MZ@ !L!This program cannot be run in DOS mode. $϶GgGgGg嚘nDg嚘lBg嚘oHg嚘jdgGg2f嚘kFg嚘yg嚘hFg嚘mFgRichGgPELAPT!  6"pP0yp'@A!]t&h''xXE8\&pxC.text56 `.datak"PT:@.idata~$&&@@.didat@&@.rsrc'@@.relocxX'Z@B\P4y 0y>pVy\0y5p !"@%& 79 :@<<=p==>>pJJ@KL0о` 0@P`p 0@P`p0Pp0Pp0 0@Pp`P  P@p0P0p P  #$% &*,0-`-/2 4`44`555`88p;==>???@`@`CCH`I@J KKLM`N0OPPQpR@STTUVpW@X YZZ[\]P^ __`a`b@cd0lPnnnn@s`sPzpzzzz з` @ `` @p@` ` !! ""P##01234`5P6@7 8 B CDDEFGHISSTUVW`X@Y ZZp[0\^^0_``@aapbbcddguu@vvv@www0xxx ypyyz`zz{P{{{P||}`}}~~Pp@ P P@PP@p` p@P  ```0pp!!"#`##(p)*, 004 556`78 ; =P??@AB@CC0DDE`FFFPGGHH`IJKPKKK@LL0M@M [0[\]0]`]]^Ph@k`o`s{} ~ Ё0PБ0PpPPpp @ б @Pп0@ `P`p0pp@```0 0@@@ `PqI(qAAT$ydM^)P"[ exH a UQSVHP4y3WH29\4y7I_=\4y 8H=[4y<8H=[4yl8H=[4y8H=[4y8H3=[4y8H =`P4yt EPuVHR=[4y 9H=[4y=9H=[4ym9H=[4y9H4=[4y9Hl=[4y9H=[4y-:H=[4y]:H=[4y:HB=[4y:H=[4y:H=[4y;H=[4yM;H=[4y};HP=[4y;H=[4y;H=[4y <H=[4y=<H=[4ym<HR=[4y<H=[4y<H=[4y<H=[4y-=H8=[4y]=H^=[4y=H=[4y=H=[4y=H=|[4y>H=x[4yM>HP=t[4y}>H=p[4y>H=l[4y>H=h[4y ?H.=d[4y=?Hd=`[4ym?H=\[4y?H=X[4y?H=T[4y?H:=P[4y-@Hl=L[4y]@H=H[4y@H=D[4y@H =@[4y@H<=<[4yAH$=\P4yHR=8[4y7AKN_^[]h`0yd5D$l$l$+SVWP4y1E3ʼnEPeuEEEEdÐUUM ] U} ]j0hH0yoE3uE 0} RE tu5=\4yB0}tZEuu uEu}t9Euu uCEu} >E EE 0y?O0ySO0ycO0ywO0yO0yO0yO0yO0yO0yO0y)P0y=P0yJP0y^P0yP0yP0y} ËM3Md Y__^[]QÐ$0yM#0y0y 0y 0yfjj3ÐUP4y3ʼnE} SVW} 3@M_^3[] ; P4y4Euu uEu=\4y@/fdwReason(%d) pszCmdLine(%s)NS_ElevateCreateProcess::InitializeHooksMultiUVW} +!0yuPVh,!0yh1hL!0yh!0yjVyd4P4y_^] ElevateCreateProcessAPT,"" "("&"5"A"NULL.dllGetHookAPIsNotifyShims#0y%#0y*0y"0y #0yUEu$E 3jjDP4yJfDP4y]Hgwd"0y$P"0yU eF]jK 0y$0yPP4yHP4yLP4y@P4y)UQP4y3ʼnEVu3;u sWu>t pVy׃;u r_M3^@]Ð%Vy%Vy%VyUSVuWu} V"غD'0y+!0yRVPWhH'0yhhT'0yhl'0yjVy$_^[] ")%S%s%s%s ShimLib::GetHookAPIsShimLibh'0yW,Vy)AccelGdipFlushh'0yW,Vy)Armadilloh(0yW,Vyk)BIOSReadbhL(0yW,VyK)CustomNCRender4h(0yW,Vy)DelayAppDllMainh(0yW,Vy)DirectXVersionLieh)0yW,Vy)DXMaximizedWindowedModehp)0yW,Vy)EmulateBitmapStride}h)0yW,Vyf)EmulateClipboardDIBFormat;h*0yW,Vy$)EmulateEnvironmentBlockhh*0yW,Vy)EmulateSortingh*0yW,Vy)EmulateSortingVistah*0yW,Vy)EmulateSortingWindows61[hL+0yW,VyD~)FailObsoleteShellAPIs!h+0yW,Vy t)FaultTolerantHeaph+0yW,Vyr)FeedbackReporth(,0yW,Vyv)FixDisplayChangeRefreshRate{h,0yW,Vyd^)Force640x480Sh,0yW,Vy',%0yF 90yF1yF FFF,%0yF90yF 01yF$F(F,F0,%0yF4,90yF8p1yF<F@FDFH,%0yFL490yFP1yFTFXF\0h%0yh7hL!0yh!0yjVy4P4y_^] CreateProcessACreateProcessWWinExecRegisterWaitForInputIdleC33=0P4y P4y0P4yGh90yP0Vyu64P4y_8P4y^] NoManifestCheck90yL("8P4yUVVyEtV6Y^]90yÐ :0y4:0y<:0y\4yWRPMitigationCreateFileAMoveFileAMoveFileWRegCreateKeyARegCreateKeyWRegCreateKeyExARegCreateKeyExWRegOpenKeyExARegOpenKeyExWCreateFileWCopyFileACopyFileWCopyFileExAVERSION.DLLRegSetValueExARegSetValueExWRegSetValueARegSetValueWNS_WRPMitigation::InitializeHooksMulti3H SمtItD3VWrw3w.d0VjpVytVSW D>_^[3_^[3[ÐUVut&u"wtPd0jpVy^]3UQP4y3ʼnE,P4yS]VW}SWuu upVy֋nM_^3[_]UQP4y3ʼnE,P4yS]V|W}SWuu upVy֋vM_^3[]UQP4y3ʼnES]$,P4yVWu(}dSu Wuuuu upVy֋rM_^3[]$UQP4y3ʼnE,P4yVWuu}uuu WpVy֋9M_3^/]EPuVU P4y3ʼnEE UMS]VuW}E PWVRQP,P4ySΉpVy֋ƋM_^3[]UQP4y3ʼnE,P4yVupVy֋ M3^0]=(P4y(P4yoU P4y3ʼnES]VW} |+!0yuPVh,!0yhXhh;0yhX:0yjVydxjVyt!MZf9uH<<PEu |SYt,P4yM_^3[^] ,P4y@x,%0y@|h:0yǀ=0yǀǀǀǀ,%0yǀ:0yǀ@K0yǀǀǀǀ,%0yǀ G0yǀ>0yǀǀǀǀ,%0yǀG0yǀp3yǀǀǀǀ,%0yǀt:0yǀ3yǀǀǀǀ,%0yǀ:0yǀ3yǀǀǀǀ,%0yǀ $G0yǀ3yǀǀǀǀ ,%0yǀ$0G0yǀ(03yǀ,ǀ0ǀ4ǀ8,%0yǀ<[4yEPuVVh.0y5PP4yVyu \4yuj.[4y}EPuV跅h.0y5PP4yVyu \4yuj菅[4yMEPuVLQh/0y5PP4yVyu \4yuj$[4yEPuV耖!h`/0y5PP4yVyu \4yujX[4yEPuV胜h/0y5PP4yVyu \4yuj[[4yEPuV+h/0y5PP4yVyu \4yuj[4yEPuVFhP00y5PP4yVyu \4yuj[4y]EPuVah00y5PP4yVyu \4yuj`[4y-EPuV;1h00y5PP4yVyu \4yuj[4yEPuVh10y5PP4yVyu \4yuj[4yEPuVhH10y5PP4yVyu \4yujr|[4yEPuVFh10y5PP4yVyu \4yujx[4ymEPuV#qh10y5PP4yVyu \4yujw#t[4y=EPuV Ah<20y5PP4yVyu \4yuj p[4y EPuV Gh20y5PP4yVyu |\4yujFl[4yEPuV!(h20y5PP4yVyu x\4yuj'h[4yEPuV;0h$30y5PP4yVyu t\4yuj0d[4y}EPuV6hp30y5PP4yVyu p\4yuje6`[4yMEPuV<Qh30y5PP4yVyu l\4yuj<\[4yEPuV"C!h40y5PP4yVyu h\4yujBX[4yEPuVbIhT40y5PP4yVyu d\4yuj:IT[4y齿EPuVOh40y5PP4yVyu `\4yujOP[4y鍿EPuVV鑿h40y5PP4yVyu \\4yujUL[4y]EPuVI\ah050y5PP4yVyu X\4yuj!\H[4y-EPuVb1h|50y5PP4yVyu T\4yuj_bD[4yEPuVhh50y5PP4yVyu P\4yujh@[4y;EPuVoѾh 60y5PP4yVyu L\4yuj\o<[4y靾EPuV鷾hP60y5PP4yVyu H\4yuj8[4y郾 P4y+!0yQhVyuPjh$`0yPVytWP,P4ypVy֋CjVy6WRPMj{jVy3FkVuj@VytHEPuVjSVyt,觋t!Sh`0yhh`0yhX:0yjVyGVVy^'Patched %s to ignore WRPNS_WRPMitigation::MySfpIsFileProtectedAP4yP4y>4yp0yDelayAppDllMainShrinker[ApiName] Hook Entered(ShimLib) Hook Entered((ULONG_PTR)(Padder->Heap) & (ULONG_PTR)0xFFFF) == 0NS_FaultTolerantHeap::FthEncodePadderbogus address: %p, %p NS_FaultTolerantHeap::FthIsNtHeapBlockbuffer overrun: %p, %p, %p NS_FaultTolerantHeap::FthRecognizeHeapBlockwrong heap: %p, %p double free: %p, %p Pipe != NULL && Pipe != INVALID_HANDLE_VALUEOverlapped != NULL && Overlapped->hEvent != NULLNS_FaultTolerantHeap::FthPipeWriteMessageFailed to write message to the pipe. Pipe write message timed out. %allusersprofile%%userprofile%D LD*]+H`%\%\ \[06>L[%\\[ \[L[)4K\HI%\[\[)4K\HI%\[\[\>BIOSReadDirectXVersionLieEmulateBitmapStrideEmulateEnvironmentBlockFailObsoleteShellAPIsFaultTolerantHeapFeedbackReportForce640x480Force8BitColorForceDXSetupSuccessForceMessageBoxFocusGlobalMemoryStatus2GBHandleBadPtrIgnoreOleUninitializeLoadLibraryCWDMoveToCopyFileShimNonElevatedIDriverProfilesEnvStringsProfilesGetFolderPathProfilesRegQueryValueExRedirectBDERedirectMP3CodecSessionShimSyncSystem32AndSysWow64SyncSystemAndSystem32VerifyVersionInfoLiteVirtualRegistryVistaRTMVersionLieVistaSP1VersionLieVistaSP2VersionLieWin2k3RTMVersionLieWin2k3SP1VersionLieWin7RTMVersionLieWin8RTMVersionLieWinXPSP1VersionLieWinXPSP2VersionLieWinXPSP3VersionLieWinXPVersionLieWRPDllRegisterWRPRegDeleteKeyGetVersionGetProcAddressLoadLibraryAGetEnvironmentVariableACloseHandleNTDLL.DLLNULLUSER32.DLL[ParseCommandLine] Illegal command lineNotifyFn returned FALSE, fail load shim/F}d@bH>PXRLCHECK: Error opening activation context with err %d.RLCHECK: ActCtx Query failed with err %d.TMP=%TMP%TEMP=%TEMP%PROMPT=%PROMPT%winbootdir=%WINDIR%PATH=%WINDIR%COMSPEC=%COMSPEC%WINDIR=%WINDIR%CompareStringWCompareStringALCMapStringWLCMapStringAIsNLSDefinedString CompareStringExLCMapStringExFindNLSStringExFindNLSString kernelbase.dllGetFileVersionInfoSizeWClient->Watson == &(Client->WatsonInPassiveMode)ChangeDisplaySettings could not change the settingsCould not enumerate using EnumDisplaySettingsException trying to change mode(ShimLib) Mitigation Failure[ApiName] Mitigation Failuredsetup.dlldsetupdsetup32.dlldsetup32OLE32.DLLCoCreateInstanceSOFTWARE\Microsoft\Windows\CurrentVersion\RunSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell FoldersSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell FoldersPersonalRegQueryValueExARegQueryValueExWRegOpenKeyARegOpenKeyWGlobal\Local\Session\NS_SyncSystem32AndSysWow64::IsFileToSyncSystem32GetFileVersionInfoSizeANS_SyncSystemAndSystem32::IsFileToSyncERROR OUT OF MEMORYHKCRHKCCHKCUHKLMHKUSHKPDHKDDROOTHKCR\ Path=%S Path=%S\%S Value=%S Result=%SRegDeleteKeyARegDeleteKeyWHKLM\Software\Microsoft\Windows\CurrentVersionDirectoryHKLM\HKLM\SYSTEM\CurrentControlSet\EnumBitsPerPixel%d,%dResolutionProductNameHKLM\Software\Microsoft\Windows NT\CurrentVersionCSDVersionCurrentVersion5.0Microsoft Windows 20005.1Microsoft Windows XPHKLM\Software\Microsoft\DirectXVersionPathHKLM\Software\Microsoft\Internet ExplorerMajorVersionDefault|EMULATEDRENDERKSRENDEREMULATEDCAPTUREKSCAPTURE[DSRETURNWRITEPOSITION] Unabled to add DirectSound hackCurrentBuildNumber2600Service Pack 1Service Pack 22165Service Pack 337905.2Microsoft Windows Server 2003HKCR\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{4CB63E61-C611-11D0-83AA-000092900184}CLSID{4CB63E61-C611-11D0-83AA-000092900184}FilterDataFriendlyNameTrueMotion 2.0 DecompressorHKCR\CLSID\{4CB63E61-C611-11D0-83AA-000092900184}HKCR\CLSID\{4CB63E61-C611-11D0-83AA-000092900184}\InprocServer32%windir%\system32\tm20dec.axThreadingModelBothHKCR\CLSID\{4CB63E62-C611-11D0-83AA-000092900184}TrueMotion 2.0 Decompressor Property PageHKCR\CLSID\{4CB63E62-C611-11D0-83AA-000092900184}\InprocServer32HKCR\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{B4CA2970-DD2B-11D0-9DFA-00AA00AF3494}{B4CA2970-DD2B-11D0-9DFA-00AA00AF3494}Indeo audio softwareHKCR\CLSID\{B4CA2970-DD2B-11D0-9DFA-00AA00AF3494}HKCR\CLSID\{B4CA2970-DD2B-11D0-9DFA-00AA00AF3494}\InprocServer32%windir%\system32\iac25_32.axHKCR\CLSID\{B4CA2971-DD2B-11D0-9DFA-00AA00AF3494}Indeo audio software Property PageHKCR\CLSID\{B4CA2971-DD2B-11D0-9DFA-00AA00AF3494}\InprocServer32HKCR\CLSID\{C83B5610-E0DF-11D0-9E00-00AA00AF3494}About Indeo audio softwareHKCR\CLSID\{C83B5610-E0DF-11D0-9E00-00AA00AF3494}\InprocServer32HKLM\Software\Microsoft\Windows NT\CurrentVersion\drivers.descHKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32msacm.iac2HKLM\System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\Winmmwheelvidc.iv31ir32_32.dllvidc.iv32vidc.iv41ir41_32.axHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}Indeo video 4.4 Decompression FilterMeritHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\InprocServer32%windir%\system32\ir41_32.axHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\Pins\InputAllowedManyAllowedZeroConnectsToPinOutputDirectionIsRenderedHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\Pins\Input\Types\{73646976-0000-0010-8000-00AA00389B71}\{31345649-0000-0010-8000-00AA00389B71}HKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\Pins\OutputInputHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\Pins\Output\Types\{73646976-0000-0010-8000-00AA00389B71}\{00000000-0000-0000-0000-000000000000}HKCR\CLSID\{87CA6F02-49E4-11CF-A3FE-00AA003735BE}IVI Decode OAHKCR\CLSID\{87CA6F02-49E4-11CF-A3FE-00AA003735BE}\InprocServer32HKCR\CLSID\{87CA6F04-49E4-11CF-A3FE-00AA003735BE}IVI Encode OAHKCR\CLSID\{87CA6F04-49E4-11CF-A3FE-00AA003735BE}\InprocServer32HKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}Indeo video 4.4 Compression FilterHKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\InprocServer32HKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\Pins\InputHKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\Pins\Input\Types\{73646976-0000-0010-8000-00AA00389B71}\{00000000-0000-0000-0000-000000000000}HKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\Pins\OutputHKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\Pins\Output\Types\{73646976-0000-0010-8000-00AA00389B71}\{31345649-0000-0010-8000-00AA00389B71}HKCR\CLSID\{BD323430-CE94-11CE-82DD-0800095A5B55}IVI Decode Sequence Property PageHKCR\CLSID\{BD323430-CE94-11CE-82DD-0800095A5B55}\InprocServer32HKCR\CLSID\{BD323431-CE94-11CE-82DD-0800095A5B55}IVI Decode Frame Property PageHKCR\CLSID\{BD323431-CE94-11CE-82DD-0800095A5B55}\InprocServer32HKCR\CLSID\{BD323432-CE94-11CE-82DD-0800095A5B55}IVI Encode Sequence Property PageHKCR\CLSID\{BD323432-CE94-11CE-82DD-0800095A5B55}\InprocServer32HKCR\CLSID\{BD323433-CE94-11CE-82DD-0800095A5B55}IVI Encode Parameters Property PageHKCR\CLSID\{BD323433-CE94-11CE-82DD-0800095A5B55}\InprocServer32HKCR\Filter\{31345649-0000-0010-8000-00AA00389B71}HKCR\Filter\{A2551F60-705F-11CF-A424-00AA003735BE}HKCU\Software\Intel\Indeo\4.1AccessKeyBiDirPredictionEnabledAccessKeyMinViewportHeightMinViewportWidthPlaybackPlatformQuickCompressScalabilityTransparencyvidc.iv50ir50_32.dllHKCR\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{1F73E9B1-8C3A-11D0-A3BE-00A0C9244436}{1F73E9B1-8C3A-11D0-A3BE-00A0C9244436}Indeo video 5.10 Compression FilterHKCR\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{30355649-0000-0010-8000-00AA00389B71}{30355649-0000-0010-8000-00AA00389B71}Indeo video 5.10 Decompression FilterHKCR\CLSID\{1F73E9B1-8C3A-11D0-A3BE-00A0C9244436}HKCR\CLSID\{1F73E9B1-8C3A-11D0-A3BE-00A0C9244436}\InprocServer32%windir%\system32\ir50_32.dllHKCR\CLSID\{2DE89781-DBF6-11D0-A30E-444553540000}Indeo video 5.10 Encode Parameters Property PageHKCR\CLSID\{2DE89781-DBF6-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{30355649-0000-0010-8000-00AA00389B71}HKCR\CLSID\{30355649-0000-0010-8000-00AA00389B71}\InprocServer32HKCR\CLSID\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\Instance\Indeo video 5.10 Compression FilterEncoderTypeHKCR\CLSID\{665A4443-D905-11D0-A30E-444553540000}Indeo video 5.10 Decode Sequence Property PageHKCR\CLSID\{665A4443-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{665A4444-D905-11D0-A30E-444553540000}Indeo video 5.10 Decode Frame Property PageHKCR\CLSID\{665A4444-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{665A4445-D905-11D0-A30E-444553540000}Indeo video 5.10 Encode Sequence Property PageHKCR\CLSID\{665A4445-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{665A4448-D905-11D0-A30E-444553540000}Indeo video 5.10 Decode OAHKCR\CLSID\{665A4448-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{665A444A-D905-11D0-A30E-444553540000}Indeo video 5.10 Encode OAHKCR\CLSID\{665A444A-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{84725EA1-2FBC-11D1-BC86-00A0C969FC67}Indeo video 5.10 About RTE Property PageHKCR\CLSID\{84725EA1-2FBC-11D1-BC86-00A0C969FC67}\InprocServer32HKCR\CLSID\{C1C0FE00-F3C2-11D0-91D4-444553540000}Indeo video 5.10 About Encoder Property PageHKCR\CLSID\{C1C0FE00-F3C2-11D0-91D4-444553540000}\InprocServer32HKCR\CLSID\{E369A160-F3C2-11D0-91D4-444553540000}Indeo video 5.10 About Decoder Property PageHKCR\CLSID\{E369A160-F3C2-11D0-91D4-444553540000}\InprocServer32HKCR\Interface\{665A4447-D905-11D0-A30E-444553540000}IIndeoDecodeOAHKCR\Interface\{665A4447-D905-11D0-A30E-444553540000}\ProxyStubClsid{00020424-0000-0000-C000-000000000046}HKCR\Interface\{665A4447-D905-11D0-A30E-444553540000}\ProxyStubClsid32HKCR\Interface\{665A4447-D905-11D0-A30E-444553540000}\TypeLib{665A4446-D905-11D0-A30E-444553540000}1.0HKCR\Interface\{665A4449-D905-11D0-A30E-444553540000}IIndeoEncodeOAHKCR\Interface\{665A4449-D905-11D0-A30E-444553540000}\ProxyStubClsidHKCR\Interface\{665A4449-D905-11D0-A30E-444553540000}\ProxyStubClsid32HKCR\Interface\{665A4449-D905-11D0-A30E-444553540000}\TypeLibHKCR\TypeLib\{665A4446-D905-11D0-A30E-444553540000}\1.0Indeo video custom control type libraryHKCR\TypeLib\{665A4446-D905-11D0-A30E-444553540000}\1.0\0\win32HKCR\TypeLib\{665A4446-D905-11D0-A30E-444553540000}\1.0\FLAGSHKCR\TypeLib\{665A4446-D905-11D0-A30E-444553540000}\1.0\HELPDIR%windir%\system32Indeo video 5.10.aa.aif.aifc.aiff.cda.cdda.itl.itms.itpc.m3u.m4a.m4b.m4p.m4v.mov.mp2.mp3.mpeg.mpg.pcast.pls.rmp.wav.waveHKLM\SYSTEM\ControlSet001\Control\ProductOptionsHKLM\SYSTEM\ControlSet002\Control\ProductOptionsHKLM\SYSTEM\ControlSet003\Control\ProductOptionsHKLM\SYSTEM\CurrentControlSet\Control\ProductOptionsOLEViewer TypeLib Interface ViewersOLEViewer Automation Interface ViewersOLEViewer IPersist Interface ViewersOLEViewer IUnknown Interface ViewerOLEViewer UDT Interface ViewersCLSID\{28D8ABA0-4B78-11CE-B27D-00AA001F73C1}CLSID\{57EFBF49-4A8B-11CE-870B-0800368D2302}CLSID\{64454F82-F827-11CE-9059-080036F12502}CLSID\{7CE551EA-F85C-11CE-9059-080036F12502}CLSID\{7CE551EB-F85C-11CE-9059-080036F12502}CLSID\{D2AF7A60-4C42-11CE-B27D-00AA001F73C1}Interface\{0000001D-0000-0000-C000-000000000046}Interface\{00000020-0000-0000-C000-000000000046}Interface\{0000013D-0000-0000-C000-000000000046}Interface\{0000013E-0000-0000-C000-000000000046}Interface\{FC37E5BA-4A8E-11CE-870B-0800368D2302}Interface\{00000000-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{00000109-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{0000010C-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{0000010E-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{00020400-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{00020401-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{00020402-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{7FD52380-4E07-101B-AE2D-08002B2EC713}\OLEViewerIViewerCLSIDInterface\{BD1AE5E0-A6AE-11CE-BD37-504200C10000}\OLEViewerIViewerCLSIDComponent Categories\{64454F82-F827-11CE-9059-080036F12502}ReleaseProcessVidPnSourceOwnersAndRetryWindows Vista (TM) Ultimate6.060016.176006.29200Service Pack %dService Pack %dGetVersionExAGetVersionExWRtlGetVersion[%S] [%S][%S] error 0x%08x logging [%S] RegCreateKeyW: wrp key is mitigatedNULLVyQRPhxC4yYZYUcsm9Eu u PYY]3]ÐUjxVyu|Vyh VyPtVy]ÐU$Q4y Q4yQ4yQ4y5Q4y=Q4yQ4y Q4yQ4yQ4y%Q4y-|Q4yQ4yEQ4yEQ4yEQ4yP4yQ4yP4yP4y P4yP4yjXkǀP4yjX P4yP4yjX P4yP4yjXk P4yLjX P4yLh`0y]ÐU죠Q4y Q4yQ4yQ4y5Q4y=Q4yQ4y Q4yQ4yQ4y%Q4y-|Q4yQ4yP4yEQ4yEQ4yQ4yP4yP4y P4yP4yjXkǀP4yh`0y]Ðjh0y`e] Ë}NjuueO}x+uMpVyU3@EEb}] uEu uWSV)ÐX0yjh0yS`eMxFu+u uMpVyUEE܋E܋EE8csmt EEVyeEaϽ0y0yjh0y_3uuu܋] };u}MpVyU}Fu3@EEQa] }Euܐu uVSWÐ0y%Vy%Vy%VyUE3SVWH<AYt} p ;r H;r B(;r3_^[]ÐUjh0yh`0ydPSVWP4y1E3PEdeEh0ytTE-0yPh0yVt:@$ЃEMd Y_^[]ËE3Ɂ8ËeE3Md Y_^[]Ðƿ0yٿ0yUEMZf9t3]ËH<39PEu f9Q]ÐUuuu uh 0yhP4y ]Ð%Vy%Vy%$Vy%(Vy%,Vy%0Vy%`Vy% Vy% Vy%Vy%Vy%Vy%Vy%Vy%Vy%Vy%Vy%Vy%Vy%Vy%Vy Vy"VyVyVy VyVy҉$Vy‰(Vy鲉,Vy颉8VyQRPhC4y虉ZY4VyՐ%(VyMd Y__^[]QÐM3 ^ېM3]ʐPd5D$ +d$ SVW(衈P4y3PuEEdÐPd5D$ +d$ SVW(衈P4y3PEuEEdÐPd5D$ +d$ SVW(衈P4y3PeuEEdÐPd5D$ +d$ SVW(衈P4y3PEeuEEdÐ%$Vy% Vy%Vy%Vy% Vy%Vy%Vy% Vy%Vy%Vy%`Vy%$Vy%Vy%,Vy%Vy%Vy%0Vy%Vy%(Vyjjh4y54yVyP(Vyu(h0yhh0y5]4yjVyjVyd8%4yFailed to restore original entry pointNS_DelayAppDllMain::PatchedExeEntryPoint4[4yaÐ=D\4ytAh,a0yjThd0y a0yVjVyD\4y4ythDa0yֹ`0y0UjhwuVy]NS_Shrinker::APIHook_ExitProcess=E\4ytAh,a0yj@h0y a0yVjVyE\4y4ythDa0yֹ`0y@0t$t$t$t$VyNS_Shrinker::APIHook_LdrAccessResource%ȣ4y33ÐUE Q# Q3] 3 UEP3@k0yPh0y`Vy ]4c0y1y1yP4yc0y[H82 X   HH    H$H(A,6P!0p4H2<F A6p H2H  HpH2DpH 2DHpH 2DHpH<2l$ HH HH  N   $ ( ,H0P!4p8HL20$HH H H    $ ( , 0H4 8Z <~H@P!DpHH,2 $ HH H   H P!$p(M=My=M9Mi=T$B J3HU0y="94y84yMDt =M=M<T$\X3T J3T40y"94yM<M<M<M<M{<Ms<T$B l3OT0yD"x94yP94yM<M<T$B J3S0y"94y94yM;-0yT$B J3SJ3Sx0yz"80y:4yMW;MO;T$B J3.SJ3$S0y" ;4y,;4yM:M:T$B J3RJ3R80y":4y:4yM:M:T$B J3nRJ3dR0yY"@:4y`:4yM7:M/:T$B J3RJ3R0y":4y:4yM9M9M5M9M9T$B J3Qh0y" x;4yP;4yMg90yT$B J3+QJ3!Q0y"0y;4yM80yT$B J3PJ3PP0y"0y;4y|8y0yT$B 3@PJ36P0y+"0y,<4y80yT$B 3OJ3O80y"0y<4yM7M7T$B J3nO0yc"<4y=4yMC7M;7M[3M+7M#7M7T$B J3N0y" P=4y,=4yM6M6M6T$B J3NJ3Nh0y"<4y<4yMg6M_6MW6T$B J36NJ3,N0y!"P<4yx<4yM50yT$B J3M80y"0y,>4yM5a0yT$B J3[M0yP"l0y>4yM/50yT$B J3L0y"0y=4yM4M\0T$B J3L\0y"=4y=4yT$B J3ZL0yO"P>4y`>4y,4!4T$B 3KJ3K0y">4yM310yT$B J3Kp0y"<0y ?4yM_30yT$B J3#K0y"0y>4yM20yT$B J3J@0y" 0y>4yM2M$.T$B J3fJ0y[">4y>4yT$B J3"J0y"D?4yT?4y_0yT$B J3I,0y"0y U0yT$B J3{IJ3qI0yf"\0yMC10yT$B J3I0y"0y4@4yM0M0M,M0M0M0T$B J3HJ3Hx0y}" ?4yx?4yMW0MO0T$B J3.H0y#"?4y@4yM00yT$B J3G40y"0yX@4yM/M/M+M/M{/Ms/Mk/T$B J3JG0y?" @4y@4yM/0yT$B J3FJ3F0y"0y...T$B 3~FJ3tF0yi"A4yA4yMG.0yT$BJ3F0y"0yM-M-M*M-T$B̋J3ED0y"DA4yM-m0yT$BJ3_E0yT"x0yM3-0yT$B J3D0y"0y|@4yM,-0yT$B J3Dl0y"80y A4y`,0yT$31D J3$D0y"0y+++T$B 3CJ3CL0y"tA4yA4yM+M{+Ms+T$B J3RCJ3HC0y=" B4y4B4yM+0yT$B J3B0y"0yXB4yM*M *T$B J3Bx0yy"B4yMW*0yT$B J3+B0y "0yM)M)T$B J3A$0y"B4yM%M)M~%T$B J3zA0yo"|B4yM2%0yT$B J3#A0y"0yM(0yT$B J3@00y" 0yEt eM(ÐY0yT$B J3g@0y\"p0yM;(M0(M%(M(M (T$B J3? 0y"B4yM'50yT$B J3?d0y"@0yMh'M 锓T$B J3(0y"0y C4yM<M&T$B J3~>|0ys"B4yB4yMS&0yT$B J3>0y "0yDC4yM/< 0yT$B J3=<0y"0yP4y+!0yd3 \TP4y =TP4y.e;!e5,P4yhLh0yhZhh;0yhX:0yjVy3[|R[[,P4y\,P4ySWuu upVyׅu1PP34Vyt 3hP0y3?X3PVy*X,P4ySWu|u upVyׅu1PP34Vyt 3h0y]37X3PVy"XE(t,P4ySWju }upVy׃uU MSuH u'4Xu1PP34Vyt 3h0y3 X3PVyWE(t,P4ySWju }|upVy׃uU MSug u'eu1PP34Vyt 3hh0y13d3PVydjjW4Vyt#h0y3ҋuUM 3WWjjW4Vyt#hP0y3ҋuUM 3ddVyIed u *eeQhVytwPjh`0yPVytXWP,P4ypVy֋djVyddPVy@P4y4ytu>\4yu؋E!83udu9=4yu4yHtc9=\Vyt"h,1yhwh1y5]4yjVy_h\1y54y0VyYYuB\Vy9=`Vyv6t-hh1yhh1y5]4yjVyt-=\Vyt>Wh%0yhh1y5]4yjVy4y_^[] NS_DelayAppDllMain::InitializeHooksMultiFailed to process dll entries: aborting shimOUTSIDELOCKFailed to patch entry point: executing DllMains within loader lockUS3VW8ܖ4ytGh,a0yh%h1y5]4yjVyܖ4y4yt]4y`0yhDa0y4y4y4yVySEVyVVySjx(EPuWV,Vyt$00yE+SjEEPWV(Vyu VyE죘4yE=4y4y_^[]ÐNS_DelayAppDllMain::PatchExeEntryPointU d$L$SVWd=0t h@1yjm ;j^pT$L$D$ut9D$4yu!d0hVpVyЉ4ytp`VyD$ k C`Vy@DD$ @DD$ `%Ph1yhhd1y5]4yjVyD$ @;tG@h1yhhd1y5]4yjVy"h1yhhd1y5]4yjVy3|$tt$d0jpVy_^[]ÐFailed to get trusted installer SidNS_DelayAppDllMain::ProcessLoaderEntriesOut of memoryToo many modulesFailed to determine if module is system or non-system: %08lxU4[4yVMfWPuw^]VN N^UQQP4y3ʼnESV3۾d0yW8ޖ4yt;h,a0yjOh1yVjVyޖ4y4ythDa0yֹ`0yl}Wu uhT1yhP1yu VypVy։E$M Ѹx1yf0f;2uftfpf;rufuދuf?u 4yGh1yj^Ѹ1yf0f;2uftfpf;rufuދuf?udVyh1yjk[ 1yff;uftfPf;Qu ftۃu>f?uh4yGPVyy%hP1yjvh1yj{h1yhd0yjVyME3_^[] NS_DirectXVersionLie::COMHook_IDxDiagContainer_GetPropWCOMHook_IDxDiagContainer_GetPropWdwDirectXVersionMajordwDirectXVersionMajor: unexpected typedwDirectXVersionMinordwDirectXVersionMinor: unexpected typeszDirectXVersionLetterszDirectXVersionLetter: Failed to realloc versionszDirectXVersionLetter: unexpected typeUQP4y3ʼnES3V8ߖ4yt@h,a0yj9hl 1yd0yVjVyߖ4y4ythDa0yֹ`0yu uh 1yh1yu VypVy֋xSSu hth0ySVyM^3[]NS_DirectXVersionLie::COMHook_IDxDiagProvider_GetRootContainerCOMHook_IDxDiagProvider_GetRootContainerUSVu +!0yWtPuh,!0yhh 1yhd0yjVy]3}u>u4y+!0yQ3|4yt; 4yuۋ!83|4y}du9=x4yux4y}u{Wh0 1yVyh1yjhH 1yX 1yV5]4yVythP1yjhth0yV5]4yVytt;Wh%0yhh 1yhd0yjVy|4y_^[] NS_DirectXVersionLie::InitializeHooksMultiDXDIAGN.DLLLk#IEPq[;B[IFj(0y54y+>"eMh 1yUVMEHEEPEPMM6M.4[4yeEEEPEPMWMP4VyYj Y;} 4yMP4VyY4yEPEPM tXMP4VyYy %dVyMP4VyYdVyEPEPMtExu ff4yM^MVMN3@À=ݖ4yt<4yt d0ych$h0yhh 1yhd0yjVyݖ4y 1y3뫐.NS_DirectXVersionLie::ParseCommandLineAU$P4y3ʼnEtVqAu+A^jYuh0yE܉UP3҉Mjh 1yRRUUE 1yUE2UVyM3?] >(ShimLib) [ParseCommandLine] Illegal command lineUQP4y3ʼnEhL1yVyt Vh`1yPVyt jpVy^M3]d3d8.dllDirect3D8EnableMaximizedWindowedModeShimUQP4y3ʼnEVWh1yVy1ytWPVyt jpVyhH1yVytWPVyt jpVy֋M_3^]Ðd3d9.dllDirect3D9EnableMaximizedWindowedModeShimd3d9d.dllUSVu +!0yWtƋ}PWh,!0yjohX1yh@1yjVy]u>u!4y+!0yQ3_t4yt33~4yuًà 3X3du=p4yup4yfu u#t3Vh%0yjqhX1yh@1yjVyt4y_^[] DXMaximizedWindowedModeNS_DXMaximizedWindowedMode::InitializeHooksMultiVN eN]NUNM^EUP4y3ĉ$ED$E D$ E$ESVu(D$0E WD$03E$G=4yD$E,t$D$(tCh,a0yh>h1y!0ySWVy4y4ythDa0yӹ`0yEt ^Dd$ YD$,D$, Pj$WPVy3jY|$8D$|t$8E3GD$8H |$ Et$KtA3҉D$$E,$$d$$DŽ$DŽ$ yt K3t$(Vt$t$1yǀi0yǀ@1yǀG1yǀ?1yǀG1yǀ?1yt Qh%0yh_hG1yhG1yjVyD4y^[] EmulateSortingWindows61NS_EmulateSortingWindows61::InitializeHooksMultiGetNLSVersionExGetNLSVersionUQP4y3ʼnEV5pVyWuh`H1yhj0yVyPVy5pVyjWpVy֋M_3^]ÐNlsValidateLocaleUQP4y3ʼnE=4yVtDh,a0yhh$I1yd0yVjVy4y4ythDa0yֹ`0y<=xVyuuu ut<4ypVyVyM3^]NS_FailObsoleteShellAPIs::APIHook_IntlStrEqWorkerAUQP4y3ʼnE=4yVtDh,a0yhhJ1yd0yVjVy4y4ythDa0yֹ`0y\=xVyuuu ut<4ypVyVyM3^]NS_FailObsoleteShellAPIs::APIHook_IntlStrEqWorkerWUQP4y3ʼnE=4yVtDh,a0yhhJ1yd0yVjVy4y4ythDa0yֹ`0y|=xVyuu ut<4yp<pVyVyM3^] NS_FailObsoleteShellAPIs::APIHook_SHAllocSharedUQP4y3ʼnE=4yVtDh,a0yhhK1yd0yVjVy4y4ythDa0yֹ`0y蜬=xVyu ut<4ypVyVyM3^;]NS_FailObsoleteShellAPIs::APIHook_SHFreeSharedUQP4y3ʼnE=4yVtDh,a0yhhL1yd0yVjVy4y4ythDa0yֹ`0y̫=xVyu ut<4ypTpVyVyM3^n]NS_FailObsoleteShellAPIs::APIHook_SHLockSharedUQP4y3ʼnE=4yVtDh,a0yhhXM1yd0yVjVy4y4ythDa0yֹ`0y=xVyut<4yplpVyVyM3^]NS_FailObsoleteShellAPIs::APIHook_SHUnlockSharedUQP4y3ʼnE= 4yVtDh,a0yh<h,N1yd0yVjVy 4y4ythDa0yֹ`0y,=xVyu ut<4y,pVyVyM3^]NS_FailObsoleteShellAPIs::APIHook_StrCSpnAUQP4y3ʼnE=4yVtDh,a0yhhN1yd0yVjVy4y4ythDa0yֹ`0y\=xVyu ut<4ypVyVyM3^]NS_FailObsoleteShellAPIs::APIHook_StrCSpnIAUQP4y3ʼnE=4yVtDh,a0yhhO1yd0yVjVy4y4ythDa0yֹ`0y茨=xVyu ut<4ypVyVyM3^+]NS_FailObsoleteShellAPIs::APIHook_StrCSpnIWUQP4y3ʼnE=4yVtDh,a0yhvhP1yd0yVjVy4y4ythDa0yֹ`0y輧=xVyu ut<4ypVyVyM3^[]NS_FailObsoleteShellAPIs::APIHook_StrCSpnWUQP4y3ʼnE=4yVtDh,a0yhhlQ1yd0yVjVy4y4ythDa0yֹ`0y=xVyu ut<4ypVyVyM3^]NS_FailObsoleteShellAPIs::APIHook_StrChrAUQP4y3ʼnE=4yVtDh,a0yhh4y 4yσj ZUa;;XuSha0yhha0y>4y04y0Mhje"UE9Ft>VShDb0yhlhb0y=4y4yσU@U4yσ MRV!U4yC]3Ёͫʋ ];E54y3܋֍H;ƋuVShXb0yhhb0y<4y4yσ4yjZ MRVA!jZ4yσDFFJUj3umSuO4y$4y(4yσTW֋ȋuSuV4y48Guu ux4yp<pVyM_^3[ǭ] UM]UP4y3ʼnES3CVW9Ȣ4y=Ȣ4yt,˺̢4y3 eȢ4y,=Ȣ4yN3}9=|4yt`h4ylVy <\4yNjut4y94t 9WVhDb0yhlhb0y94y4y˃U@U4y˃ MRWdUw4y3ׁͫʋ;Y54yO3܋֋;8uWVhXb0yhhb0ym84y4y˃4yjZ MRWjZtEtMu3,OU;B ;Et$O ;v3+PR1P良U 4yG E3GfW th\a0ya0yH(h4yVy% GE1;rEtK54y_ G3th\a0ya0y'h4yVy% G17;˃E4y;@\4ywHr X򡀢4y3ljuEGth\a0ya0yr'h4yVy%W G;sM1;rx4yVup upVy֋ȉMu4y\CU54yW 3;s 10;ru3fGG PVQM U;UGUfJMfJJ3 4yBrrB說ͫB܉Mth\a0ya0y&h4yVyu%M΋u AE;s U1;r4y39Ppu>GGKRU: u#x4yVupWVhDb0yhlhb0y4y4y˃M@M4y CQMWMw4y3ׁͫʋ;54yO3܋֋;uWVhXb0yhhb0y4y4y˃4yjY CQMWCjYtrG _ 54yE3Gth\a0ya0yh4yVy% G17;rE!4y$Cu 4y(CƋM_^3[]UQP4y3ʼnES3DVyV@x4yQpVy־̱4yV`Vy VytI VyV\VyM^3[脇]ÐUQP4y3ʼnE=Ȣ4yVWtA=Ȣ4yt%3ɺ̢4yA3 u&Ȣ4y=Ȣ4yu}t 3ҋB{ux4yVWpVy֋M_3^]UQP4y3ʼnE=Ȣ4yVWtA=Ȣ4yt%3ɺ̢4yA3 u&Ȣ4y;=Ȣ4yut>u 3ҋBx4yVWpVy֋M_3^g]ÐUSVu +!0yWtƋ}PWh,!0yhRhd1yh e0yjVy]u$uu4y+!0yQj ^(gx4ytg3du=44yu\44y9uN35x4y!hLh0yhShd1yh e0yjVyf4yuà 3x4y3ɺh0y@1y@0l1yH HHP@1y@ `s1yH$H(H,P0@41y@8n1yHMaximumAllocOverhead > 0Client->MaximumFreeOverhead > 0Client successfully connected to the server (AO: 0x%x, FO: 0x%x). UP4y3ʼnEVW}ƅVjPj|3 4y@@M ?Vyu!4y+!0yQ36N04yt33UN4yuًà 3}3du=,4yu,4yu+uN504y3hLh0yjdh1yh e0yjVy묃u#t3Vh%0yjfh1yh e0yjVy04y_^[] NS_FeedbackReport::InitializeHooksMultijh0y3ۉ]4[4yE]E]jDEESPq3ED}Ѓ MS\uEuh1yPZEPEPSSSSSSuS@VytuVyuVyh1yjFh1yh e0yjVyMSMS1y9 ahui.exe feedback "%s"[LaunchFeedbackUI] CreateProcess failedNS_FeedbackReport::LaunchFeedbackUIeuQ=4ytCVh,a0yjUhd1y e0yVjVy4y4ythDa0yֹ`0yA^Z3@ÐNS_FeedbackReport::NotifyFnUP4y3ʼnE(4yVWu p ΋}WpVyփu7t3xt-j'Yu `P(4y`p ΃epVy֋M_3^i]UP4y3ʼnEMES]VW} Qu\P(4yWXSp<pVyփuDt@xt:j'YX`u`\eP(4ySp<pVy֋M_^3[1i]UP4y3ʼnEMES]VW} QuP(4yWSpTpVyփuGtCt:j7Y u eP(4ySpTpVy֋M_^3[~h]UP4y3ʼnE(4yVWu p$΋}WpVyփu:t6t-j7Yu P(4y p$΃epVy֋M_3^g]USVu +!0ytPuh,!0yhhl1yhP1yjVy]}uBu"4y+!0yQj^H(4yt3!H4yu؋à 3(4y}du=$4yu$4y}3@1y@1yh0yH HHP@1y@ 1yH$H(H,P0@4Ժ1y@8 1yHM>M>M>E4ythk0yPe0yd0y-hk0yhh1yhPe0yjVy1yËMtEU tM 3@;%xNS_ForceDXSetupSuccess::DirectXSetupGetVersionUSVu +!0ytPuh,!0yhh1yhPe0yjVy]}uBu"4y+!0yQj^64yt3!64yu؋à 34y}du= 4yu 4y}3@g0y@1y,%0yH HHP@1y@ 1yH$H(H,P0@41y@8`1yHu!l4y+!0yQ3(4yt33(l4yuًà 3}3du=4yu4yu+uN54y3hLh0yjGh 1yhe0yjVy묃u#t3Vh%0yjHh 1yhe0yjVy4y_^[] NS_LoadLibraryCWD::InitializeHooksMultiUQP4y3ʼnESV=)4ye0yt;h,a0yj*h1ySQVy)4y4ythDa0yӹ`0yih,1yVyt#hH1yPVyth\1ypVyh`1yj:h1ySjVyM3^3@[E]ÐNS_LoadLibraryCWD::NotifyFnKERNEL32.DLLSetDllDirectoryW.ERROR: DLL search order API does not existUQP4y3ʼnESV3T1yF=+4yWe0yt7h,a0yj&SWVVy+4y4ythDa0y׹`0y*ju u8Vyt#u4Vyu0h1yj3SWjVy4yu up pVy֋M_^3[D]NS_MoveToCopyFileShim::APIHook_MoveFileA[MoveFileA] DeleteFileA failedUQP4y3ʼnESV3t1yF=*4yWe0yt7h,a0yjBSWVVy*4y4ythDa0y׹`0y ju udVyt#uVyu0h1yjOSWjVy4yu up$pVy֋M_^3[C]NS_MoveToCopyFileShim::APIHook_MoveFileW[MoveFileW] DeleteFileW failedUSVu +!0ytPuh,!0yj[h1yhe0yjVy]}uBu"h4y+!0yQj^#4yt3!$h4yu؋à 34y}du=ܤ4yuܤ4y}ub3@t:0y@1y,%0yH HHP@:0y@ 1yH$H(H,t Qh%0yj^h1yhe0yjVy4y^[] NS_MoveToCopyFileShim::InitializeHooksMultiU(P4y3ʼnE=-4yES]Vu W}tLh,a0yh}h81yhe0yjVy34y-4ythDa0ye0y`0yPؤ4yWuVp SpVy֋eY$DQp,3Qff;u+ItfE\tHu;@<=3Qf=hh1y] x{f=3PPPdVytRx;ؤ4yup pVy֋ #@M_^3[?]NS_NonElevatedIDriver::APIHook_CoCreateInstanceIDriver.NonElevated.exeUQQP4y3ʼnE=,4yVtDh,a0yhhH1ye0yVjVy,4y4ythDa0yֹ`0yMUuؤ4yuup$u tuupVy֋M3^>]NS_NonElevatedIDriver::APIHook_CoRegisterClassObjectUtP4y3ĉ$pSVWىT$ $`SVGh1y׍$d)D$P$dPVyuVyD$ukD$PPPPjSPPVyd 0PjEqVytB3PPuVjSPPVyu(4yu$u uuVupluhpVy֋M_^3[4$]$NS_ProfilesRegQueryValueEx::APIHook_RegCreateKeyExWUQQP4y3ʼnES3VW8B4ytCh,a0yhh1y f0yVjVyB4y4ythDa0yֹ`0y}4yWu pTupVy֋D4yt P$Vy؅u7u3Ut%7PVy4yWup4ytCh,a0yhh2y f0yVjVy>4y4ythDa0yֹ`0y}4yWu upVy֋D4yt P$Vy؅u:u6UKt(7PVy4yWuhpVy֋M_^3[n] NS_ProfilesRegQueryValueEx::APIHook_RegOpenKeyWUP4y3ʼnEUEMS] VuW}tWQP4yVSRp pVy֋D4yt P$Vy3+#k jh2yjSjj 4VyuPVQjjjh2yjSjj 4VyuPVQjj jh2yjSjj 4VyuPVQjjujh2yjSjj 4VyuPVQjjJjh2yjSjj 4VyuPVQj5j jh2yjSjj 4VyuPVQjjjh2yjSjj 4VyuPVQj6j'jh2yjSjj 4VyuPVQj7jjh2yjSjj 4VyuPVQjjvjh2yjSjj 4VyuPVQj#jNjh2yjSjj 4VyuPVQj/j0&jh(2yjSjj 4Vyu!PVQj.jWdM_^3[U]DesktopStart MenuStartupProgramsMy MusicFavoritesMy PicturesMy VideoAlt StartupAppDataAdministrative ToolsPersonalU P4y3ʼnE=;4yUEMS] VuW}tRh,a0yhh| 2yh f0yjVy;4y4ythDa0y f0y`0yOt 4yWQVp$SRpVy֋D4yt P$Vy3+#  jh 2yjSjj 0VyuPVQjjjh 2yjSjj 0VyuPVQjj jh 2yjSjj 0VyuPVQjjujh 2yjSjj 0VyuPVQjjJjh 2yjSjj 0VyuPVQj5j jh 2yjSjj 0VyuPVQjjjh( 2yjSjj 0VyuPVQj6j'jh@ 2yjSjj 0VyuPVQj7jjhT 2yjSjj 0VyuPVQjjvjhl 2yjSjj 0VyuPVQj#jNjh| 2yjSjj 0VyuPVQj/j0&jh0m0yjSjj 0Vyu!PVQj.jW3 M_^3[{]NS_ProfilesRegQueryValueEx::APIHook_RegQueryValueExWDesktopStart MenuStartupProgramsMy MusicFavoritesMy PicturesMy VideoAlt StartupAppDataAdministrative ToolsU P4y3ʼnEVW3x[QtKjh8 2yjPjj4Vyu,SVWPVy؅tV(VyS(Vy;uG[M_3^]Ð\REGISTRY\USER\h@0ySE3މu -8%PVVu V|Vy ƉuW0En>PP Vyu @phPPVyhQPVyȋH=w)t%PP Vyu @]4ythk0y f0yd0y|hk0yh1h 2yh f0yjVy 2yË3ދÉPVVuV|Vyt?P(Vy@;P y jzXwXhPPVyH=wGP(Vy@;P xP(Vy@0 NS_ProfilesRegQueryValueEx::GetAllUsersRegValueAhP0y誵ًu3lju Rf9;IPWWu WVy.lj}S0EPVyu@DžvhPPVyhPVyȍF=w1t-PPVyu@c4ythk0y f0yd0yhk0yhh2yh f0yjVy2yË3ߋÉPWWuWVytMP VyE;wPyjzXDžchPPVyH=wRP VyE;wPx DžP VyER NS_ProfilesRegQueryValueEx::GetAllUsersRegValueWUQQSVEUP3VVjSuVy9utHWuj@Vyt5VuWjSVyxVVhujwVVVytFWVy_^[]USVu +!0yWtƋ}PWh,!0yhh\2yh f0yjVy]u$uqX4y+!0yQj ^j4ytc3du=4yuX4yduGuq54y!hLh0yhh\2yh f0yjVy<X4yuà 34u*t3Ph%0yhh\2yh f0yjVy4y_^[] NS_ProfilesRegQueryValueEx::InitializeHooksMultiUQSVW3ډE2yu EFs2y3G_^[]2y3kÐuot u3Ãdtu3@ÐjA0yڄ3Mu5D4yKQEMuuEE裔VyE죐Vyd0jjupuVyȅt 4[4yqΉ Vy3tq Vyhm0yd0jjpVyȅt 4[4yqΉ Vyt0 Vyth@2yM3@qtQ VytQMaK=X4yt<4yt df0y}h$h0yhh@2yhdf0yjVyX4y?2y3͂ÐSysWow64NS_SyncSystem32AndSysWow64::ParseCommandLineUуz u%VuxWz;}G;} DJ_^]VW*tWxPFPVy_^ÐUVW}@Bwi;~~Z3wKrwDd0SQjpVy؅t*NQ6Sd0 6jpVy~[39~3_^]j0y$3u;5Vy}UVy ~F4ythk0ydf0yd0y菶hk0yh6hA2yhdf0yjVyA2y ÐNS_SyncSystem32AndSysWow64::SyncAllFilesUQVyV5Vy5VyVy^]ÐUQP4y3ʼnE=i4yVtDh,a0yhhB2y|f0yVjVyi4y4ythDa0yֹ`0y蜵%t/Su3ۃFPVy[t Mu4yup<pVy֋M3^]NS_SyncSystemAndSystem32::APIHook_CloseHandleUQP4y3ʼnE=h4yVtDh,a0yhhC2y|f0yVjVyh4y4ythDa0yֹ`0y蜴u4yu upTpVy֋tM t M3^3] NS_SyncSystemAndSystem32::APIHook_CopyFileAUQP4y3ʼnE=f4yVtDh,a0yhhD2y|f0yVjVyf4y4ythDa0yֹ`0y輳u4yuuuu upVy֋tM t M3^G]NS_SyncSystemAndSystem32::APIHook_CopyFileExAUQP4y3ʼnE=e4yVtDh,a0yh&hE2y|f0yVjVye4y4ythDa0yֹ`0y̲u4yuuuu upVy֋tM E t M3^W]NS_SyncSystemAndSystem32::APIHook_CopyFileExWUQP4y3ʼnE=g4yVtDh,a0yhhF2y|f0yVjVyg4y4ythDa0yֹ`0yܱu4yu uplpVy֋tM at M3^s] NS_SyncSystemAndSystem32::APIHook_CopyFileWUQP4y3ʼnE=k4yVtDh,a0yh|htG2y|f0yVjVyk4y4ythDa0yֹ`0yu 4yuup uuu upVy֋tMtM3^]NS_SyncSystemAndSystem32::APIHook_CreateFileAUQP4y3ʼnE=j4yVtDh,a0yhhdH2y|f0yVjVyj4y4ythDa0yֹ`0y u 4yuup$uuu upVy֋tMt M3^]NS_SyncSystemAndSystem32::APIHook_CreateFileWUQP4y3ʼnE=d4yVtDh,a0yhHh 4yupVy;VyujLVyjMVyPVu tVyM_3^G]UQP4y3ʼnE}Vt Vy9EuUtL4y5Vyp pVy֋u4yV5VypVy 1u4yup pVy֋M3^]UQP4y3ʼnE}Vt Vy9Eu^tUu4yu 5VypVy֋)u4yV5VypVy xu u4yu upVy֋M3^] UP4y3ʼnESVW3}}9=Vy4yupVy;VyME QPEMVyjPVy4yW}p pVy֋ut2EPWVyu𡀤4yuV\pVy֋؃54yVyv PpVy֋h4yVy=Vyu =Vyt*u4yu 5Vy\pVy֋h4yVyu)uu W uu u4y\pVy֋؅t54yWVyPpVy֋}EttP4yWpVy֋M_^3[] UQP4y3ʼnE}Vt Vy9EuUatL4y5Vyp$pVy֋u4yV5VypVy u4yup$pVy֋M3^U]UQP4y3ʼnE=Vyt1Vy9EuVy=Vyt %Vyd 4yVupVy֋M3^]UQQP4y3ʼnES]VW3}9=Vyt@4ySpVy;Vyu"54yVyv PpVy֋t_u44yu0u,Du(u$u Suuuu upVy֋؅t#54yWVyPpVy]M_^3[]0UQQP4y3ʼnES]VW3}9=Vyt@4ySpVy;Vyu"54yVyv PpVy֋tYu,4yu(u$,u uuuSu upVy֋؅t#54yWVyPpVy]M_^3[](UQP4y3ʼnEVytO4yVpVy֋M3^]ÐUQP4y3ʼnE}Vt Vy9Eu9=Vyt04yu pVy;Vyuu 5Vyu u4ypVy֋M3^/]UQP4y3ʼnE4yVWu upVyփ} tNtJ=VytA4yupVy;Vyu!jLVyjMVyPVupVyM_3^菾]UQP4y3ʼnEV 4yupVy֋M3^G]UQQP4y3ʼnES]VW3}9=Vyt@4ySpVy;Vyu"54yVyv PpVy֋t\u04yu,u(u$u Suuuu upVy֋؅t#54yWVyPpVy]M_^3[`],UQQP4y3ʼnES]VW3}9=Vyt@4ySpVy;Vyu"54yVyv PpVy֋t\u04yu,u(u$u Suuuu upVy֋؅t#54yWVyPpVy]M_^3[耼],UQP4y3ʼnE=VyVt(4yupVy;VyuVy4yupVy֋M3^ ]UPSVWjY3}3uj,EuVP VVy؉]ul4yEf2yPWSVyuGhVE0E@Eg2y]Vyh_E`VyEЍEP}VyftjNVyjOVyjLVyjMVy3QuQQVSPWhhf2yhf2yhVy3Vy:3GWVh_PVy!5ĺVy=l4yVyEPVyEPVyVVVEPVyuۃ=l4yu5ĺVyVy5ĺVyVy؃l4yVyt PVy5VyE_^[]CompatWindowDesktopReplacementCompatWindowULP4y3ĉD$HS]D$ VW3\$ jt6d0WpVy>~_^Ðh4yVyÐj0yoMMue h4yVy MU$P4y3ʼnESVWU}3u ]fEjYftjEPjRjjVyujWX SVEP'M_^3[ʪ] j0yLMu3jPPuEPhPPPu t7h4yVy8L j0y_LMj3PuEPhPPu u06h4yVyK j0yLM5ju(eu$u uuuu u5h4yVyK$j0yKM3PPju(Eu$u uuuu un6h4yVy2K$j0yOKMu3PPjPuEPhPPu u6h4yVyJ j0yJM%u eumh4yVyJj0yJMu e4yuh4yVyTJj0yoJMeEPuu u h4yVyJj0yJMEueuu u h4yVyI j0yIMueuu u!h4yVycI j0yIMeEPuu u h4yVyIj0y/IMUu$eu uuuu u/"h4yVyH j0yHMu$eu uuuu u'#h4yVyjH j0yHM3PPuEPhPPu ua2h4yVyH j0y?HMe3PPuEPuPPu u2h4yVyGj0yGM3PPPPuEPuPPu u2h4yVy{Gj0yGM3PPPPuEPhPPu ue2h4yVy)G j0yOGMuueuu u7h4yVyFj0yFM%u4eu0u,u(u$u uuuuu u,<h4yVy{F0j0yFMu4eu0u,u(u$u uuuuu u=h4yVyF0jd0yyFMeueux4yu upVyh4yVyEj0yEMueuuu u@h4yVypEj0yEMueuuu uCh4yVy Ejd0yyEMeueux4yu upVyh4yVyDU P4y3ʼnE}VWuj_}S]t}ˍQAuE +AMtP8tK3MVQVjVVVPuubuCux4ySjVVLupVyuQSj3VVu0jW_[M_3^]j0yC}u }tjW^-Mueuuu u1Hh4yVyCj0yC}u }tjW^-Mueuuu uIh4yVyCUQQP4y3ʼnE}SVuj^}W}3Qff;uE +MtLf90tGVMuQVjVVVPuu?SWjPPx4yudpVyu(SWjVVujW^_M^3[r]jjjh2yt ǀ^3yBorlandReboot1Ujjjut ǀ{3y]UQQS]VWj\Y f;t fuF0Et)+EPF PSPVy 6Eud0hjpVyhjVK N S|xOMF PhP2yh"h(2yhf0yj1Vy3f9t_4j\Yf9u_'6V3Pd0pVyhDn0yhh(2yhf0yjVy3_^[]NS_VirtualRegistry::VIRTUALKEY::AddKeyAdding Key %Sd0VjjpVyu&hDn0yhhX2yhf0yjVy3d0SWj&3>j~pVyFtE2ySjZ;xPSh2yhhX2yhf0yjVy4yƉ54yEhDn0yhhX2yhf0yjVyvd0WpVyd0VWpVy3_[^NS_VirtualRegistry::CVirtualRegistry::AddKeyProtectorAdding Key Protector: %SHKLM\Software\ODBCd0Vj jpVyu&hDn0yh h؄2yhf0yjVy3W3hjd0pVyFtN82yWj@ZťxYPh3yQWh2yh# h؄2yNģ4yhf0yj5ģ4yVyGhDn0yh h؄2yhf0yjVyvd0jpVyd0VjpVy3_^NS_VirtualRegistry::CVirtualRegistry::AddOpenKeyTriggerAdding Open Key Trigger: %S, func@0x%xHKLM\Software\Microsoft\Windows NT\CurrentVersion\OpenGLDriversUjjjut ǀ00y]Ud0Vj jpVyu&hDn0yh|hX2yhf0yjVy3'M3SW3ۍQff;u+yM Qff;u?+Pd0jpYVyFPd0jpVyNFtYtUuexfu NTxUu 4yuh2yhhX2yhf0yj54yVyZhDn0yhhX2yhf0yjVyvd03WpVyvd0WpVyd0VWpVy3_[^]NS_VirtualRegistry::CVirtualRegistry::AddRedirectAdding Redirector: %S -> %SUQS]MW}u t3d0Vh jpVyu$hDn0yh]hl2yhf0yjVyh 3PV谞 t6u2E t+v u!P_3ҍOff;u+<}}tuN蟡x?tgd0WjpVyu9hDn0yhhl2yhf0yjVyV3Pd0pVy3WSPTVy U3M  Brt3tu)SuB Ph2yhhl2yhf0yjVy &uB Ph2yhhl2yhf0yjVy^_[]NS_VirtualRegistry::VIRTUALKEY::AddValueAdding Value %S\%S = %SAdding Value %S\%SUjE Pju]UQS]3ҍKff;u+sN]$Pd0jpVyЉUt,VWjYB"d2y ]QufPrU _^[]Software\Classes\SVW3ߋFtxXx4yWFΡx4yS/_F^[ÐUQSV3MWuWff;u[ +?sVff;Eu+;w#VQsPVyM uq\tftu3_^[]Qh2yhh2yhf0yjVy3@Ґ Protecting: %SNS_VirtualRegistry::CVirtualRegistry::CheckProtectedUQQMS4yVW93uWff;u+BsVff;Eu+;w&Vs1PVyM up\tft 봋KpUqff;Eu+΍rff;Eu+֍A‰EPd0jpVytus]΋iyV3Pd0pVyluӋ4]Vx7h82yh^hP2yhf0yjVy37Pd0pVy37@!hDn0yhghP2yhf0yjVy3_^[]Redirecting: %S -> %SNS_VirtualRegistry::CVirtualRegistry::CheckRedirectUQQP4y3ʼnEMSW3ۉ]Wff;uģ4y+t{VsVff;Eu+;wYVsQPVyM uDq\tfu6QshP2yhhp2yhf0yjVysupVy֋Mu^M_3[角]Triggering %S on opening of %SNS_VirtualRegistry::CVirtualRegistry::CheckTriggersjh2yK=4y}3!Mj^u]tT9_t4ySx4ypVy։E^Wjd0pVy}܋uutSx4ypVy֋uɃSVh2yhh2yhf0yQVyϋ?}R3@Ëej^uE?%08lx=CloseKey(Key=%04lx)NS_VirtualRegistry::CVirtualRegistry::CloseKeyz2y~2yUQeEPhjh<2yhTVy#E]ÐSoftwareU P4y3ʼnEVWuwS39] uOE]Px4yjSuplhpVyօux4yupVy p#uJSE]Px4yShStSSWhpVyօux4yu􋰴pVy֋d0WSpVy[j^M_3^豏]UQQd0SVWjjpVyu&hDn0yh,hT2yhf0yjVy33ˉEFQff;Eu+MPd0jpVyȉNuVPd0pVyhDn0yh6놋ӍBEff;Eu+USBy+vd03SpVyd0VSpVyLt7_^[]ÐNS_VirtualRegistry::CreateNewEnumEntryUVWu (VyxPSWr>xA39]tR΍Qff;u+thd0yWB>xuW1>yV3Pd0pVy΍Qff;u+tf|N\u3fDN_^[]NS_VirtualRegistry::MakePathKey not found: %08lx - did not get an openkey or createkeyuHhh4yVytt 0u"hDn0yhwhЬ2yhf0yjVy33@ÐNS_VirtualRegistry::NotifyFnUM SV3Wt/Uu$hDn0yh h2yhf0yjVyjXwMt(U؅ud0WVpVyhDn0yh VVu(u$u uuuSWued 0WjqVyd 0SjqVy_^[]$NS_VirtualRegistry::CVirtualRegistry::OpenKeyAj(h2y p}u'hd2yh h2yhf0yjVyjX93ۉ]܉]j^uE E% E9ȣ4yt(Eth2yh6 h2yhf0yjVy]M ЉU W4yURtHMЉM؋H MԉMȋP3ÉEЉE؉EԉE3ҋJ}܅uj^uW=̣4ytAt=jhn0yWLVy u(9E(u E& tu(G P>t u}u5t1EPt!ÉEЉEEU}܋E }܋E }}(u$u uuuuSPux4ytpVy֋u4y95У4yjhn0yWLVy uG jhز2yWPVy G,tÅSP4ys=У4yt+t'jhn0yWLVy uG Petj^uu3ۍMh2y]OVMEOEEPEPMOMSMS4[4yE܉]Eԉ]h2yh!ķ2yEVf0yWjVyh2yh"VWjVyh2yh#VWjVyh2yh$VWjVyPEPEPMONQj(MXQj)M܋XȃtDt?VA;}*+΍EIQRPM&^PME\uh2yhShf0yjVy[^Ð\Registry\Machine[TrimSlashW] Bypass \Registry\MachineNS_VirtualRegistry::TrimSlashW\Registry\User[TrimSlashW] Bypass \Registry\User[TrimSlashW] Removed slash from key beginningUe‰ESVWqNEPU謐>F~}EEuEPU肐E}Ev 4y跱]t,>v>v>uWSgjuW6S;;^td0SjpVy};~td0WjpVy]C];]13_^[]h@2yh h2yhh2yhf0yjVy@ExpandValueString for ValueName failedNS_VirtualRegistry::AddCodecValuesExpandValueString for Value failedj80y3Mh2yuh4uMEY4EEPEPM3MG8M?84[4yEuEuh2yME4h2yME4E 5VyEPEPM;4u@EPEPM&4u+Vu؍MupDVu؍MuaDuu薴뫍M7M7M7M7M7M}72y0^%20 j0yyEPx4yhjhX2yplhpVyօt!h2yh( h2yhf0yjVyFh2yM6eUM薎x4yu싰pVyh+!0yM6System\CurrentControlSet\Enum[AirlineTycoon] Cannot open ENUM key!NS_VirtualRegistry::BuildAirlineTycoonHKLM\System\CurrentControlSet\EnumU ESVWPh32yWVSTVyuqEEPEPWWh`2yulVyuEV3ҋrt5 4yVMtjMQjh`2yd0VWpVyuPVy_^[]Software\Microsoft\Windows\CurrentVersion\Policies\ExplorerNoDriveTypeAutoRunh(^0y3u4[4yh2yE3hEPVVytP4Pz<5 4yët5VVjh@2yfhh2yhZh2yhf0yjVy3{3p32yMHKLM\Software\Microsoft\Windows\CurrentVersion\ShellCompatibility\ApplicationsFILEOPENBOGUSCTRLIDAdded FILEOPENBOGUSCTRLID value for app %SNS_VirtualRegistry::BuildBogusCtrlID 4yVWh2y'2yq0yt jVjWð 4yh2yt jVjW袰_^HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Client4.0.30319HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\FullV3ViV/:V8V#9V9^U0P4y3ʼnEVWj Y2y} 4yh2yx_^tjMQjho0yM3KH]%USERPROFILE%\CookiesHKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Special Paths\CookiesUP4y3ʼnEVWXV3WPM fXPjWVy 4yh2ytr4h2yjdP-xW4Pjho0yv4hp0yjdPxW4Pjhp0y:h2yh2ybM_3^_F]HKCC\Display\Settings%dHKCC\Software\FontsHKCC\Display\Fonts 4yhH2yɥtjh2y膮HKCU\Software\Microsoft\Direct3DReleaseOwnershipBeforeDestroyDevice 4yh2y tjh0yƭHKLM\Software\Microsoft\Direct3D 4yhx2y虤tjh0yVHKLM\Software\Microsoft\DirectDrawUjh)0ydP,SVP4y3PD$8dh(r0yL$'ud$DL$'D$D$@PD$PL$('L$+L$+4[4yd$D$D$@32yD$ PD$PL$('h,r0yt$,VyYYuhLr0yt$,VyYYuh`r0yt$,VyYYuhr0yt$,VyYYuzL$/2Ph|2yh Shf0yjVyPu h2yh jjYuh2yh Shf0yjVyL$*L$,*L$$*L$8d Y^[][DSCACHEPOSITIONS] Unknown device %sNS_VirtualRegistry::BuildDSCachePositions[DSCACHEPOSITIONS] No devices specified.[DSCACHEPOSITIONS] Unabled to add DirectSound hackUjh)0ydP,SVP4y3PD$8dh(r0yL${%u3L$t$Di%D$D$@PD$PL$($L$R)L$I)4[4yD$t$D$ D$@PD$PL$(m%Xh2yt$,VyYYujh2yt$,VyYYuj[h2yt$,VyYYލD$ PD$PL$(%h,r0yt$,VyYYuhLr0yt$,VyYYuh`r0yt$,VyYYuhr0yt$,VyYYuzL$]/Ph(2yh h2yhf0yjVyLu hH2yh P3ɋVAHuVhl2yh 5L$/Ph2yhg h2yhf0yjVyh2yhm h2yhf0yjVyL$'L$,'L$$'L$8d Y^[]NONESTANDARDFULL[DSDEVACCEL] Invalid Acceleration Level %sNS_VirtualRegistry::BuildDSDevAccel[DSDEVACCEL] Invalid Parameters[DSDEVACCEL] Unknown device %s[DSDEVACCEL] No devices specified.[DSDEVACCEL] Unabled to add DirectSound hackUjh)0ydP,SVP4y3PD$8dh(r0yL$"ud$DL$ "D$D$@PD$PL$(M!L$%L$%4[4yd$D$D$@3p2yD$ PD$PL$("h,r0yt$,VyYYthLr0yt$,VyYYuh`r0yt$,VyYYuhr0yt$,VyYYuyL$^,PhL2yh Shf0yjVyOu h2yh jjYLuhr0yh Shf0yjVyL$$L$,$L$$$L$8d Y^[][DSDISABLEDEVICE] Unknown device %sNS_VirtualRegistry::BuildDSDisableDevice[DSDISABLEDEVICE] No devices specified.Ujh0ydP P4y3PD$duL$d$L$ +P4VyYuh2yh h2yhf0yj&jjYuh2yh h2yhf0yjVyL$#L$d Y][DSPADCURSORS] Invalid number of millisecondsNS_VirtualRegistry::BuildDSPadCursors[DSPADCURSORS] Unabled to add DirectSound hackUjh)0ydP,SVP4y3PD$8dh(r0yL$ud$DL$D$D$@PD$PL$(L$"L$z"4[4yd$D$D$@32yD$ PD$PL$(h,r0yt$,VyYYuhLr0yt$,VyYYuh`r0yt$,VyYYuhr0yt$,VyYYuzL$(Ph2yh0 Shf0yjVyPu h2yh6 jjYݍuhr0yh< Shf0yjVyL$l!L$,c!L$$Z!L$8d Y^[][DSRETURNWRITEPOSITION] Unknown device %sNS_VirtualRegistry::BuildDSReturnWritePos[DSRETURNWRITEPOSITION] No devices specified.Ujh0ydPVP4y3PD$duL$nd$ L$ 'P4VyYuh,2yh^ h`2yhf0yj&V3jBY职u!h2yhd h`2yhf0yjVy Vh2yhi h`2yhf0yjVyL$ L$d Y^][DSSMOOTHWRITEPOS] Invalid number of millisecondsNS_VirtualRegistry::BuildDSSmoothWritePos[DSSMOOTHWRITEPOS] Unabled to add DirectSound hack[DSSMOOTHWRITEPOS] Added DS Hack Smooth Write Pos, %d ms 4yhHq0ytjh,2yjhq0y臝4.07.00.0716 4yhHq0y虖tjh|2yjhq0y74.08.00.0902U P4y3ʼnEVVPVytG;wCh2y֍xL 4yh2yt8jQjhj0y螜hD2yhhl2yhf0yjVyM3^5]BuildDXDiag: GetSystemDirectory FailedNS_VirtualRegistry::BuildDXDiag\dxdiag.exeHKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\DXDIAG.EXE 4yh`2y詔t QQ,HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceUeeVWho0yhP2y33 4yhd2yE SEPhVh2yhTVyd0hjEpVy MQd 0jqVy E3P3ɍEQQQPWQ(Ph2yhV葱x_MV0EtOh2y0jEPjhP2y*jEPjhp2yjEPjh2y 4yh2y;؅tWjEEPjh2yђjEPjh2y轒jEPjh2y詒jEPjh2y蕒 4yh02y΋؅jEEPjh2y`jEPjh(2yLjEPjhH2y8jEPjh`2y$jEPjh2yjEPjh2yjEPjh2yjEPjh2yԑjEPjh2yjEPjh42y謑jEPjh\2y蘑jEPjhx2y脑jEPjh2ypjEPjh2y\jEPjh2yHjEPjh2y4jEPjh 2y jEPjh@2y jEPjh\2yjEPjh2yjEPjh2yАjEPjh2y輐jEPjh2y訐jEPjh2y蔐jEPjh2y耐jEPjhD2yljEPjhl2yXjEPjh2yDjEPjh2y0jEPjh2yjEPjh2yjEPjh2yjEPjh82yjEPjhP2y̏jEPjhp2y踏jEPjh2y褏td0WjpVytd0VjpVy[}_^t uPVy]HKLM\EnumHKDD\Config Manager\EnumSYSTEM\CurrentControlSet\Enum\PCI%xPCI\HardWareKeyProblemHKDD\Config Manager\GlobalHKDD\PerfStatsHKDD\PerfStats\StartSrvKERNELVCACHEVFATVMMHKDD\PerfStats\StartStatKERNEL\CPUUsageKERNEL\ThreadsKERNEL\VMsVCACHE\cCurPagesVCACHE\cMacPagesVCACHE\cMinPagesVCACHE\FailedRecyclesVCACHE\HitsVCACHE\LRUBuffersVCACHE\LRURecyclesVCACHE\MissesVCACHE\RandomRecyclesVFAT\BReadsSecVFAT\BWritesSecVFAT\DirtyDataVFAT\ReadsSecVFAT\WritesSecVMM\cDiscardsVMM\cInstanceFaultsVMM\cPageFaultsVMM\cPageInsVMM\cPageOutsVMM\cpgCommitVMM\cpgDiskcacheVMM\cpgDiskcacheMacVMM\cpgDiskcacheMidVMM\cpgDiskcacheMinVMM\cpgFreeVMM\cpgLockedVMM\cpgLockedNonCacheVMM\cpgOtherVMM\cpgSharedPagesVMM\cpgSwapVMM\cpgSwapFileVMM\cpgSwapFileDefectiveVMM\cpgSwapFileInUseHKDD\PerfStats\StatDataHKDD\PerfStats\StopSrvHKDD\PerfStats\StopStat 4yVh o0yxt$h2yv? 4yTPit)3Dž8>f~@VQjh3y0p0PVyVVVV44PLCPS<`Vy<PVy[M_3^ ]System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM[Joystick hack] No joysticks foundNS_VirtualRegistry::BuildJoystickOEMNameUP4y3ʼnEPhjh3yhTVyuwDžPDžPPjh3ylVyu+ 4yh03ygtjQjh3y.nPVyM3X]Software\Microsoft\Windows NT\CurrentVersion\Drivers32MSACM.MSADPCMHKLM\System\CurrentControlSet\Control\MediaResources\ACM\MSACM.MSADPCMdriverUP4y3ʼnESVW3PhW3yVSTVyDžPPWWh3ylVyuGV3ҋ貎t7 4yVetWQjhj0y*ld0VWpVyPVyM_^3[@]System\CurrentControlSet\Control\Nls\Locale(Default) 4yh3ydt?jjjh3yZkt)h3yh hH3yhf0yjǀ`o3yVyHKLM\Software\Encore Software\Middle School Advantage 2001\1.0health[Middle School Advantage 2001] Added HealthNS_VirtualRegistry::BuildMSA2001U0P4y3ʼnE$VGu$h`3yhx hp3yhf0yjVySVWjY3y $jY 3y}󥍅$P$f D$P$(EP$ PVj$PWTVy$P$ hl 3yӍ$nEP$U PVj$PWTVyt!h 3yh hp3yhf0yjVyY PVyo0y$h0jP $Ӎ$Px$Ph 3yf_^[M3]BuildMSI FailedNS_VirtualRegistry::BuildMSISoftware\Microsoft\Windows\CurrentVersion\Installer\UserData\\Components\359E92CC2CB71D119A12000A9CE1A22AS-1-5-18BuildMSI Failed to find keysHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Components\359E92CC2CB71D119A12000A9CE1A22AQQ^bho0yh!3yHdHKLM\SYSTEM\CurrentControlSet\Enum\Root 4yVW@p0yW^p0ytjhx"3yjVe 4yW^tjh"3yjhp0y^e 4yh"3y^t hVUg_^Service Pack 54.0HKLM\System\CurrentControlSet\Control\Windows 4yVh@p0y]t*jhp0yjhp0ytdjhp0yjh(p0y_d^ 4yVh@p0y]t*jhq0yjhp0y$djhq0yjh(p0yd^UH P4y3ʼnESVW3PhS'3yVWTVyt$hh'3yhMh'3yhf0yjVyVh'3y֍3P超u$h'3yh`h'3yhf0yjVyw 4yVm\d 0VSqVy'3yPhSVWTVythT(3yhs&V3ҋ1t 4yV\SSSSDžPPS`VyP[؅~h'3y,hd0y{P\PhjPhTVyDžPPjjh(3ylVyuPfˍPjh(p0yaDžP3PSSh(3ylVyu;t1QZuh(3yhh'3yhf0yjVyPVy3SSSSDžPFPV`Vyuj3ۋd0VSpVyPVyPVyM_^3[]System\CurrentControlSet\Services\NetBTFailed to add NetBT settingsNS_VirtualRegistry::BuildNetworkCards\AdaptersFailed to make NetBT pathSoftware\Microsoft\Windows NT\CurrentVersion\NetworkCardsFailed to add Network card registry settingsDescriptionServiceNameError adding the Key to NetBT 4yh)3y Xt hP)3y\HKCU\Software\Microsoft\CTF\LangBarShowStatush)3yh)3yh\h)3yh$*3yY\hP*3yh|*3yJ\HKLM\Software\nowcomHKCU\Software\nowcomHKLM\Software\nowircHKCU\Software\nowircHKLM\Software\nownuriHKCU\Software\nownuriUP4y3ʼnESVW+3yPj Y3ҥf+3y`+3yNff;u+Pw;4uVZSPVSPPPPZ3҃hrM_^3[]0y0yP0y0y0y(0y0y0yH0y0y0yh0yб0y80y0y0yp0y0y0y 0y0y@0yж0y`0y0y0yHKCU\Software\Classes\HKCR\UP4y3ʼnESVW|3PhSh`.3yhTVyukDžPPxPSh0m0y|lVyu* 4yh.3yiTtSQjho0y[|PVy3hfSP }P/3yjYPhSEfPhTVyt$h/3yhsh/3yhf0yjVy#3DžQQQQPPQo0yh3VPb EP{hd0y׍axlPIxTPhVPTVyu0 4yPStjh03y[PVyVVVVPCPS`Vy PVyM_^3[]Software\Microsoft\Windows\CurrentVersion\Explorer\Shell FoldersHKCU\Software\Caere Corp\PageKeepPro30\PreferenceSoftware\Caere Corp\Scan Manager\4.02\Scanners[PageKeepPro 3.0] No scanner foundNS_VirtualRegistry::BuildPageKeepProDirectoryBASICMODE`th@03yh03yUHKLM\Software\Adobe\PageMaker65HKCU\Software\Adobe\PageMaker65UPP4y3ʼnESVEEP3hSh33yh]ȋ]TVyWE̿33yPSEPSWulVy9]vDujVyPVyEPVEPSWulVylj?Xf;`EPSEPSh33yulVy@9]7ujVyPVyEPWEPSh33yulVy}j,ESP ESj,PSVyEESjSP؉UR‰]SPEGQPh33yMXVyEPjVyPVy؅t^uGuuuPh33yuS7 x& 4yh43yQNtuSjh33yTS3SVyPVy3WSVyPVytVSVyPVy_}^[t uPVyM3]SYSTEM\CurrentControlSet\Control\Session Manager\Memory ManagementPagingFilesExistingPageFiles%s %llu %llu %s %llu %lluHKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Managementh43yh43y(QHKLM\Software\Microsoft\MSNHKLM\MSN 4yhX53yKt jjjhr0yjRt ǀ`s3yHKCC\System\CurrentControlSet\Control\Print\Printers 4ySVh0yK3`63yt VVjSQ 4yhx0yJt VVjSQ 4yh0yJt VVjSwQ 4yhH0yJt VVjSWQ^[ProductSuite 4yVWhH0ygJ3 73ytVWjh473yQ 4yh0y3y֍y3PhVh>3yhTVyuhQff;u+ PPjVhq0ydVyyh?3yhth|>3yhf0yjVyPVy+h(?3yh{ hX>3yhWh|>3yhf0yjVyM3^]SpellIt: GetSystemDirectory FailedNS_VirtualRegistry::BuildSpellItDeluxeVoices32Software\FirstByte\ProVoice\SpeechFontsSpellIt: RegSetValueEx failedSpellIt: RegOpenKeyExW failed 4yhx?3yAtjh?3yVJHKLM\SOFTWARE\Microsoft\Direct3DDisableSTU P4y3ʼnE 4yVhX@3y@t4WWPVyt;wjPjh@3yqG_M3^]HKLM\Software\Microsoft\Windows\CurrentVersion\SetupSharedDir 4yhA3y @tjh A3yjhA3yF0HKCU\Software\Microsoft\Windows\CurrentVersion\ThemeManagerThemeActivej ZZ4yyhA3yhChB3yhf0yjVyTrueMotion20 initialization failedNS_VirtualRegistry::BuildTrueMotion20USVWً 4yh@p0y>tZjS3ۋCSh(p0yHEjWShp0y8E3WuShr0y%EWu Shp0yEWhj0yShB3yE_^[]SubVersionNumberU'u(̣4y9EthC3yu0VyYYu+V]EnableVirtualDelete 4yVh@p0y=t?jhH0yjh(p0yDDjh0yjhp0y/DjhC3yjhr0yD^6000 4yVh@p0y8=tTS3ۋShH0yjh(p0yCSh0yjhp0yCSh0yjhr0yCShs0yjhp0yC[^ 4yVh@p0yCShD3yjhr0y*CSh s0yjhp0yC[^6002j 0y~eMhE3yMEj 4yuhhE3y }uSVWVyt&;w" 4yhJ3y6tjVjj{=d0WjpVytd0VjpVy_^[]chm.file\shell\open\commandHKCR\chm.file\shell\open\command%ȣ4yj蒉j 4yh@p0y5tjhq0yjhp0yw<hj0yhls0yxs0ys0yhs0yhls0yxs0ys0y 4yVh@p0y85t?jh L3yjh(p0y;jh0yjhp0y;jh0yjhr0y;^Windows Server 2008 R2hs0yh0y0y\L3yMicrosoft Windows Server 2008 4yVh@p0yH4t?jhL3yjh(p0y:jh0yjhp0y:jh0yjhr0y:^Windows Server 2012j)Ud0SVWWj^VpVyd 0WVqVyd 0WVEqVyd 0hVqVy3E9uEPjVhQ3yhTVyEEPSEPVVulVyuPVyyE}uVWSVyX;PVu3fTAAVPVy,;VhhR3yQSPVuh|R3yhVPuhR3yhWP 4yhR3y"2tjSjj8 4yhS3y2tjVjj8 4yh`S3y1tjWjj8 4yhS3y1tjSjja8 4yhT3y1tjVjj?8 4yhXT3yx1tjWjj8 4yhT3yV1tjSjj7 4yhT3y41tjVjj7 4yh@U3y1tjWjj7 4yhU3y0tjSjj7 4yhV3y0tjVjjs7 4yhV3y0tjWjjQ7 4yh(W3y0tjSjj/7 4yhW3yh0tjVjj 7 4yhW3yF0tjWjj6 4yh`X3y$0tjSjj6 4yhX3y0tjVjj6 4yhXY3y/tjWjj6 4yhY3y/tjSjjc6 4yh@Z3y/tjVjjA6 4yhZ3yz/tjWjj6d0S3SpVyud0SpVyd0WSpVyud0SpVy_^[]SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WORDPAD.EXE%s "%%1"%s /p "%%1"%s /pt "%%1" "%%2" "%%3" "%%4"HKCR\rtffile\shell\open\commandHKCR\rtffile\shell\print\commandHKCR\rtffile\shell\printto\commandHKCR\Wordpad.Document.1\shell\open\commandHKCR\Wordpad.Document.1\shell\print\commandHKCR\Wordpad.Document.1\shell\printto\commandHKCR\wrifile\shell\open\commandHKCR\wrifile\shell\print\commandHKCR\wrifile\shell\printto\commandHKLM\Software\Classes\Applications\wordpad.exe\shell\open\commandHKLM\Software\Classes\Applications\wordpad.exe\shell\print\commandHKLM\Software\Classes\Applications\wordpad.exe\shell\printto\commandHKLM\Software\Classes\rtffile\shell\open\commandHKLM\Software\Classes\rtffile\shell\print\commandHKLM\Software\Classes\rtffile\shell\printto\commandHKLM\Software\Classes\Wordpad.Document.1\shell\open\commandHKLM\Software\Classes\Wordpad.Document.1\shell\print\commandHKLM\Software\Classes\Wordpad.Document.1\shell\printto\commandHKLM\Software\Classes\wrifile\shell\open\commandHKLM\Software\Classes\wrifile\shell\print\commandHKLM\Software\Classes\wrifile\shell\printto\command>' 4yVhx[3y%t*jh[3yjh\3yT,jh8\3yjh\3y?,^HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environmentx86PROCESSOR_ARCHITECTUREx86 Family 15 Model 1 Stepping 2, GenuineIntelPROCESSOR_IDENTIFIERhj0yhr0yq0yq0yJhs0yhr0yq0yq0yh s0yhr0yq0yq0yhLs0yhr0yq0yq0y 4yh]3yY#tjh]3y,HKLM\SYSTEM\WPA\MediaCenterInstalledj P0yVe]39uVMum]E9ph0_3yPVyYYtwE+tkf8"teQh0_3y VyǍMPQVMMQff;u+MPuEjVPEpdVyM+OM*hH_3yh hx_3yhf0yjVy_3yË]3uEuSVPEpdVycInstReg.exeCString exception occured in Delphi5SetValueNS_VirtualRegistry::Delphi5SetValueUQESVWU8jjWVy 6Qd 0jqVy؅u&hDn0yhhl`3yhf0yjVy@LVSWVy;t3h`3yhhl`3yhf0yjVyd0SjpVy빋E0E3_^[]NS_VirtualRegistry::ExpandCodecStringExpandEnvironmentStringsW failedUjh0ydPP4y3ĉ$SVWP4y3P$(dD$3jjjjL$4D$4Q$QSPx4ypVyօD$Phj$Px4yt$ plpVyօu`hd0y`$PQL$$x4yt$pVyj\7\VyYYu+P豶D$C,\$D$(P$D$,PD$Px4yjhc3ySpVyօ|$|$ hc3yP,VyYY_D$D$P$PD$Px4yjhc3ySpVyօ |$hd3yL$ $0$PL$ &hd0yL$ j2D$8Pt$$Vyd3yjZD$0 d3y^D$0f9t$,j2$PD$4PVytD$4P$P,VyYYtfD$,f@fD$,f;w[7 4ytH3fL$.L$,jQjh$d3yA$t(t$D$0Ph`d3yh hd3yhf0yjVyL$\$(d Y_^[$3,]CLASSCDROMLocationInformation\\?\cdromA:\CurrentDriveLetterAssignment[Airline Tycoon]Added drive letter %S for %S to PNP dataNS_VirtualRegistry::FindCDROMKeyUP4y3ĉ$VWD$ L$Pj3j t$$t$PVyP Vyu:Vy=uD$ Pj VyPVyuh`g3yhD$Ph@D$(Pjt$tVy$`t$ VPjHxVyuhg3yh jPhg3y$hhPv9YL$$`P;N8NNFFFȍ$`Qhh3yhP9L$$`P蘃~vaVT$2$dhh3yhP8L$$`PIx|L$T$AFL$T$;|3G[FPFPFPFPFPPhg3y$|hP98$2h(h3yhc hg3yhf0yjVy|$ t t$ Vy$_^3蕹]Ð[GetStringSID] Failed to OpenProcessTokenNS_VirtualRegistry::GetStringSIDCopySID failedS-%u-0x%02hx%02hx%02hx%02hx%02hx%02hx%lu-%luGetTokenInformation failed褽uW 4yVhh3yt?jhDi3yjh\i3y+jhdi3y5!jhi3y'!jhq0y!^3HKLM\Software\Microsoft\Windows NT\CurrentVersion\OpenGLDrivers\msoglogldrv.dlldllDriverVersionFlagsUE jYt=vWxMQuQM tE3f]ÐUVutVWyt&^]USV3Wf9tJuuWEt x+8_^[]USVWuru 3VW>z_^[] 3tvW=?4ytFVh,a0yhh3yf0yVjVy?4y4ythDa0yֹ`0yLo^Vy qÐNS_VistaSP1VersionLie::APIHook_GetVersionUQP4y3ʼnES33V@W8A4yt?h,a0yj5h3yf0yVPVyA4y4ythDa0yֹ`0ynh4y}Wp pVyօtUVyGVyGG qGt1 OPu3C?ufVyffËM_^3[]NS_VistaSP1VersionLie::APIHook_GetVersionExAUQP4y3ʼnES33V@W8@4yt?h,a0yjkh3yf0yVPVy@4y4ythDa0yֹ`0ymh4y}Wp$pVyօtQVyO GGG qG5Vy/u3C?ufVyffM_^3[]NS_VistaSP1VersionLie::APIHook_GetVersionExWUQP4y3ʼnES3VC=>4yWtCh,a0yhh03yf0yVSVy>4y4ythDa0yֹ`0yhlh4y}WpTpVy֋xK? VyGOG qGufVyff O5VyM_^3[Ȕ]NS_VistaSP1VersionLie::APIHook_RtlGetVersionUSVu +!0yWtƋ}PWh,!0yh-h3yhf0yjVy]u$uu,4y+!0yQj^Xuh4ytg3du=d4yu\d4y6uN5h4y!hLh0yh/h3yhf0yjVy&u,4yuà 3h4y3ɺ,%0y@0y@3yH HHP@0y@ 03yH$H(H,P0@4g0y@83yHm]NS_WinXPSP1VersionLie::APIHook_RtlGetVersionUSVu +!0yWtƋ}PWh,!0yh-ht3yhHg0yjVy]u$uu4y+!0yQj^M84ytg3du=44yu\44y6uN584y!hLh0yh/ht3yhHg0yjVyM4yuà 384y3ɺ,%0y@0y@3yH HHP@0y@ б3yH$H(H,P0@4g0y@8 3yH04y}WpTpVy֋xH?jXGGG ( GuffPVyf O5LVyM_3^f]NS_WinXPSP2VersionLie::APIHook_RtlGetVersionUSVu +!0yWtƋ}PWh,!0yh-h3yh\g0yjVy]u$uu4y+!0yQj^`G04ytg3du=,4yu\,4y6uN504y!hLh0yh/h3yh\g0yjVy.G4yuà 304y3ɺ,%0y@0y@ 3yH HHP@0y@ @3yH$H(H,P0@4g0y@83yHhL3yu,VyYYt*M$>M4yWup pVy4[4yE]uMEF4[4yEЉ]ԍEEPM[FEPu(Vy}uuS0Vyu+=tVy~#pVyMЍPZt F;5tVy}3CMv=Mn=Mf=I4yg0ythk0yֹd0y\,hk0yhh3yVjVy3yË} ]̃M@0yNS_WRPDllRegister::APIHook_GetProcAddressDllRegisterServerDllUnregisterServerUDP4y3ʼnEVh3yE3PuVyEEE̍EPhEuPE@uԉuVyh3yEPVyEPjEPjEPuVyy=uvEWPVEVyt]EPuEWjPuVyx;u5Gr-PVVytwO QVTVyG 3f FWVy_}t uVyM3^SS]ÐKnownDllList\Registry\Machine\SOFTWARE\Policies\Microsoft\Windows NT\Windows File ProtectionUSVu +!0yWtƋ}PWh,!0yh h3yhg0yjVy]uDu$4y+!0y3QBU34yt!r34yu֋à 34ydu=4yu4yuȡ4y3Au)us! PhLh0yh h3yhg0yjVy뙃uJ3,%0y@g0y@ 3yH HHt Qh%0yhh3yhg0yjVy4y_^[] NS_WRPDllRegister::InitializeHooksMultij0y3}tYWM܉u8QEMu܉u5EMܣtVyEpVy8EW53yË]3}WVyu3FnÐUQP4y3ʼnE,P4yVW}$p Wu uuuuu upVy֋t:t6?u1Mit%h3yhh3yhX:0yjVyM_3^P] Patched an AccessCheck to ignore WRPNS_WRPMitigation::APIHook_AccessCheckUQP4y3ʼnE,P4yVuu p$upVy֋u/Vyt Vy=uM zt jVy3FM3^2O] UQP4y3ʼnE,P4yVuupTuuu upVy֋u/Vyt Vy=uM ozt jVy3FM3^N]UQP4y3ʼnE,P4yVuupluuu upVy֋u/Vyt Vy=uM t jVy3FM3^N]UQP4y3ʼnE,P4yVuu p]_lopen: Patched %s to open with READ_ONLY attribute %xNS_WRPMitigation::APIHook__lopenUQP4y3ʼnE,P4yVuu upVy֋u<Vyu1M t%uh3yhh3yhX:0yjVyuM3^A=] _lwrite: Patched write to %xNS_WRPMitigation::APIHook__lwriteUSVU3ɉMMىEEfEMfMWu3yvu3ygu83yXud3yIu3y:u3y+u3y`uH3y Pu 3yuPEj0yPQQjVVyu3PVy؅u 3PuSjVVyЉU3ύQff;Eu+ʋUBEff;Eu+UAF3PVEVyEu]fEfEEWP$Vyt sEP$Vyhd0yEP$VyuEP$VyMEEAƋuEEt SVyEtPVy_^[]\Registry\HKEY_CLASSES_ROOT\Registry\MACHINE\Registry\HKEY_USERS\Registry\HKEY_CURRENT_USER\Registry\HKEY_CURRENT_CONFIG\Registry\HKEY_DYN_DATA\Registry\HKEY_PERFORMANCE_DATA\Registry\HKEY_PERFORMANCE_NLSTEXT\Registry\HKEY_PERFORMANCE_TEXTU<P4y3ʼnE3VWjY h4ytSVySPjVy ;Dž 3ۍDžCPVyu1VyPhh0yhh3yhX:0yjVyh4yPj PjjVhVyu.VyPhh0yhh3yhX:0yjVyh4yt(h3yhh3yhX:0yjVy%h4yWh@3yhh3yhX:0yjVyh4y0VyPh3yhh3yhX:0yjVyh4ytVVyWVy39h4y[M_3^:7]ÐRLCHECK: error getting path or path too long. Err: %dNS_WRPMitigation::IsExeManifestedRLCHECK: There is a declared runlevel.RLCHECK: No Runlevel declared.UQQV33fEufuW`Ptwj#wh`3yPVy t`j-wh3yPVy tIEP(Vyu>EPwuPVy u$MGj HPh3yPVy u3F}t EP,Vy_^]\Registry\Machine\Software\Classes\\Registry\HKEY_CURRENT_USER\Software\Classes\_Classes\UQQeEPEEPQVyx}tu5XP4y Vyt3@3]ÐUQQVt*REP8Vyt'Uh3yoEP,Vy h3y3W^]RegSetValueA: wrp key is mitigatedUQQSVWu3y3h@W4yh0yhShX:0yjfEEfEVytkօuj0yEPx)uh(0yhShX:0yjVyuVyMu0yVPh00yhShX:0yjVy%u0yVh(0yhShX:0yjVy_^[]NS_WRPMitigation::LogSfpKeyWUSVWup3yQhx3yh3yX:0yWSjVy}t }t}utVh3yhWSjVy_^[]Default ValueName: [%s] NS_WRPMitigation::LogSfpValueA ValueData: [%s] USVWur0yQh03yhD3yX:0yWSjVy}t }t}utVhd3yhWSjVy_^[] ValueName: [%S] NS_WRPMitigation::LogSfpValueW ValueData: [%S] UQQSW3ى}0VyEEPWWjSVyu`9}t[Vuj@VytHEPuVjSVyt,At!Sh3yhh83yhX:0yjVyGVVy^u4Vy_[]ÐPatched %S to ignore WRPNS_WRPMitigation::MySfpIsFileProtectedWUQQV3EPVVVEuPjjQuVyu"9utu5XP4y VytFuVy^]ÐUQQV3Wt(REP8Vyt$VuW4VyEP,Vy VVW4Vy_^]ÐUQQV3Wt+REP8Vytu UuEP,Vy_^]UP4y3ʼnESVWuWVu4Vy؅33fE׍EMMfMPV3EWP,P4yWhWdWWh3yhpVy֋u{Wu WhWWW}GP,P4yudpVy֋u>MUA}3ɋׅt h3yh3yE 30PVyE !uPVy}WVyt3ۋM_^3[p.]Software\Volatile\00RegCreateKey: wrp key subkey mitigatedRegCreateKey: non-COM wrp subkey is not mitigatedUQVEPlxEQu+Q 0 ^]UW3t$E SV+ttANJu^[uIz_] UQV3ҋ8tAHuuWMt x+1!^]UQQP4y3ʼnE=m4yVtDh,a0yhh3yg0yVjVym4y4ythDa0yֹ`0y{4yu up pVy֋u>EPhju uXVyu#MtU QM3uPVyM3^+]NS_WRPRegDeleteKey::APIHook_RegDeleteKeyAUQQP4y3ʼnE=l4yVtDh,a0yhh3yg0yVjVyl4y4ythDa0yֹ`0y{4yu up$pVy֋u>EPhju uTVyu#MtU QMe3uPVyM3^*]NS_WRPRegDeleteKey::APIHook_RegDeleteKeyWUSVu +!0yWtƋ}PWh,!0yh"h3yhg0yjVy]u$uu4y+!0yQj^{ 4ytg3du= 4yu\ 4yuK54y!hLh0yh$h3yhg0yjVyI 4yuà 3oue4y3ɺH0y@o0y@@3yH HHP@o0y@ @3yH$H(H,t Qh%0yh(h3yhg0yjVy4y_^[] NS_WRPRegDeleteKey::InitializeHooksMultiAP5xVy Vy3ɄÐUQQeEPEEPQVyx}tu5xVy Vyt3@3]ÐU$P4y3ʼnES3V]]]]]t3@EPEPEPVVy9]t{jj EPu|VytfEt_EPVuVyt;MtMuyuE<u E8u @ PuEF;urt3CËM^3[']ÐUQQVt&REP8VytUQ EP,VyQ3 ^]UQQSVWhX3yhPVyh0yh83y3Shg0yjfEEfEVytkօuj0yEPJx)uh(0yhShg0yjVyuVyMu0yVPh00yhShg0yjVy%u0yVh(0yhShg0yjVy_^[]NS_WRPRegDeleteKey::LogSfpKeyWwrp key is mitigatedUP4y3ʼnESVW3t3@|VVVVPPVPPhVPWTVyuPVyuVVVVCPPSWDž`Vyt3M_^3[%]ÐUQSWE3PWى}jS\Vyzu8Vuj@Vyt%EPVjS\Vyu tGVVy^_[]ÐU P4y3ʼnESVjVyP3SVyPVyu3jE]PVfEVySVVyjVPVyjV8VyjVVyjV\l#mVyjVWwnVyhhPVySd5xVyVyk3@M^3[d$]ÐUP4y3ʼnESVW3Vy95@P4y95~t[f98tVPMhd4yM}Qj ME΅x EPR EPEPOMMb;UVu&Nu N ^]j(e0yWu Mu3u4[4yEuME+3jZ;} 3 Pd0jpVyEEth 4yh0yu8xjW E{uEEEh$:0yPa93~EPCM̍PF;3|MMM<j0ycE׋F!EuEEEh$:0yP3j^É] 3 Pd0VpVyE3uth 4yh0yuXjSރM_uEEEh$:0y냋]97~G4 jF;7|SVybUVM:|3@f4[4yf1^]U4[4yVMWf~W+?Pu6TVy _^]VB=S4yt$H PjVyPVy~tvjVyPVyf^ÐUVW};t>x} =S4yuy} Qq` 3 @f_^]UVMQ P^]UVMQ P:^]UQSVuف~EEEh$:0yP肸u 4[4y!s_W@}j@_;|;| ;}}PjVyPVytx3fLp p _^[]UVW} Mu 4[4y!y&W6?RUVRPTVyM W| _^]UQSW}مt A~fLAEeV7f^tR yt:yu fy:ut }uuhd0yjfuW P_[]UQQ4[4ySVuWc} xBGPjVyPVyuEEEh$:0yP˶WuVTVy 3> k 3~9PPWVPPVyE~&Pu3WVjjVy jC ;utVjVyPVy_^[]UVW}x;x~ wWz} t?Pu 6TVy x;4[4yt3f x_^]UQSVuWxD}x=7;r6t)PVu 3TVy?PuPTVy_^[]EEEh$:0yP胵̐UVuWtXSZ;6B;/J+;&6Pu JPTVy p3ҋAfAu VRr0[_^]VW7>~1?S4yt$v8FEPF P7TVy _^ÐUSVW} p~4~0;~ +ǍEPyPQTVy փ +׉Q_^[]j0y謴3SS7Vyta 4[4yM]VM]%VP7Vyt*;w&HMPEPMpQSMM<3ÐUVx~uP|VyYYt+^]VWpNxø 4yø퐐j0a0yѢ4[4y3ۉE؉]܉E]]ԉ]vyM1M)E~EMEġ4[4yu6j]ȉ]ЉE]Ef0EEPuMHMEĉ]PfyMM?MEȉMEЉMM3!4yÍMyMq'j0yš١4[4y3uEu}uEu O_ QEPbu GΉu9K~7C EPtMAM;K}܋}C <}uZ}97tyd0jjpVyt R}tIEPOW7y Q*uMtQ"4yþMCj 0y#eE4#4yeIx7EPEPjQuxE QEEPQuEQ蒟 4yP0yUVx1M uN3u@3҉EEEEEPRUUU ^]UP4y3ʼnESVW} 3ۋÉuuwO MOMtWVuppVyMօxFu9t"G9^~N WV x?C;^|O_tWVuppVy֋MO M_^3[]O␐UP4y3ʼnESVW3fEE]PSSSSSSQj jE]3PFVyu'VyPh%4yjIh4%4yhP%4yjVy3?WuSVyu%VyPh`%4yjOh4%4yhP%4yjVyuVyƋM_^3[]ÐAllocateAndInitializeSid failed %dShimLib::SearchGroupForSIDSecurityUtilsCheckTokenMembership failed: %dUU!tPU t?U#t.U"t}t}u}u }u3@3]ÐU<P4y3ĉ$8SVW33=p4y}D$8SPVy0;(!t$ D$ PӍL$2y@<4y\4y~ 2y0y0y0y<4y\4y.2y)0y10y90y<4y\4y-2ya0yi0y=4y\4y{%2y @=4y\4y+2y0y0y0y0y0y0y0y0y10y90y=4y\4y?2y=4y\4y >2y>4y\4y=2y@>4y\4y<2yt>4y\4ykA2y0y0yi0yq0y>4y\4yP2y>4y\4yN2y?4y\4yvN2y4?4y\4yM2yh?4y\4yQ2y ?4y\4yb2y0y%0y-0y-0y-0y50y=0yE0y0y0y$@4y\4y2yH@4y\4y2yl@4y\4yK2y@4y\4yE3y @4y\4y2y]0ye0ym0ym0ym0yu0y}0y0y0y4A4y\4y^3y 0y0y0y0y0y!0y0y 0y0yA4y\4yr3y=0yH0yS0yA4y\4y2yu0y}0y0yHB4y\4y3ylB4y\4y(3yM0yU0y]0y0y0yE0yP0y0y0y0y0y0yQ0yY0yC4y\4yy!4y4C4y\4y 4yXC4y\4y"4y0y0yDP&LDDP&TD@DP4&Dpcacli.dllADVAPI32.dlldwmapi.dllDDDDDDDE$E4EJE`ExEPcaMonitorProcessOpenServiceWOpenThreadTokenOpenProcessTokenGetSecurityInfoGetFileSecurityACloseServiceHandleOpenSCManagerWStartServiceWQueryServiceStatusCreateWellKnownSidDwmSetWindowAttributeDwmGetWindowAttributeAPT%E9APT6u E9UGPuRSDS6~G0}\b%AcLayers.pdbD+!0y+!0y N@0pi30ty3`p1pi30ty3`vids8qs:$D6d0pi30ty3`p1pi30ty3`vids8qIV508q 0pi30ty3`p1pi30ty3`vids8qs:$D6`0pi30ty3p1ty3p1pi30ty3pvids8qTM208qTR208qP0pi30ty31ty32ty33ty31pi30ty31ty32ty33ty3auds8q8q6ORS p8q4w0yt0yx0yw0yt0y0V4yw0yt0yy0y8y0yy0yy0y$z0yy0yxv0yv0y`z0yz0y{0y$z0y{0yxv0yv0y{0y{0y8|0y$z0y8|0yxv0yv0y|0y$z0yy0y@}0y}0y$z0y}0y~0ys0yt0yt0ys0yt0yU4ys0yt0yu0yPu0yu0yu0yJC[6QMT,~kʻh7uJKzf5i!@BP@}0y0y0y0yt0y0y0yt0yT4y0yt0y00y0yt0yH0y0yt0y`T4y0yt0y0y0y00yP0yԕ0yP0yxv0yv0y0yx0y0yԕ0y0yxv0yv0yh0y0yЗ0yԕ0yЗ0yxv0yv0yX0yt0y0yX0y0yX0yt0yS4yX0yt0y00y00y0y0yԕ0y0yxv0yv0y0y0yH0yԕ0yH0yxv0yv0yЛ0y80y0yԕ0y0yxv0yv0y 0y0y0yԕ0y0yxv0yv0yH0y0y0yԕ0y0yxv0yv0yp0y؟0y00yԕ0y00yxv0yv0y0y 0y0yԕ0y0yxv0yv0y0yp0yТ0yԕ0yТ0yxv0yv0yX0yģ0y0yx0yȤ0yx0yX0yإ0yX0yq0y(0y00y0y0yx0yP0yx0y0yإ0y0yq0y(0y`0yШ0y(0y0y0y A3y(0y0y|0y0y̪0y}0y~0y@}0y~0y~0y~0y`0y~0y0yd0y<0y0yxv0yv0yx0y0yx0y 0yx0y$0y@0yx0yP0yx0yd0y0yj0y0y0y0y 0y0y$0y$0y0yP0y0yd0y00yj0yX0y0y؄0y<0y؄0yxv0yv0y`0yą0y0y<0y0yxv0yv0yh0yІ0yh0y0y 0y<0y0yxv0yv0y0y0y0y 0y0y$0y@0y0yP0y0yd0y 0yj0yH0y0yH0y 0yH0y$0y$0yH0yP0yH0yd0yȉ0yj0y0yX0y0y<0y0yxv0yv0y(0y0yЌ0y<0yЌ0yxv0yv0yX0y0y0y<0y0yxv0yv0y0y0y@0y<0y@0yxv0yv0yȏ0y`0y00yІ0y0yԐ0y0y0y0y0y0y,0y0yP0y0yt0y0y0y0y0y0y̑0y}0y~0y@}0y~0y~0y@}0y~0y~0yl&~&&&&&&&&&& &,&4&>&L&X&f&p&z&&&&&&&&&&&&&&&&&2&@&N&V&`&l&&&&&&&& & &*&@&V&j&&&&&&&&&&8&P&d&~&&&&&&&&2&H&v&&&&&&&&.&B&R&d&v&&&&&&&&&&6&D&V&b&j&x&&&&&&&&&&4&F&Z&h&z&&&&&&&&&&6&J&^&r&~&&&&&& &&*&@&P&\&l&&&&&&&&&&"&,&8&D&P&Z&f&r&|&&&&&&&&&&&&&(&Z<&L&X& d& n&z&&&&&&&&&&*&<&V&f&|&&&&&&&& &&&:&X&t&&&&&&&&& &0&D&X&h&v&&&&&&&&(&D&^&v&&&&&&&&&8&D&P&d&p&~&&&&&&&&&&*&@&L&`&t&&&&&&&&(&:&P&^&n&z&&&&&&&&&8&\&l&|&&&&&&&&&&*&8&F&N&d&t&&&&&&&&&&*&6&J&`&v&&&&&& &$&:&P&l& :0y&&&&&&&&&L&&P&p&&t&&h&&&\&&@&P&D&x&D&|&&8&& &(&&& &&&& &$&&(&,&&0&8&&<&@&&D&RPCRT4.dllWINSPOOL.DRVsfc.dllSETUPAPI.dllKERNEL32.dllMPR.dllOLEAUT32.dllSHLWAPI.dllSHELL32.dllGDI32.dllUSER32.dllapi-ms-win-eventing-provider-l1-1-0.dllapi-ms-win-security-base-l1-2-0.dllapi-ms-win-core-registry-l1-1-0.dllntdll.dllmsvcrt.dllapphelp.dlll&~&&&&&&&&&& &,&4&>&L&X&f&p&z&&&&&&&&&&&&&&&&&2&@&N&V&`&l&&&&&&&& & &*&@&V&j&&&&&&&&&&8&P&d&~&&&&&&&&2&H&v&&&&&&&&.&B&R&d&v&&&&&&&&&&6&D&V&b&j&x&&&&&&&&&&4&F&Z&h&z&&&&&&&&&&6&J&^&r&~&&&&&& &&*&@&P&\&l&&&&&&&&&&"&,&8&D&P&Z&f&r&|&&&&&&&&&&&&&(&Z<&L&X& d& n&z&&&&&&&&&&*&<&V&f&|&&&&&&&& &&&:&X&t&&&&&&&&& &0&D&X&h&v&&&&&&&&(&D&^&v&&&&&&&&&8&D&P&d&p&~&&&&&&&&&&*&@&L&`&t&&&&&&&&(&:&P&^&n&z&&&&&&&&&8&\&l&|&&&&&&&&&&*&8&F&N&d&t&&&&&&&&&&*&6&J&`&v&&&&&& &$&:&P&l&(SE_COM_AddHook)SE_COM_AddServer+SE_COM_HookObject,SE_COM_Lookup@SE_ShimDPF6SE_GetShimId memcpy memcmp{__CxxFrameHandler3f_CxxThrowException_wcsicmp~_stricmpatolGstrstr_vsnwprintf-sprintf_sivsprintf_s0sscanf|wcsncmp_wcsnicmp memmove7_scwprintfwcsrchr_vscwprintf_vsnprintfwcsspniswctype\towlowervwcscpy_sqwcscat_srwcschrwcspbrk_wcslwrwcsstriswspaceq_XcptFilter_amsg_exitfreemalloc_initterm??1type_info@@UAE@XZ7?terminate@@YAXXZmemsetl_except_handler4_commonRtlFreeHeapRtlAllocateHeapRtlInitUnicodeStringcRtlEqualUnicodeStringRtlImageNtHeaderNtCloseRtlReportExceptionBNtTerminateProcessRtlRaiseExceptionNtQueryInformationProcessBRtlUniformbRtlValidateHeapRtlCaptureStackBackTraceRtlCaptureContextWinSqmAddToStream{NtOpenFileNtQueryObjectcLdrAccessResourceNtQuerySystemInformationFRtlLengthRequiredSidRtlInitializeSidNtQueryInformationTokenRtlSubAuthoritySid~NtOpenKeyNtQueryValueKeyRtlGetOwnerSecurityDescriptoraRtlEqualSidRtlAppendUnicodeToStringRtlFormatCurrentUserKeyPathRtlFreeUnicodeStringRtlGetLastNtStatusRtlSetLastWin32ErrorAndNtStatusFromNtStatus RtlCreateUnicodeStringFromAsciizRtlCreateServiceSidnRtlNtStatusToDosErrorBRtlDosPathNameToNtPathName_UNtQuerySecurityObjectRegCloseKeyRegOpenKeyExWRegOpenKeyExARegGetKeySecurity RegEnumKeyExW(RegSetValueExWRegCreateKeyExW!RegQueryValueExW@GetTokenInformationCopySid.GetAclInformation-GetAceAllocateAndInitializeSidCheckTokenMembership,FreeSid1GetFileSecurityW6GetSecurityDescriptorDaclEventWriteScreenToClientReleaseDC4GetDC<CharUpperWEnumDisplaySettingsWGetCaptureGetAncestortWindowFromPointInvalidateRectDestroyWindowDispatchMessageW?TranslateMessagesGetMessageWSetLayeredWindowAttributesqCreateWindowExWRegisterClassExW!LoadCursorWGetClassInfoExWKillTimerEndPaintBeginPaintDefWindowProcWGetSystemMetricsqPostQuitMessageSetWindowPos#ChangeDisplaySettingsAEnumDisplaySettingsAGetWindowThreadProcessIdDGetGUIThreadInfo7GetDesktopWindowGetThreadDesktopSetCursorTMsgWaitForMultipleObjectsGetProcessWindowStationlPeekMessageWAllowSetForegroundWindowGetUserObjectInformationWEnableWindowuGetMonitorInfoWGetDIBits1CreateCompatibleDC(GetObjectTypeGdiFlushDeleteObject6CreateDIBSection DeleteDCVCreateSolidBrushuOffsetWindowOrgEx0CreateCompatibleBitmapSelectObjectrOffsetClipRgnsOffsetRgnSHGetFolderPathASHGetFolderPathWMStrStrANStrStrIAStrCSpnAUStrToIntAStrChrW,StrCmpNW+StrCmpNIWRStrStrWOStrStrIWStrCSpnWXStrToIntW(StrCmpNIAStrChrIWAStrRChrIABStrRChrIWDStrRStrIAEStrRStrIWStrCSpnIAStrCSpnIW(IntlStrEqWorkerA)IntlStrEqWorkerWMPathFindFileNameWHStrRetToBufW%StrCmpNA@StrRChrAStrChrACStrRChrWStrChrIA+WNetGetConnectionWGetCommandLineAgIsDebuggerPresentWriteProcessMemorySReadProcessMemoryWaitForDebugEventDeleteFileACopyFileA^IsBadReadPtrCreateProcessWWerRegisterMemoryBlockMapViewOfFileCreateFileMappingWUnmapViewOfFileSetNamedPipeHandleStateDeleteCriticalSectionCreateEventWGetVersionCopyFileWwIsWow64ProcessGetTickCountGetSystemTimeAsFileTimeaTerminateProcessCSetUnhandledExceptionFilterUnhandledExceptionFilterResolveDelayLoadedAPIDelayLoadFailureHookFreeLibraryGetSystemDirectoryASearchPathWIGetFullPathNameWGetCurrentDirectoryWCreateMutexWOpenMutexWCreateActCtxWGetTempFileNameWGetTempFileNameAGetTempPathA;GetFileSizeSetFilePointerCreateFileW GetVolumeNameForVolumeMountPointWGetSystemDirectoryWcGetModuleFileNameWGetWindowsDirectoryWGetDriveTypeWVGetLogicalDriveStringsW.QueryPerformanceFrequency-QueryPerformanceCounterWaitForSingleObjectExCreateThreadResetEvent DeleteFileW5GetFileAttributesWHInitializeCriticalSectionAndSpinCountLeaveCriticalSection%EnterCriticalSectionlstrcmpATExpandEnvironmentStringsAsTlsAlloc lstrlenWGetShortPathNameWlstrcmpiWvTlsSetValueGetShortPathNameAlstrcmpiAuTlsGetValue lstrlenAGetVersionExWCompareStringWCompareStringAGInitializeCriticalSectionOutputDebugStringAjCancelIoWaitForSingleObjectPReadFileLInitializeSRWLock GetCurrentThread(QueryFullProcessImageNameWLoadLibraryWReleaseSRWLockExclusiveAcquireSRWLockExclusiveReleaseSRWLockSharedGetCurrentThreadIdAcquireSRWLockSharedAddAtomW{FindNLSStringExhIsNLSDefinedString6HeapReAllocLCMapStringEx3HeapFreeMultiByteToWideCharGetProcessHeap/HeapAllocSGetLocaleInfoExCompareStringExLCIDToLocaleNameWideCharToMultiByteUExpandEnvironmentStringsW DeleteProcThreadAttributeListJInitializeProcThreadAttributeListResumeThread SetLastErrorReleaseActCtx"QueryActCtxWGetCurrentActCtxLocalFreeLocalAllocPGetLastErrorQExitProcess GetCurrentProcessgGetModuleHandleWGetSystemFirmwareTableCloseHandleCreateFileARSleep GetCurrentProcessIdGetTempPathW(GetEnvironmentVariableASetEnvironmentVariableAWriteFileGetStartupInfoALoadLibraryAGetProcAddressCreateDirectoryWsFindFirstFileWFindNextFileWSetEventhFindClosedGetModuleHandleAPnpIsFilePnpDriverSfcIsFileProtectedSfcIsKeyProtectedRpcStringBindingComposeW\RpcAsyncCompleteCallfRpcBindingFromStringBindingWdRpcBindingFree^RpcAsyncInitializeHandle0I_RpcExceptionFilter[RpcAsyncCancelCallNdrAsyncClientCalluRpcBindingSetAuthInfoExWRpcStringFreeW0y00y0y0y0yL0y0y 0y@0yP0y`0y0yp0y0 H`'ll4VS_VERSION_INFOD%D%?StringFileInfo040904B0LCompanyNameMicrosoft Corporation\FileDescriptionWindows Compatibility DLLp(FileVersion6.3.9600.17415 (winblue_r4.141028-1500) InternalName.LegalCopyright Microsoft Corporation. All rights reserved.(OriginalFilenamej%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.17415DVarFileInfo$Translation <0@0H0P0,9D9Y9o9999999:(:>:T:j:::::::;;0;F;\;r;;;;;;; <"<8>>>`?h?l?t?x???????????????? 00001111111P2T2X2\2`2233!3B3I3O3Z3d3n3x3333333 44(4:4d4r4w4444444445E5J5q5x555555556 666,6s66666777%7*727}777778/868s8z88899U9\9999:M:T:::::1;8;;;;; <>i>p>>>>>C?J?????050<0q0x00000+1211111!2(2y222233S3Z3333394@4444455_5f5555536:6y66666666667 7'7,717d7777 8'8;8B8I8e8l8s888888888888d9p9v99999999:(:0:8:@:;.G>>>>>>>??(?-?5?R?????????@L00)0Q0[0e0000000111A1K1U1}11111111 212;2E2m2w22222222!3+353]3g3q333333344%4M4W4a44444445 55=5G5Q5y555555556-676A6i6s6}66666666+8^8p8~8888888888899"919@9O9U9`9f9m9t9999999999:::w:::::;L;;;;;<|>>>>>>>?4?P40!0m0000000 11!1=1C1I1Q1c11111111111222#252U2[2a2i2{22222222223'3-333;3M3m3s3y33333333334 44?4E4K4S4e44444444444555%575W5]5c5k5}5555555555 6)6/656=6O6o6u6{666666666777!7A7G7M7U7g77777777777888'898Y8_8e8m88888888888 9+91979?9Q9q9w9}999999999: ::#:C:I:O:W:i:::::::::::;;!;);;;[;a;g;o;;;;;;;;;;; <-<3<9>#>+>=>]>c>i>q>>>>>>>>>>>?/?5?;?C?U?d?h?????`$00<0P0g0|00000001 1::; ;;;<;B;H;N;T;Z;`;f;l;r;x;~;;;;;;;;;;;;;;<<<$<-(>4>X>>>>>C?H?Z?x??? 00r0w0000000011"121B1R1b1r11111111122!212A2Q2a2q22223O33333$4D4d444445$5D5d555556$656;6A6H6Q6[6a6i6t6667 7777(7/777A7Y77777777777"888888888;;;)<<<<<<< ==D=l======->@>H>>>>>??[?p?x?????0D0X0`000001/1@1H1111122]2p2x22223.3@3H3x33333344S4d4l444445H5f5x555555666H6P6666666 7"747`7777778i888888 9*9<9D99999::}::::::;;L;|;;;;; <$>,>m>>>>>?,?w?????X0&080t00011D1Z1l111220282s2222222323D3b3f3~3333333334(454I4[4444444&535G5f5555555.676b66666 7!757;7K7Q78899U9g9x9}999999999::*:6:?:Q:X:_:t:{::::: ;;;;3;7;G;[;p;|;;;;;;;;;;; <<%>1>8>=>E>J>W?b?k?u?z??????????'020;0E0J0S0\0c0k0u0000001"1-171<1E1N1U1]1g1{11111)282?2F2K2T2]2c2k2u22222222W3f3m3w3|3333333333333G4V4]4g4l4u4~44444444444u5}5555555556 66(6,6<6P6e6q6z666666666667 77)7G7Q7V7^7c7#8P8j8w88889959U999999:':S:]:::::; ;3;S;w;;;;;;;;; <9<[>>'>,>>>>.?7?=?X?c?l?????????? 00-0K0U0[0c0m0s0y00000000000001111111112222 2*232J2S2n2x22222;3T3\3f33333333333444044X5f5m5t5{5555555555526?6M6666666666688888889 99#9(919;9M9T9999: :$:(:5:I:]:i:q:::::::::::::::::p;{;;;<<$<*>> >'>7>>>>>>>>>>>l?}?????????? 00"0*0200 1#1-121:1C1J1R1\1162Q2e222?3|3333333334444555555555555666y66666666666667Y7m7x777788 999999999:::; ;;2;<;B;I;N;V;_;r;;;;;<]=g=l=t=|==>'>2><>C>H>Q>Z>a>i>s>>>>?.?5?:?B?X?\?j????????????? W0a0w0}0000001&111111112 252D2K2P2X2n2r22222222222333'3,333333334 44!4*414?444444444445 5555555555555"6+656:6C6L6S6[6e6p666667A7J7^7m7777777777777788'8<8G8P8e88888888888899 959?9D9L9Q9::;R;;;;<9!>E>d>}>>>>>>>>>??4?;?F?h?????????0h0)060N0t0000000000011"1'1<1C1V1]1p1w111111112/22233A3333333333,4D4l44444455*5C5l555556a666666677"7)797P7`7r777777888#8*858A8l8888888$939=9B9J9`9d9t9999999999: ::%:8:?:R:\:~:::::::; ;;;|;;;")>6>M>X>>>>>>>?(?8?X???@00%090l00 141;1e1111111111 22(2:2U2`2222222 333"3-3@3g3x33333344(4_44444444475F5P5U5]5s5w55555555556661686K6R6e6o666666677A7K7i7s7x777 88"8'8-848<8G88888888888889 9g9r9{999999999999G:R:[:e:j:s:|::::::::';2;;;E;J;S;\;c;k;u;;;;;;< <<<#<,<3<;>g>r>{>>>>>>>>>>>>7?B?K?U?Z?c?l?s?{??????P 000%0*030<0C0K0U0`0n0|00000001 111%101>1L1V11111111111222&2w22222222222222G3R3[3e3j3s3|333333334"4+454:4C4L4S4[4e4p44444445 555#5+555@5Q5_5i555555556 66 616?6I66666666666777)7w77777777777777G8R8[8e8j8s8|88888888'929;9E9J9S9\9c9k9u99999:::%:*:3:<:C:K:U:`:q::::::::; ;;;%;0;A;O;Y;;;;;;;;;;<W>b>k>u>z>>>>>>>>>>'?2?;?E?J?S?\?c?k?u??????`0 000#0,030;0E0P0^0l0v000000001 11 1+191C1111111111111 22g2r2{222222222222G3R3[3e3j3s3|33333334"4+454:4C4L4S4[4e4p4x44444555!515B5K5i5p5z5555555556&6=6W6666737_77778;8g88889C9o9999:K:w::::;,;J;T;Y;a;i;;;;;; <9>(>>>>>???$?*?0???W?]?f?????p80#0T0}00000111-1^1h1r11111 2*242E2S2s2222233i3z333333333334 4`4m4}4444445>5H5Y555555566+6Y6w666666N7g7q7{777777788(8=8G8Q8W8y8888 909:9D9J9x999999:!:,::h;n;w;;;;;w<=,=;=Q=^=q============>&>->7><>E>N>S>Y>>@?F?g?m?v?????0(0A0G0W0p0{000 111)191E1T1\1e1u1}111111111122'212<2Y4i4r4w4}4444444 5$5.585>5^5n5{5555555555555666Q6X6^6f6r6~66666666667777"7'757H7N7]7777777=8d8q8{88888889)9:9O9U9999999::!:0:6:<:L:a:i:{::::::::::::::;!;3;B;i;{;;;;;;;;;< <<%<0<8>>>>>>>>? ??1?=?R?Y?e?m?y?????v0000011"1*191@1E1N1U1Z1c1j1o1x1112 22 2%2.252:2C2J2O2X2_2d2m2t2y222253E3O3V3\3c3h3w3333333333 444_4444444 5+5\5`5l5566*656E6Q6[6n6y66666)737=7N7s7}7777778)838D8R88888888 99#92999B9H9S9Z9|99999999 ::':1:A:L:g:w::::::::::;&;-;7;<;D;U;s;z;;;;;;;;;;;<<1<;<]b>h>o>}>>>>>>>>>>>>>??0000)0;0O0000-171I1Z111111222'292C2f2222223$3>3H3g3q3}33333334464@4_4i4u444444445(5B5g555555<:k:}:::::::; ;';9;C;r;|;;;;;;;;;;;;;;;<<<0<46F6P666666,7P7c777788S8_8888889 9*9/979M9Q9a9u99999999999 ::':1:6:>:C:;;#;);1;=;F;M;U;_;;;;;;;< %>.>@>G>L>T>>>>>>>>???#?+?F?M?R?Z?b?u????????000'0/0=0000000000001"10171H1O1`1g1x111111111112222222233*3I3P3[3b3m3t33333333333344c4n4v4444444444445 555&5D5^5d5k5u5555555666 6%6.676>6F6P6j666666666667 777)727:7J7Y77777777777 8)808;8B8M8T8_8f8888888888889999+:4:K:v:~::::::::#;2;<;A;I;_;c;s;;;;;;;;;;< <<$<7<> >>> >)>0>8>B>[>l>>>>>>>>???+?3B3P3h3z33333333333G4R4[4b4g4p4y4444444'525;5B5G5P5Y5`5h5r55555 66665696I6]6r6~666666666666b7k7r7w777777788 88+8/8=8U8g8s8|888888888(999@9E9M9b9f9s99999999999: ::T:j:p:w:~:::::::::::::::;;;;;;;;;;;<<<&<7<<<<<<<<<<=='=0=<=F=W======> >>0>E>Q>Z>m>t>y>>>>>>>>?'?P?Z?_?g?r?x??????<000111111111112.22222(3X3333334J4b4l44i555 6-6666666667#7/787K7R7W7l7s777777868m888899W9{999::::::::::; ;;0;;;Q;b;l;;;;;;;;;< <&<+<0 >>> >)>0>8>B>U>b>r>>>$?5???D?L?a?e?u??????????0 000a00000000001 111!141;1N1U1h1o12"2+252:2C2L2S2[2e22223 333#3,333;3E3a3o333333334 4414?4444444444445m5~55555555555666!6C6M6R6Z6b66677 7%7.777=7E7O7[7`7i7p777777789999'90969>9H9U9g9p9|9999:(:/:9:>:G:P:V:^:h:x:::::::i;t;;;;;;;;;;;;<48>?>I>N>W>`>f>n>x>>>>>>>>H?X?_?i?n?w???????????,0x00000000000001%1*1G1111111111122#2/2O2T2k22"30393E33333334414>4\4i444444455-5:5U5b5L6W66666666666 777_7l7777777 8868C8a8n888888899/9<9:::;;;S;;;<4<\<<<<<<<<<<<=`=u===S>>>>?@?H?P?U?_?i?n?v?~???/0D0001101<1[1l1v1{111111111111212;2@2H2P2222223,303E3^3k3p3}33333334444#4(41484K4R4e4l444444444 5575A5c5m5555556636A6R6d6r666666677'767<7B77777778 8888,838J8P8d8k8p8x888888889999999::1:=:F:X:_:f:{::::::::::; ;;;%;2;I;X;o;;;;;D >>>!>(>0>:>E>>>>>>>>>>>'?0?:???H?Q?X?`?j?u???????? 0 00g0p0z000000001111(11181@1J1U11111111111'202:2?2H2Q2X2`2j2u22222222223W3`3j3o3x33333334 444!4(404:4E444444 55-545}555555555#6=6L6V6[6c6y6}6666666667 77$777>7Q7X7k7u77777778%8G8Q8s8}888888999999999::::4:L:::::::;;-;4;;;;;;;;;!?>q>>>>>>>>>>>>&?5?>> >*>4>9>A>I>>>>>>>???5?@?O?^?g???????????@00!1E1U1\1m1u1}1111111112 2'222;2E2J2S2\2c2k2u2222'323;3E3J3S3\3c3k3u333444%4*434<4C4K4U4b4445 555#5,535;5E5R5o55556 666#6+656B6S666666667 77"7?777777777788/888888888889$999999999999:::::::;;+;5;:;B;W;[;k;|;;;;;;;;;;<>>>!>)>1>F>x>>>>>>>>>>>? ???&?+?3?;????????P 00'020A0P0Y0{0000000000S1b1r1y11111111112@2u222222223.353D3L3T3Z3f3x333333 44!4)41474C4b4|4444445%505D5K5Y5n5555W6]6h6|6666667 77$70797G7P7^777777777778 88$868h8~888888888999H9^9e9t9|999999999':1:G:V:_:p:x:::::::::;;&;8;F;w;;;;;;;;;<9>,>2>=>Q>X>f>x>>>>>>>>> ?8?N?U?d?l?t?z???????`0.050D0L0T0Z0f0x000000111G1Y1d1l1}11111111 22$2,262@2O2w222222223 33(3R3`3g3v333333333424@4G4V4444444445.5?5H5g5p5~55555555555 666%6/6<6F6O6U6]6c6q6v666 7k7y777777777777777 888*868?8_8z888888888888889 999-9>9H9M9U9j9n9~999999999: :::-:4:;:N:X:q:x:::::::::;;(;2;T;^;;;;;;;<<0<:<\>>>.?6?S???? 70H0000?1i11111112 22s2~222222222223 333#393J33334 414=4Q4X4b4j4o4y44444444556666x666666666777'7:7K77777888888889$9)919B9L9Q9Y9!:9:::,;[;e;j;r;;<<<<<<<====&====>>>>->>>>>>?*?8?O?Y?^?e??00*0\000000011'1g1r1|111111*2;2222222223a333333333334 4f4q44555&5;5B5j5z55555566!6)6J6U6]6l6y666666666666 77D7T7o7777H9^9999:T:X:d:v:::];g;m;u;;;<<'<<< ==\=`=p====== >>>>?\*0A0K0P0X000"131111111111111112!222<2A2I22222222333;3B3L3Q3Y3j33333333333444$4F4P4r4|4444445"5,5N5X5z55555556*646V6`66666667727<7^7h777777788:8D8b8l8q8y88999x:::::::::: ;;5;?;D;L;r;;;<<<<<<=="=*=U=Z=====> >>G>T>^>c>k>>>>>???????? 00&0-0N0e0~000000171?1I1S1X1`1n1111111111111222&2R2333333 424:4M4R4^4h4m4u44444 5G5X5b5l5u5z55555546A6\66666667)7.767c7m7r7z77i88888q99::::::;;<<= ==&=9=G=U=>}>>>>>>e?????,+0j0t0y0011$141>1C1K112B222233E3O3T3\3333333344)4.454F4P4U4\4~4444444455556 646o6666 7L77777777708:8m8888889P9`9j9o9w999$:;:I:p:~:::::::::::;;!;,;4;E;O;T;\;< >1><>D>K?\?n?????000"0N0X0h0r000000000011&1+131=1G1L1T12223,3M3W3g3q3333333334 44445"5,515J5T5Y5a56,6>666666666 7717<7D7U7q7|77[8k8888888888889::::R:W:g:n::::::;;;$;,;B3>A>F>Q>V>a>f>>>>>>>> ? ?4?H?\?p????????0$080L0`0t000000011(1<1P1d1x111111112%292M2a2u222222233)3=3Q3e3y333333344-4A4U4i4}4444444455"5E5[5o555555556!676K6_6s666666667'7;7O7c7w77777778848F8r?x????00'0000111b2g2w2~2)343:3M3T3c3m3t33 4!4>4G4Q4V4^4445505<5F5K5S5|55r6w666B7G7U78888R8W8g8n888888889999999::::E;`;;;;;;;;; <$<(<,<0<4<8<<<@>>>>>>>>A? 112 222/2@2G2T2Y233*313?3F3b3h3z33333333334-4]4g4l4t4444444.5U5r55556@6L6q6{66666666888q9v99999::::`;d;h;l;p;t;x;|;;;;;;;;;;;;;;;;;;;<82>F>0*0/000 11-1E1L1j1111111 2H2Q2b2i22222222222344"5'5;5P5555566 6;6@66666666666667a7f788888$8,;F;Q;g;;;;;;;<@<,=E=w========>>>(>2>7>?>R?W?g????@T060000011111A2F2_2m22222223B3H3Z3a3o3v33333333333442484N4U4`4g4t4{4444444 5555a6f6k6p666666666667 7R7X7j7q7777777788888~999999:::C:Y::;;';.;Q;V;[;`;;;;;;;;;;;;;A >->Y>t>>>>>>> ??/?4?Q?V?s?x????????P00"0?0D0a0f000000000 11-121O1T1q1v111112;8;J;Q;_;f;<<<<== ==1=6=;=@=a=f=k=p====>O>V>v>|>>>>>>?$?????`0 00%0/040<0Q0000&141W1f1q11111220272`2g2v2222223%3F3d3}33334!5(525F5M5\5555596667$7)717E7[8a8s8z8888f:::::::: ;;);O;;;;;;2>>$>2><>A>I>f?{??????p #0/0@0000L1[1e1j1r11111122,2c3m3w3|3333334 4A4K4P4X4<5@5U55555555556 666&6G6l66666999:>:~:::::8;x;;;;;;;)<0<5<=+>2>7>@>I>P>X>b>>>>>>>>??/?;?D?W?^?c?x???????"0+050:0C0L0S0[0e0p0000000000111(101g1t1111112 222$2.2=2H2l22223 333$3-343<3F3P3_3s3333 44(4-454J4N4^4o4x44444444444 55'5.5>5E5L5a5k5p5x555556666-6L6R6Y66666668888888888889*91989=9E9N9T9\9f9p999997:J:Q:X:]:e:n:t:|:::::::W;g;p;z;;;;;;;;;;;N>S>e>k>p>>>>>>>>>??%?*?3?>!>(>->5>>>D>L>V>`>o>>>?'?0?:???G?P?W?_?i?s????&070A0F0N0c0g0w00000000001 11&1-1@1G1W1^1e1z1111112 22$2)2G2N2s222222222222223W3g3n3u3z33333333344w444444444444 5!5.555555555555516>6Q6666666667757<7F7K7S7d7777777777778 8888k8p8888888888$9<9B9G9\9b9r9{99999999:::%:*:3:<:B:J:T:^:m::::';7;>;E;J;S;\;b;j;t;~;;;;;G.>5>>>E>X>_>r>y>>>>>>>>>??G?L?^?d?i?x????????00"0+050:0C0L0S0[0e0000000000111*1g1111112222&202?2l22223 333 3'3/393C3R333344442464F4W4`4~44444444444455&5-545I5S5X5`5h555555566B6Z6`6e6z66666666666'777>7E7J7S7\7b7j7t7~7777G8W8^8e8j8s8|88888888W9b9l9v9{999999999 :e:v::::::::::::; ;;;;B;K;R;e;l;;;;;;;;;;;%O>>>>>>>>>>???J?k??????0 000&000?0{00001 11&1*1:1K1T1r1y111111111112 22!2(2=2G2L2T2\2222222 3363N3T3Y3n3t33333333334'4.454:4C4L4R4Z4d4n4}444475G5N5U5Z5c5l5r5z5555555G6R6\6f6k6t6}666666667Z7k7u7z77777777777880878@8G8Z8a8t8{88888888899E9J9\9b9g9v99999999: :#:.:6:@:E:N:Y:`:g:q:::::::::;<;L;V;`;w;;;;;;;;;;<<<<<<<=6=S=g=|==r>>>>>>>>>>>??-?7?>>:>g>q>>>>>>> ??"?=?l????,<0e0001!161E1[1n11111'212F2U2k2~2222273A3Y3h3333354D4S4b4q444444444F5g5x5}55555788/8u88888888888888 999$9-959?9D9L9U9]9c9m9r9z99999::::;;4;:;T;7>%>*>4>S>b>>>>>>?!?????????H0000000000&1F1b1|11111 2/2;2M2[2g2H4S4\4f4k4t4}44444444H5S5\5f5k5t5}55555555J6[6e6j6r6666666666677 7)707C7J7_7i7n7v7~77778 8-8k888#9<9a9f9k9u9}9999999999::: :(::::%;^;o;;;;;;;< <<'<6>?%?0?:?I?T?t???0$0,0>0h001 1@1b1{111111222223&3r33333344T4c4s4444455 666677A77778828U8888 9*919B9I9v9 :/:q:x:::X;;;;;; <-F>Y>e>>>J???60=0P0Z0a0x00011!1?11X2o22333384J45 5'5,5?5V5]5566667E8l8888888'9?9999999d:n::-;4;;;;!<<<=W=k=s=x=====> ?F?h??? :0S00000z111K2222438333'4[444444444444446666666666666666677&7:7`7g7s7z7777778,99<<=+====<>o>>0???0 0+010:0A0p00011+1@1U111111222?2]2i2p2{2222233%3>3H3v3334$4/4445?5T55555556-676F6f666667 7,7X77788(878>8J8W8a8{8888889 99$9,949<9D9`9l9t9999999999999:::,:4:<:L:T:p:x::::::::::;;; ;<;D;L;`;l;t;;;;;;;;;;;;;<< <(<<> >(><>D>L>p>x>>>>>>>>>>>> ???0?8?@?d?l?t?????????????@0 0(000D0L0T0h0p0x00000000000001 110181@1H1P1X1`1h1p11111111111222 2(2D2L2T2h2p2x222222222222222 3330383@3T3\3d3l3t3P0 0P9T9\9d9h9p9x9|9999999999999999:::$:,:0:8:@:D:L:T:X:`:h:l::::::::::::::::::; ;; ;$;,;4;<==,>>D??`D\00t12233044H55`66x788994::L;;d<<|=>> ??pD800P11h223 44$55<66T77l889::(;;@<>?D00,11D22\33t45566077H88`99x:;;<<4==L>>d??L|011 22833P44h5666 66666 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|666666666666666666666p8t8|88888888888888888888999$9(90989D9L9X9`9d9l9t999999999999999999: :: :(:,:4:<:H:P:\:d:h:p:x::::::::::::::::;;;;$;,;8;@;L;T;X;`;h;t;|;;;;;;;;;;;;;;;<<<<(<0<4<<>>$>(>0>8><>L>P>`>l>t>>>>>>>>>>>>>>>>??? ?(?,?4?