MZ@ !L!This program cannot be run in DOS mode. $ʻȠȠȠS%ȠS%ȠS%ȠS%ȠɠYȠS%ȠS%ȠS%ȠS%ȠRichȠPEdpR"  DhGSV`0]GGG(G8G<@.text `.datatDd@.pdata(G`@@.idataGx@@.rsrcG@@.relocG@BH\$Hl$H|$ATAVAWH 3MLH\$@Hl$HH|$PH A_A^A\ÐH\$Ht$WH IH=LNjHH\$0Ht$8H _̐HHX L@PHHVWAVH@Lމ\$ ;wiu9cu 3ۉ\$ B;L Mt<]a;DƉRaL$pAы؉D$ 3ۉ\$ s$hL$`mL$pI؉D$ 3ۉ\$ s$hL$`3L$pIG؉D$ 3ۉ\$ s$hL$`;u~E33I$hL$`\$ E33I$hL$`\$ H Ht$E33I$hL$`\$ tunL$pI؉D$ 3ۉ\$ s$hL$`H' Ht0=_t'L$pIЋ؉D$ 3ۉ\$ s$h;jH$xH@A^_^ÐHыH0Hcك.f%-t = 2t = 2t = 2t =M 2t =V 2t =? 2t =( 2t = 2t = 2t = 2t=ttLD$@3ҋ t = 222H0[Ð̃jLA@A IHH HH0[0̐Ð%GeH%0Hx3H=O#̋`#H=L%@I;s##HHtHI;r#HH hku HHH9l#̐H(=GHHH"H 3H(̐H\$ UHH HHeH2-+H;:#H\$HHHUH ]ÐgEEH\$Hl$Ht$WAVAWH0H|$pH\AALLH|$ (؃5H\$PHl$XHt$`H0A_A^_ÐH(=\H2=:3=) 3=3= 3=#3=+3=33=;3=C3=Mt3LD$0Jf=33H`H(ɃgwLHcAL1A81IeH(̐H\$Hl$VWAVH03MIHHtHYH`G3.HtHZH9G^.HtHcHG.sHtHdHG._HtHmHĖG.KHtHfHG /7HtHgHvG5/#HtHhHOG`/HtHiH(G/HtHjHG/HtOHcHڕGu;H HHGMHչHH̋HtH H|G/0u)H1DKiL~HHD$ GH\$XHl$`HH0A^_^ÐUVWATAUAVHPHH3HD$HMHڋH-HHHD$0L$(HL@HAXHD$ sG3L- L%Tdw3qGHt"MZf9uHcH<<PEu |S0HHL$HH3HPA^A]A\_^][ÐH; uHfuHFUVWATAUAVAWHxHH3H$`L$$D$HLl$0\$(Dd$ MEHHH#HH$`H3MHxA_A^A]A\_^][ÐH\$WH HHh؅H\$0H _E3E3333fH gH#(H OHT̃= @LD$PHՋ+95gaỸ=PuL̃=9?̃=2̃=%̃=̃= ̃=̃=̃=̃=̐H\$Hl$Ht$WAVAWH0H|$pH AALLH|$ ؃/H\$PHl$XHt$`H0A_A^_ÐUVWATAUAVAWHxHH3H$`L$$D$H|Ll$0|$(Dd$ MEH8HH1HH$`H3HxA_A^A]A\_^][ËsDeH%0Hx3H=̋H-Ht1H=LLHH;HGHHzESHJGHAm̹dH(H395$Z+n̐%֏GH\$Ht$WHPMHLH D LHE4ME$LT$@H\$8LD$0HLHAH|$(HD$ GH\$`HHt$hHP_H}*HH@84uHL$HLHeH %`LHI0ŏGHHtMHHAO@4)L$H-H0$HHHeH %`LHI0[GHHt L3H"HHNHA3A$G)H ŐGH VH|)H@G[)5?GǐGDH3GHHM)HT$@AHȉt$@fD$D G3HGHPGH8GHҎGH\l#mGHWwnGH dHvHHHH p L(HHH HpHH8H S p HH@H Hp(HHhH L`0HHpH HpHHH y pPHH xHpXHH L``HpxHHLHHLHH̐%GHyH HH $LHH HH(H zHL H8H0@HHH LPHhHXH HpH`H HxHH LHH zHHH HH aHHH H LHH GHHH  H H .HHHH i LHPH HHxH c HH HHH LHH H(HH 0HH H8HH sL@HX`HhHLpHHLHHLHHLH H(L0HHPHXL`HxHLHHHHH H8H HH@HH HhH HpH HH 5HH HH MHHH HH HHHL H = H(H H0H8@HHLPH  HXH  H`HhpHxLH HH qHHHLH HH JHHHLH A HH HHHLH  HH H H(0H8L@H S HHH HPHX`HhLpH , HxH HHHLH HH HHHLH HH HHHLH ? HH HH H(L0H  H8H H@HHPHXL`H HhH HpHxHLH HH HHHMtA6H LH|At$(HD$ G̐H\$Ht$WH HjHH؃c&Ht$8H\$0H _ÐH\$UWAUAVAWHHpEXLuPED$(HLHLt$ H$HpA_A^A]_]ÐH\$Hl$Ht$WAVAWHPH$L$H$$Lt$@H|$8HD$0$t$(D$ HtHL؃#H\$pHl$xH$HPA_A^_ÐH\$Hl$Ht$H|$ AVH0D$hLt$`AD$(HHHLt$ ؃#H\$@Hl$HHt$PH|$XH0A^ÐH\$Hl$Ht$WAVAWHPH$L$H$$Lt$@H|$8HD$0$t$(D$ HdHL؃ H\$pHl$xH$HPA_A^_E33H+G3LJ HHEEfEH AHD$0HRH$HD$(HL$HD$ ;G3H3ɋDf}EHMMfMH$H#H"H!H HHH`HPHEЍVE3E3HH=HD$ 6GU3kGHHDMLHLd$ GD Hf|OHIuH3ɃЉEGHEHEHMHfEGHtHVHMGHiHMGH\HMG3(EHEfEHt HGHEHuEH]HZL3HAH\$(HD$ YGH@GHMLIEHAHD$(HHD$ GL$H$AE@Mt0L Lt$(L=LL$ H!AGN̐WRPMitigationNotifyFnfdwReason(%d) pszCmdLine(%s)KERNEL32.DLLADVAPI32.DLLNS_WRPMitigation::InitializeHooksMultipR1111` p1)1NULL.dllGetHookAPIsNotifyShims lJ}@WRPMitigationAcLayersLayer Shims uninitialized.Layer Shims initialized.EmulateSortingVistaEmulateSortingWindows61FaultTolerantHeapVerifyVersionInfoLiteVirtualRegistryVistaRTMVersionLieVistaSP1VersionLieVistaSP2VersionLieWin7RTMVersionLieWin8RTMVersionLieWRPRegDeleteKeyRegOpenKeyExARegOpenKeyExWRegCreateKeyARegCreateKeyWRegCreateKeyExARegCreateKeyExWRegSetValueExARegSetValueExWRegSetValueARegSetValueW%S%s%s%s ShimLib::GetHookAPIsShimLibManifestCheckAccessCheckCopyFileACopyFileWCopyFileExACopyFileExWCreateFileACreateFileWDeleteFileADeleteFileWMoveFileAMoveFileWMoveFileExAMoveFileExWOpenFile_lopen_lcreat_lwritePrivCopyFileExWSetFileAttributesASetFileAttributesWVERSION.DLLVerInstallFileAVerInstallFileWRegDeleteValueARegDeleteValueWSetFileSecurityASetFileSecurityWpdwHookCount(%d)\Default[%S] [%S]NS_WRPMitigation::LogSfpKeyW[%S] ValueName: [%S] ValueData: [%S] RegSetValueExW: wrp key is mitigatedNS_WRPMitigation::LogSfpValueWHL$L\$M3LT$L+MBeL%M;sfAMEM;uL$L\$HÐL hL0|HJHIA6THHEA̸[H;tzGA ̹eH9HHH HL;u L;LHLH3hH;t`zG̹̽VH B\MƺIEHMyGHEHE:{GH1E{GH1EyGHH1EyGHMH3EH3HM HEyGE H HH3E H3EH#H3-+H;HDH2zGeH%0Pu H+HT$@yGu HL$PHHL$@E3]yGtH*Ll$0H$PMEƋՉ\$(Dd$ HH&3zGyGtyG=OHw?3zG-̐")WRPH\$WH HuGtH HH\$0H _:H H3wGHwGyG HH [H%wG̐HL$HH uGHHD$HE3HT$PHL$HLvGHD$@H|$@tBHD$8HD$XHD$0HD$`HD$(HHD$ LL$@LD$HHT$P3uG#H&HH|HHH HcHH$H HkH HHkH HXHHkH tHHHkH )HLhHkH HLhH CSHĈÐHxH _tGHHD$HE3HT$PHL$HtGHD$@H|$@tBHD$8HD$XHD$0HD$`HD$(H?HD$ LL$@LD$HHT$P3tG#HHHHHHHH`F @JHkH BHH BNHxÐ%rG%rGLcALD$@3ҋ=LD$@3ҋ YHGAi HAmLHHD$  iG)̐LD$PHH nHhGMHչHHLD$PHՋ!H HhGMHչH!BHeLD$PHՋ[UwH H=hGMHչHk*UH:LD$PHՋItLH xHgGMHչHtzHLD$PHՋg!H &HogGMHչH6DHLD$PHՋ]H H=GgGMHչHe,HLD$PHՋH HfGMHչH HLD$PHՋEH 0HfGMHչHBHcLD$PHՋ_uH HQfGMHչHW.H8LD$PHՋJH HeGMHչHH LD$PHՋ}H :HkeGMHչH@H@̐hH(j3LD$0JfC3LD$0Jfj3LD$0Jf=R3LD$0Jfhq3LD$0JfÁ3LD$0Jf3LD$0Jf3LD$0JfX3LD$0Jf3LD$0JfR3LD$0Jf̐H-3[ 95HLHHD$(H;AZA6HD$ dG3|RHl\̐H=6H=6H=6H=6uH=%7iH=Y7]H=7QH=7EH=793AHI8LHHD$0H8ADd$(HD$ 4cGA3pHgG|H7LHMHD$(HAHD$ bGHMDŁIIDH|$ (u7HE33 hGHtL*33dGHHDŁIIDH|$ u7HE33gGHtL 3R3dGHMtAHgE3HIDH|$ (uLDHIu.u7HE33gGHtL#33cGHRegCreateKeyExW: wrp key is mitigatedRegOpenKeyExA: wrp key is mitigatedMtAH5E3HIDH|$ uLDHI u.u7HE33eGHtL133fMbGHR̐RegCreateKeyExA: wrp key is mitigatedE33HJeGt&L'3HDIH/35.RegSetValueExA: wrp key is mitigatedcGaeH%0Pu BHz2HT$@bGtjL$PHgHL$@E3ibGtIHFLl$0H$PMEƋՉ|$(Dd$ 8HH3cGH̐WRPE33HcGL#3HE33H3b̐RegDeleteValueA: wrp key is mitigatedeH%`L3HH0H%^GUVWATAUAVAWH(HH3H$L$$3HAMD\$PHD$X\$TMMDCUHT$`E3bGDsAs \$PA LD$PHL$`Eκ lbGJHyHHA8\=uDžy HA8 uqu uA >HcH_GLH3bGLHuH~"L$PDM3҉|$(HD$ _GML-~,u$HcDMINL$P3҉t$(H\$ U_G H\$XD$T~t~%u!WaG1_GMH3_GZHd$@Hd$8H 2HL$0D$(HL$`DMAH\$ LaG^GMH3^G WaG3H$H3H(A_A^A]A\_^][ÐLHXH$ICH$ICHZ2IC؋$D$(H$IC`GHXÐUVWHHH3H$H$`AE3IEAUHT$P\`Gu HWG`G3;Hd$@Hd$8H1HD$0$hHL$PD$(DLNjHl$ `GH$H3H_^][ÐUVWAVHHGH3H$H$`L$pAE3IEAUHT$P_Gu HW_G3@Hd$HHd$@H1HD$8$hLt$0D$(HL$PDLNjHl$ !_GH$H3HA^_^][ÐLHXH$ICH$ICH0ICH$IC؋$D$(H$IC^GHXL]0H%^GSVWATAUAVAWHl$H(HH3HEH3AMDH\$X|$PMDGUHT$`E3S^GL;As |$PA#LD$PHL$`A ^GKyHHA8<4uHcH[GLH3]GLHuHL$PDM3҉t$(HD$ U[GDuHWpA sBH|$@H&/H|$8HD$0HL$`D$(HD$XEMAHD$ ZG-HcHZGLH3,]GLHu$H+]GZGM3HZGcH|$@H|$8H.H\$0HL$`EMA։t$(HD$ eZG[GzH|$@H|$8H\$0HL$`EMA։|$(H|$  ZGD$THcH0ZGLM3HW\GHHtuH|$@LH-H|$8HD$0D$TD$(HL$ HL$`EMAYG~5L$PH|$8H|$0D$(HD$XDMĺHD$ [GYGM3HnYGYGMH3ZYG~3[G W[G3HMH3IH(A_A^A]A\_^[]ÐLHXH$ICH$ICH,IC؋$D$(H$ICXGHXÐUVWHHH3H$H$`AE3IEAUHT$PZGu HWZG3;Hd$@Hd$8Hd,HD$0$hHL$PD$(DLNjHl$ ,XGH$H3HcHSGLH3VGLHuH~"L$PDM3҉|$(HD$ SGML-~,u$HcDMINL$P3҉t$(H\$ iSG H\$XD$T~t~%u!WUGESGMH3SG^Hd$@Hd$8H ʰHL$0D$(HHL$`DMAH\$ PRGMH3RG W'UG3H$H3轻H(A_A^A]A\_^][ÐLHXH$L:HLEH$ICH$IC$MS؉D$(H$ICHAPHXÐUVWHHH3H$H$`AE3IEAUHT$PXTGu HWCTG3?Hd$@Hd$8HHD$0$hHL$PD$(HDLNjHl$ PH$H3蘺H_^][ÐUVWAVHH?H3H$H$`L$pAE3IEAUHT$PSGuHWSGGHd$HHd$@HŮHD$8$hLt$0D$(HHL$PDLNjHl$ 8H$H3ѹHA^_^][ÐLHXH$LVHLEH$ICH$ICH$MSIC؋$D$(H$ICHQ8HXÐH\$T$WH HCI؋Hu$H 2$4RGHMH,RGHHL$83HtHtLHЋ W0RG3H\$0H _ÐNlsValidateLocaleH\$Ht$WH HIHHu$H #QGHQHQGH3HHtHtLHЋ WQG3H\$0Ht$8H _ÐGetNamedLocaleHashNodeMLHMEMHSVWATAUAVAWHl$H(HH3HEH3AMDH\$X|$PMDGUHT$`E3PGL;A#;AAs |$PA#LD$PHL$`A yPGnyHHA8<4uHcH NGLH3HL$ HL$`EMA~5L$PH|$8H|$0D$(HD$XDMĺHD$ ,NGKGM3HKGKGMH3KG~3NGWNG3HMH3蚴H(A_A^A]A\_^[]ÐLHXH$LHLEH$ICH$IC$MS؉D$(H$ICH! HXÐUVWHHըH3H$H$`AE3IEAUHT$P8MGu HW#MG3BHd$@Hd$8HdHD$0$hHL$PD$(H DLNjHl$ H$H3uH_^][ÐHH0A8 tA8 tzLG3AtA8 HB`A@A@u3AH HEHEEA@H0]ÐLI[IkIsI{ AVH@3HIHL5ILEAQHEHICL$(HKICxFGuEHu#L5G H\ Ht7$HHHuЉ3H/ du9 u pHH aHXHHH ZX HHH THHH8H HX(HH@H GHP0HHhH HXHHHpH 9XPHH HXXHH &HP`HH dHXxHH HH vHHH HH(H pHH0H HXH HH`H HHH HHH HH HHHHHH H8@HHHPHhpHxHHHHHHH HHHH HHHtH>L_H@A_\$(HD$ CGHH\$PHl$XHt$`H|$hH@A^ÐEmulateSortingWindows61NS_EmulateSortingWindows61::InitializeHooksMultiGetNLSVersionExGetNLSVersionH\$Hl$VWATAVAWH AMHA;t,3D%H I8nH 39Ypcs Da,X9tcH GGW˅t!HH90tH9tAH;rAH 7GGtHTD`0H CL;v DaPH_InHHH0LPLHuHD`\H}HHfDw D5 foD3HGͫG,HwHo0ftL H Q#6H BGH OD17HH;rHnD`@I!H ]Da0HMHPHHl$`HH\$PH A_A^A\_^ÐH\$Hl$Ht$ WATAUAVAWH0IDH;t+3|H 6aE3D9-AtNH ZEG0AͅtHH9(tL9(tH;rH EGH*D9hpt XLAHeH%0HHH;HxH;s H;p|L3H@GH L3HLHEH0P eH0H;= H~H3ρͫOQ 3ρ񪪺܋O,6 HW0H3H;s 1HH;rHfDoH9tEHGL-H FLκ]H|$(HD$ CHX HXA H9ot:L6H LκlH|$ CHXHXA@HX EEH;H;pL=H NLκHl$ TCHEXH:XAE3HH# c3ρͫO H3ρ񩪺܋O,L`H LκH|$ BHXHXHDX DLHHa#HXDAupOO,E3IH>t@THYX$ HLX(HAXTDIH H&X4H[LAHPxHl$pHt$xH\$`H0A_A^A]A\_ÐH HlGH AGyGH |AGHHh2ۄu"H aAG CGH FAGH [ÐH\$Hl$Ht$ WATAUAVAWH@2AIIDLA;'t,3D- H o139=8tOH E@Gυt!H$L9 tH98tAH;rAH }@GAHeH%0HHH9H~H;ps H;L3IlHDhHDhAE3HIpAH  3ˁͫK: 3ˁ񩪺܋K,L H y LκH\$ 7>H(DhHDhHDDh DLHIALKH;HE0H;wzAtC H;vLH 03L+nCfk 3-Ls0HtL H ;  -H |9GH K1+HI;rHuAtSCL{035HtLH ,H  9GH K13HI;rcAAH;HwDhHLmII0DhXLL3 D$xCHtL#H T&,H 8GHC0H KH;sL$xA1IL;rHMAIPLHD$0HuHF@\ZHK0H3zH;s 1HH;rDC HIf{L;HCIHMfEoIGED3-%fAo IAGͫAG,Io0HtL&H W)+H 7GI OL;s E1/IL|$0Ho9xpu1KHT$8K,E3H* uHLAIPx@LIMH)Dh$ HDh(HDhX HDh8H5LLAIPHHL\$@HI[0Ik@IsHIA_A^A]A\_ÐsH ?FHH W:G9 Gtʉ- GH 0:GH [Ð !H\$WH ;t9t#3=u"H j*u HxpH%H\$0H _H̐H\$H|$UH$HpHOH3H`HL$b3D3f|$`>HbD3f`&DG8HL$(3҉|$ Qu3+8GLD$`AH3JtLL$`L:H S9H`EL`L_H (8f9|$`LT$ T$0HD$`ZHIDf9`!HD$(H`IDHD$89zu|$XE9zvB!9z vB 9zvB@9zvB9zvBt(D$XL$HLL$ A3ɉ\$@\$PM4GH`H3L$pI[I{I]Ð(null)FTH SQM: process name: %ws NS_FaultTolerantHeap::FthClientReportSQMFTH SQM: version: %ws H\$Hl$Ht$WH0LT$hL\$`HuCMu>Mu9Mu4t/u*H-@`L!D$(H]L!D$ H@hH8LT$(L\$ HHtfH 936GH"HubH4GVHL6GHHHu4H R6GHH3H\$@Hl$HHt$PH0_D 3EtHH91twHA;rC,H4GLL˺H26GHt" ӠH`H<ȉ- @H L5GTH^H<̐HHXHpHxL` UAVAWHXH+H=H3HHr33Afp*~@H D3f H D3f H"D3f ߣ3Ht$PHD$Xu3 ZtH3D褣H HL5L LIκI4W4GLpHA3yLpLSIt4H HpAL L[IF4H79p G9pv9pv9pv9pv LH D"L LzIΉ\$ 3LL$@LH 3HL$@ALD$LAyLuI3|$LAAAM3HMHD$ht$hHD$`|/GL$pHEHD$XHt$tHEHD$puHD$PHD$PHD$`2GH2GHL$@HHD$`D|$0ELHt$(HD$ 1HL$@LpL3HL$@L LAHL$@L LAHL$@L LAT$HL$@LL$HED$2y$T$HLDȉT$ I,#HL$@fDL$HL"I2H DyAHH3ǘL$I[ Is(I{0Mc8IA_A^]ÐFTH WER: version: %ws NS_FaultTolerantHeap::FthCreateWerReportFTH WER: process name: %ws FTH WER: timestamp: %ws %uFTH WER: errors: %ws %08X FTH WER: Failed to get report consent levelApplication NameApplication VersionApplication TimeStampError Types MitigatedFTH WER: report submission failed (hresult: 0x%X, 0x%X). FTH WER: report successfully submitted (result 0x%X). H\$Hl$Ht$WATAUAVAWH LH DY/GH L/GH }HvH;H)HYH3HH H H3CH%I;u wH{03HH;s 1HH;rC E3H)fDCKK,EtkCD5-L{HD3H+fEtL?H pBH *GH KD13HH;rHLF03IPxHHH; H ).GH rH\$PHl$XHt$`H A_A^A]A\_H%-G̐LI[IkIsWATAUAVAWH0E3ALAHFICICICICEu7I~HAW HӅti?HH;rH -GD9-NFv1FH X-G3H <-GL=m5GH3Ho0HtLH H ()GH OH;s 13HH;rHHHGL?L98t)HH8IH=HH H;H;HI;HHKLA03HI;s 1HI;rA PfDiH)LII,HD$(HL$ H HL$ HCH9H H\$(H9 gH m+GH|$ HD$ H;PH7HGH_H9~jH98aH0HF{ͫHuS{,uJCDC HH+ȋAH0Lt)i?HI;r;tVLH LM+H>@H3@CHAH+L3H0 CD=RLcHD3Ls0H+fEtL`H cH 8&GH KD1;HI;rHLE03IPxHD$ H;H _*GH\$`Hl$hHt$pH0A_A^A]A\_ù)reuse after free: %p NS_FaultTolerantHeap::FthDelayFreeQueueInsertH\$Hl$H|$ AVH 3HL5K9=-oI)G3ɅtHH9tH98tH;rIw)GtpHhlIW)GE3E3ɋȅt@LMI:AEI9MRADDD;r;s;sIII$ ~I(G H$hd;t#3-uyH WubHxpu{39=tAI(G3ɅtH H9tH98tH;rIh(Gu 3HHHH\$0Hl$@H|$HH A^3̐H\$WH  ;tot#3=uXH ruAHHxp;u#;uHxt HH\$0H _H(̐H\$Hl$Ht$WATAUAVAWH LHHA3IE3HHE3H H 'G5FL{?H]El$HiL9|u}ŃHHIHI ƃuNH()(J)I(B )A (J0)I0(B@)A@(JP)IP(B`)A`(JpII)IHuM觑H,t?5F%?;SqHHiHHH ǃuK()(J)O(B )G (J0)O0(B@)G@(JP)OP(B`)G`(JpII)OHu MH H zH\$PHl$XHt$`H A_A^A]A\_H%%G̐H\$Hl$Ht$WH HH *%GKFH-&3%?AHiH/H*H%GE3AQ LEHt/JLljb!GH H\$0Hl$8Ht$@H _H%%G̐H H$GHu3+H!GHtDHL HH [Ð%08XHHXHpHx UAVAWHhHH7H3HpLHL$b33Aft$`%D$@t$D$GLL$@LD$`H3#Gu3LL$`L;H T"$HT$DHL$`BDuL\P IH=%!GMH3WHHtHL$`LE3uH!GLH3SxZLL$HLD$PHۤHtLD$PAHAPA@ EH D$0L$(T$ LIϺ UHz!GHL3SxHpH3L$I[(Is0I{8IA_A^]ÐFTH WER: process path: %ws NS_FaultTolerantHeap::FthGetVersionString0.0.0.0%u.%u.%u.%uH8d$@Hd$ AAQ LD$@HHGy H %HHL$@HL$@&Gdz#H8ÐH\$Ht$WH H !GH H!G3HHtzHtuHH!GHHtYHH!GHHt=HHu!GHHt!HHY!GHHwË3H\$0Ht$8H _Ðpsapi.dllversion.dllGetFileVersionInfoWGetFileVersionInfoSizeWVerQueryValueWGetModuleBaseNameWH\$WH H Q G3HHu3HHh GHHtHHL GHHtHH0 GHHtHH GHeHtHHGHAHiHHGHHËH\$0H _Ðwer.dllWerpGetReportConsentWerReportCreateWerReportSubmitWerReportSetParameterWerReportAddDumpWerReportCloseHandleHHXHhHpHx AVH AIHLH iGHTHuHH%HHHHHH;vHH H ^G3AHHBͫͫsLsHkHt1HHCHGHC HGHC(HGHC0HG HC8HG(HC@3HKDB0E3LCHAQ J4GHxH\$0Hl$8Ht$@H|$HH A^ÐHHyH3H$HGHd$(d$$HL$@HL$ HD$0D$ D$8H$H3lHÐHHyH3H$D$@tL$DHd$HH9GHD$PL$XHd$`HL$@H$H3HÐUH HHM8HU0HM(U HU(HM(E3HRH GU HGH ]ÐHL$H83D$ HHtH9JuHQHtD@H9 ADD$ HL$@D$ t"HHAH9JuH9u HHB )H8ÐH\$Hl$VWAUAVAWH0HgILAHA;t,3D=jH C OHE3AH0)tH0H; H]H3ˁͫK 3ˁ񪪺܋K, HS0H3H;s 1HH;rHfDkH9tFHCL<H ULͺ]H\$(HD$ HDx HDx L9st;LDH LͺlH\$ HDxHDx@HDx D 3ˁͫK 3ˁ񩪺܋K,LH LͺH\$ >H/DxH#DxH Dy DLHI@tHt=4Ck 3Hs0HtLFH wI H GH K1;HH;rHHDx$ HDx(HH\$`Hl$hH0A_A^A]_^ÐH\$Hl$Ht$WH *IH;t@t#3-u)H v uHt H9H*LNjHH\$0Hl$8Ht$@H _H̐H\$Ht$WH HH;tC~t#35su,H f[uHtH;u HHHHH\$0Ht$8H _H8̐LI[IkIsWH@3HIHH5HELHZICL$(HKARICGu1HHHT $HHt~.du9WuqKHucHL!HHD$(HnOASHD$ GH2HǂHj3HEHFH HHH HHHH HXHH8H cX HH@H HX(HHhH HP0HHpH HXHHH XPHH HXXHH NHP`HH HXxHH 6HH HH(H HH0H tHHXH H`H [HHH HHH AHHH LHHHHHH H8@HHHPHhpHxHHHHHH HHHH HH HHH tHHH H(0H8H HtHƕL?HAb\$(HD$ &GHH\$PHl$XHt$`H@_ÐNS_FaultTolerantHeap::InitializeHooksMultiRtlAllocateHeapRtlReAllocateHeapRtlFreeHeapRtlSizeHeapRtlCreateHeapRtlDestroyHeapRtlWalkHeapRtlLockHeapRtlUnlockHeapRtlValidateHeapMSVCRT.DLLexitRtlExitUserProcessH88 ~tDH LHnHL$ A. G4~t LDk莸tdH 'aGH 2TGH -GGH :GH -GHHHH8HKL$HA<HD$  G3H8NS_FaultTolerantHeap::NotifyFnFailed to acquire heap manager mutexLD$LL$ SUVWH(3HBHH=WGx5HZLL$hHHӋ GxHH;wuf,^f,^zHtf.H(_^][ÐHHpHmH3HE3MtHHA8uMUMHLMHeIEA3HEH~HEHEHcHEHEH8HEHE.GHMH3wHp]Ð>(ShimLib) Hook EnteredApiNameUnknownNULLVWH@H lH3H$0HIHL$13AD$0~?HcHFHFHȉ|t3LIHL$0L˺Ht$(|$  Gx HL$0NGH$0H3vH@_^[ÐFTH: ASSERT: %s(%u): %sHHXHpHx UATAUAVAWHHHkH3H3HHM3At$0Hu}DD$4GO u)LH DvAEAAOAA^L%L DI_H'HMHt$8 GHELMLD$PHL$8t$(HD$`D$P0Ht$XD$h@Ht$pHt$xD$  Gy!L0DȺ-IH HD$8HHHuL.<IHT$0E3E3D$0C GuBI GI=uLS }L:Z@AE_HuLJmIHM3A;|) GLL$4LEH3 GI̅uL7|LMLMf< H3HLuDB HHE{HLHIEHuLH LcHtH9suLH M@LL$DHUAIH\$  Gul G=tLH x`4HK Gt2LH KiI GLY3HDB zHHM3AHzLIEHuLxH )[HtH9suLH 8LL$@HUAIH\$ ' Gul G=tLH #4HK Gt2LH ,I GLH/ WH}tLb9uuLLMEuLIC9wLI'DLAIDD$ j eH%`hPH GHH9t@t!HZ GHU GHH9tuHEuwAHH3pL$I[8Is@I{HIA_A^A]A\]ÐNS_FaultTolerantHeap::FthPipeReadMessageFailed to read message from the pipe. Pipe read message timed out. Client connection not allowed anymore. NS_FaultTolerantHeap::FthClientAttemptConnectionClient resetting connection skip counter to %x. \Device\NamedPipe\ProtectedPrefix\LocalService\FTHPIPEClient failed to open the FTH pipe (status: %x). Client failed to connect to the FTH pipe. Client did not find server listening. Will retry ... Client failed to set pipe into read message mode. Client failed to initialize mapped view. Client failed to get full image path. Client full path: [%ws] Client failed to write 'ping' message to the pipe. Client failed to read 'permission' message from the pipe. Client read an unexpected message type. Client was denied tracking. Client->MaximumAllocOverhead > 0Client->MaximumFreeOverhead > 0Client successfully connected to the server (AO: 0x%x, FO: 0x%x). LD$LL$ SUVWHHHaH3H$0HHL$13DD$0s?HcHFHFH<ȉttVLlHL$0LϋH$t$ Fx/L$+HHL$0LHcHFx HL$0%GH$0H3ukHH_^][ÐFTH: ERROR: %s(%u): H\$Ht$WH H :3A(sH=oHH3۾uH= LH/,;H=LHÇƹ ˇ H rH CGa;uBE3E33GH.Hu&L@HH GH,HHeH%`tLY5;uLmÇ5Lrfm?eH%`hPuGLH }L#H L_Ht$8H\$0H _ÐFTHSVCFTH shim applied by the FTH service. NS_FaultTolerantHeap::FthClientInitializeFTH shim applied directly as a shim. FTH shim applied with unrecognized COMMAND_LINE. Failed to create pipe event Client successfully initialized directly in passive mode (verifier is enabled). Client successfully initialized in passive mode (FTH server). Client successfully initialized directly in active mode (direct shim). *** Fault tolerant heap shim applied to current process. This is usually due to previous crashes. *** LD$LL$ SUVWHHH[H3H$0HHL$13DD$0on.?HcH?FHIFH<ȉtu?uWLoHL$0LHH$t$ jFx/L$+HHL$0LHcHNFx HL$0FH$0H3eHH_^][ÐFTH: %s(%u): H\$WHpH|ZH3H$`HHL$@3Apm3HDB HHD$@RmHHHHCHuLH gLHtHuLH CMLL$0HT$@AHH|$ FuwqF=tL3H `z4HOqFt=L.H iMHDFL=H vE,3H$`H3cdH$Hp_ÐClient failed to write 'acknowledge' message to the pipe. NS_FaultTolerantHeap::FthClientSendFinalAcknowledgeH\$Ht$WH0HA HH9AtL1H iT 3E3DG3HH|$(D$ FHHuLH ~y Y E3E3AQHHD$ FHu#LH AHFHHH\$@Ht$HH0_ÐNS_FaultTolerantHeap::FthpClientCreateMappedViewFailed to create Watson section object. Failed to map a view of the Watson section object. H HA HH9AtLH HSHHH uZD@()(J)I(B )A (J0)I0(B@)A@(JP)IP(B`)A`(JpII)IHu() AeH(HHKHHK HHHF HKH [H%F̐NS_FaultTolerantHeap::FthpClientInitializeWatsonViewH8=etFA(HL?AIHHD$ F2et LiH8ÐNS_VerifyVersionInfoLite::APIHook_VerifyVersionInfoAH8=:etFA7HzLCAIHxHD$ Fet LVH8ÐNS_VerifyVersionInfoLite::APIHook_VerifyVersionInfoWLI[IkIsI{ AVH@3HIHL5sIDKELAHEHICL$(HsKICRFuEHu#L5cHHt7$HYHcHuЉ3Hdu9zunH HcsHXHHH X HHH HHH8H THX(HP0HXHXPHH@HXXHtAJHxL>HAI\$(HD$ \FHݶH\$PHl$XHt$`H|$hH@A^ÐNS_VerifyVersionInfoLite::InitializeHooksMultiVerifyVersionInfoAVerifyVersionInfoWH\$WH Hk_HaHHHHHHD#H\$0HH _ÐH HHrHKH [d̐SVWATAVAWHH03DHYHKLEXHU@x;H{DsH}PDuHu LEPHUHHKH}PDuHHSH kL}XHt>DEt#AvAuDIHXd$ Dt$ LIHL;{teH %`LEX3HI0FH}PH;{teH %`LEP3HI0fFH(A; 3H0A_A^A\_^[]HA H0ALKHHD$ F@̐ExpandValueString for ValueName failedNS_VirtualRegistry::AddCodecValuesExpandValueString for Value failedHHD$ HH@HL$(vHHL$8hLD$(HT$8HL$hDZHL$8HL$( H\HD$8Hd$@HD$(Hd$0HHL$XHHL$HLD$hHT$8HL$hȱu`LD$hHT$(HL$h诱uGL WFLD$HHT$XHL$8L HL$(3HL$8(HL$hHĐ[Ð^%20 HJ(HJ8HJh_HJ8מHJ(˞HJX鿞HJH鳞HT$UH HHH ]ÐHXHD$0HD$hHD$ AE3HHHSt-HHD$ A( LH&FJHHL$8觝HT$8HL$h賨HL$hHhH Sm)HL$8֝HXÐSystem\CurrentControlSet\Enum[AirlineTycoon] Cannot open ENUM key!NS_VirtualRegistry::BuildAirlineTycoonHKLM\System\CurrentControlSet\EnumHJ8H0HD$XHHAE3HHD$ FHL$XHD$HHHD$(HD$PE3E3D$HHD$ FugLy3HHHtNH HHt"LL$PHAHD$ !eH %`L3HI0FHL$XFH0[ÐSoftware\Microsoft\Windows\CurrentVersion\Policies\ExplorerNoDriveTypeAutoRunHHD$`HKH3H$HWHD$0Hd$8HD$@Hd$HH(HL$P肚AHT$p3FHT$pHL$0蛛HL$0]yHT$0HL$@ PHD$0D@D+LL$@HL$0ޥH\$@HHL$P0HT$PH HtLd$ E3EAHHCH\$(H/HD$ AZLMH־FHL$PHL$@HL$0H$H3THĐ[ÐHKLM\Software\Microsoft\Windows\CurrentVersion\ShellCompatibility\ApplicationsFILEOPENBOGUSCTRLIDAdded FILEOPENBOGUSCTRLID value for app %SNS_VirtualRegistry::BuildBogusCtrlIDHJ0飘HJ@闘HJP鋘HT$UH0HHH0]ÐH8H HnHt!d$ L HAH#H ԩHHt!d$ L HhAHH8ÐHKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Client4.0.30319HKLM\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\FullH(3|3D3B3hC3H(C̐LHxHvFH3HD$`HH 8HICHvICHsICHpICHmIC؋kD$XHtd$ LL$0HTAHHL$`H3QHxÐ%USERPROFILE%\CookiesHKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Special Paths\CookiesHHDH3H$HL$03DWLD$03f\$tFH uH=HHD$LH$dx"d$ L$H$AH^$D$L H$dD$ ~x"d$ L$HAH L]H~H$H3NH[HKCC\Display\Settings%dHKCC\Software\FontsHKCC\Display\FontsH(H H2HtHqAHH(ÐHKCU\Software\Microsoft\Direct3DReleaseOwnershipBeforeDestroyDeviceH(H H.HtHAHH(ÐHKLM\Software\Microsoft\Direct3DH(H H.UHtHAHSH(ÐHKLM\Software\Microsoft\DirectDrawHUHHHEHXHH4HMSHHMFLEHUHM訢HMHMHMHEHe3LEHUHMݢHʺHMFuHкHMFuHκHMFuHԺHMFu|HMјHD$(HHD$ A LH%F>uHA E3AHku,HA HD$ LbHFHMHM4H$HĀ]Ð[DSCACHEPOSITIONS] Unknown device %sNS_VirtualRegistry::BuildDSCachePositions[DSCACHEPOSITIONS] No devices specified.[DSCACHEPOSITIONS] Unabled to add DirectSound hackHJHߎHJ8ӎHJXCHJ8黎HUHHHEHXHxHHHMHHMLEHUHMHMZHMPHJHEHe3LEHUHM=HH}HMFu{3HH4FuxHHF3LEHUHMԟHHMFuHǷHMFuHŷHMFuH˷HMFu|HMȕHD$(HHD$ A LFH߱F>uHA jDË׹auvHA HHMUHD$(HHD$ Ag LHlF,HAm HD$ LH?|FHMnHML$I[I{I]ÐNONESTANDARDFULL[DSDEVACCEL] Invalid Acceleration Level %sNS_VirtualRegistry::BuildDSDevAccel[DSDEVACCEL] Invalid Parameters[DSDEVACCEL] Unknown device %s[DSDEVACCEL] No devices specified.[DSDEVACCEL] Unabled to add DirectSound hackHJHHJ8HJXHJ8HUHHHEHXHHԴHMHHMLEHUHMHHM蚊HM萊H5GHEHe3LEHUHM}HiHMFtHoHMuFuHmHM[FuHsHMAFu{HMpHD$(HHD$ A LHF=uHA E3AH u,H A HD$ LaH2oFHMaHMH$HĀ]Ð[DSDISABLEDEVICE] Unknown device %sNS_VirtualRegistry::BuildDSDisableDevice[DSDISABLEDEVICE] No devices specified.HJH黈HJ8鯈HJXHJ8闈HXHD$0HHL$8HL$8HFuH[A $E3AH謭u,HA HD$ LNHϬFHL$8HXÐ[DSPADCURSORS] Invalid number of millisecondsNS_VirtualRegistry::BuildDSPadCursors[DSPADCURSORS] Unabled to add DirectSound hackHJ8kHUHHHEHXHH@HM_HHMRLEHUHM贘HMHMHCHEHe3LEHUHMHְHMFuHܰHMFuHڰHMFuHHMFu|HMݎHD$(HHD$ A0 LH1F>uHA6 E3AHwu,HxA< HD$ LnHFHM΅HM@H$HĀ]Ð[DSRETURNWRITEPOSITION] Unknown device %sNS_VirtualRegistry::BuildDSReturnWritePos[DSRETURNWRITEPOSITION] No devices specified.HJHHJ8HJXwHJ8HPHD$0HHL$8HL$85HF؅u HA^ LHGK4DJLH$uHAd HD$ KF"\$(HHD$ Ai (FHL$8HP[Ð[DSSMOOTHWRITEPOS] Invalid number of millisecondsNS_VirtualRegistry::BuildDSSmoothWritePos[DSSMOOTHWRITEPOS] Unabled to add DirectSound hack[DSSMOOTHWRITEPOS] Added DS Hack Smooth Write Pos, %d msHJ8'H8H єHBHt!d$ L HeAHH8Ð4.07.00.0716H8H mHޫ5Ht!d$ L HAHH8Ð4.08.00.0902HXH*2H3H$@HL$0?F=wSLHL$0xdH HHtLd$ LL$0HsWAH+H<L]HvAHD$ FH$@H3Ht.d$ E3HEAHiHtH mH0H8ÐHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceBorlandReboot1SVWAUAVAWHHPHeXePL H 336H ;H LHHEXH0AE3HHD$ mF@A_ADmPeH %`HI0-FHHceH %`DEPHI0MFHH3HEHD$8H!t$0H!t$(H!t$ 3D(LIHxpHI$LHt]LIH֓x/LIHLxd$ HLAIKHE3IDmPHEHD$8Hd$0Hd$(Hd$ HMXLMPL F=H HGvH HlcH HyPAHE~HtsLMHHEHEHDt$ LMHHuEHDt$ uLMHHjEHDt$ ZLMHH_EHDt$ ?H HI踿L-uHHLMHEIHEHDt$ LMHH`EHDt$ LMHHeEHDt$ LMHHbEHDt$ LMHHoEHDt$ LMHH|EHDt$ tLMHHEHDt$ YLMHHEHDt$ >LMHHEHDt$ #LMHHEHDt$ LMHHEHDt$ LMHHEHDt$ LMHHEHDt$ Dt$ LMHHEHLMHHEHDt$ LMHHEHDt$ fLMHHEHDt$ KLMHHEHDt$ 0LMHHEHDt$ LMHHEHDt$ LMHHEHDt$ LMHHEHDt$ LMHH EHDt$ LMHHEHDt$ LMHHEHDt$ sLMHH(EHDt$ XDt$ LMHEH-H=LMHHBEHDt$ "LMHH?EHDt$ LMHHDEHDt$ LMHHYEHDt$ LMHH^EHDt$ LMHHkEHDt$ LMHHhEHDt$ LMHHmEHDt$ eLMHHEHDt$ JH HûHHLMHEIHEHDt$ LMHHr EHDt$ LMHHw EHDt$ LMHHt EHDt$ LMHH EHDt$ LMHH EHDt$ LMHH EHDt$ kLMHH EHDt$ PLMHH EHDt$ 5LMHH EHDt$ LMHH EHDt$ LMHH EHDt$ LMHH EHDt$ Dt$ LMHH EHLMHH EHDt$ LMHH EHDt$ xLMHH EHDt$ ]LMHH EHDt$ BLMHH EHDt$ 'LMHH EHDt$ LMHH EHDt$ LMHH EHDt$ LMHH EHDt$ LMHH EHDt$ LMHH- EHDt$ LMHH: EHDt$ jDt$ LMHEH? HOLMHHT EHDt$ 4LMHHQ EHDt$ LMHHV EHDt$ LMHHk EHDt$ LMHHp EHDt$ LMHH} EHDt$ LMHHz EHDt$ LMHH EHDt$ wLMHH EHDt$ \H H շHHtsLMHHEHEHDt$ LMHHEHDt$ LMHHEHDt$ LMHHEHDt$ οH H GHHLMHEIHEHDt$ 葿LMHHEHDt$ vLMHHEHDt$ [LMHHEHDt$ @LMHHEHDt$ %LMHHEHDt$ LMHHEHDt$ LMHH4EHDt$ ԾLMHH1EHDt$ 蹾LMHH>EHDt$ 螾LMHHKEHDt$ 胾LMHHPEHDt$ hLMHHeEHDt$ MDt$ LMHHeEH2LMHHoEHDt$ LMHHtEHDt$ LMHHyEHDt$ LMHH~EHDt$ ƽLMHHEHDt$ 諽LMHHEHDt$ 落LMHHEHDt$ uLMHHEHDt$ ZLMHHEHDt$ ?LMHHEHDt$ $LMHHEHDt$ LMHHEHDt$ Dt$ LMHEHHӼLMHHEHDt$ 踼LMHHEHDt$ 蝼LMHHEHDt$ 肼LMHHEHDt$ gLMHHEHDt$ LLMHHEHDt$ 1LMHHEHDt$ LMHHEHDt$ LMHH EHDt$ HteH %`L3HI0FHteH %`L3HI0FHMXHtFHPA_A^A]_^[]HKLM\EnumHKDD\Config Manager\EnumSYSTEM\CurrentControlSet\Enum\PCI%xPCI\HardWareKeyProblemHKDD\Config Manager\GlobalHKDD\PerfStatsHKDD\PerfStats\StartSrvKERNELVCACHEVFATVMMHKDD\PerfStats\StartStatKERNEL\CPUUsageKERNEL\ThreadsKERNEL\VMsVCACHE\cCurPagesVCACHE\cMacPagesVCACHE\cMinPagesVCACHE\FailedRecyclesVCACHE\HitsVCACHE\LRUBuffersVCACHE\LRURecyclesVCACHE\MissesVCACHE\RandomRecyclesVFAT\BReadsSecVFAT\BWritesSecVFAT\DirtyDataVFAT\ReadsSecVFAT\WritesSecVMM\cDiscardsVMM\cInstanceFaultsVMM\cPageFaultsVMM\cPageInsVMM\cPageOutsVMM\cpgCommitVMM\cpgDiskcacheVMM\cpgDiskcacheMacVMM\cpgDiskcacheMidVMM\cpgDiskcacheMinVMM\cpgFreeVMM\cpgLockedVMM\cpgLockedNonCacheVMM\cpgOtherVMM\cpgSharedPagesVMM\cpgSwapVMM\cpgSwapFileVMM\cpgSwapFileDefectiveVMM\cpgSwapFileInUseHKDD\PerfStats\StatDataHKDD\PerfStats\StopSrvHKDD\PerfStats\StopStatH H zHsHHt-H0H(H9HHRH H [ÐDevicePathProgramFilesPathWallPaperDirH(H yH&轪HtH AH軵H(ÐHKLM\System\CurrentControlSet\Services\W3SVC\ParametersH(H EyH& LHH(̐HKLM\SOFTWARE\Macromedia\FlashPlayerActiveY_BOGUSKEYHKLM\SOFTWARE\Macromedia\FlashPlayerActiveXH(H =xH.HtHAHH(ÐHKLM\Software\Electronic Arts\Future Cop\SettingsFullScreenH8H ywH:AHt!d$ L HAH菰H8ÐHKLM\SOFTWARE\Microsoft\Internet Explorer\Version Vector7.0000IEH\$WHPHH3HD$HH xvH@HHtvd$ L HQAH苯3CF6FLGHL$0D˺ D$ 襦xd$ LL$0H,AH6HL$HH39H\$`HP_ÐHKLM\Config\0001\Display\Settings16H\$Ht$UH$@HHH3HH&HT$PAHD$PHE3HD$XHHHD$`HHD$hHHD$pHHD$xHHEHD$HHD$ EFt0HL HAHD$ FV3۾H!\$8H!\$0H!\$(H!\$ 3H HM3HEAE%LD$PHMHqwL8HMHVwLHMH;wxzH tHUӤHted$ E3HSEAH'HtH gyH(HLHHD$(H#AHD$ ݰFHd$8Hd$0Hd$(Hd$ HL$HLL$@Lt$@FHL$HFHH3L$I[IsI]ÐSOFTWARE\Hasbro Interactive[Hasbro hack] Ignoring fix - no titles foundNS_VirtualRegistry::BuildHasbroPALFILE[Hasbro hack] Adding fix for %SH8H MrH>Ht!d$ L 6HAHcH8ÐHKLM\software\microsoft\Windows NT\CurrentVersion\Hotfix\ Fix DescriptionH(H ]qH%HtHHH(HKLM\Software\Microsoft\Windows NT\CurrentVersion\WindowsAppInit_DLLsH8H pH^UHt!d$ L H!AH裩H8Ð4.72.2106.9H8H %pHHt!d$ L HAH;H8Ð5.50.4522.1800HHH H3HEHH oHHEHHEHHEHHEEfEHHEHHEEfEHtd$ LMHAHFH nHȆ迟Htd$ LMHAHHMH3HĀ]ÐIE 6 6.0.2404.00006.0.2404.0Plus! VersionNumberLHHW H3H$HH nHICHICHICHICHICHICHICHICfD$p聞Htd$ LL$0H_AHѦH$H3HĘÐ%Programfiles%\Internet ExplorerHKLM\software\microsoft\IE Setup\SETUPHHXHpHxL` UAVAWHhHH H3HEHT &HD$ BH=C)E)MfD$(AEHEEL&HHfA<\uH w5H]HL$*ILHMLILEHT$ HIuH HD$*EL$2MEH7HHf<^uH w5H]HL$6HLHMLHLEHT$ iHIuL}HMLHs:LH'LH}HMH3lL$I[ Is(I{0Mc8IA_A^]ÐHKCU\Software\Classes\iTunes.BurnCDHKCR\iTunes.BurnCDHKCU\Software\Classes\MIME\Database\Content Type\application/x-itunes-itmsHKCR\MIME\Database\Content Type\application/x-itunes-itmsHKCU\Software\Classes\MIME\Database\Content Type\application/x-itunes-itpcHKCR\MIME\Database\Content Type\application/x-itunes-itpcHKCU\Software\Classes\MIME\Database\Content Type\application/x-podcastHKCR\MIME\Database\Content Type\application/x-podcastiTunes(8HXhxHKCU\Software\Classes\HKCR\H({etLH9H(ÐHKCU\Software\AdobeHKLM\Software\AdobeH8H 'sy+H0LIHrxAHD$ FH8ÐIndeo3 initialization failedNS_VirtualRegistry::BuildIndeo3H8H ?۰y+H0LIHwAHD$  FH8ÐIndeo4 initialization failedNS_VirtualRegistry::BuildIndeo4H8H <Cy+H0LIHBwAEHD$ tFH8ÐIndeo5 initialization failedNS_VirtualRegistry::BuildIndeo5H8H 諯y+H0LQHvAwHD$ ܠFH8ÐIndeoSound initialization failedNS_VirtualRegistry::BuildIndeoSoundH\$UHl$HHCH3HEGHH cHWHEHHEHHEHHEHHEHHEHHE'HHE/E7fE;iHHt?d$ LMH=AH跛d$ L 3HzAH薛H GbH8Ht!d$ L HAH]HMGH3a H$HĐ]%SystemRoot%\system32\inetcomm.dllHKLM\Software\Microsoft\Outlook Express\InetcommDllPath6,0,2900,2180HKLM\Software\Microsoft\Outlook Express\Version InfoCurrentH8H u`H6=Ht!d$ L pHAH苙H8ÐHKLM\software\microsoft\Outlook Express%ProgramFiles%\Windows MailInstallRootHHXHpHxUHH@HH3H0HHL$`LL$`HH ubD@((J)(B )I(J0)A (B@)I0(JP)A@(B`)IP(JpI)A`I)IHu((J))IAIa HD$HHT$`AE3HHD$  F3t.H{LHqOAHD$ ɛF߾35HtHM 3HEtAELD$`HMH`aL!HMHEaLHMH*aHL$HHD$PHAE3HD$ EFHL$PHD$DHHD$(H E3E3D$DHD$ FuK|$D>vDH ]HUPHt/L HAHD$D>f^|$ 萖HL$PFËHL$HH|$8H|$0LL$@LH|$(H|$ t$@ZFHL$HOFH0H3@L$@I[IsI{ I]ÐSystem\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM[Joystick hack] No joysticks foundNS_VirtualRegistry::BuildJoystickOEMNameHhHH3H$PHD$8HAE3HHD$ FHL$8HD$4LL$0HD$(HD$@HE3D$4D$0HD$ Fu7H /[HHtd$ LL$@HUAHGHL$8LFH$PH3<HhÐSoftware\Microsoft\Windows NT\CurrentVersion\Drivers32MSACM.MSADPCMHKLM\System\CurrentControlSet\Control\MediaResources\ACM\MSACM.MSADPCMdriverH`HH3H$PHD$8HHAE3HHD$ ϘFHL$8HD$0HHD$(HD$@E3E3D$0HD$ FudL3HHHtKH XHˉHtd$ LL$@HAHeH %`L3HI0FHL$8FH$PH3H`[ÐSystem\CurrentControlSet\Control\Nls\Locale(Default)H8H XHjшHtYd$ E3HEAH%Ht9H bLHjH(HA HD$ FH8ÐHKLM\Software\Encore Software\Middle School Advantage 2001\1.0health[Middle School Advantage 2001] Added HealthNS_VirtualRegistry::BuildMSA2001H\$UH$0`H+HH3H H Su0HAx LHYiHD$ FHHd$0HEHLEHEHHM HEHHEHHEHHEHHEHHEHHEHHEHHEHHEHHEHHEHHEEHHD$@HHD$HHHD$PHHD$XHHD$`HHD$hHHD$pHHD$xHHEHHEHHEfEXDL HM W*LD$@HM WHD$0HU AE3HHD$ FLEHM XLHM WLD$@HM qWHD$0HU AE3HHD$ FtHA HL$0TFHiH,H i3A( LE H HVxL H蘊H H3H$@H0]ÐBuildMSI FailedNS_VirtualRegistry::BuildMSISoftware\Microsoft\Windows\CurrentVersion\Installer\UserData\\Components\359E92CC2CB71D119A12000A9CE1A22AS-1-5-18BuildMSI Failed to find keysHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Components\359E92CC2CB71D119A12000A9CE1A22A鳅LfH-HKLM\SYSTEM\CurrentControlSet\Enum\RootH8H PH6g蝁Ht!d$ L HgAHH PHfdHt!d$ L gH`gAH貉H cPHT+HtHgAH)H8Service Pack 54.0HKLM\System\CurrentControlSet\Control\WindowsH0H OHe_HHtBd$ L fHXfAH誈d$ L ffHeAH艈H0[ÐH0H 'OHeHHtBd$ L GfHeAH:d$ L .fH'eAHH0[ÐHHXHpHxUATAUAVAWHH HH3H HD$HHHE3DHHD$ эFE3t0HAMLH?aHD$ wF#ALUHAQLHAQL3HDZHHu.HLiH`KA`HD$ FH MHf~eH %`LHI03LϋFHD$PHsDE3HHD$ njFtHAsLB3H HHtH !MH}HIHHE3HT$`H}HHLHpIfPMLHpIO/LD$`HpIOHD$XHpAE3HHD$ ͋FHL$XHD$DHHD$(HE3E3Dl$DHD$ Fu'LD@HTbHfDDd$ ?HL$XHD$DHHD$(HE3E3Dl$DHD$ jHt.d$ E3HEAH)sHtH !IH(H8ÐHKCC\System\CurrentControlSet\Control\Print\PrintersH8H M9HjHtd$ E3HEAHirH 9HˎiHtd$ E3HzEAH6rH 8HiHtd$ E3HGEAHrH 8HE|iHtd$ E3HEAHqH8ÐProductSuiteH8H U8HiHt!d$ L HAHkqH 8H]hHt!d$ L HAH2qH 7HhHt!d$ L VHgAHpH 7HˍrhHt!d$ L H.AHpH8ÐServerNTProductTypeLHRnHKLM\Software\Microsoft\WindowsHKCU\Software\Microsoft\WindowsH(L=HmmLJHZmLHH(Cm̐HKLM\Software\Microsoft\Windows\CurrentVersion\Controls Folder\DeskHKLM\Software\Microsoft\Windows\CurrentVersion\Controls Folder\DisplayHKLM\System\CurrentControlSet\Control\ClassHKLM\System\CurrentControlSet\Services\ClassHKLM\System\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}HKLM\System\CurrentControlSet\Services\Class\DisplayH\$H|$UH$HpHOH3H`HD$8HYAE3HHD$ frF3 HL$8HD$0HHD$(HD$@E3E3f|$@HD$ \$0*rFHL$8t qFHD$0HjE3HD$(HPE3fP\$0HD$ qFHL$8uqFf9|$@u f9PtiH D2HUG cHHtNf9|$@tLL$@HAHȉ|$ Skf9Pt LPHAHˉ|$ *kH`H3+L$pI[I{I]ÐSoftware\Microsoft\Windows NT\CurrentVersionRegisteredOrganizationRegisteredOwnerHpHH3H$`H$P*rF3ۅL$PHL$@f$VI4LbHL$@3HD$0H_AE3HHD$ oFuyHL$@HHf9AuHL$0HHD$(HD$@AE3HD$ {oFy+HHLHCAtHD$ 4mFHL$09oF:H0A{ HAAWL\HBHD$ lFH$`H3Hp[ÐSpellIt: GetSystemDirectory FailedNS_VirtualRegistry::BuildSpellItDeluxeVoices32Software\FirstByte\ProVoice\SpeechFontsSpellIt: RegSetValueEx failedSpellIt: RegOpenKeyExW failedH(H m.H.5_HtHeAH3jH(ÐHKLM\SOFTWARE\Microsoft\Direct3DDisableSTHPHH3H$@H -Hcz^HHt8HL$0nF=wd$ LL$0HAHfH$@H3HP[ÐHKLM\Software\Microsoft\Windows\CurrentVersion\SetupSharedDirH8H ,HBy]Ht!d$ L HAHeH8Ð0HKCU\Software\Microsoft\Windows\CurrentVersion\ThemeManagerThemeActiveH8H M wy+H0LQH>ACHD$ hFH8ÐTrueMotion20 initialization failedNS_VirtualRegistry::BuildTrueMotion20HHXHhHpHx AVH0LH +HHgAII[HHd$ MAHAHEdd$ HALEHcd$ HCLEHcd$ HXALEHcd$ L FH'EHcH\$@Hl$HHt$PH|$XH0A^ÐSubVersionNumberH H.u( *HtHHgFubxH [EnableVirtualDeleteH0H )H @sZHHtcd$ L cH?AHbd$ L zHK@AHbd$ L !H:BAH|bH0[Ð6000H0H )Hl?YHHd$ L H(?AHbd$ L ֋H?AHad$ L HAAHad$ L AHM?AHaH0[ÐH0H S(H>YHHd$ L Hp>AHbad$ L H>AHAad$ L =H@AH ad$ L AH>AH`H0[Ð6002HPHD$0HjHL$8THL$8H\$8HH Z')XHtd$ L3DBH`HL$8sHP[Ð%CommonProgramFiles%\System\wab32.dllHKLM\Software\Microsoft\WAB\DLLPathHJ8HT$UH0HH4H0]ÐH(H =&H.WHtHU>AHbH(ÐHKLM\System\CurrentControlSet\services\W3svc\ParametersL >L>H<H <CL >L>H[<H \<H0H 3%H;UHHtcd$ L cHT;AHF^d$ L H;AH%^d$ L H=AH^H0[ÐWindows 7 UltimateH0H w$H:?UHHtcd$ L _H:AH]d$ L vH;AHi]d$ L ]H=AHH]H0[ÐWindows 8 ProH(H #H*THtHAAH_H(ÐHKCR\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}SortOrderIndexH8H #H8SHt!d$ L H-AH\H8Ð4.10.2222VersionNumberH(3"g33 z333{333s3`333H(y̐VWH0eH %`HI0DƋJ`FeH %`DHI0H/`FHHHHd$hHD$hHAE3HHD$ `FHL$hHD$XLL$`HD$(E33H|$ t$X`FHL$hHt`FuP|$`uAHHbF=w.H !HQHtd$ 3LDBH?ZeH %`L3HI07_FHteH %`L3HI0_FH0_^[Ðchm.file\shell\open\commandHKCR\chm.file\shell\open\commandH(%E 3&s3H(w̐H8H  Hb6PHt!d$ L $7H6AHYH8ÐL LJ9HS9H T9kL 8L"9H+9H ,9CH0H [H5#PHHtcd$ L cH|5AHnXd$ L BH5AHMXd$ L )H7AH,XH0[ÐWindows Server 2008 R2L 7LHH KMicrosoft Windows Server 2008H0H H4NHHtcd$ L _H@4AH2Wd$ L H4AHWd$ L H6AHVH0[ÐWindows Server 201235H\$UVWATAUAVAWH0eH %`AHI0EƋ[FeH %`EHI0Hn[FeH %`EHI0HS[FeH %`EHI0LH5[FE3LHHHHH$DkHPE3HEHD$ [FH$HD$xL$HD$(E33Ht$ D$x[FH$[FcD$x胼$u!DHH]FH0L@IODIfE$GP]F=LMHHRLLMHH5LLMHHLH uH=LHtLE3HDd$ TH HH)LHtLE3HDd$ jTH HLKHtLE3HDd$ =TH HoKHtLE3HDd$ TH HKHtLE3HDd$ SH H\KHtLE3HDd$ SH gH/KHtLE3HDd$ SH :HKHtLE3HDd$ \SH H>JHtLE3HDd$ /SH HaJHtLE3HDd$ SH H{JHtLE3HDd$ RH H'NJHtLE3HDd$ RH YH!JHtLE3HDd$ {RH ,HIHtLE3HDd$ NRH HIHtLE3HDd$ !RH HSIHtLE3HDd$ QH HmIHtLE3HDd$ QH xH@IHtLE3HDd$ QH KHL IHtLE3HDd$ mQH H HHtLE3HDd$ @QH H HHtLE3HDd$ QeH %`L3HI0 VFeH %`LHI03UFeH %`LHI03UFeH %`MHI03UFH\$pH0A_A^A]A\_^]ÐSOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WORDPAD.EXE%s "%%1"%s /p "%%1"%s /pt "%%1" "%%2" "%%3" "%%4"HKCR\rtffile\shell\open\commandHKCR\rtffile\shell\print\commandHKCR\rtffile\shell\printto\commandHKCR\Wordpad.Document.1\shell\open\commandHKCR\Wordpad.Document.1\shell\print\commandHKCR\Wordpad.Document.1\shell\printto\commandHKCR\wrifile\shell\open\commandHKCR\wrifile\shell\print\commandHKCR\wrifile\shell\printto\commandHKLM\Software\Classes\Applications\wordpad.exe\shell\open\commandHKLM\Software\Classes\Applications\wordpad.exe\shell\print\commandHKLM\Software\Classes\Applications\wordpad.exe\shell\printto\commandHKLM\Software\Classes\rtffile\shell\open\commandHKLM\Software\Classes\rtffile\shell\print\commandHKLM\Software\Classes\rtffile\shell\printto\commandHKLM\Software\Classes\Wordpad.Document.1\shell\open\commandHKLM\Software\Classes\Wordpad.Document.1\shell\print\commandHKLM\Software\Classes\Wordpad.Document.1\shell\printto\commandHKLM\Software\Classes\wrifile\shell\open\commandHKLM\Software\Classes\wrifile\shell\print\commandHKLM\Software\Classes\wrifile\shell\printto\command/@H0H H`W>HHtBd$ L HAHFd$ L H?AHFH0[ÐHKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environmentx86PROCESSOR_ARCHITECTUREx86 Family 15 Model 1 Stepping 2, GenuineIntelPROCESSOR_IDENTIFIERL L$H#H #L $L$H"H "cL $L$H"H ";L $Lr$H"H "H(H - H&;HtHMAHFH(ÐHKLM\SYSTEM\WPA\MediaCenterInstalledHDH L@HHVWATAVAWHPH@HXAMLAE3L9$3HH.HL$8D9aH=HFHHHD$8H+HH;trf8"tlH KKFHL$8^3HL$8RHL$8HfD9$quuIVD$(HL$ AE3IOIFHL$8QHL$8$L$L$IV$D$(H$HD$ DE3IOHFH$HPA_A^A\_^ÐInstReg.exeHJ8[HT$UH0HH8HD$ A LVH$FFH=H0]ÐCString exception occured in Delphi5SetValueNS_VirtualRegistry::Delphi5SetValueHHXHpHxLp AWH0MLHIHE33IF؅eH %`DúHI0MkFFHHu0HLHNAHD$ "EF@`DHHAc LH2HD$ j=FHL$PHtAFHH3YL$ I[(Is0I{8IA_A^]Ð[GetStringSID] Failed to OpenProcessTokenNS_VirtualRegistry::GetStringSIDCopySID failedS-%u-0x%02hx%02hx%02hx%02hx%02hx%02hx%lu-%luGetTokenInformation failedH0]u{H H/HHt`d$ L HAH7HAHp:HAH[:H AHF:3H0[ÐHKLM\Software\Microsoft\Windows NT\CurrentVersion\OpenGLDrivers\msoglogldrv.dlldllDriverVersionFlagsLD$LL$ SUVWH(H3HHBWH=Gx5HZLL$hHHӋ:FxHH;wuf,_f,_zHtf/H(_^][ÐH\$WH0E3HBHH=WIDGLExLD$HHDHD$H3ExL+H CLIDAH\$@H0_ÐH8E3HBAWH=EEGEx MMD HtfDAH8ÐH(HtrWy MtI H(ÐE3MAHt.AL+MtE fEtfD IHHuHu HzfDÐE3LAHtfD9t HHuHuWMtxL+MMÐHHXHp WH0H``3c=FLD$HWHjw9F3ɃЉD$@>2FHL$H/HD$@HD$(H$HD$ E3E3HHL$8.4F؉D$0tH/OAHD$ c F3HHCeH %`HI0D@&T FHCHtaH=HLtxqH LHAH|$(HD$  FHHHH^HLHuAHD$  FeH %`LC3HI0 FeH %`LHI03 F3H\$@H0_ÐHKLM\Software\ODBCNS_VirtualRegistry::CVirtualRegistry::AddKeyProtectorAdding Key Protector: %SH\$WH@eH %`HI0DG FHHu.HLH[OA HD$ F3AHHCHCeH %`HI0z FHCHtuH=@HLH L<HHKHHL$0HHSA# H|$(HHD$ FH^H%LHA HD$ FeH %`LC3HI0FeH %`LHI03F3H\$PH@_ÐHKLM\Software\Microsoft\Windows NT\CurrentVersion\OpenGLDriversNS_VirtualRegistry::CVirtualRegistry::AddOpenKeyTriggerAdding Open Key Trigger: %S, func@0x%xH8d$ E3EAsHtH H0H8ÐH\$Hl$Ht$WAVAWH@eH %`HHI0IDB2FE3HHu.HPLHKA|HD$ Fc3HHHCHCHHfD9|EuHfD9<~ueH %`LHI0DFL?HCeH %`HI0FHKHCHtuHtpLAHKLƋxvHHt$0LHHHAHl$(HD$ HFHwH4LHAHD$ FeH %`LC3HI0FeH %`LCHI03FeH %`LHI03F3H\$`Hl$hHt$pH@A_A^_ÐNS_VirtualRegistry::CVirtualRegistry::AddRedirectAdding Redirector: %S -> %SH\$Hl$Ht$WATAUAVAWH@$E3IALLMu t3eH %`A8HI0EFHHu*HEL$%LH3KHD$ mFM3HRwHt,u(t$v uHHfD9lEuH8ÐH\$Hl$Ht$WH 3HHHf9,zuHH;sreH %`L}$HI0FHHtJH bL}HHH UHHH RHHH OHH LfH HH"pHl$8Ht$@HH\$0H _ÐSoftware\Classes\H\$Ht$WH HA3HHtHXHp<LHMHkLHHG(MHHnH\$0Ht$8HG0H _ÐHHXHhHpHx AVH0HHE3HfD94ruHY9HKHHfD94Au;w DH׋Euf-HkL\HAgHD$ E3H\$`Hl$hHt$pH|$xH@A_A^A\ÐRedirecting: %S -> %SNS_VirtualRegistry::CVirtualRegistry::CheckRedirectHHXHhHpHx AVH@HHE3HfD94zuH xHSHHfD94Bu;w_DH΋EuMfHtHHH\$@Hl$HHt$PH|$XH0A^ÐNS_VirtualRegistry::CreateNewEnumEntryH\$Hl$Ht$WH0IIHmEeH %`HI0EDEHHu.H LH&HL$ HAXZEGSAL33ɉ\$(HD$ IEuXWH ٸLHneH %`L3HI0EH\$@Hl$HHt$PH0_ÐNS_VirtualRegistry::CVirtualRegistry::DeleteKeyAH\$ UVWH$`HHrVH3HLD$HHT$pHL$PE3H=RAH5HD$XHH#KALHHD$ 1ELD$HHL$p3LHHHu'AHMHD$ EHAH\$(HD$ EMHP HHHfD9 JuHfE9 @ueH %`HI0LHD$@EHHuALIHILD$@3H:hLD$XHT$@M@ H舺y zHT$@LzHxLD$HHT$@HعxHD$XHP HL$P-]HtHL$PHCHD$Px( 3ALljD$hHD$HHHD$0HD$pHD$(HHD$ sEHD$P39H,HDAHHEupHS 3HD$XHtOLHL$`AHL$ E3HHAeH %`LD$XHI03҉D$@ED$@6HL$`,HT$HHL$pHD$`HD$ HAE33ɅHHL$8HL$0HL$(HL$ HL$`LL$hLE3D$hLDžHD$HHֹuHD$0HEAHD$(HHD$ +EHT$`HL$PLEhLHօHEHD$(uHA HD$ E3CHAHD$(AHHD$ EHHL$`hHD$HALHD$(HHֹHD$ vEHgHT$HHL$p(Ht$PH~0HHAHEHS HD$XHLHd$xHT$xHT$ DOE3HHAeH %`LD$XHI03҉D$@ED$@u3u1HHL$xhuHS AH;Ht$P3HteH %`L3HI0hEHP HH3O\H$HĠ_^]ÐKey not found!NS_VirtualRegistry::CVirtualRegistry::DeleteKeyWUsing path %SRegDeleteKeyW called with hKey: %x, SubKey: %S[DeleteKeyW] Deleting subkey %S for key %S.[DeleteKeyW] subkey %S was deleted.[DeleteKeyW] subkey %S was not deleted.[DeleteKeyW] No more subkey under key %S.[RegDeleteKeyW] Deleting subkey %S.H 39tXeH %`SDC8HI0EHHt&HYC\fH)\HYHAHY HY(Y0HHH ?ËH [ÐVWHpHOH3H$`IH$D$DHD$DHD$ LL$P؉D$@uMHd$8Hd$0L$(H|$ DL$DLD$P33EȈ9uZEظzD؉\$@ \$@H$`H3YHp_^[ÐHHXLH D@HPVWATAVAWHPMALH H3Huw LAIxH$L$A>LCHD$(H$HHD$ 3,IH$L$MHD$8H$HD$0H$HHD$(H#Ld$ H==Ƀ%08lx=EnumValueW(hKey=%04lx,dwIndex=%d)NS_VirtualRegistry::CVirtualRegistry::EnumValueWH\$Hl$Ht$WH HYE3HHHu3 f\t HfuHH+HBHSH f\t HfuH+HH;uDHEE3t HHuf?\uHWHVHHH\$0Hl$8Ht$@H _ÐH H9PtHHuÐHHXHpWH0HY3HxHfpHEHSHEt HHu4HKHCLdHL$(HAHD$ :EHt$PHH\$HH0_Ð[FindValue] Using virtual value: %SNS_VirtualRegistry::VIRTUALKEY::FindValueH\$WH Hy(HH{(HHC(LGMteH %`3HI0EeH %`L3HI0EH{(uAH{0HHC0LGMteH %`3HI0MEeH %`L3HI05EH{0uHc0Hc(H\$0H _ÐH H H%HHuH [ÐH HLC MteH %`3HI0EHc H [ÐH8H%<H%DH%DH%D%IH%E3eH %`HI0A UEHHu/HrLHԹA`HD$ E3`3A HWH Ld H.xH cL,HuHL$ AkEH8ÐNS_VirtualRegistry::CVirtualRegistry::InitInitializing Virtual RegistryLI[IkIsWH@3HIHHcHELH¸ICL$(HkcKAICEu1HHL$H$L$AMuMu H;D9CubHCHtL9@uSH$HKE3HD$XHSLD$PHl$HL|$@Ld$8LD$0LD$(LD$ E33hE3D$EAL9C0uHHG E3Ls0MtzDHSH$E3HD$(LD$ MFAD;$DF$INHHE3HfD9Au;w HHfD9quM6MuD$L$Mt $A$HtDmL$MtA7H$HDH$L$MHD$XH$HHD$PH$IHD$HH$HD$@H$HD$8H$HD$0H$HD$(H$HD$ HhLl$0LHHIA|$(HD$ wEHt;LHHC AHD$(HHD$ 7EH$H`A_A^A]A\_^]Ð[QueryInfoW] NULL passed for lpClass but not lpcbClass. Fixing.NS_VirtualRegistry::CVirtualRegistry::QueryInfoW%08lx=QueryInfoW(hKey=%04lx)VWATAUAVAWHH: H3H$pMLH$L$3t$Ht$@Ht MuFW[Mt.D$(HD$`HD$ A33EuW(ft$`HtAuD$@DeH %`HI0ͿELHD$PHu2H HL$ A LH@HEAGHD$@HD$(L|$ LL$HLD$`I؉D$Dt=uD$HHvut-u%eH %`LD$P3HI0ED$@3-E3t3DL$@ALl$8Ll$0Dl$(Ll$ M33ED$LL$@ L$@L$LusHtnA9r`tKLl$8Ll$0D$(H|$ DM33Eu >D$@eH %`LD$P3HI0IE\$@Lt$H \$@Lt$HE3D9{t@u;MtfE9u0LM3IH}(؉D$@uH$uLl$0\$(HHD$ A L5HVELH@Mt/ɃL|$0IF HD$(HHD$ A VE$ɃL|$(HHD$ A 0EuIH$ʃw8$u.Ld$(HHD$ A LHKE4HHD$ A LXHyE\$@H`A_A^A]A\_^[ÐNULL handle passed to QueryValueWNS_VirtualRegistry::CVirtualRegistry::QueryValueW Trimming data beyond end of string in Query for %S%08lx=QueryValueW(Key=%04lx)Exception occurred in QueryValueWHHHWATAVHPH@HXHpHH=myPHz(EHJ H8AHܶEE3H_(HW H HL$8fHHMHEu HHMHɭEuHf~\t f9ntH+f9/tHH\$0Hl$8Ht$@HH|$HH A^ÐE3HBAI;AWEGEx9E3Ht&L+L+IHtAt HHuHuHAzHtAÐH0HHu3H[H;u1HLHAHD$ CEH"CHH[H;u/HLH́AHD$ EHf;\u/HL~HAHD$ ɫEHHH0[Ð\Registry\Machine[TrimSlashW] Bypass \Registry\MachineNS_VirtualRegistry::TrimSlashW\Registry\User[TrimSlashW] Bypass \Registry\User[TrimSlashW] Removed slash from key beginningH8=mtGHLQHrAHD$ E olt LED~E pH8ÐNS_VistaRTMVersionLie::APIHook_GetVersionH\$WH03H@8=mltCHQDO5LHOHD$ Ejn@=6lt L衝HnHPtdL}E}ECCC pCMu38HKiu);u}Ef|}EfH\$@H0_ÐNS_VistaRTMVersionLie::APIHook_GetVersionExAH\$WH03H@8=LktCH1DOkLH~OHD$ ѨEJm@=kt L~聜HmHPHt[|EL|EHKCCC pCu);uw|Efe|EfH\$@H0_ÐNS_VistaRTMVersionLie::APIHook_GetVersionExWH\$WH0=CjHtGH'LH}AHD$ çEkuq2kucYHkLpH{HD$(Hu}NA/HD$ EH9THHj3HjH %HV&HHH HHHH HXHH8H X HH@H HX(HHhH HP0HHpH |HXHHH XPHH KHXXHP`HXxHHHHHtH+LFHzA6\$(HD$ EHiH\$PHl$XHt$`H|$hH@A_ÐNS_VistaRTMVersionLie::InitializeHooksMultiH\$VH xE3f~H eH %`HcغHI0LNEeH %`LHI0H"xE,EH xEHxEHtJHtE xEf~BDL H)u"D wEH wEL Ht"3 f1@0H\$0H ^ÐH(H=wEt$eH %`LzwE3HI0vEH%fwEH=VwEt$eH %`LDwE3HI0HEH%0wEH(ÐE3AHL+I~HtAt HIuMu HAzEyAÐH0MLD$XH3Ʌyf H0[ÐLD$LL$ SVWH 3HBHH=WGx5HZLL$XHH3ExHH;wu@<3@<3zHtH _^[ÐH\$3L+DS@DۋIHtA ftfHHIuMu HAzHfMtIH\$AÐH8=dtGHxLMHwAHD$ E fct LYw@uE qH8ÐNS_VistaSP1VersionLie::APIHook_GetVersionH\$Ht$WH03Hپ@8=gctBHGxDN4LHvHD$ Eae@=1ct Lv蘔HeHPtZLtEtECCC qCMu3.HK`u;utEffH\$@Ht$HH0_ÐNS_VistaSP1VersionLie::APIHook_GetVersionExAH\$Ht$WH03Hپ@8=FbtBH'wDNjLHuHD$ ȟEAd@=bt LuxH}dHPHtQsELsEHKCCC qCu;usEffH\$@Ht$HH0_NS_VistaSP1VersionLie::APIHook_GetVersionExWH\$Ht$WH0=>aHپtDHvLHtAHD$ E1c`t LthHmcHxK; rECKC qCu rEffLlrEHKgH\$@Ht$HH0_ÐNS_VistaSP1VersionLie::APIHook_RtlGetVersionLI[IkIsI{ AWH@3HIHL=,IL A-HEHsICL$(H KICEu*HL=7KHYE3f~H ܫ0eH %`HcغHI0LEeH %`LHI0HXE|EH XEHXEHtJHtEXEf~BDL]Hywu"D XEH XEL[Hct"3 f1@0H\$0H ^ÐH(H=DXEt$eH %`L2XE3HI0ƄEH%XEH=XEt$eH %`LWE3HI0EH%WEH(ÐLI[IsWH@H$H$HI[ICHD$xICHD$pICHPtGHtB;u=HQt1HBLcHLAHD$ EH\$PHt$XH@_ÐPatched an AccessCheck to ignore WRPNS_WRPMitigation::APIHook_AccessCheckH\$WH HHPH؅u1Et ކE=uHkt 3EH\$0H _ÐH\$WH0D$hHD$(HD$`HD$ Hj؅u1pEt eE=uHt 3EH\$@H0_ÐH\$WH0D$hHD$(HD$`HD$ H؅u1Et E=uHt 3EH\$@H0_ÐH\$WH HHPx؅u1Et E=uHSt 3?EH\$0H _ÐH\$WH H+H؅u1.Et #E=uHt 3؅EH\$0H _ÐH\$Ht$WH HHH؅uU„Et E=u HDu$Et E=uH t 3HEHt$8H\$0H _ÐH\$Ht$WH H*HH(؅uI*Et E=u1Ht 3τEHt 3EHt$8H\$0H _ÐH\$Ht$WH HHHX؅uIEt E=u1HXt 3?EH=t 3)EHt$8H\$0H _ÐH\$Ht$WH HHH؅uUEt E=u Hu$Et ߂E=uHt 3EHt$8H\$0H _ÐH\$Ht$WH0HvHH؃uluEuaHtUHEE3HH؃t8HHLyHAH|$(HD$ }E3߂EHt$HH\$@H0_ÐOpenFile: Patched %S to open with READ_ONLY attributeNS_WRPMitigation::APIHook_OpenFileH\$WH0D$hHD$(HD$`HD$ HVH؅u1\Et QE=uHt 3EH\$@H0_ÐH\$Hl$Ht$WH0HIHH8HLHOA]Ht$(HD$ !|EHAE3HHH\$ uLAHHwt7'u1H E33WEH tL33 }EH#H\$@Hl$HHt$PH0_ÐRegCreateKey getting accedd denied on [%s]NS_WRPMitigation::APIHook_RegCreateKeyARegCreateKeyA: wrp key is mitigatedH\$Hl$Ht$WH0HEIHHhuvL(AE3HHH\$ A(uLAHHtt7'u1H E33EH tL33 M|EH#H\$@Hl$HHt$PH0_ÐH\$Ht$WH HHHH؃u2E33HmEt L:3H E33HS3Ht$8H\$0H _ÐRegDeleteValueW: wrp key is mitigatedHHXHhHpHx AVH0D$`IED$ HHHX؃u)HH,tHHEH3t3Hl$HHt$PH|$XH\$@H0A^ÐHHXHhHpHx AVH0D$`IED$ HHH؃u4E3HH}Et!LAHHEH33Hl$HHt$PH|$XH\$@H0A^ÐRegSetValueW: wrp key is mitigatedH\$WH HCHx؅u1F|Et ;|E=uHt 3|EH\$0H _ÐH\$WH HH؅u1{Et {E=uHt 3|EH\$0H _ÐH\$WH H{Hx؅u1~{Et s{E=uHt 3(|EH\$0H _ÐH\$WH HH؅u1{Et {E=uHt 3{EH\$0H _ÐVWH`H H3H$PH$L$H$HD$8H{IL$LD$0LT$(LHt$  r sMHL$@Lƺ3x5LKHL$@x HL$@LxHL$@EދH$PH3{H`_^[\UVWHhH%H3H$PH$L$H$HD$8HIL$LD$0LT$(LH|$  r sSHL$@LNj);3x9LPHL$@:x"HL$@LƋ:xHL$@EߋH$PH3Hh_^][ÐH\$WH@HH؃udxEuYHltMH3H؃t4D$0H8LiHRAH|$(HD$ sEH\$PH@_Ð_lcreat: Patched %s to open with READ_ONLY attribute %xNS_WRPMitigation::APIHook__lcreatH\$WH@HH؃udwEuYHx tMH3H؃t4D$0H<LmH^AH|$(HD$ rEH\$PH@_Ð_lopen: Patched %s to open with READ_ONLY attribute %xNS_WRPMitigation::APIHook__lopenH\$Ht$WH0HHcA؃uHvEu=Ht1H?LXHyA|$(HD$ rEHt$HH\$@H0_Ð_lwrite: Patched write to %xNS_WRPMitigation::APIHook__lwriteH\$Ht$H|$ UATAUAVAWHH@E33MLHEEDm0fDmHEEfEAHu H=DHu H=)DHu H=rEHHuB7sELHD$(HOAHD$ rnE0HD$xAE3HD$0HEH׹HD$( HD$ qEurEAD$(HuiL HU9]t HAHD$ mEA0YHAHD$ mE5SrEAD$(HrLHHD$ mE/Ht HpEArE9/HH3bL$I[I{Ms I]ÐRLCHECK: error getting path or path too long. Err: %dNS_WRPMitigation::IsExeManifestedRLCHECK: Error opening activation context with err %d.RLCHECK: ActCtx Query failed with err %d.RLCHECK: There is a declared runlevel.RLCHECK: No Runlevel declared.H\$Ht$WH033Hft$ HD$"D$*fD$.HPHHH`HtKHRDF#H 4lEt2HWDF/H lEtHWDF-H @lEu[HL$ ,mEuLDD$ HWHL$(IkEu0D$ HOA HAH HkE˻DˋH9t$(t HL$ lEHt$HH\$@H0_\Registry\Machine\Software\Classes\\Registry\Machine\Software\Wow6432Node\Classes\\Registry\HKEY_CURRENT_USER\Software\Classes\_Classes\HH(H`L@HP@NkEx"HT$@HtH 9;kEt3H(ÐH0HHt4HL$ ?kEt3HT$(L7H{HL$ kEH0[L3\H0[ÐRegSetValueA: wrp key is mitigatedLI[IsWHP3MC3HHft$@ICD$JfD$NH}L>HICHNAICahEHHHLD$@HEHLHDȍNx-H\$HHAH\$(HD$ hEHkEpHH<HEHD$0DL$(H<AHD$ gE>HH<LmHEHAHD$(HpHD$ gEH\$`Ht$hHP_ÐH\$WH0HAHHLHHEAHD$(HeHD$ "gEGvu5Ht0HyLRHKAH\$(HD$ fEH\$@H0_ÐDefault ValueName: [%s] NS_WRPMitigation::LogSfpValueA ValueData: [%s] H\$WH0HAHHLHHEAHD$(H HD$ "fEGvu5Ht0HLbHKAH\$(HD$ eEH\$@H0_ÐHHXHhHp WH03HXBjESHD$HE3E3HHD$ 9\$HtT$HK@iiEHHtjDL$HHD$HSLHHD$ [t?H{t3HTLmHvKAHt$(HD$  eEHhE_jEHl$PHt$XH\$@H0_Patched %s to ignore WRPNS_WRPMitigation::MySfpIsFileProtectedAHHXHhHp WH03HXFfESHD$HE3E3HHD$ fE9\$HtT$HK@-hEHHtjDL$HHD$HSLHHD$ fEt?H?t3HXLqH:KAHt$(HD$ cEHgEeEHl$PHt$XH\$@H0_ÐPatched %S to ignore WRPNS_WRPMitigation::MySfpIsFileProtectedWLI[WH@3ICMKICI[{I[DNjI[I[I[u'HT$XHtH dEEHL$`fEH\$PH@_ÐH\$WH03HHt/HL$ dEt-HT$(E3H(hEHL$ cdE E33hE؋H\$@H0_ÐHHXHhHpWH03IAHHt.HH*dEt HT$(LDH+HL$ cEHl$HHt$PH\$@H0_ÐHHXHpHxL` UAVAWHHpMHLZgEE33LEHILefDeHEEfELd$@HEHHD$8HLd$0E3E3HD$(Dd$ H]HHMLd$@Lt$8Ld$0HSE3E3D$(Dd$ uBHUIH]3HӅtL#LIAbEM&HMbEHdEtAL\$pI[ Is(I{0Mc8IA_A^]Software\Volatile\00RegCreateKey: wrp key subkey mitigatedRegCreateKey: non-COM wrp subkey is not mitigatedMHDE3D8 tHIuMu 3AWHI+ExGH AH+t,LLL+MtA t IHHuHu HAzAÐH\$Ht$WH@=c!HHtGH+6LH5AHD$ ^E@#"!t L4wRH<#HHP؃uyHD$`AE3HHHD$ `EuVHL$`t=Ht,HL$0H8`Et$HT$8HHL$0`E 3H3HL$`+`EHt$XH\$PH@_ÐNS_WRPRegDeleteKey::APIHook_RegDeleteKeyAH\$Ht$WH0=" HHtGH4LH3AHD$ ]E"t L37QH!HHPH؃uIHD$PAE3HHHD$ ]_Eu&HL$P_t HH3HL$P_EHt$HH\$@H0_ÐNS_WRPRegDeleteKey::APIHook_RegDeleteKeyWLI[IkIsI{ AWH@3HIHL=ILA"HEH2ICL$(HKIC\\Eu*HL= H Ht~/du9 uq ucH LH-2HD$(H93NA$HD$ [EH HZHj3H0 H H*HHH oHHHH HXHH8H X HX(HP0HXHHH@XPHXXHtHLCHl1A(\$(HD$ [EHH\$PHl$XHt$`H|$hH@A_NS_WRPRegDeleteKey::InitializeHooksMultiH\$Ht$UWAVHH`HH3HE33LEHUHH]DH]EH]Ȉ]\Ex"HUHtH .E \EtCLMLEHUH\EHMHAHUEA \Etr9]tmviHMLEȋ=\EtCHUH ^.EH[EHEt8uxuD@88t 8u @ Pu ;urEEߋHMH3L\$`I[(Is0IA^_]ÐLI[IsWHP33HHft$@ICD$JfD$NHEICH+ELICHHY/NAICYEHHHLD$@HEH2LH/DȍNx-H\$HHAH\$(HD$ XEH\EpHHs-HEHD$0DL$(H>-AHD$ mXE>HHA-LBHEH.AHD$(HHD$ -XEH\$`Ht$hHP_ÐNS_WRPRegDeleteKey::LogSfpKeyWwrp key is mitigatedH\$Ht$WHpHH3H$`H3t H!t$8H!t$0H!t$(H!t$ 3\HD$HHT$PAE3HHD$ {YEuHL$H}HL$HHYEuHd$8Hd$0Hd$(Hd$ LL$@LD$PHD$@YEt3H$`H3L$pI[Is I_ÐHHXHpWH 3LHE3SHXXEzuFT$8K@~ZEHHt1LL$8SLHXEuHKEH=ZEHt$@H\$0H _ÐH0HH3HD$(WEYEDH3M[EHHu3HT$ AHD$ fD$$VWE3H[WEHPGWEH83WEHWEH\l#m WEHWwnVEH0'EA3H)EdMYE@HL$(H3+H0[ÐH\$WH`HصH3H$P3uYEH9vH9_L HL$0DȺGyHA+LH$@DϺGyHA4HL$0uBH$@u1LD$033WEHuHACH:HgA; HA!LHHD$ SEH$PH3ڿH$pH`_ÐAPPCOMPAT_HEAP_MANAGER_%dAPPCOMPAT_HEAP_TWEAKER_%dManager or tweaker already assigned ShimLib::AcquireHeapManagerMutexFailed to get manager mutex name Failed to get tweaker mutex name Failed to acquire manager mutex H(L3ҹUEH3Ht VEH(ÐLD$SH LD$@0'HHtLD$@3HHH [ÐMtI HHHt3MtIeH %`LHI0H%REHu3HH€<u H\$Ht$WH HHt>t9JLD$0jHHtH\$0HHLK9H3H\$8Ht$@H _ÐH\$Ht$WH0HHu3qd$(Hd$ L3A3 TEE3HcAPHHHt8AL33ɉt$(HD$ SEueH %`L3HI0QE3HH\$@Ht$HH0_ÐH\$Hl$Ht$WATAUAVAWH E3HHfD9)LI3}LPEt PEPEt PEfD9+tcfE9.f;uTIA>O$7A4PEt |PEcPEt ^PEfE9,ufE9.t-HfD9+=3H\$PHl$XHt$`H A_A^A]A\_H̐H\$Ht$WH HHaHHHHHc~HH LMHuOEHt$8HH\$0H _ÐH\$WH HH HMHH;t H H H{HtQEL3HQEHcH\$0H _ÐH\$WH HHH HH;tEH9} HѴH;ux}PLHH H@HHcHHH\$0H _ÐH\$WH HHH LHϋH\$0HH _ÐH\$WH HHHx LHϋH\$0HH _ÐH\$Hl$VWAVH HcL~D$HHuHL$HD$H3u!HHiHH\$@Hl$PH A^_^ÿ@;|;|;| ;L}H#+PELH3]REHtxflp pH I넊D$HHtHL$HD$H̐H\$Ht$H|$AVH IcIcHLEuH?HbH*HILHqMHLEH H\$0Ht$8H|$@H A^ÐHH\$WH LE3HIcHHEQ~fA|H\t fA|H/uAAf;\t f;/AuAfD9 tZtAu fAx:utuu(LOAHtHf;\tf;/tH> LHϋiH\$0H _ÐH\$Hl$Ht$ WAVAWH0HHaIcHLHHExLVNELG3HPEHHuD$`H,sHL$`D$`.LHHVKE H\ ~Ud$(Hd$ DL33ME~4IIDL33ɉl$(HD$ ME 3I H;tMEL3HtMEH\$PHl$XHt$hH0A_A^_ÐH\$Hl$Ht$WH HIHcxH;x~Hr3HtH LHMaJEHxH H; tf,yH\$0Hl$8Ht$@H _ÐH\$Hl$Ht$ WH IcIHcHxmExh;;rGt.HHLHIEHHT$PLHMIEH\$0Hl$@Ht$HH _ÊD$8HfqHL$8D$8h̊D$8HLqHL$8D$8N̐H\$Hl$Ht$WH0HcH3HrMH>8B;1+9B*HcBLH BMI$IEHXHHcAf,ALD$ L‹RDHH\$@Hl$HHt$PH0_ÐH\$WH HHH;~4HH;t#SHCHHS LcMHEH\$0H _ÐH@HD$ H\$PHE33H +LE؅tzHHT$(Hd$0HL$(7DHHKEt2;w.PHL$(HT$(H HXHL$(3HL$(HL$(w3H\$PH@_ÐHJ(_HBxHcHJf:\tf:/tHHyÐH\$Hl$Ht$WH HHIcH;Z}$H<HGEHtHH;Z|HHl$8Ht$@;XMًH\$0H _ÐH HIELH3H [H%IE̐H\$Ht$WH@HYHHt{IEL3HMIEHgHd$8Hd$0Ld$(Hd$ A33pKEHc7IELH3iKEHGHt:Hd$8Hd$0LA33ɉt$(HD$ *KEHGH\$XHt$`H@_ÊD$PHmHL$PD$P̐H\$Ht$WH HHHp>;P~1X;LHCLcHV MEEHHΉXTHH\$0Ht$8H _ÐH8LLD}3IH8;3EDHID;@}E3II'H8ÐHHXHhHpHx AVH H=L63A~H;OA9~}+HAFHILcMDEINHHcHY+LcHJMDEHHl$8"fYHH\$0Ht$@ljyH|$HH A^ÐHT$SH0HD$(EEHڃd$ HHHbD$ LEA6HH0[ÐUH HE t e HMHH ]ÐH8HE3ۅAHEMDHEHBA;~ED+A;EOÅuE;uHIH8DIH8ÐH HH HHH;t! H H bHHcHH [ÐH(HMH;t )H(ÐH\$WH HA+GD$(Ft$,9G|~&ILcGIMHAEHOIHcCL,CLl$0I;t$(H$Dl$ IH3LHt^HȋIcI+HH+A+HcKgH< J ;LtAEH$LI`AE3IL$fAA+Ll$0HHf9 CuL$HCHI;`t$,l$$IqH$H@A_A^A]A\_^]ÐH 3Hu3LD$0PL$0HˋH [ÐH 3Hu3LD$0L$0HˋH [ÐE3Ht4LD8tHIuMA¹WDMtxI+I MWyMtMÐH\$WH HcH;H;x}H+H3f xHxH\$0H _ÐLI[Is WHHNH3HD$p3ICDICȉt$Ht$@t$8Ht$0DF IKt$(Is؉t$ht$ fD$l^tAEu5CEDNILD$(HHNHD$ >E3WHT$`L3[AEu6aCEAOL|D$(HHAIHD$ >EHL$`AEHL$pH3菪L$I[ Is(I_ÐAllocateAndInitializeSid failed %dShimLib::SearchGroupForSIDSecurityUtilsCheckTokenMembership failed: %dH HT$0!K3ۅtZHT$@ 6tGHT$8##t4HT$H"t!9\$0t9\$8u9\$@u 9\$Hu3H [ÐHL$SH0HD$ HHHAHaH۪HAHa %HH0[ÐHJ@HHJ@HHHXHhHpHx AVH HYIEHHHD;@~3H3HQH}E3y 3H_HWHcHH H4=EHHt&H+;HxDLD+H>*HLD@HD+AH AƋQ‰H\$0Hl$8Ht$@H|$HH A^ÐH\$WH !HHIHHKHH\$0H _2̐HHXHhHpHx AVHHH3H$p3ۃ=HL$`>E=]LD$0HL$`H\$0*-HD$0H|_\u HH;sI\`LHL$`py6HASLHHD$ :E!HL$`/>EHHu HDOZHH?ELHu.HENeL0H1HD$ y:E3$=EHHu HDNpLL$8A(HAօtXD$<t t@tՉ-Heap) & (ULONG_PTR)0xFFFF) == 0NS_FaultTolerantHeap::FthEncodePadderbogus address: %p, %p NS_FaultTolerantHeap::FthIsNtHeapBlockbuffer overrun: %p, %p, %p NS_FaultTolerantHeap::FthRecognizeHeapBlockwrong heap: %p, %p double free: %p, %p Pipe != NULL && Pipe != INVALID_HANDLE_VALUEOverlapped != NULL && Overlapped->hEvent != NULLNS_FaultTolerantHeap::FthPipeWriteMessageFailed to write message to the pipe. Pipe write message timed out. \Registry\HKEY_CLASSES_ROOT\Registry\MACHINE\Registry\HKEY_USERS\Registry\HKEY_CURRENT_USER\Registry\HKEY_CURRENT_CONFIG\Registry\HKEY_DYN_DATA\Registry\HKEY_PERFORMANCE_DATA\Registry\HKEY_PERFORMANCE_NLSTEXT\Registry\HKEY_PERFORMANCE_TEXT error 0x%08x logging [%S] NULLx0BBFaultTolerantHeapVirtualRegistryVistaRTMVersionLieVistaSP1VersionLieVistaSP2VersionLieWin7RTMVersionLieWin8RTMVersionLieWRPRegDeleteKeyVerifyVersionInfoLiteCompareStringExCompareStringWCompareStringALCMapStringExLCMapStringWLCMapStringAFindNLSStringExFindNLSStringIsNLSDefinedString kernelbase.dll[ApiName] Hook EnteredNotifyFn returned FALSE, fail load shimNTDLL.DLLClient->Watson == &(Client->WatsonInPassiveMode)HKLM\Software\Microsoft\Windows\CurrentVersionDirectoryERROR OUT OF MEMORYHKLM\HKLM\SYSTEM\CurrentControlSet\EnumBitsPerPixel%d,%dResolutionProductNameHKLM\Software\Microsoft\Windows NT\CurrentVersionCSDVersionCurrentVersion5.0Microsoft Windows 20005.1Microsoft Windows XPHKLM\Software\Microsoft\DirectXVersionPathHKLM\Software\Microsoft\Internet ExplorerMajorVersion|EMULATEDRENDERKSRENDEREMULATEDCAPTUREKSCAPTURE[DSRETURNWRITEPOSITION] Unabled to add DirectSound hackCurrentBuildNumber2600Service Pack 1Service Pack 22165Service Pack 337905.2Microsoft Windows Server 2003HKCR\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{4CB63E61-C611-11D0-83AA-000092900184}CLSID{4CB63E61-C611-11D0-83AA-000092900184}FilterDataFriendlyNameTrueMotion 2.0 DecompressorHKCR\CLSID\{4CB63E61-C611-11D0-83AA-000092900184}HKCR\CLSID\{4CB63E61-C611-11D0-83AA-000092900184}\InprocServer32%windir%\system32\tm20dec.axThreadingModelBothHKCR\CLSID\{4CB63E62-C611-11D0-83AA-000092900184}TrueMotion 2.0 Decompressor Property PageHKCR\CLSID\{4CB63E62-C611-11D0-83AA-000092900184}\InprocServer32HKCR\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{B4CA2970-DD2B-11D0-9DFA-00AA00AF3494}{B4CA2970-DD2B-11D0-9DFA-00AA00AF3494}Indeo audio softwareHKCR\CLSID\{B4CA2970-DD2B-11D0-9DFA-00AA00AF3494}HKCR\CLSID\{B4CA2970-DD2B-11D0-9DFA-00AA00AF3494}\InprocServer32%windir%\system32\iac25_32.axHKCR\CLSID\{B4CA2971-DD2B-11D0-9DFA-00AA00AF3494}Indeo audio software Property PageHKCR\CLSID\{B4CA2971-DD2B-11D0-9DFA-00AA00AF3494}\InprocServer32HKCR\CLSID\{C83B5610-E0DF-11D0-9E00-00AA00AF3494}About Indeo audio softwareHKCR\CLSID\{C83B5610-E0DF-11D0-9E00-00AA00AF3494}\InprocServer32HKLM\Software\Microsoft\Windows NT\CurrentVersion\drivers.descHKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32msacm.iac2HKLM\System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\Winmmwheelvidc.iv31ir32_32.dllvidc.iv32vidc.iv41ir41_32.axHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}Indeo video 4.4 Decompression FilterMeritHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\InprocServer32%windir%\system32\ir41_32.axHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\Pins\InputAllowedManyAllowedZeroConnectsToPinOutputDirectionIsRenderedHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\Pins\Input\Types\{73646976-0000-0010-8000-00AA00389B71}\{31345649-0000-0010-8000-00AA00389B71}HKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\Pins\OutputInputHKCR\CLSID\{31345649-0000-0010-8000-00AA00389B71}\Pins\Output\Types\{73646976-0000-0010-8000-00AA00389B71}\{00000000-0000-0000-0000-000000000000}HKCR\CLSID\{87CA6F02-49E4-11CF-A3FE-00AA003735BE}IVI Decode OAHKCR\CLSID\{87CA6F02-49E4-11CF-A3FE-00AA003735BE}\InprocServer32HKCR\CLSID\{87CA6F04-49E4-11CF-A3FE-00AA003735BE}IVI Encode OAHKCR\CLSID\{87CA6F04-49E4-11CF-A3FE-00AA003735BE}\InprocServer32HKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}Indeo video 4.4 Compression FilterHKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\InprocServer32HKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\Pins\InputHKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\Pins\Input\Types\{73646976-0000-0010-8000-00AA00389B71}\{00000000-0000-0000-0000-000000000000}HKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\Pins\OutputHKCR\CLSID\{A2551F60-705F-11CF-A424-00AA003735BE}\Pins\Output\Types\{73646976-0000-0010-8000-00AA00389B71}\{31345649-0000-0010-8000-00AA00389B71}HKCR\CLSID\{BD323430-CE94-11CE-82DD-0800095A5B55}IVI Decode Sequence Property PageHKCR\CLSID\{BD323430-CE94-11CE-82DD-0800095A5B55}\InprocServer32HKCR\CLSID\{BD323431-CE94-11CE-82DD-0800095A5B55}IVI Decode Frame Property PageHKCR\CLSID\{BD323431-CE94-11CE-82DD-0800095A5B55}\InprocServer32HKCR\CLSID\{BD323432-CE94-11CE-82DD-0800095A5B55}IVI Encode Sequence Property PageHKCR\CLSID\{BD323432-CE94-11CE-82DD-0800095A5B55}\InprocServer32HKCR\CLSID\{BD323433-CE94-11CE-82DD-0800095A5B55}IVI Encode Parameters Property PageHKCR\CLSID\{BD323433-CE94-11CE-82DD-0800095A5B55}\InprocServer32HKCR\Filter\{31345649-0000-0010-8000-00AA00389B71}HKCR\Filter\{A2551F60-705F-11CF-A424-00AA003735BE}HKCU\Software\Intel\Indeo\4.1AccessKeyBiDirPredictionEnabledAccessKeyMinViewportHeightMinViewportWidthPlaybackPlatformQuickCompressScalabilityTransparencyvidc.iv50ir50_32.dllHKCR\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{1F73E9B1-8C3A-11D0-A3BE-00A0C9244436}{1F73E9B1-8C3A-11D0-A3BE-00A0C9244436}Indeo video 5.10 Compression FilterHKCR\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{30355649-0000-0010-8000-00AA00389B71}{30355649-0000-0010-8000-00AA00389B71}Indeo video 5.10 Decompression FilterHKCR\CLSID\{1F73E9B1-8C3A-11D0-A3BE-00A0C9244436}HKCR\CLSID\{1F73E9B1-8C3A-11D0-A3BE-00A0C9244436}\InprocServer32%windir%\system32\ir50_32.dllHKCR\CLSID\{2DE89781-DBF6-11D0-A30E-444553540000}Indeo video 5.10 Encode Parameters Property PageHKCR\CLSID\{2DE89781-DBF6-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{30355649-0000-0010-8000-00AA00389B71}HKCR\CLSID\{30355649-0000-0010-8000-00AA00389B71}\InprocServer32HKCR\CLSID\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\Instance\Indeo video 5.10 Compression FilterEncoderTypeHKCR\CLSID\{665A4443-D905-11D0-A30E-444553540000}Indeo video 5.10 Decode Sequence Property PageHKCR\CLSID\{665A4443-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{665A4444-D905-11D0-A30E-444553540000}Indeo video 5.10 Decode Frame Property PageHKCR\CLSID\{665A4444-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{665A4445-D905-11D0-A30E-444553540000}Indeo video 5.10 Encode Sequence Property PageHKCR\CLSID\{665A4445-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{665A4448-D905-11D0-A30E-444553540000}Indeo video 5.10 Decode OAHKCR\CLSID\{665A4448-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{665A444A-D905-11D0-A30E-444553540000}Indeo video 5.10 Encode OAHKCR\CLSID\{665A444A-D905-11D0-A30E-444553540000}\InprocServer32HKCR\CLSID\{84725EA1-2FBC-11D1-BC86-00A0C969FC67}Indeo video 5.10 About RTE Property PageHKCR\CLSID\{84725EA1-2FBC-11D1-BC86-00A0C969FC67}\InprocServer32HKCR\CLSID\{C1C0FE00-F3C2-11D0-91D4-444553540000}Indeo video 5.10 About Encoder Property PageHKCR\CLSID\{C1C0FE00-F3C2-11D0-91D4-444553540000}\InprocServer32HKCR\CLSID\{E369A160-F3C2-11D0-91D4-444553540000}Indeo video 5.10 About Decoder Property PageHKCR\CLSID\{E369A160-F3C2-11D0-91D4-444553540000}\InprocServer32HKCR\Interface\{665A4447-D905-11D0-A30E-444553540000}IIndeoDecodeOAHKCR\Interface\{665A4447-D905-11D0-A30E-444553540000}\ProxyStubClsid{00020424-0000-0000-C000-000000000046}HKCR\Interface\{665A4447-D905-11D0-A30E-444553540000}\ProxyStubClsid32HKCR\Interface\{665A4447-D905-11D0-A30E-444553540000}\TypeLib{665A4446-D905-11D0-A30E-444553540000}1.0HKCR\Interface\{665A4449-D905-11D0-A30E-444553540000}IIndeoEncodeOAHKCR\Interface\{665A4449-D905-11D0-A30E-444553540000}\ProxyStubClsidHKCR\Interface\{665A4449-D905-11D0-A30E-444553540000}\ProxyStubClsid32HKCR\Interface\{665A4449-D905-11D0-A30E-444553540000}\TypeLibHKCR\TypeLib\{665A4446-D905-11D0-A30E-444553540000}\1.0Indeo video custom control type libraryHKCR\TypeLib\{665A4446-D905-11D0-A30E-444553540000}\1.0\0\win32HKCR\TypeLib\{665A4446-D905-11D0-A30E-444553540000}\1.0\FLAGSHKCR\TypeLib\{665A4446-D905-11D0-A30E-444553540000}\1.0\HELPDIR%windir%\system32Indeo video 5.10.aa.aif.aifc.aiff.cda.cdda.itl.itms.itpc.m3u.m4a.m4b.m4p.m4v.mov.mp2.mp3.mpeg.mpg.pcast.pls.rmp.wav.waveHKLM\SYSTEM\ControlSet001\Control\ProductOptionsHKLM\SYSTEM\ControlSet002\Control\ProductOptionsHKLM\SYSTEM\ControlSet003\Control\ProductOptionsHKLM\SYSTEM\CurrentControlSet\Control\ProductOptionsOLEViewer TypeLib Interface ViewersOLEViewer Automation Interface ViewersOLEViewer IPersist Interface ViewersOLEViewer IUnknown Interface ViewerOLEViewer UDT Interface ViewersCLSID\{28D8ABA0-4B78-11CE-B27D-00AA001F73C1}CLSID\{57EFBF49-4A8B-11CE-870B-0800368D2302}CLSID\{64454F82-F827-11CE-9059-080036F12502}CLSID\{7CE551EA-F85C-11CE-9059-080036F12502}CLSID\{7CE551EB-F85C-11CE-9059-080036F12502}CLSID\{D2AF7A60-4C42-11CE-B27D-00AA001F73C1}Interface\{0000001D-0000-0000-C000-000000000046}Interface\{00000020-0000-0000-C000-000000000046}Interface\{0000013D-0000-0000-C000-000000000046}Interface\{0000013E-0000-0000-C000-000000000046}Interface\{FC37E5BA-4A8E-11CE-870B-0800368D2302}Interface\{00000000-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{00000109-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{0000010C-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{0000010E-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{00020400-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{00020401-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{00020402-0000-0000-C000-000000000046}\OLEViewerIViewerCLSIDInterface\{7FD52380-4E07-101B-AE2D-08002B2EC713}\OLEViewerIViewerCLSIDInterface\{BD1AE5E0-A6AE-11CE-BD37-504200C10000}\OLEViewerIViewerCLSIDComponent Categories\{64454F82-F827-11CE-9059-080036F12502}ReleaseProcessVidPnSourceOwnersAndRetryWindows Vista (TM) Ultimate6.060016.176006.29200HKCRHKCCHKCUHKLMHKUSHKPDHKDDROOTHKCR\ Path=%S Path=%S\%S Value=%S Result=%SNS_VirtualRegistry::ParseCommandLineARegDeleteKeyARegDeleteKeyWService Pack %dService Pack %dGetVersionExAGetVersionExWGetVersionRtlGetVersionRegCreateKeyW: wrp key is mitigated` B0ADVAPI32.dllOpenProcessTokenGetSecurityInfoGetFileSecurityAOpenThreadTokenpR%DDpR5u <<UGPuRSDSdAmBxJ AAcLayers.pdb t T 42d42 p4/(p`> 1PB1QkBkBLCC#/C/PjPDjDER0B  4 2P d T 4 RpT 4 R p ` p`P0@@H& O p`P0@@`  4 2p&  p`P0@@`d 4  p!  !  4 pP dT4p t d T 4R!dP++<!P++<!  !  !dP++<!P++<20    4 2p>m>>$E>b t dT422P!` !0@! t!pH!  !dP++<!p\!P\!,O-P!+P,P!P,,h!W!+P+& % p`P0@@ #p`P0@@ "p`P0@@' % p`0P@@ t d T 4 r42 p  RP T 4 2 p ` dT4 Rp dT4rp+t4 P@@`d T 4Rp= ,9,t8,d7,46,2P@@ d T 4 2p dT 4 Rpt T42dT42p3 "tW"dV"4U"PP@@p@@hAٗ(  b> T 4 R p `d T 4 rpBp ` P 0 P@@` (p`0@@07 &tc&db&4a&ZP@@')p ` P 0@@0 4Q Np@@`d 4R pR p`0P 0,@T  2P,@T ,@$ R0@  RP,@@@` >0@@4P,@t4P,@,4P,@ ,@\4P,@0,@<K@@@ p`0P 4 p@@H+d4 P@@ P@@p @@1 #)#t(#d'#4&#"P@@ 4P@@/ td4P@@0M@@P L0@@P,4(&P@@ 7 &t`&d_&4^&XP@@ 3 ";"t:"d9"48"6P@@/ td4P@@1 #t#d#4#P@@ 0@@` J0@@@ t d T 4R0,@  RP,@Rp`0 4R p`P''4p`,@  RP,@  t d 4R2!4p`P@3 "t"d"4"P@@  4 Rpd 4 R p0 4 p`P@@5 #t[dY4X V@   RP,@  d 4 r p>B$dQ4OL p@@P) dRTQ4PNp@@`* t}d|4{xhAXrP$ N p`P0@@`R0,@< p`0@@Pd4p,@d4p,@d4p,@d4p,@\d4p,@4Rp,@4Rp,@4d 4 rp,@|d T 4 rp,@d T 4 rp,@ d 4 rp,@TdT 4 p,@dT 4 p,@d4p,@,d4p,@td4p,@d4p,@d T 4 rp,@LdT4 p,@dT4 p,@d T 4Rp,@$d 4 rp,@ld 4 rp,@d T 4Rp,@d4  p! !t d T 4 r,@D! !t d T 4 r,@dT4 p  4 rp dT 4 rp dT4rp  b tdT 4 r d4 p>Դ  R04 p ` P(4[Tp`P@@ Np`0hAQQa 4p`>% N p`0hAad 4 R p r0,@  2P,@dT4p p`>--t d 4R6 $t d4 @l  RP,@l) 4`X p`P@@ 4p`P% P p`0hA  q  p`0>5  d4 p,@  2P,@4 rp,@|  2P,@| d T 4 Rp  td4> t d T 4 r  4 2`2 p ` 04T 4R pBd 4 r p ,p`0@@P Mp`P0@@P td4rP/ ZtY4XVP@@Bd 4  pd T 4Rp  4 rp td4Pd 4 r p#d4 p P@@P$dR4QN p@@`d42 pR0@@( 4 p@@P  20d42 pT 42 p `td4242p d T 4 Rpd T42pd T 4Rp4 rp,@d 4 r p R0,@l" "4"rp`P"d4 p@@p R0,@. t5d4T3420@@pd 4 Rp,@r0,@\  2P,@\  td4 ,@  2P,@d 4 rp,@  2P,@d 4 p,@  4 p42 p ` P" |\ (4@ 0 L p` L8"0p"l `P\ht` tH"0 ,,,81;"T0Hz"08DPPP\ :GYc|"0l"0%/"dl0 ="08L K/KAKKKDL` DLH"D\0ih[hghiieiii` iH"hokmn"4\́؁|3}E}}}}8~C~H~~~KVn(` H"dl `9C"`/m"P$ϒ"<DXؓ8c"h{"`<۔" Pu"\d ѕ"8x>X"8֖"4<8x =R"|8З"H1m" H8՘"T\PęHs"XXؙ8"hpٚ",4` 7q"t|8ٛ"x 0e" xQΝ"LT(|:U"8۞"8| 7["$,(ٟ"lt0Tm"08 "D |*7`kX` 8"  0)7Valz% Q ` H"T H'Xh` 8" p2=U`|` |8"<D hgh`hnh{h"(,lkk" rrrrrr",< DxTxwww*x" 8zyyzz zDz` Dz8" < T|`|{_{j{{{{{{{{{|l|` l|8"t l~|||||}}}~ ~1~x~~~` x~8"8P~~/????] fi0 2-+0pi30ty3`p1pi30ty3`vids8qs:$D6d0pi30ty3`p1pi30ty3`vids8qIV508q 0pi30ty3`p1pi30ty3`vids8qs:$D6`0pi30ty3p1ty3p1pi30ty3pvids8qTM208qTR208qP0pi30ty31ty32ty33ty31pi30ty31ty32ty33ty3auds8q8q6ORS p8q4 x  @p@h phphh0h@(h@x PH0Hl@ ;.?AVCStringError@CString@ShimLib@@i0i0i0i0i0i0i0i0i0i0i0x0x00PPPPPxPPpP0```P   p@@о@`@Pp @`P`pP0@F00X@H`@dPؙP   К  06```К``6 ؙ@ПؙП`Р`@ ؙ К06```К``6ХؙХ`Ȧؙ`ؙ``ؙ@РXp0Ph@0WIN9X0PWINNTRWINXPHUCODECS(WIN98SEOREDIRECT(<COOKIEPATH\HASBRO@DYN_DATADCURRENT_CONFIGLOCALEWORDPADXUAUTORUN TALKINGDICTIONARYDPRINTER8REGISTEREDOWNERp?NETWORK_CARDS#NT4SP5!NT50#BOGUSCTRLIDNT51#EXPANDDX7ADX8@DXDIAGFUTURECOPpKRONDORPROFILE;SPELLITDELUXEAIE401 IE55IE60JOYSTICK(ILLUSTRATOR8 PAGEKEEPPRO30-MODEMWIZARDl!MSIFILENETWEBSERVERPAGEMAKER652STARTREKARMADA@DMSA2001NOWROBLUET*PRINCETONACT88HEDZ AIRLINETYCOONpDSDEVACCELHDSPADCURSORSlDSCACHEPOSITIONSDSRETURNWRITEPOSDSSMOOTHWRITEPOS DSDISABLEDEVICE DELPHI5PRO`NORTONANTIVIRUS)WORDPERFECT2002eIBMDIRECTORPXPLIEfXPSP1LIEgXPSP2LIE0gWIN2KSP2LIE(MWIN2KSP3LIEPMSRV03LIESSRV03SP1LIE(SWEBSPHERESETUPpLX86ARCHLIEePAGINGFILES3TRUEMOTION20FINDEOSOUNDINDEO3 INDEO4 INDEO5HINETCOMMADDREDIRECTMSOGL`!ITUNESREDIRECTHKCRPRODUCTSUITE`9WINHELPPATHPOLEVIEWREDIRECT+VIRTUALIZEHKCRHWinNTCurrentVersionRIESETUPPATHxBUILDHOTFIX`InstallRoot8D3DReleaseProcessVidDDRawReleaseProcessVid ThemeActiveEiRCPlayergDISABLEWIN9XMODE BWABDLLPath KD3DReleaseDeviceVistaRTMLieIProductTypeServerNTX:GOMPACK4XPSP3LIEXgVistaSP1LieIVistaSP2LieXJWin2k8Sp1Lie TWin7RTMLiexMWinSrv08R2RTMLiePSCLRVersionLieFlashUpdaterLiehWin8RTMLie4NWinSrv2012RTMLieTWin8ShellNSSortOrderIndexNhlh0@0@G@%GGH G P %Gp\pH t  @P%GPPGP\WWG G  G B QG`  !!G!!y!y!#,$+QG+P+P++<+P,PP,,h,O-PO--uG- 0 0H0811G7777-G78G8(8(8A8A8K8K8[8[8f8UGf8>9G>99mG9:G::G: ;0;t;t;<<= `>>??8?@@@@d@Hd@@@hAHhAAHPBB`BB`BJC`LCC`CC`CND`PDD`DD`E!E`$EPE`PE]Eh]EExEEmGEGmGGJJKKLL,M,MMMNNN8OO0PpPPQ QQ0DRT@TThTUpUDVDVVhVYY8Zh8ZZpZ]0^p`@p``h`apaTbTbbhbEc`cc0dggghghph$i$illoF@F1G@GwHHHII@IXJ@XJK@ KK DLpL0pLLHxMN@4NN@NOHOO@0PPHPQ@RRHRR@PSS@TU@XUb[Lee@ggHhzidiiLj`kkn prsft@`uuuXvXvv@vvHdw@xLx{|<`_p lNT4X  yXHlXt#8ד:Pw, vHd|5HÙؙWp 0 0Lyh z7PX X@\D4x@@@XЮtЮ ЯLLd"||J k0|PԿ<L( T |h- P8((hhc@}y|@ T0$ d4dDpaeHm|((8`THlD@4@ = t p p  H, X @X   88@IXXH+@`A|TXDHD@  5#l#h$h$$H$2%@h%@&t&C''M((((*$+ , ,,H,2----h.h...D/D///@0@000\1\11123|3|3k4| 55|5Q66D7D77,88888`9`999::;;&<4<=4=>P>@(@BDCEGHGVGdGlGvGGGGGʾGܾGGGG8GFGXGtGGGGȿGֿGG GG8GNGnG|GGGGGG"GFGZGtGGGGGGGGG G(GDGNGbGlGGGGGGGGGG G0GGHGVGdGlGvGGGGGʾGܾGGGG8GFGXGtGGGGȿGֿGG GG8GNGnG|GGGGGG"GFGZGtGGGGGGGGG G(GDGNGbGlGGGGGGGGGG G0G