$$P
<RFxAOb
A81{A
(_NCV
rAz4h
BtBzSX
dQL2>kU]
B#+Cd4
p[]?F{
i(MFwx
*7ND=^
}'u!B
)64g'
&coGO
Xy_gl_
r~Wy;
R+ZN(f
OIKt&8}&
e'p)E
1]lBK/`
W-#47_R
0VTf+
tQ?_U
>UEvP
xy? M
-pV$%
lv'C%u7@
<[``E%Kl
~Je9]qZJ
_8M#x
Nz3*H
f$0mg
su+wA
;AkOxW
#089O
((L0,/d
SHGetPathFromIDListW
Z?ZLt
@qw|_&
DRtKeT
w/Xxo
:\1+J
z.Y:r$
<tt`q
-MXX.
w)|CZk}{
b#l.y
'-wR8)
H CcJ
3MCN4
Ws"L8
4vDZL
uaXj
3!{^`C
l4qj,
P*rF=
tGMCI:
y`3|)
ozjrm
(M. 7
:0<1(i
gW,RFK>
|(Dh3j
fS|Qd
XoKoqzm8
qvA2p
\{LGdo+
:~Fo
Z~{B4
+nl&Md)
x,|ESW
-BwJh
&p&]P2
kxM _.
:QpD>
eLg\1
Uss9z
"gb]1e.Vk
7Iedv
-8dQU
%^UH8
=Vo'b
FL:\"c
#=xWo
BcQ9;
6=Mc@N
8)o+I
}C\"j
:1{|\
ql@u/b
t;D2_P0ow
B"]>X
<Y]]<
RMb`*
ho2pe
vwV[kx
L`[+f
?c|b`
1kIZl
fjf7h
D8|l&
?1zrG
bZtqe
td('"
x$@ZE
"w{OT{v
M15u3H
{S5~fh
2e%W2
fPC)mj
lstrcmpiW
v_e0x
`l>g:
Gu]d$
?h7KH
4?)`v@V6":
2BIdcv#}
;{ldr
B:b!_
ADVAPI32
T>&XQ
QSa3O
5JC^Ot@G
9[2Q8
:8n{
}"aUy
j3P_L
*v,%8g2
lIjGdZ
b]<;-y
?R.,34
@v\kzX
/V';A4
LegalTrademarks
$@CvA
VQF{p=
dZgSaZ
C]Dmd
\\St
Oc7_nv
#x7O7u
[&*'9
n|,/
&CXP*Y
:nqd5
D=,'7:e
SHAutoComplete
6&.)s
]`AV4
C?b G
{-QC!
(tI\|
Ct(qu
FChaJ}[
-%SD=B
m$S\<N
,NFGt
Fz+0r
]"dt(}
FFC;]
_H3tu=
ic022
ReadFile
.(<rD
j'*Rz
w(n:R
%sz$y
2*}xS
d"*0h
RegQueryValueExW
3_V4\x
UvvN]
NulluN
V2-X6B
UXcJ&
TQ}u4=
rfb^}
DrawTextW
rdVL^
S-W6b
h/GjP
i}!a%
)zU]1
hw0a;X
&hjrB
]hVKL_
<(T9=
b=]hX
z:d@|"
^TSyI1VX
v98cA
nn(xG\
nX%Rp
U&yBVJ'"n
v>k&9
y=O$%
SD-P,#
v}OHU
61y)p
'"4>?
:;coAD
J1HRw
{]f:9
9'w]1
pvF%AD
stPN48
GlobalAlloc
2Tx>D
Tf-Yl
PROPSYS
e[>B;+.
[nmyo
11R9Snv
/ts}O
u{aK#B
($+K_
W84,0
QTL_c
%j{$y}k
7kb_y
1tW$~
0lBn>S
~PL5k
11xvN5
+(g8IP
3&eXd
4dUTc
^=(/)
c\9<SU
4)XKO
4MTsh
bl}n~
AJu0E<
5RSib
V]g6&
xC]9<
#vlV,}\9-
iA 6tt.
'Uead
Error writing temporary file. Make sure your temp folder is valid.
MypLt
)cn6=>
k.17b
G]n4^
ei*;#Y[
n$LL@
8'9cY2
&y{%i
%#!w?>? M
`t(*_
vj+r?;y
>u"3Y
<exgj
M,QL:
3*J74t}
?=@Nu[qX
>/zBl
VSX\il
b`UF)
.hp0$
EKHh5
V(]Sz
(?X)n
+N!sZ
g]?<c
.t!*0
0C:2p
M66`k
6UD,o6"'
:,KePW_h
]En("{E
<'\O?
^3d^B
oOS\!
TY>(\
fCN^i
x~q's
}1?2NB
4-LfL
b`pSx
GTY:$
9BIH7
>(]JK
4F3Nb3i^
w^ZH=b#^"
<\A>y'
u~42i
]oQ1'
A3xq`:
0/|/:
'q=kl
cSAn6P
O^KS-
nR4FXZJ
wo<S
m>7=&
sO}fB
r>|{^
"E;l3
J.[cI
%(Pnmu
9*>G32nD
>dcj>x
B0.' ~t
dfJ/9s;
m?}*x
{=#v@
bkmFN
2#2`}
h}{4[2
*5ST%s
>VzV+|
ih]O}+
bzq[6
sYd2m-4
4@\D=
gFY06
|[nou
7hiuU
Aj8`}RV
.I$_.t\
x+_`f
b"b(xq)w
Z.{w#
87C5i
67Z}&x
aL.%@
pXW,8_W|
*@*{$
4C@o*
<l2)`
?2<H#
tK+:l
osk}d_
;VF;t
b9}Z^
9G;*T
bTu6g
U5VC(
Q[A-!p
f^ _p
2B2]B
K?KWw}
h[@T]
K,nrM..
r\j[Y
c|viM<
5V=fL
`<eyJv%
T,>r8#[
3q,LN]
a?faE`a
_=hKg
h&RBlK#
lN0he
&K.2G9^ s
6C1T(LeT
.#my;
yLF`n
wZ]3,
D|TS]
fE:`O
7eQzo
N3v&1X
t*1+@
f62%G
i:o=9
j!bJ'W
GtZR*1
!BusJ
s$_,=
vYlo[Z
?jK2x
rU!S*
wn^[.
%qRo\
iOY@M
n5cMn
SetWindowTextW
-',3n
(xw|M
|%Aq\
{9#\^a
xXMG4N
&\(PT0
c,+y5o
xtz$gm
-T1swwjoB9
u1P7\k
\-Hj:}
TOtr!
4$#Tl
4=TT1
$P|-0g
3znOi
(31?Kk
mPMo7
zV;X|
HO@DFFDD'!"
uW[58
TJxC#'
^j8O
|X}$s1~4
xIuHC
?~:i}
T{az9Q
FQ>0|
$~&k&^i-_k
EnableMenuItem
=04za
?_.Hu
FWi*(e{Ar
#uU=?
-[9cZ
pBq-
"Ay80*Prt
q:6e,
NXvT0
{U:??P
P'$}u
xTjKO,
b3WZ86
C}xv(H
_(HB]
Mu7\q
$LGDTe
3b>^U
Co:aG9*
urtXQ
x{V&%(H*
X(pRN
(nx]}
0TK8&
X6~=[
u-wRY
MdM{33
N|.9*
R0 }
T@P9x
RKrUu
]Cri;
;^76y
ud"~gB
V{G%@UY
!:Z#1
zH=Jy
et~U_
ru4=&
a*1sz&
Y@W%;e
M;R,(1
/s,i9
RAHoNK
mb%Xd/\
6?oQ}
oKFv]
ltccg
V%4n#
ole32.dll
Clj3e
ArGQ\
8|#,bCQ
$=f=v
\2[Pt
"yzZB
v\ev"y
oq6pe
LwUdF
[$M""
zz.j2
n&xWU
u,Nzd
AE]/xC
3W+A>]
UuVC0
kuS5f
5] uH
"B&)S
7euD{
shhufg
#w}.:
cv@yOSl-
n<n&\1'j
:JICn
HT86*
|<pAb
XFxu'
1*0k#
euV%I
W6VqJ
u:"xb
GlobalUnlock
*8$|7
+FOY]
%+Fnj
QehCa
m| E4W
*Bd)
Qdt(i91!y
t:c}|J
F-Lrz
"!pbr
R8efU0~
crsWC
-rDwp
!PT>V
qsnejt~
:0H%2
pXKEd
#pbyX
c;Fj1x
d':`d
,'t}}
e\Y06
W5e"r
-%u@)
/ E8K
[EU"b
Jn~i6
5o@7E
:Buz$
5qn"9
!%r@C6
EW|sw
0'1}{
[f)-,
483`kby
0lcpq6
BvY{*>
kU(I\2
It.SR
{HRb)
d5V>O
}]fRC
Gc:Ve
\ul-I
N2WUIBIikK.28
mH[3U
$qJv[
R#F^4
YT9 o
Q3v4A
k J7_
Z\rMM!%
FP/!Q
B'wM{
`Qr![
Dun}&&
qgDO8]T
oDj)X'
L<r/Al
Fd_`d(D
oVN07I
k6q+4
p-)*q
_Cn6}
`GT.d4
(FSue8
7.Taa
c%pkn
G#&/.
4r2gK
7cW_[MX2
R|Q}Z
qhG|+
sCeS,
uQ3R>
Y(O#|
rUQyY
Ru11q\=
~*CAn
xPc4h
vPW9 \J
hd0qQZ
LJ'VqWe
^ z_{
YPy'P2
uw+-#
!$d<G{
(PMmh
3;<0A
}G2(*
~]sP-
KF1<>+
E tQ[T
>IeTMz
-_#=5U$W
Kd3DN
hbe?{
!T('Gq
{3]&b
1d"VO
<MlZ)
_#_^RX
`/iAB
1~YS[
B=#$@9
"VrL(
!HeQ/
0re#|
\i~|He<=
P;"H5z
+Sx-_O
aL3*_
rXtK~
n:A4T
Nc0O!6
rD=x{
Vr}dN
]3WcI
`=Y^-
4ZbiP
``x0F+
7AOw_
&R]1Z*
=F^Ww
k1ShV
LSl(o
F1fY8a
j:;e-
w|*W!
Qr@}*9
}!4|\
uG}+v
<!w::
KERNEL32.dll
tU?ll
DZdXf
'pzpO
yM^6o
'?7'R
>-`w"
W{P5s
!hni`a
VI5)Z
06}Rt
)R5^f
:"6)GtW
;]#%5+
e;/+;
s&sb'
ZpOM#!
S "{zx
78ixM
MSbcQ#c_
}f|:F7{
8"=\E
j?eJ#
|<9F*
3Ff~@
T&]gi}
C8^1+
rp[r%u+)
ic\~-
[VS"U
fKPcz
P'Ex7#
Xq$;=I'
U?T>6
=DAhm.
m87(o
-J'`.
~vKZ-
W*~Iw
k D"=
fz7b0
,#8W&
%z.f,
F{b9P
P5q7M
C=1V;6+
"8<?LZ
X~lg[
{gnW#ue3
4\x$N2
d~</d>
?9cj_
H&) WB
#,7)H
|b.V)D.
b!\;G#
K.YxL;
pXJID
\\KH!
8C]nr
JwhW:
=Ax t
n8mJi
Yz\CBS
4$T]#
i"_+&
`^ Tp
1Wh3;
SVG.m
"8la<
.!cea
.{_nS
#4}|@.E|;!
:F-Pd
(+jfJ7E
n8c\,k
Ahir'n
IsEnz
@8TCma
Vj%SSS
Td,{n
\~0DT5
u}uBa
f7g2|
dswQ}
Ur2k
N RW=
[}t|_
:DFG-
y@0O-
SendMessageW
I4s:T
~!'u-PA
b&Y1>
\L/8>
Wf-kpD
\w+[M
SVWj _3
i3`+J
U;')D_
m~I-'w
\l>W.
(GVJD
efStf
^ ~sB
EmrLVs
jb,<aj
GkZ<'
_@uJ]
n%~4;dYQ
ws QQ
p"O^2
a?"8S{%
CnS|8
;VAxz
<N"}g
yv0+q/b
91-6P/
t0=tu
XXfgj
=h{B*
zA[L%
9/Sq!
VZZXp
p{$T)Ks
}Xlo!
Tox>$s
Od4rH
'oRC0
_O'D&
jTLlT
S,?Lr
VY:*"
=O}Q@
IsWindowEnabled
TA'sh
hF6]
nY$|'k
c=&?K<
~1`GZ
th|7Lx'
peWSy
Gam%B
#~w@6
$RH*^&
&$fcy
`Vfq.
#IayS
[w;_2ck
lCbVQ
%{I0OE%!
IU9dL
*z9PT
K2Qxp
!-G,.9
=Xo=\
.r~R'M
(&Y)8
vfw!PEu
>58A2
/JT*7
?qIpf
VQ!s*
(D$2)
3XVNB
zWUIz
9%*&8
wT[KU
F%}<Xqv
6h7Ns
)S@v4
". dLG
" aE.m\
|JM;5
C+]:7
q54T3R
AY)WE
4tm`Q
zFGL~
J8sqt
x:?Z3b
kH'xw
pW2)49Y.j
~:~bS-
uWSYNTk
(i(ua@
}O^XQ+
;,_h:X
&*YXVN
M-d"G
v8h62
FileVersion
Dek2FT
ssA.4
=8M*dc
G@2m,&
0f-Dc
o>.{?
X1fld
Tbc1:
G)thd
=GLPx
z0U~wK
;:"6
\Q2|i
;cP0Y?v
Bn_%KS
3m+tC
|[',%
q~*cnK
:>+Ho'
bA_>-
q28W(
h2"'n
QNSfef
?C*o$
,Q%%cr
-A(m'
@WHi&
(FrY&q
kx#\[
QC.!x
c@G0Ln9'
?"|nm)
JLvo4 _ym
ngcSv
a|Ohj
*rI&X
L&ew)
>-:TF
jFD=q
fNoR52=
:[Q}[
I.)u_
%4`g_
W-,5?
2??7&
@4^ I
a1e8o
a>@Ym
RPhOa
(F Ph4J
j^gIX
R&+Fa)
l@39j
TEowH
yQN\{
y[5kgS
`0;|r
D$$+D$
_7GA9
2;998
:L}&z
QQ|V1
uazXoK
F)mg
43^[7L
"nEmk
B#]eA`A
_`R9T
gWF@<t
P<"SO
%BqM=
C 5|X
lk7J5
r@<7T
w,akb@
}XpZE
~(!SG
@K_Cp
VxiA,
)<fG/{
CheckDlgButton
=T|R5
]sy&_
1-RZ
#L$Z]
FK%C[
[\D/w
`\B:M
/I2bE
r9s5M
9nM603CIf9
Dd6_g;
pVua3+
9=8gD
WeRaP
dcD.O
DeleteFileW
A*BBw3
75z+ZUC[t
GxE<?G
NTMARTA
]([RF
<U3wr
ZemJ(
nA6Q.
)Fr-:
^[G [1
H$/*|
InvalidateRect
jDY G
,[vvN
W>&BG.
zj2!P
Nk=&OPK
y{pE}
9N\cH
H=+oi
7(E##
R_uZ/
8$##oE
,F"]-
N7w/O
OxS_W
C7p)c
6x<;H
?>[mn|
eJs!Y
oA](sz
'"<y<
lYm_Oj
SaJV~
v4CMz&
ysPG|f
z7OZ3
lMgIg]:+od
Or!mx3?
U:W.Ua
7V5~jl
Ccf=s
xv'E3
WLq&=:
Qi-Xt
Q9g.9
@8=Fn
/irP+
_ kxE
;~=PF
Leb&'
L*_0w!F
up^Rd.
$E_)
*qK]"
&h4F
l#mGp
<Sy}\q
^xN}D
/^6b}
I^B(h
I`<hC
f-eWmM
':bPs
<l3['
O-Q21 <q
7dl0:
fqi2"
JYspE
l&6p+
;%xP/
iK^;>/+>
D@:;MK
OmZ4M
Tl_\"c!
emlk\O
6?%!q
+9]_+
1AWiL
OY*h$
53eqFFa
u%tkA
L*A|#
b3;Mr
D[>5d
=LefQ
:JbeT
$csuzB
gg=[f
zF+qY
GetDC
+,4\l
{`c1u3x
nC;"o3
tdO_?
$}-Lo
F}IT/
%vfQ9
1bAt2
2U_;D
'_]DL
K@fam
;8*wEZ
eqme#[
$EsB-
Op&gB
{-X&Y
D!)l)
FindClose
qb-&(6{#
i_VKO
&\>QW
'uNpe
Q- A~
$b,0@[
MulDiv
Md>)=<p
MheR1S
z52Nl3/
=>"1Q
Uot5K
(yU#/
ny2nR8wD
r'9tY
cDC>y
7h3iW
9:oxl
ukRg5
+rOr#
=QSmS
JRs+Z
3?{J0
dkDKf
o4M1>
glr=S
A$cf{
[T8QeShaj
RegCreateKeyExW
"6le{>]6
)Qos:
x2<\d
|@7Rc
{|}3f-
vX95h
>f.)l
y7HNq
$eF2+
F>~>i,
nwxDI
y{kUC
s495
Z2(xv
]oUSh
iq),g
`R%u{
&RR<5-
xPvo9
mZj@>D
m$S4{
o-`JL(
][fja
g?9`3
9iNss|
NJ~EY
rIm0>(
U4W*v
VQt^t
F:5%i
SETUPAPI
#U[l(
`hE4/k*
"P/>G
vSH@al6
,6.n~
Gex,4
vpw/}
5-lrM
7J>U,Dt^Gk
[8fTLj
sh2.)s^$4
nB`0j
KUW.<4N+
~&E/#
'qL'>
|c2y*:8
tAW;d
V+"fK
4*}Lr(
OA]]5w
<0:08
M^,S%V
\@YJda
iNO;#L
}CjUci
=7+1JD7cRL@
3/#V&
i@;^m
51*bD
WwtC'
PBdHq
WMZ~b
kn1z+
+S /j6@
l|WO+
0El/1x
_e/0MK
v.(>T
Z )9pY
xec#9?
xorKU
'WUb<
5r_h%
q|yn(=
CoTaskMemFree
_0u~m
&pLWwS
z|h D
('6Zc
SE&y<
:uy#o4/
"?@*o}@
{J&Z[
99Zw3"
!R;}H
Vr?:Y
7*l@m
Nsp0J
fAjJJ
!Y``1
"%EqG1
:R8jc
wQ~!J
|93G_
X4VkY
;oLUA
(.6g4-B
#syMt=j
GetShortPathNameW
xInE|
#[5?(H
{KyJY
f5~4G
9U,OSKa
z6c#n
Q>Gv4
Iw8V2
]{MG5V
qalMD
Cqo4AJp
#x@H3
@Af]WY
RT]fz
{#?X2N
dYmKj
!a4\,
6LD1W+
rT4&i
N&S{!
W0k`Y9;
~:nH(
1O9hA
/FOJS&
c,|!X
xt>Gd
6cW^j
?:u!&
Lb!ti
;4BIe
F35`K
/0X`f
:d3I.
$cDF)K
3)~W2
?rN&H
2)WspS
YeC$:
3Ro+y
w@PAI
G#U>H
YNkGer
sR{[ls
w/@y?
=2E^@0O'
N?A#u
I}@fF#
NP68,
W[Av"
SJbKW2
dN].v
}.O,O]
T%yqV7
fk>zO
k4mhb
APPHELP
\H+ki
^XW9.=
746!%%A
< )!Z
SVWj"
8'&:^
CreateFontIndirectW
OgX{F.t
*tUd
\,0rT
5%~oH
g!'9RG
$9j?!
ix?fJ
Wb>?Y
GH)9,zSP
t>l6d
LoadImageW
SH2 ~Ft
mfF(*
fE^%g
RZ+jWB
*(aZdq
J0[=[
4+aol|
}Guhv
09.e{
%4m7 {
G]]aI
w>3'a]
0Q:4X
b%kR
zZV:9
eq]VA
KRu{,
s5hIl
$*P!q
F1"L-<
VtN-?HO
e1tTf
iv{(+V
P0U?UWW
>}?8z
;.h.3u=Y
'}Sgp
dKSYt
r(F,i
P(w<K*
Er/<u
R-e|G
F~m8Vg
]jS+"#
6=Im>
DcMXG
bf(J.
dk:nF
N(@(0"
^i_n!;
.DLz3
gtSZ;
[^+kT
Frd.=
(i`{.
ScreenToClient
i`/1F
&yeii
"}o:W
4A*U=
r"Zl0:r
`\Hl%-eY
.SZYd
aCFuMcGL
wW]=0
wHi\2
~cAR2
B3^CZ-
B/F($=
h6u9Z
qu6?h
j74hjW
%s%S.dll
X#(bZ
/oyEM
L_g't
j52n]
??vD&|
ybiN=
v=)cM
+ll%:"
|{x"M
ocXKE
r*ve8
ju;qL
DqG#|
CWVWin|
FCK{YY~
'"}2C
B"HW6
kY8*;
VeuJd
Cej$v
utxXm$
$lI&6
@BIwCi
J,0^kOgg
&!1%hp
08g:Dg
$/-T7
!)Hgw8SY
}Y?;C
ProductVersion
g0e0>
"I3MV
JazwJ7
m>87
XzXPd
0g"7[F
JwyP|,
U2!u4{
^ ([}
|Jexg
&2jq"
?&/\9
*AAlD|>
HIUBW
-VOG(
1>A1*
~o{3p
Uf{Fo6j
W6Ft>
l&=j{
1|2UK]T
)j(aP
CvMe^
,?sj#
]i9?HD
xn],bx:
5~(mE
+-]q8<t
&z,wE
?F5uA
F5IZe
8H5c>P
RichEdit
k/i$(
7Ig}R
Hhf:q
61;Q,S
T@f}H
;X:aB
nEEqI
H!=*@
T{s~"
H:h:?
%RP2b8
b6RP^
LnZ!_k
E&)s&
B&_*e
_c1KO
-de}&
7i1 7!CL
tTi-v
W4Loz
z17`pv
@mt0%
j(p]#6
T77uCA1)<
l/`z^
GkcPUU
TH{ }
WT]rF6
[Jp~k4Pdc
d0LAQ
JH%9&
BH2!O
*TP]v
&T~T}
>+8'61
!l|]R~!
ML?(~
vKO0(
x*7!px
P}WB
k>0<A&
[(_Mn
Mx} !
Rrn?Z&`NISh
cU"Lw
+(GX`
J6]&$
)4b.?7`
2HJ|GO%-
DH@O=
PORMI5
wDv9G
}jJN9l
'EB|\8$j
Z6os)~
tnyU6E
xB@AB%Fe
F-Po6
YqU16[
Hw(I6m
t[klku
R(;~Y
@g 58
hj_`_uJ
hf}m{
idKaGI
ZV1n_
J|ZIHJ
^OLvbz
}dHSp
uj)_!
"K7Ux
;xU=k
eM@|vWm_
M7F!R
A5~51
R[-rN
z}#vL
,|tYd
b3L0+
9yeV~=
/70Z^%
>)kqx
L9E#a
"pYCkW
;MZrg
-QD/O
tk#db
-s)p49
{j}F.
kYEY4
Wqq.[=
y\+Py=
u\i0[p
;? eI[
2DZ(f
7Tt V
(6+l(a
O9$\v
jK112
|-9^y
KYq@L
FW/D^
kT@=L
rWX]c
2xg}'5
.}yP%
NRI 5
J)-w6
VKr!W
tqw<q
^Z5^~
6AqjH^%R
w:vJRs@
mo*tf
}R)c+
f:ub4
`8fMms
\2GNe\Y
Jd4b?
yJ/1#
(4UBDBP9
yV'Z_\1
"(.n}dX
Mk{_W
+!jiE
q2$^P
ez?2&
2D"s_
5~lS1
h&z~6
XB*",&
&wM|17
zx<tj>
Sectigo Limited1,0*
OmKlE
[r0s8
$v+_NJ
"X<0?
0nH$L
lu=gTQ
g{9$&
J$LsYn
Azn^HY
"c?CJO[
3-|^5~
p%C !
s4R-T
HYCV|
HToLF
sxC K
!CwIb
i}?}X
({CcC
be:L@
+*fOI
EE!]R
o<XS{
J8:>
XW)aTwz
RZV0ZX
"#[a&
sai3%
d?=pc
$3}4H4
OV?7q
uij|wgCOEA
%fX=]
*CF97D
S%rmI
*Ujrj
5IgQJ
\T-Pb
>?_~Mo
O@ntBz.
vP9hu
8o!LG
#AZ^0|zrFN*
;cjA6G
[##,?GHG
E$mG}
x*h/&a
E?|Koy
";EcN
9*fxq
M*Pn5
"b%<n
L8jgb
fZP%s
}cxZ9
Uad&.
R%#ee
GU}n;
=PSL6u3k2P`E
m0Yy^
/KSIwp
8*b%&
,:3.2-F
stI;}I
x5yeaU
Z6%qx{
s5\$g
rw if
+0!}!g
m@w6Z
`.rdata
#jYhRB_
H)+"K
sOIE5LgL-D
4qsZH
g0NC!
s,p-2
1VT$&^
RegCloseKey
V7c\^
Ggks)S
fMT'G
|w;@*4
R\p|X
w]*]A
#3)ba
;,>eQ
Q$}O`
[$C[Y4
MrO$_
%N_FVuM'
c&1pel$
oUnBn
Zi^W
@NA<nM
(KE40e
0tq# G
xxr|K
"x!NW~
Dm1,.2
/.Ka6
zLL3=
~R/JI
Ye<$gP
L=52&
`Epu
JBJ^BZ
wmX->,
}K^:m
xQ5Li
pF6qb
0d>ev
5VqXZ
4&X;*vg
Q~ymq
mCsXe
E2BmW
m[aYW;dr9
&[Dz?
]t]>xt
J>PcL
9Hq9!!}3V9
]4x~b
Fy|6J
N#j/_#m%
A} Z^z
8ERgU
X[z`*
^hV2-k/
Y0#hoHL
zk_>O
L7&,I
lMT<^
l[swYl
p`FfJ
qZo|o
|!S<;h
28-kT
:i+g5
QI'>?
CVv&g
hVF_|
_2#u5U
B!Bv9iH
kY!jx
XWlL
7 |)O
`<$V
|p +!
>GF8r
WritePrivateProfileStringW
"N6{pM
|4c~P
d*nKo
?*0R;
3PTr0
Drx.C
CG:^`
t;+pb-
Gh[UN
9hEf[
5H$/j
\9H?G
^Y'4oittd
+t\GK
j*?no
{iSpw
gD$-v
AwQo:
=7<6.
u2!*2
;B2[^y
g+`?/o
x$rsw
y- @om
>Z}*"ee
Xc~`i<4
qb"@S
9P',d
($@XF8
MG"GA
DV$qw
Hk/Lj
BZB@_-
Yzqs6
8PH!7w
e:%'$r
New York1
;\&*J
&R^V`9
'U@?)
/\dRm
Nnr{f!
~;\mwU
]J3zCH
g8Fu,-
<@N=?zp8
NA2>a
pR1Cir
lJ+9}
:KSA<
7!3x]Y
vB:(QO
pG-w`r
x!.mX
4CsR;
aq4j"K`
SetDefaultDllDirectories
L_'Uq
!GI/"
E]9|f9\
}ne[L
L[#l#Ei
j4~M;2Im
BkDT3Ob$
t@~,Mw
/,?iT
n8JVn>
B?I;@;0
2u^~4
&1Xlc
`V 3s
"uu]X
22Il*+X
%ls=%ls
i`v@U
b0X|d
{E_#s
HDO3<
=r9yb
\dbf=
>x[ja&h
+bVC6~
1pg*}
9$<>U,
=E/wG
S!c7zk_
D]gCZ
9{)_a
!2ij@
aV~dU
d|~O%
T`fy%
<*GN_
;~k^*
z8TDG
kS,lR#
Yo:!l0
SysListView32
1GhM:[
?6$wB
9FEY[f.!
GEE6fC666
A5%M<7
tM3Iq
ypy2A
l.USV
g1,Nh
%Oi)G
^]VvwN
}ZbuK
2F@0+
U)c L
7w2GSUN
i\S]p
!K)4&N\VT
A-|Yu5Z
OJRrQ
:1s9X
@(W05D
g$nE_
]2](L
;H;K"Z
}0o +_
~s,B`a
/-}K1
w5DbX
tyZlS
c!KN.
st`_$Q
I.tD/n
~JEjq
c<svp
n~5A\
P>PK7/{
DqNaS
<80R>
u5WbXE
4\^P3
d&x&w
pT);l_
TBHqsS
adAkP.]
h%d5{
#.+3tG
jb0Co
`zmn1P
h6:^V
~g3W{q
H|3:-+
*1+p'%
_'8GW
$$6j?
Z)dJnj
8$w1=
kD1}dT>
unpacking data: %d%%
ahE=iZ
:o\1-
a\m\(
t a0<
'<@-Os
l^.{3
b(;'c>
Vz<Yu
OZjfR
:`VgsLv
lFp|M3
27q4y
GU(r
6q+Gpno
MrkV_K
b'x@c
5~Wu]_Mk
q("Dk
q7BIFq
sVZk=
23~<m%
o1,#/
X5b7 j
vnuj5
yC/fe
F_{#8
?Skq$Tv6
|U[.O
f+Cr*B
7Szo<H
C,&%4
#)q;4
3^a78
1oo5W
*!5`O
-[:^eg
$_8E;
Z?(U.
&J4jX
FMD`;
'.09<P7
mt^Ju~
zr7O[
=_Bm(a8
u<r}7
j1V&K
|x9(p
MoveFileExW
:lsu,
\-:Lb
Xt.ilj
yF,A6
/5N[>n)
Yg+bu
F;F\"
!N!'vp
iU,Qy6
.aq:P
Cdz`3L
X|^*lo
[5}tW
;@ghn
m(m`~
#~x_[
&gMPt3
bb[%/X
-6@nf
}ir?sml]
f*_IH:
%LX v
kJyx5
F6UrZ$.J
{$roh
X5L'^>
k5y/-:
jx5)N
xsh-Wf
J3e.o"
)jASH
gl(?/
(M3eE
:hZ?}
H4P^4
G7(_G
RuOy>
lw\1a
m\Q1V
4kHIb
\6)+7D7<7
+ppg'
-7Q|s
n350B+
lINzE
@Zr.J
p1x5N
J8Gs5L
bLC,3
B~3#/
,hRUn
301231235959Z0|1
]JjUp@
#K($-
/RUYwieI
*+P#t
+aSW;
AF#PP
;p(=1
0j{Z3
X~Et>
h3c=u
-HBM)Fp
%vBIp
KF/K(
vf[gPKk
cX68:
3.5.24
E{4.B0
}}@I}
Qek$
6HZpX
x89{6\
i&+U2
RQ^Sr/
O}fL/
RMMRIB6
fVp^%~Vo
I0G0E
nM AG
Sq74.
%W)s[
<nv%xcJ
0:[M6
l3k3)
5|\.v
#MymH
zR6%As
RiX65
<'FoOO
cCe7p
k]o7I
-$n8,V
oQL!L
%!.|k
"ja=i
@8Zp|
p[,08
:$;pn
8ka!Ki
CL2i!
H^'XY
<8DSH=+
201023000000Z
vRo? R
09@e%Cx
[Ec+Y
'1ln!K
|<v9f
5d5=_
2+tLA%
2 |'!
^mCo)
U]Z93*}Tm
5(\p7
@1/4Z
aKLhZ=>P
~je>t
J_)|Q
B#\%M;93?cH
~s+pd
bILbXo
>Ri"*
2-o,7
t9&k
"o_Xp?
Y{2*=
6P;r\
$K'U+
#\j^i
I4I_.e&
})C\_
qo\/zwo
;'3b1
^Z!3!
[;(;d
;5&$>
.&t:v
_bB*Gi
7p0Fk
[& P~
f4068w
2W6OW
d6kNl@N
cG|>`T
:gS3D
['#-;l7
t$Y$D&A,#<
,,eo:8
}#yoS
/dM'd
c)vi3
'5n{q1
;c$5{
?Hf:4
MYs]]
&0{qM
U"2C]DM
t:RnF
?g8y5
!]JcA
OWB'[
vxq1S` y
HQS9}'J
KtfyY
0@b)~e>
|b6b^
]k~?/
t[jW0t-
gkC:3+
%"YaK
dq{uB4[
_f+Zh
Fda0x.f/
eQ_/(*z
: 2O7
D@6/p
m~Fx_
vk[2j
Txz^FS
8zNn0
7rJO=V
>B%KG*
_dOmc
W>/]qnJ
gW+D_
-}GE@V
l}T=b_
/D6Rv
|+ Iji{:aY
V}UOb
!N%jc
^zzr3Pj=
tZiwO
x=e&O
x<$!8
l*6?r
M3h#!G
b,@>rR#cs
B$Riie
i-&B1M
Ed`!z
*/:@^
D^)f>F
wmh\0
eoK9.
j4;-v
k8BsR)
^'aG#
)BS\#k
UKZNr/N
^(qPL
/hjML
(k_wI>
h)11V
gx7+JG0
^/j4x$^V
L"@6s
4xHrk<
w<Ub.
~f#m7L
7E0{Q'
gJ;sH
w;<#5V
Greater Manchester1
%pg6!c
TfF/N
Y2$#<
wnC3w|eT
zJ2L!Q
$zT=J(
Y0zq9%<Q
8!q?-
(p{OEz
BJC,:
.1!#E
1j^WO
SHqRmD
[gDuUm
$$.1A
e8rV&
%"e?lS"
$ Nnx
D!ktp
pHlz'!2]
8c*a<
3\5"M
2<hy>
EIrN]
dplxd
Sn5\#
p<urk{a
;]cGE
P*}T!
)#;4I
`_yv/
8W))L
#SD:,
\,`rs
pTgh1
]. rS7
(%E|p0
Gkvf;
b%a~^
,LC$g
(#C@#o#
qgSgcU
Jo`[4e9
P[4SX
I?1IJ
7ybnWA2
T[DK"
nXQ?_@
vRwWZ
[Wr2sf
Ly]n~
c1@lL
z4[N<
(&Z5Z&;
FBNz3
oC|I+
PcBYs
.),m|
RxP=t
9ZB#@Y
\6#~;
K[ASl
t0Ge%
2fHys)V
tcsgx?
a$2f3Su
\H&4^}
e/2-T
f3}6H:8
>UHL:
D@wHG
Yw@Rc
pIlsq
KJ6tng
i('ho}
]pabF-"
y\HOky
4R&Ru
}C)vB
RQX~]$
E{|])2zT
ce0S,
.G#Av
be}VU
0v!^5
Vtr+aq
T"se0C<#k
#%Tkp
/9!H'
^yN0/
:@ H5
J@^'J`
Pdl>.
13nL05n
OoHS q
[X7~i+
<l"qx
/ ',mC4xQ
.3:=4
NA?Hk+
5<; %a
w}7>7
F[8wc
4@w]*t{
W3HdOM
;-tK.
K3/o.
XZ?@VD
vP}QH
5*iT6
N5}l]
rE'Mxp
<T;bZ
*g12(
Q}b{A
]\aI'
vh|nS
=ccf+?%
>:P?R
% P'z
gh'|)Y
xuB8`?
8'> +
OriginalFilename
5On6C
5fojUe
/ev!w
sI%O}
YWDz[
[bcS*
D_Sko
)pB1;
b)k0bbO
%G^]j
4uT800
W1NXnOG
IRY8L
|MMJ'@1|
s6g6>
,j[.A
.O})j
'%jd
,DjlgH
]uY#B
f~JMF
#WP`'~)
u]N37
F4&r5
drk`c
XQ@`F
7%\Rs
[Bh&OuS
Wui a
m^9uI
xQ^&K
a,}e!
3MJ-'
w`}h4
=YSel
t1=2(%;
TkpZA
\'d(ix
@,>pXX
!"N\#
a,jDC0
,p #]@
G-H=R^
`y^r?2
NRk0I
IP}dq'8
laYy7_
LNA0j
>d=$S
u-nsyF;
S'.~#6
up!zY>c
a#Us.w
k{;8]
jY 9>p8.w%
q6hnF
4vCiC
^tkO<
BD|LRS
37,*C
5&4Ml
&Sr_{
8 [.J>I$
tdk+m
7:Y'X1
H^ea"
laefQ
zvj'R
"p)ct
#Sectigo RSA Time Stamping Signer #20
Ec7a~
&l&v3
wfD-9)
L}SY"
s[cn2FN
VrjsB
1!-,9Z
w%lh&!
LRY d
#:k/'
k"9@|Fr
1DfkK
"iqE/
#eory
6RvByQ*
bX |/
@v)do
}+HlM;k
9'Ij8
V1x6J!
nSMo^J
a/6NZ
(>^0lm
7=Y7.
6uiS/v
BIuCU)u]
n:;-_8}
Y8XA]
Fcm#}
T95ju
c(L`>
K|s_ P
N[9<U
C}6R0
[,-z.
@.kEZ
.=h>-
w^}CB>
q$a#N
"g{+%
H3&@dE:
R?C!9@
(kESJU
b!?jE,
L!+2w
Ty(T/
<:;t54]
[X.?o5@
^X~SK
}VTJt.D
%-H44V,
ZW9RI
P68,=
={ij`?o
cZLoQ
TU]USQY
CharNextW
o27K:
HH.wQ
Lk@?J
iSyW2;:;
alvVBX
PwED$
#XgWf
|Bg[R
]$t'W
$Yq+y
n7*|:
}>?&'m.
-ue[T
$w!O%4
.U=&yjd
Sz.NrLip+C
9/ L$[k
hpu3/SSo
qJ5V,@L
*/QQO
X"sssXF
<T>.I
dI3S7
|5v>.
P{nlmP
CQ3#P
6Pe:.
7-ZipPortable_21.07.paf.exe
P]~g#^
y]AfI(;qX
(}wI?
SetWindowPos
.A#~m
yMz|r
2&`66S
<5b^O
b<Y<g$
9JQ.o~X
gQ4yf8
e/()<
A2):1
L<<PyZ
K2Vj'~
QedIDf
#x#@t
=0;09
7h;hr2np
p1xjw
R#J2w
c kL<
=$A2a
}Q215R
,)qY9
=/oO3
- 5NeUS
GHC(K
F7Ss{
0asHr
1bp~y
FQ-oyi
(+}2[{
j+0F-
FArLP
>H=J&
=t9w.-
6\![cz[=
"^VbJ
),]iX
o6G\~
jcGHF[{
>c(Mn9
:n$(kU
T3Xy5
LjaBeSr
'K.|h
@EHERag
uQOP,]
2!N/{T
'Igu;
Y:{zZ
OfNJ+
/iN;F
qbGe6
S_R+@<9
k"*f"OS=
&t%M\]
@_^[]
!+=>VtO
]Q*a{
ty#xQ?i
-?!+P
0j';Xo
>>YR7
=bEI<
~pZGs
8me -
joE7hsS
-SlO`
S{.{}
d8K=S
xa$.s
6aqmvy{@
J4FV`
]@4B\
)dc2,
[Cuh!
(*^cCCk
%x'Mo
to^<r5x(<
CEwXD
!Ga!*&@
"lb4T
7[SF:
"k{%!
W'" q
HKzN>$
k7yxae
)]Mt3r2
3;vE]
h-2ub
(gNQC
.{4\?*o
sXHqC
&W;-_
2i_RhL
JEOeo%.dg
t}/bvL
@7TdX
WY(YI
5Ry@cL
-S|PG
kXvd(
LP<9o,2
$9wHnn
soH~v
6D{,T3
2&-jWp
CD-~@C
M:57>c$p
:(Nqp
i+D400Bj
4H;{2
aT%g#F
akI:|
uh)Yzo\-/
3w1<^N
tC=,e
,W$D8z
,D{b7
MVJG;b
(&;1)
53rpL!
EeR!_T
$ 6@`
FzspA
|(^,ThS
dbnqP5
*k3Hn
jwbw;P
_vzPA$
+0\T<
9se7!
s9_S1H
AD 0Ly
/P@|`K
}2zi`2
]"Ajj
;S3NG
4w!;ax
3J65@
Sic<q
v+PDZE
yzj^Dx
_3faA
8'Ht\
dj)p<B
&4H7y0*|8
U]:+|@y
V*c<`
h?7|W
vBVQ@R
U8On1V
`dYd}
%Tygh
6I86cr
dQ0I#]
3244Gz
ZF6=L
XP:`tQf
]#MS{+
_/mH(
e#(YIy
wxZ=&
kgfLN
=ZY-c
qNnUS.
haDT&$
`GluOU
cSxd(
abbab]\
C]j:Vr)E
pW\8VL
fK.)o
{?sD;
}2tm
ADsdn
/kn\|
R P>j
a12\Dt
c1=?xjs
s85Pan
=>Y;$
_8|\*
rT/r6w
D2q_Uw
@TfNdQ.
(fTaW5
8{@F1
5" {Zs
jKZQ8
mUj$e{
SotV9
GetWindowRect
*9|,s
oK6hme
5w:.<
(%^9U
+1@ir
YeL'^)
.g3 ;C
<'JRH
;vYGR
1uXlo
EZf\!
+TTOyh@
<+r`6
a@ykJD
(I(TQ
ImO*9
,/KPip
gk]?"
?0TkeXQ
(_6E^
hO#)_D[]:
#1NDd
Djw3E
&vc){
4bn3w
98<HA
DUjic
a|:Tv
'U*d0+
Y{1(&
[56Yw|
&y-hO
*SGFYgq
E3_C\
6J[<HW4
DOc.rn
X1d:_
nSJGRd
'[I]>7/
]oL2Z
8GroC#
M%F5
>1\!=(^
Q|AXC
>qY-d>
;6v6d
07ZBZA
6[/ET
2LZnu
^@A#jt
c!c!I
e=XRM
BG>JC
w&ymx">
,x%~z
\e1*s
0FJIr
\`+8Y
[g*wM
OE"y2
{LJ:H
q51?
dm2xP
)[aQY
1k3tx
MTkW=
0(09
"A}h
7E4tc
8>t`NP
;tej"@
RLm3S
WlM`9
Ic`D^
:Jup_
;5a/ri
M.x =v
%=;tQz
IfWGUrq;
&P%>-c:HR
:zV85
m'QQhF
U8Cb7K
A?I()o
v<n~i
eUV?%
6gz%f
K145f
|-@](Nb
Yy{wW
?s$x,y
&6Ic.
c&)}[
(`s%}
@8Ot.]
pv_0+
4*v #
gF];g
|0':$J
]Ok&r
"/NcAp
.&tI{0
}LTNq+c1
vdyhBU
{VD_oq4"
xY.S3
f1oMh
8$_^\
i'`b&u99
CNqJ;
lM'Fc{
JKA76
@L`d{xy
?T@G4
n< B=<=
h!o`.
b8tfk
2U<m%
A<X<L
e5@B},
Y,sjl
u>.A\0
:S1O?
>sYo_
iaghw
ozLh/+S
7>_hD@
~N;n$|
a? K"
M^2K=g
h}?4v
~TbPl
d;H&64
67:\YA
*:p-D=
UUKOr
*ld9C*
IW^]_
AXCyr
(A`O3
.!Q"C
ZJtwD4W
9yoV]
O8' 9
Y'$$w
*g`~u
GU!S<
Y|Dy*Ui?
dj359AGVWd
[6[{j
;yKQ
j/ J<
^8q5Q
(m{uN
NzzURq
J?[|x
^4QA,
Hpsz/
;11sM
6xcm\[
V<.j%
l$NpMmV
r\ir_V
ukWm}eB%
StGw{3
?%V|c#
\QUqWD
^|D.Ne7
m)(MP
b8t%#
#xsC
%;aj%v
|j2P4
-op):ua{-
@m8Q,
RC &:Rr
`\.M.M-
}U%,9B
\wka`
b7j7>[
|m*E43i
5!rdPh
*~6C#
P+b}'u!
LOnY/
v"0}I
Sectigo RSA Code Signing CA
u!fm.^
K~lgQ
ZF3=xb
b!}NboFD
m#u\#
Kz.H6
=CJnx
akaX
::8X=
mLd^a)&
pY/H.U)
'Yn!X
F,1\9
="A*s
b"/*;
CMFSo
S`zB?
F#W<+Q
=R<<D
dl"p!
p-{b>w
6nh[15
D~r:AR
_[i5]
New Jersey1
z1+6P
wu@O#
8X\((J5g
Io"4'
F=wGv
jie2/6
^y`/?_
unG(o
Z"Lgv
jxHKq|E
-W#Sk5
X2x7:
+u@GZ
{"CKr
hMcZU
@{J&b
SystemParametersInfoW
q}a+y
j?:ak
48uH!
t8mf=
|Q7'k@
320122235959Z0
$'"bn
3D/zR
SHGetKnownFolderPath
,D0;"
:7Wh&
_E}9>C
`4Zx8
Y%=|qh
|S#s`'
rd^#?)
(%]M.W
uDWWh
(F|jjW
nHW/-
XVv|B
<bk7B
i223-
nP$o6
Fp.XS
dw^|SA
H~`.]
Tf>;`f
ltX}ebu
j&knC
HDGPC<&
-@:f8|
A::)N
@w$3C
a(e7ak
+WBdZ
B_Voh
+"_,c23
t^!$c
zeVNmY
BWyy=7
B3e6r
Bq8,5
{T@np&i
`3LF*YR
^Y7Ivk'-
Z@U`3
190502000000Z
3c.8|
Fq1!|
c{hdt
\""Mo
3i8DZ
*Tx/\
uk46>q
|`f&F
Hk3as
dLdCb}
_nNdj
ZXSD`
I>M3u
W>_H;
-m>0W
P/\=Q
nMUm"
9wppKa]Z
,q*uB
.Yn8hpK
g.rW:
O}+l&
%0~6?
2!kIB
^q?~/c
"mEs3
1`G$Q
}V5=5atE
>vH/8#
I"?d}
w,&J"(Z
ZrT:c
@hPh^
`f+},0
=9I$J
@ ah"5
m1t70
SearchPathW
"g`3|E
N%kiX?
:}h8D[
+!?eaZ
YGH|C
q2U@z
4,yhs
^t@><
_qd[q
XO=h2
gc8Os`
GetTickCount
qJTco
>z}k4`
#=XBG
Jze+;s
Qje.6a
iMDJd
("m-:
Y&plz(
cX4`*!
rYRQ}
?'ttu
wB/>n
<vC,!
vq*(j
n8ptov
,"JC<
!V)ktK
2P73h
B{$3xK
$OQ;p
69vy&`
Zi*<b
o-c~8
HGfSO+
rDPQ?Z
CfE-D
?\p& 9
8-=jQJ
.fj/A
\,JWV
R?]yX!
)WISE
@vr"f:
RNko%
{"A3&
,Q|_C
P<2f55
]NW4l
H)h=Gk
GfppB
NR]=HAt
|ZLeID
h(V",
MultiByteToWideChar
#9-\X$
a]&`0<
t/e4U
XeZzE_
Lfo?c
5"}Wl
1:EAu
Dk?Rxr
CLbi7
H-%I&Q
<K`\(
EM*EU8
5*qko
}d/=I
~'`in
a)KJ\
O~M9a
7/JX*I
9jS2t
%Z5Sw
3Pgi6
MS+Blv
j1*=-
?|t,"
VEYt@-Ln
http://ocsp.sectigo.com0
7E-@X
+~r:X
^f**N
4ocOY)
ql&hx
2=P%$.,
NO<[K
)ctwY
]+Th3
nk&Z'm
6XcW.
Kf8F0|X
8it v
n-!uM
8,&6<k
+GIcp.
q,Qn"
d4c*zH
bVTtF"
{wKMcKH
<`?b.'!
h`(MZ
L f#mB3
CXS'S
,ov\z1
5=6uA
c[1s$
$[M6^I
6@Ux[
Vq_#$
Jx427
-vFC1
7/UIuM
7xR!=9
ij>.|uBW"Z
8O],V3
PDpLF
mXC!>
g*[G>Zc
xPi.D
ug>rkU
4ek'jd
oZ31&*aJH
Ehf~=\
ZFJR-W-;
:g-`{T
X%_K=
hBYxL
Ru-8J
Igi_X
hbc`5
Z9GS^
"%gS8
~fc~{m
W<Dakm
FbE5B
`^^^sS
S@3s}
\\vMu'.
CreateProcessW
}.91W
40"-9)_
W3_^U
h`6x&u
.,j n
#A2\:0
)s+VQ
i&Fygw9<
qK@:\
7[8-Z9
nr*n*
JFBw.l
... %d%%
>#TxG5
FR[aq
&F.PKpp>U
OP-;~
.o914
Y*92f
/;[&>l
UK)yr
1SR+;
ya?!$G
FJD,^
xXaZB
1$Y>DU2y
xmEE4
XLKiL
rYWQO
o7#0
5tZ_4
8/m^s
q#wYs
Sg"nce
"VaWBNT
os:TJ
#%?!(U
8i$T/t
eLO:A
WQSPV
5DO;M
= Qhw
C+)9E
GQS7c
LdxTV
5m(F=
UUUUW
+fHq
&&EE#O
m\-K+
s^QQVc
UR$WTi3
8(saP4X
TrackPopupMenu
?TiXt
PNZp2u:l
F"C?N
v~ed}
kFxY9PQw
20211227163503Z
|TAf).
lstrlenA
V/n-8
2NP;\s
I}n4o^
tH'?>
!w|g$
#;~z`e
l^y;\
wCfE[
$85vEmt
!T-Ph
)zSfF
O%"?D
L\v&:
tJSX|
H}kMv
'Q9X~
}0c;2+
}j&FJ
ntxW?&c
LJ:#t
{wi4M
yB)S4
l&y&F
NomBI*
tMDNR
dmeAB
DzGJ=
@NX}q
^xzw
0NDqx
sk)j+[
8P9Rb
m"&Rn
\;f|W
2+XF[[w
Y7$@v
TBYk'+
=)f{;
,X5`j)
Afhp2hF
}xVPv
p]Dm6M
t6qfK
YA1Mp
}wdbc:
T?$E]t
z;q>T
w$utQ
'4o{8
$L%EX%`s
Xf!uC
Sleep
VSFj-
WEb_YW
/JHqh
7q=Hs4Xw
XLVH,m
E,{*J
Yi1;&
GlobalFree
ezQ1-u
*O$^f
m"Nxf
s)K6$
GrLeuV
/9A^y
jW==lg\
GetDiskFreeSpaceExW
Oz(V2wYI
YdO-+c
o=qst~C
fcy@$
}Y6|~
;a<]7d
~9nz~
PmI<([$Y`
4^imR
G(a)(
?*-9m
%4}q:c
-sUv]
s)/u<
n/1f=
3Wj2x
H]]p{I_
bCT#J
RegOpenKeyExW
.|$m<
y/&@s
@/+":
6tBh%
:-W`-Y
[8Al6|9
2~r<[
WUpKN
6B:ZGs
5H4D!
http://ocsp.sectigo.com0
l%\Ep9
WWWy'i
F8q7P&{
7UYHm
b56;*
xIhJz
*f;LZ
?}[*_%@b
o&!=>Q
%COG8d
P:XO}
"N6Z9
TNOwH"
[f}O5
2DSn*shQd
L1m)M
pqk!K3
aD>Db
\)PkT
)2!:L
qeaM'd
l7\{T
LIwu_
iJWnTM
/9zZm
Y$1j"ha
k-S*!
&)o/^
8^xRN
h]P0*
M~riC
1f=xA
R>*Znz
<p:yEDVk
;"n$20
pankW
}["%v
)!84_
SdLjS
/>=7g
vlOUD
D&?h!
;U)%J
ejE",+
NnT.7
I<T+#
7md_w
\DZ3&
rh[q6
]W8%W
Lb_\A
4()E10N
ycc-%
aXu4m
P^fe;
F15~[c
fRVU<{o
]}2pyt
+<sNu
9|q.UH
Oq|aE
<)Of)tm
,OBy.
o,|(#
^sXHE
es'v8>
>>!-~
+LhAi1
z)^(v
M\h>C
'N^B:
AMNU`.
^[KS(
pV k[
nE-Nx
g?GYW
WU-DV
si'jb
5%!'7
<mKK~
4(Bjj
-^zu\
[qq{Q
-[>]h;
FL%Zm5/
GC6Yk"d
APXoe5
p"Va0y
d4@vT{
AppendMenuW
)Ur&M
goD-T?
>4$g3]
g<[F##iz
b'EE ,
))*.[
aJH5\Q
{H+oVK
y6U0g
&F:Pbu
VA(&I
^vsbC5-l
l=FK';Yp
OL+V@
kG:j;H
$C)Hp
|G Le^
gMSmQ
R?h`9X
~}#|k
Tfk,t
'3b_Je:
T7Ga1
7kK8%
;I!\y
;Q ^*
vz$X1
da+HnT
"9>(1
')p?Z
6*qN`
P^7%0"
dAN<.GW
CornD
{NpR4)
<@hN23
]fS;7
]buxyubO
ak]m(
@4wN}115
&xrrg
2A='Qd
F-=At
U^(jB
cCce5N
(jA.$U
H"JBD
$C{V#
gDL%.
1AO}z
lVZcW
1lIwT/X
BB;FU
BQR$Y
Pz*M
q|vTZ
$wY{X
."RvG
>If4x
r3cx
h|z$!
dA|)X
oa~B$
MOntS
UH$VM
NH=!$&`DQS
H@`5[
Xn-@T
/<,umS.;vh
K RMGx
lrUAj
3HH8*k!
,?~=<2
a=2U*
OpQiUv
]&M(E
)S$be
j&OFC:
}P:RQ
;T50O
GwZm7
^)_r|l
GetClientRect
G9o.[xo}
c'C}l
6,I)(
$Smaq
"QP8~N
.wQ9Q
geQg%*
W&}2"
cb~.1$9
T{QF<
.VO>0$e
y'XKh
mfr6G
Cd\yMy
;zjE?tw
00.D8
8,d"7W
.iK=%
&xJQV
[u9VD
xp 8$
:Ol/|zA8U p>
[&PB$
`v5Q-n
NWaLfE
%l0Sm
S&M7wd
GC>Sh-c5
|Tk4e
x2$)JB
A/n71
bps=:
gFsVw
h9B$/t
gT>nr
_pF5B
g>{SqN
]xj (
$Uqa:
(]9He
H)Jzt
l-r}W#:j
ImageList_Destroy
D`9_+k]'
?^\[t
#40wj
_Zl0,(
^#<@vH
[{-<p
a-iW#
fJ3Us
m($"mZ$
j0BpX^z
a4ju^
lGY;D
]5,B9
QsdW/
\"Rbh
iL>+H
w9KC}y
K,94^r
L~]ypBz}
IvB>-
f jo)Q
a[g~o
U)9<H#`
hV!=.1H
0WJ}m
3!xiJ=
LCmOJo
O!H&1=
98,Oj
kw4+lub
n~'Uh
~"EBQ
Z1+?t:BU
IJ3'k
83('[TH
J5j!{
8w>{\
99x&~
5L/z?@
RWWT.}m
ExitWindowsEx
7D9G9F
ceKz%
2#@z\
Tt8sZ
5oIcO8
s!?Bs
&)Cc#
-Ub*Z
ke~vO
?bBF%
;x?@u
ulpdN
Q#oUk
v}HCcW
HgE4e
xq(TS2
'JX I
{wTljE.KU~
X%L~Q
MZLq!
n(TM!_
IiHq_z
hEGHl3
Jersey City1
0Z&KNmg
iEc^5
9qDTE
@.pv+
g/:J`
V&'i{w
a@Z;}
H~F\5
ZYQp}
3Q=}4
G J$L`
w_8w{
V]v=@
bJ\t*
:h2vd
yJDs7:
~;ztv
w6-VB
bjF]M
t/GRQ(
gTi2D
bWZNr
F\R4w\
{:ZY]>e
((_g^
n@pac
MV65u
SVOUr6
4;ib
"5%Nlb
;%6Q_G
UR$&{[
|i9H]
'S[0A
qnWT<
/iEdb"[
hJfY&80
+?J,R
,p{vS
xVtB|
fE1,n
a=S9P
T8>5\
/`Z1/
8#8FH
~]%1I
aAVRs
2%nz+R
RJT%_8z
-HB-AI
J#gpr
+'%$F
0J$m}
Ki{31
*DXe9
:347u
XUuZgp
^Bgb|
[K-|;
Po;eNZ
1w_`*
GetFileSize
}ET1B7
vgG4)
`|eEiO
*A3Hw
{Pv\D
LbR'Tgg
9`W`8x
j TpIf
vrW(6
HY;89
.d4O|x
cR=>W
p~F|=
5=}3N
5$|-gy
i3$MR5EQ+
?7v8#
xFSuH9
F1D(J
';8Ol
?Xd7=&
*l2Bm
|R/o3
_dFs"
yN<53
@1b}OC
g'vq2
QtFA,
L^|[sOO7
b3d:{
ou3cRs
Y}<ZS
)wG,.
tJoz)WD
r(t'PN
SF[i2
-dGDH
2007-2021 PortableApps.com, PortableApps.com Installer 3.5.24.0
*b`))
K<cGR
"SS!n
QFwDNE
@"K>'NA
ThG%@
V6KRK(
s4EpcSF
hw1-1
SPUaD
uvx$z
Qlp$3
sc61Y
,#f#.
KRd@o^
vD/{A
"E2:mt
d4g>aJ=*qj
uu]dq
..aA9{
=iJS}
3<<<)
S?Gpr
fkyHd
&Q[_y
`J]XB2
Io"(<P
xr5s cc'
w2(Z8ZIX
gpfVN
X<Tg.t
Bv\^c
Sectigo RSA Time Stamping CA
<p?{q
0"d!#
+ss&%
+!9u"
u5I(7
.xJ.XS
Hvo?{
iW#*_
QNs".
}NoD1T
'y$(rU
l\sb2
N{J,&
n2o36
R04vX
))G'^
yLH-{e*
EX$|Qy
;Q"eg
A%c#u
Sectigo RSA Code Signing CA0
{,1Xo
!1Y^g
qdg,7+rzy
JLNC
=4?o1
x`d 7
7AUCo
g76j4>3I
O+W5F
@*U)+2:f
;`/{]H
y?@P|
?*zP)
a"cVo
v#g^l
<ROa|<
%=;nz5*
u~R(%
}2rl;
zfP$-l
{&]X2
;*"[;
/%x A
q{Sb".
~|<,If
>)bC"
H$>X2
gd_Y,
Bf+2%S}
m{,IO
@8y&c
yI(Ar
LoadCursorW
rAN7x
3X)_7w
208gH
G|sGX@
S4muZ
JzZ}3f
CYA[O
oH]Ep
GHR$Y
FG/wUZM
D]c<7
cG:7X
F)) u
3[+ZM
kd1;D
H\igR7
Gij]y<
{?(\3
n-Gh?
{7Cvl
pz_,@ru
"[lg[6
;XeUv
EUmL`
oxse9?
>*L;E
H,:wko
!vTnw
2$oqY
7Hrhls
:(,a\]
StringFileInfo
W}s8<
]&"$1
AI\dG
#Gn~%
a1n Z
SHBrowseForFolderW
IG,(\
4$WS,
)bRAX
sJ%~>i%
ng^Vl
vH*>N
gVrt'
/ZYZ*=
2NqF9
*\B} R9
N9N>C
NHO@AD
@n)1P
)B>[v
P2j3!
`U<Rl
%lhF=
xYWJ#(
+}_{A,
/qGCW
Ph#/\
BrIeB
gHk=;
x[q8!
/:av5^
=l|xP
'E4@W
`2T0n
IR+#^sq)
_}.c:
;6LIC
$oH2"
c2W5)S
5RG>[e)
PlGz1
UG*c<
N <fD
21<@"&
zy\r@x0)n
\.lD0
Pf]x}q
bJF"1
|#+{cTe'P
CwrzK.vKN
<wcY|3
&uv'{
z~xRZI
jf#K]
GJ7DGx
*3;$s
?psna
8MG*g*F
YT7m;
i?,.
ni-m:.
'J-qC
m6.R%
<w@q&
BI4%A"+
%|;ZR
CRo'Tn
[;Nv8
Aa5\(
h&y<n
~Crv:
4!`Xk'
83*QUbjX
Ym{Rs
{M)~&5
fK6lQ
ILRne
;NE*^
t_+0#
W8L7w9
z"Iwq
k5OssE
L=_I!o
E!Gr=
t+n?N)
q$n9~
A?zlv
q#9p'
+oWwt
541q-
e AK%7J
Z`S~dK
OZjZyu
X)=bD
f0#-4
V".Y-T
&:\VajeM
i)gFl
f9=HgD
k!Dk>
7JLAQc
{3K]g
3v))<5
f[,rj
QB%nsGS
?=nl)
65esG
*${D^
P69P'
jf_Jr=%f_7
"8m4.
#K';
c._FvIm\
zY(k0
K.%Qj
c0(wYKu
Db:xB
s~Ar:D
xfcQ0
"pY's
ySqD'
qc2f(J
S @cO
*Y-qi
a>+g_
UyiI-
("P9o
J(+aQ
N1Y|'c
eI3p.
n|P=D3L|
,[r4o
uWxt"
oB|"z)
%%)M)
[h\Ve
7XF`cT
-e(S|(D
F-z50
:&' 7
%*1tF3
_7f3#4
'1MBu
\u9cUa
xy_8Y
02!#`
i&m&y|
el2n|<S
Z*R%:_
hbM-Y
20n2EB|6"
:r|q==
]jdB>
HdPLY
Z$x~Ol
K2SsDBh
77dYU
KHF~#
)48a2lKM?
P: e_
SetClassLongW
w-vBn9}q
0>+#x
0??Yz
zBcE1
n/B")
o~:>R
`a8VM
{D.x-}+n
3>lr\Oj^Y
+|6*A
WiC}T?
QP+0a
lstrcmpW
ldRZXQw
^j>%PG
\f23&
yG7O2
RichEd32
OleInitialize
W 5KO
Ek+bE
T"yr!5
`^0l}$
j-QXk
_5x7b
xsPu\l
~*X5@
GeGTb
v\P`;
|XtRE
,!#dx
7g'`n@
pG+R ;
K^zs/
QLk-M
3165B
X];`JC[@@
i&oYJw
;*m[94
QfM$@
ig+'_
;N;pp
IrR3B
LGGNMKg
">oPn
cRvp>
(|BTK
oiI+]X"
GetVersionExW
/@Ue}
|qF>C
ZV:qQbs
ubieSj=
')D,7'j
=b`O?AG
/=qi;
GetSystemDirectoryW
Fqy??^
"XTxFVe
G#S-3
_;/1'
w2c(^
I2|Z^(
}>2Hy
4Dz0+
7f;u7
PsP+G"J_
YHN'I
~GhJEhB
eO2t~.
#Sectigo RSA Time Stamping Signer #2
<*Jq\
=Pg=$
F[TM
yrX2oCF
e*]E'l
Zl5v|
Lasq"
e^kNl
^:sjp
IXnP<
=>De([Yx
JnEKY
PostQuitMessage
\WY=)
YCr?s
9Nb/\
e&mxOa:
i[?3e
)DxUM,P>
Ddqd{,
<0K!5!
GQ2!gb
z0k5BUVJ
juNE.
IP|70
6!wONog
'x|A<
QwHj6
&0r[B+
e~-Ia?K
R:zJc
cqk\h
7u(D?
nZ(#V
}&%9-
x/???
)oV5r
vs{4_
aP;*Q
'[>{W
ktS/U
B[1Ub
49Ps")r
*\/\M
Gc_W?
& BfF
P#Q}k
~/zs$
V!<=HQ
}{I1g
ojY2p_
BBB|3
zSl\6
?n4^{
uW\VM
Ye`65
<{JcJ
btrGJ
ey s3P
{E't*@<
),ug[S
1 V)1
-Vw2u
R4yQA
PoM%U
njBux
5r3#&
41)}Fp
7fJ@*{
ePY m
1@s@I
Sectigo Limited1%0#
^#t#L
[qY=.
I'3St
6SJ;O
6-FbI
h1b(J
C*xe?(
$xWa'=
g-/st
e;{]W
GetProcAddress
|5ilW_wyZ"
*ym)#
0&DiYlB
'|^1?
l9s>`
ProductName
)Ca\>
;4F?>@6.,
J/mxS%
[Dp}_
&F\Ya
>PLzB-{
/sNx,u
zQ~jz
?|_lk
c%O6&
iE`}{
\M3q1
S+[dU
yi:U`
Jb=nG
SetFileSecurityW
VzV2Bf'd
3'Ql=
B*sYaM
o]u3L
j(;B1:
Kgt^P
h0nO5
uU5,@
-\05E
sU?U|,
:q=:>WDF
>y]>\
waC)p
WWc(=
#XE!v
Y4ZY'
>c[B)
rbf3+
_Xo i
(mEHZ
0N~.+
h=(q
H8KY>
lB+im
KUY|nq
nJbBIco
e"^<(
}so/T
uDw~=
Ls+h4(
->dG7
2fUb$_qy*
rqeqk~
Bb%C9&>
]IMrV
fVym 3)
O1P#>].
9\{na
4+8(u
Ek~A-f"
v4hFo
O"XYr
,BTda}&
!GYD\
N)scXz
CRWFx:@.
L{f>H:
nh_7"
MZZNw
$NH$?o
W2R8l
vV*"5a
G_25K
b6F5^
J+j6?
w%^ -
cgKWn
?;YcY
3:S7M
1pz;h
$\"q2
o'H&C6kpQ
PH:h[
]LXN+
AHI_5wTo[
'IIO7
h]wC#wj
)NUEoK
?b>XO
F$!Qx
*|ZjI
\w9Hp5
_x_aQ
5yV<M Z
V@%K6
A%L'n
4Al>K
$L5jn
`2oP@
$g&{2
6CsWM
{pLxG
`lu|{
|.^tB+`@
"avc@@
gm/;r
_mGBX
Rf}Tt
_P0 \T
-P.GL
nS@|r
>Xhe|
%}?[2(7
fYM=_
wV#f"YQv
lyTT6
EyhmUK
hx+vJ
ukD9+
)%n&O
{Km=R
SetFilePointer
16RZ>Q{Y
gG!Wx
qo_;qv
*ouG#
maZ#V
j?Hjg=
OZ066;
mNRZG
#L}f*
+hX=c
mDaT)
MfK!"
KU?hvy
!y]`!oD]
RegisterClassW
'kN7*Y
>]gLw
;D_=uGvZ
Of~UP
Qi"&+
CISlP
Cz<z31
[%%YHAQ
@<wvpo
NJlDUO
KQ:iT
mAsLB
lsYPh
(/iTG3CJWf,+*
2p`mG
Bq[%:
n=3./
6Mi0SI
M?pj;s)
\Z;.R
usp/6
2)7P&X
uiW]Yv|
.4Lg^
3$w9*
D"*~\
v6,"#qc
1D|"%
G<)hv
SLnGsJB
O,GD;U
2"^b@k
/[@o%
)?NaB<
xFoG
|<!9+
w}V,p
~RA*i
m6T$>'
IaV(=r$
1m:#a
~A9+
$8L^!
211227163503Z0?
iDb=AD
Yh!8K
b@Mw@
lstrcatW
F.!Df
b~Hq-
3=Qs6
`47q{g
Lzoym
+?;mj
}EEBL
]}Q59
>3"Kn +
z[!W2d
un*'xIG
>t11K
J9/mfy
3b'k:S5
$X'G;
nNQ47
ESU&$~E
AHJtAb'
>_6"1
h7qUT
#i\!+
)>p:]
o1<zeP
PzZu}
L~oRuh
23Qe:?|
L7/D@<
x-/7?'
2g524
$MME3]^Uv
|LQO\F
_f\h"c
PoJ3_
=1Q\LAR
KGgn;n
XXXU1
x`?d6Tk2
2http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
(@dKQ
FE3_*
Cwe)Z
VSiD:f
ijNT3
O35ti
n1$S!
7`n4~s
8\oZ[g
R)-*K
}|TZI
u$P{Zh
6`"<k
P!bnC{
_DYGx
\nA>Z
"M~_)
7&kK0Jk
gM8S4,
inM_x8
;s+#|
^%t" @
%l4YA%
{:=HWy
~!7-Z
jq4hZ_
NtKXO
L]B$!
Z^|+0
Software\Microsoft\Windows\CurrentVersion
imaF~
d!@~Z
mAc:br
d_Irk
7t)Yw
6w("7
GNk!T_
SetTextColor
gqX]1
Hh)_n
kEM|6
zQcla
&11,&
S/!K(z
aY~`aH
hOrFG
N-*")
k{]%`
(N\Mt
6HdIu
+m=X:
3[2hD
7xxrf"^ta
o'pj/
'RwD3
KzZ)A
6wP?.C8
p^zk>
A%5[0
=d,{:.V{
~H(*6
xl"JTa
nk}Mg
>KguWBO
KB6p
.=rW0W
9GWgoR.
NF-G9
r`g0h
l}16/
Vnni0<%!
JUu/n
+S$~g
qz7Qj
RX}TI
GetTempPathW
bZ3A"
0:})~
P%2t+Fm
Q2&g/
,G8DV
5U&uy
&"SI$
c7n$p
onDC{vz=|
.8+y)
62G.T0f
oh[x%&
/(9lH
z]kHzYJG-
evIp"
uRoei
pY _V
tCQeM
-b `|
,]e W.
+fr[~.s%;
|kad<
A:[bf<"R
R`r8l
y>ez585oP
-%9tx@
_rOf!
qP4d-
2{GM=
QEFAA
5SEEJ
]jOpsX
P&SC
[}Y 7Tz
e{Sa0i
Z;z8}h
^XPT;
0WW\oh
`]KnRYIR
6>1OpA
_+[ff
%|<\)
tjRW6-(h
Kdpy
/K1*{
.W#1k
d_pu"u
<55W'
7,Z"p
aDu(%F
FSWUc]
iyF1o
y)''\
;,>bF
eoUkjB
jly0-q
djdih
#q0WV1X
'q"%N
whUyk&~
MS Shell Dlg
:<{CA
ZFN.g&GR
:sOWl
U7lY3
Lhkyv
m,XLf
K"]fgf
_uJZL
s$dB)
>L0F8T
SnAW+3
O\1b#
"U%Db7@]
HBwcG
6WLy|ho#O
~EIJu{6K
2(iwy8
b[0oj
?tqAI
V!Sw3
K\w$;T
D;aJ&
CSsX8
?O(7/
OU|Hr
Pb+]
$+g+u
w/[lsj
O30z'y
rOD!E]
TVw;*
l/E_(
O/VXI
oZ%pb
@}sY_
*!5FX
c"BX$
^jg82
lnT+Vu
>8M'4
1TV/8
m=0=6[
uRi]~
08fA2
CF4u=
-:Gwz
:c6JCwF
ij]No
k!i0\
=!?XRe
}*r)/
($Fnw
XA_5"_R
/?Wkj\
}9Fw8=
_|5(b
wHtN%
GMk(p
H|LNc
,)Ae{
A)R9}
AWHrn
4+e'T
P$fE>
D,u!H
0P[Vm
<{Pn{|^
,3:|sk
y[7qv
"crbed
L'O]6R
ZxKH&
zNN:8t
z4uy@
rOx!N
9VG;+
(f6+F7
"s[ZX
9)OZQ
.>}'jzq|I
A8zx?
RLzB2
O<XL?z)&
Nyej'
Z+x~l
~v@F@
GcW#ME
8yM3B
{dM?
R^_5Z
rVEf\$&
uHt@X0r
4'xa4b
Q;4FFC
siE1'
Qt?eVL
#@b(W
}C\'4+
lstrcmpiA
(pVrK
yp8zml
OM~`e
IT=,5
XAh`;
0=BjJ>r
'2&2_
q.k\)
xQ|Tt
LM{aq
y/Zw
%Dz47
5#M/, U
hi$=pA
bYxK~I
n:ad@
+zE "
+!jhN
Df+<-
=/DbN
pFOOHSNNSMFB&%
]zSyRc
w_h;iM
RP[qmg
q.Cu\|o?
SHGetFileInfoW
z\fjK
:\OU$
-xx:J
9D@<{
&;gW~
3C1`+
8$h@)
}@9|rR&
.x94"
_Lix2
n>QXwN%
'!B|Yj
?]%y^Cnb
xQ?Sly
;8PY|
)&/^5BB
qL-fS?
Ckk[[
#*!Fqv
4`K=Y
#,11W
=Y3JM
"SD<S[
\zVx3"
~PZpz
MSs34lw
*7;F*9n
,["qids#
E$rU
Wm_zI
sLnOqL
bKK]g
V%V3'H"
YzGP}
4-gg+
>j1G|$
31H'O
vV|5n
gPzx2
,c;i
6BTj52
hNAI{
.g*y^X(
omP+0
b)[x;
}lGz7
iz6Dw
PAHF-
1q;x={=
-,t^8#
ksV2@^
It]h?
Thz!%
'?U~2
9Em.7c
e){M.
`9iEFm
iYHD,
\{.4j:
m\gs;
Z/h7p}
oaomr
I.fz8
GetTempFileNameW
$!uk8
1\nKj
0"n8U
85HXt
~V!lh
H$U9t%Yk
T[1uo
Lv`?d
W^va~
aeRxYb-
Xn/Al
R?n+Q
K6#hqHx
t{WRQBt&
M0eS7t
9<1WFW
>_,x\
jAM3u
2lb-p
5-czI
3eMnH
wawrj
hY10I0
}fq>T5
RZdBD PS
D&ZOhT\
(3V)iu
$pZ;a
EJXV0j0
;K!Ti
oVYI?
"9H@;M5
\6GIU
w,KC$
%9Q_)
AOYaT
s),Z?v
;"_~xI
*?UQz
K$._qH
9s@f2
FXm=`
a*NN7
&G2p^R
6oeg6
XH]k=g
=wKQ/2Y
{a_9c
_<_30
]Y+"q
fu |lRO8
6 !,Gy
=\-XD
h%-s[
gd!){
Dfwp``w
#Xk);8
OAtj#
sx#V'
:c!5v
FTz?B9
YZX^-
]}E?AB)T.
iZFT~y
K:+<"!
x-v-5
;96Bf
?=dDmTZ?
nFd(Y
Rkl?)
oB&7I
$LD%`f
~dopi
tHw1E
)ao~[
9eh$~
h!rB^
5sNb2
_+=41
8jPy9
?d'mN
^mGo8
#_,hK
$0pwcc
Iy4?3:oB
C$5!~
UuEbs
hXhF`
7+.hh
XrL!N.
vd b$$
;u4yg
)@%x,
CharNextA
eo}mG
Tu+$d
RX@2ei+
wEf]N
"1?2,1$
6T|mc
q4t+#
Y$;ri\
a3<JC
Bs`>G
Z8v 0
uMT#b
#uXs}
[[v`z
sVYFG
v:k.-
"Vn/wd
2A={2X
"\&d[
`gw::7qe
RL`cd
z@{ @
6*3_a
}#N]>
UEnU<
IOpcj
s#)xq
c)444
W.0iC{
&bcLL;
J5J3%
;-*<f"
L6ua#
UrU!~xCw
U;fG2
^tA2FM
mE'GI
\w;k0pY
*4'f`N
%rD{C
FZ6z_/"
1y.j~$
)/VK}
g*4Y^
#]bS)
?T0+"7
n>UOwB2L
6x}0Iz
M?;sr
f7TWo[>
rvB1i
#M,.yT5
0ZOfi
z)[@~/5
Ng~]jT
\!gj:
<{"P?
;ZJy[Z-
cY <Q.
d #KP@
WALW]k
|0l#j7w
x(.z0+p{
[!wlM8
+!P%R9
Q?MU!
\Zm)&
EY,ah
/{Rbv
`,v>+h
vfo:F
< 7>t
WTg|@
];(z}
}$muq
1G}UC
n=/#t
Aua_:B 4
cZnud
GXMQ,
O5D.yq
1L6(^d
zncv!
$K7/A}s
+t9lc
,,ZW&
XW*LS
4_rX!t
dL$?[
CW*II
*9144`Z@
;tjuv?
8}arK^
Z.sfXj
[O:GZO
d~(iA
A<RM#
,m3Im
}W[tx
*P1?}76
&o>>=
|REP5
F[eva
) ^O]>
W$Nd?fe
aq)5h
4t\([o&CE
@3S<Pv
Euu`9
Q^]L5
-6p'E
U0wtHC
S5>BM
[DWoL
zNNOx
gPs:RGv
]jo<
]a]a]]
hioEM(
adkUX
5'woH3
vtOi/&
ly{qMvm
J:dHU
'0PHEq
j,<k!
$&DFYd
'BE4]
oA`=T
aU~OW
^F-M0SSz<
GetSystemMenu
T:Flv
nziF'
XSYR9
XiNdra&qu kF
wOl G
y0(1JP2e
Zj-Zd"6-*o
GQ*Dj
~<Ss8
o{q~$
|UIAeS
Dva-D
PVg-3
ARXE!
) i4~
#v]Vg
+nrP4
)0V>w
Hl']{1
guY(i
qYj%d
g6tE|
?Ai$b}3x^D
-%)VjI>
k~+#^}
mMmH9
oeM1V
SelectObject
0PW;X
d"kwpf
6/[v(
qd3+2
:Br`}r
6%bBT&A
cDEz$%
(YK\^
d!WUu
x?t+s
o_Fl6
Tpl@2
~evxx
X\r*o
C|r^9
QcQPk>D
"V}\p'.I
7'M=F
.'+V9
c(3!Q
\ev,0
CLBCATQ
|@?tw4y
yv;yh6?O
;jKoo0
t]nr=du
nCW+i2{oiV?
Rc~PZ
}BJ 5D
IZ4]]m
tTghu
?2E[%3
:?qqo2?
h~p?\<
r3|RG_
s:p3D
od|{g
{UcGf
[b*&X
%m}_*
Ftg_R
T@RtR-
C8IO.
n8R"'
|@I.B
%y[8P
G}\XH
!!@R$
+(y:D
CreateWindowExW
CASv2
`>XG_${
.n'2.
m2O +
cZFw|
Q*6NG4
SetCursor
RegSetValueExW
T8\eu
W}APt?
ZL$&a
/O8hN
gUd4z#
7L#i:F
swz.q
~',ik
?cPsW
Mn_v~
HItIF
o_VWm3
0l[a/
)hk:E{
XG @&
$7J1~h=,
z[r<B
3*E3i
-~K2u
6pvr7
^t0F.
N~_j^
5$"Q%
`+O`6,R
-B,Q
Da5V} #
|#]C"
'G~,X
?q)wg
EB.eC6
\6.5NF
t=#qI
B-o@mm=
UT%!T
B3>3N
:<Rcb
&Uf6k
"[bdP|e,
;OJ<f
x`V"0
&'YB#^
4Rh%)
nv:]V
FdfAB
A T?'N
W8#qU
ynoeW
[M~M:
LoadLibraryExW
h}.T>
U A,|
r6 Cxp
Vc.GPB
l{0"}
)g1%\
OBib~
qGo~M
<3o8(
;xBzt
$03C5
BgN`U(gD
JUQ<@
/Q:$"s
@Q|E+
^,Z)~rEL
>'{%E
BBY5si
j Zf;
;nc[Z
>qePCA
jPOPLXmjVKKWMEA'n
6sANl~FV
' /*{
*G/G)Xd
yNKTcx
w6>p?
Y";<wg=o
m2>IM57
c}|}vQ
=e)XP
3HUT>A
$v#O]
lx/&Zp
s1#UR
Tt\Nz(q
X6^u=
SJ, "
a}T~-
qm2<@atp
sjCBY
ZiE B
XQ/ls
($(IF
e5zF2
tGFYbr[
U^^O:
aP\j`G
{X7.C/
<xYE@
7OD1]
k@jl)
Sa/;$
\P|DO
$l CpT
vZ.,)TW4P
tFFXl
usih,`
GD+r^t
wh9Bs
j&tT!
U@Eak
x$+nc~r
.F$82
GGK%?7
\R_w~Q
a~F20
n%WP43
X5nGE
:2NL1
wW2lizg
ZWX?d
jG4T~t=
/0P;s
3pR%m
5Ipf)@%
:JuN:p
9D@UBv
\yq{4
2L+i}
0aUv,sk9
ip<PrA
?pTG8
_n(5!
Sectigo RSA Time Stamping CA0
JkqRf
4._jt!*G
{RCg<qz
Z*?>Sw
B,"^]0
BjgM?Zp(
#A-c`
\A3#&@{
1j)k>
E6<@u5b
!MKd'
FillRect
N;<^mT
\v!w'a>
rPC;W
R*k,_
K)PHIqh
SO$kuC|s!
:bTD+
m\G I_
&&oF
IbO/4
>Z\E
wT^CP
^8&#,$?
+Y]-J
[}/%$i
Y>j.9s
Kxc[`
dbQ)]
3|qv%j
Z:@@m,m
&}'w6
'c@9&
t>#q^
tS=Sr
cTdCI
&:WF?
TYOKE
>Cr4W
nQY(X
3^WV~]
";7,H
goOzdD
#"/c+
;B\,b
-bF+gXYX?QH
wW/?.
p;9+r
Gfo8b1
$8x^}d
i#F=A
bYE({
}?:]XU
42Tk\
"Q"."Q
wZeZQ
/wcdH+
!*2f^7
VY)VY
1{P]'
yasO/
xa4NI
>[<<{
<61W:=l
fF-MKo
&8y1=
wvKRP
MY.5^
<U1Z@
}IH9j
f4.]==
}wxA?
8>WHs
cG4{^#
z\<#m
U^=d m+Se8
{4doZ).
ol4 P
s/bs6
m7$66B
Pk1=K.
zGxYl/
``5 N
pD?>A="
_f!Um
aeo<k
|NWwv
taDP.
^X^u{
T|.E#
8ly2+
@a~3iP
~AFr8
xol*%
*k*>NN
t24KK
d|J?s^S
eK8=^a
AjTxq
[/).@Q
!,s68L
$0Aev O
;BgR?
q6OuL
P9+SuE
n?ISv
c d,'
YcB9Z
CoCreateInstance
[c NT
#FgP544
>\1Zgh
iU]3u
Ze76jP
8<-NC`
%5,Whu7
PDQ<:&
'56<'"
k4s}J6
\bvv]zz`
GetFileAttributesW
PortableApps.com
_;K;O
hC"mfT
}2B_D
+=sE !
/y<5K
]~/qr
DdP^b
Wx~a8)
"y=Wv
Hp=e8
U@<JL'2C^
#ewK8
zIW}/;
3e#q1
b&[d015
2:UgK
(|g>+4=
!`O\'G
ri~9PM
Lc_r$Y
.IxGq
^A9f@
=;BFn#
t2T*9
ds;z5
ZC<s-
IH{vJ
Gnw[@
k31xm!z
.!ZRpJW
YE)Z&
&iD;f
fcyPLQ=!
r(H I
m4RTh
:xMFt
DispatchMessageW
sN*rbS
cjmdB
AM!EW^
q5R~P
|e(cy
]5A-K
X,jkA^J
d~s=6
y_O%V
smn1&
{/h@h
foI+C
c&$SB
}:t ,
wE[UKr
?=dA.
`gSd!t>
~*_82K
ynSDY
xG]gS
6 u?l{
Nr(f{
`T2p&X
|zm+c
KP[X'Z
*,:8(|M
aP:E(
QW$vp
m/:Il
#~[rN
https://sectigo.com/CPS0C
-[A}eH
tz'E]
[9c+&C.
w/f}
Yme+H
$g<'NQ
O:V#w2P
>1iT=TkD~
|u=2^<
{D77D6
PjVVHi
btF*'i
YV}Kn$
k"cH&N"'
/=$D:
BeginPaint
<W1X<
'`XZf
C|EWS
a"s]ng
|< _c
@_1es
e';a;
kjGm&
HA)R&
`;+\B
}S|XLt
_[EEfz
"P<4F
:KipV
HE1q@
Ba)wbf&
FmXhWd=^r%
<]y",
/2.G+
U6K+b
\]o0:k
naC{Jt
IH?LBM
UnA#o
5j)^T`J
|H<*f|7
]gcD&
XCXW1*'+<#L
XSY|Nc1
6_?C4
3rUZ!F
NkWUMnt
5!y5O
$$>$S
$+(M,
yIl2vo
f@d=|
I@II>
i^gtnhD|
/Z4f.
6ii"Q
UxYYe
B-Iau
p< nG
.J^$Q
sq_-~Y
}0KF2
EQ+e@]
p@L!2
78+ %sc_
xoTu~7
a^7o#
1OtTo,m
nJ^rmiM
kfjP[
iM&XC
a8g1`
yXJ -
9^>[r
A_XUyW
i E9*
Bg+?1
ll"Qi
0{6>]e
G!Ln!"
n3dm"
GC02"
I'e/
Sgwvuto
$!#$<
,Ak}A|
_Qv.hx
6]eXA
3$%4eO
olw'z
z_jM`
vk k9
([=/&
T&I6
:{#!9v
)$84Wa
(ofz/
(oPP$
j{BL"
P4Xuu}
|\}!k
P:f'dc
3FG!fg
V)8<M"7
W#|=B%
/:iAG
5cDng
GY<C}
^KW\8p
e~kqH
/9t!-
~: cR
qTxfS
>=9V]
LR"A6
3z,/O
<VU+5
j_lsZ*
($="=
9mq|m
x<Y2z
j3J~j
/HbhH
gt,d#P
M%d)M
C(=065
k)5oY
K-=3|@
02@Xk^#
V9}4q
E( t!
a,4LN
It6F= .
xuJO_
W!p"_
Q(G#K
|}5'E/&
,/$PX
xXXY(
Nu&*[
)Ds/a
my|z_
Ng[G8
`:iw]h
JcR:\
pt0-I?|
Y=MY.x
0"EPG
Znjfj
]0E]LByv
BBL#%9
gH@8
4bW|MG
H7+ap.
i`uo{]
=JWKC
Awt6n
1&U,k
Mu_wE:
*_i'P
#jEGW]
QirR*
J?wEA~6"{[KC
UR}$gH
0*aR>
$t3MI
6Jt)R?
kJK2W
&@ ~l
)|}*d
m __;
n-JSY
C`[MD
Vd]VH
wRhOu
PIzpZ
+07`8
KtLtE
u#q'$r
tvJ{@
jWENld
LJDS^(
s*.ot
E9UfZK
Y;u94J
F`Gg0
#kdc]
t/S^|
bPz)4>Y
5?K)7q
K>}DeS
rC#s=K
OxAw9
cA=@({3
U'HyVz
&yJ.1@#
-S~8=&F
nK/_d
LVX\z
9%">QyR
iMSuq"
9y)7Z
,KAh-
#xb)E
VmlLI4
o(@o
wrGMS
Si<3&
*9AL:
[C]e=P
4?}.f
B.~~X
P{L|&
]T!KKj
?'G[<S
8oK40
"R,>G
.fB,P]
|4KN(Ee
_g!p0
5KCXeo
{V{l1
^hZ87
!RvJXib
jm'@oN
A-Zh(N
tw)3K
'YUU;
>!c?z
z0pl5
vudmZ
Wkq)x
&d9y!
5aB"kV
{q2\`j+
npg/k[01}9
;0T5f7x
)c`0!
h5R,l
BH!wT
3&]v+|
~b)~2
$YVZp+
"liVH*
|D?YM
.2K*7
>_'f[`A
W+= EJp
3mxIIY
MqT~x^^c
TT%e0
T+$b$\
))fUr
8Z!~m&<3
DF1@Dw
9M#Fp=9
oMd%
dfI0.
[H>Z7/
eXQ098E
1Xmj~
,fN6NTZ
o>:8=>
0i7Bu
8j\Mu
p\cOdK!1
\4Q1jQcuv
6B/Ou
Vhuk(
HFBWU
a9P%R
n+>1_r
!Xn;y
9pzkR=h
Oz=m:l.
M1~]0
W9QMf
|6pU:D
V:+Ze
O1Cj4jPs
Nx%b+
*:Q4_
]\{w6aY
a^A=7JtQ
s$(hm
xdQn-
.XNY%*
P?rr
SKIe<
\4r/Aeg
iWsC=
`BN6o
EnableWindow
=V)P`
%wejf
ee%HC[#f
>s|[$
hi<cg
1TJ]X
\Microsoft\Internet Explorer\Quick Launch
eeF+l
*Jy-n9
f\i\-
zEYpmFg #
;:ihd
UX @z
7$%'F
aAj5H
x~P]@Ic
eEj#}
CloseHandle
U=f<D
*\iTH
!;p,M
>OR7J
'$O(#2
0FIVL"5q1P
mNG#=
rnZ8D6
}5Ro)
.Ne$SO
0Q0fU
K9tA"
"dd.*
5QDz(
EEI7G
sxf"
3 ^l[
:[~|=
Gj@u<
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
RcVsZ
2A>oO
cR!w6
w$~mm
C5A\0
lOi2~
OZq"B
c@G).
MHvs4
'UWI\
9>b41&
{Pq=T
zU6@1
MJ3\Di
L?8'Z?
5R]+J
Gpb,d
%k8Kk
7qGsY7
uSM"$F
P8{`4
>iBXd
WOo3`
hjSAk
E{FjI
NullsoftInstH;
=dtdJ
z:.Lf
)}F0u
6xy~:V
B:%9v
ah%9&
fS1lq
Nj)% N
02F=?
s+^NOGTr
832L"mu
G:!U?"
TZ& z
9rc:8.
!fS;_ /
4d6OG
S\x&r
Ft7R{
lzr;#
]OL/x
0;oji
KF~m[
!h%t3
A;$]{
01Q@M
pF>l_
2|hwm
bI055TZ
c5d-M
d+Cvg[bfl
^V&{N
r6UzG
G,c{A
!).&w
*N#9d
NRwex
P{|vM7
+2j!}
k7X%%.z
^gN0E
CJ_ea
`lA>v
6+<ho
`o48H
(PX0v
=+&~y
V86Cf
4-[gsaK
$fE=<
89BEE3
!h~CvCf
@r6^\
$IAG|B
.%bV@
>+Vty
V?|['
RSJ^%
jMIq}a
nAS'/0
wq69q
2(g0?
/W#ar.
@M4}M
M~%(rz
}1e@-{
/+Ad6
8rS[E
;?~LIK
gV~~A
Q7#JB>
0 sIMn
tGrTF0
cKx[f
XhCa~mNz2!
c^E4K0
*KS`+
`2A*y
e<ao0
Dq{s"
WH*h*
nTh%{
+EOK!
MOM]M
UtaN2@
]Ipq[
UOND/
Q{yl{
0[Z;$J
u;< >
B='R4
^d^0G
8&jeH
gMq0\
Zk3:K
5'{+g,
0B+T4
}R6LRT
C-#Jr
%0.S+
VTOE6]
N`HOw
rsC?T
(mi\h
;j~Uj
8Wd3-
,4$=f
B?|#_
r)/fE
<6yxT
:l 6{
GlX9"
XYO&u
8;&1k;DA
:/qpC^
6V[*-
!w8]n0
e,z{=C
i|Aom_>
;n=J$-
@b
u/l]loN=O
#mP[<
%"*Hs
@Actj
_W#%F
w;xYf
RJ|-*
COMCTL32.dll
>FFf;
.U1Pa
@G{@(5g
IFI0@
$vn_TSLHl
'\dRk
G2\p+
PortableApps.comInstallerVersion
(aJO#'n1
f/h2\
=CU0`
YuGxa
Dq+]$
X0O_;a
NA@Pr
w&<3#
H&x?e
}LCT
2Fne`
W(T"n
7ef>|
^DRg8
w/<kO
AVN8J
?:.O[TH
L-)@/J(
gAva9
7Wt7'
YvJ:%
OlUJh
2"$9@
ev/ 2
O`fd!{
'Tt3D
'/@3NS
ii+/21
BW[l
[TZ=X}
< 8>Kb
vm8f`n
S?n~L
i,.}h
x|TK0!
in4^*|
}hPT[
)"9&w
3BlG@M
.i~_xt
^@"/k5
RemoveDirectoryW
U$-|]
^p|kG.Z
=5+ov
*=qlZg
v|Gd[D
FU;J2
{I0F>1
S63?5
t<hry
g[WpP3(
pEkkK
6j;4F#
WpgF3
v1za{r0
}h`\~
21c'`n
\\e.N6
RegDeleteValueW
SY@TU
'?<x`
\oFiy
}>#K8
;maF6e
nuVt[
A Ab&:
N2IvM
MN{]@>i
B@P/|
`~G?,
x=.xR
c+gn}
[uvK^>
@}|,v.
d|+o|I
k|jKR
7?og<
!i{Tf
83v.)
Sd],'s
?~$|V
EbMt}
9i'E=
q8N\/
RegEnumKeyW
PcK(4>I
Y}eC]
+gXTp
v*EEms8
( (<*0
50-rN
iP6uA
PSR\w!x
CRYPTBASE
^+ms|
])"ah
:p2B1ti;
wO>(K
H[vLf
7>G.RH
*TeJs
jO<Rn
Z"3D7
X4'e1
H+WO_
oI.u8b'
!N@}O
gzYI|
QO7e5
IsWindow
'7*dS
S&yoQ
rE^t (
R\SQ9
D7Szm7
|Df@
Rq@<$
PvU~E
'Us_N
}OeG|
ER!gfsQ.
;7FxB
{e1]
G6x8e8
OE'dHd
@EQw%
c;RtX
-wwvp
;0ITs
8@L7.
$#h})E
Vmn!i
TR"{z
mu_=%
j~dj
}HSxV7
sMjn=J
v!H_R
k"eB&
.RV=*
AhY@
nxU5t
cO0{j)s
={O]q
IsWindowVisible
IUe"_$
{s'nt
mp2O)
me@0~
aC`I?
Q3quk
bZx*G
3Vv,{
;;Vn-+/U
1P:hh2
u.G58
u;Wxl
=54L<4
:/3rQ
!ZKa_w}D
@XW Ajs",
pp]s6_'
wV&r{
ImGV~q
;Hc%8
d/? g
<U1wC
#~gO[
@Gk3o#
r0j_^
*~Yem
iWu,wv
U>Z#>
e9$%#
%eC`4w
B1Yel
ayqjw
7s&>s
|j"\(
-4?-|
395gq
_-ux5RVT^:
yk*R0
WEJHu
NC}ZL
YV:x(
$FN7&Mh
c,E1v
PBr5)
,djbd
>P52.c3A
qeh<.m
9Qu02"
F-q8L
0-C[M
|E3gI
<=~zW
CzryE
jOA4HZ
K:?+r
<7:6e
H\5w`>
gZyF&
K#u||
RtPI-:
oYj~f
L$!mI
f!>_^
Ek(;6
7txmv$b
,BWA"y
T2KB~
T>{4E
CallWindowProcW
EbORo
kLeOj
z7>B2f
TFt1b
r"TrP
)]^oUu
lGR)c
H"BO`
oZub'
pbV3a
WvuAa
Y7J 2`
A|h{U
Q`{Hs
-O"1/9
d$7Fp
.xOnC
~~57!c8
~U5]F
"%MgP
QtC!y
GUv6J8
Bauqc_
`ep(D
)#p3*
}o`:W^
B(sz7e}r
LV[Zj$8
xbN-C
|.t930
."HwKF
UY-]%
_~|K;o
M)oc.
[JV@
2$b4h
`G*8S
_8e\DF
K@r[mpRe~o>
wz-h@
~UB(G~_
s)OO^
}b/40*
r/tkw
~FyeX-
'T707
>y59V
B[=EV%
wa?$e_
D^+x3x~
Qox2=
K:{.f
v!T&K@T
=R(%J
101181
caEx}
WPWj0
xA2|r
3/Y+B[W
Pc,Ua
]3dV6`
<]5JF
BLneOWK
~Ry{u)H
zDi`O
KL|ub
Mtz/a
::EkV=
/ny-[
"zV!J
!D_~|,
lQn50
"W7Rh
d?0"1
OZdq+X
|p.B[6|
JSsaNtH
RegDeleteKeyW
&-9[a
35^_GNLz
M[ AD
;p'Q~
~p7b7Y673
Zq_[Y
Q.M[h
9TYHG
MA[Pat
K1>s[
ORs`+
p&MhY9
nVgDP
Mc6&bl
9w*a6
/8%[=
Tno_S2
S@BTj
cG}YF
3G$0>n
)Hd(x
K(/g^
v4rsJ
9xd2`w(P
=DIr7|Y]@
lH]J_
HTP-`
WaitForSingleObject
]mk;]
wd-8:@
CxW-#
{Rse9]
k\GDH
HUT8y
<FoFh
(i?XKJg}
tDro"
?e[DZ.
-kp=tR 3
OpenProcessToken
pug+V
61E9F
5rQv!
H!m@M
'1-F*p
N')v#
iV>36#4
?JO84
bTKY`
<kwG{bm=$w
zkB:Me
Pl)/4
`O/vm
+RB/i
p0pCB
IQ64o
hB+FON:}""
U<C)Y
;fdlSDg
I4%1!
tiXfn
[wlO+j
vm&p!{
vg*bs
*\nNf
_H_q|
S9U> $S
+M+|e
nlAr&
#Jtp+
.TXfpT
1S]*mP
SetForegroundWindow
2:~-k
"Q]]f
@hUv
)-nH
^v9r&V
tq#;fMX
t\(cQ
|5@Fa
x[_D:3
#EO~1O
;`J\Q
t6tF?q
1d&%D
c;cSA
o%L(-P
0yO'm
Yz)KO
Hp'Hy$Y
dQxED
t`A7f
)fJ0}^
%~'S/
Wf@wg
3MXHM
h+P_B3!G
gMPM?G
;A?DS~|
>1xN_
"sMxl
}8- _.
8Q1{W^!
R"xAv
D*iD0
e1;];
nSR<`k
{9paK
aq=Bj
N0@AA
ExpandEnvironmentStringsW
k+?HO
,+ASP
9!*0Y`*
Qtx{y
5~B8u"
a9KHV<7
VLK9H
SetFileTime
}{+{6#
+Cuz~
$Ir73
9zHsf
GhcN2X0
[H9?,
<:3vsy
krRdn
Hw(b.1|rB/
&TbpI
lGB_|
}/i<{^Q#
?i%1~^#
d/{`g
;zg;9F/
w5`^
aCA2/
6)&4OMj
?XPLQE
ZK")p.X
~*xg&
K/JE.SxM
:a+RGY
?Lx3z}
g>v-3,D
*Eia,^
!j7n{
dU,Q
^<mybe=
V<G_s
!. 2u
n2pr'
V4zjoW
qB\dc
Qwoof
I5<=q
]>rH)^[
Bq[P\r
5\Kv'R
crUyne
+Cfd7I
ZyLhWR
@W=}ZNU
gA#.7
j:O^+
)ZC.nK
6wcjr
ryCVCNs
+%*'!E
SLC '
7nKERw
@g%$u
JSD_#
>z/]A
,~<OL
_Il=_
KZ[yz
[)1M58
GgFGk
y#|Tb
G7$Ru9Kphn#
.a$qh
o^Dk*
lK2+~
)5Oo
R$~t9
bJu=K
GeeX+
3h}12
ez;nA
;\&*qiJ"
Nx:@t
softuW
cNU!O
e7f`*
=p^Mq\
<b[2{
VO1Au-
3-n(\
g\[Ny\>+
4QXnf
;C,Bu
w7Vuz
dgZ\K
sI^&&
O:3ku
&^X\=t
^_r\T
Yuu(f
iLZ:7
3UAIQ
#L%0>5
f[tz!Q[
#G?j%v
F}$%=.
#)clF_w
M9qPW
[B*Gt{
|"j37
bDe!{G#
GX#e99
Nh}:l
buuu(
M_3KOy8
%"ov6
,=Wyc
^x/lK'
rOM`a9K
#J?'_
RE@u?T
_OYcM
#hk5P}
onoM\
16e1
3-aQi
k%E6R'U
Lxn{r`
wfb<F
ebxeb
jx]2:
\v#i,<
HO`g&C%S
Up8[bVt
PtW=0+
JI,i9
fq &l
9i33K0
lcxY6
;tDA/
5cPw2
@R,JZI
?R/Z8
t@p)8
3+cUw
iX<EC%
{m<6e/
5nc"n
<^#q;
|(P=,=
Xr_-Q
S'PVJ
\_*88
<n-(V(
@Z?>.
x-|3
ocvtYAC]
(5/u-
O(WyH"6
]Y{{,
&sdLrj
_@+3r
/:Ab%
0[5<2k
LvI3E
o*j)I
QaE7|
*7@}<[}
{!(V;
Z+.J(9}
PczF~
X\9LvS
7;U<g
SR{.1
;5<w%&E
-ap)"V
o/,SK
5*4LU5_
t[![x
B[Cx_
T6D`F
tzK.x
-Gw>v
V>VtH
WqXHRB~
+J*ku
=q$h3
x<aaMD
Y4kClK
oG0H+
f]p=}
,/62KA
E0M<|>
eRnr-s_0
NnXp?w
NtOz1
uw|wpJ
FCg's
pp|uF
*S(v=
2z{E.
R=*<l,
r[3>hH:^,
A<Enh
2Z%oV
$wz1Qi
k'Hzy
qRIss2
7LL\r<
"i8F>
&>tz=
~"->p
hQF<#3t
A}sl+
&@7*B
mC5XXZ
1;o-(,
csz$h
#8YqN
90705
Z|_|q
Jrn!z
~#\d/
5[7'K&
[yrp<
DialogBoxParamW
FreeLibrary
K"w B
$*yJ]
o-bVH
;j"Y0
a>%Q>
X^3)q
e#?p}
qbrXz;F
Ot$*U
(~<)
w12,2
t$0Sh
xu'0"
!ux5$
P*l"{fg
p)r:t
{|)'<
JQ #l#D
lYX~IB
P-3wl
,z_hBL
CompanyName
eUn>6
vo#(lT
czZ4?
^l /m24
B<1Y44V
J@U$MT
;SDvJC
o+"\Z
Rare Ideas LLC1
4=1Elv
c8pXK
I[KY?
a;kPJ-r
|_PoX
,lk/|
G9q5Z
u1i%8`r
jkhui
j8D 7
b#8lo7
o~M"4
C%=$P
qVv^Mu
"sRvIID/
X<FCi
qLM]x
H~{4Q
md*p
c(2LAYG
_wtW:
PelHb
$UW6B
(5x(0
a>8);
5jwl5
JsM7sm
g(4j$i
{}:[Q
V6W/3
E&sg<
jPd^C
"uz#_
flBhqJ
k_R3BJ
A{kyE
X7HPy)Y
a]kuzF
s!LA;
_J>29
_>30&
5dAlt
K0"rX
(v:NL
-w!X=WET
!B=JS#
LQxT@
:27Q6,4N
Kv:=ZV
WT h0
8X2*]
\$IfQ
?}y.H{_GY"-
,]&US<
4NY$"
wX<aX
bmh,K
}<f1s
@tJ{_
YbL (
n.@t@
^*y8(_
N\4>~P
qY?gZ
A{C{?
https://sectigo.com/CPS0D
;,)hWn
J$XMr?
U|/!W
C)=kf
kHz`*
-eq|qbo
rk8wQ
,}h H
D":i0
SetBkColor
;Fy|R
E\Qz<
+hWjz
)/0Y:o
:U;W]fC
ldBmi
*~)3%
xWXN/
w_n0A
0w2W2~H
[&7|%
4vx]B
Ils^p
!`[</K
h|gM=
2+X'h
oVQqm
GY?$7V
"6 kC
1ae3}
#$cE:H
X,QV7w+
+NKrz
M@Xhl
FK:sQWx
>3LqixG`,
|jP+^,
ae3Gw5g$4
O*%2\
5|jeM_
New York1!0
lAcesJ
;IM7b$
_Gu99B
H:U6n
cvxw4a
OKgNKC
Uc"_o
&nEn(
5!Wun
CX+ M4h
oQfz!
]K.ih:
s%r#pK
"dmL">QWqI
7-Zip Portable
N>f z
gki'O?L
J-y`~
tw-ezo
*Uzg+
WWW6X
G&.jN
BW'I"
&:>K`
]fd^5
^]=poX
r$j>|
?@1V&&z
8!(_z
{]#e\
`e+%bnb
sxSU0
NeQS
tW_vZ
n%Au+O
~"t1YV
+=l|FTh
#q,1^1S
bfhit
@'2cR
'.yRB
5oq{`t
b+v^#
D@@Va
jmk,Y
e*G75y
Z]M2"g
Zt90p
js=@S;
\iy(_
D5:#!X
/Q'm`5
nX1fg
FvnMY
F[Tk%
ImageList_AddMasked
r73/V
XFnI'
i#0~]O3r
yx.Db
:\tB1^t
dapv)
twJYq
FK~u.y
wv/!/
H*`p~
YuqnN
JC_*a
XZs31
s/2c8
3^~fw
+IF?%
hdRlhl
5I9x(
^w^V$
x\Zm>l
\M& 3
'\<oD3(
Garjl2
PEh6t*
Hn+D5
uv}*Ol
_`|:'_h
48gb(6
bp~`Y
ZZJ4U
{?)2fZ
AF#rh
&Y!5>c^b9
) G4m&
D;=L$%
$u4(ze
Au\'\f
~r9@2
/m.(/
!KI+OF
6hy3BAk
U[Ad:r
5{9|V
kEoc
E%_ZO
FindWindowExW
Vdt]l<
#L:'z$
v#Sa\3
hJN/N
dnL+Y
R\o2\5
^urM\
{DZ5b?
3cW5o
If dp|
kAtOB
zV@uM5'
iGB9;
7>j=&BY
uf@pxj
PeekMessageW
I'0P)
2n[d+q6
.(#}a
<rO7O
:fdI*
DRg4!
qh)iv=P_
So[E\
wfI7u
]C96hh-y
7<=Nq
8@g<]
N"5mV
_}d[H'
(T!>_
FAmQ#X
a5>Yg
%ry_?
I?!d]
i^Ri(
?_=SZh
pM+f+>{
ii0U=CJT}
q319:
MOV{49
$YGML"r
6=q4Y8W
x/m>B#
qQNDj
he]F}{0W
@T:X0w_,U
SetEnvironmentVariableW
J) z,B
K{og(
m{aDe
7!iP2g
%&vS*
FE``U
*Q?~c[vJ
k M5}
?nzgN
jO?<x
];jk*i|6
Ek*2PE
wsprintfA
DyE}Z^=
N"^.n
kac&jU
p(mfJD
ld*!D
^Wb$V{
)pCfQ
+9b 0
$I*dJ
'cW?(
\Q+/<
Wi#M\
}4#hW
ILBy#~]
:=g;l
Gz`sP;
=Ateq
F{rV1
&T%mW
JPN/e
pdNW&Yj
YqtsAI
?>I,x
C4:m-
?f~&Wu'Wf(
_@f&~
53\z,h
T'b S
g0G1@
rpK.[
qvM1pH
vmyAU
|vxXg
2Xn)d
nT}cDv
vwHOm
5@`oV
1?ufA
@#se8
W|jg:
#qdQ8
T@Ctr*^F
W5V51
+iGx%
}Q;$a
ZG!!xk
Z6L1f
\ZIv(
}Y8Sl
Installer integrity check has failed. Common causes include
DmPl]
'4!%9J
Qu5Ek
?Da[+/
=s6P'
iWg5t
ICCc+454
t_1u}
z)=f8^nD"
5K18[
Z^Ce8
:lKG=
-Q<vb
Gq>CJ
w#+`#
(v3i{
n0RKZ
1@!Sv
u.b3jC
y{Bz{Z
226IK
'B4WAa
R~B00
+|Ln)
Control Panel\Desktop\ResourceLocale
J?CA$y
:ZTOn
ScQi-F
afMhm
Ce%Ey
[FZdC5
47;:cw
!'J:v>
lp?rq9
5I}~cp
ez}%ll
@QdWx1V
9MD%=
'tVz'
yGr&A
uzb}UC
lf4R.}
i:6?)@
uZ&1t
~Q)@^
b+k{6
GetWindowLongW
:`rw6-
A[D'I
.\_zK
iQXe'
9P81{
rHu~]
iWE1.7
*{$YN
~-W#5
Kwct!
#{t=s-
jh6`{-
y&c*;
Z0cKk
Q#"=j
!6bwL
E Q^e
K?J/B
CViX0VH
;)U{Kp]
R3n-h
`Nr;@f
:gfBX
=1<zP
bE<,2
8P+J(
l:>s"
'*w<A*
}oEM@(@.?G77
f}vg.
;$&vw
q=nqS
B!RmuE
ii+Qz
aObz+
,OB)%
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
{055M
L2SlfT/`
|lT\M:MX0
`HKTz
03"5F
pu9/]h1
c0t=E`
,shKU
*o>;N
0GN;]
=kD~=
xLrD=
/ d^
`9nh*R
umevP
>ZOc%Mz
FMn\X&Z
-g['P
ag{4{zM
2=.ko
Error launching installer
uNs4R
b;n.G6"]
W|G3-F
d.\<B
snzz-%4
9ghsyC
=D`;x
a>L+D
41;R<x
N749m
#g 27;
6<?<2G.sn
`cxM*=T=vx
n&>.aC
w,:n9
&{%2R
SCYET
WriteFile
Av{^d
FOX1J
UB<z%
[|HSg.<
rFm~U#
\|qDo
irlz y\
= yf+\*
P>2;e
-8DeL
Fz%Ll
Y[p"10
C6g5Q7_m2
3ru6O
{;~A}
DestroyWindow
~dN1#a
~/9:A
XilW}3e
4ohIN5p
^#^,cy
gx]-6
T7tQm
$,XLZ<
c\3CSO
Q#;T#
(9=A*
;1+nXW18
G*9}}
3*-3%5 '
krmEPCP'MYY
JtCvq
UpZLg.
Gkn{
~L7dPD2Pw
e)5*-
&?P</
=P]IwO
Z[JEG
I@:(c
W6.J@
26fF1
!uS5W
RFN|h*C
Hdv|3
FR8V;WZ
y|$cZ
"W#iJ
?&F3d
rg,CO
YD?`")
|=0.u
`ENfS
(/^;oi`
9qJ"l
9d?H,
qi{zf.E
TJ>3qHO5J
OQRM_
`lhQ3#5
&0I.;r
VSUbOI:
N8ZkH
}20~\
*%=6p
"|nRi
`yHnv
0-DW(
{Ydh%xRc)
c+loF
^v63y:N
Tu*"'8
J+)<A
SQWPV
g{CthN
q2aib12
*B@`!i
&\:\:P
$8UImG
kh/n!
naue\]
<xI.SMZ
j(uwJ
#L3Zk
-.y9M
g.rT[4n
~&Mt@>
%<kN>
w;:rz
u|$4v
!xP{d
a`r8l
i%m@hAU
9!$If`
/8[B-K
qlnn/
DA>:?3
fZ>A>
.T0?`
I/Zul
\08dn
@(-l=
:!'[=
.=?F;=
IrRh5J
.aAvzW
3,3t&r4
wcaq(
a#@?\
[2=`A
\9u=1
%(rb0[
lo}@x
sUM~"-DY'
A5Xob
Pfib$
d'YjS.
_IU+*
Nr{ID
|Q,%5v
x_kVS
Y^1}/
Y*{'9Q
/BM.,
RichEd20
G;_.G
1Aps~
>"u[.
97SZc8
8N%#6
2'un*
jHjZV
HC(K\"
oHh7
^m}p$
,q/G;/
HE>?5
)g")%
JR;Gw
r#?yM
PortableApps.comFormatVersion
y|k[*yl
f3&p-S
AI@l`A
I4C>UHR
R,=_,
2mbg4
K~@^_
atNy7
L&.\U
oO$xF
03<41
2kM~.
LI4*v$
cyeMA+s
55;!<
\b(;e
ugbz9
xmH:C@
WVNtD
I-Yu-
~?e}`=
u<a[;R
PCnVd
!+jTHl
K|}1KwF
N?9\P#Wy
6R)fX
n}!68
4*i)w
ev-=Vzmb
.dyHh
6"C>u
\Zabv
]J6"}
exSXv~
uS\g"%
lL.$*
nc UQ
}XZdRI
d:Kz)
trAHj
4_{HY
fmE4X
1@aZ/
dcvtp:
;#B1,
Pa%=>KD
(]"f|
jsMXG
wyMk;
9x[uk?
(0P*,
7*Xr3
nDS {
U;bL_V
9G,!Fd
6RE0$
wNS.-
/EVNt<
5.{L(
qf:}A
{6g[Q
!nsrw
5.VU9
@JoH+
]\.V(Nd
ojI4($3C6f,
OLEACC
os'TJ
fZ[;8K
{)-U-
H=,<G
JvL.,
!GKOv8
7N\ )
F+IKE/
WE;*Eh
~2U4?lo
g4z<x
qQ-,bf3
]"s`G
RzLOA
>"/F/
E[??XJ
(%p$X
h0f0?
&1;C8
s+U8t
G?M!4p*L
O|1H_
Lb(n-
%4J)3
f*p2t
GM2,?i
wM/s,
U\?;:FU\
:{M^-
>frGt
~i|Nt
QK?I^YM
n(]-T2
?}dy.r
'.v"Q@
;`)[/
5,8V[
f{C{2Gp
Gzs(=
^UnB[
2Ug^%
UwTS<
$S9|q
P"|4=u
tjZly
I,mg}
^x8ueW
Zlp)p$
eq]QvEw
^C`g$
tI:BK
i:=1%j
iw^*S
&lJ{p
9<4}"A4
>Wc?n
qGp'E
'(m~uT
P?'j>
KG3Jds
VkcjG
SXVSj
+Bu<&P
(QJ`Q
0W/"?
~&OlTv,
OYjy2
'ajX}
988Ww
}MbKw
^4l%T
\Q>9d
GetModuleFileNameW
"%SG,.V
JN'A^O
$(8StLgG~
42?D%'L
AwjIrK
XFPlh
<V\AN
pW1t!
-*/:V
58/aK
WG3xU
S~<8~
;@}4a
|)e`#]
/,~&6Y
y1HWA$Y
8=D6.C,
77C.f
,T&&k_
:pTC9]i
Zj)S
kgA^Tq
;_1"[
OZ"rG)
jxUf!i1
+i#u2
zd6#|
8W,9+p
;J8cr
ruL[7d
Z!<^}
h;C)4@#4
82qWA
BSC *i
M_-Qj
?|]v3k
GT@W^Z
\^'|2
!dlIz2
\=Qkl
+cujb
U)cvxX
\41bi
8|m)n
-ot&e
Lp m<
NA=5$
{C[7)
jSr?6
q02YA
]h176LR
UJN*
IPfZd
d+cV|
/0^g(8
}{~EW/X
fxWS.
YCSD`
Kr]Ek||
[PnA6
H%}NP
K:e_Y
[J?2L
-+-V,+O
gT{Eo
{M&"t
"J,3TK
r*'45}
Ew.-,
S#fIS
s%*z4x1
{f4iL
2.G2`
g)0M,
P_P_y|P
b;|Ih
tw'}C8.
>e$M!
e\;a'
G7V1U
VS_VERSION_INFO
IHa}?<<
Vl}0%
p42-(
baP`g|
~9 .AD
C~L?I7
,z.CDZp9
4'1JT
.5|B(S
Iq=`IJ
D0E_J
]etgZ
c\DfG
>xMz-
enhvja
(?T]B
>`%- )
't/Bg
x;=m>L
1,BKw
vbyNM
y} :Sp
;qU\Z
hGH*9
6=Z[V
[`B|?z
oqt'#
0rbZ,
-G~K"
$gxC4
m|9|'
rAw F
$rh[Et
e\dRX
1CMC*
-y>k!y
y~(c-7
=)>I
$IIta
qGDq3Sc
Q^bu<
ZP>ZuQb
#)Zj3R
i@im.
z\dov
Bm4aWm
|.{!.
{49=Ii
O#%Wl
OWzR9)
b~ZK|Y
i`\J8
PkSK\
a"!G4.
][6@P
!NE6(
-;bJK`q2
Sii.=
OpenClipboard
N0Tz'tQ$
nc\;.
O.Y'ZK
fURH$k
)EF )
&qb@`
nneV [}
HS5#K
Rx!}G
yjqI9.
*pco>8o
n~yurm
X71Xo-
l5oWG
E*sq?!
>64VIN
9"<4c
SdV0D
[#goQ
f8^,um}
M;NiB
SMALHB7
OP{&;
?1J,U
hQ; )
H;W"O
f)iC'\
tvW&N
BV:"
{?~6j
I{s?7
,cziV$
O B1)
B>c+M
w8y%d%
zuZ]0
S+(:"N
k%jP-=
:pd)}
l]Tqs
x~iIA
zgTsu
zuqYq
AVZeEC
Qftvh
}GOe~t
BN292
)&x"}
Nr\`N
94**wma
T0 <B
yBUBl&
e OR[ip
W27:Q
2|Q"HRU2
vI~y.h
0Lujm
ExitProcess
DBTb>91
maB)V
<zII&
%f0JM\
cOg5,
9=4gD
++U$|LQ
"{\j9
+HY*N
Xnm*'
rzWcY
GMf.G
F]n6l'E
;iL7}z
yvvc"
2/@LZ
CKjR@
ks+:~
oZlAZu
ZsY+]o
966p.
7-lT2
H[xdYK
7=TzS
catB!
\BJg_
!Q#]'
AE>`R
uE<\]
g"U[P>
)xhT3
}ybSl
s?,I&
qeN_H
@4Z$G
AT=~t|
(zN8Af
qsYEq3
Please wait while Setup is loading...
.?w(iB,
aON+g
dW;M<
&lej?
~i}bv
*TB6U
Uka8A
mlvh(
USqN/L
"U:uZ
yl=pl
r!_cx
E8_#Ko
j36I5
,sQZ8
2lDK=
X!+bg
YSPe((
eN.K5
L"=a$u}
Ci!%k
*I'9]
>'{B9
1G.Onr
>-WhP
3JSOe
CreateDialogParamW
=85_Oqa
gKPwc
G%01$
?E-q]?7e
!}+QeW
!=M}@
J8q7a
GetExitCodeProcess
j7svB
3.5.24.0
@}=>
`~)T$
LGLtPPp
#&:Uj
GuKgQ
R&tVU
[Rename]
d?P@~
5Cq:hP
@xjNl
,_!g1
qeO?W
PN|hz
nA%iZ
d8G|~W_
kC3/rpj
)tq5u
Q]<U@
U7=Ng
NF9^0
}0<G{s
7c{%
"_f%T
j%gJ*
QY'G2
(eK.C
A/nJc
JF#KJ
ta%%.9
YsE]6
LV!jw
5zMA*
jW[;[
4&ja
ju6eLhS
\EnK;#@{
Ki66(\cE
_<_d-
W0Kw@
RichEdit20W
u~L#r
t f_@uj
u$BG>ooi
!p\+(
!|u+\
-$NBo
VM%`,T,
{O=aF
vSR)
]]r`h
m!IgD#
{*mKz
|xk2$
JEC:KO-b
>*8kN
VerQueryValueW
E`RF*
teZRJ)
i]8fm
#<7'4:j
+)iR>
YOn88
6*mLx&
7,lDb
d_4Vu
i:PXk
-CJj2
GlobalLock
SHLWAPI
]KcEk
&LDC
2l5:)
,uRI+Z
Y!Q&D
zYOR#
V;H3f{T
GetPrivateProfileStringW
!:a`-D
"^VsSj
|SiH.$
ZZt.?2
-(~Xx
Y0Mc'
GJt<D
dkH\)k
o:xvW
~vl,/Z-
[:MG[H
{8UWs
4/hnsj
a#PHZ
cIP;V~
]`+<5
4Bt3j
.|t<k
rF5qdf
$PVyx
cnHw0
K EYT
HL'O"'>
`AGK@k
Gpo/U,
r`{}%
9coAe
"}2Oa
$p7^+
s[H?j
#Lw<
$3?U,d
eLe]%
!{6,i
~nnsK
ak68y
c\4a4z
ylLx!
hzx&A
1eNE#3>q1
InternalName
ORCndK
WM z,
+pzt(
lgD@s
HY1z%
.#@Qr
MGlsAR
"w%|C4
c]tE7
&\"q@@@
"^sn63
-UML}
Y&ON]
owu]:b
B,fGG_
?Z\hR
%kmBc_]
cTA}C
?K;Rym
@PPRM
OBd{g
ES('v`r
7;a*\
vcnD2p/
V)C\t
W~}*$]
EI9~q
qR15`
41>QG
w<}n2*
hs$^*
)!cE!-
@!BV<X
;dZFK
u'=6icm
H@V)xHF
TEm<eu
kL4,O
bsU)j
"^ep5
_8!(.k
HCIs&%
q%WGm
oCD[3
CN_i@
Lj"~Y.)
FindNextFileW
$d&$Vt>*
m mbE
AeL{eX{X
_I+OtS
RMp<<
4"A?t
,xfx9
y.i0J
eObTQ
@TRv~
UF4/Bph
f/s^E^~C0
UF!wl
$.DdN
%F:~S
(T_aU
GeS',
~\f%Q
!%qBj
C65,
Wn5Qt
Acv,ph
So1#-
~7m4d
uELg-
uYX,^
iymzh
0)@B}
w~++m
lm\%p9
*i@K}
.UL2T
8+SKDGz
+WI$M
B}ALJ
CTfiQw
03O73
)GBLM
incomplete download and damaged media. Contact the
`FL;~
m%'m0z
vs9pI7
(45dL'
@pp!G
^*/14
r["@v
gFo>q
B<0crj]
B=RNu
B4PD<
lL[ 8
F=S1{
=oE1\
9tbK4Da6
.+:a/
UZ}K_l
$+L\{
`P":J
S^n2$
VqSAd
vrDKBR
Bv\$s
d)^(s
NO'0s
!+L+&
X`R^;A
Gny3"
-F/1f)
F-`D+
GetSystemMetrics
?DQOj
KGzDf;%
[[g/D
[T+UF
0/lg|O$;
rw8Q|
Ta|7}]n
eBj]/
0zi+7
#LA[_
K!&|N
/?P,M
#(f4"
#?sMy
e7fG?
-F=[s
bg#X"
Qg4WD
m-Q1|
n>dVO
`mzl~
OWhqjeeWp
I\RzXlL
@lOPk
Z~KneZ
`%La"
mx{ED
W-vz\_z
goWmJ3
CloseClipboard
e:?81
p7XD
5#D]B`P
rwh|Y
wY_r4
)B5pF
|J_HLK
zhR%^
J9FX-
`Qnoo:
o-+I/
nSo\$
}H>;<
l.G##
4gcgId
{..|k:
CZG=4
FGL\M
roz>6
p)$^K
pvx^&r
i%=CP
\J]h7
u{#^q
!5ZAL
Sectigo Limited1$0"
De|~T
\x!1]
;l+sb
C}T6A
`Y^eP
PZuFm!
a3ui2
8YoO'
0~u-]Q1
v>QUwD
!5=>USCS{
W;~rTe
$m%(.
q~x];
?e@*\
0D1-c
*e+`?B
cA;op
>?5Q@H
jCsBd~
8*^~u
mJ~PV
x9 mF
%3,]<7
\mPYJ@2r
;&.Imc
:)L0J
GF"5p
.!R7QK
=SCoNF
2;G1a
!{'#a^
/<g|;
0$Ma\
3=u&f
|T1fD
;W6&>
387yc
R/y3A
5:Kt_
Ydtv.
$p9yo_
~.!?e
/Fz6E*
USER32.dll
\o9[-
b~-ku
A@t;h
[yuQb~
O"sa6
3|O8psC
?7Gsx
?`i*a
6fvA5i
JNo+V
hHuWC
MVR@GA
!)}`G.b
I1!U`
bhU/B
eM<QY_
F\g5`
ci'x$
6kq{d
)48cf
&i>v,8
8u<X*
Kp'{e'
gY|6]l8
A"*|D
1~|9n
350 Fifth Ave Suite 52091
PoAqrX
~W/09
'}OM/
]q:YR>$0C_
7,<L
.m&]fL
>Mg[f
EM-&h
`he+apL
pYaID
~Gc2a
5[f|de
K861#
0t/jH'
qZ&h s
}AQxM
?/]Og
@V/=qb
%4J6r
wE~d0H
KBsYeqN9
rP-B=
zH+<ZG
%XGXe\
&0I/A_QS
7l8|[
4],+h
enRFH
`Wc X}W
( #6LmX
DT\>w
g;%{h
1!EQmqe
GetCurrentProcess
xTaQ:Eh
t:P*",
zTQYti
NU5sX
(aztD
"HyK:/a
b$i}(@
*<X1Yk
>Uzcp
nrsZX
I-*XE
++&_
0+Cg::
EC{{,J
f[M*x
T 3T:
;nS>o#Q
H!%q!
h,(fcWr
7GeN@6c\Y>*
_%Q7@
.ndata
H~W#3
4}S!,O
R#M$>
B{W%<
JhL(}
(42SM
GetClassInfoW
$`wB@84
tV?[-
#CL;k
9<H1J
Z<2yeP$&
O9{?HVu
:n)gEO9b
mU%'-
R4"c?
,FkfKR9
`XH=Z
6bZoA
Lc?N$Hz
D%~]\S
GA=;KJf
'oRzUl7Q
O2R)m
2podm
APS.-
;Sl N*s
0/m|u
bv)k"
HD+*s
qIYNU
GKp}v
OleUninitialize
5hYAA
5eed.
^>^$4
13B3z
S^?lAk
$]9 HMG
mXX")
]fQ17
8xl].
{dH!=
|F&Wc
!SA_3
lU,3+"
3f[?;
yAy_^<
Pgq(v
fff`P
h +V8^
H>k~sCB
sN*cAz
Phnt}R5blNrG
D'#xL|
z:yfq>
~ &e8
[x|,Hb
#9Ri_
.;N5o
#d0yH
da=&D
7k\ml\
8u+j!
Bbd8:TfqS
Instu`
l{Y;b
ia\`=$
RW3~t
AeGNy
oR'c_s
W\KEv!
av.-{
0jA06e}
x\2<'+
ShowWindow
~.Tr>
Bag)|
\g{6.
The USERTRUST Network1.0,
+4$Q}
{wZ7Z
H/%$q
9UfN}
X37Y"
3Em|K
T>Eh?
Ihym%
|]H}R
0*"?%%B
'bhB`V
LS=Cw
OkKY)e
oU*D9
L-ba7AD
D&,t=
cb,[`
r46teW
/?UP_zA1
]@4fp;
n?A|K
#2h,;,
I6Z>a
DD';E
?G~r-
r{P)t!
d7@[/#
T cTT
hwdhC7k$
P9]Ph
V=j>-
u%]1J.
Er<~2
)UCd}
7!'Q#M
by/1YZ
0ffnjk
3Bc8,T
;?5wIwi
}(Xj.f
3bgSE
jdBb~
SM4DZ
UXTHEME
hK4hN
K8UeA
$tnQPG
F5t^E2J
$e,0;`
1)I,;
85HO\^
aAz<[
8b(vXby
{{!:%
DWMAPI
>(&Z"
*jM[P
fBSW=
,s4`KP
^=))t
LookupPrivilegeValueW
$T2Lvc
U-3i:PHSl
F;Ndw
X&$_[
82g![
lREF%r
=r83k
|2tT0
FavXVg
/v077
*IH-n&[Tp%
HjyN]A
x,o*tY
X*}sc
"]$}?@
}V;TN
SMpej<
B}'Zp
BrG=QW
+~IWp
#8%Pq*Y
jE}1V
1AxEu
C(RZi8
<b+-i5
]56,M/
C?kj,v1
%.Uz3
8svn!
{ki2^T
fA P|
UO&PL
MG@.USd
IIDFromString
Ha0Pt
#Bg9j
*&q}l
rI4,D{5
c~^eD
0@pI%
F5_CH
Khv+S
l!h]nF
?/s'O
1&_wJe
_^e@E
R&XdQi>
.b6@l
f58ksIN
zUw$f
ua Bi
gr)9q5
&P<>(
EPU8x
G,ey<
wL7!;
\K09](
?iC^T,|7
GetLastError
Nc#|H
[eW`mt
R7PCTFg
R 8XBj
,,*T]6
K>ihj
)NDL6
{&^eU
FB1\_
]COmr
$Gg7f
UA}_W
CrCMM
g:aIy
H$]_k
7-9e"jf
xxX[Q
qb^j`
BAh~&
n,E"!
iZ=3ij
$5Fws
L|;|n&
o(vtr
'KF\>
+&/d,-U
Cnv`V
>ySOO
m%]ly
.D-n'
XQ]<yv
{Y~vy
UU()
s9v0Z5
n_<d@
&m_P5
Y4(4:
~ck Q
PHy"0
g-"vUw/
>PD$f
_;<[G
8(k8z
Apkga
RXuu!
O`DYf,_
ioQb:
Dw9Pm
}mrk04
9Uzjd
_~Ej@
w([B??
N\# J{
)yQg!
DeWh{%
R>L`2y
h0GM'
u\^ e#
2http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
j)V]e
K1`Al=aCj
E{Hz^
\c;2E
IopWU
z2jn9
0U@jy
x@"\F
c]g$0H
-OUVu
g~q)h
F`:9Q
I$>cg
p>YX7>
QfOq!
jh>%+|
5P\eU
g4coF
fZcKMv
7LI`m
TlBuM
0zG=.
PE Information
| Image Base | Entry Point | Reported Checksum | Actual Checksum | Minimum OS Version | Compile Time | Import Hash | Icon | Icon Exact Hash | Icon Similarity Hash | Icon DHash |
|---|---|---|---|---|---|---|---|---|---|---|
| 0x00400000 | 0x00003640 | 0x002c1e50 | 0x002c1e50 | 4.0 | 2021-09-25 22:04:50 | 61259b55b8912888e90f516ca08dc514 |  |
2c09465cc979677d65781d9403176c31 | 5c00f471cce984e3b873ef9ade242aed | 71e0e4b8cccccce0 |
Version Infos
| Comments | For additional details, visit PortableApps.com |
|---|---|
| CompanyName | PortableApps.com |
| FileDescription | 7-Zip Portable |
| FileVersion | 21.7.0.0 |
| InternalName | 7-Zip Portable |
| LegalCopyright | 2007-2021 PortableApps.com, PortableApps.com Installer 3.5.24.0 |
| LegalTrademarks | PortableApps.com is a registered trademark of Rare Ideas, LLC. |
| OriginalFilename | 7-ZipPortable_21.07.paf.exe |
| PortableApps.comAppID | 7-ZipPortable |
| PortableApps.comFormatVersion | 3.5.24 |
| PortableApps.comInstallerVersion | 3.5.24.0 |
| ProductName | 7-Zip Portable |
| ProductVersion | 21.7.0.0 |
| Translation | 0x0409 0x04b0 |
Sections
| Name | RAW Address | Virtual Address | Virtual Size | Size of Raw Data | Characteristics | Entropy |
|---|---|---|---|---|---|---|
| .text | 0x00000400 | 0x00001000 | 0x00006676 | 0x00006800 | IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ | 6.42 |
| .rdata | 0x00006c00 | 0x00008000 | 0x0000139a | 0x00001400 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 5.14 |
| .data | 0x00008000 | 0x0000a000 | 0x00066378 | 0x00000600 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 4.11 |
| .ndata | 0x00000000 | 0x00071000 | 0x0015c000 | 0x00000000 | IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 0.00 |
| .rsrc | 0x00008600 | 0x001cd000 | 0x0001c6b8 | 0x0001c800 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 7.24 |
Overlay
| Offset | 0x00024e00 |
| Size | 0x0029a6d8 |
| Name | Offset | Size | Language | Sub-language | Entropy | File type |
|---|---|---|---|---|---|---|
| RT_ICON | 0x001cd958 | 0x00012524 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.98 | None |
| RT_ICON | 0x001dfe80 | 0x000025a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.17 | None |
| RT_ICON | 0x001e2428 | 0x000010a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.51 | None |
| RT_ICON | 0x001e34d0 | 0x00000ea8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.70 | None |
| RT_ICON | 0x001e4378 | 0x00000988 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.65 | None |
| RT_ICON | 0x001e4d00 | 0x000008a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.02 | None |
| RT_ICON | 0x001e55a8 | 0x00000568 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.67 | None |
| RT_ICON | 0x001e5b10 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.84 | None |
| RT_DIALOG | 0x001e5f78 | 0x00000120 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.56 | None |
| RT_DIALOG | 0x001e6098 | 0x00000200 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.68 | None |
| RT_DIALOG | 0x001e6298 | 0x000000f8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.91 | None |
| RT_DIALOG | 0x001e6390 | 0x000000ee | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.93 | None |
| RT_DIALOG | 0x001e6480 | 0x00000120 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.84 | None |
| RT_DIALOG | 0x001e65a0 | 0x00000200 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.96 | None |
| RT_DIALOG | 0x001e67a0 | 0x000000f8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.11 | None |
| RT_DIALOG | 0x001e6898 | 0x000000ee | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.09 | None |
| RT_DIALOG | 0x001e6988 | 0x00000120 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.84 | None |
| RT_DIALOG | 0x001e6aa8 | 0x00000200 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.96 | None |
| RT_DIALOG | 0x001e6ca8 | 0x000000f8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.11 | None |
| RT_DIALOG | 0x001e6da0 | 0x000000ee | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.09 | None |
| RT_DIALOG | 0x001e6e90 | 0x00000120 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.84 | None |
| RT_DIALOG | 0x001e6fb0 | 0x00000200 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.96 | None |
| RT_DIALOG | 0x001e71b0 | 0x000000f8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.11 | None |
| RT_DIALOG | 0x001e72a8 | 0x000000ee | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.09 | None |
| RT_DIALOG | 0x001e7398 | 0x00000118 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.65 | None |
| RT_DIALOG | 0x001e74b0 | 0x000001f8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.73 | None |
| RT_DIALOG | 0x001e76a8 | 0x000000f0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.05 | None |
| RT_DIALOG | 0x001e7798 | 0x000000e6 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.13 | None |
| RT_DIALOG | 0x001e7880 | 0x0000010c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.48 | None |
| RT_DIALOG | 0x001e7990 | 0x000001ec | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.62 | None |
| RT_DIALOG | 0x001e7b80 | 0x000000e4 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.86 | None |
| RT_DIALOG | 0x001e7c68 | 0x000000da | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.96 | None |
| RT_DIALOG | 0x001e7d48 | 0x00000120 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.84 | None |
| RT_DIALOG | 0x001e7e68 | 0x00000200 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.96 | None |
| RT_DIALOG | 0x001e8068 | 0x000000f8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.11 | None |
| RT_DIALOG | 0x001e8160 | 0x000000ee | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.09 | None |
| RT_DIALOG | 0x001e8250 | 0x0000010c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.48 | None |
| RT_DIALOG | 0x001e8360 | 0x000001ec | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.63 | None |
| RT_DIALOG | 0x001e8550 | 0x000000e4 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.87 | None |
| RT_DIALOG | 0x001e8638 | 0x000000da | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.96 | None |
| RT_DIALOG | 0x001e8718 | 0x00000110 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.58 | None |
| RT_DIALOG | 0x001e8828 | 0x000001f0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.68 | None |
| RT_DIALOG | 0x001e8a18 | 0x000000e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.97 | None |
| RT_DIALOG | 0x001e8b00 | 0x000000de | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.07 | None |
| RT_GROUP_ICON | 0x001e8be0 | 0x00000076 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.80 | None |
| RT_VERSION | 0x001e8c58 | 0x00000578 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.40 | None |
| RT_MANIFEST | 0x001e91d0 | 0x000004e1 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.29 | None |
Imports
| Name | Address |
|---|---|
| RegCreateKeyExW | 0x408000 |
| RegEnumKeyW | 0x408004 |
| RegQueryValueExW | 0x408008 |
| RegSetValueExW | 0x40800c |
| RegCloseKey | 0x408010 |
| RegDeleteValueW | 0x408014 |
| RegDeleteKeyW | 0x408018 |
| AdjustTokenPrivileges | 0x40801c |
| LookupPrivilegeValueW | 0x408020 |
| OpenProcessToken | 0x408024 |
| SetFileSecurityW | 0x408028 |
| RegOpenKeyExW | 0x40802c |
| RegEnumValueW | 0x408030 |
| Name | Address |
|---|---|
| SHGetSpecialFolderLocation | 0x408178 |
| SHFileOperationW | 0x40817c |
| SHBrowseForFolderW | 0x408180 |
| SHGetPathFromIDListW | 0x408184 |
| ShellExecuteExW | 0x408188 |
| SHGetFileInfoW | 0x40818c |
| Name | Address |
|---|---|
| OleInitialize | 0x408298 |
| OleUninitialize | 0x40829c |
| CoCreateInstance | 0x4082a0 |
| IIDFromString | 0x4082a4 |
| CoTaskMemFree | 0x4082a8 |
| Name | Address |
|---|---|
| ImageList_Create | 0x40803c |
| ImageList_Destroy | 0x408040 |
| ImageList_AddMasked | 0x408044 |
| Name | Address |
|---|---|
| SetBkMode | 0x40804c |
| SetBkColor | 0x408050 |
| GetDeviceCaps | 0x408054 |
| CreateFontIndirectW | 0x408058 |
| CreateBrushIndirect | 0x40805c |
| DeleteObject | 0x408060 |
| SetTextColor | 0x408064 |
| SelectObject | 0x408068 |
Usage
Processing ( 35.78 seconds )
- 32.373 ProcessMemory
- 3.222 CAPE
- 0.18 BehaviorAnalysis
- 0.007 AnalysisInfo
- 0.001 Debug
Signatures ( 0.07 seconds )
- 0.008 antiav_detectreg
- 0.008 ransomware_files
- 0.005 antianalysis_detectfile
- 0.005 ransomware_extensions
- 0.003 antiav_detectfile
- 0.003 infostealer_ftp
- 0.003 territorial_disputes_sigs
- 0.003 ursnif_behavior
- 0.002 antianalysis_detectreg
- 0.002 antivm_vbox_files
- 0.002 infostealer_bitcoin
- 0.002 infostealer_im
- 0.002 infostealer_mail
- 0.002 poullight_files
- 0.002 masquerade_process_name
- 0.001 antidebug_devices
- 0.001 antivm_parallels_keys
- 0.001 antivm_vbox_keys
- 0.001 antivm_vmware_keys
- 0.001 geodo_banking_trojan
- 0.001 browser_security
- 0.001 uac_bypass_cmstpcom
- 0.001 disables_backups
- 0.001 disables_browser_warn
- 0.001 disables_power_options
- 0.001 azorult_mutexes
- 0.001 cryptbot_files
- 0.001 echelon_files
- 0.001 revil_mutexes
- 0.001 modirat_behavior
- 0.001 lokibot_mutexes
Reporting ( 0.13 seconds )
- 0.117 CAPASummary
- 0.009 JsonDump
Signatures
Queries the keyboard layout
Enumerates running processes
process: System with pid 4
process: Registry with pid 92
process: smss.exe with pid 384
process: csrss.exe with pid 476
process: wininit.exe with pid 552
process: services.exe with pid 656
process: lsass.exe with pid 696
process: fontdrvhost.exe with pid 784
process: svchost.exe with pid 808
process: svchost.exe with pid 924
process: svchost.exe with pid 976
process: svchost.exe with pid 1036
process: svchost.exe with pid 1108
process: svchost.exe with pid 1116
process: svchost.exe with pid 1204
process: svchost.exe with pid 1240
process: svchost.exe with pid 1296
process: svchost.exe with pid 1348
process: svchost.exe with pid 1392
process: svchost.exe with pid 1428
process: svchost.exe with pid 1452
process: svchost.exe with pid 1544
process: svchost.exe with pid 1552
process: svchost.exe with pid 1676
process: svchost.exe with pid 1756
process: svchost.exe with pid 1772
process: svchost.exe with pid 1788
process: Memory Compression with pid 1844
process: svchost.exe with pid 1864
process: svchost.exe with pid 1940
process: svchost.exe with pid 1964
process: svchost.exe with pid 1976
process: svchost.exe with pid 1364
process: svchost.exe with pid 2024
process: svchost.exe with pid 1692
process: svchost.exe with pid 2116
process: svchost.exe with pid 2128
process: svchost.exe with pid 2136
process: svchost.exe with pid 2144
process: svchost.exe with pid 2252
process: spoolsv.exe with pid 2340
process: svchost.exe with pid 2384
process: svchost.exe with pid 2416
process: svchost.exe with pid 2568
process: svchost.exe with pid 2580
process: svchost.exe with pid 2596
process: svchost.exe with pid 2608
process: svchost.exe with pid 2640
process: svchost.exe with pid 2736
process: svchost.exe with pid 2756
process: svchost.exe with pid 2764
process: MsMpEng.exe with pid 2772
process: svchost.exe with pid 2800
process: svchost.exe with pid 2852
process: svchost.exe with pid 3136
process: svchost.exe with pid 3772
process: svchost.exe with pid 3912
process: MicrosoftEdgeUpdate.exe with pid 3080
process: svchost.exe with pid 64
process: svchost.exe with pid 820
process: svchost.exe with pid 3692
process: SearchIndexer.exe with pid 5088
process: svchost.exe with pid 5940
process: svchost.exe with pid 6084
process: svchost.exe with pid 6092
process: svchost.exe with pid 5208
process: svchost.exe with pid 3440
process: dasHost.exe with pid 4544
process: svchost.exe with pid 4576
process: SecurityHealthService.exe with pid 4392
process: NisSrv.exe with pid 5416
process: svchost.exe with pid 6748
process: svchost.exe with pid 7040
process: svchost.exe with pid 6580
process: SgrmBroker.exe with pid 1796
process: svchost.exe with pid 6248
process: svchost.exe with pid 572
process: svchost.exe with pid 3184
process: svchost.exe with pid 3180
process: svchost.exe with pid 5236
process: svchost.exe with pid 1572
process: svchost.exe with pid 5020
process: csrss.exe with pid 6676
process: winlogon.exe with pid 780
process: fontdrvhost.exe with pid 4680
process: dwm.exe with pid 3860
process: sihost.exe with pid 2360
process: svchost.exe with pid 2216
process: svchost.exe with pid 6832
process: svchost.exe with pid 5524
process: taskhostw.exe with pid 7156
process: explorer.exe with pid 640
process: svchost.exe with pid 4968
process: StartMenuExperienceHost.exe with pid 4628
process: RuntimeBroker.exe with pid 6224
process: SearchApp.exe with pid 2060
process: RuntimeBroker.exe with pid 2732
process: SearchApp.exe with pid 952
process: ctfmon.exe with pid 5664
process: SkypeBackgroundHost.exe with pid 648
process: TextInputHost.exe with pid 676
process: smartscreen.exe with pid 5572
process: RuntimeBroker.exe with pid 6932
process: SecurityHealthSystray.exe with pid 5404
process: OneDrive.exe with pid 4508
process: SystemSettings.exe with pid 5096
process: ApplicationFrameHost.exe with pid 4160
process: UserOOBEBroker.exe with pid 5852
process: audiodg.exe with pid 5596
process: dllhost.exe with pid 1856
process: svchost.exe with pid 1632
process: ShellExperienceHost.exe with pid 5964
process: RuntimeBroker.exe with pid 6872
process: conhost.exe with pid 2892
process: upfc.exe with pid 6856
process: svchost.exe with pid 6216
process: backgroundTaskHost.exe with pid 7120
process: CompatTelRunner.exe with pid 5616
process: TrustedInstaller.exe with pid 1380
process: TiWorker.exe with pid 880
process: MoUsoCoreWorker.exe with pid 5332
process: conhost.exe with pid 3624
process: sppsvc.exe with pid 2012
process: svchost.exe with pid 5608
process: RuntimeBroker.exe with pid 3348
process: RuntimeBroker.exe with pid 460
process: SppExtComObj.Exe with pid 548
process: svchost.exe with pid 1304
process: svchost.exe with pid 6336
process: 7-ZipPortable_21.07.paf.exe with pid 2468
Reads data out of its own binary image
self_read: process: 7-ZipPortable_21.07.paf.exe, pid: 2468, offset: 0x00000000, length: 0x002bd32f
self_read: process: 7-ZipPortable_21.07.paf.exe, pid: 2468, offset: 0x30785c4e6331785c, length: 0x00004000
self_read: process: 7-ZipPortable_21.07.paf.exe, pid: 2468, offset: 0x6538785c6331785c, length: 0x00010000
self_read: process: 7-ZipPortable_21.07.paf.exe, pid: 2468, offset: 0x785c2b3364785c2f, length: 0x00000004
The binary likely contains encrypted or compressed data
section: {'name': '.rsrc', 'raw_address': '0x00008600', 'virtual_address': '0x001cd000', 'virtual_size': '0x0001c6b8', 'size_of_data': '0x0001c800', 'characteristics': 'IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ', 'characteristics_raw': '0x40000040', 'entropy': '7.24'}
Yara detections observed in process dumps, payloads or dropped files
Hit: PID 2468 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'
Anomalous binary characteristics
anomaly: Entrypoint of binary is located outside of any mapped sections
Screenshots
No screenshots available.Hosts
No hosts contacted.
DNS
No domains contacted.
Summary
C:\Windows\System32\kernel.appcore.dll
\Device\CNG
\??\MountPointManager
C:\Users\Packager\AppData\Local\Temp\
C:\Users\Packager\AppData\Local\Temp
C:\Users\Packager\AppData\Local\Temp\nsw4346.tmp
C:\Users\Packager\AppData\Local\Temp\7-ZipPortable_21.07.paf.exe
C:\Users\Packager\AppData\Local\Temp\nsb4402.tmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp
C:\Users
C:\Users\Packager
C:\Users\Packager\AppData
C:\Users\Packager\AppData\Local
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\LangDLL.dll
C:\Users\Packager\AppData\Local\Temp\7-ZipPortable_21.07.paf.exe.Local\
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
C:\Windows\System32\UXTHEME.dll.Config
C:\Windows\System32\uxtheme.dll
C:\Windows\System32\textinputframework.dll
C:\Windows\System32\CoreUIComponents.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\WinTypes.dll
C:\Windows\SystemResources\USER32.dll.mun
C:\Windows\Fonts\staticcache.dat
C:\Windows\System32\TextShaping.dll
C:\Users\Packager\PortableApps\*.*
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\System.dll
C:\PortableApps
C:\Windows\System32\en-US\USER32.dll.mui
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\modern-wizard.bmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\nsDialogs.dll
C:\Windows\System32\shell32.dll
C:\Windows\System32\imageres.dll
C:\Windows\SystemResources\imageres.dll.mun
\Device\CNG
\??\MountPointManager
C:\Users\Packager\AppData\Local\Temp\
C:\Users\Packager\AppData\Local\Temp
C:\Users\Packager\AppData\Local\Temp\nsw4346.tmp
C:\Users\Packager\AppData\Local\Temp\7-ZipPortable_21.07.paf.exe
C:\Users\Packager\AppData\Local\Temp\nsb4402.tmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp
C:\Users
C:\Users\Packager
C:\Users\Packager\AppData
C:\Users\Packager\AppData\Local
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\LangDLL.dll
C:\Users\Packager\AppData\Local\Temp\7-ZipPortable_21.07.paf.exe.Local\
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
C:\Windows\System32\UXTHEME.dll.Config
C:\Windows\System32\uxtheme.dll
C:\Windows\System32\textinputframework.dll
C:\Windows\System32\CoreUIComponents.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\WinTypes.dll
C:\Windows\SystemResources\USER32.dll.mun
C:\Windows\Fonts\staticcache.dat
C:\Windows\System32\TextShaping.dll
C:\Users\Packager\PortableApps\*.*
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\System.dll
C:\PortableApps
C:\Windows\System32\en-US\USER32.dll.mui
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\modern-wizard.bmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\nsDialogs.dll
C:\Windows\System32\shell32.dll
C:\Windows\System32\imageres.dll
C:\Windows\SystemResources\imageres.dll.mun
C:\Users\Packager\AppData\Local\Temp\nsb4402.tmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\LangDLL.dll
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\System.dll
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\modern-wizard.bmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\nsDialogs.dll
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\LangDLL.dll
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\System.dll
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\modern-wizard.bmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp\nsDialogs.dll
C:\Users\Packager\AppData\Local\Temp\nsw4346.tmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp
C:\Users\Packager\AppData\Local\Temp\nsr4461.tmp
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\7-ZipPortable_21.07.paf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\AppCompatClassName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer
HKEY_LOCAL_MACHINE\Software\Microsoft\Input
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts
HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg 2
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg
HKEY_LOCAL_MACHINE\Software\Policies
HKEY_CURRENT_USER\Software\Policies
HKEY_CURRENT_USER\Software
HKEY_LOCAL_MACHINE\Software
HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\AutoSuggest
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Always Use Tab
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\(Default)
HKEY_CURRENT_USER\Control Panel\Desktop
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\7-ZipPortable_21.07.paf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\AppCompatClassName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer
HKEY_LOCAL_MACHINE\Software\Microsoft\Input
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts
HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg 2
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg
HKEY_LOCAL_MACHINE\Software\Policies
HKEY_CURRENT_USER\Software\Policies
HKEY_CURRENT_USER\Software
HKEY_LOCAL_MACHINE\Software
HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\AutoSuggest
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Always Use Tab
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\(Default)
HKEY_CURRENT_USER\Control Panel\Desktop
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\AutoSuggest
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Always Use Tab
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\(Default)
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\AutoSuggest
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Always Use Tab
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\Client\(Default)
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
Local\SM0:2468:168:WilStaging_02
Local\MSCTF.Asm.MutexDefault3
CicLoadWinStaWinSta0
Local\MSCTF.CtfMonitorInstMutexDefault3
DefaultTabtip-MainUI
Local\SM0:2468:64:WilError_03
Local\MSCTF.Asm.MutexDefault3
CicLoadWinStaWinSta0
Local\MSCTF.CtfMonitorInstMutexDefault3
DefaultTabtip-MainUI
Local\SM0:2468:64:WilError_03
Sorry! No behavior.
Sorry! No strace.
Sorry! No tracee.
No hosts contacted.
No TCP connections recorded.
No UDP connections recorded.
No domains contacted.
HTTP Requests
No HTTP(s) requests performed.
SMTP traffic
No SMTP traffic performed.
IRC traffic
No IRC requests performed.
No ICMP traffic performed.
CIF Results
No CIF Results
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Suricata HTTP
No Suricata HTTP
Sorry! No Suricata Extracted files.
Sorry! No dropped files.
Sorry! No process dumps.
Sorry! No process dumps.