Analysis
| Category | Package | Started | Completed | Duration | Options | Log(s) |
|---|---|---|---|---|---|---|
| FILE | exe | 2025-06-11 19:48:05 | 2025-06-11 20:19:25 | 1880 seconds | Show Options | Show Analysis Log |
nohuman=yes
procmemdump=1
import_reconstruction=1
unpacker=2
norefer=1
no-iat=1
2024-11-25 13:37:19,006 [root] INFO: Date set to: 20250611T16:24:13, timeout set to: 1800 2025-06-11 17:24:13,526 [root] DEBUG: Starting analyzer from: C:\tmp3bf0bupw 2025-06-11 17:24:13,526 [root] DEBUG: Storing results at: C:\wRQhaNwUv 2025-06-11 17:24:13,526 [root] DEBUG: Pipe server name: \\.\PIPE\uCXdXx 2025-06-11 17:24:13,526 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32 2025-06-11 17:24:13,526 [root] INFO: analysis running as an admin 2025-06-11 17:24:13,526 [root] INFO: analysis package specified: "exe" 2025-06-11 17:24:13,526 [root] DEBUG: importing analysis package module: "modules.packages.exe"... 2025-06-11 17:24:14,104 [root] DEBUG: imported analysis package "exe" 2025-06-11 17:24:14,104 [root] DEBUG: initializing analysis package "exe"... 2025-06-11 17:24:14,120 [lib.common.common] INFO: wrapping 2025-06-11 17:24:14,120 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation 2025-06-11 17:24:14,120 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\TypeFasterPortable_0.exe 2025-06-11 17:24:14,120 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option 2025-06-11 17:24:14,120 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option 2025-06-11 17:24:14,120 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option 2025-06-11 17:24:14,120 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option 2025-06-11 17:24:14,307 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser" 2025-06-11 17:24:14,416 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig" 2025-06-11 17:24:14,448 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise" 2025-06-11 17:24:14,463 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human" 2025-06-11 17:24:14,463 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops' 2025-06-11 17:24:14,463 [lib.api.screenshot] ERROR: No module named 'PIL' 2025-06-11 17:24:14,463 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots" 2025-06-11 17:24:14,479 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump" 2025-06-11 17:24:14,479 [root] DEBUG: Initialized auxiliary module "Browser" 2025-06-11 17:24:14,479 [root] DEBUG: attempting to configure 'Browser' from data 2025-06-11 17:24:14,479 [root] DEBUG: module Browser does not support data configuration, ignoring 2025-06-11 17:24:14,479 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"... 2025-06-11 17:24:14,479 [root] DEBUG: Started auxiliary module modules.auxiliary.browser 2025-06-11 17:24:14,479 [root] DEBUG: Initialized auxiliary module "DigiSig" 2025-06-11 17:24:14,479 [root] DEBUG: attempting to configure 'DigiSig' from data 2025-06-11 17:24:14,479 [root] DEBUG: module DigiSig does not support data configuration, ignoring 2025-06-11 17:24:14,479 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"... 2025-06-11 17:24:14,479 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature 2025-06-11 17:24:36,885 [modules.auxiliary.digisig] DEBUG: File has a valid signature 2025-06-11 17:24:36,885 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json 2025-06-11 17:24:36,885 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig 2025-06-11 17:24:36,885 [root] DEBUG: Initialized auxiliary module "Disguise" 2025-06-11 17:24:36,885 [root] DEBUG: attempting to configure 'Disguise' from data 2025-06-11 17:24:36,885 [root] DEBUG: module Disguise does not support data configuration, ignoring 2025-06-11 17:24:36,885 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"... 2025-06-11 17:24:36,885 [modules.auxiliary.disguise] INFO: Disguising GUID to b3124c33-8696-4805-8a42-f6e841a2b993 2025-06-11 17:24:36,885 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise 2025-06-11 17:24:36,901 [root] DEBUG: Initialized auxiliary module "Human" 2025-06-11 17:24:36,901 [root] DEBUG: attempting to configure 'Human' from data 2025-06-11 17:24:36,901 [root] DEBUG: module Human does not support data configuration, ignoring 2025-06-11 17:24:36,901 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"... 2025-06-11 17:24:36,901 [root] DEBUG: Started auxiliary module modules.auxiliary.human 2025-06-11 17:24:36,901 [root] DEBUG: Initialized auxiliary module "Screenshots" 2025-06-11 17:24:36,901 [root] DEBUG: attempting to configure 'Screenshots' from data 2025-06-11 17:24:36,901 [root] DEBUG: module Screenshots does not support data configuration, ignoring 2025-06-11 17:24:36,901 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"... 2025-06-11 17:24:36,901 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled 2025-06-11 17:24:36,901 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots 2025-06-11 17:24:36,901 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets" 2025-06-11 17:24:36,901 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data 2025-06-11 17:24:36,901 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring 2025-06-11 17:24:36,901 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"... 2025-06-11 17:24:36,901 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696 2025-06-11 17:24:36,917 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmp3bf0bupw\dll\696.ini 2025-06-11 17:24:36,932 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor 2025-06-11 17:24:36,932 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor 2025-06-11 17:24:36,932 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor 2025-06-11 17:24:36,932 [lib.api.process] INFO: Option 'norefer' with value '1' sent to monitor 2025-06-11 17:24:36,932 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor 2025-06-11 17:24:36,932 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor 2025-06-11 17:24:36,932 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp3bf0bupw\dll\KuolGmJ.dll, loader C:\tmp3bf0bupw\bin\SGtTThPa.exe 2025-06-11 17:24:36,964 [root] DEBUG: Loader: IAT patching disabled. 2025-06-11 17:24:36,964 [root] DEBUG: Loader: Injecting process 696 with C:\tmp3bf0bupw\dll\KuolGmJ.dll. 2025-06-11 17:24:36,979 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'. 2025-06-11 17:24:36,979 [root] INFO: Disabling sleep skipping. 2025-06-11 17:24:36,979 [root] DEBUG: 696: Full process memory dumps enabled. 2025-06-11 17:24:36,979 [root] DEBUG: 696: Import reconstruction of process dumps enabled. 2025-06-11 17:24:36,979 [root] DEBUG: 696: Active unpacking of payloads enabled 2025-06-11 17:24:36,979 [root] DEBUG: 696: CAPE debug - unrecognised key norefer. 2025-06-11 17:24:36,979 [root] DEBUG: 696: TLS secret dump mode enabled. 2025-06-11 17:24:36,979 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542 2025-06-11 17:24:36,995 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable 2025-06-11 17:24:36,995 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0 2025-06-11 17:24:36,995 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF822E30000, thread 5268, image base 0x00007FF60D500000, stack from 0x0000008EFACF4000-0x0000008EFAD00000 2025-06-11 17:24:36,995 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe 2025-06-11 17:24:37,011 [root] DEBUG: 696: Hooked 5 out of 5 functions 2025-06-11 17:24:37,011 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread. 2025-06-11 17:24:37,011 [root] DEBUG: Successfully injected DLL C:\tmp3bf0bupw\dll\KuolGmJ.dll. 2025-06-11 17:24:37,011 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe> 2025-06-11 <truncated>
Machine
| Name | Label | Manager | Started On | Shutdown On | Route |
|---|---|---|---|---|---|
| win10-2 | win10-2 | KVM | 2025-06-11 19:48:05 | 2025-06-11 20:19:04 | none |
File Details
| File Name |
TypeFasterPortable_0.exe
|
|---|---|
| File Type | PE32 executable (GUI) Intel 80386, for MS Windows |
| File Size | 2224496 bytes |
| MD5 | e76860743aa3f1666ce9ad60b0dfe59d |
| SHA1 | 484cee9856bf17882c23f768c7ad013a1b08a102 |
| SHA256 | 813d0279efbf3bbed7deb6fc994ccf091eeba2ea5a516ca4759e9b748f4e0118 [VT] [MWDB] [Bazaar] |
| SHA3-384 | 2eba8c1a0cf2793c21696d0e3f8de23c029bb75feca5d263444b2cdacd8cb0930ebbc85c7cb0e2350745781338f8f024 |
| CRC32 | 5D1298E5 |
| TLSH | T1AAA533025552846DE14321F217FA0847B432F829E53C829F66EC6A6FA7FC3C9CB29734 |
| Ssdeep | 49152:89gsuMgdHxI2w+VZraDtMJaQaeXuGc60PHYH6DspgdeQaYf:0LgRm2w82JI/0P4H6DVdpD |
| PE | File Strings BinGraph Vba2Graph |
Full Results
| Engine | Result | Engine | Result | Engine | Result |
|---|
~:%akMb/G
oAB-I2
fQe+}
9s3gS,bG23
@.data
ghE#x
1.$ fw
]\.)VA<
9EZ|@
)qJIrX
E.-z5
[n4-p
q"4)Ia
we7cA
|" F,
WVhV?$
aJ-Qv
&@ ^1
~Mt@ww
~Z'{H[tDu
iu2=@
58KD;}
V<7Td
C_Ku\
&#:v@
D{{9~
/nj<nz~{
I9pa$?f
1ssZn$
1LGIC
+} nr
pH^5d
O[2/s
)[lA;
[8{Ct
"``!@
\GH%B
g5pD|
V~('U,
-nV=8S2p}
i_NN:Up
Me$!>Z
Fj"N{n
jsT3d
$fsS4
/mEC_
$(e']
kFaFV
UU~h%
eh9[V
e9IoMhs
QDrh3
imp}/u#
~Vldg2
VQSPW
*,Va37o
hCM|'7
-I\Vr
-by|!
plT#?
Xys:c
/uf\1
l0@WS
{M4/d
gAov_
}<J<6,
^W=aE
ccJf'
my`|:
RCMWqN
USERENV
(7M#o
CreateBrushIndirect
|MruX
7)!SJm
RVx_A-2
*\D%jNg
l\,PQ
@PuYJ*
S/B-$=
/hv?k
hDh_9
r>}tz
#gU:0
4f)pE
/bhp\
5!;uW
f0VEAa
;F5s#
040904b0
v4}U`
EHLwr2
s8hw^
!sN5Cb
!lTJ`
_)DT-
rM!pc
euqq!z
y7\Pd?
<&r$Qw
jt?;>
vg@]*?
E0-eu'{
DzL225B6L
d{kqT
ivhmy
`Mn.@
5Ks Y
9-JEt
6Khs;_{q
.'^B;e
z|/?tN%?*F
TmZxn
S9'bv
O,IU5
=^[>~]7
;6JZK
N}9/n
%te=E8
G!qvo
bz(*x
M`8Hh
H@p]M
^n%R7I
A,zbE
IGlGw
VFh8zMb
G58g3
f*X}{b
gm;)N
6U4iJN
<b=6V
~FNF6
mk'5O
B=}ZNCq3\$
R.$5rV
|Y$8y
/v4T?
W]u*<
%u.%u%s%s
oDS;l
Ny"lu
Y3K*j
L%fou
YPR|d
@f!Cn
BHy]f
6|3 E
>QN[l
gA @6~u
H;AhC[
\4i-8
8Ei]l
]|_wx
BlZ+}
T0/~Aw
;I7^Wa
,@e;i
ZyXoBC
N=p]0
6cjef
k0t(A
u7os|7yv
e-30Y
!3J&OG~
]6g!]
_oeBLx
Y\3?#
`=\+M
.;t.d'!
aKB}z
p>]eG
g_liC
h~-J}
03_f]
:}s^Yjt
ONg@vW
fL=bn{~
J"p{2
zP=Eilj
m<7US(
<Y^]O
Hp|cx
X0NM?B
"V=]r
"v&)2
v`z@XY
/R|zv
ivRT@
Xcom8Z
A3F1n
;13\#
Ha6R;v
d$'cF6
.6bwS
+LX\
&(c|M
c<w.b:
mfXy"
\T5V!vbw2
9qYqj
9E@p'
<sMVXu
)Iiy!
>aJn!
*;DLr
BV,|j
378Re
>fuT\
?DN[i
;Nqf>
)TbRP
TTS_^
.1o&}
0F^+4
;X~i|
h67]g
wlsr|
K;<JPg
xj{;M~
zoiT9
]eE]#P
q~Kb?
I^BX7|
bRc_2
]0!fj
Ko2T.
nBeKq)
jWT[ZJ
Z1l9uQ
^-!|',c
sY/5A
_RKfNy6
`qpO1
3,2O
ExY3Y
IQ[\N42
$rE%[
fZD;%y>
pJq9e]x<
p[==;
VKh@q
cosL
o^$C9/
5qHK%
:.Z{o
$qQ"$A
W]#qR
&$F@>
h7&Aw
Xs1%Isd8
x'zyt
2g{y7
~F[2Q
G1@#=~
4x;7k
JS!u
~\-Y,H
x"."U
&I0Q=:
+|cXN&
\Temp
`x-G,s
`#sNA
RZdbG<
CompareFileTime
!o6DG
OmFyx
*"@9Z
"Gcoz=?
F2F[Hq
B*eG<k
1N'E;
xDz{?
qZ(eaZ
=W^3(
f],B
b)c<dA
G5rEGD_
0:,sR
@j\4\rn
obV@$
cL(/y
RXT5R
@\X3D
-gh5X
r}Vy:7
G1p[r
F&LQ'
RZ>_A!I
C5%YJ
Jd2;.
0=<&c?
KLumhj
qc`>F%
*Yo&`
"om"[
0X#?j"4
4!hBJ
I/gFj
JD_oB
t(M'L
HgKq[f
B!rw?
mLx.o
5r4>g
@+_/3sh
KXUz~
8CxSQ
m?O32
(_4,3
d;2 s
>y4.;
cAsqh4
p4Qt6
%http://crl.globalsign.net/root-r3.crl0
g+NKNP
pR5pd
U&*i{
3~BXr
rsNO*Zug
O1eQb2
zZ9TB@s
+2B!
"D#u}
EX,I k
2%Rwu i
YnR0}
}6(I)
`<-Gt
<5j|E
6i%}n}V
#`c={
lstrcpyA
9&s'b)
?A5`?9
d-LO$o
(E` k
K(F)s7t
1c?OND
i|OTX
_[;b.
AdjustTokenPrivileges
yI9:L5d&
FGCRC_
}~syhN}
SgS\oDQ
GKK]I0
8z)E6f
#ji"NX|
xw<rb
3z-$x
l%'UlH
#E>=,f
MG>BJI]
1ob)t
+CK!o
9!XgC
x@x;/O
C6k;r
5Z]-K
*y52C
-LTf*
${)*p
s6 $Q
msxiq
gW{#8
q!7wt
*dPgD
x,xJW
HwlyQ
p@;}}
m3a,v
,I+\1
t_fi=4
,rnH*$-v
^tinX
kpN\Y8r
k-;Tt
Zy<-R
j1dD)
2aicJ4
TypeFasterPortable_0.4.2_Rev_2_English.paf.exe
K^z4,O%
nYI<L
g`(jRB
9mD6c
!eB'\
p~X]Y
J2C#kQ
h )q!
,`:&a
]1IOk
7;F/J
~V6x9
lEkCC
kH]L']r
p*=Lc
|Z$\q`
]OCNEW
5Z]j:
v3z~9
^gFx0
&jA7,
I<-E.
D/!w@
;8HP(w
f6"Zh
ZH9"b
vksyCzg
I',CQ
hhEQ>
N$>,=
GGg]OQ{
)*3B0%
/ 7%e
WQ0Mj6
A0hpR]
'TNhl0<]
\90p,
=Ba|i
Ct7c-
>&h[
WP!0\x
wK]0W
SHELL32
%HsnY
j^ pAh
@/Am%
&vN 9
6A4Pf
HbC3N
E}}g0
WKG7b
GetModuleHandleA
7molee
ECRf~7
*hmtB
MI2[/#
@y3EC
YH#:x
|:cn6
bicLM
:Bs8"
{CYJB
Ro>gE?
a#`Y`v
YmK'8
;s?KV
Q'9l>v8
2lY\
/ib&,j
?fhUE
K3~~E
hg.`v
WJ ,1S
K{A34I
X<5e]-
fiND7
^:emy
`d$zg
Q~_>.
'EapD
|+n&A
lq2QIX
.rsrc
`$ygc!
lrm!z
)_(PbE
L]:`6
"'f/EH
zT!V?
3CMl}
att3K
H@V*'&
nsu>i
lCwN1
)FW;yd
dRwKf
^/RV9
dR3{Y
H[?#s
I I;*.
K})*S
l&@}O\u>
r~lB(
X/8&)
JP%1>2
>W"eK
qkaGC
h'hDm
4v%"Fx
azjDg
c+j*]
0B>i#R
Aut@s
\XVmi
(d}{>K
QHSS}
?Y["?
PCF,-o
Dtm6g
m3't1!
UG:C\
ZDx*GU
[wg_W
siDr\
bnuut
V5x!4R
5\u0&
rWa5I
;1<I)
I'lF;
ZG[l;
GetFullPathNameW
Q[[eN
u<ikG
!9Sg[-
o"`r5
-wI.)t
D[hE6
vf_XOa
~;s~yOC
aNXmC
Q"=)~
1bh`u
*Za{h
)==8)Q
?W`U)
/7qy'i
.0dIK
&A-n*
t%5*p
oQ2vL
~yk?}
D"QA2
|I56[5&
tuLEj
Kmu?As,(
T]<.2}P
PRy\!
yG{j.
?NJtt
k|~sOb
Q6xM[
@}uZ|=s
[(bt_
Ss{zIl5
180220000000Z
wP'#i
h;9R"
n^U93K8
1gCY`
o`W%8
tNI!r
RegEnumValueW
SeShutdownPrivilege
T4EsL7
J*jm(;
F=8j}
N(91~
IV+{7
QK$k54
WwZUP
<]$-[
sIGN*t*
t JY/
|H;fc
Fd0ZW
y<:.9
RSE:D
g#l|C
k"R6z+0
[k-#;
\Z1w^+
@LYsc
srdLK,
#St[:
+I4j8m
pTm`U"
=xfHq
Li?!w:
NSIS Error
_oU=R
".cZS
Tb(r"
+-G4jg
V2}%VGG
~}u+^
.9/3D|
jvV"{BB
[R GP
;|c;9
?;tX:
#KHWr&
<rDMZ
AdNeE
ySMij=
FY)t(
pITG'
<2'<9
t~=>uw
eqUP5a*
.text
Ssay7A
_,L>0X
8*.%D
b*T*G
@e@Bp
H'<^"
0KQS}
+6.3"w.q.
B+%s5
Gw#|4v
)Aq?>`O!
}Gp:mP
+"Z#
Cm"sib
VO}GK
c<ENv+K
1K\S"BiAH
aYNde^RgHB6
mMt{%
!4QOQ
R'c/[x
G#':"xm
T7Tup
Eij"8^
O}KnuF
z;,~:j
X85zu
n(HNU
JUj9%
`aN.Fq
5`q<!
up)&K
H'dTE
o)~l|
fXI4H
GKvLV
!5CdZ=
'r#G;`+
_%29h?u
5d!<_
qy%7G
3MyXj
%\w2U
^j\PN
9t`nyY
h^aQ~NI
m+Bgh
M-iOO
n2PO.
7'aV+'
BN1t5:H
v'f"D
exi|2
E0C0A
4Dc_u
3IZ(:
+_S.H
-tq-v
H^n%1
z2evgj?
rzc)
20180916233115Z
s}J77
~8t+M4
aj8dL
+Symantec Time Stamping Services Signer - G40
Je_7{&
4Mr:w
b l?g
@'N}YL
D?<JSRj
LE:'G
PaBK"
DiKy4
lv2lT
552ff
iZuj*!
)_pN{
#UA$_fU
#k^l-oKb
%qbp=O
#jkg\2?
$oH)\
iB4&N*8
NmLnXf
}/hE*h/
[I{2~
)ej[Xn
hG=4_
BVm.,O
wk%<N-
wZ=e'
mRCK`
6`QH1
t<Wx3
-EGxL
58Cjf
zTB}b9
EUzIu[
6.3_8
!4{{A
+]sS(
8ppQx
-2#;d
AOy,+
:y|~4
"0?|_
9p'tXF-
S18e-
;tAt#
7o"^g!
2w54,E;#<
:C{\GQ=
DeleteObject
V0qlB
gb@YI+
hQ~l{t]'g
EmptyClipboard
u(>}HHf
?2WOx
+Q;7ez
Nh0<`
;ke]R4
AOO&GM_H
ihjhk6
7W\^ /-$J
Xo'hf
Bs7gi
aGa!$
a>oU\
QL!\w
#3s.n
`"#.+
Q{w{UD
\#1W`
cNZuF
[ve)w
us?=A
P+}wK
XqW8E
Ph#U@
RG !/E
JC|PL
dOXh}
M.Xj_Ttg
iI#_h)q;t
zUfP9
Z;c&)z
6\S-o:
rF[fH
>6)KT
,h[zB
\@_?aZ(
ZX.SF
Q0;3QY
).~jS+
#G` {
jLCo}
EndPaint
s,!4r
D(rwI
2_'^S
Im(mo
wy4fQ
rQf~Q5
FO_)/+
I&@:K
}w7V,d
Tgg0:
j#o&I
6QV{6#
55|)B`
Gt|sA7
=Uv]V
TIpRx
m+Q|*[r
qd1ai
C[[>g
pv}91
-*[5*
7TjyXo
qvQ&z
uq!@]M
D9ci)
<}@SH
~N_i\
}o6vd
DtZwym
V-vT0o@{
Ry<7e
9xxWqyUi
4)6-B
QRT@ks
',G"CeU
)g% "i
+1,t8k
d_AUd
M&5y^
wNIzU
c$XhE
PyZ6}
$cJwA
E>+bm
'8kW8q
^|M90
3~dy(E
g)D$QM
^tZxG!
rGLGK
NmdMd
'2SZbE
b4;/!
I3?@?
},L<{
)K3vp
{\kp
5,ToO
1wFza"
;-]AQ"
<+)!5
-voo(
a^&CO
g]g_zZ+
}RyJV
i`&ZX
CmSN[=g
IY\;E
1bS~%t
>8}4F79
,/+B#
9@ \j
#LQ)c(G
uPJS@
LegalCopyright
_R%_q
SendMessageTimeoutW
N?Cf3d#hk
oDY)Z
E0:=s
r%?%[f
2F&sir[
SetCurrentDirectoryW
MR0Se
~e2yz(
e) ;!4
P=4`#9
93qEU
KRNrH-
^!9q<
Hr1H>
nFk^oVv*
'$C?z
^BJ$H
jr%my
bW.O/
I/s^tY
Sghv~^
XnR7v
wmW4Gnc
B_L`CGp^
]gej*gn
[_y+(
T<3\nA
>_X[=
euDNH
b-V>&
dF1S`
G Lym
C\6MM
V?F0a
U7<^@o
GetMessagePos
d1QW7
{`m@7
JP&zhc
iZod
n"*[3
ki2QS
+M1Dm"`
.7&?&]U
K*T5,
\"/3/5
@k?!(x
{m]'6{
D9CgSX
v#GYb
]Eai..
111081
5Wbo\
|rWJS
ebST'
6LV9t
b?6~(
jQ}?;.@!
21z?dJ
8g,sS
http://ocsp.thawte.com0
\g"b^
K798`
cf(;n
fg3^e
;J%.9
\ @wR
0@%$}p
!um]F|
iZ;qR
nO*u<
ImageList_Create
I<YYy
_/1<WL
Sme[6
8YeyLRaI
OGNQ!
gi4blk
Xk2=$#
6ou`C
|!qMY
Xc@aD{:
cB+xKtr
LNRV)
s|<Ke
i4'39Pu
jAe'Z
3*BM
tdO,0
CR3/u
El!c"
d!q=<
KSJa
NKVi2
[#`6EH
*8pI/
.pV"Pe
73r>6
4u]~7
_h]cP
O;*x+
X|swV
0VvZ_
Si_dv
y\N9u
U4x Mca
"cY>Mw
[fBS%
COMODO RSA Code Signing CA
LDnY` l
"MsXC.#mp
(xx/y
[Cm;d
@]hPv
n~sz5,Y;
>?Lqw
Wi0Y+
\dj@,x
W2#YKR/
RKse!
d-$Bs-
:I,C=
gx6s=
\SVRg
:a+)
bE.k|
(6WV6~G
QY1 &
1O6sh
W?8f)
A/"*F
pr$!W
~a|ok
Atbi_
Wl_/~
MpGXY
gB,P}
9H,s&
U12pQz
e[-h`
4{\u;
*N?!E@
B'6vgr
~=L3T
uKA E
<uo5[
^_8)C
p7!J.
kuC03k3
$B?ZD
}qX#}
-YIXUO
z>(7#
)tEND
caE#e2
x?IBA
4sMb*
HgbQk?
EFbKc
MTP*#7w
7u_}*[
FvGR9
4`hw]
F0'N"
6KWxs
m5Bhb
DO4jz
M@80;g
s]go`Q
4;_/}
K}~?=F
Z7^G`W?
-i{?y
UEP4y*
2r{ud
EsW,O
uCVV^-'
2]&Cwi
JE.If
cv#S(
mL8%SE
U3)I'lD
pEg</
IJ%r$
ER9c<N
N^itV
~{De9
S#SB%
hPTf^
P4}>J
d+L&<d<B
46$#UM
dy7,Z
For additional details, visit PortableApps.com
5m\1~|:,
P.Zp'~
NQ3T[]
u,g*J
DvGCaZ
:hW2e+S
11jcx`
>Xu'*
ak&m0
n-:yi
p'yu!i
xS^B)
}z3]z
3.5.10.0
*Rh#W
/t M]S
F|`Y6+h
Pd~{R
3Dh)1
Hm8jT
OzPIF2W
jdfX6[Y
a'RbO
sw[Q'
Z4Q6ko
YK]K=
|NbAg
Wc*Kh
MCC 6}
msctls_progress32
JE8g>9,3
SHELL32.dll
ZRy+x:
!9$rq
*L2gC
KuysF
QxIJ[qL
hzJ4!B
t4Cx}
^{=gJ
kERp,
jh.b)*S}
rGCOV
m@3b`
/4:\a
l(4GU
D0ZEd
?M9f1`=
Hq=o0
7xn\)6n
RzD}7
M%rx^
=qqP(l{k
qlnMT
ax|<+
#PSt0
r.J'-
Md)td
1_UO3
#J_5H
40%.qh\
eZcnW&
*DQOgw
"'{6t
Jez.&
R@0R?H+
)Zv-S
mJUKT$N
_1TK<
v\dCJb:
7XL4m
)qN;M
D})@\
eK/mL
a$~U}2d
DA0^P
y0, k
(lyW)
UiE,(
OUa?j
SaON#
pWX:Z
NN<G_
ShvjeF
g<{tE]
]#7'i
F{J-`
/ P6pL
CreateThread
SetBkMode
{1BUE
FXIF[V;
M`GN,
alGS'_B
bfy[s
7|23{W
[kOY"L
a$'RZ
RFr~G5
t2\,v
a9G1<h(
f'60)t]]]f
GlobalSign TSA for Advanced - G2
/>%5H
4$|7D
$Dy8H
bf(!<
0JA~O
\_#m:/
^pv47
\1=IT
y!iY*\8@
4_6Mo
1+|d7ms#
iF: s
x.{$E
ylg:Z9
IG#B<
3gVPyVu~
k\pX|
QyH>)
1_'9['
(,5-zC@&
9>eClw
UCqPQ
EH|IDO
N \\M
*SEH0B
@i4??
v*v?r
L}{]\
jB@R*
q!ZQEi
QvVNl
w$C;v
gQu1j
#2crr
'oei<O
fU#%&
D\Bpmj
V1\Hf
yqj+.
t@@/9
e-tWo~
Et<~uo
G.\p"
@0>0<
OjeD\Eb
Q*@W?
<RRow
I<Vtw
G+4-.j
1XjTI
SuWWS
ykc*z
Bl[,ti
"g0F`Pn
qc\u`
iDb%0\
'!/<J2PG;
3:qBR~
qV1h.#
]8Uq
uHJ@r8
uezH07
GetUserDefaultUILanguage
^ ^?(
uH8S_y
B-I2R)1
13Jt{
>i[L?P
g/qe7S#
j?~O$SZ
ZrF\Ab
d|8x
`=h}
\w`EV
q"uy+
z=rmd
|}hM&*z_X
=pTrCl(
paHjD
P3=t$
g6~R+
m@*vqa
C)4 9I
,blQ,l
WEh:&
/-P?pR
<fIe7
tjAMo
PortableApps.comAppID
rWO-|`
W[]n`
]oh>v
fK&!y
FindFirstFileW
n.1+Z
'3^8F
CDH9[
-:@ j(
wsprintfW
jd$\>1
&v{]~"`J
]m\U2H
+Ugls
53C,u
#;mfM
`ZOIKF:
77,:
pEnI*
*?Rz8
KO8Sl<
% D3t
)KS5&W
LIm^Poc
IU;!=
3vhzC
n;Du^
:Zf.n4
j<L:?/a
l</j-
98aQf
e'bX|
TJ:MU
F([<[
)oH{.
y#v`[=
5HvQ4
xlY9f
Y/?kR
ZVIS<
EFRY}
Z<_5Z
HIh,N
D/{|h
9SNC<
F*m;Z3
Pn@Od
gR*r)q
"jL!"
N=R*#f
z[d\C
cm!@ai
j8WUHBYs
.xt4|
cK(JH
fyA{8
5;2uK
&X!{'U
7#i5}
!iz30
*cV a
<PvR9
m,2`9
ZxQG|t
4:iSG
0aL4d
VevA9
s}UJ>
!]'#K
fI@fv
{FBiF
l-?&\
-H[]k!
i}>WD=569
Jz}jvp
0Zq@u
`u. I
_u!aD$o
,,r[G
y>)kj
>[dv7
/nC#`
x$:w}
bEZ5R
'7@)?
9l<x@j
#v#z+
GJ/LUJ
&Zf;dD
;[(r%)
110802100000Z
4jjr`
W <]I
qrwSu
cC2.b
QQovOL
1aFV`
IDATx
ypcn}
[P},:
[ewl9
"g)s:
zy$=]|
NO3[eg
a3NCOD
Xd-V#
ud&i
}@QCY
-_l~;j
RZ)fC
/C@%mN
G" 4r
)>K8@
S_WIY
ReleaseDC
sXZ~+,
H-bsO
2xm[H
gY'i%
fnaFtT
MrK^w
4J][S
nFJJ!E39&V~
XsA#}'
r-^7g`e?z
J#[%F
uYu^
+:q."
nlMl9"s
AJBz^
3,{%5
{Br{`
~^/+U
}shF6'm
2.u,.
=;mC!92
FQ8<s+
{w,Ih
&EFPd
X+ytZ
Z^=D>!
L3|:I
PQ_`f
4s,WlC
utG\D
w3wlL2K
I?q~R
}2~IyA
s]!U"
tTo=3/
U7NT|H
OJ\|<
x{'?>t
17P-}
3-^nH
bm9V"
K;4/o
.j_Cc
h{V5J
&fD$g
WideCharToMultiByte
8H)$C
8b{kw~
VarFileInfo
JRIMY
\K{u5&N
z]g!/W
UR?~re
w{Zc_
290329100000Z0[1
+fA4l0)y8
YFiS$__
OP<oX
KQcMQ
uTg%`
bBmwbw
u4qN-Q
?QQh(
>k,bW
U@k^Ru
'{p~u
mpM=,
}GS S57
M?tkT
R[44k
I7Sb[
GetFileVersionInfoW
Tfs#]
N~[y>
!f}+f
pB*v*}
5h^Z+
CreateFileW
n7xL:
=^J/v
81mO/.]
+_ox8
S 4}Q2
Yl=iz@
mqyKNG[
=<^[_a
t~*.n
chd]WZ
p^vH[
IVf6B
Sa;T Km
:<mOa&
CopyFileW
7q/?6
1&>;~
=!SH\
Gn-ms
V?Gpao
Q0O1d
aNRUCj
9{62D
' QZVC
iw.4C
=8D2(I
'5ud8Pu
gSR5_}
N?vn]
@o4Kh
ARya~D
$`7>q
]E%dU3g
J].H:S|F
x.d-U
,CNOME
Y?wzUI
G4J8'+
b&>jqB
ee9vw
B)5qg~h
Fh@L$
%+M&s
&^~5'
e_t?#%\
U@ors
3,rJp
o=|Lf
XdzM2&
ed<B&+
SHFOLDER
451b~
`$5!e
y8X Z
eSiZwMT
zR!Q%
Gf*z9
Xa6(UC
D^1$z>
,/F"c@<
vZogvX
wO_7{
J@GTC
" K:D
txClX
PUFf/:
RbNwl
@8amP
RUI51Aw
<8t*i
lQPIu%8<DW
B}@;)G#*
U|3hw
f7X5I8
=-;O.u"
&<n:6
vbfge72RR
aZQx[
izs.(
nF,+5
[";|A
,#a"w
T<"ZA
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v3.03</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/></application></compatibility><application xmlns="urn:schemas-microsoft-com:asm.v3"><windowsSettings><dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware></windowsSettings></application></assembly>
9(g+A
woeJ:
NUhs8
.@A4!
ea#lY95
1|'KQ
_jxH]
XIcoxnv
G0~7N>t
\IM9(
/Zf%H
@S;pO
z,>=E
)]<^)_
BTC_V
6Pc&/
Rs>WX
tP{!"
JgY`6
LY6jG
GetDeviceCaps
5@HP~
d0r&Q
X]m_l
-'s61k
fuam{gJs
l<}k?
+CVmB@
(\:Ma
N,vLD
Hv2t(ym9H
?<Z`J3
R5?:SJ"
Jc[h3sS
i:+`cOo
+/l1Q
Z3yS(g
e=(b<
,-ey@
9-(gE
Eb(&&
8g2-w
TXmA,
7d)&>
jsiFvX
,cL>pF
i^'7M5]
hUhSz
[js{/
e/=j;5
a[aQ\
8"ve5
x#kSN
*ZYF+
KERNEL32
?mc,.
yT lXN
U2OUusnc>U
""r>?
?&Ofq=
|#@Wc
@-=- qw
f9)7t
a";`MW
V/XqOI
vy65J
A)tw1d)0L=
Y<VB,
8upNN
D85 Hj.
#9q&d
KMgJJ-
R5ZkX>4
p2P^O
<B-T:
FrDp`-p
d1Oh8
+,P7D
C\%,C
A)v!iI
mcN:q
%1fz2
[Xa F5Y
fD4i0
AyH~q
\u f9O
1cC18
x0(xz{
**kzd
SHGetSpecialFolderLocation
?xRWD
\u]Sb
FZpI/=^0?
WodaJ
qP@>HR
p2CN;
vAcVAj
U]"^;
_o7b#
UWvxv
m49c1QN
Bkm<>
[ 6I]
TYH[L<
* q$X3R
Cz>%Q
bYX6(
Cl0?R
YM[`2
7,ojw
kym1Y
};YY#
v6H^wGO
hu5\w
\'I=Q6
;~x.i
s{?u{.
P^!@$~4 cp
Y4Kkp
gXq(7eS}
|%N@?
@,sR3
O2LEg
$]l4iZ
}$"?`
<^/K>E
!Ke;%
%R^yBq
(@$!-
S-[UrC
34fR&
.x!C$
1W`z0+e
!,L.F7
JZF?:V7
Z@[:4
XT@gA
JB#3)1
COe\v
-vl)i3
}9D0[(
%`7~pz
)><X4p
,u??;
vh~J#
OD8#(V^
7+_+\
(Jsyt!
(&{d4
WV8Tj
/0pqvs
0wbn.H
CB_;e
[~JCI
Hmf@F
C/,MC
Q>caC
|S%/C
,{WF5
Dn}Vh
m@R;:
9fl|5=
aWZG`{
cDIF:
9KKG#
^oqJS
I10mx
p#"q1
Z;IB[
>IBw2
5JuY!/
rOJL@
%0J3L.
)&]za
ttL-gi
.K6Ld
AuB:K
bRa>']
@yEj<
M#%\JV
(rE$|
l=G)<
EC]'N
]12|9
f;#Z9
Y[^2E
9NokE
<?1u=
R~p<\
hLh`O
.D?`+
16P%0
olj}xyGK
w+V]s
.^7_K
.G&):l
PO9O5Ib5
^^M}
axCvh~
+Ap`/
;P~(t
,q<%v
uZAr|L
aM,o4
`;m[\
Salford1
S@XgU
$_3UZ.
a/BLx
^y][!'
d.Z\-g
_phPb
jYW(l-
Vc\|}
\fvWE
+Y?EML=
4"V,H
i;1BppFh
}2.;l
$u$[E
)adfT
+m~{U[
B(^jg
iv?<%
k[n'NSx
BF5vM
"]dJ^
BXM77
@CEtmFR
SetTimer
%'K MR
JUObI3
}2Sw}=
WQV<I
dzc-4
/8/0,
uJ:$b7
dpsA~$
3\c)b
vu\wj
IK%hH
ptHwI
eei7=
o >4PF
}xw>6
Rb8YC6
$Oo'R
G8:KX
49p4H;
9zW=^
J^`yG:
zdK ]:
eMBUG
R8rG3O
$`:4O
Jj!1&C"
KCnE|
}/*.L
= _`i
fne0d
E!9AuPSM\'
R<sVqt
\^|~s
<H]"#
D_xt(WS
DWgv0
H1Vfgh
TN"CF
X^F}{
BWnEk
GetWindowsDirectoryW
DefWindowProcW
,:uQ
C6 pj
&:v~o
ucze,]
RxLAZF
cbi!L
I:XmU
S$F"q
)_VG/
*Q5{Inb
"D?2j
V[*B@
JHG"@
0?g~-
mw.Ta,A)t5
0WZHBMko:.2
deP^?
\!CYD31
FG><6j
5_Ov1
:}X7z
k9G9x^
(w{*x
~wdZ`
4=rpj
HE>vaJ
c5@0x
(Ru:f
l=2Vj6
GetDiskFreeSpaceW
_ZcHY
){m]a
lhJ4}
!0[<T
^0"5P#+pa
fa#a(jX
G+r<X
?#>0dLyk0S
VJ8]
_/ysA"
xn>Y*n
=GnEo
Ne9=w
&!=:'l
'BK/L
gU ]6
UfvEV%
ehwiXg
Z8QOU
5om3)
J%=6$M
@$3_F(
`dn+<O2v
qb, fO4
(=X.]_
zI0QH
63]Y1
Pz/kB.gD
(AMop
"StP~
{ f1n+
*>YT)
Y9*sg
WXl(EY
lYZqYE#k
)YhPi
=DzX*
L]f$5
agku_
."GT~
!Ah mU
%`\GG
\e3^/+^
d3)Cu
n]fm5
?[PFw
^@.Vb
Y%4pG
XR$m%
tZj\V
srZnm
%4W&VC,
gE#`PY
%[^jtZ
ZvjFGR$
C0pJf
]\)!'
IrZzwN
T(revS
BGGN-
]MN=u
DLM7[C
8hQ$F
_jlvzyxb^
3}nG|
`)<q9
j.KYZ$
|EcgV
"Nzyu
+;02{U
/P'6j
n_OOk
;>6~A
Z->Z"
1v(yYw#j
7JgGF
x0L`!]A
WR/{Sxv
\FmT69K!
2LUnin
s`2XK
!:aFm
iPXs!
~<5I^
_`vMP
'q_lY
\kOd+n
e~aUp3$
5TV)D
~:inA
vk\FQ
;U(}3
<`#2g
2y;;4s
JbDyZ
C[iNrE
c5!7k
m@OShM
"X5;D
^<Xl5
Ra~~j
sQsM0
/>5wC
K:\4#
D]&o!
8E@fN
DdBHs
`9Imr
%^S\]
U{jMC9n)
Z$`($
+e"#6]
QLEM[Z3
8+j4M?
_S,z)
?]k5]
2?;Y<[_
34cjJ
HaC\aY
VN]j#*
GFeO@
,.*bW
_UU2#p
>Dt,a
y3TX1
UT=:Iq
<]e[0
x/b(:
MDew$
MoveFileW
zbww(
Laaw\
http://nsis.sf.net/NSIS_Error
MAT%
*njPt
5[@@r
b_g#%
A!J|(
@I9uVl
:I?%(
545 S
$b92!
COMODO CA Limited1#0!
EB5Z-
`{RCeV)
bVkh%
Y'Im$
*Jz[r
``_ZU
C05"P
tqC[?7
y)u+H
!daI\N
&&z;DH
PaO`M
,.6W?*
xD<&n
`b\=|g,
[)j9b[
dY%+=D
4;$/Gk
+>"b;
IEFNlD89A4/k
r~6L3
1x}Ugr
RGwLkB
kBXW:
u# s.
zpXfD
?@I/_VG
7@+nfBA
h"Ds&/^
Ep43=
B3W.+2J
q^:,P
?2_ e@&
a05XE
)ZhY:JW
[vVuA
7qDI<.
vLP(9FjC
|.xP9
'vOZl
EX}fHq
"]j/{zmM
_<YGW
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$
)]@$2c`%
CYV'q*`
't1&RhAS
"_J#]
TQ3%lN2nt|gwA
B<\&z
1n:4tB
*GszA
$-X/a
VR 'tm
pV8CG
WD^[-+
8C|H]
+;Ze|*
O&eIC
e&j?F
eEi"jCf
e7cl;i
nsxYC
z6_2'
&5b0K
]p=c~
!h4\@
Q2]&24#4
S16;-p
o+_nt1
'O`&U
jLD3I
p}W&D
9":Ci
,{b}f
GDI32.dll
:q@E':
-@\2Qk
@OZwn
290318100000Z0+1)0'
qeja#
p~W}Ia
VXs%8@t
!$xp3
2@B/Le
@PlHK
!U#2y
teyO8
!O4dM
fbHZZ
,uJL|
qBTEN
:3FPs
Fu{@S,
I>!jy
AT3m>
"X1-Y$
X`:_n
.IN:w
"vu`I
![kAkm
y9Iw.X
-58Vb
qi8`B;Z
-yK(p
z%AO5
=s1DU
1?#x9
ZVzz?
IkRoUw
Wq-Y#
3vTh_
rWrQ.
+{?|[!
IyCtq
18E1}
rmK*^t
.Qp)H?
http://ts-ocsp.ws.symantec.com07
vQ!DS
?H76H
h$PdA
J#y}?
azxb=#
COMODO CA Limited1+0)
oNuN+$
nXFR\
t3]|/
qN~eaH
6=fq&
@+o[w
|63'L%Y
%SDjT
"6k)]
!EsG#A
u:FeV
.e-Je
CJ.f[
201230235959Z0^1
I4TCI
:ddvx
$uHl80Z
UF!;?
Yh1,qU
~Hy."
[}}as~j
XU_^RL;
0wBlF
"#q>Fu8|%
\[56X
E9)Dq
"u-Hr
Pd21l@
2a,@%
GBw^8
~{o_Jdn
3<vW2
"COMODO RSA Certification Authority0
(Bcd'
[UISaYNd|sg
k~YQ>b
L*UCFm
SqBVi
f,\g/
IMa:T
)a>i~X24
(:2U;
vQ hQ
v}O#C(
n:1OJ#
4:,.d
. Csb
jdC'=V
UneDOh
%ib-7
#Q|+$
mM[Rb
UMKMK
3."UBGX/
;8^sc
T|)u4
Pop>.
pa@"Q
Gu6:Zs@;
~YxT4
W~jB4
uGQ"<@j
M8U"9T
&R`!t
pQm\J"-\
aGPo(
E^sAD|
Yyw-V
r-5[s
ow5,(m
z!fGR
*].CeU
umH+&|0
`f83s
a_D[8c}
t\\kF
cWEnl!
%$hfch
Q5Ecw
x5}0E
AwGAM\
blfQ!$
Ie:1/
Fn9rfAs
*%4r84Cp,#
+N_|1
Psc=2
'cfse
4;}bU
-<XH{t
n3h/_
rhX`u
]Q][gY
aNWsT
/VW.z2
PortableApps.com is a registered trademark of Rare Ideas, LLC.
GetDlgItem
s"}W7iDA<
tDnlLuD
Hq3G,E
OtInQ
r<'u8
4W2Rh
q:27G
K c47
u-q^q
-A&SG
40)$G
Tq2^j>
'^nm.
2-{Y1
tQIA4
`1e[4l0
cG}^Z
.PLxt
(Qy\2
m*JpH
q|zX|
m(Mf(+W
w$;mc8
"pBXv
5V@F_dX
]oU1L9
?*3:e
u_Jd;7"
zkm]x
fI6zK
{TKZ8
G:LY>%
G/Y3 >>
<4*F:5L
D<?mr
!This program cannot be run in DOS mode.
PGCTl~aD
r(d%8
8AWkHu>
&J"WO7
Q8%Da
xOJ_bk
grTPe
&*tM+
8P&Bu
%}<mX
@;>n3&
8CG9*
GSqH4
$*yvx%
s|o31X
`75MS
_ft@o
vrZW:w
5KVnn
FvZ/>
stq9|
1"8\,
=h3Ur
E?I]O
em ]C
>[jN>z
P{d \
`T~{V
-wvr1(E
xlzb?27
tb> D
-ylp&7
A%A|#
f}rm;]N
(8f2[p
5UD2@
mp%8
1fU`=
:u.UC
^Apu#
P"!79
v:Eoq
&"<9Pek
0.4.2.2
"Rr^R
JZJ!5[
vL$N@A
tOf|/LR8
-W1*q
c$0Vo6w
4Xs4h
rg]<;!s
TZ>Qq#`
V5P."my
07Vf/O4*
RegDeleteKeyExW
[E Q%yB
=vdqH!HZ
#I>&Q
TypeFaster Typing Tutor Portable
qQuO41
7`,KR
%}?eq
s~b&?X1yl
XVj\Wj
q.\Y!2
+uY9u
>j+iW
TUxok
tFX1n
4}}t'
gJQD2
hDMpc
3@N83v
'y~kR
o_x~L=
x/K#p
\1_V5A
XFx78
00@N!
vQ,K5#A
9HkkK
v~yme
Uv;[2E
-KH>E{
kx:kz
y]XF<
PD{*2
-q&Tk
}gP+,
m"]4F
7;v&@
Vr`m,
n"#=Q
%+45`I"
gI4Dd
BB`2Oq
N}EcH
3E0XH
o}&5usx
350|zq
)0Z4j.U
?S2yQ
9V+wY
V)*88
PzoB@
)j*Qr@k
Translation
9.aomN4
3.=6H
1T+}W6
VE<QL
vhmlF
`3\IU4
CmYB;S
@*eLB
vBB[D
GQ67~F+
T#v0IQ
m]1;%@
XN"nEO
Dj;\[x
RXw2ae
tpziJ`io
o{ZKC
JCU(r
&p-~O'
cQ{Y^e
>bAt^Ga
ughc0`
O>g,:
qa\G:>
o7^3]{A2U
Deji<
10U^qR
e;Onn
C^vyi
GlobalSign Root CA - R31
l_&3?
2(b3u
@~/~2
K;qV3
#iPD7fOYB
/Nlq1
)=viP
pXS~_p
4kKM#
-`}n z
=)a&n
D?ME^w
AZ])Y
/$UL:
.ec24sc8|k
hdkC59
3Y:KK
Z@0X)
$-PA^l
mHnT;s!
oL9qz_
u{U:t
VvlLU
4o+*:3
50g>,
eGgG7BP
')U)I
)@~EN
D%KdwF\yV
[hj\WW
Ovp=g8
D>Fz/*
vZMQ^
)DTE+
t%< qO
nyi1@n|
Yq>L#E
&hk!}
;Bjv;Lq
$!hXU
_)=(e
0espDy
I8{g
L)v=.
9zBv,p
ZZy`bO
C_Je:
n*kRT
28V97J]
:[{}([
H,Ksx;
$]s3D
HbzfX
Ojto4
S":K\
m$# (
O-A0}
[|cph
VkCr@7
/J$$%A
eqleSby
h=>-m
/FKi6]
WR$<6[z
yK2B-
([,Qv
5[^k~`
M|DOU
)dKZf
!/p(qp
ZIg{~
MyiZA
0UhvI
qJvly
Uu0cL
W#^Kvp
0k@:[{
-2%<C
$wQ='k
Hj\("
XP(<G
`6P72
US*`_
eq0Mq
L##Tw
2sY+F
[0`AV
b?w16
::||t+
2~`n~
3xRt=[
k>gYf
:bla"
k)PFS
n':VU
__v^[x
rEP#1=
]^TL-rg+-
cIAQ.R
d}mIC
2fG59
;8{#J
5?{7R
7O1Aa
^[T'N
(xL&]
>5Y-f"
,.8t4f
K8~C-s
<lsZW~J
hPsGp"P'
WkQIhP
b _Pj
vUWRT'
L9Jfd
cWmoW
_Us226
+.35Y
E-z?f
f)GI2h
%$kLr
N8{%KU+v5
N3J1U
JJ\_`
WqL,I
RJ&/A
BJgy'
Ek]}{
qgk,G
N_lP>7`
LIP<_3cz
mF{rc
Jf+&%P
!z(8;
.D6'm
`7u;|
rf_NP
L{.K>q
5BJ%^@}n
D":L^T#
*rRF:5|
OUue#
\4(p/
P]WRE1
zw~<S
i-T6^5
dulj@m
*)"qC&1
3W~WOE
gC2k\
6w5Z+
n)qfJ
884B=
4uGY0
B|U\A}
5:xL<A|
^#k!67}z[Ex
2HB<M
Aj3}K
BN,A,
kRb/|
2LOl {
.1oId
1YQgF
|kk(<u
@j<(J#B0
U\&MkOI!@%
oM}_Nva
/~x./
~>/Ov
JYH&P&n~
E[O-L
o0i?{
2p^`3
qPu_(eEHF
kX3_*T
0l8`i
{1UdL6
+Hd]
;H5AM
(3<-x
#QdAS
B|_mk
i#6Jy
W,i"G
!3Es};
@BT*l
eTe6qO+
lI?pu
B4AJ$
pSg+W
1_|wgq
Thawte Certification1
QQoMhi
Dy.,H
6vp2[H6
k>A|9
ct7cT
~YpI(
36p6:>y
we({V
1@}3:
1VeYV
SF= ^
N[0b\
l6~qF
y>T \
tOirH
B'gUx
P.b.
]Bcw.
x\G&UB5
1[?@t
J+)fN
$tbNu
BX8fJ
s>`NHX
geO-u
vk$I"
(p~uK
*la\Yw
+!<~6
UCofcr[
f ?c^jX
]`*[~e
&/H@}D
]{u_KE
mb'+[]L
EndDialog
^z;SN
9n+NP
7E;~0
5B:S9
"e?SCS7<
bmb;$~E
;T={k
kJ#FF{
,Yp%(%{E
[.?RK
L]:BM
TO"]a
*B/O!G
^P8pO
O@xbF*'
rcifh:
<http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt0<
IW'gh
r>@V.
*@1F.
nlgf$f
6xRyI
gQV 7
z=~Q4F
#]u^gF$<
,h0[UW
y{d#8
5jl4`
"A%*R
],{i^L
8E0h |;
KGgd1
rbU1I=
R19%r
W<[$Z
6(R8%
@N8R`v
:7?o
.V*:`
Z@oo|
3l0*E
(5t_X
b$CWA
R=2d&
9_-IC
tMOYf
C*`Y%Z
@?L?_
MpsrW
Y%BI]
ux4Yt
(D-s\
BdmGI
M!nl+S
vy=JF
ulq8S
pT_4n^
gm%~%
!GLsF
t//Dam_66
|t:jL
<E*#0Ea
TvP!?IAB(ok
r(}L1
_Orw/
p#dMf!
Hcn Zf
U0smk
28P{i
YAt`g
=DPar
*O?ghv
JzR(RI
a5.+su
B,=7K
0iLvW
A2xRy
CT4k0
$PrIVph
lqh=^
u^v1+w
&0OGv
6_=epW
l;}e
CoxAh1`
<V>RHI
PZ~RX$
USPK.
;LgG}<
9Yt3<
ES-IkP
0H"^C
+Un,8
JTHRbk
/\(jQ
m*>h1
QLmry
NslOl
?;A>#
1&Ryw
+$v%/
verifying installer: %d%%
y&N_B
]jSvTHF
F3Rf#F+
QYZ|-
contact@rareideas.com0
x(yNs
n}jc~
4yp"`
wpi^h0
b"I`
c!7co
OJPNB
DYRmx'
$H1v [
a{dLv
dWy3wwsR
~zsB{
S`,F?
.R$(w
NRHRsh
e(iEK
V>.u;
ZNO-d
W7yek
{-LZ1p
JXSAM
(iZ0UZ
)2)&{
.+fNHw@
j'A_<?
^k30&5
RTEz'
f'(TR
sNW1B
>/ ,o
]<;D(
rdlaw
r"}YU
=VqN|
9~r-0
UlqIK
H\[\d
i[cs
V,P0R~
LL$*LIW+
D5F,Q
PtzqH:6
nk$'5;x
")'v;
SHFileOperationW
4HEl2
,a0Xx
;0R6Nl
-"`-@nT
nbh-Hf
+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
\dRj)sM
$8Z!-K
xE].p
iN#F'u
h{tcBG
aM].1
0Y)`!*K
36Fc*
\+`X;
FXn}f
X _.(
{&MYS
[!l!ts
A8s9v
9/P..j}1
#++{N'l
;EyNS
-11k2Z8
+VW;C
|aw~\
R6N#X
6gpe.
Aj2Eq%
^*~\`
(sPc9
VFKQ=
ncz@F
mcY`/
|f32-
aHP%{Yi
%bV5B!
4A52[
E0T6j
L,6%;
1$:ik~
yvV/ZP
o 0Wxm
Ifw/)
(3|RJ
L r23
p|>/s
]9R@aa)
GetCommandLineW
Q8Z5U
HNoiu
7\IE,)
'!;"00
0b9c2
-<Y`D
aBqTe
2h8t3>
*v!eg
#{R(v
c}o{4
AhWTb
q),6&MX
VmM~~
K?_X-<
;9ZuK
w23j #
a#D~6
Ox EfR
|0wX'
LZ2cx
|tyIV
&1'qe
V[!~"
V?`91
Z"JePw
_V@-u
?z^f6
+.l/p
A`lXV
pI?o{+-
lmcM
!;&Qy
T[F}U~B-
%YvLz7e:
g\H:o2
23lvH
?@AdZ
XDhf6&
~mTwP
xKW%c4
#USqQ
QWbr%
"2?yt
O;c6L{
iqI7{
hZkm(Cwv
1w:.hb
%.D_N\
|dbI;
CreatePopupMenu
Zbt9~
o_I}k
6g)k6
yXlm2
FileDescription
Z[,1LG
yP~M.
` -_%
S%wb>
fT\L=
,go4CU
ebSXu,
XnNL$_
+1rxz
j'_FtYDk
R:AK}
\0Oyk
qc%}@
ahs+\
,1oa"
DK~nYL
DABxK
Rry%@&
1sfr6
"AA<F[
pxwz ;
Fsp{t
mGe1!
RC<_h
O?O#`
n}HM"
nH5p/
H]@rj=5
2Iqgbl
<p[##
8r|k'
B^%sk
teocT}
O5u6*
o)-_uw}(
j`.;G^
%!=9`
wn~v9
<]d:%#
M>%ms@
K%z?*y%
vex2"
SetWindowLongW
tO<kLrp{
}9fRA
AF[D=
9d!m]
GetFileVersionInfoSizeW
+`Uu:
[19_?1
9Et$w
5o{Q]
}q(>R
GH8pp
7%%Ti
-dX-kZ'q
}\nq5S
}]a2d
=PJX=
~rQ]d
*?|<>/":
iz77)
A[LJZ
n<zi}
tsdV)
^r\Z~
Q@haN
I[<.C
y EkH
}3k%g
a:\/)>
=**GF
?}P Z
>^g`~
p:8{G
n$S(+
eKJ&T
zD~Mz
,=6Yw
!N\TA
,lN7d61
v!`n^|
gOB~2
6..ORh]~
R)`Y&S
Kr]S<
C'zu'
o~`FM
OCkq.k
XQ+6JA
GetSysColor
CharPrevW
4z2Vi
o|"w3n
m3t&0
U0<eK;
[8r&}
DjgKl
eM8g"l
NikL#
vUSaD
u@?h{Nn
Xl>&K
:zwIEz
0^LE0v
!!WI:
oXTZu
~N\0!
vU/*K
InitiateShutdownW
&}.FWx
d\aek
${'c:
vvUcQ9
JqK)A
q*fQf_
db>;A
Gh8Fy
Wh)`|
YO${,
g3@da
=R.YSy
MZkTF
Wpp20
=<P@V
tsN/U
z2V1d
SqE;#9
K|i_^bU
yT{R1
_<N#D
, '-c&
d^':}H-
w!C~
"n7KeT
fIv'b
N/'gT8
P7ZyvSv
P`S/@jj9
3[QI=
r|g_G
P-p[On
aEIEA
%!ooV
>{*7k
UeZbW
:"Es6
;)-t9P0
?j#M+
p',tZ
56\~b
Western Cape1
yq!]0
e<Asj<@
0NeFc
/byO&
YFQ t
=KuIl
5A`B+
~.uBHP
t26?<
SetFileAttributesW
eJ4"x
R{;!ma
4r~:Y}u
sUfR#
fi"(d
SetDlgItemTextW
(3Ra{
Iw|2E
9r38yZ
A?G']
2TIWG
\wcCp
+_PY
A,IkF
GetModuleHandleW
;u0Qm
pmhy$
;N2'z
P9WsQ
PSKP#
@Gj##c
mLSi/'
d3z^qe
m-]^x^
"Ybh"
p;1M3
l=Ob,0!
Rf\Hg
mU?-uE
w5^u_H
`E. C
>mH<~
h60*~
;jr|m
io:8H
l5=Y:
'P%7x4
Cq]&eI
^b/PS
fWH`"
&lGbtr
7P^f2
=-Y&qQ"
11h\|8
.!9"?
KBx=!
k|GmIf
IXrj?
e1oHa
W%CkP
_AAaG
@Rj4x
G}a-5
190220235959Z0
IH8FJ
=gE36
#3CI{`e`
t<{jM
.@#V2e
gja6-
/?YpP
v-wid
"kw=#
ab0$u
f0.R2H
!(VcN
\6MQ7+
ZM\D3|
9#C]2
3|L)u
p'{UP[c
IDBD $DQ47
AcNDj
0@;Se
8 V8AG{
2CSxQ
3p^H^^c
h>tv/
7875pv
F@,x{
w2tGq
h8G'S
"Fe!g
Xe7\,L
y5F]S
KPkf#
%gyd1
ybuGT
9GH/6
}?2@M
s^?+5fA
)u]O]K
=M\.fs
Fash,
hk<3'|
1N<@{
!:5<~35\
9e3~,
`N@l]~&
(-Y*|
N9)M[9
L!;j!
y"_N/
7qJ@'
o4aYo
z=O2=&Q
FTgm[f
.s]!g
MaJLz
^U4<8
Pb-"Tt
wnLoTi
R0Eo>
1Eb!S
HK8,k
e"<$,
#7tnW
Tk0aH
*\9(O
5_! -~
&`zi"
W{aE}
N8o)k
~S41mY
/4X?G
:Ol#a
hT-iD
I6`k?0
WsqXD
8PzEJ1
WuJ :
ig6cKS
^hdSwX
est3N6
2=lmrfPgT>wI
M)^!M
'Rra3
cuq-ei
;yzcIAG^V[
r.xX ^
/@eo%
0] ZZ
sFGH3
G5[2TA
Z|Zrk
rDrTW
TlAhZ
EH9uu
lstrcpynW
5-8gU
wE5Uzv
Ce+TkpR
/6u+ l
q|58;@
vb"wkP
&EOp<h
i(ZZ&
P]2@ku
=DzN)
:9`Hk
M)6fX
)!|hs
TypeFasterPortable
_bFQ1
GHv%T
eC-0z
ipS#9
AZBD.w
V)~%l
BbF*sS
GetDlgItemTextW
Inl(w:$
h:o}f
t.fSh
epiDQ
Y}dhc
?nu_<
mL~&.
]Ji]QO
75_;~
@7(&)
AX:?m
7(*=m
mAW]0
%%(b,
elWB>
H}`UmW
jP&+P
+K5[M0
3~m?7
W(rs[
{+XL>
VkpF.f
H]^}LX
8|`|f
|^LfH
*cf(5
xfA#p
+l\TI
JzQI8
I8,P#
qkva_
%C^,R2>E"
@Yc|Ih
u&UOk
{[Jjh
Z5UXx&
_A0pS
_Ppil
Qi_t*
{D3-M
+gH^`>`
`7Q)9
\>gzGJa
a8lkLeD6W
Z,69h
SX}bG
9Htf+
elY~z
BXEI`
xgQV>T
IKCa\R
#!`h#
bsixlun
|0S~'
tWf="
bP!wW
Bxm=X1X
6*2S:
G9}L%
)J}ZC
d<$n7
42aatlU
`V%XU
!OA@Wj
xL<g^
Gn&9[
jfl&+S
+.-=[2
niM48KWREBm
/IT_d
#FSMS
15<6<xu{
p^LY-5
/S`q;'
>hucu
2ClW3
5wUo
MessageBoxIndirectW
i+Nx)
4=3(
l^(ss
bbF#Zk
e+aIw
BF7Zt
S,gi'
R*5*c
H='Q0^
8M)I-;
HUi%#
zCKtY
Teufs
>XV6aaZ
E>oI
=7~86q
More information at:
fX%5C
<O=\?
)Kh-Xx
VMeX6B
A#b1Q
^=-Y-@Q
@YY?y
htt#x98
7^[@4
=-YX,j
[MvZpm'
q>G{$
ze%sn:<
ewE)S
DAQf8
X8 GB
eQ]Q*
XSma2N
\Owje
0kozZL
W2CM))
=vrB9
:yrN)
CZW$f}m
,1+ B
8@M86
]$j"t
pIX^c
uT96B!m
eO[:p'
Pk][3
nVo3h
d{TPg
T=r_>K.9
Bm9t'
TB.OKCb$U
~}tz*
4`5dj
b~uI1~sG
27ZIyR
7MP2^c
W<ptB^
HDF7
\7w8wG>9OU
]f,W\E
L(=N]
y'p)"8
&(>"R
~\|rS
T;DDTB
O('em0U
7tAB9#
UHsU2!
5KBv[+
6B"JoX
Z0mM$sf
:qn?V
Hz|l3;
,m}n#Cg
V!~Vb8
%l0@}
sS]:{
C+%H2
=8]!/
]{,or
*iHeqpZ
4qC1I
=Jlfx
KhbtQ
u\D$Y
rGdic
p`-"(Q
a#`AG
SetClipboardData
mL=kX0@N
q3pOx
Symantec Corporation1402
9{6jV
yf+ p
m-~8s
+ie_y
noRXM@
ZR7%W
L<'LT
o5tSp
2http://crl.comodoca.com/COMODORSACodeSigningCA.crl0t
&}]cX
Wt[Z%
T2 qF
/(bq9
A}/,+Qv
7r\`7
AO^qA
}]5ny
3cc9u
/RnHRKqy
bBv(H$+
AX_NQ
3APm(
MIb<&
&~]csent
`Ie^]
CreateDirectoryW
\*Lw%
=9X'#
nE{Po
5%GgN
.http://crl.thawte.com/ThawteTimestampingCA.crl0
2http://crt.comodoca.com/COMODORSACodeSigningCA.crt0$
a|r b
p2([s
rr7j|3
/Ogpx
,;}YZU~
-pGC/T2!
%)1-|
h{>z{
m'pzm
s$^LVG
ATakr
/a&~9
FT>H0x
WV?Tx
BBmI-
b5^gS
45oBn%T
KHAi~5B
\0P|W
'YU.i
QUqNV
\)'Om
{gRPFo
>ek .
SVr (
u"eJ6}p#
1YqGY
/_Phs~
130509000000Z
B']bd
Euw,4
eLG!%
:5K~,
LiW9~
aU18SN
BF)+=
k.XSIb
SMR-K
:1>"k
E&`^v
*`&t8p
1v60s
BmM/Q
YAHRqE
Ww._`
O%Z+]H
YX)M0
/.Z)_
Fc0J_
Instu_
qf$@`
&@Z\$Cj
8DHL`
1c9^3
F!"YE
v+#Lt
nr^Qs
2cII`
HN{v-,2
|9a?$
UB} }
\xebz
>'WWf
[cl^t
I_#Bqs
U~sQ3S
\c{R
.n>+0"
&y-:-
l;Cn(
GZw5U
XQ%"RO
/Eg4 I
&f~L(
v=E-*X
Bmj(P
_\\0Kf
"Iw3r
VEw|Q
>W?$kE
{7B`M)
1]BXA
*Nmt'
)UMU4
'__3!
O7"LZ
\:?2*
PO~GG
xnU:N
_MT~4
u~uAex+Xa
ldoi='
VE]xaD
ZI\oEhaTz6
.M/*7i[Q}
M37#)
Of!}~&I(
|={j&
x#%(k
6-.P%u
qM~;}o
;A=D1+
Ef&Ip
Igr,n
2^*F1
kZ7]P
$EvRS
7j5wh>
<~9#A
JlTGm
dy<-%.
KAwWg
r<5~k
28j^8eSG
i}d-$>F
}j`,dB
LwK/!k
j8:K=s
\E{s`
O&'&C+
>~}7G
9"O2F
9czU{k
K+^y-
k2.&>E%=
:Jm&2`&r
2RG}K
n2t.YF
.DEFAULT\Control Panel\International
RidKRfz
Z@<]Y
S~kg*
FxUQ/
6Nl>]
m.~m2h
97(?86I
PC8_o
FwoD*|=.C
S,DNk7
lstrlenW
]x|R:1
g0e0*
?J7h1x
rXLv
[3~al
Comments
V5 q`
;:D~
do=G#
wd=*W
wK]hN
!OMxE
@UDJq
){$YQJ
Bj 9;
wWJ|a=
f}W(Y
kN#eU/=#
w_'hB
-uF$+
h$s.0
nCSV]
b!_3
K>}f_
'V))D
.MK'^HO[8Y
.%{&p
2wb!ry%
A+L0G
SN20s
~3sXF
SetErrorMode
H20Wl
y,}Ox*R
4#!yx
%Opex
]vTFL#.
k Fc
{dvPO
;%mAI
<owqr
y3+.{
e*(8D
_A>VS*
K%Cl<`[
UwO&o
\UOt!
}r?4)f
d-t k
p3*jA
]t"=Xz}
SHGetFolderPathW
r\R<!
Xi2M|v?m
Os]dw!zn
Xfg%9
%!4BM
~rPvT)s:v
<W"=0
6{DLt
H:AeV.,$
544S$
<nO'~~j
GzJ#I
0a-DE
K=C0X
l50Fq
KiT*t|a^
gt@&--
i^a9[
M&^L/
o'Q4#
gu#yg
I.6<UJ
:u>z!
Cf4~*
hJ+8&P
u-jg?,
eMF"H
_xx^K
/3cp0
JP7DZS
j'"sN
*B+(j
5Qb2,`:
\8f2$
A>=2t
y[5[]
XAvv3T
`-bqv
-kTN)n
ATml<0
1OV=(
,e)cQ
$|r3r
Edzorp@
}>/R]P
aDQ?r
;:i4l<_\z
b+tyL
e/46P
h7@k^
i`!"L
gGV1\>1Pw
pU{/6J&
} E|+
>n($kO-"
HkJxt
9Ts!|
jViDK
(.C^7h
cotKQ.n
+5-[&
g>f=O
I[vE!
dqfi8>
6fF'}_
XLNJh
{D6Ium
d3y^EsY
5:$,q*
O(2(/b
IU[d]Y$(PLo
"_` `
VERSION
}0?>+
~Xd{J
&`!vb
2Gmk7
/|'Z8
NkC]]
[yOeK=
Jw?UB
&5 d%
^:<iNa-
Vh~vZU
Ajz<c
edPa;
#Qoo^
4vG<}
k&,si
]y~C:
"No}D
Xgkv~'
]okrR2m
;Zp z
U#!)#
%H{Ee~;|
=Vvh$Z7
1VHdv
Gf4Ef<
*?TSf
D'+rO
1*zKp
|Idg+\i
2U>Eu
WE8gr
"Up)<
=$nB$
&|uN0
s<1 S
aq_-@
J@6.Ms(J
Ki7jk
3.5.10
o%XrR
installer's author to obtain a new copy.
UaI7@Z
,g(),nUm g
<u~OJ
F1Pi*
F;}l&h
,z{AL:*G
n7{)3
:=j8}
`Oo~(G
Y(#8XQ
gVY1<
?+8 >U
/g0%kC
MFRW3
I4\zG
w\9;<Y
1C+Bn
xXc4j
cjk%C}
fDm;J
aahAc
<?*~j
BoTKQ
0AL9r&P
Te'2G~
ADVAPI32.dll
%b~?A
/QI<+
?:{Y4
(p&;f
WDm.b
:SQoF
q|zqy=
2=5b|4
V'9Hs}
{s~ZJ
{V{qH~
>B@^%
A|<A2y
mDqEPu
HI*^2
D{D[W
|Q7JU
!Vn5IN
JroBt
"ru%|
>Q\)Bv
Z@[4B
tR^G4j
?0=0;
^$)Ff
lqw98m
?S69!
eS6l1
-;[PVP+
*SYpQ
TS8w(X8g
D7W.z
7iZA8o
"09Vb|O
0!w-\,f
ElrZ)
/i]@u
w ?Nt8
7Ue2a
%P>6/
<A/M;
o^1=:
[A34WA
P(R\B
[-(L)
2q]FuE
|QGd(
)f9OH
Y{:H:[
r>KPKw
$]Hgou
:/Sl`}
stLv2p
7kG1fa
;Gc[>
Fo|3J?
GT`/P
7*s1~
4~*Z!I
#1 /e2%^3
UE"ijHR
w@;BB
ym8jr
];*lT
.boi<
v}5wh
xnwWP4
xXK%Y
90u'AAf
'APJ!
RdCE4B
|(Fr+
*7zmx
DU[Kb
C"5z]
P +YBuv
.'zYS
EYkcAn
u@2?E_z;U
i,X<D
U1ns9
gHoJM
~[:*@
7wT:{
Bm^'e
y:j|J
ShellExecuteExW
{3nOYH
?D@4N
gOPR5
N1;u'b;
;D1k1
WKEs;
M+Q0>bi
!lniQ
9jt'
+t?WQ%
<q3Zp
,:OT
j5^r:
6XnVa
.';(v0
X1dfr
]ZTv+
'nttn
/YQCp
3f+$t
s6Pd/^
<qQ#-
s%wH\
D2F}Rh
-%ln%
m*+<W
JCQP;
!abAzY
InGy4_
xnl^Bc
Uv<]^
*9-=2
pT),_
K&zp]O
dt2OlA\
y:rhs
D$,+D$$P
8m(o3
u[4ax
nC+Xk
@Msk.
rFl|\uI
5}k7Dh
EGq4j9
eUU|Y
#fyt&
MP,R)
Hq:A7p"[E
CX'4CS%
P`'7&
:JPsh
9Y8iDp5
1]lBK/`
|B$$T0v"
Qt;^7
q]iEs\
RKeAr
t,1[\
a-"X\
Y*>n%
GlobalSign1
kx9Mb
v|}+=O
+-@A1
5Qm)>
"d38J
Vi>gw/
GlobalSign TSA for Advanced - G20
((L0,/d
SHGetPathFromIDListW
#'#E\
eT+Y#$
w/Xxo
D+2bs
|Y_*$>
KAF?(
h^CcX
1tMqZ
K;mp6
3,[w}
LuA\j>
@%=2y
{(3EIW
GhcTp/
VfDM:>
EA|~ph
v][:lz
y,?u-
{0<kg
ZU9qTD
)8RJ
>R^h'
2xcd.
:]*Oq
Gpjh|
X>1i$
/Ot$Z
h=]yG}G
SB1:8
iFeZdD
Sq9dMW!
:QpD>
^<HkH
]Rz9U
mMO.x
l,*t*
_AgqoP
?w61`9
G]zle=
fCUL=
W*Jc\O
(g`}y
mu{+p
((/_+
nuZlr
!5OPS
Rare Ideas, LLC0
t0hP1
nhi$V
3T~UA
y\MDR
V<0uv
oCckjTR
mYdmx
7x"]z
N5F{$e
@OmBo
G=(3A
=DedQ
]jub/S
MD=r4
|Got
4-r4j
tB6"5
Q9@^dU
lstrcmpiW
w$6'KL
V]I'5F
f9Mrub
Y3{{3
jc^[w(e*
!{i)yn
k$}U%
Qrbgn^d
{no@`81D?
'1Kc?$1
ADVAPI32
jSc8!
:(Pyt
CtWE_
5evwX
a/Run
AB16[
>:,~!
tnq|%
Yf>Y%
LegalTrademarks
o#FWw
PQ%3l
z(WNo
E.U|,0KG&s
D=,'7:e
v=]6B
a8y[/
SHAutoComplete
`mYs}S
WQc!A
7|iRW
JhYj1
`k#rm
)Nv2z
f$MJ\
S4"02
PJ1& uL
s8A!e'
FFC;]
yWn4[
Abmya
ReadFile
C!jr=
AIhaR
RegQueryValueExW
fXnV6k-
k=Ak}
)fG}@
w8`BZ
J>s{O
]GTB0
A&&yU8#
g}'U*
K":Wu
E-j1~
oC$Oo
P~lWk
7KD8)
-ltg8
ankO`
\+$mp
DrawTextW
"n_3+8
9gB2X
rdVL^
Z0Ojo
`m(S@Tu
js?Oa~*
0huiG
&hjrB
zzWV%
BlKdg
p Sa2
=s`X`
no|[57
E[wyST
hB4cj
h*vL?:H
::K~n
&}^%bi6
,JfRU@
U9X u
@3]XJ
0>0E[
T@upO
ND.#V
z?^ZR
Ha {.
zvrAx
u1~/I
yq3ks6
:;coAD
^L#<S
X&mv)
GlobalAlloc
.JRwF7}\
[?cu3
SR! T
PROPSYS
hQk.q
7Hw[E?|
U.@5V{
%<PjN
zEhiI]|
N=g"_
gjpy^9
q!*H*#
x{y~&,ah
jxu}>
F>1o
`A;|E
TC1Df{{
q}7e]QwGS1V
:` v^
Nyws6
o{({k8CaVdot
U}0t]
74P|
G2T?X
H;i3XP
Error writing temporary file. Make sure your temp folder is valid.
.S3!zB
c'CJ'
WjoG\
X_.kr
]A,hv
1/k2yw
A|]R<?
a.Au|
#2]Fu
<(f9)y
31n%M!m
k,6;V.
>/zBl
VSX\il
EtQGE
zh1tP
aw*Sw
sm<Wm
6meDb
iiu]o
6,jkp
mXNK'S
http://ocsp.comodoca.com0
XNs&Y?H
XB^$sv
Q-]ch
Y3&AN
0y'.<Q
$SnD]
t ,0
)^zob
C'rs^R
G>"UO
+.lp,|
oIR{]'C
F.['}
wzOrU
<2Xm-
\Lt('
Py!mkc
Lf@u1
.L]g
`\g?hb'
fadPM
_{~9l
|/OmS
?d-%0}
w^ZH=b#^"
.~7zt
IB@B2
tB(Hul
wo<S
x?(]w
#O$XL
!s#(J
'g>P`
1rw|6
e}\YS
)a57}sx-
"V|l^
wX?(f5
0r~hWK
tM3&_
oq\}h
b)daEz
uOSU]U7
%cG%WX2T
Zri(N
I R.UX
j`_a2kc
i` B
7hiuU
^;kE.
.//G[
R\EiN
2.#B+F
=6<,f
&j/}N
XX//0
*B5|z
?2<H#
"!^:&
)} bE2"
,d]~f
@v-8UT
U5VC(
1Pr/<
4O'"7
CYDBE
@Y3`6
Vqy_b
VRsXY
!:<@Nka%
!TT9?
I6lE>
#}W<1
Ik;yv
b)>^:+Q
t|b=E;
QE|i<
Cdgb=
/F>({
Cygc@
b]XM(
%?7G}
@#PrV
ciC-K
vX3?b
8U>G7
b51ZB
3cgIs{.
E7Z~|/
XQtK(%
ShgEKB
r|$y8
@clrB|
*3G(z
u/o'R
A7:yo[
x05<FQ
C..XH
Ho|w8
Se4^A
nj5m^zK_
9q_J,
)I,?@
a_ikM
SdM+8
2+z<Z
}*n0<y
B8Gj/~
8UI$W
Q]DX:q
:RJMT
ClkO\
>i$|+
vBLf{vO
V?XlzV
X{5:9q
,n<)_
!i?bIme
.__q]t
=+n2@ly
86np_
.~\}l
SetWindowTextW
< 86(
vvKxw
y$h<P
.*K<CA
>74N4{0$
~'f97U
4x9d?
@v]Hp
DQ9_|
HO@DFFDD'!"
$1mLD
55BcB[Ho
xl< |
<q|yr
AWS[)
A06GN
t+Cid
1ix-y
nc]lZ
EnableMenuItem
qdvjs
Ts,pN
qpv2s(/
v`"<tw$
(4'9y
CgNju
'$m6%
uhgiE
c;Q CO2
wX(W@
J."0Q
orUarr
#F"\<
89%I_
+-ifR
%XH\Aj
5#F:a1
caqG:
U\!2i?
/^8Ux{
A"IL>
S6TMfO
]-1W~9
n|JSP+
IGZ;E%7
tRx^652
|-)G4
I!<H/
u`AX7
#P"tA
ole32.dll
|9/$<F
}skQ(D
Ydyd"
nR3TT
u1:H3Y
rN[M$
h.|:rWr
+s8m8
Qs49Y
2=2?z5
!DpBk
E]-6S
!l2ED
"<5>'
E(h'p.
_-(^W("
GlobalUnlock
<_wPK
*~.w=*
bx>BMQ
H'(6~q
BSr&3
%>3+m
qeMF)
@}mJ|
EuV%#m;%<
2+-_w.
,RiGN
kQ*, H
sT[_G
C`4f{*
aG{hz
'J`Ei
I[Kf*
mL57I
7se.*"
<M; (
Gar)P
ErFM/
+0q6>L
Ek)!8
--XRs
~7jh7
Y`eu>
2D{6RNvWn
|WCh-
1d!&a
j/|p7t
(gTvJ
4WSS~#
m/NjJ;
!%r@C6
!D#G#
`++_~<%b
/-)-M^
{;sO#
483`kby
946S]
@~Lk
D-vM"*\
cJ>U]
YG/b2QfP
nz{>0
TLI5[i:
#,z*lC
t>6LI
N2WUIBIikK.28
OPo=I9
(;8MJ
Z\rMM!%
v`-Iu
u2Uw\
4p:*{
3U8Of
`Qr![
Fsb-G
\r@};
PRJmW
JIv/^
UbnLLj
wqS^;0uf
:|;}&
]y?TB
#"Tvc/
=L_$h%Q;
GRsmm
@U/[b,@.}
^BbY^
8%^ScZ
F]>[!
u3/#Q
~?4eL`K
GE;%q
C^0Oq
yQI:j
"1ec_
N*;]q
%9)5#
&GaGaz
LJ'VqWe
$d#og
!k]N6
w-cOl0l
C@]|8X
1)'7O
[v_VH
G}B8"
3;<0A
tIj(z,
<hr1(
ITKa5*"X
-'';xQ3
"OcV*xI
sa(@B
_Tv!F
5jB;B0
dfYMrcs
}q,d#
HC@=h
B=#$@9
~rI-a
F+^>m
lrgAT
?{I/G
TZa'%_
qD+1Q
oNmc<a
)DzrT
")!a0
sNZ+
{M&}<d
KQ6+;
Ne,PO
es<hH
f9=(gD
`O6Nj
TNxo-f
#F2&m`
d];a|
uhf:r
cna4,
fj.Ui3{
HIj-y
KERNEL32.dll
b$ep`
GNwBT^~
U]a=sP
K:_FD
op~.R
"@%lz
MK6i,
9Q8R@
/~YQ[
!hni`a
n,>-1
i=6S3>
?wb7++*
]*|I'=[Y[g
S6p5#
K^mC.
AlJFoY
N-C(q"#
]u\Z4#0
>rkS)
{]V8<
NK%>u
0gL>3
no{`
=:t} ,
&+4_>
JK-H?
5ERcO
sdN0_T
uM<1Z
mp|?D`
LDi;dr
Fve98U
Yj*nKq
I5'b^pV#
hQG};
*zwe_-
@jj>{!
T<cG&-W
C=1V;6+
h7%Wx
4\x$N2
-=^]:
NV-C[<
fLECL
-D:Y"
n2<^R}3
2|=#W
_e5+%
s^Wha
->'$&
OsU<}`T
~}<~M<
!b8E>
;}Ru#4
9{uzR ?
PUh?7q3b
[LkfT?
f%6x}
$DY,?
{1^b>pe
KL"}"/
yG:U*
,KU0+
Fi_ZA.N
3q=f!
j]]\W1
gQME.fVX%>
++PkI3`
IPDDiC
Vj%SSS
Gy/J[D
'~G5B
SendMessageW
\PJt2
$Dr&,
m/dBf&b
fYnAU8
dQz,-\TN^
SVWj _3
[Od 3
R0g~&
e+v60
+uhT~
wK3^/?
M;aqA
aM-b*W
QNA_Ez
j|k6aH
0nIVY
W7A]%ipc
KQ8{K9
nw?qI
F3\;>s
.9;)$$ry
_K]52
_BX(%kj
8C.wA
(N:>?
5lV!DD"q
_/P=X
RMe<'@]
2m#!#
H5tHST
G#>k}Nb
D9m6f
Rx"N{
:B%L~
:(dJ2
kOLpg:
32?Np
~vCCS0
[LE'"
IsWindowEnabled
%-wFSH'
0k0[1
FKkbm
;N-j~
Ek>2~K
@j,VE
k&t75
DS"05!
G89a<
!MmW8
l!FgA
z!B&\
R|"ju
!A$5i
YG 2y
l7D|mN
RAy3fF
[ ASM
Ua6f4I@d_niN)
E~J@}APa
f0vjV
xjJF=n
)%|Qnd
T$^\(
v-D>y
Pd.:V
S2|u_
q-@Vu^
-Jy-s
`=k#<T
6.!Nu
r\y>.
ZHBkX+'
6zc1Q
1iwW7yN
QhEl:$
Z?I;"
`Q=[G
Gx8]
)q#\y
h>)B5@t@(
{*'l(q|
4b9>>
^vw=l
}-035
sY! <
Hwj}f-@K
)=K~C>
gj>HT
`Mhp^C
."Dz[ty
Q7Ae`
c@2.h1
FileVersion
T#>'N
(0|"pf
72|$
$?4zfu
1:&QS
+qfe&M,
&&x%6
Gb\!xaZY
T:{rn
7[?"
8<C;RQ
+~;G!q{1
>N7]cd
2S;%U
rP#QQb
@>3@00
o_rJk
QNSfef
~gG!&
|8W .
!53\
:xHdSb
c@G0Ln9'
VW+!5~M1.
D'F$w
^[aB5"
_0HF.,
}|]E_
b:<;e
KE'p5
GDU5HCys
|y{m@A
D$$+D$
H0#"3
?,H77
_7GA9
b[)3Bn
CwNYxl
h(cH)
AuTSaR
r4izD9
%zAJkY
:DVWK0~
z7$t_
|8Q"n
mYHi4
~r&f#
D,Y[e
z Vw~>"
VoNk&
8-tlS
0rV?W.
~K,Y$
fdz(*G<b
"6~p9
QR]oC
[}DtYx
CheckDlgButton
\@F.eb
SCoc;
1-RZ
wp+>B
},"@9
M"ajv
EHgWk
/CMV/
]N.iN
r;]6h
RTfEN
#{nkJ=b
m_J
9nM603CIf9
~LB7I"
D749!
VT.%`"B
H=z&.
|-\D&
;{DGup
oEF|-
DeleteFileW
PT0}?
.PsqwK
"?#<~
(L=G.`DV)Y>
p)d4[3
;\^rJ
=Z57u
8)ugig
cPg+P
-dGb*QX7C
InvalidateRect
SQVPW
f""*N
;_lAP
Qh??;U
?ftvk8
eYd3v~
JKLrB
X+NKSK
BjnkxFq
}?CZ_a!
l[,.u:
+7X2:x
a[4XD
SZ68<
l8EOi
xPm*?
%B;>O
%2<bL?
=+6E"b
~Hr>U
~3vres
A?m4,O
?_6s:
.7%_h,
visC@
<Q]0ur
Q7=D{
i6pH4
jHjZW
ZY+VD
JYspE
)PUv&"n
6Q(e{
MHh(C
WB"[5
b*xt}
sIzw*
O4]G*
r7(Lei
B&t/(
+/$.Ux
l*#zW
EHcc>
%$~~dy
GetDC
kGvRU
U)J^\
$,>?5
)ny7N
Mnhl+T
>%}Otz
K@fam
tgNVgO+Y
-m,:l
rQ\b9G=
@91YSj
__d5*d
nll2'
OFiEqX!
>@76)
;8*wEZ
nfXO@x~g
njY9X
9QZe.
kT?,*
_}Gt
6/Z:S
FindClose
~QE/@O
%|DHc
\L8=2
#82F3v
KhvV)F
HG SL3
<2v ;4i
M416z
nsY&%%
4czxV
UHbUM
\}$^g
MulDiv
sNo.(
Q5Rk@
oCvuf
Z),SlW
qGdGc
%b#9 x
h?.yd
;]m#[m
*3i;C
s%iz3
g7tL1
cG_$W
@a?(s57Om0
o4M1>
RegCreateKeyExW
3:cQ+F
\n/4_
x<Xs}tVP
N{+]d
bV+"b
S*0aM
Dz`+o[
9{_)/s
5?K(W
s495
NXSVZ
$x)Vf-
88whO
(KM#s
qHk`Q
4P+~)
QYA^F.
:C/[h
:]:TIM
SETUPAPI
`v&aO
A{,}P
vSH@al6
?GJfJ\+}i
vpw/}
umsC<
rs(E(
rm[8Q
O=[^>
b=dX'
N]jH(o
ND! 2
:#T{/k}
C1$|{
\C KM
Wox@H
OA]]5w
<0:08
MB5K"
pVKh8_t
TS`C6
w-^h>S
$^stEc
=7+1JD7cRL@
jQ77/
5-P[8
U=%}im
h%R8l
WwtC'
9_JQJ
(tL{:
2dr!e
UiCXP
~Y)fA
YnO!}
cV=QdgC
skv?J1u/2
VQF\_
5r_h%
CoTaskMemFree
[l{/y
b4VF^
qM2$t
4"eT8
F)-rV
PUJbf
vj0KF6
GjJD*=
4e5@=
]5(q<
'yHnB
#[V*P
A)dd'
$fp%k
Y]xXd
5%iqY
=R,r%'u
(q3IKx
Kmi$*DDv
%-<y'AQ
GetShortPathNameW
2qM>~h
Y@u|k1@
dMAm;
+P@N7
wPh*g
I}\E7
SPl!O7.XBj
KNIi}
@Af]WY
A2AV?xo
Zvjfd6
w,7/D3
; |_(E_
'l{(PS*
e'fmr
fT+{9
NZC!/]
}S<XQ
8%}Dfq
vyq;~
/O.<QR
i_}OK
l.7Gq
mM*X_
-rqD;G
@TtYY
a{Nkr
'PcI/
`f;'{
c,G[v
9z#jz
SwY]5
"UY"2,
xZ+)T?
fB\=0
ODh.t{ql-
Y<G}n
KOyQ,
!z};m<
1'tv$?H3
m0}.1<:S
TLRi$
Wp{zR
S~&zB
APPHELP
)38Xa
/5w4aXO
2@K5`
746!%%A
Iv"6i
SVWj"
SqSR(
Df{'H
CreateFontIndirectW
jcoKpi
e@8yh
Q|FkT1
_"5EG
jt2bRJ
$9j?!
Owu?
'22!4oV4
LoadImageW
?+.bm
7\z3veG
hg*Z`
B5*o+
Ar@iU
p}=*4
@dMzX
i)>;<f
7ZJ_X
{4#}5
}Dd7}
a7Pqc
O%6<S
S}QA<>~
o0PiqM
.rH7P(pH
f`Qg]>
a/;=s
_3D>O
CD,j0
:b"2FyQ
iyo$W
121018000000Z
?ZA'V,b
@Hca^{
6^>*6]
"N-Lh
E'C}a
eRh:?5
;|t('
#zXr+
"ez=N
ge>(sD2a}?
ru\R;
m.ay8
_NKkR4
dKSYt
.]]C:
5Y<n~D
<?|I`M\
%yFEO
C7S\D
=!6gF
xB^B|
p/0+[i
6=Im>
Y-G 8syn
~a{Gq
iT#p$x
)h+7A
R XfJN
>0"m2
T~#}St
,%{:Q
Y%k~\
;baNJ
](XoJ
(FhSvz
cs0PW
ii5Eu$
#0i;{
n9U9]
ScreenToClient
N=qRCGF
%]g)|
A)qoY
Bi2|b`t#
pVeyY
_#jyk
}sxO<
~"}!p
%s%S.dll
It-U /
{UK{H
g1t4U
u_A<=
gj@!:n
m">,n
P~RK,
a."V%1|
CWVWin|
FCK{YY~
mJw6;
T/2$%i!
IwM-]
w|Z}dJ
[/UrW
S1NaL
XqF>c
VWYFU'
9C6el{
=Jb;.
Ar0;"
FW>;D[H
ic~)+
sHW]j}
;b2"H
EZw-C
Ve6'Q^
cXQG~
ProductVersion
a'4$`2
[2Q2M6b
aD_#J>)
T`m =;@
\]%Sr
B_l`h
F^P_E.E
3]PN@fg\)
+-]q8<t
[??^"s
<`2}<
fa>VlG#
~xR'?6
;#MM'>
RichEdit
`}'v Z
SJ[|vQT
w@5hl
K#(Zs
hqI2|T
[M,, a
YMi ,
aq-K5kf
w*fWGc
Qgf\u
u.P3e
j6x0:
<Py(d
l^3~G
GXaZQ
Oo&x@
k%}7/
:L-CG
ub/AS
<pT:GN
GkcPUU
a=%Ty
vLf[:
0'!xc
180219000000Z
u)gw(
Av8:m7
ZS2w~,L
!l|]R~!
SS4M<T1M~
D5SE0
}Zz/~#V
`-l)M
yj1#4i
x1<dA
<]_d6]3
Joa#q"
63*Kb
:XC+:tn
%;UI1
q)=4]
dzvwm
"UaLX
tnyU6E
ZR834
@|-G'|
vX95H
inL`)
@g 58
4y"|5
P, NQ
?|Wq2
n!}\X
+18Jd
3_6so&
D&5Xd
9B08q
)?pJ|
E(x`k
QpW[H
fFR%5
p]{uU"
(r2I_C
LOd8y
?"E.Y
7fnj#
f\\xa
%'4s]
ac6o|WL
pTlho
Px;+}
G3V%B
3q!Q?
+0f/{E
$D4*w1
3w25"w
4>ay6z
IoLlu_b
7`<t6
UR?8@&]
C[mO
:21ME
.E@f"6
kT@=L
?.b'"
>6\EF
"RS4j
K(eVF
xmz1L6c
p_N}A
aFV)#=
bg6c{
v2m:T
nJ/Y]
f%,z5
/$`tv
UX,x\
8&&mT
uX+HB
COMODO RSA Code Signing CA0
gO<U1
y-~xWbx
'=|JU
YHdiN
/DdNH?(
A&@HDw
uu Y.(
LiQG\
[r0s8
g.8\:0
[b8q!
+OKx/
/Rf$k
(2qL=K
s4R-T
kc_6"g
R_Af:_
N}l@p
_7dA^
ZR[Ks
jZJ!!
)"n9Bd
<Db#gW
t#L;m
]F.i~
>4[Y|
^)]Bo
G nj7K
qZL^1*
M-};O
wb60@
)1<Ub8
)1CEU
~(>/9
nwo.x
SUKlG
Qm+Sq
e+t!xbT
ZN#XaJ
gB/U|
*Ujrj
6;T~?
U:='k
O@ntBz.
CTnVEmG
W+E"W
ANVW$
PG'"N
S+"Pd[
R!rXS'v
*;h-)
v81X%
tTToKO
mB#]i
i}ei[
F<y[C
><D6%Fp
msT&{^^
,Y0rc
Vr%oV^/
)SQ_f0
`.rdata
q9X[lB
w=,Ht
YI5A:+
X(t:lQc^
RegCloseKey
e@}Qc
U=:&JP
**(-`
;G.WZ
pWO^DP
nT~z!
TNzqU
$:c5c
:@YDau
AjtU/
815*g
*7Q7N
:4d2`W,
^iR^9
7w|*V
Us4&9
V%.k\
pswE/x
Lpa;r=
|,:I9
=+s'"
$:Te
VlRMf
T&PeL=
&__+D
jA{%_
<q):m
.\TYjW
Wi<Ay
0H]|f
xZNPa1I
Rare Ideas, LLC1
=_Sgt
6BEaM
\UZCd-
0X,>&o
[ZanH
"We2m
m2F,j
=?R)F
J^YBR
/.Ka6
Q)/V_
<MaL~
fV*PR
!oChC
qc:tn
&}N~_
55~PyL
5VqXZ
m[aYW;dr9
N\-sj
\wn0}
qIK0lAU
]BOA_
M;?FX
5/#$o|
h#*B9
z!tk9
P_@VG
TTrz^
@Wt!I
Z>F;O%
#6HI?
y`mM4
^MK*"
ou56N
Yf o|
;6WR9!Lw
:6b9=
hsN^U
!rOL#
rRm9l"
^,B|\{
0L1 0
WritePrivateProfileStringW
fD?4R
$wkjm
-/bAjI1
047Y^
;Mj'N
I^H?y
n<A*F
P6/&}
N/tg_D
bad.7
0`DVP
(u?F=_
AwQo:
GC.7P
cI5G*v
cXZu@--
a8AOlGy
'D.sq
@94M8G
6,Qf3
gS'+|
A?d?,
*fA33
DpS\g
[>*^M
Tfif ;ng
New York1
^lJHl
{^aV4
T{\so
:)Go3nh
'f}tM
2}$MY[
!w&"I
0v[bh!
W_ Fm
csxO+
t?SnA
+Gy0-a
^.Gaw
,nef?mD
(*SqH|
aq4j"K`
SetDefaultDllDirectories
37`u|
;,;\{
ojc\6
kD$qV
8Rg}d
{nkrr
A@Bhkh
B?I;@;0
_F~B1
Fov5H[r
S|NTV
z<{gh
22Il*+X
}?=')|
OAGnF
%ls=%ls
Q(s?
VL)Rh
x(g`s
}Eq:9
|r+i&
QWq4f
&=[rYX#
&0@Sq@X
^5=9{
k^1$Q
https://secure.comodo.net/CPS0C
X2 }x
q+Nlk
d|~O%
!*O3OF
SysListView32
Heu"M
~Ha9#&a
Dyru{n
y:[.Yp
i5!uTKt
Fp7DK
x.E`x2
giSs"dx
vx)C<
Dx]9-
chF2_
oymL5<r
H;Mph
:~zVN
7]$dp
{w:1}nb
wI @8
#|7n3
wO0GB
>eU6>
]2](L
) a^Y
A0+Ah<
"UCE%-
yUaTu
1@M7o
,k{r5II
wL8EI0
.9USWz
vddJ%
Y^Tic
Mh8Cxx
G@O,0U
w"rU%
5http://crl.globalsign.com/gs/gstimestampingsha2g2.crl0
!1sBw1
Nw`B,
*nPt\o(X
FXe{5B"
Ap9Bg
!`Wk8
lHFkO
GMmYq
]*)@bD
j"]w{
X^O<"
T;5G-
@rSsz
o3IYQX
K+1CQ
+Ng6:[
=:nai
O1!)M
P{YD%
unpacking data: %d%%
m7P/4
Y$-G9
Tc9z0
1;R4%
:!zbij
ey;P<
ggRHF
<5cdq
BPcEul
_`UcV
1kdEe0
<H;x^
~t7^(
a6\vKQ
9QfzG]
5w7jaY
ol/J#'
S,u22
cW]Dff
PX3p=w
v4(\Ny
;pTv$
6qp$I
Jjlr>j
Vu$;Ip
7+#<h1
bi$uZ
34rLdU
.q<76
#QE\c
n!=sh]O
n$'pm
`{tQd
MoveFileExW
mz*k\
ks'M0c
~yBEs
S[4.P
9 &g,
,u\$Kd
ZJ/#t
y+^b~7
_Fn!Jv
5k$J#
#h4l1
CKF}V
wbPeV`#
?WkBS
Nn\%W
c{nhLn
m(m`~
QTh4n
=\5pF
(ZCA*
ak051
j =^ljw
]f3RWB
u2wcj
No,jp
)k#UZ\hM
e{K[+
)x`QK
Tc+UX
5KfV8p
F%zU~
Xm6 ?
qmuha
lV{TE*n
/_<Hz
6Ics~
|K<Gk
E3I8%
9kg&JPPH
\?ebZ
mv]_U
<8/@4
/k_jd
LT]Gek
$Jg2w&
2Gv8j+<
oo[$Q
=(#Uu
Aa\^hg
NY7*r8
~;.9{5B
%oD=,^
NK?mA
+aSW;
NullsoftInst
a7WEr
"u!9O~sq
+Ay;}
180916233115Z0/
L{tfz
t$,VW
Z$w9`
~Q :L
.1\y2
8 Hsc
/wAa!
K~*,0l
p=:AX
RMMRIB6
X[l!/
isvu I
(94|uL
4v)8/
2%*1qR4>
tWrqq
Xz=_KS
)fhbNfB
UsWsx,z
I0<42
4drfE
Z2sjQ%
&8,y4
lAGK#
6vR3tNO
!rPc/
j/r^jG
pLly}
+GX25D
jfd^P
!tZ|g.
j~)9*,
R4He!
.v-#j
YlBQ=
O9cR3D
3+?p.
"x+[3W
$uPFK.Z~9
F^p)\
M*ci?
^*pUN
NKr+^s
Kn^`"
8l(I1w
!ln@f
V"*q'
m3sdK
s[|,nV
fI?g^
\C'o5
mY$/8
1+RY10
>G@2!NR
P| w
"*l0Q
7#i !
X*&mZy
|&Yjsb
Ky9kk
%>8H2
J;XRq*
JS$ .
`>?]2
1b8gX
_v^(u
f{UE\P"
z/mYU
7Nb%W
Nq-{L
8N/9N/
wz)Dm
}B>@?
' Vm)
"lfHj
-W[{>_L
8~nH,
\XG%KVG
Gh\1#(E
O!]I;.
k4e>i
,%x,k
E1}Lm
5G8RT
Q*D|`
_qN_X
:j`*e`
=+.kg
%[w@U
w{$]@
7Il6W
mQ'+b
?!*"Q\
l1ND6&
*;Xm
Ao2LP
p+Y{C
\'teW
:E=s}
qR7B8
IIq$Lt
4?NzKj^'
yN6ie5
"5ScA
Ed`!z
=EjIb
6Y`Y+
LbM[<
8[_8:
aU],4
gx7+JG0
;P|g+&A
~F,y/
h%KtE
+P;Wg
Greater Manchester1
J6]OT
'h-tU
^)q"^
bq@v~
DeEG!
+*'H0
6%4Y3]
\`+&3
U<y*GM
%~,qd
w6uo@?
wQC8L2G
1K{GA
DzHEL*
@I8Vd
{VW/Z
C%$\Xu5
9P9G1
kF&Nb`39dh
+za<+
zNI"nM.[
':=3)
1h&:wa
&eh{-
w~L\5
,LC$g
o!]Xw
`q$WB{
+X|#-
+yh{E
c#7-+
ns=>X
#h~B(
EGnZ\
q4HX;
y&NXZ^
tcsgx?
rEU31t
y2{BrU
a$2f3Su
N@da!
.-'=$
w54I~
2=-v[
t[#rx
DfDIx
95>Bh
uzf=W
!#@<n_
D?:!d
7Oyc5
9('j]
)b+\5
}o#Z)
L4Zc
'SaIXs
u>sdG!c
iJ|`9
^`Wf{
yVp<o5kQ
d^Mc|
13nL05n
2?Lmp
t&q^&
5;D)5X
#+U_]z
;X-Xh
,;+`$[GLB
}8h+{
J$>_F
%QsR$
o<+}Z
bWL1vo+
^4{L'
.v0Sl[?
w1>Ct
|-UC{
3xeNE_
Pu5JS
=8u7v@
k`&|nl1
*p</t
KS=dr
Wz{%b
T&cv`
4P@TZ30
z:xA"
(;v7^
(!jSm
@grsf
e/1fuH
SSb~9
e_1#/
W,M:V~
8'> +
2vFkg
OriginalFilename
5On6C
ZlEIcH
06woma
^c"_g
HeV]V
.|5"J
9<SAz
ef!f|
,y7Y>w
iD6 |j
3^KF+
i%.@A
CKhyhtf
g4H,k
qj47#
Av.K4
9_a0E
R5_pLg
Has6%
TmO.l
KP>70
D4KU-]
8s/PA
X9R0b
'r9)v=d~
Y<rRVL
GlobalSign nv-sa110/
AXm;-
/7nP@I2
Fh3EZ8[3I
A"(4A
hoMjPo
.UB?Av)
Ds5~~"
-=k/c
ThiXh
;q>%?
2]snC
N8g*Z
N=DNm
TE:FHW
GT97[(6
_I.%mFT
m"U0F
qrxTp
pg)2;
S/1nd
z4aC:!u
ddafFqg
~$Gw!7n#
GmJ)'
wG3^h
BD|LRS
`357[B
#Dm3.
ipy/x
uK T(
d[l@6
th{+mP}
DS=1~
1u?jpVUex
%1Rc^/
0ZR{<
0n7[]
! u(6g@
rBo8'.
:UGBH
"iqE/
#77<i
<spfPh
>jE2_
i]!Tf
qg.V}
h]cSR
uTl`)
31ll=
3f$uQqK
C}6R0
ufWL+
"{Wy9
!Qbn[
CltmD/
P)OG<
w^}CB>
G<z/G7
hL(Z@j
hRIGZ
Xg<>E;'
#T[oT
<:;t54]
Q5(PN4m,
PN.,V
4|)E:
7{TYC
A?D'd>
,qX^H[
>Xv7'
z[R:s
P68,=
L8rJIx
_0e&[jc
;K&2r
TU]USQY
NK%mM
I9C^t
CharNextW
Ae:1S
.-0^x
{oEbne
A7t!q
:to.x
]gep-
0xu)5
}trK'
awT%3E(Bk'
919(
V_ 6-C
BVy7<
3M,*/
%^~QOrl
mSpf&
m0%Ek#
=wg`\
T,BdY
-5YJ<
X4gr{
rkzC"|
4e }x
~R%CJ-
e3y{@
XvKMf!
"%U[$Y
^FKO|
|9kQ[
P{nlmP
(jrhAP
HF$#FL
]fJmm
i(D+Z-^
Y!*PC
*U$6CH
SetWindowPos
P4y?`
T:()r
MToEY
.nWcL
+tthK
?rPPY
>"hcS
,B!]a
f_z(7
xi( Vl
[Ho0N^
c`&*3
Astoria1!0
@nK?g
#)2L`
$.[SV@
5(6(/
i6+AW&
47u(@
j|(hI
~1Rq]j
v5?!T
c!{b{v-
rL3^1`
:8|fF
<F^EN
_]o5,r
Thawte Timestamping CA0
}:!v;q&
{O(Jj
/%Cy'
@_^[]
L$Q{S
bqM]x+
?=!%U
EncH#?*
iW_H*:B
Cz9:P
J"#fv
J<,~O
(*^cCCk
h_/Lj
TmYkC
&OdIN<
"k{%!
,>'[b
at4~"
NXZ_8
2)n!P
eNjOv`"$T
H<"wB
l1s\B
uQ#~2j
Xn#Lr
L5-I8
KN#u]
_#&kK%W
)*&SW
Cpr35
RR#lg
0:_9!d_
-se6r0\/5
7I9luw
Thawte1
{AHHl
K|xR6
DoN!V
xpD.J
^t/;~
K`!,
-q[<=
p,AH0
+u4TV^a
--Nks(s
6bpl7
$ 6@`
#_+*H
9S)r+
e/gDeg
ez:hXG
OFbf^
EPWd?
y&,51
`g#(65
ss2&o
Z~rr)
zn+ih
nDf?30>
=t]Jq
O78Bk
VUfX0rW
v9k:G
!`"K{!&
`WiAB
Fb)49
{,7p0
Gp&*<N
h/'%#
|JNhh
;`l9;
<}*//
(~CECmw
R*P)s
)tgt"
j|p1!
9;p!j
abbab]\
_0u$t
/&))uh n
vQJHF
-~%PwuYG
'Mh}\Ax=
ArHtm
>P4o\D
a1wqJy
",Ua"
]1U,bI
=>Y;$
S`QYm~
GetWindowRect
:ZpQ8
rAHOTG
bKzIb
bd:5De
~9ij%tQ
..v([
Ea=pytX
cRVX;
?|I9n
dp2:\
!hPm2
Qf80F
Jz[x
TT K|
N+_v<
S8nm*
80604
&zFq+>
+k<U(
(0!cq
(I(TQ
,/KPip
}.d)1
s22;Z
#lQ(9
GUIRv
:s-@TM
pSO@QG
Gc!*O/
|C=c|P<
Q7o|S&H
e0c0;
wm=FxK
j [f;
!2aY2
=! )lB
&\RkV
aPj|.
zd-mq
t?IE%
R4oBEc
lBe h
AjTV9&X
f~9?(
aQE)wb
J?n|A
'pAX8
,|X)Sm
*K=E!
,KE3\)<n
}c$XA
8>t`NP
Ywue,H
$i Wj
}pHsG$
z}hwV
tJ!=nB
jv;k'I
}ne,>>
+tuQ[9?
'39u)
*eKRd
m'QQhF
&By w
SU ;h{
:%^U(H
2RTuDvj
.a@*!
p<<Oo)"
je#f`
XfAa
r&kO'
MKeUa
x[nhY
rk_42
<CI<s
6/o(I
>XVa@
Ikj=t
<]PSEu
m:'2j
>{}8 W
||dNZ-
]`{E,
* -Ge
,(jNL
TqutHL
DEg2-W=
~K!BVwy
Du(GP
}|AN=
"v/oV
\Hz\@#
E)?nM
yL#r;
8$_^\
Y#b"!
&zt!v
KGW(F
J=W9Z6
e5@B},
Ec6l>
8.<SR
QPSJ\
dsE2@
d ]uU_
UUA+F
YhzwU
"y1C(i
CZf,{
dj359AGVWd
`e#t4
bOW?d
/`XFA
u.utU
'x*-]
s<_<I
fOMV5
]xj\*
LBGk.
U( *P
y*qV7
,;y)6
yjt"9
DG]<A
>gJYKJI
4/76U
QRCh-
1$KIhUe
@l,yR
bi'T[
^|D.Ne7
{IwTn
M3~[=
2h_aA
;QoEq
A6RZ4
O&?9!
@m8Q,
8#'OW
>Zpl9
G=r1-
66Ik=A
.r"7J
{ru{q6
.QaFc
gH8yj>
gsVIzj
9*~Zz
27\Lv2h
CJU_O2
g`>W0.\^
K+0ML
y{G*{
rCLj7B}m'cK
&~RxL
FpU@B
#G@=(
E]/Y2
n:y\t
4s" )2
zgR[e
'%-o>
R_586
h _6P
7crl'
;svRU3
RGVpZ
Wc.bJ
[\PJgO
2<g3Lh~~dkvV
l+S%D
j12b0
6nh[15
VO,gXZ
W'j}t
dQ7vv
JC? =
u#kmi
_EDMV
A=>s9dA
fSs89
CY2Gu
+g|AlK?]
A+?0*mk
gywam
za,s:
CIDXII{
ySd$_\
J)2~WJ
1^p$&
{H0yA
SystemParametersInfoW
Oiw$k
3;*yt
{7B?P
U!~vV%
8<HOq
~tU{Mv
D04Yv
5._>|`FR
}*R/"
8,uN(
+i5W4
'ib }
uDWWh
\1y=P
d/G{f
TF|kg
VnAc*
i223-
%)3[,0V
o]U\"
j:%KIHo&
KKj=8
&pSXW
EofFc
@*H))w
igLw0
HDGPC<&
)$2-IRw6
5rQ#kT
4QAK>
t^!$c
rq2U&
!LM(x
Bq8,5
fp& .
c|n=T
TimeStamp-2048-10
hVl[>
MTV%$M
iF.Sv
c{hdt
~h'W f
qB>}w
D_y/\%
Kj}]f
b<s*4
3@erF@
5S7;)
u`jj|
;WS M
x}E{M9X
~]??bu
P,Bw1
gROPGS
[nI5[
L4TyU
QQ52@
5BXpc
{O(5e
@ ah"5
SearchPathW
r^lVS
[7CB{p
-0+1)0'
t:l=T5+
16>tU
+do*u
{(T!Jx
Fa-{AB/
4VL:y
AG)Hpy
I_Wbn
GetTickCount
D:B,'
<Z@4"
daq||@
c!U}n
D^9"7D
H)FoFx
hGlj^C,
t-'zy
/WB}5
%BD,2X
K"XRHH
PHB='%JJ"h
,4BJf
/~85%
AxdTU
aa50%
m>{/,
>gkoD
}TEQO
|Y?{wS
DhGa[
S=tC5z!
QC_z@
pFz0)h
4/HL_
qw[A2
ohf2W
;1O+N
Mv]y24-
2+#C^8 7:
ac#&i
E3MSN
]Pqa]A
~U0v./
oSi9I
@b6m|
Sid%)
MultiByteToWideChar
ezLE\'.
Fh oGa
ySmT,NF
2fTyl
$/,*8
Bpq@g
84+A:
#c >y
Oz!19
b%)7
Ze}+}
E)J`(
uCdd
cm=8DF
Pl+Fx
g)%r[&~k
&"TF%
QprP
Z5ib/)
o`QN4h
.)a}4
8OkWv
7E-@X
4ocOY)
)J%<N
'P*#w
]+Th3
AV\|5
kR!aP
.;{>T/
N"Sod
5G7}TJ
5<829
kRA4L^
\:f2r
.Sa?H
l2pt?
/TF;E0
M$]||X
X9/V&
a~Jh~'
GBeigO
J+on?
VT:?qw
?1{bZ
Jc\;
mXC!>
$IT[K-
dCZBl
!@C[m
&_gY#ati
)^e=s
g:Py&
K<f/a
,ik a
JDxm&
G_{#s
6`z1N
Tg39s
*eTp#
29IM"a
*:ybt
lV>`l
ycenpSZ
Ydk8j$
gKe4v
8:tv
`^^^sS
c c\4
(CC}2
CreateProcessW
<Qd.8i
CKv_{
Jly\M
wfV&6r
s/Wg7j
a~RU$
MkG^A
Dase$^wL
QMGST
iHLM*
Os=q3UB
V\r"}
!tle3
;8":1
YEdcq
dwZ%d(Sj
^{|KJ
... %d%%
(4Y(
]D9ho3
^Yr|/]
-|*rz
@/2nV
as4=A
oQpZ8w;x
wE:@m
s1E(vG
i6L-"m
]}e0q4
;+;c(
H\OlgP
oyUdz
4:7YW
CWqsp
!:o`FHV
2+_T|i
v8Ym0
UUUUW
'TI}b
>d,pPG
T1m4hV
KI5A.
TrackPopupMenu
-Ah:Ivh
Lp7G+
8|4Df
XiW+-
|.$34
F"C?N
06xF~?Q
R7r\*
uT! kD
sr.%Va
lstrlenA
Kq;&=
~D%XQ
W`iZo
dJi6^
n>SUz1
cs '"
fYj^[QMQ
)vGc}
8psHwB
|vF;#
^(.VY
;_)iw t
0NDqx
T`J2-
Ky3w\
Ep 50
m2)REM2
()rs;
`+h7|Tp
&\VxH
".l|'
ADd^0
;l&r+-
p]Dm6M
L_SJff>
*5zqm8
32L($
J'D@As
fWEUP4R
o&/xBM
FAo:e1
-rpn6
Sleep
hZb0Z
`R*;5
ZK DT
' A\#C
Fj3'b
(D qOi
7m.$j
Y+@Iv
'0Zu.Y
Plx^N
J'[U"
D91E$
UpC4/
'1Lz'%
?M=^W
E?8?8Z
,*pSQ9p
9:B/*
L&umA
GlobalFree
_1fs@
^95Y8\+
=3]mV
=Tq8Y
FExIY
GetDiskFreeSpaceExW
el\mS,
0)3B:
D^!Q|3
*}L>rl
;? ./
$\nSa
SvRCraf
wKFw=
^mB>W
[Fem
}o)nj
maQL;B;s
RegOpenKeyExW
4Z:1~
V8aj2
;YXaF
Kt+R3Vw
c2N#RDv"
Zz5Zo
6G%" Bm
%`(g|
aFX= Z
`V$)t
C3ovA-
pW!tC
ok|}
?oVGU
Pw&#h2JnN
&|lJL
cyMyGb
iJWnTM
};YSK
5_^&S
:v&j[
y/BdB
L};cv
#h7&p
WO~MO
pw!"l
z^-k+`z
DyP&Ft
jkNpK3
c0TKG8
M~riC
q3|n\W;L
M?7`pt@&
M_g2Z
=0BYSiTO
X9xre
gwh]s
`{Gu2
ejE",+
#AV$Z,~+
$?x@/*
#78-?s[
gMU.9
klKY|
}5oxb
4()E10N
xOq<S
Eh$$SX
#Hv4U
Rl#D8
'N^B:
Q## H
^N#30=
|cWx:
n%DS>
,8|-7
Qb6eP
NulluM
5sr&7
QC[]W
UYeb3
C=/}{
c'@/^W
AppendMenuW
wIB9x
\;K:/\ X
]'CXZ
:(03e
_:T<e
!s9UFQC
1:!xJ
''fp$
L3[Oe
F`D/D
GO\^u
^hnC5
Wp9U*
(~S~_
2QOQ
CornD
lA1M"
ghg=Ub
+;B*]
]buxyubO
OJmY[
RAnN<T
{E{xg
`uXuf6=
OQ``p
?5`m%LpE
J~wIy
lh@pG
UuIDrJ
\Q<O"(
!jwMo
[E2FE
6|zeoX9#
?|25p
:eV2N
Z;+j[E
m)x"eZ
?UAcI
O`ucD5j
oqN@u
4=/sa62
97fj?
c>dF-
DxO>d+
/ n=})
PsiQ):
=t3>j
JQp'Y
v-Y|{
JGV)<
^+uZEt6
<q)P}
uMfOR
37V\=+
ze[a}A
/]V`"hJ1
KYH,Nx
NH=!$&`DQS
yDh5N
Yxn:;
fQ}+=
2k6>Wf"hs
]zGE?
&6\ox
`cN '
O<Am`
{?6tnSx
Gcr@I
a=2U*
-!}bI
CQrj8
1QM7S-W
MA0eE
9bgz5
GodnY
~+aDQ
GetClientRect
qX&`V
s^UnV
**&),!]o?"
;8?P0
"_;d
LCnsk
fxxhvup
ZZxJ[
h0f0>
$q4s~
YxF[\
X}N9/
S&M7wd
Rck~;
ifu[ww
9[A@P*
dFQ .=x
0(/;$
}o.Tr
_*8A7
PiT(:2L;}:
u[Psb
XILL1T
R|O5h
ImageList_Destroy
sAOr9
Ys%R<s
7H,4d@"!
s:"EE
x9*y4
w !7E6
>dIx:
;@mGu
_t~{)
(GlobalSign Timestamping CA - SHA256 - G2
:.dMoW
a[g~o
E8<7s
$|}1%sD
e#pXzs
":,z"7=*
/)2}72$
$(fU;
Y4HPl
;(8#B
6`K9Y&
3(<Jo
Hqn\ ;
83('[TH
99x&~
ExitWindowsEx
?\Mgd
}_QH0
mExq9Ei
:@AX??
mU$0<
L_Y"B
*uUTD
nmT ~
sC`SM7
S(wQ|
.Qsih
@xpV<
o2*_O
?qQ?Iow
FX0'V
NdJQr
I$;?9
qed$GKL
J5"N>t
^"t)"
Q>;.k
V&'i{w
daoOR
_&|2wFa
&4*?9U7Q
\vnO^
/8;#c
Xk5g5H9
;JA=_|?V
ic%O{g
;T(E~
|y}c#mq&H
p^%I*z
/l!@8IV
Xm.Hl
FxKdv
o`kBsx
v_@3x
<V=#w
^H6Pj/f
DVcg[*
/[56a%
dozY$
22J[sE
BC1BY\
{^;;;<
4-f z C
QepZn
1t_+m
JOXCV]
f&rh@
JiK1{
7aF_y
\D))Q
fT\>OR
@fQsu
,`*3|
C?@f]
I.1 !
ho1SXF5
QLpi|}j
]`F5'o
u}|FN
GetFileSize
p~MQ!{
d8.x3
,;7H&H_
)A9O(
C^koK
$J)opS
][u^k
5K271)
K7]0!
0E%M%
"@q5<"
o}aFR
.;|Q"
_x-dC=
lS\,Q_c
~O8Te
.Vo5"
$FrUL"?
%Zoq9W
''~+.
_#+I)
-(7sl
'hSia
\D{;U
5]3xh
,8]SC8,
h2'6p~
4v&r
ML,CF
=H(^&l
GzIyQ_
<{>=^
AlkOV
r(t'PN
{NHnuZ
Bgd b+
Fz~q)
b'i]7
"_Ita:
MoDBX
hX} j!
j"JI'W'
6xWi)
4rG'T
fbi%_
7XnvcA
S&G&=
WL/9\2
Pj).2vQ;R
j#<:lM,
Rp_X&
[(6vJ
5gBj}Y
w$!DG=
n3U-~#
qP_5V
G%g8mt
fO {q
VHwvT
<p?{q
zL$,
yymn5
*H;D>
/_1\y
QB!"P
]W'k,:
+QEV3
cD`QW
;.To}
sIC-e
GetVersion
E?fLL0
o0a}o
)@Wf5
~d/Sd
]cZHI
;KHeg
P\h+!
t;]fB
qh8a-n6
g76j4>3I
D3+_[
U^f(")
y?@P|
GHKh7O
CA[;>
N%xv0Lo:
f9n$}
4?Tx48
_LN/e
( ~3Z
CktNU
K=v`K6k
h1~$O
MF/4T
pA_`*om
GO5&b
/r9C!S
/@QN~
$&@S>
q!p5xf
lu~hc
LoadCursorW
=jAy"
tsud\
p{=C&k
F_?D&
v%;a$
G`pw^
r:]tj
qcu"-
5vHk8-I
q$|d1np
+68p5n
Gw5v;
bt1K`
aqVoI
C9dW+B
FO;5H
`sW)/
H;(xY
KuSa]
7Hrhls
}G-G&B
V!qA5
E:An,
i_I8*
StringFileInfo
QGg7m
mP4FHV
`),8`P
l*!r/C5
^Za~hpr
"T?9a
SHBrowseForFolderW
)VUT{
:8F@&
b&Bh0
/'/tqB
7(eIc
n4^,h
zX%q`"
/*fVMT
;%A7Q
u%g?MW
BrIeB
3%r*A
.R!WYf
6|#2P
&%P,M
?&$f._
1Kfpv
$p]Jq&g
HKeaIB
aQP"`
bG0AU~D
93{IR
N{EU8
is2d5e/
go)n@
)=;KS
ue)xVD
%BRHT
'-=#>P
3LX<D
hJ,o(
S8jw)N
)?GaS
O:fnou~
c/sTt
mjyHfO
`{?wB@F
Vj(m
t}OD!
GUkcT8
d>n2h
l{q\=
v]UH4
8yj/x{
0-X26o
aNeOi
(c{A_
Lo]fO4tH
]f4=v
q/_#L
])`PG
[HCgq
?vz)(
17NN>X
B$?}z
+.8R%
s[8Zj(G
#d7f{
P u~E
>5cI:%
qn`~1
tXMf6n0e
lBY41e
}Jc\a
81xCZ
MUHMA
{sexs
)-n:8<
5W}tbf?
/s{"V
R\X0BB#
#8\LZ
g|gt)Wj
}emZC@
mDG\+
p`U96t
dXGO}
tt"m+l
l-t[t
{V#uL
\d}{t
49OLP
cx(%/
}KOEz3^
sL}`
Z0J<c
BA;?Q
$_O`(
'Q}5,
`Jr4]
hA0+;
4)g*[
?_[f$
T]M^qwg?1
;<#yB
o$a?W
softuV
lo~5IE
BHYa+HX
Gw#fZ
u50^j
20n2EB|6"
{xhON
hRPSm
]jdB>
0<Wf$
"r/(h
f)_3b3
#<g_n
{jDv!
{TDN*
pAA\`
x/0WZ
"~I7k
!vHz1(L
P: e_
SetClassLongW
<q7k1;
MeS3EC
K3,T#Q
kAy1N
aUZN5
Ikvzc
2#tJ1
]-|Vh
)|BsM1G
9+fku
zL/q'
N9DQ$
lstrcmpW
G^K91
hWM$`#
OcI[fS
]6Au_
ICI:P
N@<\m'
RichEd32
OleInitialize
Pm[N1
WFEma
a%PC{
/-#9i
A6f3=L
\ZSJY
P,wag
mkwR1
l2Cg{
7#,t)myU
]22dI3
To!{!D
U7Q-c
~Wu>&
K^zs/
*zpk-
anH=o
bL 1b
'\@)q
yNA3F
<UD Q
=%@nL
bwRn[
LGGNMKg
X:Mg$M<
fhH(K
Cx^z\c
ziCm_
+It9-
90vg%
GetSystemDirectoryW
_t.sY
o$8:~9
qC{v%
m#7$`;
pS7l]
oA>u~
HHE4n/
eQ_V`
H9X$}
#0ikx
-cDm#o
`Dm;sw
!wiG^L
;oMzZ~g
{@J4,
EcBw$
KY77T
qVZ9n
PostQuitMessage
M{,'Dl
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
CtJj3
BA(tR
\zGy_
=qAp'
x>u"4T>
;{I?t
md@.8c
5`Zp_
6`#y<
(*I3f<v
(]:yY3W
.a?~R
T5}|7)
K;9tA
0AQC{oM
nW1Ze
s-LRx
OGr~1
:)[9hb
1nA+Xc9
Q3wtI
d6r$H
I`M&:u
W0cE{
Ib(--
}{I1g
]=:)0<
ok(sg
.!0t^
{e2B&uV
dX,iv
WtKe{UZ
^ctO!*
PAvG
S`Bh;;8G
HE0z?
>R0t$x
J(/K"
b@_/&
*e_w3
CRg9m-
#n=s3!lM$#~
V*q$$
GetProcAddress
x=T<@
mD)<H
y,l18
0&DiYlB
KJXOMZm
tgJ]rT
ProductName
;4F?>@6.,
ix6yX
U-1O:
|C*tL[S
wVkw]
/sNx,u
Ovz["
B\)L3<[%
lzZE]
8Wg/b,
i?FQ'
7A+0S@
S+[dU
l1\hTV
SetFileSecurityW
R}jVO
0W7/^
&gAVo
eU`l>
XuBAF
'{AEY:wH
}:8XM
7b#dM
ZOOW[
wh<BX
Nas@N
j_lSd
H^6P$
!=MNt
~j&:'
C17 E
;90>'|
&P6jt
'if/*
4{o6R
kgz()
D<s;?+
|B?d*I
*R>0;t
$( L;
Q5Rr>
%<r\f
NNq7#K
<{#(0
*3&B8G
Rgi^+
OsuRID
v]v*/x#
X)6fH
<[k$/-
g>gAS
YHl@8
BJ}HF8m
_wvL>
.,)/4
FBvk&
iR>F'{
nS@|r
{<ts9
GnQIA
ZILFtY
.,@,E
SetFilePointer
z\N;9
O%Q5
=uF&p,
L!_H{
u"Y d
~+-~Px^xG
O>$Jp
Y.AJBQ
RegisterClassW
*[v~2y
"U2NT}
r+K^X\
x^k\F
80GSF
cqH\lKp
(/iTG3CJWf,+*
}U$!j
nw%L]
}/N--j
+=1L8
6`r)V
xB-HPS\
n.Ycc
;URdf
/dpg
<9|wVs
Ql-`e
3<M^{PN
|\Pqk
+CmJS
W'mhL
[:3P}
A7d>3
&[\XB8
rf?3$
fo&5Xf7~}
*iTSq/#
I`j,{Uq
?7R4m
}UE`3
x+I\Ye
lstrcatW
JbPU}9Hv
"H~b=
%]Cm|Z=
?@{o9s
5/xDq8e
/*O$M:oJ]
-1Jkk
Z#iLB
HmE${
b%QAO
ktl$?W
4Z*Ba
LJ#bq
4%Ou%
':905vI
p1A#Y;
23Qe:?|
!_#s_p
0r0^1
N=Sax
nd?Lx
Y9ZO`
IO$xy
YE~=0G
-x:~b
f+W8`L
O2FWBz
;zIhB
)_z]n]5<
nUN=+
Ct0TF
/D@V}
*Hzc-
1*n\b>
?v>dn
pNMbi
j&7TuZ
t#eJxo
)u7\s
sbss$
1*AxK
.e5oK
`>M1a8
cN5ms<
5kz'
?)KH'
4J2Ky
wkJJ^
TmZ@58GV
t.VuV5
ZNE|~
m|5 z7
H,x\Wp
b/Hw?
\AyFy
^A8w \N/D
bo|l,
,aV1l
Software\Microsoft\Windows\CurrentVersion
5`2Enl
imaF~
-dK{^!
k(&-X
AIo,pkJ
oRDS"
b/0Dby -3
LtQ?|
-hkda:%
XHh0W:1
SetTextColor
c8seP
:J[<k@P(
[a{M{
3-_!jH
vtUF<
I1iyFY
A@ZTEe
0)#*%
qe1eJ
7#~Q}D
fdmp.
48szB
;!$b?
To?r">_
x> oC
/@AuHS3
Cp^f:
|~XSW
KB6p
9GWgoR.
FBd;.'
U^k7
D$ Ph
\7gFp
6T3jn
GetTempPathW
&i08]
1^k/7
'EY+x
%Y5RA
tuIY+i
JTT5j
y46{cE
DgC2@
k_0@Un
_K1Rt
x42M[a
}jAzv
/pJk;
(ia,I
|Ois|
F,:.yZov
$7(-w
Wm\zg
KB`#@>
x\:3)
m_jp~
g\@+&
?)i9K*$
uPs&K
:=FcKU
zyFh<
:F/pj
bE,q.
6_ij_
z=#KB!
qjwJT
gg:5i
/]mHj3
RRK@l
xbQ 6j
A:[bf<"R
5,zc&<
#!}op
Gs^L,k
~}IO9
$LNviHR*
NkPIR
Jp*?A$
|&Q7]
rFizD%
2@hHt
Xt~T<
/dI^>
Z;z8}h
Kdpy
L8~qc=
y7$Gm
djdih
#A6%C~*
TgQ#M
L{~`]
d-oo6
MS Shell Dlg
I\tWp
ulrN,
WP }$7
?/mmS
:4%~8
$QK^5
b<)A&
k;Q$;
{D9#L
'1s5Y<7
:A]y$.
@,<Nh\
/Y<HL
:-SwD
3 o?K
rG83sR
O,DCx
|FBVQ
Fu$nv
;fc4e
v*2 >
65W0S
4ff*.(Q
67W{,4
hFBBh
oxntH
kK3Xh=
wH:Z%
k/f#e
(uqt.
_#H#W
U:>Br-
JxEaY
bDA@`
vgYW$1
}C$X{ T
vag=D
_f#|i
=C`=/
~2l'3zF
TRLywTqsK
iF@a2
}v"x,
t2:mq9
5%}px
:X9nT$1
fZCJcL"
5e&Zv
Ce/@p/
ViL*ZD
B#X';
=BTL~@1
|AeFD
o!V$07
kW)X=
0P[Vm
tm{sC
Z^Fr]I
?|`\z
|RLULvCd
z4uy@
tMaWdw
cb~6/
8"AY5
R5Fl4
-@;@N
11wp`
}#,q{
B);X\
Durbanville1
=7N*B
@PtwC
*GB~J
500Y0z
%^g4j
A8zx?
-8lk)
:Z9+@7
?ywq[
)P[yV
ffM`0
c`83po
}vQB"
db"4Y
)AB~eay
bUwCv
|~Rmo
=>'-/
PYE\0
#.No~
tyvr=
zupKD
Tue/4$p
3gL;Xb%
X|5-Q
".pc>v4~{!_
l@17o
:\@_3H
lstrcmpiA
{b*-@7K
QOJ(?R[*
B;oal
fqak:
gGXZ#S
en,nv
X-0'6m
}afyZ
)KNqm
wJ)OZFb
1Hc&Z
p*VG
6yfxb*
GJo}S
D!oj(-O
pFOOHSNNSMFB&%
Fq?SI`m
q_8Au
SHGetFileInfoW
<T5Tu
Q:a;y
h?}Ai
t!bxz.
Fv#G}v`
vmF8>
b"!5QcAb
<q=~y{
g.+5e\
Hk(e[
}gVi5
@]D|@q
{C:%|ezZ,
a?)/E
&y#VY
hvR71
Ib"M<7RF
iM%~?*GB
cAS&}{J
m*s=GE
}|=edG1
N8zQ
t`}w#
RO!Z!
MSs34lw
fCta3
8u/j!
iwWjxM
fN;Uj
bb\Fa*
http://ocsp.comodoca.com0
kf}aD+
zB5U;
|cU!`A
>rYH.
0,~xm
7h;(f
hMA]H
3|3,qI
OcO "}
j\(9#
Q%B<]:
Rv[|5
3x/[.8
NDKWF7ts
)sX(+
"@JP^
AFh@N
GetTempFileNameW
U{/3}
0#V~2
V-LT~
W+ <[
BNP6"
wE{.C
K6#hqHx
57SI^
RRH\Fv
`,BO\#
rl\$i<r]
90nc?
JHZQ_
|Giz\
|2hH23
PKxZW}5`$AK
Ou$a
D*fhG
A{)Mn
RZdBD PS
w)":R
O"$afW
6(q3=
|k+U,
D6U'm
6_C*?
V!%&f
nwf0:
:2L|o
^U[NK$
axX]
q8\&t
(iCFv
k:Y K
Cl3>;
UL8BH
>~`qLDY
{/AO
l/ayI
=O*"\
:T9Jm
#eAF!_
1/P1J
%y:=q
Hxw+Qm
lzi2P
'TJTJ
Xx3{&
*x4f0]
l/A |
I2Q.
sA(#e
)U"tb
_naqN
I:,3m
\>PYo
H}Mi%
iB[L_>
@9yX)K
LABPEJ.
t({x>=
|LgW?
}N wU
RclJHF
+so6q
7T/a/
WXR)J
QF_+d
CharNextA
121221000000Z
qZ61&^8
[eFp~
"1?2,1$
)O7T'y
cV6\,
=!}Tjb
_Y)lw
a{7Bz.|
+5V9
VuO,/RK
Ga,i-
0gxns
4[tvT
8h2yK.
6i8T6
@2^r4<
9O7s'
*'],5X
@-?Tr)Uq
xO;w>
+b8\)
cGvfg
W1XDK
\$Xz}
:1<c3
9or]&
mwI;-z
H_)N(
c)444
~j V_
;-*<f"
J;2t&
D9=Yg_V:
z]LQw
P+rA>
*4'f`N
,4CRW
O9%kn
l#vvXX
_>Iaj
"WeQ]
X4&^`ir5
8*]2y
psh_e
e'N)E
9[\^
f^5"w
`~`Kh
K;=~?
Z{RGU
fX@\W
+j1xN&
PfeECB27U2
YTs"{4g;
R+0[$0
*p?4w
m&$9TT
nGhjn?
0VF.7
!H~_:e
ewof|
m2^8X
k<Hg+d5F6r
FHp?x
|yIyt"
8@+Q Vt
gAFwj10
i8f7wX^`D
S+%yM
vBdN*
R7w%-%
\2-}i
8?P#5
0H3fMI
>!RI4dAG
W7~hTUl
V!yY{
VC;],W
@*F$6
of7R^
"m'4*
*]db(|Y
I'cE
O$$ds|
{G6+WR
NJNF|a
#gPm%
oe%lR
$;tDRM
3smQt
T<Xx.[
q~^7Z_<
U"eu
nLfe*I{B#rk
+pA3i
^KQb\u
lj&=K-uteU
]a]a]]
0[c>X
iMcl~
-1~mht
zxzK'
#ecW?
:GY8F
GetSystemMenu
@Zht`
k),.K
S~su/
+%"IV
w2uy6
P_oKc
rO#_\
qEdKg
y{Xz+
H4$/rr
U>qZ0/
VAc~6
@Qkdat
RX]m{
DC&Jq
4 vMb
|Z?$Fu
aqoA71
jY~~-
-`nar
U{lUs{
SelectObject
IGPJ6
g/I`=
9/|D5
0_jlY
ngnAS
V8k>D[
uGpq3y7
tG7~rN
OqW`0
IJ=Z/G[
Z5["g
7'M=F
|t~dc
Z]?!1[
CLBCATQ
jB)r
\I.[/
;jKoo0
LM\hSe7
@o(Y{A
F:w%L
D_@Xh
~BmF^
$fPy`
KvL~\
>P!-.
kyxur-
]B^u9~
1gO}X
5-=z
Fh\a]V
S{dO[?
@S5&
7^Rji;
F|EpX
CreateWindowExW
tO&1H
7u:.#
]>nMu
EWE}sp
810)WC9Cb
gj2<%0
}eUFjB
0K{t]9
SetCursor
RegSetValueExW
EXDY$
d7n`5
_2of;
ZL$&a
8U<Zs
aI:4e
h/F=}
I)r'c
7L#i:F
/?HJ<
?1_v$2
2<(*K
~',ik
o6W#El
@o[jr,#
-/z,gj
%[cOg&
1S+|]!
PF\l>
A;iV~W
A [p"
@eh_4
G-aN_
p;<\)tE-wE
i?ls\{
G#3TL
-dM^iNJ
/P4~w
^63<&
djfi]1
~\;6c*mY
R)|8(
Da5V} #
{`# GU
B-o@mm=
;TTT-lp
YZbVD
LC@by
/(VKH
TKDj}
KoB_8
<c:C#G
e9ieU:0{5
*v0$B
3eoxz
LoadLibraryExW
X2owc!
S3-MK
I`!y"
<`')
cxQR}+O
lgdF
=!%vF
fq B,V
@<AVX
d>c}@6
$03C5
@J4(JUq
&v>=T
GOQZQ
^p)A
d;<=KO2L
9F))4
s>k0:f
lH+g2
jPOPLXmjVKKWMEA'n
V`,fy
f/=I<1
s42]c
v.d*g
c3[4_
^1VG"M
GO_$(
WK4p|
FkgM1
~o.1>@
bPB^0
2+~ob@;r
3]{|d
ugCUx
zTkLo3
^-SSP
$pCb+
\ZG"W
1:}_n
,HD}-
P`!Q}
{X7.C/
l~4"rdIWa
o4PJf7
)v")D*$
d;^!:
{tA|3
3cOFE
3\mKP
jh2!n
bx\nJ
sKUp};+SP<Hw
[pFgr
PWvAG.W~4yM>
:2NL1
IBbzR]@
YK-/(
Q<}e|
7@Voe
:JuN:p
DtDC
c.yl@Y
$Sw{nT
]XC%t
[p9*j
#f"_9
*I,K}
u<QQE
^oxSFj31
(T_JD
m`c/8
N2f?)i
J/n/^$
HH#95
6H1C>S
Hy]<wn<
j3\Z*Wx6
=tJ@^}
8Y:5]4_
FillRect
#[~}v
fy@iiNxa
+fcan
a5SW`
7w.b
#b%Xk
k|VNnF
#b`4L
{y:a,C?$
ubgMwP
vKVgqP
])Xo~S6
@UsjI_
UJ'_s
?4t)F
Ch T@
.ll<")]
-VweM/
IqMEl
E+!"Lo
fnOn:
Vy'^F
~qb.[
H0Yo`
|`R}$i6
GHV6I
;YHKkp
ip(FX9g
sP[#`4K
ku%\`
{<v,>
b=r=}+
d>9]Am
W:{Zp
;YM@PS
GCURgc
vg=+r^
{mF<1aH
OeUl*H
!>e(T
k.Qxq
Y0$Y"
xw$BN
G<YWC.
@Z6}{
<61W:=l
5O&uX
!zEtj
kIs -
Eekx9
`7W.
0];sAB2sL
K]9YI
A9\#Y
<rD8m
GC]M_
b)MlE~$
UcG)*
_kE_4O
rw,@J
F/Bo(|i
k{Q 'b
~}"b+B
pD?>A="
X"fkF
}X/Nv
pb!3la
AN6?38
|6<p,
g{/ej
M1~9~^
&u_k\
7|W?X
hj_yN
kxexL9
'UL_T
sEzF"I
N,n{\
-:I=>
G"#DK
=G:_-
oa`(x
c d,'
CoCreateInstance
uJ$Ec
Qz#RJ
v;`Aa}
>^9^
M>3(F9
sJ0P|Y
Xs*xI
hgnIj
SUY~"
qll,>
RyGBH{\g
k4s}J6
aITG{
}5[kqq
J*<!<3
%XC,;
\bvv]zz`
c{hd8
RB8:IRv\
GetFileAttributesW
PortableApps.com
Q/c/j7
VV",,
:F#fV
\UMF_
nc49;)
A>1`K
TF1.:
BB])J*
*`J"J
i%?=G
*RPa*b
D9{8%a6
5qW'gV
fG' \/
\bH}A
q9grh
DispatchMessageW
BAt4m
MVq3'
2007-2017 PortableApps.com, PortableApps.com Installer 3.5.10.0
o`T"E
T8#f@
GUb&:
erb_k
\q:q
nUlyU
#d8/'
m,x9,)
b)EXI
|kLKvD
AbB+Cu/
7F!nM
{Q RpX
TimeStamp-2048-20
537ih
!}eG/
P8yzR
}_w%Bu?
"|PF3/AVr
+}51d?^
VJ57nK
DNsl#
1d^6<
rPCDW
>1iT=TkD~
x/;`tB
;|y?4
%8%_4
TVm.NrX
,/i|T
<m7sg
uZ|xi`
BeginPaint
"qz\y+
lhoj<4?
[\.krx
P(>K#4
op]6/
l#~Z:
1keCMW
rCV/T
05pr}
o{D6t
M`e]I
~0(u?
L*\A>
UwcA\
8.r83
@_exo
IE=4|
$.z+u
]A<Nm\
3~;@e
&5v:h
HF\Vqr
;Ji#c
WEA__
4)]Gaq
|%hOkN
.q>;]8
shze64Q
h)t^t
gR+Kx
s<2rZcg
v b})k
_V`s8
!7=`I
gi_LkS
-"xuu
9]x%UJ.d
nf,Dw
S*??.
{"zsl
9<ab !
ht|4(
SI+pI
}}#Si:X
/_AW7
U+zq/^
4VITx
ZnLdy
'/(L88k1
b]8<$
GcZjqP
z..fBex]
(?;1\{
5=eGZ
9J}xY
QB4c,_MR
$jX~yf#
5W3VrV
XFv]w4s
olw'z
9%j~8
hG_CO|
kvjUsJ#
+)nc^
<\u*Y
xMyR[
KeC<!u
a1,7mM
6/tlgy
RM3Rx
G"ix.#
\1!U>
l=S-7
1!: A
4,^_';
ha[`5w
iI}k{
]88(j
w}%X Xj
W "5@
C~1dxkn
vL?7C
K#:Rg@B
#[[ke
75l;\
-+ACO
pqkAj
bJk6U)
mv(H*
aJPzD
=lNrO=
?5Io_0
,lB2|
B!SF[
$x+r~r
itP,T
Yif-5
=YYPA
vaX4"
h#c9^
gg~j(t"
7i#gu
k}5A'
Au3.S`@
BBL#%9
9R3w+
{Xl>O
C&/,19m
OOq,G
|a$/qZ?U
N=msr
:W-9i
*6#Pf
'K](&
3LA}e(
GQ8c1/
j?syf
C`[MD
U`>(1
1)wn.
3xIK0
q/FTt
3tH3B
4Ixd1
U^Kxr
SqGb-hkx<
*MP~y{
{gv;
)DvC%9
Al%Vd
E>yDx
Nf]mF
^7"6P
1|$s}
1Oe\q
Q#%z)k
4cuZIa
4$rP4
Vk4%w
K[>Aw
zn$r)V
v%J,7
vs|g^
8oK40
rKz6B
:g42i
*sK P
ap5q@u
i?obD
\ybDl
*fON|
Z;H)cU
Y7'1B
'Symantec Time Stamping Services CA - G20
'S8~~%
Sx(=
u_L@+
`^]W.
=8>#.#
2=)Sb
dtZ:{y
_!ARF
1M]KA
A?dZCu
D=4!p
&https://www.globalsign.com/repository/0
'W0(9
2 5vg
AHPWH
A jn7
_BI/O
bbPM\]
5w*u;
,r}CR
G5XX'^h
5Ta3'X
5,o{9|-
(x\JX\{o
r,Q|T
Egi":
{$}8Q?
Gbu@h
MqT~x^^c
cVjZm;
<#a'&
6F2wx
.Hunr(U
b+s1}
(l#w\
lGOM9n
p\cOdK!1
C7}/R
t5G[U
fMoOP
i1Q]g
`'qwB
?[Z,C!y
V12Bm
<e b29065<
+r#9%
_"Yc3N
}#~>U
Qf~eL@
2WK:H
bky-dR
/Eb"R
E'9wv
rl@=&9
[5'Pc
M)N;Z
Y<Dm:
gLE&5Z
${HFM)I
eP#99n
>N9')
e4_-E
iWsC=
EnableWindow
7<D8j
F2%bL
\Microsoft\Internet Explorer\Quick Launch
"PT/8
$$]81T
a$`h&
;:ihd
CIpox
&BQbn
L[mxFm
CloseHandle
~XO?<
N}JK)
eu6ry
!;p,M
>JQg?
\8}q"
U\Grl
`X&ku
(j.\A
W<[)"f
2d*'y
n(Lj?
N&|nk
vL'wU
X@+YU
8Azi
1 $Ev
e@{8r
|,"54
Vf*&$
JsHqu
a<qb5)
qEg]/
m3Lv-
C5#W?
!=B U'b
1=O~<`
XdwM|1G
}w%)'C
U;*+#
MD[%!
XdFa?PRE
INm-|u
H4R0q#
u8ZcU
{ch00}
dye Xw;x4
EiWgs
'L/ed"
D%1N>
"xIP7
{Q1.m
jti|T
bv7?),
"|"5m
P_pUqn
%2u~(x
V\Wz>d}O
Y~,x^
^V!c/p
w/V(D%
-n+jfp
(3]GJ
4U'%u1
6 "Xk
uBF?)eN1
Wa,79
]OL/x
U)ixS
n5(!No
PAaKe'
&0$0"
zN7&[<?i.
8R'tAF
lRF0O
j"hTd'
i9X_#i
j}\z'
2#763
9r^TM
.~:?{
Fc~|F^
N/XFU
>@] W
NbO~o
>F1#+
BZ`t=k'
bM/yT@
V86Cf
+~ms+
;={qwq
,Q?Go
0lN:K
X>-*,
O*m[!
_8xm ]D
oZ?:y
5bp)Q
bhX*KyZ
kCK2;
%XCfgfr
C2__I
`\d4:V
;?~LIK
5k`.!dQ2
:E\\a]
TxtUOt
oA!s_
,2@jy
;)to@}
~XP2w,M+
Fvd`8]
*KS`+
@/BGY}
T<AQ=
!P;~b
7#MawA
CEi|W
2#O*|
I;x=D~
>}cV?
40+T`"F{
O.1B`u
2^VY]
DfY`bv
dw~^xxH
%MRw]
\xJW[
IxlDx
nDb}A
a`g?g
:],xc
0[Z;$J
8Wy+Y
$/u<d
/%e,4N
z#;s$w
#i7a-!\
}>)k]
Fmcqm
|k:C6
QSfs{b
_SMvk
9?B"_>
|U7Kj(
)/GNx
!,z)4M
UniE O
G;^a'kL
LdN'0
r/b}:
COMCTL32.dll
>FFf;
C2oHu
{<?@o
^WE+l
bQ;A)
PortableApps.comInstallerVersion
r/zy:kg
SNN'^
8V7NC
Y+j673@
KQAENG
?:.O[TH
RdwM_
#8G`qV
wws^z
;y}Hj
{FL*;
'p 5[
/>I/O
hyOENH
`q8wy,
vj9lh
49L;5Hb
A(F3j
*)7qA
xzE0o*
/bmvq#Aw
YO{t]
o(=QJ
RemoveDirectoryW
C!@)&
av(}N
's:"n
*[UbI
-eev,
`)7hj
Fr'~m
Q),p?
o<E,l
?q;!T
R)?mg$6
+9TL/N&
6j;4F#
`+XEgz5'U
?p-{-
/F+1L=\
SbAb#
2-k23
;*X)s}
60D-z
Ku\8T
EL/R2.
p~%3g
RegDeleteValueW
BZKLj
-0TCp
""1M2V
e(jgk
WKZb"
MN{]@>i
sR>]d
/kC.K
DeaSJ
8(T1`
`%8&`
a>[t}
d;k4M
A0MKI>D*
N)JN2
H,gI=
XPJzE
=LRMo{
kH\ 3Dj
RegEnumKeyW
@{[sh{
j1c;W
(GlobalSign Timestamping CA - SHA256 - G20
CRYPTBASE
4m5']&
Symantec Corporation100.
)P;xt
uy")2
j7kRC
^T=+SG
O~r!J
IsWindow
>VXY0
r)/`!
9kP_=
wR7/;n
/VwAA
ya1$4
^2nq4
=!oTB
p?sE]
dNv:9n|
IaJ "|
9!c@ry
A/v7xCJX
F'Fj
cRQZo
z{%0|
({t$lp4YH
F 6ji
Ao`FI
|[v$j
I:C%fv
N_~a>
e{eOp
NMer{
DYmv
7s3]*
N:oL@
{c"J*
BmnfY
wC@QF
TOHQYK
dFvOy!
{c$"W
IsWindowVisible
qjZb0e
UDJHR
VnBemq
]nIi7K3
@s]<+
nKEK*
~lEL5e
u0h+O
m;//.
BAM6(m
%CFqz
]duemd
GozE^
lb(?s
*Saf%
wz\IH
+]$.g
g;O!n
5 itbX
U]DT!
]H/ :>\
;^s1@
nqSax
q8J3\-
JFoZS
+0/}r~
fRO?(MB
eZ)!g
bHJPoz
8=KGG^
xO%SD7
H!cV,
#~gO[
@Gk3o#
Bb7OV%
yPPm^
d5r*=
'=.SYB
9^W-.
=}1oX
ciJ_y}
WO4Ap
Tb'[\
8yj2rr
@W`\-
H4J33s
_f"9e/
pV54o
P_z)o!
A1 8/
s|v@"
[V;9,
8GN:J
3:6,6
,3Q&X
sDF`+
]s]Nu
lm`~C
~Y>3E
1Lz"A
nSISN]
f!>_^
feI7e
~,Gj8
4EeeBU
CallWindowProcW
{luA?oW
X?y@'
hS:(a6
&KyaRE
WI6NAx
ZV4#5
P{1>@w
4"\k^
~1DYN`
i;Gw1Y
t\rM</j
*<A!d
*<*]|
.d7({w
mYa{2
QL\(K
!N>6|
ZH9Uw
!o]]b
@watl
9opf6
85B<=
Txd8n
A?%S|$
!:f$@
R@Q..\Q.
3|)8y8
A_W$\
j"x;k
r+Dm+I
SpYv/
drfD"
](/~K}
TofTW
FTkM|
kB3R+
D^+x3x~
$vn!P
O#g9s(SfO
rv(~db\
6THE:
|I*eV
4BIa\
WPWj0
skAA4
Q>Jt6H
p;$7S
AJ~xxf
:^+yO
tk4o_
'0CSI
'bi+5
_|v[v
<.0@=
~$!oW2
S{sDg
vneD'v
3Mt&.3
.6$TL
}n0f|
7kAd$
81N/J
RegDeleteKeyW
ncgsD
K-~D?f>y1
#W3:L
~p7b7Y673
;-%`)
H.f!|
'.xg9
)%[zQ/
0<3fi
){s2(
/f,LS
G+;n0
U_vL:j!kaW
q&vlH
8nvvi
flD@l)
0{x!p_
w29_)
*m^GN~
jQY<M
e5^?%K
x}'>p
?Lam?
BOzB^
`eM`;
_ucQ U
WaitForSingleObject
yI[wJ
wd-8:@
}3u'~
~pYR&
["\8#
#" h.
I@Y}M
IOU<F
OpenProcessToken
x=mR.
q'ZUH
OAxb&
;!7hwm
23]Y.BLb
-ZVd?
B>@<y
YL8og
";}Tp[
I|Zk}}]
vpB[+p
"HY}9
3W3i:
lf$>d
^t/{9
XC3x7
DTIG4=
16NI-
$RpZw
'O99J
0PMgCn
vi#$W
SetForegroundWindow
z.Igx
:wp]e8
]UpGpk[
Xq?^ \=l<)
eSQu:
6fj"k~z
,^BF3
dN-r:
7TsNj
P]\#0
+,jwp
2gIhp
Qio[D-
[iV;<
Tg"xKY!W
xnkh%
+I<Y(
=x/wx;
fJM``
.4JXp
Bk&%o
q::3P
#Ye5w
_JMSl
3'%~Z
x-m+n
J={ :e
iNgC(
?`VYO
<P.EM
QX*hw
jZF}l
9(.]T
&KLBSXU
^ay^PH>
RObO=
y!:WN$
;^,{O
6\%zb
CSTK6
7+jx5
l$tt[o
ExpandEnvironmentStringsW
|p?,V
$Sz:,
0S0b{
[N``@y
Ac]Yj
.^Zy8
SetFileTime
'#_AR
LWjqa
S\d'K
tk)D=
ZE"lk&
+0Z!r+
02WxUk
yEMKk$v(
y29c$
goxq=Yv
odzvG
:;m_!
pF@]U
v)7oA<
Cz}[?o}NG3
YR;mtdD
zY5X X
{K <!g
+^&$qQ8
@jYYT
0y5hJ
I9IyN
[kizh
J=|_{
x"6kwy
5\Kv'R
p7It,
l3\ib
4{'_
rE3q+
;v<2+
+ee-'
8p^;O
xB^(&
,xEln
hnahQ
~+-\K
Y0|[l
n]E z
/xP^1q_BM
SLC '
xp3#fm"
8ABi@
J3wXx<
I%/c!
Tsl(Q
bS#LI
v].U3
C> `+A
KZ[yz
t?\06z
3$Zaz
$Thcp
W=5e4t
hnA"B
L[>D"
k0.I=
}I=:pu4F
[3@Jt
6/WOx
\(ry]>
m9u;=
V.d]a
X<:Kg
tR>!M
[?"Rv
kfsu|'
"rihU
[Twwr
1NR:P3
%A.&g
!T}z
+)VPY
}WsA}nj
doMm3
.b4{I
NLTe~
@w(mqFQWX
n7U}O
Dx}6S!
!_q,=@9O#
ymzM!mh
!]'v{O
xyyAR
&kEhIP7
YCG!-\,*fj
buuu(
il/:mm
<mKF~
5JUR-
xB`t4
~R]qh
HJW&w
2~7$v
f2@+*
HD|bc
s-J)1
R!-7J
hc@v,z
AI?G@
-n$P!N?}
CRKwp-
!TH3`
>&9WEW
EMO%)
]o6f&#
=@:&`T&s
j?zH$
WW1U6
[<WJc
R2NhN
_2}Tw
PczF~
MJAN
V[]BLg$/
;5<w%&E
y&x(&
OLG_[bw;
+cOLbY
+`]WT
j<pNXvp
tzK.x
6'=bk
6K!x"
Wa_ve
Xcx]^
Q^m[*
_Lf|`
-i(pg
%hVt-o
7&)5o
MLyzO
sXc}G!
Vc~6+
?(by,rh
D(bW7=
C_d n
1 z2Q
^95I2/
YB|k^
^Z;=qA
j2uo>
q/i}Z~
TAexm
zcC`c
"i8F>
|XP={g
/`6U_
SS5Y9X
50301
OWYd6Vm
xvXy3E
F&"P=Y
eB6'<
uhzEe
Z|_|q
6jXK$
KjR [
?H~zn
}Kl u
DialogBoxParamW
FreeLibrary
<Vlq3
{]lx1Qa
E;pRV
n}"#3
.b)sA
@f1g(
;,~U[
5%{JX
41^m)7TD
9!4+@F
]u3 6
;b:vr
M1UqH
w12,2
,`GebQ
/@|NS
>[0\-
JZ]-1
.P[4LU
~gJ>$o
y QbJ
>CG~?3
CompanyName
7X]|6
.Ldpt
Y@f0N?g5
rmw*G
xU.u#\
B<1Y44V
KzZ:r
)NQXt
w7\jl
X`Z\y
="Y:0
i5#GaU
FS6.(
f^'TP
lbMz
!mO.)
ThYn>
S=yz|"
V/osl
*Ure|u+t
o~M"4
*XEyrbw
+$\`NX
RP/Hk
md*p
L{WJ:
a>8);
R4/XC}
a,Ltq/
>_^3Z&
8OdTl
h"4eU
iZuH#
E4'%f[VCt^
OK9O;
DoKSA
GF^Bbuk
<|lpz
~u^ g
R2kdr
AI")c
*bV-CS
Aj"A[f
5J/NR
:27Q6,4N
"X<@$
oWJ/B
Q2y~_;
0)z+@+2
,<wV~
{.]((
e6k{\"
+](u|
-r!C.
&0\"O
C+%U'z
.70)j
mt6qE49
j?Q!]r[
,eh!XFry#
3ms[=
R3=$t
#3ZdG#
LoadBitmapW
{`7m`I
PZz2k
f2O1_
SetBkColor
`elz<
C\Z'C
_O/)\
,5:i7
e:d a]
hx.u|
j$S{E
tf9e<
t_.Gr/
_wKEae
8kzpt
<MvPIGD
<yts
`*~'l5Xi
mxc<V
~!nm*
%/`b'
o2%gY{
OJ1c|
|lm9LkN
>8zT-;
a8N~]M
^OH(Z
;ct.b
.-l,^
=}>C=
OKgNKC
EUEZ<
y{':JN
li}tC
0http://ocsp2.globalsign.com/gstimestampingsha2g20
@,NKS(
8tzvY0)7#
M?\/u
4/A#y"R
%h-;Q
_$w[)@
M}KbH%
da(A<8V3
8J_oW<
]IE6C
(KOY}
q'z$9`
O!0zJ
tw-ezo
Uj*NK
)g${)W:
|A]wg,
^Q]U0
s]+etN
keoou
f(\G6
nKG7$
)c`[#B]
LkJkoC
i2?AY
$Br1=
NuafE
\ZLp$
$9LQ%
vCgAfU
/yqL+
cZWc<
oRi3w
pi]4F
bfhit
V%t5"6}'8
3$cx#m3
.*147
\$v(L
V=z8o
5.1Nkd
=vFFJ
]p@zf
UQ+p/^
borDb
.TB|5
z$QUxy#
ImageList_AddMasked
REU+J
|_lcd
y%d7u
a -:&s
280508235959Z0}1
N9%7E'
E#)RR
{VR(Q
Z#+V<
9*(N8d
e-5~0
@O]3}
2+&)KF
|wfZ8
Gr~J/
Ak>qe
vmZ6.t
|B|Zz
(tBo7
HGc9Q
1?2Tcm*
;nuF"
%\HE=
q!y]!
O8:t2Q
p2("P
M5H>q
#iZT@
t0HH4L
t[c04
(S*Xya
8RGxa
Garjl2
2wi"u
B*b'N
CR#+Y
l/:Nn^c
Lx*F<
9rXWZTx"
@"y:mM
i ](=
!KI+OF
v[(J8_
Ud`%/
-qCLb
FindWindowExW
oO_T"
x@q4/
pgD|!
|-O=k
Kd|W^
`e<Y-
i Z%/
@5`e=?
l"r/6
u{j%Mz
5VO1K
zV@uM5'
bN_rhH
PeekMessageW
qI,/\
];VtT6
qsONqs
yzlY^1E4
;$s*M
6T(2N
\E!dz6
?e@&v
tk\uY
MBH}J
y%~2.ci
o72W
&OR`TG
!nLOugk
+Y.};p
19.]}
^>WD_
sf.-8
=&y-r
L%u7CF+
4eX2K
[:RL9w
&(VJ5
Sq^lXzh
QE.65(
SetEnvironmentVariableW
;A<>x*V
~J`*]
@\_l"
FE``U
D.!b(8
l~s?7
2,'v8t
]6qL'
8UTM)
x}>XA6M
wsprintfA
$ss w
/d({]*"
L}\#
Sd-<o
Pi/~:
zhU~*v8
K/b>]
7IN*q9c
_k/)8
P_7+=
gG8vE
P|2V[
oC9cs
"VJyH
#xSit
"/_,_
%sv0~
7FQ>@
,]u3Um
,=Vv*
BU;eNC
@SXMZ
A'+7i
_-<V#
#g=}#
Installer integrity check has failed. Common causes include
9`KdQ
.Qa8L(Jt
e*2bk_
B~t@$
};Xak
8p>*+
=4atE
XRmM,
?Da[+/
yBDSek
ICCc+454
VX(h2
$6p?}#,
'Amz$s(
5t`qg
opmls
'/jd)
kgSezpu
oYs$a
Control Panel\Desktop\ResourceLocale
~DyR3
AyBg%
'k{L6
+ti~#
;gu"m
6?ZIIxZ
w'q)Xs
/F,8+AH
*m:H(
6]]|8v(
Z?<!Y
]q:b#Q
i:6?)@
7kafQ
}UpS`
s%V^`
w+pg\
&8MG(
K`+uq^
GetWindowLongW
=wk)oc3
3{]m?
Sc6O9
0gdj~
MTg^Q*a=
]j&a8
6}wO/g
~HaH&
aK$au
)otin~
mT~vX
$g%)t
B<&d
dqyAX
"tW.V
v~}tz
HR|P{
=Cb[f
hxdZO
s[Q#~J\
5UfE-.r6I'
E~ 3d
G.>yCSm
l!wj*"i
*x>3q
2Xq+l
ii+Qz
u\N)!
@Hd2*
{055M
Ftm%g
i=?<$
4C``R
}v0?A
ff]eD
<~SHz
Uaz;*
S(O*-
L^lU>&
B&G0>
p[zs,
O!YU.
'q0cS
UH"jz
X4QlF
Error launching installer
P u4~
bODbN
XbZ2
S+YCI
]omCB
~dm57=
xux~k
uea0HG.
Z~/U1
fsZ*[x
A$IIk
F=!w=
09G,;
":_:i
6P1"0G
WriteFile
eOBoH
X8+mX
bb(IG[Wo'
9$5*fVO"
??RW%
j8=&Xl
'6;{M
W{LEk~
H]D<W
g?n,;1[
XjFe:cc6%
DestroyWindow
TA>:IF
-St;R_
lTC9z+
p}V-G
(t'EC
aC`1_
DF:QV
k1e-"
Meg e
3MOKf
8$D!X
`x=_P"
o*o99
w`:UA
"e^:U
9Z(^'
372Zn
fiHHZO2
\yD`x
MQa5#}
S@8hx+
A_Mq`
Y<=uwk
w-8!xJ
9-w3~}]
Tj8,+
G!@oZ
VSUbOI:
f/G'*-
pCG_w1
DQk)P
uh?~"
qqr*;-
& Mre
'Symantec Time Stamping Services CA - G2
=ru>P55
bAJhh9!.
d@K&JO
\$'|i
>,KwW
Mh.N #Bf
`P!M#
I_rDX
kQ#dJ
wjgpt
FmbTv
^v8yt
"isFW
xp v8B
Z"i?<
#F~Z+O
)8fWy
32a08
A{"UA
f3M-K
clTw*
@q@BH
Bn"8DYP
B^/\Q.
ZK>If
RichEd20
Zg;tH
Tb^r$Ps
+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
j*Smi
%2KGd
D_ErG
y7[:GV
x+m<[.%
v7JqL
PortableApps.comFormatVersion
W0|*q
1|mk+
0C{J0
+'*z`
Wp1Yg
k5FX"(
-6C[1
&4J5~
tiI9|u
Lsk16
gu !^
Mn7nx
lFng"_
A/rLB
]mAzZ
TupGu
I,@/K
(6&ZK
1@aZ/
1#JA`-
<h`x+
@tcMc
8aH(R^
(kH%*~
201229235959Z0b1
(NgN]
nDS {
2VCvf
W7#MI(
:( gKGd
[th4N
ymX$+
z%6a"
542Cb
dWO4[
uu}:2
7K}"g
DfV6(
ojI4($3C6f,
w*[pW
j8Z,Tb3R
OLEACC
<':$+
J|9y&
02@7\
=q,2fC
#!zYB1
4!X?=
YmUTOr\
g9gQk4sq
h<NKJ
e\G #
&)):=
S!lQB
<DRQ#<
O,9NCb>
)}';_
k/~&>
C=j3^]$
yZF@u
`7Vz-
$ul2s
E_R]J
%4J)3
|qk-`
(en Xx
fdJ`)
|tY}v
EH2[z*O
?ach1
{EY8UP
|=>s?
A?=BM+
}Q8GD
O|0V[
lXsc?
QK?I^YM
PS}:
ZV;&MY
8!DRQ&
edA#K
N$@8t
SW\'q#V
E%,I\2
fOFxg
2Ug^%
hcF(v8n
b\X 4
]2>Ip
Zlp)p$
g3rA}c
+h2U`<2
Q)'BZ
#;`}nT
`^;O=
Zxp;#C
1_3#}
k$jX*
K,A)3j
P?'j>
(u 1`A
]1Rv?
=Y Lo
zz53a<M
2l[zH
9q'bJ
(rN7_
GetModuleFileNameW
"%SG,.V
42?D%'L
)#cx#
@.SGA&D
18$P?xr
180916233111Z0#
9}B&<
/0-0+
hVt>?
yp)jt
:}|0]
jE]g7
ri18S
JRNlk
:\ZJY
\yfHP
fNtFa
Ic\it
pvT,4 h
iz%hx
sBucf
8W,9+p
EnESJA
8pJj`
cV8tB
_r'WT
p/;9d
m:X-6z
H!w6p=
&*5?Y
-}O8~!
bQSrb
L[/%E
d_zx?
%x%b@
>rGnm
)%jgB
G$Et[
9m>D-
oO{wO-
qI_8L
l`p\L
Fn)WWZ
G]bb$
P-x m
.*Bk#
w'cTp
-+-V,+O
g(,u4
\X[L@
V)@o|
g)0M,
zS-Vr-
u\ng'?
$;eJ<H
Rz=>YF
e\;a'
VS_VERSION_INFO
IHa}?<<
baP`g|
ub)-c
.O\6M
n0Ct@
;y-6Z_H
+''(-T
hIT7T
MLUT8
-646J5|
@K)D_
"S)Mu
:c_J7
c\DfG
BZ]ss
x#,!o
%Dg}L
SGGof
]jxdE
.%Rqz{
afO)z
UO/vY
Z'RpO(%
|,8)G
l_y)pY
&9k@d
cSN +
@#F@W
%,m g
x0a`/
D9m~S
4.w;~
+sF$c3z
461dzo
SJ1|pc
gF.K`
{49=Ii
L'y\e
W[qH~\S
q')qm
FE"M0
LqsWq
z6yH4j
O1T1B@
2hvi^
Df~8$
OpenClipboard
9zIQA
M-F,LP
=M{"jE&
RM&=6
e(Y69
PbER(He@
\+X5"
7V957
A(2$1r
e?HCO
t@+[
=$1,&
Mw>a*
$tI~MM?
SdV0D
9N7/.
_4G~r
(R&8V
SMALHB7
OP{&;
?1J,U
-)|8#
TyWv!
~LQr_
dDXl*
HE76q
0X.'?
9s2-J
XG&o_
zuqYq
KOa0>
7G@`]U
2ZdP)8
k2KitzJ
;*J=0
GlobalSign0
94**wma
*b/f`s
PWI`5
; <@a-
z@[eO
-~ga)
b: iO
9# Oc~
0X_.y
n~`#[
8"o09"/`
7rev<]#
ExitProcess
DBTb>91
93s\iz^
m!J22_
dSpmT
+ecsw<
=/eo6q
Krm2H
cEgNj
3A?x<
1q%k>FM
3~g/X
/Dp=g?C
Brh^i
ts+V{
&(]2p
,h4#x
[P6cm
ydd*=
MO-bu
XWx&A
vt%:=
FtQ0l'y
)2pn+
< -Nr
#V_^Z
;XkkZ
+~=,w
:jS#6.
Please wait while Setup is loading...
x:sru
i<CaV
F04k<
BePKd"!h
lD34h
va `P$
SVcE>/
C"E0b<
1=;q+
%bmKA
CreateDialogParamW
[90?5
/<\aU
G%01$
b +20<O
aHN+t
ipRM6
vs.AH
7-(-M^
p+Nr~
(^"'Dog
GetExitCodeProcess
;1X#INkIt
Qh?Vc\v
0ZrFC
LGLtPPp
[Rename]
+B4;G
*1/6#,c
G/?~_
eP;Fk
5qv}u
7;>3'
/bLz+
*Q\YB
C l-7
8t=ufyU
-DFFik
U\ng,0
@-|^U
:i'bl2SG
Z+';H
gb-.9A
)`k7OF
`,kSIl_
\EnK;#@{
{qwxD
RichEdit20W
]oG.v
fk4M`
GF^qq
1Qf!`Z
;N%;-
KAiz)
2)Uf_
VerQueryValueW
KDU_3,
@#URcA
:0d?
aX##%
FWt(y
TUzRM
j%EeHUm
OsNG)
)lW):
d_4Vu
"K(U(%
}1|_+I
GlobalLock
SHLWAPI
X~#$(
y<5Dy
21!AT
~3jux
q}`bNQ
GetPrivateProfileStringW
jowQ[
G7jn6
$wRo~
NE8wT
43!jK
y~|#K
*bCSj
4h*8{x
1=8-EF
(!L9e
y<9v|Z
UmG^O
a#PHZ
joXu?
EaP>k_
~KSQFJ
P;J%S
f9"s7
^G_{lb
Q=d=C
l. -}a
B_N-k
U6i8d
!UUHf
Gpo/U,
7"t:m
]%/A8jV9
SR{jo,
;6yN7
By(JGn
6[\Z?
x1\1Z
CE9nF
\eH'v
2ZMW\g
lLXwS
$3?U,d
!{6,i
t1]1b
'G4=2
{:noH~
,-cYyk
C+:8+4
InternalName
{3Y{@
j}*+)
/PN5;$
W)<~U_l
VIFM])
"|4msg
;f4Y)M
5/&Ni;q
AS(ib
9nPxG-
[:n)L
?Z\hR
wzb\oI
s]%4`v
PK|Z4
^@bmO
_NR5z
qR15`
EiSFKB
S&Ma0S=
j~$G5
(19dF
9Rn5`
>q]bx
bWkX3
HCIs&%
oCD[3
a`,;U
'_2M$z-
FindNextFileW
N^\;T
'Aa$@lo
=`vTD
#-k.w
'(_IWtn`
HnS-M
DdGm]
%z/b2
3:?3_
5BK@^
ViB6_
jsbI
'+|.l
"vX4b
A&,M7
h6>3u(
&?VI!
3]TwC
N$Y/4
dlx|FU
/IDgI
incomplete download and damaged media. Contact the
_*L#IaO
Oyk`w
'\Liif
(nnu~M
OG$d_
ddCc=z
Fw%+G
H:E|h
5+bCp
tFC8m
B<0crj]
NQ^rJ
)AG4j
dXQ%neG
8u>e=
:/.uv2a2
Mmlc*
CHlOb
\*|Y&
i=OEm~^
B6fx<
QO(4-
mS,}l
+//|D
u;Z!|(
cNN=Cu
$%*9
i^v,c
C0n]{,D
0xF8-g'Fg
f28F5&
Kwt?'F
d={h_
GetSystemMetrics
G&OU2
D$$SPS
lyq}g
Et[(_
Qk!`*
T=,Y(
8+aOf
:`Z H
%TY>>
_p |5p4
?9ahY3
S'1sjG
mXTvg
>fI,l
;4pV*
dzJiq\/
_{Yqy
Q0\Iq
80d+P
(E*<|
Wd9cZ
$k?Yy
CloseClipboard
K_j2fU
=Ax)U{u
TLj Z
Cdq67}.[
oN/oID
|)B(>
/-\":
~6K>"
F;hFP
18(`Is
}MZ%10
l.G##
=rd7y
[drBMs
;_'vqu
@c'uS
yO2W?
%iW3}sx)
pA:{B
p!l=.c
ue\j/DO
[a\/C^
PCb%7
c?c+S(
hS|J;
z#X5y
U7]S(
Vj#jP
=' '&
ds8v}
22'Xf
xJ"!}9
pBV^rLA<
=e'4lE
} >ZJ
X16N1
qde,j
/o,r0
,iPHQ
a-jZG
USER32.dll
g+yhXHm
UD$Cu
}=>1Q
aufJR
Y*myy
QO.^O
y<t?fpjL$
<^.O`
+%,Vo
Rj`ZI
j>MbS
wL\b'
@\3'd
<.5.1
E*.$X u
od+MY+
_0Kz8
]7;h0q
~GOH.
]1T6O
OIbjnvu
350 Fifth Ave Suite 52091
<)^/a
9P>QN
*i<H
ZopiW
P*00Z
THJLS
{&NSN
7u[/v
#$#kl
fOJ=1An
z.n@.
a=++)
nb8+J
Z_[6ee
Yp}R]g
%d~!T
lYU0|e
v-iD&
T&/VYm
wE~d0H
&6bA<
iB2<Z+O`7Z
a'g]mi,[
Vd0eJ!
,GJ{R7
V<*Ni
#Npz8
GetCurrentProcess
BeS*t
YAT2L
f`'l8O
vECY/
59f<
n$xQL
3]&UXd
f+Q>C
0d+:+
H9dj-
X-<{8
1WF?`
#4[<m
HVyk@Y
Xd6Y/
!im'tnXX
JI]jH
6u!01
H!%q!
\)1X4
.ndata
bgjIf/#ck
>]X4{
NM"9S
GetClassInfoW
0]X@X
x[=6{
X&j?53UV
IsG'*Q]
,K@Jn
gpz.|
JYoN`^
%B`$@
IO{2dFnH
GA=;KJf
XkNv+)
V`LskU
h&{hn
Z@!mJ>
E@(dY1r
kp;?y
-4Rx[~
urgYK
O1kn(
d9.DV
y@*iF
OleUninitialize
B\8 B^
|[MyD
c!62>
B,0-n
npy1#N@
<~-IKm
8?J`0
B8.%R
0R*.7n
!SA_3
:.izI
&L+EA
TBy50
tFb:pS
YhKhTx
8.1*j
h7\"O
Z*J!Dg
+!ifA\
4+!3n
b;lVot+0a
/"_Ln
C(ZyK
B}87@
nWs`F
b`LxLD#?R
&EV4;v
7Vj(q,
!Xvw7|
r44a>oR
^fyw.2$
mf@Z}
av.-{
]7W{X
&https://www.globalsign.com/repository/06
cz!nL
\s"'0
ShowWindow
N7!sKg
&h"UzH
=)3`.
|[LkZ8
>4I^4U
+fPzU
oa$Cw%1
b6vqBu4[
0*"?%%B
.lReW
>A$pL&ae
%#Ko8!,2
)6Fa8
;Pt.'
O!`eY
*6+k*
+IMtDT
]`4Gd
,X~g}FB
oTN!U
-Oh*74Ml
Q^Na_
{iI2H
6r^+Y>:
10&iZTFh
by/1YZ
{\M\j
2r|OT
K&&/_
j"f@/3&
V.M#jIz
~T:G1
)zUhu3
b-4@SP
UXTHEME
&x14_6
rZ=1L
b[8C'
|jb&6
85HO\^
?<"u:
9=GE1A
W<R?9
XZb8Tj
DWMAPI
$M>##
3# wd
x$CxeJ
a&_yV
Mg9=l
,t^eo&S\j
8+s!#
LookupPrivilegeValueW
9]"pK
PUMmG
7(fCK
=km&E
+XK=%o%@
),h9U
?;MLi>q/
@qqdt
qWIgz
WVDc#
fW7jE
"vtl
#pmlKz
'tAN!9`8
/kVfS
%C_^$
sa9W,D
ot^>B
xOJ9;Z
n|4s)0
6UES$
fA P|
dYH1/
MG@.USd
BQ!Ze
e?+[p
%N?:I*13
@jARop
(D.2d
b!K}3
?F[4[iUv
I\##t
`prlc
ylg.X
|0WH*
Sky:M
owr{r
f58ksIN
2S:?^
2RW\_T|P@
cJ!-y%
=dj;^NF
w)GL7
@p_r7
B%YE+m
I.!SA
GetLastError
Y }hP
hYA$D
'8x?
>;Zn ;
toNHC'
pJ5BTh'
4IJ0.#
[[w4,x
'*)P|
^l0*`E
"oyhB
}']yW
<\6@x
N~N&'
6}[EL#
KL!B%
+&/d,-U
7+FsIT4q
j=nj&
yu}atF
!MxLl`
7:]9u[
qa vk
@*VlH
e')9/
{;"r=
9Vm{[
e"8Y'
geGy2
_``GM
n3=,5
9:=pN
4Gxf9
CC_]`j+
pPxw`?Z
OTDE*
{6WgPX
<hWg/
0lz._8"
vr;R2
LgB!Q
f'n/9
Z@DK5
xln#a<},
US+4X-
<_g!.
f*ogp
::G|~Z
uGn=R
#porG$T@
QKgfI
J^,>m'?
-vdC:1
PE Information
| Image Base | Entry Point | Reported Checksum | Actual Checksum | Minimum OS Version | Compile Time | Import Hash | Icon | Icon Exact Hash | Icon Similarity Hash | Icon DHash |
|---|---|---|---|---|---|---|---|---|---|---|
| 0x00400000 | 0x000034a5 | 0x0021fa2e | 0x0021fa2e | 4.0 | 2018-01-30 03:58:43 | 1f23f452093b5c1ff091a2f9fb4fa3e9 |  |
2c09465cc979677d65781d9403176c31 | 5c00f471cce984e3b873ef9ade242aed | 71e0e4b8cccccce0 |
Version Infos
| Comments | For additional details, visit PortableApps.com |
|---|---|
| CompanyName | PortableApps.com |
| FileDescription | TypeFaster Typing Tutor Portable |
| FileVersion | 0.4.2.2 |
| InternalName | TypeFaster Typing Tutor Portable |
| LegalCopyright | 2007-2017 PortableApps.com, PortableApps.com Installer 3.5.10.0 |
| LegalTrademarks | PortableApps.com is a registered trademark of Rare Ideas, LLC. |
| OriginalFilename | TypeFasterPortable_0.4.2_Rev_2_English.paf.exe |
| PortableApps.comAppID | TypeFasterPortable |
| PortableApps.comFormatVersion | 3.5.10 |
| PortableApps.comInstallerVersion | 3.5.10.0 |
| ProductName | TypeFaster Typing Tutor Portable |
| ProductVersion | 0.4.2.2 |
| Translation | 0x0409 0x04b0 |
Sections
| Name | RAW Address | Virtual Address | Virtual Size | Size of Raw Data | Characteristics | Entropy |
|---|---|---|---|---|---|---|
| .text | 0x00000400 | 0x00001000 | 0x00006409 | 0x00006600 | IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ | 6.41 |
| .rdata | 0x00006a00 | 0x00008000 | 0x0000138e | 0x00001400 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 5.14 |
| .data | 0x00007e00 | 0x0000a000 | 0x00066358 | 0x00000600 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 4.00 |
| .ndata | 0x00000000 | 0x00071000 | 0x00158000 | 0x00000000 | IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 0.00 |
| .rsrc | 0x00008400 | 0x001c9000 | 0x000199f0 | 0x00019a00 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 7.54 |
Overlay
| Offset | 0x00021e00 |
| Size | 0x001fd370 |
| Name | Offset | Size | Language | Sub-language | Entropy | File type |
|---|---|---|---|---|---|---|
| RT_ICON | 0x001c9358 | 0x00012524 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.98 | None |
| RT_ICON | 0x001db880 | 0x000025a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.17 | None |
| RT_ICON | 0x001dde28 | 0x000010a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.51 | None |
| RT_ICON | 0x001deed0 | 0x00000ea8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.70 | None |
| RT_ICON | 0x001dfd78 | 0x00000988 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.65 | None |
| RT_ICON | 0x001e0700 | 0x000008a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.02 | None |
| RT_ICON | 0x001e0fa8 | 0x00000568 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.67 | None |
| RT_ICON | 0x001e1510 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.84 | None |
| RT_DIALOG | 0x001e1978 | 0x00000120 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.56 | None |
| RT_DIALOG | 0x001e1a98 | 0x00000200 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.68 | None |
| RT_DIALOG | 0x001e1c98 | 0x000000f8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.91 | None |
| RT_DIALOG | 0x001e1d90 | 0x000000ee | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.90 | None |
| RT_GROUP_ICON | 0x001e1e80 | 0x00000076 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.80 | None |
| RT_VERSION | 0x001e1ef8 | 0x00000610 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.41 | None |
| RT_MANIFEST | 0x001e2508 | 0x000004e1 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.29 | None |
Imports
| Name | Address |
|---|---|
| SelectObject | 0x40804c |
| SetBkMode | 0x408050 |
| CreateFontIndirectW | 0x408054 |
| SetTextColor | 0x408058 |
| DeleteObject | 0x40805c |
| GetDeviceCaps | 0x408060 |
| CreateBrushIndirect | 0x408064 |
| SetBkColor | 0x408068 |
| Name | Address |
|---|---|
| SHGetSpecialFolderLocation | 0x408178 |
| ShellExecuteExW | 0x40817c |
| SHGetPathFromIDListW | 0x408180 |
| SHBrowseForFolderW | 0x408184 |
| SHGetFileInfoW | 0x408188 |
| SHFileOperationW | 0x40818c |
| Name | Address |
|---|---|
| AdjustTokenPrivileges | 0x408000 |
| RegCreateKeyExW | 0x408004 |
| RegOpenKeyExW | 0x408008 |
| SetFileSecurityW | 0x40800c |
| OpenProcessToken | 0x408010 |
| LookupPrivilegeValueW | 0x408014 |
| RegEnumValueW | 0x408018 |
| RegDeleteKeyW | 0x40801c |
| RegDeleteValueW | 0x408020 |
| RegCloseKey | 0x408024 |
| RegSetValueExW | 0x408028 |
| RegQueryValueExW | 0x40802c |
| RegEnumKeyW | 0x408030 |
| Name | Address |
|---|---|
| ImageList_Create | 0x408038 |
| ImageList_AddMasked | 0x40803c |
| ImageList_Destroy | 0x408040 |
| Name | Address |
|---|---|
| OleUninitialize | 0x40829c |
| OleInitialize | 0x4082a0 |
| CoTaskMemFree | 0x4082a4 |
| CoCreateInstance | 0x4082a8 |
Usage
Processing ( 35.65 seconds )
- 32.486 ProcessMemory
- 3.037 CAPE
- 0.123 BehaviorAnalysis
- 0.006 AnalysisInfo
- 0.001 Debug
Signatures ( 0.07 seconds )
- 0.008 ransomware_files
- 0.007 antiav_detectreg
- 0.006 antianalysis_detectfile
- 0.005 ransomware_extensions
- 0.003 antiav_detectfile
- 0.003 infostealer_ftp
- 0.003 territorial_disputes_sigs
- 0.003 ursnif_behavior
- 0.002 antianalysis_detectreg
- 0.002 antivm_vbox_files
- 0.002 infostealer_bitcoin
- 0.002 infostealer_im
- 0.002 infostealer_mail
- 0.002 poullight_files
- 0.002 masquerade_process_name
- 0.001 bot_drive
- 0.001 antidebug_devices
- 0.001 antivm_vbox_keys
- 0.001 antivm_vmware_keys
- 0.001 geodo_banking_trojan
- 0.001 browser_security
- 0.001 uac_bypass_cmstpcom
- 0.001 disables_backups
- 0.001 disables_browser_warn
- 0.001 disables_power_options
- 0.001 azorult_mutexes
- 0.001 cryptbot_files
- 0.001 echelon_files
- 0.001 qulab_files
- 0.001 revil_mutexes
- 0.001 modirat_behavior
- 0.001 lokibot_mutexes
Reporting ( 0.04 seconds )
- 0.028 CAPASummary
- 0.007 JsonDump
Signatures
Queries the keyboard layout
Reads data out of its own binary image
self_read: process: TypeFasterPortable_0.exe, pid: 4172, offset: 0x00000000, length: 0x0021be27
self_read: process: TypeFasterPortable_0.exe, pid: 4172, offset: 0x30785c5e6331785c, length: 0x00004000
self_read: process: TypeFasterPortable_0.exe, pid: 4172, offset: 0x6531785c6331785c, length: 0x00004000
self_read: process: TypeFasterPortable_0.exe, pid: 4172, offset: 0x6539785c6331785c, length: 0x00004000
self_read: process: TypeFasterPortable_0.exe, pid: 4172, offset: 0x6564785c6331785c, length: 0x00004000
self_read: process: TypeFasterPortable_0.exe, pid: 4172, offset: 0x785c216562785c27, length: 0x00000004
The binary likely contains encrypted or compressed data
section: {'name': '.rsrc', 'raw_address': '0x00008400', 'virtual_address': '0x001c9000', 'virtual_size': '0x000199f0', 'size_of_data': '0x00019a00', 'characteristics': 'IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ', 'characteristics_raw': '0x40000040', 'entropy': '7.54'}
Yara detections observed in process dumps, payloads or dropped files
Hit: PID 4172 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'
Anomalous binary characteristics
anomaly: Entrypoint of binary is located outside of any mapped sections
Screenshots
No screenshots available.Hosts
No hosts contacted.
DNS
No domains contacted.
Summary
C:\Windows\System32\kernel.appcore.dll
\Device\CNG
\??\MountPointManager
C:\Users\Packager\AppData\Local\Temp\
C:\Users\Packager\AppData\Local\Temp
C:\Users\Packager\AppData\Local\Temp\nsg5E8E.tmp
C:\Users\Packager\AppData\Local\Temp\TypeFasterPortable_0.exe
C:\Users\Packager\AppData\Local\Temp\nsw5F3B.tmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp
C:\Users
C:\Users\Packager
C:\Users\Packager\AppData
C:\Users\Packager\AppData\Local
C:\Users\Packager\PortableApps\*.*
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\System.dll
C:\PortableApps
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\FindProcDLL.dll
C:\Windows\System32\smss.exe
C:\Windows\System32\csrss.exe
C:\Windows\System32\wininit.exe
C:\Windows\System32\services.exe
C:\Windows\System32\lsass.exe
C:\Windows\System32\fontdrvhost.exe
C:\Windows
C:\Windows\System32
C:\Windows\System32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
C:\Windows\System32\SearchIndexer.exe
C:\Windows\System32\dasHost.exe
C:\Windows\System32\SecurityHealthService.exe
C:\Program Files\Windows Defender\NisSrv.exe
C:\Windows\System32\SgrmBroker.exe
C:\Windows\System32\winlogon.exe
C:\Windows\System32\dwm.exe
C:\Windows\System32\sihost.exe
C:\Windows\System32\taskhostw.exe
C:\Windows\explorer.exe
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
C:\Windows\System32\ctfmon.exe
C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp
C:\Windows\System32\smartscreen.exe
C:\Windows\System32\SecurityHealthSystray.exe
C:\Users\Packager\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\Packager\AppData\Local\Microsoft\OneDrive
C:\Windows\ImmersiveControlPanel\SystemSettings.exe
C:\Windows\System32\ApplicationFrameHost.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\audiodg.exe
C:\Windows\System32\dllhost.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\System32\conhost.exe
C:\Windows\System32\upfc.exe
C:\Windows\System32\backgroundTaskHost.exe
C:\Windows\System32\CompatTelRunner.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1220_none_7e21bc567c7ed16b\TiWorker.exe
C:\Windows\WinSxS
C:\Windows\System32\MoUsoCoreWorker.exe
C:\Windows\System32\sppsvc.exe
C:\Windows\System32\SppExtComObj.Exe
C:\Windows\System32\en-US\USER32.dll.mui
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\modern-wizard.bmp
C:\Windows\System32\textinputframework.dll
C:\Windows\System32\CoreUIComponents.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\ntmarta.dll
C:\Windows\System32\WinTypes.dll
C:\Windows\SystemResources\USER32.dll.mun
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\nsDialogs.dll
C:\Windows\Fonts\staticcache.dat
C:\Windows\System32\TextShaping.dll
\Device\CNG
\??\MountPointManager
C:\Users\Packager\AppData\Local\Temp\
C:\Users\Packager\AppData\Local\Temp
C:\Users\Packager\AppData\Local\Temp\nsg5E8E.tmp
C:\Users\Packager\AppData\Local\Temp\TypeFasterPortable_0.exe
C:\Users\Packager\AppData\Local\Temp\nsw5F3B.tmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp
C:\Users
C:\Users\Packager
C:\Users\Packager\AppData
C:\Users\Packager\AppData\Local
C:\Users\Packager\PortableApps\*.*
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\System.dll
C:\PortableApps
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\FindProcDLL.dll
C:\Windows\System32\smss.exe
C:\Windows\System32\csrss.exe
C:\Windows\System32\wininit.exe
C:\Windows\System32\services.exe
C:\Windows\System32\lsass.exe
C:\Windows\System32\fontdrvhost.exe
C:\Windows
C:\Windows\System32
C:\Windows\System32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
C:\Windows\System32\SearchIndexer.exe
C:\Windows\System32\dasHost.exe
C:\Windows\System32\SecurityHealthService.exe
C:\Program Files\Windows Defender\NisSrv.exe
C:\Windows\System32\SgrmBroker.exe
C:\Windows\System32\winlogon.exe
C:\Windows\System32\dwm.exe
C:\Windows\System32\sihost.exe
C:\Windows\System32\taskhostw.exe
C:\Windows\explorer.exe
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
C:\Windows\System32\ctfmon.exe
C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp
C:\Windows\System32\smartscreen.exe
C:\Windows\System32\SecurityHealthSystray.exe
C:\Users\Packager\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\Packager\AppData\Local\Microsoft\OneDrive
C:\Windows\ImmersiveControlPanel\SystemSettings.exe
C:\Windows\System32\ApplicationFrameHost.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\audiodg.exe
C:\Windows\System32\dllhost.exe
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\System32\conhost.exe
C:\Windows\System32\upfc.exe
C:\Windows\System32\backgroundTaskHost.exe
C:\Windows\System32\CompatTelRunner.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1220_none_7e21bc567c7ed16b\TiWorker.exe
C:\Windows\WinSxS
C:\Windows\System32\MoUsoCoreWorker.exe
C:\Windows\System32\sppsvc.exe
C:\Windows\System32\SppExtComObj.Exe
C:\Windows\System32\en-US\USER32.dll.mui
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\modern-wizard.bmp
C:\Windows\System32\textinputframework.dll
C:\Windows\System32\CoreUIComponents.dll
C:\Windows\System32\CoreMessaging.dll
C:\Windows\System32\ntmarta.dll
C:\Windows\System32\WinTypes.dll
C:\Windows\SystemResources\USER32.dll.mun
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\nsDialogs.dll
C:\Windows\Fonts\staticcache.dat
C:\Windows\System32\TextShaping.dll
C:\Users\Packager\AppData\Local\Temp\nsw5F3B.tmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\System.dll
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\FindProcDLL.dll
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\modern-wizard.bmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\nsDialogs.dll
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\System.dll
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\FindProcDLL.dll
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\modern-header.bmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\modern-wizard.bmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp\nsDialogs.dll
C:\Users\Packager\AppData\Local\Temp\nsg5E8E.tmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp
C:\Users\Packager\AppData\Local\Temp\nsb5F5B.tmp
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\TypeFasterPortable_0.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg 2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_CURRENT_USER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\TypeFasterPortable_0.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg 2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-10e03f000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-100000000000}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{01989354-0000-0000-0000-300300000000}\Generation
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
Local\SM0:4172:168:WilStaging_02
Local\MSCTF.Asm.MutexDefault3
CicLoadWinStaWinSta0
Local\MSCTF.CtfMonitorInstMutexDefault3
Local\MSCTF.Asm.MutexDefault3
CicLoadWinStaWinSta0
Local\MSCTF.CtfMonitorInstMutexDefault3
Sorry! No behavior.
Sorry! No strace.
Sorry! No tracee.
No hosts contacted.
No TCP connections recorded.
No UDP connections recorded.
No domains contacted.
HTTP Requests
No HTTP(s) requests performed.
SMTP traffic
No SMTP traffic performed.
IRC traffic
No IRC requests performed.
No ICMP traffic performed.
CIF Results
No CIF Results
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Suricata HTTP
No Suricata HTTP
Sorry! No Suricata Extracted files.
Sorry! No dropped files.
Sorry! No process dumps.
Sorry! No process dumps.